last executing test programs:

9m17.473597221s ago: executing program 0 (id=376):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r3, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')

9m8.871854178s ago: executing program 0 (id=386):
openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0x10c6b)
truncate(0x0, 0x3)

8m58.624318384s ago: executing program 0 (id=397):
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10)
socket$packet(0x11, 0x2, 0x300)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0x40001a2)
pwritev2(0xffffffffffffffff, &(0x7f00000020c0)=[{&(0x7f0000000180)="c1781283a3b0774fa68bb716beca1c5781d63a9ed0438129d734048a0563eeb966301f195d6039952c3c4d31f5a93c", 0x2f}, {&(0x7f0000000240)="bdfd39f1cf6d76a3d3", 0x9}, {&(0x7f0000001f00)}, {&(0x7f0000002000)}], 0x4, 0xf, 0x4, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040))
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040))
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002000000"], 0x38}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a0000001400"], 0x38}}, 0x0)

8m57.571685307s ago: executing program 0 (id=398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)="719089bbe10c5c9b9ca4d2b606003d6831896da05fa6b6c8448123714abb4f5fc4ed5e185551a678577a51ad1e43d315aef4a2ca5003ab862f744407693658fa6a23bf9f2973f646c6bd398a169521cc6ec59c4931617765f9674d0454e39b28aee5e71cf139fd152eac64ef74020b8bf100640a32eb739b93947b83", 0x7c)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000390025082bbd7000fbdbdf25140000001400"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40010)
pwritev2(r4, &(0x7f0000001600), 0x0, 0x8, 0x3c, 0x8)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S\xa8\t\x00\x00\x00\x00\xe4\xff\xff\xff\x00\x00\x00\x00\x00', 0x2)
ftruncate(r7, 0x10003)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0xfffffffc, 0x1000, 0x8000})
bind$bt_rfcomm(r8, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000004", @ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x50)

8m56.436956056s ago: executing program 0 (id=399):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x15}}, 0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00')
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0)

8m50.838843592s ago: executing program 0 (id=405):
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab19eb858beecea1306824e39323"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup.cpu/memory.limit_in_bytes/file0\x00'})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000300)={r0, 0x2, {0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x18, 0x3, 0x1, "702c2970e549826ee09faced82dca511a2b2fb2fcbb02213fc1b54ea970f662e2849f4635975d5c900a840c7f321be4777270b94678faeeee6aa2532fedefd1a", "dc064bd10429d79b3c48cf8ee1b88d42469f00aa9e132ec9e90b9ca8252ae3140409f7b61c4111c3193530da5d858098fb34ac71812b9333ec8a0112c15c6d96", "4acc25e0e2d6b319f6515f5b9358df8a49081569fa6205a62013a78fc7a379d8", [0x1, 0x9]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x2, 0x80805, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x10}}], 0x30}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00, 0x0, 0x0, 0x1000, 0xffffffff, r4}}}, &(0x7f0000000300)=<r5=>0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x117)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

8m34.998178222s ago: executing program 32 (id=405):
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab19eb858beecea1306824e39323"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup.cpu/memory.limit_in_bytes/file0\x00'})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000300)={r0, 0x2, {0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x18, 0x3, 0x1, "702c2970e549826ee09faced82dca511a2b2fb2fcbb02213fc1b54ea970f662e2849f4635975d5c900a840c7f321be4777270b94678faeeee6aa2532fedefd1a", "dc064bd10429d79b3c48cf8ee1b88d42469f00aa9e132ec9e90b9ca8252ae3140409f7b61c4111c3193530da5d858098fb34ac71812b9333ec8a0112c15c6d96", "4acc25e0e2d6b319f6515f5b9358df8a49081569fa6205a62013a78fc7a379d8", [0x1, 0x9]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x2, 0x80805, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x10}}], 0x30}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00, 0x0, 0x0, 0x1000, 0xffffffff, r4}}}, &(0x7f0000000300)=<r5=>0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x117)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2m42.664909556s ago: executing program 3 (id=855):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x110, 0xffffffffffffffff, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x5111c2, 0x7c) (async)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x101f, 0x2, @tid=r2}, &(0x7f0000000080)=<r3=>0x0)
fcntl$lock(r0, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x3ed4, 0x3, r2}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xff62, &(0x7f0000000240)={&(0x7f0000000380)=@deltclass={0x40, 0x29, 0x2, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0xd}, {0xffe9, 0xfff3}, {0x7, 0x4c1029a68e64916}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_RATE={0x6, 0x5, {0x80, 0xff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048000) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x7fffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$kcm(0x11, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (async)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3b}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e1050000008631accb", 0x1a}], 0x1}, 0x0) (async)
timer_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
set_mempolicy_home_node(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x0) (async)
signalfd4(r1, &(0x7f0000000040)={[0x200]}, 0x8, 0x80000) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m41.286921008s ago: executing program 3 (id=857):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
tkill(r3, 0x12)
waitid(0x1, r3, 0x0, 0x8, 0x0)

2m40.065303178s ago: executing program 3 (id=860):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

2m37.782080683s ago: executing program 3 (id=866):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc821, 0x40000, 0x0, 0x1df})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000006"], 0x6a)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1d, 0x4)

2m36.431496827s ago: executing program 3 (id=868):
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab19eb858beecea1306824e39323"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup.cpu/memory.limit_in_bytes/file0\x00'})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000300)={r0, 0x2, {0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x18, 0x3, 0x1, "702c2970e549826ee09faced82dca511a2b2fb2fcbb02213fc1b54ea970f662e2849f4635975d5c900a840c7f321be4777270b94678faeeee6aa2532fedefd1a", "dc064bd10429d79b3c48cf8ee1b88d42469f00aa9e132ec9e90b9ca8252ae3140409f7b61c4111c3193530da5d858098fb34ac71812b9333ec8a0112c15c6d96", "4acc25e0e2d6b319f6515f5b9358df8a49081569fa6205a62013a78fc7a379d8", [0x1, 0x9]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x2, 0x80805, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x10}}], 0x30}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00, 0x0, 0x0, 0x1000, 0xffffffff, r3}}}, &(0x7f0000000300)=<r4=>0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x117)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2m31.550179641s ago: executing program 3 (id=877):
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0)
sync()
madvise(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x0)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x80010, r0, 0x1a0fd000)

2m15.972006021s ago: executing program 33 (id=877):
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0)
sync()
madvise(&(0x7f00001e3000/0x1000)=nil, 0x1000, 0x0)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x80010, r0, 0x1a0fd000)

24.784460963s ago: executing program 4 (id=1120):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000a00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000d80)="57764245dd42b9e10899370fee9fedeb389579b591a820b4fa8983423accaab83871bcdc2fe675106cfebab1b201b762371b8a59aeb300980561221bb6492c877c3bfc17146173977fb2c3f1747e49350543f5f4c79b30ddfe034519c79aa0fbb27483e755e4f5bcd163e779c68452baead4f8d393b4221c72172750731502d894c48c61e4f85bc1fcc787a5f124a07111c49b866ddfe16c52f1788f780b0ea33f5a4ad8132471b74aa6a464ff28cab1ea35485e819c1dbba773a92d2af313a99b23fe59af017d9a85969698533aa1", 0xcf}, {&(0x7f0000000e80)="b54a8c65b51c8ad2cc7b766d5cfad3633c5f82478f32d5715a86976da2", 0x1d}, {&(0x7f0000000ec0)="5f45ce63eb59e4a1248e26af7ca748d640bde21f6927c90fb734963f56f23c1bf4ace9acba79fac649ad37f6ca", 0x2d}, {&(0x7f0000000f00)="5e1b19e6230a080eef15c08b8e6ced87d07e355bf88ff6f22af222e75c34050c023e6657f305daa3ac5c6c5eaac2d603092c6261c34e4ee30ef1a64faa0650d1a1c8c820564a0d17b82d60442d9abd720a62970d32310612bce89db75a55eb7654fd8b9cc0cda9c3a2f440e0eda5cbc477c2c00fcab74ee32fbca8565ceac9914b8945fc6f73ee4d91a7f3fcb830e355fae4122b03a100f839c3357a7730", 0x9e}, {&(0x7f0000000fc0)="50b70222e114d06280f27e64338774e071368d4610ff885f906497915416240a431da44ea762c51a4796ba15631c45e72491f934e98f5501f377a28b49101f0445d8de60ad2ff77d60793e85ac400d376b0b3b5acdc3dfce80e49ba81ae4ec1d6431fb326e157616bf7463e0aacaefcb015f24732c9208723d5a35d93494c58b74038a18ad429a493b195b0dd985722274bf64", 0x93}, {&(0x7f0000001080)="e33a44a45d2d02381948e76e1b43cbe786f3fd90933be39bc9863271e8d450", 0x1f}, {&(0x7f00000010c0)="f3f90afc660c794f3a490c1d9e2fc0c46fe9541a927175d003b08c34c52fccdf593d6c676ae1c8db8b2433a6496912d4a43af18c622ebf86122576da6d773366584293f76ba5673c50c808e7d404e771ff478735610456b926", 0x59}, {&(0x7f0000001140)="95f83b20d595f457f9f713d5c469924e43d7872e51b40409a219b2ab7723ff", 0x1f}, {&(0x7f0000001180)="da559253a45e55bd671dfb4803b17e8f33ba011c4254767e597d85e1f59a0721d924a8538ce821d03e67e76d89d5e063597822bb8566cb389a37aac9e717bd41e2f28c2cd15db40d074e4e48ee57499eec8e0aaafc5a8262f30a59d7eee3fc4f662970eb960255b0c5300493298b4444d717d084fb506a1d2dc5319428943d9231332bf45bb87981f9e4a01895f3dd5fc2a61a7e8877eaed", 0x98}], 0x9}, 0x4020880)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab19eb858beecea1306824e39323"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x418402)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x7, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {}, {}, @quote={{0x7}, 0x2e}}], 0x38)
write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x20}, {}, @ext={0x0, 0x0}}], 0x38)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000440))
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r5=>r1, {0x73}}, './cgroup.cpu/memory.limit_in_bytes\x00'})
recvmsg$inet_nvme(r5, &(0x7f0000000840)={&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/113, 0x71}, {&(0x7f00000006c0)=""/125, 0x7d}], 0x2, &(0x7f0000000780)=""/180, 0xb4}, 0x100)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1)
r7 = open$dir(&(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x400202, 0x91)
openat(r7, &(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x900, 0x32)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000880)='\xff\xff', &(0x7f00000008c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0xffffffffffffffff)
r8 = socket$kcm(0x10, 0x3, 0x10)
r9 = socket(0x27, 0x6, 0xffff)
getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

18.714767028s ago: executing program 4 (id=1131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1122334455667788}]}]}, 0x24}}, 0x0)

18.058624129s ago: executing program 4 (id=1133):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291f", 0x3b, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000080)="1bbe9aaa", 0x4, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, 0x0, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r3, r3}, 0xffffffffffffffff, 0xfe, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x7, 0x1, 0x6, 0x800100000000})
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x30000, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

14.61745551s ago: executing program 6 (id=1137):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @empty}, 0x2, 0x0, 0x3}}, 0x26)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000280)=@default_ap_ssid, 0x6, 0x0)
connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0x3}}, 0x2e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
r6 = socket$inet(0x2, 0xa, 0x81)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1)
r7 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r7], 0x18}, 0x2000c8d0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', <r8=>0x0, 0x80, 0x8, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x2b, 0x34, 0x65, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x56, 0x1, 0xc, [{@loopback, 0x9}, {@loopback, 0xe3b}, {@empty, 0x1ff}]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@mcast2, 0x14, r8})

12.781863209s ago: executing program 4 (id=1141):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf)
fallocate(r9, 0x0, 0x1, 0x2000402)
lseek(r9, 0x403, 0x3)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x80, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf8, 0x8, 0x10, {0xa, 0x25, 0x25, 0xe1, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x63, 0x5, {0xa, 0x25, 0x25, 0x80, 0xa}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

12.721462806s ago: executing program 6 (id=1142):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b080)=""/102400, 0x19000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc8402)
r5 = syz_open_dev$usbfs(0x0, 0x20000007c, 0x0)
dup3(r4, r5, 0x0)

10.671123889s ago: executing program 1 (id=1145):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89, 0x0, r1}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {}, {}, @quote={{0x7}, 0x2e}}], 0x38)
write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x20}, {}, @ext={0x0, 0x0}}], 0x38)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000440))
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1)
r7 = socket$kcm(0x10, 0x3, 0x10)
r8 = socket(0x2d, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff}, 0x111}}, 0x20)
syz_io_uring_setup(0x796d, &(0x7f0000000140)={0x0, 0x8772, 0x1, 0x0, 0x263}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280))
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r9}}, 0x20)

9.843364037s ago: executing program 6 (id=1146):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

9.53214803s ago: executing program 5 (id=1148):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14)
setgroups(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000001140)=0x3, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a000)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000140))
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000100001002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="802100000c400000140003006272696467655f736c6176655f30000008000400d40000001c0016801800018014000a0004d4b7e4"], 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0xb7)
open_by_handle_at(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f8"], 0x402800)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000)
getgroups(0x1, &(0x7f0000000080)=[<r9=>0xee00])
setregid(0x0, r9)
fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x100)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000001100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x74, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xc, 0xffffffff}, 0x10}, 0x94)

9.430138528s ago: executing program 4 (id=1149):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000240)='fdinfo/3\x00')
r6 = getpid()
syz_pidfd_open(r6, 0x0)
setns(r5, 0x4000000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
lseek(0xffffffffffffffff, 0x9, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f00000000c0))

9.326674539s ago: executing program 1 (id=1150):
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
open(&(0x7f00000001c0)='.\x00', 0x0, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet(0x2, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="1b98154200000900000086068e0d810982a4771b05881f2f756eda748c661e62680450ca331fb099f169a2742b233c2f6b2b6eed7ed6350d8250c34ce1b6b3800ddd6628bef11eac93fb88"])
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000280))
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)
creat(&(0x7f00000000c0)='./bus\x00', 0x102)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4], 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x143041, 0x0)

7.908248163s ago: executing program 4 (id=1151):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291f", 0x3b, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000080)="1bbe9aaa", 0x4, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, 0x0, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, r3, r3}, 0xffffffffffffffff, 0xfe, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x7, 0x1, 0x6, 0x800100000000})
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x30000, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

7.708927126s ago: executing program 5 (id=1153):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x842, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

7.30977581s ago: executing program 2 (id=1154):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0)

6.566273052s ago: executing program 5 (id=1155):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', r2, 0x0}, 0x50)

6.489697404s ago: executing program 1 (id=1156):
r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x400202, 0x24)
mkdirat(r0, 0x0, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x1c0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

5.181153582s ago: executing program 1 (id=1157):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
fsmount(0xffffffffffffffff, 0x0, 0xe2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x28, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0xc000)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
shmget(0x3, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x11, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x6000, '\x00', 0xfffffffffffffffe, 0xfffffffffffffffe, 0x200, 0x0, {}, {0x5, 0x402}, {0xfffffffffffffffb, 0x4}, {0x5}, 0x60, 0x0, 0x7fff}}}})
epoll_create1(0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0xef1343678de2c602, 0x0, 0x0, 0x30, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x101}, 0x28)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)

5.090471446s ago: executing program 6 (id=1158):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)

5.077205491s ago: executing program 2 (id=1159):
add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/106, 0x6a)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) (fail_nth: 3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b000024000780080003000000000008000300070000000800010000651d9e414bb58cd1abc278bbcc00000008000300050000002c000780080002000100000008000400000100"], 0x94}}, 0x0)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000300)='./dbg\x00', 0x0, 0x0, 0x0)

4.936297572s ago: executing program 5 (id=1160):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1b)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@fd={0x4, 0x2, 0x4, 0x1, 0x400, {}, {0x2, 0x0, 0x1, 0x4, 0x10, 0x0, "e27d63fd"}, 0x521})
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r2)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
keyctl$clear(0x7, r2)

4.029858218s ago: executing program 2 (id=1161):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x842, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

4.022145063s ago: executing program 6 (id=1162):
r0 = socket(0x10, 0x3, 0x0)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000300)={0x3b})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffff7, 0xff, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@get={0x1, &(0x7f0000000200)=""/232, 0xfffffffffffffffc})

3.035112944s ago: executing program 2 (id=1163):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0)
r1 = openat(r0, &(0x7f0000000000)='./debug/split_huge_pages\x00', 0x111002, 0x84)
write(r1, &(0x7f00000001c0)="eec1", 0x2)
write(r0, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x1', 0x20)

2.906503779s ago: executing program 5 (id=1164):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x3ff, 0x1, 0x4, "0bb53318c981a4ef49f540589077531cc78116d61653e849998311814743f69a", 0x3032344d})
ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x701, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

2.78100685s ago: executing program 6 (id=1165):
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000002000010028bd7000fcdbdf250a14baaa807b3e4abe4c00001400020000000000ee0000000000000000000000140001002001000000000000000000000000000162af9bdb12295ae227e49f207498d03f8e4e931bcf0d9047cb49ccbc4f7c86bd1520993b6327248700ea11e0a409149edcc5dc83f124d5ffa54576ae4b0bdd13e74d5ce5f83d104d386b520fe6323ce9febea47a5bdac7686fc7ed8ed214e688976d2ef800625d72b3ab59843f9f617e1855fd4f376f2804f0145bded12c1031ba6d5ea6c1f953a1157460e2ab19eb858beecea1306824e39323"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './cgroup.cpu/memory.limit_in_bytes/file0\x00'})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x2, 0x80805, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x10}}], 0x30}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0xd00, 0x0, 0x0, 0x1000, 0xffffffff, r3}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x1000091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe344, 0x2, 0x40040001, 0x253}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.68175847s ago: executing program 5 (id=1166):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c)
syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291f", 0x3b, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000080)="1bbe9aaa", 0x4, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r2, r2}, 0xffffffffffffffff, 0xfe, 0x0)

2.566720622s ago: executing program 2 (id=1167):
r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x400202, 0x24)
mkdirat(r0, 0x0, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x1c0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.353835347s ago: executing program 2 (id=1168):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5421, &(0x7f0000000480)={{0x0, 0x0, 0x1, 0x3}})

771.683076ms ago: executing program 1 (id=1169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x0)

0s ago: executing program 1 (id=1170):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', r2, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

er after parsing attributes in process `syz.5.832'.
[  749.110639][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.832'.
[  749.890351][ T9178] CIFS: Attempting to mount //127.0.0.1/share
[  749.950002][ T9180] CIFS: VFS: Invalid response size 0 for command 0
[  749.975919][ T9178] CIFS: VFS: cifs_mount failed w/return code = -5
[  757.310037][   T30] audit: type=1400 audit(1788814899.173:584): avc:  denied  { getopt } for  pid=9212 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  757.333063][   T30] audit: type=1400 audit(1788814899.193:585): avc:  denied  { setopt } for  pid=9212 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  757.335184][   T30] audit: type=1400 audit(1788814899.193:586): avc:  denied  { create } for  pid=9212 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  757.336895][   T30] audit: type=1400 audit(1788814899.193:587): avc:  denied  { bind } for  pid=9212 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  757.407240][   T30] audit: type=1400 audit(1788814899.273:588): avc:  denied  { ioctl } for  pid=9212 comm="syz.4.839" path="socket:[17076]" dev="sockfs" ino=17076 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  757.427776][ T9218] sctp: [Deprecated]: syz.4.839 (pid 9218) Use of int in maxseg socket option.
[  757.427776][ T9218] Use struct sctp_assoc_value instead
[  758.198366][ T9225] CIFS: Attempting to mount //127.0.0.1/share
[  758.257627][ T9226] CIFS: VFS: Invalid response size 0 for command 0
[  758.264364][ T9225] CIFS: VFS: cifs_mount failed w/return code = -5
[  762.429416][ T9260] loop4: detected capacity change from 0 to 7
[  762.564337][   T30] audit: type=1400 audit(1788814904.433:589): avc:  denied  { ioctl } for  pid=9267 comm="syz.2.853" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  763.028450][ T9260] Dev loop4: unable to read RDB block 7
[  763.028486][ T9260]  loop4: unable to read partition table
[  763.028599][ T9260] loop4: partition table beyond EOD, truncated
[  763.028623][ T9260] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  763.658676][ T2021] block nbd4: Possible stuck request ffff888028467000: control (read@0,1024B). Runtime 90 seconds
[  763.658729][ T2021] block nbd4: Possible stuck request ffff8880284671c0: control (read@1024,1024B). Runtime 90 seconds
[  763.658768][ T2021] block nbd4: Possible stuck request ffff888028467380: control (read@2048,1024B). Runtime 90 seconds
[  763.658797][ T2021] block nbd4: Possible stuck request ffff888028467540: control (read@3072,1024B). Runtime 90 seconds
[  763.832240][   T30] audit: type=1400 audit(1788814905.693:590): avc:  denied  { read } for  pid=9275 comm="syz.3.855" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  763.861254][   T30] audit: type=1400 audit(1788814905.723:591): avc:  denied  { open } for  pid=9275 comm="syz.3.855" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  763.892182][ T9276] binder: 9275:9276 ioctl 4018620d 0 returned -22
[  763.892247][   T30] audit: type=1400 audit(1788814905.753:592): avc:  denied  { ioctl } for  pid=9275 comm="syz.3.855" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  763.916789][   T30] audit: type=1400 audit(1788814905.783:593): avc:  denied  { lock } for  pid=9275 comm="syz.3.855" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  768.030663][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  768.186086][   T25] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  768.190293][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.468060][    C1] usb 5-1: NFC: Received an invalid frame
[  768.470607][   T25] usb 5-1: NFC: Unable to get FW version
[  768.471594][   T25] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -5
[  768.517360][   T30] audit: type=1400 audit(1788814910.383:594): avc:  denied  { create } for  pid=9312 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  768.546042][   T30] audit: type=1400 audit(1788814910.413:595): avc:  denied  { write } for  pid=9304 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  768.551536][   T30] audit: type=1400 audit(1788814910.413:596): avc:  denied  { setopt } for  pid=9312 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  768.552707][ T9321] capability: warning: `syz.3.866' uses 32-bit capabilities (legacy support in use)
[  768.615593][ T9315] process 'syz.1.865' launched '/dev/fd/8' with NULL argv: empty string added
[  768.617214][   T30] audit: type=1400 audit(1788814910.483:597): avc:  denied  { execute } for  pid=9312 comm="syz.1.865" dev="hugetlbfs" ino=17211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  768.617259][   T30] audit: type=1400 audit(1788814910.483:598): avc:  denied  { execute_no_trans } for  pid=9312 comm="syz.1.865" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=17211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  768.654630][ T9321] syz.3.866 uses obsolete (PF_INET,SOCK_PACKET)
[  769.747824][ T9307] could not allocate digest TFM handle ghash-generic
[  769.757092][ T5731] usb 5-1: USB disconnect, device number 2
[  769.936667][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'.
[  770.206039][ T5615] Bluetooth: hci4: unexpected event for opcode 0x0c38
[  770.206106][   T30] audit: type=1400 audit(1788814912.073:599): avc:  denied  { write } for  pid=9336 comm="syz.1.870" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  770.228927][   T30] audit: type=1400 audit(1788814912.083:600): avc:  denied  { create } for  pid=9336 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  770.410090][   T30] audit: type=1400 audit(1788814912.273:601): avc:  denied  { write } for  pid=9336 comm="syz.1.870" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  771.557783][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'.
[  771.557830][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'.
[  771.800782][   T30] audit: type=1400 audit(1788814913.663:602): avc:  denied  { create } for  pid=9358 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  771.852790][   T30] audit: type=1400 audit(1788814913.713:603): avc:  denied  { write } for  pid=9358 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  772.287810][ T9365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9365 comm=syz.1.874
[  772.806177][    T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  772.975486][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  772.986147][    T9] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  772.986166][    T9] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  772.986181][    T9] usb 2-1: config 0 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  772.986196][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  772.986213][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.049767][    T9] usb 2-1: config 0 descriptor??
[  773.056783][ T9365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  773.109426][ T9368] autofs4:pid:9368:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375)
[  773.109458][ T9368] autofs4:pid:9368:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  773.167759][ T9368] netlink: 'syz.4.875': attribute type 11 has an invalid length.
[  773.599311][    T9] wacom 0003:056A:005D.0001: hidraw0: USB HID v80.00 Joystick [HID 056a:005d] on usb-dummy_hcd.1-1/input0
[  774.683866][    T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  774.833911][    T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  774.844494][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.854773][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  774.866522][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249
[  774.866560][    T9] usb 3-1: SerialNumber: syz
[  774.887075][    T9] usb 3-1: config 0 descriptor??
[  774.897125][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  774.906745][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  774.935000][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  774.943976][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  774.951850][    T9] usb 3-1: media controller created
[  774.959301][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  774.992585][ T5731] usb 2-1: USB disconnect, device number 7
[  775.003054][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  775.003143][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  775.134501][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11
[  775.177409][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  775.177462][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  775.179632][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  775.179645][   T30] audit: type=1400 audit(1788814917.043:611): avc:  denied  { read } for  pid=4955 comm="acpid" name="event4" dev="devtmpfs" ino=2871 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  775.179687][   T30] audit: type=1400 audit(1788814917.043:612): avc:  denied  { open } for  pid=4955 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2871 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  775.179724][   T30] audit: type=1400 audit(1788814917.043:613): avc:  denied  { ioctl } for  pid=4955 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2871 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  775.287511][    T9] usb 3-1: USB disconnect, device number 5
[  775.387038][   T30] audit: type=1400 audit(1788814917.253:614): avc:  denied  { setopt } for  pid=9381 comm="syz.1.879" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  775.435163][   T30] audit: type=1400 audit(1788814917.303:615): avc:  denied  { ioctl } for  pid=9381 comm="syz.1.879" path="socket:[17366]" dev="sockfs" ino=17366 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  775.489074][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  776.512229][   T30] audit: type=1400 audit(1788814918.373:616): avc:  denied  { create } for  pid=9389 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  776.532687][   T30] audit: type=1400 audit(1788814918.393:617): avc:  denied  { write } for  pid=9389 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  776.668979][ T9392] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  779.534366][ T9406] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  779.719934][ T9408] netlink: 232 bytes leftover after parsing attributes in process `syz.4.889'.
[  779.724397][   T30] audit: type=1400 audit(1788814921.583:618): avc:  denied  { nlmsg_read } for  pid=9407 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  779.758890][ T5615] Bluetooth: hci0: SCO packet for unknown connection handle 96
[  779.759462][ T9408] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  779.821789][   T30] audit: type=1400 audit(1788814921.683:619): avc:  denied  { create } for  pid=9407 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  779.845252][   T30] audit: type=1400 audit(1788814921.713:620): avc:  denied  { bind } for  pid=9407 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  780.183336][ T5783] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  780.355360][ T5783] usb 5-1: unable to get BOS descriptor or descriptor too short
[  780.355406][ T5783] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  780.376953][ T5783] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  780.390086][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.390110][ T5783] usb 5-1: Product: syz
[  780.390131][ T5783] usb 5-1: Manufacturer: syz
[  780.390149][ T5783] usb 5-1: SerialNumber: syz
[  780.418882][ T9413] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  780.547443][ T9424] netlink: 'syz.1.886': attribute type 12 has an invalid length.
[  780.679463][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  780.679507][   T30] audit: type=1400 audit(1788814922.543:622): avc:  denied  { read write } for  pid=9412 comm="syz.4.890" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  780.679544][   T30] audit: type=1400 audit(1788814922.543:623): avc:  denied  { open } for  pid=9412 comm="syz.4.890" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  780.752977][ T9428] FAULT_INJECTION: forcing a failure.
[  780.752977][ T9428] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  780.780930][ T9428] CPU: 0 UID: 0 PID: 9428 Comm: syz.5.883 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  780.780962][ T9428] Tainted: [L]=SOFTLOCKUP
[  780.780968][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  780.780975][ T9428] Call Trace:
[  780.780980][ T9428]  <TASK>
[  780.780985][ T9428]  dump_stack_lvl+0x100/0x190
[  780.781007][ T9428]  should_fail_ex.cold+0x5/0xa
[  780.781024][ T9428]  _copy_to_user+0x32/0xd0
[  780.781043][ T9428]  simple_read_from_buffer+0xcb/0x170
[  780.781058][ T9428]  proc_fail_nth_read+0x1af/0x230
[  780.781073][ T9428]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  780.781087][ T9428]  ? rw_verify_area+0xce/0x6d0
[  780.781104][ T9428]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  780.781117][ T9428]  vfs_read+0x1e4/0xb40
[  780.781134][ T9428]  ? lock_acquire+0x1d1/0x380
[  780.781154][ T9428]  ? __fget_files+0x34/0x3d0
[  780.781176][ T9428]  ? __pfx_vfs_read+0x10/0x10
[  780.781191][ T9428]  ? find_held_lock+0x2b/0x80
[  780.781207][ T9428]  ? __fget_files+0x215/0x3d0
[  780.781227][ T9428]  ? __fget_files+0x21f/0x3d0
[  780.781245][ T9428]  ksys_read+0x12a/0x250
[  780.781255][ T9428]  ? __pfx_ksys_read+0x10/0x10
[  780.781271][ T9428]  do_syscall_64+0x123/0x790
[  780.781287][ T9428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.781299][ T9428] RIP: 0033:0x7fe1eef5e98e
[  780.781309][ T9428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  780.781320][ T9428] RSP: 002b:00007fe1efee9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  780.781332][ T9428] RAX: ffffffffffffffda RBX: 00007fe1efeea6c0 RCX: 00007fe1eef5e98e
[  780.781340][ T9428] RDX: 000000000000000f RSI: 00007fe1efeea0a0 RDI: 0000000000000003
[  780.781346][ T9428] RBP: 00007fe1efeea090 R08: 0000000000000000 R09: 0000000000000000
[  780.781353][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.781360][ T9428] R13: 00007fe1ef226038 R14: 00007fe1ef225fa0 R15: 00007ffdb7e7b558
[  780.781375][ T9428]  </TASK>
[  780.948816][ T5783] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  780.948851][ T5783] usb 5-1: MIDIStreaming interface descriptor not found
[  781.142334][ T5783] usb 5-1: USB disconnect, device number 3
[  781.163390][   T30] audit: type=1400 audit(1788814923.023:624): avc:  denied  { write } for  pid=9433 comm="syz.5.892" path="socket:[18541]" dev="sockfs" ino=18541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  782.253266][ T7675] udevd[7675]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  783.842315][   T30] audit: type=1400 audit(1788814925.703:625): avc:  denied  { create } for  pid=9457 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  783.904845][   T30] audit: type=1400 audit(1788814925.773:626): avc:  denied  { kexec_image_load } for  pid=9457 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  784.010006][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'.
[  784.508955][   T30] audit: type=1400 audit(1788814926.373:627): avc:  denied  { write } for  pid=9471 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  788.166764][ T5615] Bluetooth: hci5: unexpected event for opcode 0x040e
[  790.563198][   T30] audit: type=1400 audit(1788814932.423:628): avc:  denied  { create } for  pid=9511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  790.586193][   T30] audit: type=1400 audit(1788814932.423:629): avc:  denied  { read write } for  pid=9511 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  790.610078][   T30] audit: type=1400 audit(1788814932.423:630): avc:  denied  { open } for  pid=9511 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  790.667196][   T30] audit: type=1400 audit(1788814932.533:631): avc:  denied  { ioctl } for  pid=9511 comm="syz-executor" path="socket:[18129]" dev="sockfs" ino=18129 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  790.693537][ T8142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  790.707912][ T8142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  790.719055][ T8142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  790.727471][ T8142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  790.731458][ T5702] libceph: connect (1)[c::]:6789 error -101
[  790.731793][ T5702] libceph: mon0 (1)[c::]:6789 connect error
[  790.749033][ T8142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  790.749445][ T5702] libceph: connect (1)[c::]:6789 error -101
[  790.751320][ T5702] libceph: mon0 (1)[c::]:6789 connect error
[  790.763186][ T9506] ceph: No mds server is up or the cluster is laggy
[  790.864432][   T30] audit: type=1400 audit(1788814932.643:632): avc:  denied  { create } for  pid=9509 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  790.864505][   T30] audit: type=1400 audit(1788814932.643:633): avc:  denied  { execmem } for  pid=9508 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  790.936016][   T30] audit: type=1400 audit(1788814932.753:634): avc:  denied  { read } for  pid=9508 comm="syz.5.913" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  790.936064][   T30] audit: type=1400 audit(1788814932.753:635): avc:  denied  { open } for  pid=9508 comm="syz.5.913" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  790.982592][   T30] audit: type=1400 audit(1788814932.843:636): avc:  denied  { read } for  pid=9511 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  790.982637][   T30] audit: type=1400 audit(1788814932.843:637): avc:  denied  { open } for  pid=9511 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  791.004597][ T5702] libceph: connect (1)[c::]:6789 error -101
[  791.004772][ T5702] libceph: mon0 (1)[c::]:6789 connect error
[  791.593886][   T44] libceph: connect (1)[c::]:6789 error -101
[  791.594079][   T44] libceph: mon0 (1)[c::]:6789 connect error
[  791.622985][ T9519] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  791.631874][ T9519] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  791.645633][ T9519] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  793.023410][ T5615] Bluetooth: hci2: command tx timeout
[  793.667605][ T2021] block nbd4: Possible stuck request ffff888028467000: control (read@0,1024B). Runtime 120 seconds
[  793.680214][ T2021] block nbd4: Possible stuck request ffff8880284671c0: control (read@1024,1024B). Runtime 120 seconds
[  793.692654][ T2021] block nbd4: Possible stuck request ffff888028467380: control (read@2048,1024B). Runtime 120 seconds
[  793.692673][ T2021] block nbd4: Possible stuck request ffff888028467540: control (read@3072,1024B). Runtime 120 seconds
[  795.105987][ T5615] Bluetooth: hci2: command tx timeout
[  796.401498][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.407764][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.409618][ T9511] bridge_slave_0: entered allmulticast mode
[  796.421325][ T9511] bridge_slave_0: entered promiscuous mode
[  796.431648][ T9511] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.433027][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.433155][ T9511] bridge_slave_1: entered allmulticast mode
[  796.441698][ T9511] bridge_slave_1: entered promiscuous mode
[  797.406629][ T5615] Bluetooth: hci2: command tx timeout
[  797.542726][ T9511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.558544][ T9511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.665771][ T9511] team0: Port device team_slave_0 added
[  797.687877][ T9511] team0: Port device team_slave_1 added
[  797.796382][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.805873][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.805916][ T9511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.840337][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.840354][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.840377][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  798.040657][ T9511] hsr_slave_0: entered promiscuous mode
[  798.052149][ T9511] hsr_slave_1: entered promiscuous mode
[  798.230562][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  798.230609][   T30] audit: type=1400 audit(1788814940.093:668): avc:  denied  { mounton } for  pid=9569 comm="syz.4.922" path="/193/sys" dev="tmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  798.277960][   T30] audit: type=1400 audit(1788814940.143:669): avc:  denied  { mount } for  pid=9569 comm="syz.4.922" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  798.509071][ T9577] wusb3801 0-004a: supply vbus not found, using dummy regulator
[  798.577721][   T30] audit: type=1400 audit(1788814940.443:670): avc:  denied  { read } for  pid=9580 comm="syz.2.921" name="media9" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  798.578134][   T30] audit: type=1400 audit(1788814940.443:671): avc:  denied  { open } for  pid=9580 comm="syz.2.921" path="/dev/media9" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  798.624898][   T30] audit: type=1400 audit(1788814940.483:672): avc:  denied  { ioctl } for  pid=9580 comm="syz.2.921" path="/dev/v4l-subdev5" dev="devtmpfs" ino=944 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  798.667747][ T9581] FAULT_INJECTION: forcing a failure.
[  798.667747][ T9581] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  798.667796][ T9581] CPU: 1 UID: 0 PID: 9581 Comm: syz.2.921 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  798.667820][ T9581] Tainted: [L]=SOFTLOCKUP
[  798.667826][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  798.667837][ T9581] Call Trace:
[  798.667843][ T9581]  <TASK>
[  798.667849][ T9581]  dump_stack_lvl+0x100/0x190
[  798.667877][ T9581]  should_fail_ex.cold+0x5/0xa
[  798.667903][ T9581]  _copy_from_iter+0x1f4/0x1690
[  798.667932][ T9581]  ? __asan_memset+0x23/0x50
[  798.667946][ T9581]  ? __pfx__copy_from_iter+0x10/0x10
[  798.667967][ T9581]  ? __pfx___alloc_skb+0x10/0x10
[  798.667991][ T9581]  netlink_sendmsg+0x808/0xda0
[  798.668009][ T9581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  798.668027][ T9581]  ? selinux_socket_sendmsg+0x198/0x2f0
[  798.668055][ T9581]  ____sys_sendmsg+0xa4d/0xbe0
[  798.668073][ T9581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  798.668088][ T9581]  ? __pfx_____sys_sendmsg+0x10/0x10
[  798.668112][ T9581]  ? lock_acquire+0x1d1/0x380
[  798.668127][ T9581]  ? get_pid_task+0x2a/0x250
[  798.668151][ T9581]  ___sys_sendmsg+0x190/0x1e0
[  798.668175][ T9581]  ? __pfx____sys_sendmsg+0x10/0x10
[  798.668198][ T9581]  ? get_pid_task+0x106/0x250
[  798.668226][ T9581]  ? find_held_lock+0x2b/0x80
[  798.668262][ T9581]  __sys_sendmsg+0x160/0x210
[  798.668281][ T9581]  ? __pfx___sys_sendmsg+0x10/0x10
[  798.668312][ T9581]  do_syscall_64+0x123/0x790
[  798.668345][ T9581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.668364][ T9581] RIP: 0033:0x7f6c03b9e159
[  798.668380][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.668398][ T9581] RSP: 002b:00007f6c01df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  798.668418][ T9581] RAX: ffffffffffffffda RBX: 00007f6c03e25fa0 RCX: 00007f6c03b9e159
[  798.668431][ T9581] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  798.668443][ T9581] RBP: 00007f6c01df6090 R08: 0000000000000000 R09: 0000000000000000
[  798.668455][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.668466][ T9581] R13: 00007f6c03e26038 R14: 00007f6c03e25fa0 R15: 00007fff5d2e7e08
[  798.668492][ T9581]  </TASK>
[  799.020344][ T9577] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a
[  799.046132][   T30] audit: type=1400 audit(1788814940.913:673): avc:  denied  { read } for  pid=9582 comm="syz.2.925" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  799.046531][   T30] audit: type=1400 audit(1788814940.913:674): avc:  denied  { open } for  pid=9582 comm="syz.2.925" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  799.111156][ T9583] FAULT_INJECTION: forcing a failure.
[  799.111156][ T9583] name failslab, interval 1, probability 0, space 0, times 1
[  799.111196][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.2.925 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  799.111221][ T9583] Tainted: [L]=SOFTLOCKUP
[  799.111227][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  799.111237][ T9583] Call Trace:
[  799.111242][ T9583]  <TASK>
[  799.111248][ T9583]  dump_stack_lvl+0x100/0x190
[  799.111277][ T9583]  should_fail_ex.cold+0x5/0xa
[  799.111311][ T9583]  should_failslab+0xc2/0x120
[  799.111335][ T9583]  __kmalloc_cache_noprof+0x91/0x6d0
[  799.111362][ T9583]  ? binder_get_thread+0x1c7/0x850
[  799.111389][ T9583]  ? binder_get_thread+0x201/0x850
[  799.111420][ T9583]  binder_get_thread+0x201/0x850
[  799.111452][ T9583]  binder_poll+0x3f/0x430
[  799.111478][ T9583]  ? __pfx_binder_poll+0x10/0x10
[  799.111504][ T9583]  do_select+0xd54/0x1850
[  799.111545][ T9583]  ? __pfx_do_select+0x10/0x10
[  799.111567][ T9583]  ? lock_acquire+0x1d1/0x380
[  799.111586][ T9583]  ? __pfx___pollwait+0x10/0x10
[  799.111610][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111632][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111654][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111676][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111698][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111720][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111743][ T9583]  ? __pfx_pollwake+0x10/0x10
[  799.111771][ T9583]  ? __might_fault+0xc5/0x140
[  799.111797][ T9583]  ? find_held_lock+0x2b/0x80
[  799.111821][ T9583]  ? __might_fault+0xc5/0x140
[  799.111845][ T9583]  ? __might_fault+0xc5/0x140
[  799.111879][ T9583]  ? core_sys_select+0x55b/0xbb0
[  799.111899][ T9583]  core_sys_select+0x55b/0xbb0
[  799.111925][ T9583]  ? __pfx_core_sys_select+0x10/0x10
[  799.111945][ T9583]  ? find_held_lock+0x2b/0x80
[  799.111968][ T9583]  ? get_pid_task+0xfc/0x250
[  799.112018][ T9583]  ? __pfx_set_user_sigmask+0x10/0x10
[  799.112046][ T9583]  ? __mutex_unlock_slowpath+0x35d/0x930
[  799.112075][ T9583]  do_pselect.constprop.0+0x238/0x270
[  799.112100][ T9583]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  799.112126][ T9583]  ? ksys_write+0x1ac/0x250
[  799.112148][ T9583]  __x64_sys_pselect6+0x149/0x1c0
[  799.112174][ T9583]  do_syscall_64+0x123/0x790
[  799.112199][ T9583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.112218][ T9583] RIP: 0033:0x7f6c03b9e159
[  799.112235][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  799.112251][ T9583] RSP: 002b:00007f6c01df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  799.112272][ T9583] RAX: ffffffffffffffda RBX: 00007f6c03e25fa0 RCX: 00007f6c03b9e159
[  799.112290][ T9583] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040
[  799.112301][ T9583] RBP: 00007f6c01df6090 R08: 0000000000000000 R09: 0000000000000000
[  799.112313][ T9583] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  799.112325][ T9583] R13: 00007f6c03e26038 R14: 00007f6c03e25fa0 R15: 00007fff5d2e7e08
[  799.112350][ T9583]  </TASK>
[  799.427494][ T5615] Bluetooth: hci2: command tx timeout
[  799.526693][   T30] audit: type=1400 audit(1788814941.393:675): avc:  denied  { unmount } for  pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  799.799674][ T9586] netlink: 'syz.2.926': attribute type 13 has an invalid length.
[  799.945579][   T30] audit: type=1400 audit(1788814941.813:676): avc:  denied  { setopt } for  pid=9585 comm="syz.2.926" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  800.018127][   T30] audit: type=1400 audit(1788814941.883:677): avc:  denied  { read write } for  pid=9590 comm="syz.1.924" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  801.399062][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.399314][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.298600][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  803.298645][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  803.401284][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  803.423768][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  804.110684][ T9592] syz_tun: entered allmulticast mode
[  804.139120][ T9595] pim6reg: entered allmulticast mode
[  804.283835][ T9596] syz_tun (unregistering): left allmulticast mode
[  804.323364][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  804.333194][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  804.339347][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  804.339362][   T30] audit: type=1400 audit(1788814946.203:680): avc:  denied  { write } for  pid=9511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  804.339801][   T30] audit: type=1400 audit(1788814946.203:681): avc:  denied  { read } for  pid=9511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  804.349155][   T30] audit: type=1400 audit(1788814946.213:682): avc:  denied  { create } for  pid=9609 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  804.363419][   T30] audit: type=1400 audit(1788814946.223:683): avc:  denied  { create } for  pid=9609 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  804.367976][   T30] audit: type=1400 audit(1788814946.233:684): avc:  denied  { mount } for  pid=9609 comm="syz.1.929" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  804.368772][   T30] audit: type=1400 audit(1788814946.233:685): avc:  denied  { read } for  pid=9609 comm="syz.1.929" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  804.368812][   T30] audit: type=1400 audit(1788814946.233:686): avc:  denied  { open } for  pid=9609 comm="syz.1.929" path="/190/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  804.376931][ T9610] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13)
[  804.376986][   T30] audit: type=1400 audit(1788814946.243:687): avc:  denied  { ioctl } for  pid=9609 comm="syz.1.929" path="/190/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  804.403099][ T9511] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  804.474152][ T9511] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  804.474608][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  804.476929][ T9511] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  804.521334][ T9511] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  804.528303][ T9511] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  804.550084][ T9511] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  804.553810][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  804.554079][   T30] audit: type=1400 audit(1788814946.423:688): avc:  denied  { unmount } for  pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  804.563142][ T9511] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  804.663103][ T9511] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  804.764283][   T30] audit: type=1400 audit(1788814946.633:689): avc:  denied  { write } for  pid=9619 comm="syz.1.934" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  805.394335][ T7535] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  805.459799][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.480027][ T9511] 8021q: adding VLAN 0 to HW filter on device team0
[  805.489588][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.489645][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.495853][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.495910][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  805.563386][ T7535] usb 2-1: Using ep0 maxpacket: 32
[  805.564591][ T7535] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  805.564642][ T7535] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  805.566028][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.566056][ T7535] usb 2-1: config 0 has no interface number 0
[  805.567016][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.567043][ T7535] usb 2-1: config 0 has no interface number 0
[  805.644667][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.644688][ T7535] usb 2-1: config 0 has no interface number 0
[  805.650563][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.650587][ T7535] usb 2-1: config 0 has no interface number 0
[  805.655462][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.655486][ T7535] usb 2-1: config 0 has no interface number 0
[  805.658613][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.658635][ T7535] usb 2-1: config 0 has no interface number 0
[  805.662570][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.662592][ T7535] usb 2-1: config 0 has no interface number 0
[  805.666646][ T7535] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  805.666669][ T7535] usb 2-1: config 0 has no interface number 0
[  805.677729][ T7535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.677760][ T7535] usb 2-1: Product: syz
[  805.677774][ T7535] usb 2-1: Manufacturer: syz
[  805.677789][ T7535] usb 2-1: SerialNumber: syz
[  805.691823][ T7535] usb 2-1: config 0 descriptor??
[  805.728728][ T7535] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  805.922932][ T7535] etas_es58x 2-1:0.2: could not parse product info: ''
[  807.494132][ T5702] usb 2-1: USB disconnect, device number 8
[  807.505640][ T5702] etas_es58x 2-1:0.2: Disconnecting syz syz
[  807.734985][ T7535] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  807.894099][ T7535] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  807.897399][ T7535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.897423][ T7535] usb 6-1: Product: syz
[  807.897438][ T7535] usb 6-1: Manufacturer: syz
[  807.897452][ T7535] usb 6-1: SerialNumber: syz
[  808.210202][ T7535] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  809.830488][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  809.830525][   T30] audit: type=1400 audit(1788814951.693:704): avc:  denied  { read } for  pid=9660 comm="syz.1.939" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  809.862773][   T30] audit: type=1400 audit(1788814951.723:705): avc:  denied  { open } for  pid=9660 comm="syz.1.939" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  809.900188][   T30] audit: type=1400 audit(1788814951.763:706): avc:  denied  { write } for  pid=9638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  809.926821][   T30] audit: type=1400 audit(1788814951.793:707): avc:  denied  { add_name } for  pid=9638 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  809.949307][   T30] audit: type=1400 audit(1788814951.793:708): avc:  denied  { create } for  pid=9638 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  809.949348][   T30] audit: type=1400 audit(1788814951.793:709): avc:  denied  { write } for  pid=9638 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=5486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  809.949385][   T30] audit: type=1400 audit(1788814951.803:710): avc:  denied  { append } for  pid=9638 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=5486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  810.055609][ T5731] usb 6-1: USB disconnect, device number 2
[  810.554998][   T30] audit: type=1400 audit(1788814952.423:711): avc:  denied  { create } for  pid=9660 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  810.576517][   T30] audit: type=1400 audit(1788814952.443:712): avc:  denied  { getopt } for  pid=9660 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  810.599799][   T30] audit: type=1400 audit(1788814952.463:713): avc:  denied  { sqpoll } for  pid=9660 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  810.625053][ T7535] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  810.625239][ T7535] ath9k_htc: Failed to initialize the device
[  810.641912][ T5731] usb 6-1: ath9k_htc: USB layer deinitialized
[  810.898093][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  811.121162][ T9665] ceph: No mds server is up or the cluster is laggy
[  811.124319][ T9667] ceph: No mds server is up or the cluster is laggy
[  811.254589][ T9691] FAULT_INJECTION: forcing a failure.
[  811.254589][ T9691] name failslab, interval 1, probability 0, space 0, times 0
[  811.254635][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.2.942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  811.254663][ T9691] Tainted: [L]=SOFTLOCKUP
[  811.254670][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  811.254681][ T9691] Call Trace:
[  811.254687][ T9691]  <TASK>
[  811.254694][ T9691]  dump_stack_lvl+0x100/0x190
[  811.254725][ T9691]  should_fail_ex.cold+0x5/0xa
[  811.254749][ T9691]  should_failslab+0xc2/0x120
[  811.254764][ T9691]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  811.254776][ T9691]  ? __alloc_skb+0x5b7/0x710
[  811.254788][ T9691]  ? __alloc_skb+0x140/0x710
[  811.254801][ T9691]  __alloc_skb+0x140/0x710
[  811.254810][ T9691]  ? __alloc_skb+0x5b7/0x710
[  811.254820][ T9691]  ? __pfx___alloc_skb+0x10/0x10
[  811.254836][ T9691]  netlink_alloc_large_skb+0x69/0x150
[  811.254855][ T9691]  netlink_sendmsg+0x680/0xda0
[  811.254869][ T9691]  ? __pfx_netlink_sendmsg+0x10/0x10
[  811.254881][ T9691]  ? selinux_socket_sendmsg+0x198/0x2f0
[  811.254901][ T9691]  ____sys_sendmsg+0xa4d/0xbe0
[  811.254916][ T9691]  ? __pfx_netlink_sendmsg+0x10/0x10
[  811.254928][ T9691]  ? __pfx_____sys_sendmsg+0x10/0x10
[  811.254945][ T9691]  ? lock_acquire+0x1d1/0x380
[  811.254962][ T9691]  ? get_pid_task+0x2a/0x250
[  811.254979][ T9691]  ___sys_sendmsg+0x190/0x1e0
[  811.254996][ T9691]  ? __pfx____sys_sendmsg+0x10/0x10
[  811.255011][ T9691]  ? get_pid_task+0x106/0x250
[  811.255031][ T9691]  ? find_held_lock+0x2b/0x80
[  811.255056][ T9691]  __sys_sendmsg+0x160/0x210
[  811.255068][ T9691]  ? __pfx___sys_sendmsg+0x10/0x10
[  811.255088][ T9691]  do_syscall_64+0x123/0x790
[  811.255104][ T9691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.255115][ T9691] RIP: 0033:0x7f6c03b9e159
[  811.255125][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.255136][ T9691] RSP: 002b:00007f6c01df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  811.255147][ T9691] RAX: ffffffffffffffda RBX: 00007f6c03e25fa0 RCX: 00007f6c03b9e159
[  811.255155][ T9691] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003
[  811.255162][ T9691] RBP: 00007f6c01df6090 R08: 0000000000000000 R09: 0000000000000000
[  811.255169][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.255175][ T9691] R13: 00007f6c03e26038 R14: 00007f6c03e25fa0 R15: 00007fff5d2e7e08
[  811.255190][ T9691]  </TASK>
[  812.229007][ T9697] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13)
[  812.606723][ T9511] veth0_vlan: entered promiscuous mode
[  812.640282][ T9511] veth1_vlan: entered promiscuous mode
[  813.407393][ T9511] veth0_macvtap: entered promiscuous mode
[  813.500847][ T9511] veth1_macvtap: entered promiscuous mode
[  813.991972][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  814.657112][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  814.764697][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.764744][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.764780][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.764801][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.987505][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  815.987545][   T30] audit: type=1400 audit(1788814957.853:724): avc:  denied  { write } for  pid=9694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  816.153954][   T30] audit: type=1400 audit(1788814958.023:725): avc:  denied  { name_bind } for  pid=9739 comm="syz.4.940" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  816.154013][   T30] audit: type=1400 audit(1788814958.023:726): avc:  denied  { node_bind } for  pid=9739 comm="syz.4.940" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  816.267817][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  816.288774][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  816.401687][  T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  816.401714][  T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  816.429208][   T30] audit: type=1400 audit(1788814958.293:727): avc:  denied  { write } for  pid=9741 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  816.465033][   T30] audit: type=1400 audit(1788814958.333:728): avc:  denied  { mounton } for  pid=9511 comm="syz-executor" path="/root/syzkaller.kxkDCe/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  816.467054][   T30] audit: type=1400 audit(1788814958.333:729): avc:  denied  { mount } for  pid=9511 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  816.497451][   T30] audit: type=1400 audit(1788814958.363:730): avc:  denied  { mount } for  pid=9511 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  816.509956][   T30] audit: type=1400 audit(1788814958.373:731): avc:  denied  { mounton } for  pid=9511 comm="syz-executor" path="/root/syzkaller.kxkDCe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  816.519119][   T30] audit: type=1400 audit(1788814958.383:732): avc:  denied  { mounton } for  pid=9511 comm="syz-executor" path="/root/syzkaller.kxkDCe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  816.555747][   T30] audit: type=1400 audit(1788814958.423:733): avc:  denied  { unmount } for  pid=9511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  819.213852][ T9767] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13)
[  819.426627][ T9772] Invalid ELF header magic: != ELF
[  819.984882][ T9774] syz_tun: entered allmulticast mode
[  820.710961][ T9782] Invalid ELF header magic: != ELF
[  820.714309][ T9782] FAULT_INJECTION: forcing a failure.
[  820.714309][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  820.714373][ T9782] CPU: 1 UID: 0 PID: 9782 Comm: syz.4.959 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  820.714401][ T9782] Tainted: [L]=SOFTLOCKUP
[  820.714408][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  820.714420][ T9782] Call Trace:
[  820.714427][ T9782]  <TASK>
[  820.714435][ T9782]  dump_stack_lvl+0x100/0x190
[  820.714467][ T9782]  should_fail_ex.cold+0x5/0xa
[  820.714495][ T9782]  _copy_from_user+0x2e/0xd0
[  820.714525][ T9782]  get_user_ifreq+0xe7/0x250
[  820.714550][ T9782]  sock_ioctl+0x467/0x6b0
[  820.714577][ T9782]  ? __pfx_sock_ioctl+0x10/0x10
[  820.714609][ T9782]  ? selinux_file_ioctl+0x13b/0x290
[  820.714629][ T9782]  ? selinux_file_ioctl+0xb6/0x290
[  820.714650][ T9782]  ? __pfx_sock_ioctl+0x10/0x10
[  820.714678][ T9782]  __x64_sys_ioctl+0x18e/0x210
[  820.714700][ T9782]  do_syscall_64+0x123/0x790
[  820.714728][ T9782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.714748][ T9782] RIP: 0033:0x7fe91a59e159
[  820.714764][ T9782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.714783][ T9782] RSP: 002b:00007fe91b3e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  820.714802][ T9782] RAX: ffffffffffffffda RBX: 00007fe91a826180 RCX: 00007fe91a59e159
[  820.714815][ T9782] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000007
[  820.714827][ T9782] RBP: 00007fe91b3e5090 R08: 0000000000000000 R09: 0000000000000000
[  820.714840][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  820.714851][ T9782] R13: 00007fe91a826218 R14: 00007fe91a826180 R15: 00007fff0484be08
[  820.714879][ T9782]  </TASK>
[  822.219698][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.961'.
[  822.954785][ T9788] 8021q: adding VLAN 0 to HW filter on device bond1
[  823.074383][ T9798] bridge_slave_0: left allmulticast mode
[  823.074413][ T9798] bridge_slave_0: left promiscuous mode
[  823.074548][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.102834][ T9798] bridge_slave_1: left allmulticast mode
[  823.102869][ T9798] bridge_slave_1: left promiscuous mode
[  823.105252][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.230453][ T9798] bond0: (slave bond_slave_0): Releasing backup interface
[  823.309401][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  823.309448][   T30] audit: type=1400 audit(1788814965.173:748): avc:  denied  { ioctl } for  pid=9796 comm="syz.2.963" path="socket:[20639]" dev="sockfs" ino=20639 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  823.355051][ T9798] bond0: (slave bond_slave_1): Releasing backup interface
[  823.404255][   T30] audit: type=1400 audit(1788814965.273:749): avc:  denied  { ioctl } for  pid=9805 comm="syz.1.964" path="socket:[19648]" dev="sockfs" ino=19648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  823.497728][ T9798] team0: Port device team_slave_0 removed
[  823.535805][ T9798] team0: Port device team_slave_1 removed
[  823.547729][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  823.575451][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  823.587148][ T9798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  823.626161][   T30] audit: type=1400 audit(1788814965.493:750): avc:  denied  { read write } for  pid=9813 comm="syz.6.965" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  823.626212][   T30] audit: type=1400 audit(1788814965.493:751): avc:  denied  { open } for  pid=9813 comm="syz.6.965" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  823.681477][ T9815] FAULT_INJECTION: forcing a failure.
[  823.681477][ T9815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  823.694855][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.6.965 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  823.694887][ T9815] Tainted: [L]=SOFTLOCKUP
[  823.694894][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  823.694906][ T9815] Call Trace:
[  823.694912][ T9815]  <TASK>
[  823.694920][ T9815]  dump_stack_lvl+0x100/0x190
[  823.694953][ T9815]  should_fail_ex.cold+0x5/0xa
[  823.694980][ T9815]  _copy_from_user+0x2e/0xd0
[  823.695009][ T9815]  vmemdup_user+0x6b/0xe0
[  823.695039][ T9815]  path_setxattrat+0x29e/0x3b0
[  823.695067][ T9815]  ? __pfx_path_setxattrat+0x10/0x10
[  823.695097][ T9815]  ? ksys_write+0x190/0x250
[  823.695115][ T9815]  ? ksys_write+0x190/0x250
[  823.695155][ T9815]  ? fput+0x7c/0x100
[  823.695178][ T9815]  ? ksys_write+0x1ac/0x250
[  823.695197][ T9815]  ? __pfx_ksys_write+0x10/0x10
[  823.695220][ T9815]  __x64_sys_setxattr+0xc6/0x140
[  823.695244][ T9815]  ? do_syscall_64+0xae/0x790
[  823.695267][ T9815]  ? lockdep_hardirqs_on+0x7d/0x110
[  823.695289][ T9815]  do_syscall_64+0x123/0x790
[  823.695315][ T9815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.695335][ T9815] RIP: 0033:0x7fca4939e159
[  823.695351][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.695369][ T9815] RSP: 002b:00007fca4a295028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  823.695389][ T9815] RAX: ffffffffffffffda RBX: 00007fca49626090 RCX: 00007fca4939e159
[  823.695402][ T9815] RDX: 000020000000e400 RSI: 0000200000000040 RDI: 0000200000000000
[  823.695414][ T9815] RBP: 00007fca4a295090 R08: 0000000000000001 R09: 0000000000000000
[  823.695426][ T9815] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001
[  823.695437][ T9815] R13: 00007fca49626128 R14: 00007fca49626090 R15: 00007fffeab72438
[  823.695465][ T9815]  </TASK>
[  823.753016][ T2021] block nbd4: Possible stuck request ffff888028467000: control (read@0,1024B). Runtime 150 seconds
[  823.753043][ T2021] block nbd4: Possible stuck request ffff8880284671c0: control (read@1024,1024B). Runtime 150 seconds
[  823.753057][ T2021] block nbd4: Possible stuck request ffff888028467380: control (read@2048,1024B). Runtime 150 seconds
[  823.753071][ T2021] block nbd4: Possible stuck request ffff888028467540: control (read@3072,1024B). Runtime 150 seconds
[  823.950171][   T30] audit: type=1400 audit(1788814965.813:752): avc:  denied  { unmount } for  pid=9511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  826.354213][ T9837] FAULT_INJECTION: forcing a failure.
[  826.354213][ T9837] name failslab, interval 1, probability 0, space 0, times 0
[  826.354291][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.4.969 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  826.354320][ T9837] Tainted: [L]=SOFTLOCKUP
[  826.354327][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  826.354339][ T9837] Call Trace:
[  826.354345][ T9837]  <TASK>
[  826.354353][ T9837]  dump_stack_lvl+0x100/0x190
[  826.354386][ T9837]  should_fail_ex.cold+0x5/0xa
[  826.354414][ T9837]  should_failslab+0xc2/0x120
[  826.354439][ T9837]  kmem_cache_alloc_noprof+0x92/0x6a0
[  826.354460][ T9837]  ? is_bpf_text_address+0x94/0x1a0
[  826.354485][ T9837]  ? alloc_empty_file+0x5b/0x1c0
[  826.354515][ T9837]  alloc_empty_file+0x5b/0x1c0
[  826.354541][ T9837]  path_openat+0xdb/0x2440
[  826.354569][ T9837]  ? __pfx_path_openat+0x10/0x10
[  826.354592][ T9837]  ? stack_trace_save+0x8e/0xc0
[  826.354620][ T9837]  ? __pfx_stack_trace_save+0x10/0x10
[  826.354652][ T9837]  ? find_held_lock+0x2b/0x80
[  826.354683][ T9837]  do_file_open+0x20e/0x430
[  826.354709][ T9837]  ? __pfx_do_file_open+0x10/0x10
[  826.354730][ T9837]  ? __kasan_slab_alloc+0x89/0x90
[  826.354752][ T9837]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[  826.354771][ T9837]  ? do_getname+0x35/0x390
[  826.354827][ T9837]  do_open_execat+0xd1/0x360
[  826.354847][ T9837]  ? __pfx_do_open_execat+0x10/0x10
[  826.354868][ T9837]  ? __might_fault+0xc5/0x140
[  826.354894][ T9837]  ? __might_fault+0xc5/0x140
[  826.354926][ T9837]  alloc_bprm+0x2d/0x9e0
[  826.354949][ T9837]  do_execveat_common.isra.0+0x19c/0x580
[  826.354971][ T9837]  ? do_getname+0x191/0x390
[  826.354999][ T9837]  __x64_sys_execve+0x93/0xd0
[  826.355021][ T9837]  do_syscall_64+0x123/0x790
[  826.355049][ T9837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.355069][ T9837] RIP: 0033:0x7fe91a59e159
[  826.355085][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.355103][ T9837] RSP: 002b:00007fe91b3e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  826.355123][ T9837] RAX: ffffffffffffffda RBX: 00007fe91a826180 RCX: 00007fe91a59e159
[  826.355136][ T9837] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180
[  826.355149][ T9837] RBP: 00007fe91b3e5090 R08: 0000000000000000 R09: 0000000000000000
[  826.355161][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  826.355173][ T9837] R13: 00007fe91a826218 R14: 00007fe91a826180 R15: 00007fff0484be08
[  826.355201][ T9837]  </TASK>
[  827.656902][   T30] audit: type=1400 audit(1788814969.523:753): avc:  denied  { write } for  pid=9842 comm="syz.2.972" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  827.656965][   T30] audit: type=1400 audit(1788814969.523:754): avc:  denied  { open } for  pid=9842 comm="syz.2.972" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  827.703684][   T30] audit: type=1400 audit(1788814969.553:755): avc:  denied  { ioctl } for  pid=9842 comm="syz.2.972" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  828.240215][   T30] audit: type=1400 audit(1788814970.103:756): avc:  denied  { append } for  pid=9824 comm="syz.1.968" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  828.617726][   T30] audit: type=1400 audit(1788814970.483:757): avc:  denied  { mounton } for  pid=9848 comm="syz.2.975" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  828.650754][   T30] audit: type=1400 audit(1788814970.513:758): avc:  denied  { mount } for  pid=9848 comm="syz.2.975" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  828.885050][   T30] audit: type=1400 audit(1788814970.753:759): avc:  denied  { map } for  pid=9852 comm="syz.1.976" path="socket:[19767]" dev="sockfs" ino=19767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  829.057549][   T30] audit: type=1400 audit(1788814970.923:760): avc:  denied  { remount } for  pid=9852 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  829.751022][   T30] audit: type=1400 audit(1788814971.613:761): avc:  denied  { write } for  pid=9856 comm="syz.2.977" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  829.881530][   T30] audit: type=1400 audit(1788814971.743:762): avc:  denied  { create } for  pid=9859 comm="syz.6.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  829.909218][ T9863] CIFS: Attempting to mount //127.0.0.1/share
[  829.992468][ T9864] CIFS: VFS: Invalid response size 0 for command 0
[  829.999549][   T30] audit: type=1400 audit(1788814971.863:763): avc:  denied  { create } for  pid=9859 comm="syz.6.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  830.019077][ T9863] CIFS: VFS: cifs_mount failed w/return code = -5
[  830.515339][   T30] audit: type=1400 audit(1788814972.373:764): avc:  denied  { mount } for  pid=9867 comm="syz.1.979" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  830.615546][   T30] audit: type=1400 audit(1788814972.483:765): avc:  denied  { read } for  pid=9867 comm="syz.1.979" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  830.642692][   T30] audit: type=1400 audit(1788814972.503:766): avc:  denied  { open } for  pid=9867 comm="syz.1.979" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  830.686115][ T9868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.979'.
[  830.716069][ T9866] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  832.893423][ T5702] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  833.044101][ T5702] usb 5-1: Using ep0 maxpacket: 8
[  833.050029][ T5702] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  833.053950][ T5702] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  833.053993][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  833.054021][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  833.054044][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  833.054069][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  833.054092][ T5702] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  833.054137][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.266445][ T5702] usb 5-1: GET_CAPABILITIES returned 0
[  833.266489][ T5702] usbtmc 5-1:16.0: can't read capabilities
[  833.850406][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.901483][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.673401][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  834.835275][    T9] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  834.872226][    T9] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  834.872267][    T9] usb 6-1: Product: syz
[  834.872301][    T9] usb 6-1: Manufacturer: syz
[  834.872318][    T9] usb 6-1: SerialNumber: syz
[  834.926162][    T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  835.797688][ T9601] usb 5-1: USB disconnect, device number 4
[  836.481642][   T30] audit: type=1400 audit(1788814978.343:767): avc:  denied  { accept } for  pid=9905 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  836.898961][ T9895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.899372][ T9895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.997624][   T30] audit: type=1400 audit(1788814978.863:768): avc:  denied  { ioctl } for  pid=9894 comm="syz.5.978" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  837.863974][    T9] vp7045: USB control message 'in' went wrong.
[  837.864002][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  837.864046][    T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  838.389522][   T30] audit: type=1400 audit(1788814980.253:769): avc:  denied  { create } for  pid=9924 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  838.433556][   T30] audit: type=1400 audit(1788814980.303:770): avc:  denied  { ioctl } for  pid=9924 comm="syz.4.995" path="socket:[19971]" dev="sockfs" ino=19971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  838.667549][   T30] audit: type=1400 audit(1788814980.533:771): avc:  denied  { create } for  pid=9924 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  838.703013][   T30] audit: type=1400 audit(1788814980.563:772): avc:  denied  { shutdown } for  pid=9924 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  838.708809][   T30] audit: type=1400 audit(1788814980.573:773): avc:  denied  { write } for  pid=9924 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  838.770462][ T9601] usb 6-1: USB disconnect, device number 3
[  839.494214][   T30] audit: type=1400 audit(1788814981.363:774): avc:  denied  { create } for  pid=9934 comm="syz.6.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  839.590129][ T9935] capability: warning: `syz.6.996' uses deprecated v2 capabilities in a way that may be insecure
[  839.597215][ T9935] FAULT_INJECTION: forcing a failure.
[  839.597215][ T9935] name failslab, interval 1, probability 0, space 0, times 0
[  839.597246][ T9935] CPU: 1 UID: 0 PID: 9935 Comm: syz.6.996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  839.597272][ T9935] Tainted: [L]=SOFTLOCKUP
[  839.597279][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  839.597291][ T9935] Call Trace:
[  839.597297][ T9935]  <TASK>
[  839.597304][ T9935]  dump_stack_lvl+0x100/0x190
[  839.597336][ T9935]  should_fail_ex.cold+0x5/0xa
[  839.597363][ T9935]  should_failslab+0xc2/0x120
[  839.597387][ T9935]  kmem_cache_alloc_noprof+0x92/0x6a0
[  839.597408][ T9935]  ? mas_preallocate+0xc22/0xee0
[  839.597437][ T9935]  mas_preallocate+0xc22/0xee0
[  839.597465][ T9935]  ? __pfx_mas_preallocate+0x10/0x10
[  839.597497][ T9935]  ? anon_vma_name+0x5a/0x250
[  839.597527][ T9935]  __split_vma+0x2f8/0x1de0
[  839.597559][ T9935]  ? __pfx___split_vma+0x10/0x10
[  839.597582][ T9935]  ? mas_next_slot+0xc05/0x13a0
[  839.597621][ T9935]  vms_gather_munmap_vmas+0x3a5/0x1720
[  839.597647][ T9935]  ? down_write+0x146/0x1f0
[  839.597676][ T9935]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  839.597704][ T9935]  ? process_measurement+0x1f4/0x2350
[  839.597728][ T9935]  ? __lock_acquire+0x5c0/0x1f40
[  839.597758][ T9935]  do_vmi_align_munmap+0x287/0x5f0
[  839.597789][ T9935]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  839.597825][ T9935]  ? is_bpf_text_address+0x8a/0x1a0
[  839.597871][ T9935]  ? mas_walk+0x260/0x310
[  839.597897][ T9935]  do_vmi_munmap+0x1f8/0x3e0
[  839.597928][ T9935]  do_munmap+0xba/0x100
[  839.597950][ T9935]  ? __pfx_do_munmap+0x10/0x10
[  839.597981][ T9935]  ? check_prep_vma+0x2d5/0x1080
[  839.598012][ T9935]  mremap_to+0x2b3/0x4c0
[  839.598038][ T9935]  ? __pfx_mremap_to+0x10/0x10
[  839.598068][ T9935]  ? __pfx_down_write_killable+0x10/0x10
[  839.598101][ T9935]  __do_sys_mremap+0xc70/0x1780
[  839.598131][ T9935]  ? proc_fail_nth_write+0x9f/0x220
[  839.598153][ T9935]  ? find_held_lock+0x2b/0x80
[  839.598180][ T9935]  ? __pfx___do_sys_mremap+0x10/0x10
[  839.598211][ T9935]  ? rcu_read_lock_any_held+0x6a/0x90
[  839.598238][ T9935]  ? ksys_write+0x190/0x250
[  839.598258][ T9935]  ? lock_acquire+0x1d1/0x380
[  839.598280][ T9935]  ? __mutex_unlock_slowpath+0x35d/0x930
[  839.598317][ T9935]  ? fput+0x7c/0x100
[  839.598339][ T9935]  ? ksys_write+0x1ac/0x250
[  839.598357][ T9935]  ? __pfx_ksys_write+0x10/0x10
[  839.598384][ T9935]  do_syscall_64+0x123/0x790
[  839.598409][ T9935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.598428][ T9935] RIP: 0033:0x7fca4939e159
[  839.598444][ T9935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  839.598462][ T9935] RSP: 002b:00007fca4a2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  839.598481][ T9935] RAX: ffffffffffffffda RBX: 00007fca49625fa0 RCX: 00007fca4939e159
[  839.598494][ T9935] RDX: 0000000000400000 RSI: 0000000000800000 RDI: 0000200000800000
[  839.598506][ T9935] RBP: 00007fca4a2b6090 R08: 0000200000000000 R09: 0000000000000000
[  839.598518][ T9935] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  839.598529][ T9935] R13: 00007fca49626038 R14: 00007fca49625fa0 R15: 00007fffeab72438
[  839.598556][ T9935]  </TASK>
[  839.689094][ T9942] FAULT_INJECTION: forcing a failure.
[  839.689094][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  839.689125][ T9942] CPU: 1 UID: 0 PID: 9942 Comm: syz.5.999 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  839.689152][ T9942] Tainted: [L]=SOFTLOCKUP
[  839.689159][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  839.689169][ T9942] Call Trace:
[  839.689176][ T9942]  <TASK>
[  839.689183][ T9942]  dump_stack_lvl+0x100/0x190
[  839.689214][ T9942]  should_fail_ex.cold+0x5/0xa
[  839.689242][ T9942]  _copy_to_user+0x32/0xd0
[  839.689272][ T9942]  simple_read_from_buffer+0xcb/0x170
[  839.689300][ T9942]  proc_fail_nth_read+0x1af/0x230
[  839.689324][ T9942]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  839.689349][ T9942]  ? rw_verify_area+0xce/0x6d0
[  839.689375][ T9942]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  839.689397][ T9942]  vfs_read+0x1e4/0xb40
[  839.689416][ T9942]  ? lock_acquire+0x1d1/0x380
[  839.689436][ T9942]  ? __fget_files+0x34/0x3d0
[  839.689457][ T9942]  ? __pfx_vfs_read+0x10/0x10
[  839.689473][ T9942]  ? find_held_lock+0x2b/0x80
[  839.689498][ T9942]  ? __fget_files+0x215/0x3d0
[  839.689524][ T9942]  ? __fget_files+0x21f/0x3d0
[  839.689553][ T9942]  ksys_read+0x12a/0x250
[  839.689571][ T9942]  ? __pfx_ksys_read+0x10/0x10
[  839.689596][ T9942]  do_syscall_64+0x123/0x790
[  839.689622][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.689641][ T9942] RIP: 0033:0x7fe1eef5e98e
[  839.689657][ T9942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  839.689673][ T9942] RSP: 002b:00007fe1efee9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  839.689690][ T9942] RAX: ffffffffffffffda RBX: 00007fe1efeea6c0 RCX: 00007fe1eef5e98e
[  839.689698][ T9942] RDX: 000000000000000f RSI: 00007fe1efeea0a0 RDI: 0000000000000003
[  839.689705][ T9942] RBP: 00007fe1efeea090 R08: 0000000000000000 R09: 0000000000000000
[  839.689712][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  839.689719][ T9942] R13: 00007fe1ef226038 R14: 00007fe1ef225fa0 R15: 00007ffdb7e7b558
[  839.689735][ T9942]  </TASK>
[  840.411816][   T30] audit: type=1400 audit(1788814982.273:775): avc:  denied  { read write } for  pid=9950 comm="syz.6.1001" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  840.436524][   T30] audit: type=1400 audit(1788814982.273:776): avc:  denied  { open } for  pid=9950 comm="syz.6.1001" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  841.110233][ T9961] CIFS: Attempting to mount //127.0.0.1/share
[  841.552438][ T9973] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'.
[  841.985128][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  841.985188][   T30] audit: type=1400 audit(1788814983.763:811): avc:  denied  { read write } for  pid=9972 comm="syz.5.1006" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  841.991976][   T30] audit: type=1400 audit(1788814983.773:812): avc:  denied  { open } for  pid=9972 comm="syz.5.1006" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  841.992138][   T30] audit: type=1400 audit(1788814983.773:813): avc:  denied  { ioctl } for  pid=9972 comm="syz.5.1006" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  841.992281][   T30] audit: type=1400 audit(1788814983.773:814): avc:  denied  { execute } for  pid=9972 comm="syz.5.1006" name="file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  842.243788][ T9961] CIFS: VFS: Error connecting to socket. Aborting operation.
[  842.243840][ T9961] CIFS: VFS: cifs_mount failed w/return code = -4
[  842.277220][ T9957] ftl_cs: FTL header not found.
[  842.410691][   T30] audit: type=1400 audit(1788814984.273:815): avc:  denied  { bind } for  pid=9976 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  842.430331][   T30] audit: type=1400 audit(1788814984.273:816): avc:  denied  { node_bind } for  pid=9976 comm="syz.4.1007" saddr=127.0.0.1 src=52773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  843.563543][   T30] audit: type=1400 audit(1788814985.413:817): avc:  denied  { setopt } for  pid=9976 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  843.593197][   T30] audit: type=1400 audit(1788814985.453:818): avc:  denied  { write } for  pid=9979 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  843.620509][   T30] audit: type=1400 audit(1788814985.483:819): avc:  denied  { create } for  pid=9979 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  843.647255][   T30] audit: type=1400 audit(1788814985.513:820): avc:  denied  { ioctl } for  pid=9979 comm="syz.1.1008" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  843.768819][ T9957] block2mtd: mtd1: [/dev/zram0] erase_size = 64KiB [65536]
[  846.393346][ T5783] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  846.552858][ T5783] usb 3-1: unable to get BOS descriptor or descriptor too short
[  846.552908][ T5783] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  846.554067][ T5783] usb 3-1: config index 0 descriptor too short (expected 187, got 59)
[  846.554112][ T5783] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  846.579124][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=1
[  846.579148][ T5783] usb 3-1: Product: syz
[  846.579162][ T5783] usb 3-1: SerialNumber: syz
[  846.838317][T10011] evm: overlay not supported
[  846.988403][T10011] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in;
[  846.988403][T10011]    program syz.6.1016 not setting count and/or reply_len properly
[  847.064508][T10002] SELinux: failed to load policy
[  847.333729][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  847.333770][   T30] audit: type=1400 audit(1788814989.203:825): avc:  denied  { create } for  pid=10014 comm="syz.5.1011" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  849.382086][   T30] audit: type=1400 audit(1788814991.243:826): avc:  denied  { create } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.454885][   T30] audit: type=1400 audit(1788814991.283:827): avc:  denied  { bind } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.506459][   T30] audit: type=1400 audit(1788814991.373:828): avc:  denied  { listen } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.539759][   T30] audit: type=1400 audit(1788814991.403:829): avc:  denied  { unlink } for  pid=7421 comm="syz-executor" name="file2" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  849.573410][   T30] audit: type=1400 audit(1788814991.433:830): avc:  denied  { read } for  pid=10026 comm="syz.6.1022" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  849.573480][   T30] audit: type=1400 audit(1788814991.433:831): avc:  denied  { connect } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.632670][   T30] audit: type=1400 audit(1788814991.493:832): avc:  denied  { accept } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.650168][   T30] audit: type=1400 audit(1788814991.513:833): avc:  denied  { write } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.674525][   T30] audit: type=1400 audit(1788814991.533:834): avc:  denied  { read } for  pid=10005 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  849.829509][ T5783] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  849.879828][ T5783] usb 3-1: USB disconnect, device number 6
[  849.975251][T10031] FAULT_INJECTION: forcing a failure.
[  849.975251][T10031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  849.975285][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.5.1024 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  849.975302][T10031] Tainted: [L]=SOFTLOCKUP
[  849.975306][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  849.975312][T10031] Call Trace:
[  849.975317][T10031]  <TASK>
[  849.975321][T10031]  dump_stack_lvl+0x100/0x190
[  849.975342][T10031]  should_fail_ex.cold+0x5/0xa
[  849.975358][T10031]  strncpy_from_user+0x3b/0x2d0
[  849.975372][T10031]  do_getname+0x78/0x390
[  849.975389][T10031]  __x64_sys_rename+0x57/0xb0
[  849.975405][T10031]  do_syscall_64+0x123/0x790
[  849.975421][T10031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.975432][T10031] RIP: 0033:0x7fe1eef9e159
[  849.975442][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.975452][T10031] RSP: 002b:00007fe1efeea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  849.975464][T10031] RAX: ffffffffffffffda RBX: 00007fe1ef225fa0 RCX: 00007fe1eef9e159
[  849.975471][T10031] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[  849.975478][T10031] RBP: 00007fe1efeea090 R08: 0000000000000000 R09: 0000000000000000
[  849.975484][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.975491][T10031] R13: 00007fe1ef226038 R14: 00007fe1ef225fa0 R15: 00007ffdb7e7b558
[  849.975506][T10031]  </TASK>
[  850.397316][T10034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  850.834704][ T5731] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  851.061166][ T5731] usb 6-1: Using ep0 maxpacket: 8
[  851.243347][ T5731] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  851.254683][ T5731] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  851.254711][ T5731] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  851.254732][ T5731] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  851.254756][ T5731] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  851.254778][ T5731] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  851.254797][ T5731] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  851.254831][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.816337][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1023'.
[  851.944127][ T5731] usb 6-1: GET_CAPABILITIES returned 0
[  851.944188][ T5731] usbtmc 6-1:16.0: can't read capabilities
[  853.019849][ T5731] usb 6-1: USB disconnect, device number 4
[  853.385672][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  853.385697][   T30] audit: type=1400 audit(1788814995.253:852): avc:  denied  { unmount } for  pid=7421 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  853.422721][   T30] audit: type=1400 audit(1788814995.283:853): avc:  denied  { ioctl } for  pid=10053 comm="syz.6.1032" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  853.422766][   T30] audit: type=1400 audit(1788814995.283:854): avc:  denied  { set_context_mgr } for  pid=10053 comm="syz.6.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  853.524948][   T30] audit: type=1400 audit(1788814995.393:855): avc:  denied  { write } for  pid=10053 comm="syz.6.1032" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  854.506447][ T5615] Bluetooth: hci2: command tx timeout
[  854.532094][ T2021] block nbd4: Possible stuck request ffff888028467000: control (read@0,1024B). Runtime 180 seconds
[  854.532147][ T2021] block nbd4: Possible stuck request ffff8880284671c0: control (read@1024,1024B). Runtime 180 seconds
[  854.532185][ T2021] block nbd4: Possible stuck request ffff888028467380: control (read@2048,1024B). Runtime 180 seconds
[  854.532212][ T2021] block nbd4: Possible stuck request ffff888028467540: control (read@3072,1024B). Runtime 180 seconds
[  854.819513][T10066] CIFS: Attempting to mount //127.0.0.1/share
[  854.963289][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  855.294349][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  855.332475][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  855.332531][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  856.174862][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.174906][    T9] usb 5-1: Product: syz
[  856.174920][    T9] usb 5-1: Manufacturer: syz
[  856.174934][    T9] usb 5-1: SerialNumber: syz
[  856.487871][T10066] CIFS: VFS: Error connecting to socket. Aborting operation.
[  856.501284][T10066] CIFS: VFS: cifs_mount failed w/return code = -4
[  857.575146][    T9] usb 5-1: USB disconnect, device number 5
[  860.917680][T10093] =======================================================
[  860.917680][T10093] WARNING: The mand mount option has been deprecated and
[  860.917680][T10093]          and is ignored by this kernel. Remove the mand
[  860.917680][T10093]          option from the mount to silence this warning.
[  860.917680][T10093] =======================================================
[  861.966435][   T30] audit: type=1400 audit(1788815003.833:856): avc:  denied  { setopt } for  pid=10094 comm="syz.5.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  862.426724][T10104] FAULT_INJECTION: forcing a failure.
[  862.426724][T10104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  862.426783][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.2.1046 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  862.426818][T10104] Tainted: [L]=SOFTLOCKUP
[  862.426825][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  862.426836][T10104] Call Trace:
[  862.426843][T10104]  <TASK>
[  862.426850][T10104]  dump_stack_lvl+0x100/0x190
[  862.426881][T10104]  should_fail_ex.cold+0x5/0xa
[  862.426910][T10104]  _copy_from_user+0x2e/0xd0
[  862.426939][T10104]  memdup_user+0x6b/0xe0
[  862.426969][T10104]  strndup_user+0x78/0xe0
[  862.426997][T10104]  __x64_sys_fsopen+0x9e/0x220
[  862.427018][T10104]  do_syscall_64+0x123/0x790
[  862.427045][T10104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.427066][T10104] RIP: 0033:0x7f6c03b9e159
[  862.427082][T10104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.427099][T10104] RSP: 002b:00007f6c01df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  862.427119][T10104] RAX: ffffffffffffffda RBX: 00007f6c03e25fa0 RCX: 00007f6c03b9e159
[  862.427133][T10104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0
[  862.427144][T10104] RBP: 00007f6c01df6090 R08: 0000000000000000 R09: 0000000000000000
[  862.427156][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  862.427168][T10104] R13: 00007f6c03e26038 R14: 00007f6c03e25fa0 R15: 00007fff5d2e7e08
[  862.427195][T10104]  </TASK>
[  862.692231][   T30] audit: type=1400 audit(1788815004.553:857): avc:  denied  { bind } for  pid=10094 comm="syz.5.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  862.751078][   T30] audit: type=1400 audit(1788815004.613:858): avc:  denied  { mounton } for  pid=10108 comm="syz.1.1047" path="/213/file0" dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  862.799891][   T30] audit: type=1400 audit(1788815004.663:859): avc:  denied  { unmount } for  pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  862.966161][T10115] CIFS: Attempting to mount //127.0.0.1/share
[  863.691119][T10115] CIFS: VFS: cifs_mount failed w/return code = -112
[  864.976711][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  864.976780][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  865.545944][   T30] audit: type=1400 audit(1788815007.413:860): avc:  denied  { bind } for  pid=10133 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  865.566512][   T30] audit: type=1400 audit(1788815007.413:861): avc:  denied  { name_bind } for  pid=10133 comm="syz.4.1055" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  865.566558][   T30] audit: type=1400 audit(1788815007.413:862): avc:  denied  { node_bind } for  pid=10133 comm="syz.4.1055" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  865.625965][   T30] audit: type=1400 audit(1788815007.483:863): avc:  denied  { setopt } for  pid=10133 comm="syz.4.1055" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  865.648557][   T30] audit: type=1400 audit(1788815007.493:864): avc:  denied  { write } for  pid=10133 comm="syz.4.1055" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  865.669967][   T30] audit: type=1400 audit(1788815007.493:865): avc:  denied  { connect } for  pid=10133 comm="syz.4.1055" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  868.636604][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  868.636642][   T30] audit: type=1400 audit(1788815010.493:867): avc:  denied  { setopt } for  pid=10147 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  868.674952][   T30] audit: type=1400 audit(1788815010.543:868): avc:  denied  { write } for  pid=10147 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  868.843546][T10151] CIFS: Attempting to mount //127.0.0.1/share
[  869.648469][T10151] CIFS: VFS: Error connecting to socket. Aborting operation.
[  869.648531][T10151] CIFS: VFS: cifs_mount failed w/return code = -4
[  869.913376][   T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  869.943529][ T9601] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  870.063372][   T25] usb 2-1: Using ep0 maxpacket: 16
[  870.068845][   T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  870.082165][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  870.082203][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  870.101647][ T9601] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  870.107128][ T9601] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  870.107162][ T9601] usb 6-1: config 0 interface 0 has no altsetting 0
[  870.107197][ T9601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.112695][ T9601] usb 6-1: config 0 descriptor??
[  870.125530][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.125555][   T25] usb 2-1: Product: syz
[  870.125570][   T25] usb 2-1: Manufacturer: syz
[  870.125605][   T25] usb 2-1: SerialNumber: syz
[  870.140622][   T25] usb 2-1: config 0 descriptor??
[  870.395516][   T30] audit: type=1400 audit(1788815012.263:869): avc:  denied  { name_bind } for  pid=10156 comm="syz.5.1063" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  870.502969][   T25] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  870.517928][T10157] FAULT_INJECTION: forcing a failure.
[  870.517928][T10157] name failslab, interval 1, probability 0, space 0, times 0
[  870.517966][T10157] CPU: 1 UID: 0 PID: 10157 Comm: syz.5.1063 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.517998][T10157] Tainted: [L]=SOFTLOCKUP
[  870.518002][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  870.518010][T10157] Call Trace:
[  870.518014][T10157]  <TASK>
[  870.518019][T10157]  dump_stack_lvl+0x100/0x190
[  870.518041][T10157]  should_fail_ex.cold+0x5/0xa
[  870.518058][T10157]  should_failslab+0xc2/0x120
[  870.518076][T10157]  kmem_cache_alloc_noprof+0x92/0x6a0
[  870.518098][T10157]  ? skb_clone+0x190/0x400
[  870.518121][T10157]  skb_clone+0x190/0x400
[  870.518136][T10157]  bpf_clone_redirect+0x166/0x500
[  870.518154][T10157]  bpf_prog_69c2527fbc57d46b+0x5f/0x68
[  870.518167][T10157]  ? __schedule+0x126b/0x6920
[  870.518188][T10157]  ? __pfx___schedule+0x10/0x10
[  870.518199][T10157]  ? lockdep_hardirqs_on+0x7d/0x110
[  870.518212][T10157]  ? irqentry_exit+0x24d/0xa10
[  870.518227][T10157]  ? preempt_schedule_thunk+0x16/0x40
[  870.518241][T10157]  ? preempt_schedule_common+0x3c/0xb0
[  870.518256][T10157]  ? __pfx___cant_migrate+0x10/0x10
[  870.518271][T10157]  ? bpf_test_timer_continue+0x17b/0x5e0
[  870.518287][T10157]  ? lockdep_hardirqs_on+0x7d/0x110
[  870.518300][T10157]  bpf_test_run+0x39c/0xa40
[  870.518316][T10157]  ? bpf_test_run+0x1c6/0xa40
[  870.518333][T10157]  ? __pfx_bpf_test_run+0x10/0x10
[  870.518360][T10157]  ? eth_type_trans+0x2e3/0x720
[  870.518379][T10157]  bpf_prog_test_run_skb+0x15b3/0x3530
[  870.518398][T10157]  ? lock_acquire+0x1d1/0x380
[  870.518417][T10157]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  870.518436][T10157]  ? fput+0x7c/0x100
[  870.518451][T10157]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  870.518468][T10157]  __sys_bpf+0x2265/0x4a30
[  870.518483][T10157]  ? __pfx___sys_bpf+0x10/0x10
[  870.518493][T10157]  ? find_held_lock+0x2b/0x80
[  870.518508][T10157]  ? futex_wake+0x4ea/0x5e0
[  870.518535][T10157]  ? vfs_write+0x914/0x1050
[  870.518545][T10157]  ? vfs_write+0x15d/0x1050
[  870.518565][T10157]  ? __x64_sys_futex+0x34f/0x4d0
[  870.518579][T10157]  ? __x64_sys_futex+0x358/0x4d0
[  870.518595][T10157]  ? xfd_validate_state+0x129/0x190
[  870.518610][T10157]  ? __x64_sys_bpf+0xce/0x140
[  870.518620][T10157]  __x64_sys_bpf+0xce/0x140
[  870.518637][T10157]  ? do_syscall_64+0xae/0x790
[  870.518653][T10157]  do_syscall_64+0x123/0x790
[  870.518670][T10157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.518683][T10157] RIP: 0033:0x7fe1eef9e159
[  870.518694][T10157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  870.518705][T10157] RSP: 002b:00007fe1efeea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  870.518717][T10157] RAX: ffffffffffffffda RBX: 00007fe1ef225fa0 RCX: 00007fe1eef9e159
[  870.518724][T10157] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
[  870.518732][T10157] RBP: 00007fe1ef035024 R08: 0000000000000000 R09: 0000000000000000
[  870.518739][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  870.518746][T10157] R13: 00007fe1ef226038 R14: 00007fe1ef225fa0 R15: 00007ffdb7e7b558
[  870.518762][T10157]  </TASK>
[  870.579922][   T30] audit: type=1326 audit(1788815012.443:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.2.1064" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c03b9e159 code=0x0
[  870.587220][   T30] audit: type=1400 audit(1788815012.453:871): avc:  denied  { read } for  pid=4955 comm="acpid" name="mouse1" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  870.587264][   T30] audit: type=1400 audit(1788815012.453:872): avc:  denied  { open } for  pid=4955 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  870.587322][   T30] audit: type=1400 audit(1788815012.453:873): avc:  denied  { ioctl } for  pid=4955 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2915 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  870.828633][ T9601] nintendo 0003:057E:2009.0002: item fetching failed at offset 5/6
[  870.829228][ T9601] nintendo 0003:057E:2009.0002: HID parse failed
[  870.858264][ T9601] nintendo 0003:057E:2009.0002: probe - fail = -22
[  870.858392][ T9601] nintendo 0003:057E:2009.0002: probe with driver nintendo failed with error -22
[  870.903347][   T25] rc_core: IR keymap rc-imon-pad not found
[  870.903368][   T25] Registered IR keymap rc-empty
[  870.903441][   T25] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  870.903457][   T25] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  870.982893][   T25] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  871.005864][   T25] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14
[  871.066846][   T25] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:9> initialized
[  871.108731][   T30] audit: type=1400 audit(1788815012.973:874): avc:  denied  { create } for  pid=10154 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  871.111006][   T30] audit: type=1400 audit(1788815012.973:875): avc:  denied  { ioctl } for  pid=10154 comm="syz.1.1053" path="socket:[21651]" dev="sockfs" ino=21651 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  871.119943][    C1] imon 2-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0)
[  871.331001][    C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  871.331424][   T25] usb 2-1: USB disconnect, device number 9
[  874.421951][    T9] usb 6-1: USB disconnect, device number 5
[  874.438575][   T30] audit: type=1400 audit(1788815016.303:876): avc:  denied  { unmount } for  pid=7421 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  875.631499][T10204] 9p: Could not find request transport: f0x0000000000000005
[  878.152741][   T30] audit: type=1400 audit(1788815020.013:877): avc:  denied  { read write } for  pid=10219 comm="syz.1.1070" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  878.177301][   T30] audit: type=1400 audit(1788815020.043:878): avc:  denied  { open } for  pid=10219 comm="syz.1.1070" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  880.582983][T10228] 9p: Could not find request transport: 0x0000000000000005
[  883.710663][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1079'.
[  884.556221][ T2021] block nbd4: Possible stuck request ffff888028467000: control (read@0,1024B). Runtime 210 seconds
[  884.556278][ T2021] block nbd4: Possible stuck request ffff8880284671c0: control (read@1024,1024B). Runtime 210 seconds
[  884.556300][ T2021] block nbd4: Possible stuck request ffff888028467380: control (read@2048,1024B). Runtime 210 seconds
[  884.556317][ T2021] block nbd4: Possible stuck request ffff888028467540: control (read@3072,1024B). Runtime 210 seconds
[  885.038984][T10257] CIFS: Attempting to mount //127.0.0.1/share
[  885.142767][   T30] audit: type=1400 audit(1788815027.003:879): avc:  denied  { read } for  pid=10256 comm="syz.1.1088" lport=53843 faddr=::ffff:100.1.1.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  885.193420][   T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  885.303457][ T5702] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  885.330479][T10270] FAULT_INJECTION: forcing a failure.
[  885.330479][T10270] name failslab, interval 1, probability 0, space 0, times 0
[  885.330521][T10270] CPU: 1 UID: 0 PID: 10270 Comm: syz.5.1089 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  885.330548][T10270] Tainted: [L]=SOFTLOCKUP
[  885.330556][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  885.330567][T10270] Call Trace:
[  885.330574][T10270]  <TASK>
[  885.330582][T10270]  dump_stack_lvl+0x100/0x190
[  885.330617][T10270]  should_fail_ex.cold+0x5/0xa
[  885.330645][T10270]  should_failslab+0xc2/0x120
[  885.330670][T10270]  __kmalloc_cache_noprof+0x91/0x6d0
[  885.330699][T10270]  ? unix_domain_find+0x65/0x200
[  885.330730][T10270]  unix_domain_find+0x65/0x200
[  885.330756][T10270]  ip_map_parse+0x2db/0x470
[  885.330783][T10270]  ? __pfx_ip_map_parse+0x10/0x10
[  885.330808][T10270]  ? irqentry_exit+0x24d/0xa10
[  885.330831][T10270]  ? lockdep_hardirqs_on+0x7d/0x110
[  885.330854][T10270]  ? irqentry_exit+0x24d/0xa10
[  885.330889][T10270]  ? __pfx_ip_map_parse+0x10/0x10
[  885.330920][T10270]  cache_do_downcall+0xc3/0x130
[  885.330948][T10270]  cache_write_procfs+0xfb/0x170
[  885.330982][T10270]  ? __pfx_cache_write_procfs+0x10/0x10
[  885.331009][T10270]  proc_reg_write+0x240/0x330
[  885.331040][T10270]  vfs_write+0x2aa/0x1050
[  885.331061][T10270]  ? __pfx_proc_reg_write+0x10/0x10
[  885.331087][T10270]  ? lock_acquire+0x1d1/0x380
[  885.331107][T10270]  ? __fget_files+0x34/0x3d0
[  885.331130][T10270]  ? __pfx_vfs_write+0x10/0x10
[  885.331148][T10270]  ? find_held_lock+0x2b/0x80
[  885.331174][T10270]  ? __fget_files+0x215/0x3d0
[  885.331201][T10270]  ? __fget_files+0x21f/0x3d0
[  885.331233][T10270]  ksys_write+0x12a/0x250
[  885.331252][T10270]  ? __pfx_ksys_write+0x10/0x10
[  885.331280][T10270]  do_syscall_64+0x123/0x790
[  885.331306][T10270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.331327][T10270] RIP: 0033:0x7fe1eef9e159
[  885.331344][T10270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.331362][T10270] RSP: 002b:00007fe1efec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  885.331381][T10270] RAX: ffffffffffffffda RBX: 00007fe1ef226090 RCX: 00007fe1eef9e159
[  885.331394][T10270] RDX: 000000000000001e RSI: 0000200000000200 RDI: 0000000000000003
[  885.331407][T10270] RBP: 00007fe1efec9090 R08: 0000000000000000 R09: 0000000000000000
[  885.331418][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.331430][T10270] R13: 00007fe1ef226128 R14: 00007fe1ef226090 R15: 00007ffdb7e7b558
[  885.331459][T10270]  </TASK>
[  885.336247][ T5615] Bluetooth: hci1: unexpected event for opcode 0x0000
[  885.344055][   T25] usb 7-1: Using ep0 maxpacket: 16
[  885.345430][   T25] usb 7-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8c.00
[  885.346297][   T25] usb 7-1: config index 0 descriptor too short (expected 20, got 18)
[  885.351709][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.351736][   T25] usb 7-1: Product: syz
[  885.351805][   T25] usb 7-1: Manufacturer: syz
[  885.351875][   T25] usb 7-1: SerialNumber: syz
[  885.416250][   T25] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  885.416348][   T25] command write [95] error -22
[  885.454341][ T5702] usb 5-1: Using ep0 maxpacket: 16
[  885.457609][ T5702] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  885.465231][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.465303][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.465381][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  885.465487][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.504081][ T5702] usb 5-1: config 0 descriptor??
[  886.279868][ T5702] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input15
[  887.342341][T10257] CIFS: VFS: Error connecting to socket. Aborting operation.
[  887.342395][T10257] CIFS: VFS: cifs_mount failed w/return code = -4
[  887.375239][ T5702] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  887.408057][ T5702] usb 5-1: USB disconnect, device number 6
[  887.629085][T10286] tipc: Started in network mode
[  887.629134][T10286] tipc: Node identity 92dcfa7c5084, cluster identity 4711
[  887.629867][T10286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  888.623638][    T9] usb 7-1: USB disconnect, device number 2
[  888.659272][T10283] fido_id[10283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  888.704742][T10274] tipc: Disabling bearer <eth:syzkaller0>
[  889.347346][ T5615] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  889.351202][ T5615] Bluetooth: hci1: Injecting HCI hardware error event
[  889.377100][ T5615] Bluetooth: hci1: hardware error 0x00
[  889.898524][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1097'.
[  891.201297][T10317] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10317]
[  891.321452][   T30] audit: type=1400 audit(1788815033.183:880): avc:  denied  { create } for  pid=10318 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  891.583456][ T5615] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  892.748114][   T30] audit: type=1400 audit(1788815034.613:881): avc:  denied  { open } for  pid=10333 comm="syz.4.1103" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  892.755123][T10334] 9p: Invalid uid '0x00000000ffffffff'
[  893.969081][ T5731] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  894.291202][ T5731] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  894.509074][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  894.509129][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.529001][ T5731] usb 2-1: config 0 descriptor??
[  894.530951][ T5731] pwc: Askey VC010 type 2 USB webcam detected.
[  895.693616][ T5731] pwc: send_video_command error -71
[  895.693647][ T5731] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  895.693755][ T5731] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  895.708155][ T5731] usb 2-1: USB disconnect, device number 10
[  896.168518][ T5731] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  896.368066][ T5731] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  896.381637][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.381707][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.418754][ T5731] usb 2-1: config 0 descriptor??
[  896.452767][ T5731] pwc: Askey VC010 type 2 USB webcam detected.
[  897.527270][ T5731] pwc: send_video_command error -71
[  897.527295][ T5731] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  897.527387][ T5731] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  897.540864][ T5731] usb 2-1: USB disconnect, device number 11
[  897.903005][T10363] CIFS: Attempting to mount //127.0.0.1/share
[  898.877707][T10363] CIFS: VFS: Error connecting to socket. Aborting operation.
[  898.877756][T10363] CIFS: VFS: cifs_mount failed w/return code = -4
[  900.352499][T10375] rnbd_client L127: Can't parse path ip:127v0.0.1žµÖ×@: -22
[  900.443768][T10375] fuse: Unknown parameter 'E/g6jæuser_id'
[  900.823639][T10379] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  900.843089][   T30] audit: type=1400 audit(1788815042.683:882): avc:  denied  { bind } for  pid=10378 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  901.582468][T10385] FAULT_INJECTION: forcing a failure.
[  901.582468][T10385] name failslab, interval 1, probability 0, space 0, times 0
[  901.582519][T10385] CPU: 1 UID: 0 PID: 10385 Comm: syz.2.1113 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  901.582547][T10385] Tainted: [L]=SOFTLOCKUP
[  901.582555][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  901.582567][T10385] Call Trace:
[  901.582574][T10385]  <TASK>
[  901.582582][T10385]  dump_stack_lvl+0x100/0x190
[  901.582619][T10385]  should_fail_ex.cold+0x5/0xa
[  901.582648][T10385]  should_failslab+0xc2/0x120
[  901.582674][T10385]  __kvmalloc_node_noprof+0x113/0x9b0
[  901.582708][T10385]  ? sbitmap_init_node+0x1cc/0x720
[  901.582746][T10385]  sbitmap_init_node+0x1cc/0x720
[  901.582774][T10385]  ? __kmalloc_cache_node_noprof+0x231/0x720
[  901.582802][T10385]  sbitmap_queue_init_node+0x40/0x4a0
[  901.582835][T10385]  blk_mq_init_tags+0x184/0x300
[  901.582865][T10385]  blk_mq_alloc_map_and_rqs+0x244/0xe30
[  901.582901][T10385]  blk_mq_alloc_sched_tags+0x1de/0x350
[  901.582926][T10385]  blk_mq_alloc_sched_res+0x8e/0x250
[  901.582949][T10385]  elevator_change+0x136/0x530
[  901.582982][T10385]  elv_iosched_store+0x3be/0x460
[  901.583014][T10385]  ? __pfx_elv_iosched_store+0x10/0x10
[  901.583053][T10385]  ? find_held_lock+0x2b/0x80
[  901.583083][T10385]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  901.583117][T10385]  ? __pfx_elv_iosched_store+0x10/0x10
[  901.583147][T10385]  queue_attr_store+0x25f/0x2f0
[  901.583176][T10385]  ? __pfx_queue_attr_store+0x10/0x10
[  901.583216][T10385]  ? lock_acquire+0x1d1/0x380
[  901.583237][T10385]  ? sysfs_file_kobj+0x21/0x290
[  901.583262][T10385]  ? find_held_lock+0x2b/0x80
[  901.583288][T10385]  ? sysfs_file_kobj+0xe4/0x290
[  901.583309][T10385]  ? sysfs_file_kobj+0xe4/0x290
[  901.583334][T10385]  ? __pfx_queue_attr_store+0x10/0x10
[  901.583358][T10385]  sysfs_kf_write+0xf2/0x150
[  901.583384][T10385]  kernfs_fop_write_iter+0x3e0/0x5f0
[  901.583403][T10385]  ? __pfx_sysfs_kf_write+0x10/0x10
[  901.583430][T10385]  vfs_write+0x6af/0x1050
[  901.583453][T10385]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  901.583512][T10385]  ? __pfx_vfs_write+0x10/0x10
[  901.583531][T10385]  ? find_held_lock+0x2b/0x80
[  901.583578][T10385]  ksys_write+0x12a/0x250
[  901.583598][T10385]  ? __pfx_ksys_write+0x10/0x10
[  901.583628][T10385]  do_syscall_64+0x123/0x790
[  901.583657][T10385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.583679][T10385] RIP: 0033:0x7f6c03b9e159
[  901.583704][T10385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  901.583724][T10385] RSP: 002b:00007f6c01db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  901.583746][T10385] RAX: ffffffffffffffda RBX: 00007f6c03e26180 RCX: 00007f6c03b9e159
[  901.583760][T10385] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003
[  901.583772][T10385] RBP: 00007f6c03c35024 R08: 0000000000000000 R09: 0000000000000000
[  901.583784][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  901.583796][T10385] R13: 00007f6c03e26218 R14: 00007f6c03e26180 R15: 00007fff5d2e7e08
[  901.583828][T10385]  </TASK>
[  903.015485][   T30] audit: type=1400 audit(1788815044.883:883): avc:  denied  { create } for  pid=10387 comm="syz.4.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  903.061264][T10396] netlink: 'syz.4.1120': attribute type 1 has an invalid length.
[  903.061335][T10396] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1120'.
[  903.061363][T10396] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.1120'.
[  903.993392][   T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  904.156326][   T25] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  904.172247][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.172282][   T25] usb 7-1: Product: syz
[  904.172301][   T25] usb 7-1: Manufacturer: syz
[  904.172319][   T25] usb 7-1: SerialNumber: syz
[  904.293028][ T9623] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  905.009403][T10408] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  905.217547][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  905.226754][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1126'.
[  906.023730][ T9623] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  906.604741][ T9623] ath9k_htc: Failed to initialize the device
[  906.685448][    T9] usb 7-1: USB disconnect, device number 3
[  906.884885][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  906.910120][    T9] usb 7-1: ath9k_htc: USB layer deinitialized
[  907.056117][   T25] usb 3-1: New USB device found, idVendor=0499, idProduct=103b, bcdDevice= 0.40
[  907.067188][   T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 7
[  907.089630][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.099237][   T25] usb 3-1: Product: syz
[  907.099269][   T25] usb 3-1: Manufacturer: Ñ—
[  907.099291][   T25] usb 3-1: SerialNumber: syz
[  907.503619][T10424] input: syz0 as /devices/virtual/input/input16
[  907.531349][   T30] audit: type=1400 audit(1788815049.333:884): avc:  denied  { append } for  pid=10420 comm="syz.6.1130" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  907.850535][   T30] audit: type=1400 audit(1788815049.713:885): avc:  denied  { mount } for  pid=10411 comm="syz.2.1126" name="/" dev="rpc_pipefs" ino=22869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  908.484659][T10436] blktrace: Concurrent blktraces are not allowed on loop4
[  908.530996][   T30] audit: type=1400 audit(1788815050.393:886): avc:  denied  { setopt } for  pid=10433 comm="syz.6.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  908.570978][T10435] blktrace: Concurrent blktraces are not allowed on loop4
[  908.631370][   T30] audit: type=1400 audit(1788815050.493:887): avc:  denied  { bind } for  pid=10433 comm="syz.6.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  908.631499][   T30] audit: type=1400 audit(1788815050.493:888): avc:  denied  { setopt } for  pid=10433 comm="syz.6.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  908.941867][   T30] audit: type=1400 audit(1788815050.803:889): avc:  denied  { unmount } for  pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  908.988123][   T30] audit: type=1326 audit(1788815050.853:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.1.1132" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee76f9e159 code=0x0
[  913.086479][   T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  913.157202][   T25] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  913.186401][   T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  913.206407][   T25] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  913.228748][   T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  913.607690][   T25] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  913.671830][ T8189] udevd[8189]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  914.423370][   T25] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  915.216355][ T9179] block nbd4: Possible stuck request ffff888028467000: control (read@0,1024B). Runtime 240 seconds
[  915.216402][ T9179] block nbd4: Possible stuck request ffff8880284671c0: control (read@1024,1024B). Runtime 240 seconds
[  915.216432][ T9179] block nbd4: Possible stuck request ffff888028467380: control (read@2048,1024B). Runtime 240 seconds
[  915.216459][ T9179] block nbd4: Possible stuck request ffff888028467540: control (read@3072,1024B). Runtime 240 seconds
[  915.242843][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  915.255700][   T25] usb 5-1: not running at top speed; connect to a high speed hub
[  915.255723][   T25] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  915.311122][   T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 4
[  915.311143][   T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  915.314921][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.314943][   T25] usb 5-1: Product: syz
[  915.314958][   T25] usb 5-1: Manufacturer: syz
[  915.314973][   T25] usb 5-1: SerialNumber: syz
[  916.113589][   T30] audit: type=1400 audit(1788815057.973:891): avc:  denied  { create } for  pid=10482 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  916.146904][T10483] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  916.146937][T10483] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1145'.
[  916.146957][T10483] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.1145'.
[  916.183557][   T30] audit: type=1400 audit(1788815058.003:892): avc:  denied  { getopt } for  pid=10482 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  916.502068][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.502431][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.526155][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.526535][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.565600][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.614900][   T25] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch
[  916.671793][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.672203][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.695877][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.795457][   T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  916.817849][   T25] usb 5-1: selecting invalid altsetting 1
[  916.826723][   T25] snd-usb-us122l 5-1:1.1: usb_set_interface error
[  916.836088][   T25] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  916.862066][   T30] audit: type=1400 audit(1788815058.723:893): avc:  denied  { bind } for  pid=10496 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  916.882377][   T25] usb 5-1: USB disconnect, device number 7
[  916.951648][ T9384] udevd[9384]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  917.077371][T10497] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  918.525468][T10508] FAULT_INJECTION: forcing a failure.
[  918.525468][T10508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  918.525520][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.2.1152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  918.525545][T10508] Tainted: [L]=SOFTLOCKUP
[  918.525550][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  918.525559][T10508] Call Trace:
[  918.525566][T10508]  <TASK>
[  918.525572][T10508]  dump_stack_lvl+0x100/0x190
[  918.525605][T10508]  should_fail_ex.cold+0x5/0xa
[  918.525632][T10508]  _copy_to_user+0x32/0xd0
[  918.525662][T10508]  simple_read_from_buffer+0xcb/0x170
[  918.525688][T10508]  proc_fail_nth_read+0x1af/0x230
[  918.525712][T10508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  918.525736][T10508]  ? rw_verify_area+0xce/0x6d0
[  918.525762][T10508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  918.525785][T10508]  vfs_read+0x1e4/0xb40
[  918.525806][T10508]  ? lock_acquire+0x1d1/0x380
[  918.525825][T10508]  ? __fget_files+0x34/0x3d0
[  918.525854][T10508]  ? __pfx_vfs_read+0x10/0x10
[  918.525870][T10508]  ? find_held_lock+0x2b/0x80
[  918.525896][T10508]  ? __fget_files+0x215/0x3d0
[  918.525922][T10508]  ? __fget_files+0x21f/0x3d0
[  918.525951][T10508]  ksys_read+0x12a/0x250
[  918.525969][T10508]  ? __pfx_ksys_read+0x10/0x10
[  918.525995][T10508]  do_syscall_64+0x123/0x790
[  918.526021][T10508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.526040][T10508] RIP: 0033:0x7f6c03b5e98e
[  918.526056][T10508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  918.526073][T10508] RSP: 002b:00007f6c01df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  918.526091][T10508] RAX: ffffffffffffffda RBX: 00007f6c01df66c0 RCX: 00007f6c03b5e98e
[  918.526104][T10508] RDX: 000000000000000f RSI: 00007f6c01df60a0 RDI: 0000000000000004
[  918.526115][T10508] RBP: 00007f6c01df6090 R08: 0000000000000000 R09: 0000000000000000
[  918.526126][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  918.526137][T10508] R13: 00007f6c03e26038 R14: 00007f6c03e25fa0 R15: 00007fff5d2e7e08
[  918.526169][T10508]  </TASK>
[  921.281032][T10529] FAULT_INJECTION: forcing a failure.
[  921.281032][T10529] name failslab, interval 1, probability 0, space 0, times 0
[  921.281122][T10529] CPU: 0 UID: 0 PID: 10529 Comm: syz.2.1159 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  921.281150][T10529] Tainted: [L]=SOFTLOCKUP
[  921.281156][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  921.281168][T10529] Call Trace:
[  921.281174][T10529]  <TASK>
[  921.281183][T10529]  dump_stack_lvl+0x100/0x190
[  921.281216][T10529]  should_fail_ex.cold+0x5/0xa
[  921.281243][T10529]  should_failslab+0xc2/0x120
[  921.281267][T10529]  kmem_cache_alloc_noprof+0x92/0x6a0
[  921.281287][T10529]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  921.281310][T10529]  ? alloc_empty_file+0x5b/0x1c0
[  921.281340][T10529]  alloc_empty_file+0x5b/0x1c0
[  921.281366][T10529]  path_openat+0xdb/0x2440
[  921.281392][T10529]  ? __pfx_path_openat+0x10/0x10
[  921.281422][T10529]  do_file_open+0x20e/0x430
[  921.281447][T10529]  ? __pfx_do_file_open+0x10/0x10
[  921.281468][T10529]  ? preempt_schedule_irq+0x79/0x90
[  921.281509][T10529]  ? _raw_spin_unlock+0x28/0x50
[  921.281528][T10529]  ? alloc_fd+0x471/0x7a0
[  921.281559][T10529]  do_sys_openat2+0x10f/0x1e0
[  921.281583][T10529]  ? __pfx_do_sys_openat2+0x10/0x10
[  921.281617][T10529]  ? __fget_files+0x21f/0x3d0
[  921.281642][T10529]  __x64_sys_openat+0x12d/0x210
[  921.281662][T10529]  ? __pfx___x64_sys_openat+0x10/0x10
[  921.281686][T10529]  ? trace_irq_enable.constprop.0+0x2f/0x160
[  921.281718][T10529]  do_syscall_64+0x123/0x790
[  921.281744][T10529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.281764][T10529] RIP: 0033:0x7f6c03b9e159
[  921.281779][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.281796][T10529] RSP: 002b:00007f6c01dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  921.281814][T10529] RAX: ffffffffffffffda RBX: 00007f6c03e26090 RCX: 00007f6c03b9e159
[  921.281827][T10529] RDX: 0000000000004000 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  921.281838][T10529] RBP: 00007f6c01dd5090 R08: 0000000000000000 R09: 0000000000000000
[  921.281854][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  921.281865][T10529] R13: 00007f6c03e26128 R14: 00007f6c03e26090 R15: 00007fff5d2e7e08
[  921.281891][T10529]  </TASK>
[  921.307332][T10529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1159'.
[  921.349398][   T30] audit: type=1400 audit(1788815063.213:894): avc:  denied  { create } for  pid=10526 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  921.438464][    T9] usb 3-1: USB disconnect, device number 7
[  922.943822][T10543] syz_tun: entered promiscuous mode
[  923.299990][   T30] audit: type=1400 audit(1788815065.163:895): avc:  denied  { mount } for  pid=10545 comm="syz.2.1163" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  923.525425][   T30] audit: type=1400 audit(1788815065.393:896): avc:  denied  { unmount } for  pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  923.689139][T10554] blktrace: Concurrent blktraces are not allowed on loop4
[  925.273009][T10566] netlink: 'syz.1.1157': attribute type 4 has an invalid length.
[  926.147054][   T31] INFO: task syz.3.877:9377
** replaying previous printk message **
[  926.147054][   T31] INFO: task syz.3.877:9377 blocked for more than 143 seconds.
[  926.147099][   T31]       Tainted: G             L      syzkaller #0
[  926.147122][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  926.147132][   T31] task:syz.3.877       state:D stack:27336 pid:9377  tgid:9376  ppid:5600   task_flags:0x400040 flags:0x00080802
[  926.147200][   T31] Call Trace:
[  926.147209][   T31]  <TASK>
[  926.147223][   T31]  __schedule+0x1259/0x6920
[  926.147251][   T31]  ? __lock_acquire+0x5c0/0x1f40
[  926.147279][   T31]  ? do_raw_spin_lock+0x128/0x260
[  926.147318][   T31]  ? __pfx___schedule+0x10/0x10
[  926.147339][   T31]  ? find_held_lock+0x2b/0x80
[  926.147367][   T31]  ? schedule+0x225/0x2c0
[  926.147395][   T31]  schedule+0xdd/0x2c0
[  926.147417][   T31]  schedule_preempt_disabled+0x13/0x30
[  926.147440][   T31]  __mutex_lock+0xccb/0x1bd0
[  926.147467][   T31]  ? sync_bdevs+0x153/0x480
[  926.147498][   T31]  ? sync_bdevs+0x1ff/0x480
[  926.147527][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  926.147563][   T31]  ? iput.part.0+0x1a0/0x1050
[  926.147592][   T31]  ? sync_bdevs+0x37/0x480
[  926.147621][   T31]  ? sync_bdevs+0x153/0x480
[  926.147643][   T31]  sync_bdevs+0x153/0x480
[  926.147676][   T31]  ksys_sync+0xb0/0xf0
[  926.147702][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  926.147733][   T31]  ? do_syscall_64+0xae/0x790
[  926.147756][   T31]  __do_sys_sync+0xe/0x20
[  926.147780][   T31]  do_syscall_64+0x123/0x790
[  926.147805][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.147826][   T31] RIP: 0033:0x7f69cad9e159
[  926.147842][   T31] RSP: 002b:00007f69cbcd9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  926.147861][   T31] RAX: ffffffffffffffda RBX: 00007f69cb025fa0 RCX: 00007f69cad9e159
[  926.147874][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  926.147886][   T31] RBP: 00007f69cb025fa0 R08: 0000000000000000 R09: 0000000000000000
[  926.147898][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  926.147909][   T31] R13: 00007f69cb026038 R14: 00007f69cb025fa0 R15: 00007fffbaf49fe8
[  926.147937][   T31]  </TASK>
[  926.147984][   T31] 
[  926.147984][   T31] Showing all locks held in the system:
[  926.147996][   T31] locks held by pr/ttyS0/16: 2, last CPU#0:
[  926.148010][   T31]  #0: ffffffff8edd85b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  926.148059][   T31]  #1: ffffffff9bc67c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[  926.148113][   T31] locks held by khungtaskd/31: 1, last CPU#1:
[  926.148125][   T31]  #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  926.148200][   T31] locks held by getty/5357: 2, on CPU#0:
[  926.148213][   T31]  #0: ffff88803112c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  926.148265][   T31]  #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  926.148320][   T31] locks held by syz-executor/5597: 2, last CPU#0:
[  926.148333][   T31]  #0: ffff88802764c460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730
[  926.148404][   T31]  #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: find_lock_entries+0x10f/0x1190
[  926.148454][   T31] locks held by syz-executor/5601: 3, on CPU#1:
[  926.148468][   T31]  #0: ffff88807dbaa460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730
[  926.148520][   T31]  #1: ffff888020bfef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730
[  926.148577][   T31]  #2: ffff88807f6356f8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: vfs_unlink+0xd3/0xbd0
[  926.148631][   T31] locks held by udevd/7668: 1, on CPU#1:
[  926.148645][   T31]  #0: ffff88802820c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  926.148698][   T31] locks held by syz.3.877/9377: 1, on CPU#1:
[  926.148711][   T31]  #0: ffff88802820c350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480
[  926.148762][   T31] locks held by syz.6.1142/10481: 2, last CPU#0:
[  926.148775][   T31]  #0: ffff88807ab7c378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[  926.148823][   T31]  #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[  926.148868][   T31] locks held by syz.2.1154/10518: 2, last CPU#1:
[  926.148881][   T31]  #0: ffff88802764c460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0
[  926.148931][   T31]  #1: ffff888033109aa8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140
[  926.148980][   T31] locks held by syz.1.1169/10571: 2, last CPU#0:
[  926.148993][   T31]  #0: ffff88807dbaa460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0
[  926.149040][   T31]  #1: ffff88807f6356f8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140
[  926.149091][   T31] 
[  926.149095][   T31] =============================================
[  926.149095][   T31] 
[  926.149111][   T31] NMI backtrace for cpu 1
[  926.149124][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  926.149149][   T31] Tainted: [L]=SOFTLOCKUP
[  926.149155][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  926.149165][   T31] Call Trace:
[  926.149172][   T31]  <TASK>
[  926.149179][   T31]  dump_stack_lvl+0x100/0x190
[  926.149206][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  926.149235][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  926.149256][   T31]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  926.149308][   T31]  sys_info+0x141/0x190
[  926.149333][   T31]  watchdog+0xcb1/0x1030
[  926.149360][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  926.149381][   T31]  ? __pfx_watchdog+0x10/0x10
[  926.149402][   T31]  ? __kthread_parkme+0x18f/0x230
[  926.149427][   T31]  ? kthread+0x13a/0x450
[  926.149450][   T31]  ? __pfx_watchdog+0x10/0x10
[  926.149468][   T31]  kthread+0x373/0x450
[  926.149490][   T31]  ? __pfx_kthread+0x10/0x10
[  926.149516][   T31]  ret_from_fork+0x730/0xd60
[  926.149537][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  926.149558][   T31]  ? __switch_to+0x800/0x10f0
[  926.149583][   T31]  ? __pfx_kthread+0x10/0x10
[  926.149609][   T31]  ret_from_fork_asm+0x1a/0x30
[  926.149640][   T31]  </TASK>
[  926.149647][   T31] Sending NMI from CPU 1 to CPUs 0:
[  926.149676][    C0] NMI backtrace for cpu 0
[  926.149688][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  926.149712][    C0] Tainted: [L]=SOFTLOCKUP
[  926.149718][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  926.149728][    C0] RIP: 0010:io_serial_in+0x87/0xb0
[  926.149754][    C0] Code: cd 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 8d 33 23 06 e8 78 08 cf fc eb a2 e8 01 09
[  926.149769][    C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[  926.149783][    C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[  926.149798][    C0] RDX: 00000000000003fd RSI: ffffffff85b04320 RDI: ffffffff9bc67ca0
[  926.149809][    C0] RBP: ffffffff9bc67c60 R08: 0000000000000001 R09: 000000000000001f
[  926.149819][    C0] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000000
[  926.149830][    C0] R13: 0000000000000020 R14: fffffbfff378cfe9 R15: dffffc0000000000
[  926.149842][    C0] FS:  0000000000000000(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000
[  926.149858][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  926.149870][    C0] CR2: 00007fee76f87780 CR3: 000000003789f000 CR4: 00000000003526f0
[  926.149882][    C0] Call Trace:
[  926.149887][    C0]  <TASK>
[  926.149894][    C0]  wait_for_lsr+0x13a/0x210
[  926.149915][    C0]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[  926.149936][    C0]  __serial8250_console_fifo_write+0xa5/0x290
[  926.149954][    C0]  ? __pfx_io_serial_out+0x10/0x10
[  926.149982][    C0]  serial8250_console_write+0xf46/0x1330
[  926.150007][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  926.150029][    C0]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  926.150056][    C0]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  926.150087][    C0]  nbcon_emit_next_record+0x8f7/0xa70
[  926.150116][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  926.150142][    C0]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  926.150167][    C0]  ? do_raw_spin_lock+0x70/0x260
[  926.150192][    C0]  ? __pfx___cant_migrate+0x10/0x10
[  926.150214][    C0]  ? _raw_spin_lock_irqsave+0x42/0x60
[  926.150233][    C0]  nbcon_emit_one+0x1a8/0x2b0
[  926.150258][    C0]  ? __pfx_nbcon_emit_one+0x10/0x10
[  926.150287][    C0]  nbcon_kthread_func+0x613/0x7d0
[  926.150305][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  926.150325][    C0]  ? __kthread_parkme+0x18f/0x230
[  926.150345][    C0]  ? kthread+0x13a/0x450
[  926.150366][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  926.150382][    C0]  kthread+0x373/0x450
[  926.150403][    C0]  ? __pfx_kthread+0x10/0x10
[  926.150426][    C0]  ret_from_fork+0x730/0xd60
[  926.150444][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  926.150463][    C0]  ? __switch_to+0x800/0x10f0
[  926.150485][    C0]  ? __pfx_kthread+0x10/0x10
[  926.150508][    C0]  ret_from_fork_asm+0x1a/0x30
[  926.150532][    C0]  </TASK>
[  926.150673][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  927.024523][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  927.035204][   T31] Tainted: [L]=SOFTLOCKUP
[  927.039525][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  927.049580][   T31] Call Trace:
[  927.052865][   T31]  <TASK>
[  927.055794][   T31]  dump_stack_lvl+0x100/0x190
[  927.060484][   T31]  vpanic+0x553/0x970
[  927.064465][   T31]  ? __pfx_vpanic+0x10/0x10
[  927.068974][   T31]  panic+0xd1/0xe0
[  927.072693][   T31]  ? __pfx_panic+0x10/0x10
[  927.077112][   T31]  ? wq_watchdog_touch+0xec/0x1a0
[  927.082116][   T31]  ? nmi_trigger_cpumask_backtrace+0x206/0x2a0
[  927.088251][   T31]  ? watchdog.cold+0x1ec/0x234
[  927.092996][   T31]  watchdog.cold+0x1fd/0x234
[  927.097566][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  927.103350][   T31]  ? __pfx_watchdog+0x10/0x10
[  927.108005][   T31]  ? __kthread_parkme+0x18f/0x230
[  927.113007][   T31]  ? kthread+0x13a/0x450
[  927.117228][   T31]  ? __pfx_watchdog+0x10/0x10
[  927.121885][   T31]  kthread+0x373/0x450
[  927.125946][   T31]  ? __pfx_kthread+0x10/0x10
[  927.130520][   T31]  ret_from_fork+0x730/0xd60
[  927.135091][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  927.140187][   T31]  ? __switch_to+0x800/0x10f0
[  927.144857][   T31]  ? __pfx_kthread+0x10/0x10
[  927.149432][   T31]  ret_from_fork_asm+0x1a/0x30
[  927.154184][   T31]  </TASK>
[  927.157428][   T31] Kernel Offset: disabled
[  927.161741][   T31] Rebooting in 86400 seconds..