last executing test programs:

56.161343061s ago: executing program 1 (id=1378):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000840)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000380)="f8d3ae53a87f3391e37a187b0636c4c8ad0cd3208331d12105f78926f82f9bebe25dc1dda16b5b2a1c98380add74c1472f880b099c937ed762648a2762e9b217859df726a645a8a552662904400cc27f8288a60f6cef7aef0f3049c00e8681709783be5831ef4bed2f4d34530afdff", 0x6f}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20, 0x20040000}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f00000006c0)="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", 0xfc}], 0x2, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x38, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0, r3, r0, r4]}}], 0x50, 0x8000}}], 0x2, 0x10)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r6)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x1ff}}, 0x20, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00')
exit(0x0)
r7 = socket(0x2a, 0x2, 0x0)
connect$bt_rfcomm(r7, &(0x7f0000000100)={0x1f, @none, 0x5}, 0xa)
syz_open_procfs(r6, &(0x7f0000000240)='sched\x00')

55.206188351s ago: executing program 1 (id=1385):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0x1, &(0x7f0000000280)={0x9c09, 0x9}, &(0x7f0000000440))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000840)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="acdcf3e55b1c9fb992bf91e30d2f862d5679cef7fc47647537af6496202b6ba5f2b3c13eb1b043b3a426", 0x2a}, {0x0}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf828}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000000780)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000007c0)}}], 0x3, 0x4800)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000000))
r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40a02)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x10087, 0x0, 0x40})
openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3, 0x101, 0x9, 0xbe25, 0x0, <r4=>0xffffffffffffffff})
fcntl$setownex(r1, 0xf, &(0x7f0000000480)={0x2, r4})
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xe)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a050000000000000000000200ffff0900010073797a300000000008000340000000010c0006400000000000000002140000001400010000000000000000000000000abd1524df8faaf6ae99c07cb461c69cbabbbe2fecc2b5862ffc63ba"], 0x5c}}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0xc, 0x9, 0x301, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0x4}, [@typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000850}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'})

53.99081495s ago: executing program 1 (id=1387):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

53.068609279s ago: executing program 1 (id=1389):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x8083f})
chdir(&(0x7f0000000440)='./bus\x00')
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x3, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x80, 0xfff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdd2503"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080)
capset(0x0, 0x0)
capget(&(0x7f0000000140)={0x20071026, r1}, &(0x7f0000000240)={0x7fffffff, 0x3546, 0x5, 0x0, 0x21d, 0x200})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)

49.803614924s ago: executing program 1 (id=1400):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0) (async)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000003ec0)=[{{&(0x7f0000000440)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000900)=""/167, 0xa7}], 0x8, &(0x7f0000000a40)=""/233, 0xe9}, 0x10}, {{&(0x7f0000000b40)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000bc0)=""/113, 0x71}, {&(0x7f0000000c40)=""/4, 0x4}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/72, 0x48}, {&(0x7f0000001e00)=""/26, 0x1a}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x8}, 0x2}], 0x2, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f0000003ec0)=[{{&(0x7f0000000440)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000900)=""/167, 0xa7}], 0x8, &(0x7f0000000a40)=""/233, 0xe9}, 0x10}, {{&(0x7f0000000b40)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000bc0)=""/113, 0x71}, {&(0x7f0000000c40)=""/4, 0x4}, {&(0x7f0000000c80)=""/212, 0xd4}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/72, 0x48}, {&(0x7f0000001e00)=""/26, 0x1a}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x8}, 0x2}], 0x2, 0x2, 0x0)
timerfd_create(0x8, 0x800)
syz_io_uring_setup(0x1c78, &(0x7f0000001d80)={0x0, 0x0, 0x400, 0x2, 0x156}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x3, 0x2, &(0x7f0000000340)="91941e7061bf9e14621c57b3d041f0d02af052a3faaa72e0600a47cadb14103d4475dd2341f66410a9b795b87a02ef46b24096ac52e35deb84", 0x4, 0x0, 0x0, {0x1}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
r7 = shmat(r6, &(0x7f0000776000/0x4000)=nil, 0x5000)
shmdt(r7) (async)
shmdt(r7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e2, 0xe4b, 0xa20]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x80777, 0x408400)
munlockall() (async)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
dup(r2) (async)
dup(r2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200020c00000b135a8b667e289d3c17e9c90000000000000000000200080008000000ca00000000000000030006000000000002000100000000000000000000000000030005000000000002000000"], 0x60}, 0x1, 0x7}, 0x0)

49.469489414s ago: executing program 1 (id=1402):
r0 = syz_open_procfs(0x0, &(0x7f0000003c00)='task\x00')
fstat(r0, &(0x7f0000000180))
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, 'fowner<'}}]}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x91, 0x56, 0x1, 0x10, 0x12d1, 0x8238, 0x1d7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xff, 0x4, 0x5}}]}}]}}, 0x0)

33.825097182s ago: executing program 32 (id=1402):
r0 = syz_open_procfs(0x0, &(0x7f0000003c00)='task\x00')
fstat(r0, &(0x7f0000000180))
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, 'fowner<'}}]}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x91, 0x56, 0x1, 0x10, 0x12d1, 0x8238, 0x1d7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xff, 0x4, 0x5}}]}}]}}, 0x0)

13.720852256s ago: executing program 0 (id=1492):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r0)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000140)={0x5, 0xffffffff, 0x3})
rt_tgsigqueueinfo(r3, r2, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4})
tkill(r2, 0x21)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0)

12.681141857s ago: executing program 4 (id=1496):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x325081)
r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000003c0)='io.pressure\x00', 0x2, 0x0)
poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x80}, {r0, 0x2000}, {r1, 0xbd7154c2ce076f2}], 0x3, 0x71)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000340))
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
r4 = socket$netlink(0x10, 0x3, 0x0)
msgsnd(0x0, &(0x7f0000000080)={0x2}, 0x8, 0x800)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in=@loopback}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000021c0)=0xe8)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x1a0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper})
shutdown(0xffffffffffffffff, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x7e, 0x9}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r7, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000840)="88", 0x1}], 0x1, &(0x7f0000002940)=[{0x10, 0x1, 0x1}], 0x10}}], 0x2, 0x40002)

10.76807207s ago: executing program 4 (id=1501):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fchdir(0xffffffffffffffff)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0xc, 0xa6, 0x74, 0xfee}, {0x7, 0x3, 0x9, 0x9}]})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0xb, 0x43, 0x0})

10.092719867s ago: executing program 5 (id=1502):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0x9, 0x8002200000000000}, {0x7fff, 0x8, 0x8, 0xc4, 0x2, 0x17, 0xd, 0xf1, 0xa, 0xff, 0x41, 0x7d, 0x9}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0x4, 0x6, 0xb, 0xff, 0x6, 0x1, 0x3, 0x131}]})
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r0)

9.628109217s ago: executing program 4 (id=1505):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x77, 0x541b41)
ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0))
setsockopt$ax25_int(r0, 0x101, 0x2, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
prlimit64(r3, 0xe, &(0x7f0000000200)={0xb, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000440))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000203010300000000000000000c00000809000200fffff6320000000008000540000000080800044000000002080005400000000008000340000080000900020000000007020000000800054000000013"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20000011)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)

9.447340417s ago: executing program 0 (id=1506):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000400))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="99584ba970f8411e8fbe85a491f3c21e11a957a7022e317fd43a4970183382659dab89b957522231d334ddd4374955bf6995aacf0bf74dc5e6d623370a26dd2733b0a39b4754afdcf851bb99d0a2d2fa9bc35d66e161008ebc6a59dd8db27e641493b3d89d027a028648627e13d39c2a99ee6cd2ed13420b594208df7ede40e184c5b7170e20e1ea94046880984a87da0536266df19b5d063d9f919fe20e85fc383d3b568ae076b1bf204144d796227ed04b6a20255e4b047ec1e4", @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000804)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000c00)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES16=r0], 0x20)
accept4(r0, &(0x7f0000000b80)=@generic, &(0x7f0000000100)=0x80, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x301, 0x184)
lseek(r4, 0x12, 0x1)
getdents(r4, 0x0, 0x40)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x301081, 0x0)
r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r8, 0x2007ffa)
r9 = open(&(0x7f0000000440)='./file1\x00', 0x60780, 0x0)
r10 = open(&(0x7f00000004c0)='./bus\x00', 0x185102, 0x64)
sendfile(r9, r10, 0x0, 0x1000000201005)
r11 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x12, &(0x7f0000000200)=<r12=>0x0)
io_submit(r12, 0x4, &(0x7f0000000a00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x3e, r1, &(0x7f0000000a40)="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", 0x12a, 0x80000001, 0x0, 0x3, r11}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0xfff, r5, &(0x7f0000000740)="fc1df355087c03928d375ef7656829920c1dcb9d9bb2878d4b25f8d87225ef6c9fe92c65f40dd9222a0bfddd58784dc33c944f9831f6bd0ac49515bd5a5c5e6a1337f498b425e9416547bbae0eec6f1beff7ce318dae01d9f4822510c43fbabf7d0d69762e62a8f82dd2162a5c1757344a278ed97e70ea7b825ad38c16160f0665f73ac4c01126595c88ab9a152a3ff58fa4a27ed13c604cac071d6ca09286", 0x9f, 0x7, 0x0, 0x3, r8}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000800)="54915f74847d2ca536404f9fb83ba9b859fce349d12f9a3762c5556984adff9b4043f8a503868bf18903ff52c1ca686f0f606b8c8910b1f5a3e6b2a9663dac7402164ccd75949b9b3ee32fcb4e02b895107e45cec753f995c774511564c0cceab53f798622081e493bf3fcb864f457a51467196f16edc07e962780b447b438ca74693d66bdeafd0906e1f471245f3480692897b98a1938ff4eaefdc0ffa8845dcf08b07e091536b17a3e0fa771554472d2e4b3895f18885efa14ff3b60a78aa6b568f8537b10aafa11f8ffcfc2776c712ca169185f9a76cf", 0xd8, 0x6, 0x0, 0x3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000900)="75cb71d80202428e0b57bec7ce8d28f793b7da3698cd5bd72185cb0b9192242aa1b1975094a3baa226229b3e0721cb4fa387648e6d78911ac4083055feb1d259b7e553cd3e1579def0cd57fd5363bfd33da3a83a3a002321577ebc279eb6a4c62dbc2227d4921db3ff7253770165715e942e0db5dbdc291e580130c83e73164d6f660e41d3", 0x85, 0x5, 0x0, 0x1, r11}])
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

8.488751138s ago: executing program 4 (id=1509):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r2], 0x118)
sendmmsg$inet6(r1, &(0x7f0000003c00), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0x0, &(0x7f0000000040))

8.110436048s ago: executing program 4 (id=1512):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$pid(0x3, 0x0, 0x4007)
add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x1000, 0xfffffffffffffffa)
socket$qrtr(0x2a, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r2 = getpid()
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x6, @loopback, 0x4e22, 0x0, 'rr\x00', 0x26, 0x10000, 0x63}, 0x2c)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
syz_emit_vhci(&(0x7f00000192c0)=ANY=[@ANYBLOB="040f040e000704b1495247f6a22c234dced622490e5ea88965a209b58fac4f2485b19f293904afd3f1a8bf4e79873d106483a51448917ab237b04a859db37006904f0000001a627b8d472bd36007198e9dbab91172450cb23665e5479cc1bf49a34b3b9879c381e22eed031ab985d6ad21a64d64e349e2b0c678c387a642adde36f64379527c3f086d89fd3c2827c64c81d115654893d304812689b72b3ed49864372128432a5f2892"], 0x7)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000019380)={'syz0\x00', {0x82, 0x75b, 0x9}, 0x23, [0x7, 0x77, 0x200, 0x4, 0x8001, 0xfffffffb, 0xfffffeff, 0xd993, 0x1, 0xc, 0x0, 0x7, 0x5, 0x100, 0x5, 0xd5, 0x100, 0x4f41, 0x5, 0x3ff, 0x200, 0x8b, 0x7fffffff, 0x6, 0x4, 0x7, 0x2, 0x4, 0xd58, 0x10001, 0x2b, 0x81, 0x81, 0xfffffff8, 0x4a, 0x7f, 0x8, 0xfffffffe, 0x6, 0x0, 0x1, 0x4, 0x10000, 0x4, 0x1ff, 0x80000001, 0xffffff28, 0x2, 0x5, 0x1, 0x80, 0x8000, 0x3, 0x7, 0xffff, 0x4, 0x1, 0x48, 0x8, 0x2, 0xe, 0x100, 0x3, 0x4], [0x8, 0x9, 0x7, 0x2, 0x2, 0xbb, 0x1, 0x4, 0x9, 0xfd, 0x1, 0x5, 0x3, 0x9, 0x8, 0x7, 0x8, 0x80000000, 0x30d, 0x0, 0x2, 0x6, 0xe3, 0x1, 0x4, 0x71a, 0x3ff, 0x5, 0x6, 0x0, 0xe6a9, 0x2, 0xc, 0xc, 0x2, 0x5, 0xffffffff, 0x400, 0x4, 0x31efadc2, 0x5, 0x9c, 0x7, 0x0, 0xc7f2, 0x50d, 0x9, 0x4437c6b7, 0x6, 0xffffffd6, 0xf, 0x2, 0x4, 0xd, 0x1bc, 0xeac, 0x8, 0xdad, 0x7, 0x1ff, 0xa5, 0xfffffffe, 0x0, 0x4], [0x2ed3, 0x8b31, 0x6, 0x30, 0x8, 0x53, 0x2, 0x6, 0x80000001, 0x2, 0x3de2, 0x9, 0x1, 0x1, 0x8001, 0xfffffff5, 0x8, 0x9c11, 0x5, 0xfffffffa, 0x81, 0xdb05, 0xd68, 0xfffffff9, 0x5, 0x0, 0x2, 0x3, 0x4c, 0x9ed7, 0x2, 0x100, 0x6, 0x8001, 0x400, 0xffff, 0x8000, 0x7, 0x0, 0x5, 0x9, 0x1000000, 0x0, 0x5, 0xef, 0x5, 0x1, 0x0, 0x90, 0x101, 0x401, 0xfffffe00, 0xc6, 0x8001, 0xea, 0x0, 0x1ff, 0x3, 0x7, 0x7f, 0x0, 0x0, 0x9, 0x15], [0xa, 0x0, 0x0, 0x8, 0x1, 0x3, 0x9, 0x3, 0xffff, 0x7, 0x3, 0x1, 0x8, 0x1, 0x6, 0x2463ae3f, 0x1, 0x3ff, 0x3, 0x0, 0x2, 0x6, 0x8, 0x0, 0x8, 0x1, 0x3, 0x4, 0x8, 0x7, 0x7f, 0x9, 0x0, 0x340, 0x8, 0x81, 0x5, 0x1000, 0xfff, 0x0, 0xea, 0x10001, 0x9, 0x3, 0xd7, 0x5, 0x7, 0x80000000, 0xffff, 0x0, 0x25bd, 0x4f, 0x4, 0x1ff, 0xa6d, 0x6, 0x9, 0x100, 0x2, 0x1, 0x1, 0x8f, 0x4, 0x8]}, 0x45c)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)

6.802337748s ago: executing program 5 (id=1513):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x80a0000, 0xb, 0xfefffff9, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x7, '\x00', 0x4b}, {0x11, 0x7, 0x7, '\x00', 0xd6}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x5, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xd, 0xa, 0x6f, '\x00', 0x6}, {0x11, 0x90, 0x4, '\x00', 0xe9}, {0x8, 0x6, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x5}, {0x8, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x20, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x9, 0xfe, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x8, 0x54, '\x00', 0xbf}, {0x1, 0x4, 0x3, '\x00', 0x6}, {0xd, 0x40, 0x2, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x1, 0x6, 0xfa, '\x00', 0x40}]}})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)

6.531478996s ago: executing program 3 (id=1514):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0xfffffffffffffffa)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x495b, 0x4) (async)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket(0x10, 0x6, 0x6) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)

5.39626641s ago: executing program 2 (id=1515):
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000200)=0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2400e878925fc5948aa200002100010000000000000000000a14180000000000000101620000080015800400"], 0x24}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28)
setresgid(r1, r1, r1)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f00000001c0))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0x80049363, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1})
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r8, &(0x7f00000000c0), 0x10)
r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write(r9, 0x0, 0x0)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
recvfrom$l2tp(r8, 0x0, 0x0, 0x40000020, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000480)={'ip_vti0\x00', <r10=>0x0, 0x40, 0x700, 0x8, 0x1, {{0x2e, 0x4, 0x0, 0x9, 0xb8, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast1, {[@lsrr={0x83, 0x1f, 0x46, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @empty]}, @timestamp={0x44, 0x18, 0x28, 0x0, 0x3, [0x400, 0x2, 0x6, 0xd9, 0x5]}, @noop, @cipso={0x86, 0x1e, 0x1, [{0x6, 0xd, "fc3761ea82d698e06c4d48"}, {0x5, 0x9, "144f0cefbf48bf"}, {0x2, 0x2}]}, @lsrr={0x83, 0x13, 0xab, [@loopback, @multicast1, @local, @loopback]}, @cipso={0x86, 0x23, 0x3, [{0x5, 0x12, "d9cdee7db6e855777aa613f665c9d7ae"}, {0x6, 0xb, "a08a83f655ce60a30f"}]}, @noop, @timestamp_prespec={0x44, 0x14, 0xca, 0x3, 0x3, [{@broadcast, 0x7}, {@broadcast, 0x3}]}]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d80600001200000126bd0000fbdbdf250000", @ANYRES32=r10, @ANYBLOB="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"], 0x6d8}, 0x1, 0x0, 0x0, 0x74}, 0x4000)

5.38609335s ago: executing program 0 (id=1516):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x6f, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa041, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200fffffc00ffff000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

5.349946315s ago: executing program 3 (id=1517):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socket$inet6(0xa, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0)

5.347835648s ago: executing program 5 (id=1518):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0xffffffffffffffff, 0xff87)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r4, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, &(0x7f00000001c0)='discard')
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000040)={0x7, @raw_data="366d950866d5f8c7e0cddeaefa89bfa4d4b0d485678f1cd22d01a38b58702c68a870c0bf981dc1f0646b69ab3c4f433e2319c5b1e68dd10d4aba25c453d6252205cac8db10ec6753a5235d5b803fd9234016261fdbe20270a0373c28652489e56de8c9485f324d5f4dbe7b9ced8bfa517fafa639b486e31f050a9c669b7006cfe5a6df34c18ccac32642aac84a59ebd7c179feb20199029ef30d1d84f1385a53b46c79e66de771e25fec0afc4fc6ead5687126e5d5dca70cde02d283bf6f1ee40639cb9f98c33605"})
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x54, 0x12, 0x905, 0x70bd26, 0x25dfdbfd, {0xa, 0x9, 0x4, 0x0, {0x4e24, 0x4e23, [0xfffffffb, 0x924, 0x6, 0x6], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x10000, 0x1000]}, 0x6, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d6caecf"}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000001}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})

4.176770717s ago: executing program 5 (id=1519):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x77, 0x541b41)
ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0))
setsockopt$ax25_int(r0, 0x101, 0x2, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
prlimit64(r3, 0xe, &(0x7f0000000200)={0xb, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000440))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000203010300000000000000000c00000809000200fffff6320000000008000540000000080800044000000002080005400000000008000340000080000900020000000007020000000800054000000013"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20000011)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)

3.618016733s ago: executing program 2 (id=1520):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.616851443s ago: executing program 3 (id=1521):
listen(0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x1f00)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r6, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x400)
ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000001c0)={0x1, 0x1, {r1}, {r6}, 0x9, 0xe})
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r7, 0x0)

3.525086748s ago: executing program 0 (id=1522):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r2], 0x118)
sendmmsg$inet6(r1, &(0x7f0000003c00), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0x0, &(0x7f0000000040))

3.328589933s ago: executing program 2 (id=1523):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@struct={0xa, 0x3, 0x0, 0x4, 0x1, 0x40, [{0xf, 0x4, 0x6}, {0x8, 0x0, 0x100}, {0xc, 0x0, 0x1}]}, @func={0xe, 0x0, 0x0, 0xc, 0x1}, @var={0x40000a, 0x0, 0x0, 0xe, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0x6}, @enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x1000}, {0xf, 0x6}, {0x80000f, 0x10}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x42, 0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000380)=""/107, 0xac, 0x6b, 0xffffffff, 0x0, 0x10000}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = socket(0x10, 0x80003, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe)
listen(r6, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e)
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002)
r8 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x1, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000500)={0x1, 0x0, {0x0, 0x8, 0x3013, 0x5, 0x1, 0x1, 0x5, 0x2}})

3.255581469s ago: executing program 5 (id=1524):
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2.705299256s ago: executing program 5 (id=1525):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4014)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f00000002c0)}}, &(0x7f00000001c0)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r2, 0x3)
accept4$bt_l2cap(r2, 0x0, 0x0, 0x80800)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x100000)
ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0)

2.562945909s ago: executing program 3 (id=1526):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000900)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853")
ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000000c0)={&(0x7f0000000180)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590f", 0x28})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118)
sync_file_range(r5, 0x0, 0x3, 0x6)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x88fd537e5c114b6e, 0x11, r5, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x800, @none, 0x69, 0x1}, 0xe)
open(&(0x7f0000000100)='./bus\x00', 0x1c5d7d, 0x0)
mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x6040a, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x4, 0x14)

1.817056491s ago: executing program 0 (id=1527):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4)

1.813803302s ago: executing program 2 (id=1528):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
listen(r2, 0x5)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_int(r9, 0x29, 0x49, &(0x7f0000000740)=0x9, 0x4)
listen(r9, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
ptrace(0x4206, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r5, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r6, 0x4be7, 0x4c3, 0x43, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r10=>0x0})
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x29, 0x0, &(0x7f0000006000)=0x11e)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r10, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004)

1.172648181s ago: executing program 2 (id=1529):
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000050)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.168585028s ago: executing program 4 (id=1530):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x20, 0x8, 0x1e, "5c5df6b7c3baad189a01b33b13538623a03dbd693b1614b77c0a50593782"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
bind$pptp(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = socket(0x2, 0x2, 0x1)
bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e)
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)

1.129331536s ago: executing program 3 (id=1531):
openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socket$inet6(0xa, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0)

294.235396ms ago: executing program 2 (id=1532):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x20, 0x8, 0x1e, "5c5df6b7c3baad189a01b33b13538623a03dbd693b1614b77c0a50593782"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
bind$pptp(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = socket(0x2, 0x2, 0x1)
bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e)
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)

238.872588ms ago: executing program 3 (id=1533):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, <r5=>0x0}, 0xffffffffffffff50)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x1fd, &(0x7f0000000480)=<r7=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fstat(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(0x0, r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = getpgid(0x0)
fcntl$setownex(r10, 0xf, &(0x7f0000000140)={0x2, r11})
sendmmsg$unix(r9, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015)
io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r6, &(0x7f00000000c0)='!', 0xb7f40}])
dup3(r6, r4, 0x80000)

0s ago: executing program 0 (id=1534):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x77, 0x541b41)
ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0))
setsockopt$ax25_int(r0, 0x101, 0x2, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
prlimit64(r3, 0xe, &(0x7f0000000200)={0xb, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000440))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000203010300000000000000000c00000809000200fffff6320000000008000540000000080800044000000002080005400000000008000340000080000900020000000007020000000800054000000013"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20000011)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)

kernel console output (not intermixed with test programs):

764491736.340:871): avc:  denied  { open } for  pid=9975 comm="syz.3.1058" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  419.339697][    C0] vkms_vblank_simulate: vblank timer overrun
[  419.459206][   T30] audit: type=1400 audit(1764491736.350:872): avc:  denied  { mounton } for  pid=9975 comm="syz.3.1058" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  419.732689][   T30] audit: type=1400 audit(1764491736.450:873): avc:  denied  { sqpoll } for  pid=9973 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  420.032983][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  420.145185][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  421.171948][T10013] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  421.481205][   T30] audit: type=1400 audit(1764491738.620:874): avc:  denied  { mount } for  pid=10019 comm="syz.0.1064" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  421.613624][   T30] audit: type=1400 audit(1764491738.620:875): avc:  denied  { module_request } for  pid=10019 comm="syz.0.1064" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  421.654631][   T30] audit: type=1400 audit(1764491738.680:876): avc:  denied  { unmount } for  pid=10019 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  422.660639][T10028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  422.885999][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  423.632574][ T5891] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  423.801143][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  423.832337][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  423.861285][ T5891] usb 2-1: config 0 has no interface number 0
[  423.867616][ T5891] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.880827][   T30] audit: type=1400 audit(1764491741.060:877): avc:  denied  { listen } for  pid=10032 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  423.921718][ T5891] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.953941][   T30] audit: type=1400 audit(1764491741.060:878): avc:  denied  { accept } for  pid=10032 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  423.974147][ T5891] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  424.062116][   T24] usb 5-1: Using ep0 maxpacket: 32
[  424.146263][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.167064][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  424.269709][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.335954][ T5891] usb 2-1: config 0 descriptor??
[  424.371858][   T24] usb 5-1: config 0 descriptor??
[  424.590640][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  424.640983][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  424.671671][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  424.697333][   T24] usb 5-1: media controller created
[  424.760309][ T5891] prodikeys 0003:041E:2801.0011: unknown main item tag 0x3
[  424.780022][ T5891] prodikeys 0003:041E:2801.0011: unknown main item tag 0x7
[  424.812051][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  424.820828][ T5891] prodikeys 0003:041E:2801.0011: item fetching failed at offset 5/7
[  424.834286][ T5891] prodikeys 0003:041E:2801.0011: hid parse failed
[  424.851193][ T5891] prodikeys 0003:041E:2801.0011: probe with driver prodikeys failed with error -22
[  424.957293][   T30] audit: type=1400 audit(1764491742.120:879): avc:  denied  { create } for  pid=10045 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  424.991698][   T24] DVB: Unable to find symbol dib7000p_attach()
[  425.012759][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  425.192533][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  425.204337][   T24] Registered IR keymap rc-empty
[  425.213399][   T24] dvb-usb: could not initialize remote control.
[  425.705799][T10051] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  425.900013][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[  426.277291][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  426.309611][   T24] usb 5-1: USB disconnect, device number 26
[  426.387864][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  426.395455][ T5940] usb 2-1: USB disconnect, device number 37
[  426.688617][T10057] tmpfs: Bad value for 'mpol'
[  426.745654][   T30] audit: type=1400 audit(1764491743.920:880): avc:  denied  { create } for  pid=10058 comm="syz.1.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  427.828767][T10074] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  427.848376][T10074] FAULT_INJECTION: forcing a failure.
[  427.848376][T10074] name failslab, interval 1, probability 0, space 0, times 0
[  427.891895][T10074] CPU: 1 UID: 0 PID: 10074 Comm: syz.4.1079 Not tainted syzkaller #0 PREEMPT(full) 
[  427.891923][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  427.891936][T10074] Call Trace:
[  427.891942][T10074]  <TASK>
[  427.891950][T10074]  dump_stack_lvl+0x16c/0x1f0
[  427.891973][T10074]  should_fail_ex+0x512/0x640
[  427.891995][T10074]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  427.892022][T10074]  should_failslab+0xc2/0x120
[  427.892045][T10074]  kmem_cache_alloc_noprof+0x75/0x6e0
[  427.892073][T10074]  ? skb_clone+0x190/0x3f0
[  427.892103][T10074]  ? skb_clone+0x190/0x3f0
[  427.892125][T10074]  skb_clone+0x190/0x3f0
[  427.892156][T10074]  netlink_deliver_tap+0xabd/0xd30
[  427.892187][T10074]  netlink_unicast+0x64c/0x870
[  427.892215][T10074]  ? __pfx_netlink_unicast+0x10/0x10
[  427.892249][T10074]  netlink_sendmsg+0x8c8/0xdd0
[  427.892278][T10074]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.892317][T10074]  ____sys_sendmsg+0xa98/0xc70
[  427.892338][T10074]  ? copy_msghdr_from_user+0x10a/0x160
[  427.892362][T10074]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.892396][T10074]  ___sys_sendmsg+0x134/0x1d0
[  427.892422][T10074]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.892474][T10074]  ? __pfx_vfs_write+0x10/0x10
[  427.892506][T10074]  ? do_sys_openat2+0x157/0x1d0
[  427.892534][T10074]  __sys_sendmsg+0x16d/0x220
[  427.892558][T10074]  ? __pfx___sys_sendmsg+0x10/0x10
[  427.892601][T10074]  do_syscall_64+0xcd/0xfa0
[  427.892621][T10074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.892639][T10074] RIP: 0033:0x7fa86cf8f749
[  427.892654][T10074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.892671][T10074] RSP: 002b:00007fa86deb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.892687][T10074] RAX: ffffffffffffffda RBX: 00007fa86d1e5fa0 RCX: 00007fa86cf8f749
[  427.892698][T10074] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  427.892709][T10074] RBP: 00007fa86deb7090 R08: 0000000000000000 R09: 0000000000000000
[  427.892719][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.892728][T10074] R13: 00007fa86d1e6038 R14: 00007fa86d1e5fa0 R15: 00007fffe8a153a8
[  427.892755][T10074]  </TASK>
[  428.688242][   T30] audit: type=1400 audit(1764491745.850:881): avc:  denied  { setcheckreqprot } for  pid=10079 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  428.972593][   T30] audit: type=1400 audit(1764491745.890:882): avc:  denied  { name_bind } for  pid=10083 comm="syz.4.1082" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  428.996370][   T30] audit: type=1400 audit(1764491745.900:883): avc:  denied  { getopt } for  pid=10083 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  429.083816][T10088] FAULT_INJECTION: forcing a failure.
[  429.083816][T10088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.123013][T10088] CPU: 1 UID: 0 PID: 10088 Comm: syz.0.1075 Not tainted syzkaller #0 PREEMPT(full) 
[  429.123040][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  429.123050][T10088] Call Trace:
[  429.123057][T10088]  <TASK>
[  429.123064][T10088]  dump_stack_lvl+0x16c/0x1f0
[  429.123087][T10088]  should_fail_ex+0x512/0x640
[  429.123114][T10088]  _copy_from_user+0x2e/0xd0
[  429.123138][T10088]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[  429.123163][T10088]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  429.123194][T10088]  do_ipv6_setsockopt+0x86e/0x44b0
[  429.123219][T10088]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  429.123239][T10088]  ? avc_has_perm_noaudit+0x117/0x3b0
[  429.123269][T10088]  ? avc_has_perm_noaudit+0x149/0x3b0
[  429.123296][T10088]  ? avc_has_perm+0x144/0x1f0
[  429.123321][T10088]  ? __pfx_avc_has_perm+0x10/0x10
[  429.123355][T10088]  ? get_pid_task+0x106/0x250
[  429.123376][T10088]  ? proc_fail_nth_write+0x9f/0x220
[  429.123402][T10088]  ? sock_has_perm+0x259/0x2f0
[  429.123428][T10088]  ? __pfx_sock_has_perm+0x10/0x10
[  429.123455][T10088]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  429.123477][T10088]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  429.123506][T10088]  ? ipv6_setsockopt+0xcb/0x170
[  429.123525][T10088]  ipv6_setsockopt+0xcb/0x170
[  429.123548][T10088]  tcp_setsockopt+0xa7/0x100
[  429.123572][T10088]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  429.123602][T10088]  do_sock_setsockopt+0xf3/0x1d0
[  429.123632][T10088]  __sys_setsockopt+0x1a0/0x230
[  429.123659][T10088]  __x64_sys_setsockopt+0xbd/0x160
[  429.123680][T10088]  ? do_syscall_64+0x91/0xfa0
[  429.123695][T10088]  ? lockdep_hardirqs_on+0x7c/0x110
[  429.123711][T10088]  do_syscall_64+0xcd/0xfa0
[  429.123730][T10088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.123750][T10088] RIP: 0033:0x7f07f618f749
[  429.123765][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.123780][T10088] RSP: 002b:00007f07f43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  429.123798][T10088] RAX: ffffffffffffffda RBX: 00007f07f63e5fa0 RCX: 00007f07f618f749
[  429.123810][T10088] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  429.123820][T10088] RBP: 00007f07f43f6090 R08: 00000000000003d0 R09: 0000000000000000
[  429.123831][T10088] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001
[  429.123841][T10088] R13: 00007f07f63e6038 R14: 00007f07f63e5fa0 R15: 00007ffe61313078
[  429.123868][T10088]  </TASK>
[  430.474553][T10099] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  430.668874][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'.
[  431.150338][   T30] audit: type=1400 audit(1764491748.320:884): avc:  denied  { create } for  pid=10106 comm="syz.1.1088" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  431.217641][   T30] audit: type=1400 audit(1764491748.320:885): avc:  denied  { write } for  pid=10106 comm="syz.1.1088" name="file0" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  431.240051][    C0] vkms_vblank_simulate: vblank timer overrun
[  431.311628][   T30] audit: type=1400 audit(1764491748.320:886): avc:  denied  { open } for  pid=10106 comm="syz.1.1088" path="/219/file0" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  431.350247][   T30] audit: type=1400 audit(1764491748.360:887): avc:  denied  { unlink } for  pid=5806 comm="syz-executor" name="file0" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  431.372872][    C0] vkms_vblank_simulate: vblank timer overrun
[  431.880031][T10110] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  432.088265][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'.
[  433.037879][T10116] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  433.633738][   T30] audit: type=1400 audit(1764491750.800:888): avc:  denied  { create } for  pid=10108 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  433.767771][   T30] audit: type=1400 audit(1764491750.920:889): avc:  denied  { create } for  pid=10108 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  433.952268][   T30] audit: type=1400 audit(1764491750.920:890): avc:  denied  { bind } for  pid=10108 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  433.971670][    C0] vkms_vblank_simulate: vblank timer overrun
[  434.352371][   T30] audit: type=1400 audit(1764491750.920:891): avc:  denied  { listen } for  pid=10108 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  434.371968][    C0] vkms_vblank_simulate: vblank timer overrun
[  434.506549][   T30] audit: type=1400 audit(1764491750.920:892): avc:  denied  { accept } for  pid=10108 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  434.562395][   T30] audit: type=1400 audit(1764491751.150:893): avc:  denied  { read write } for  pid=10119 comm="syz.3.1092" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  434.732575][   T30] audit: type=1400 audit(1764491751.150:894): avc:  denied  { open } for  pid=10119 comm="syz.3.1092" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  434.756129][    C0] vkms_vblank_simulate: vblank timer overrun
[  434.881727][   T30] audit: type=1400 audit(1764491751.260:895): avc:  denied  { ioctl } for  pid=10119 comm="syz.3.1092" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  434.906813][    C0] vkms_vblank_simulate: vblank timer overrun
[  435.061750][   T30] audit: type=1400 audit(1764491751.260:896): avc:  denied  { create } for  pid=10119 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  435.172510][   T30] audit: type=1400 audit(1764491751.260:897): avc:  denied  { ioctl } for  pid=10119 comm="syz.3.1092" path="socket:[32006]" dev="sockfs" ino=32006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  435.257645][   T30] audit: type=1400 audit(1764491751.260:898): avc:  denied  { bind } for  pid=10119 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  435.329241][   T30] audit: type=1400 audit(1764491751.260:899): avc:  denied  { create } for  pid=10119 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  435.411562][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'.
[  435.420619][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'.
[  435.472260][   T30] audit: type=1400 audit(1764491752.600:900): avc:  denied  { create } for  pid=10130 comm="syz.0.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  435.657079][ T6045] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.675571][ T6045] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.684570][ T6045] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.693474][ T6045] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.772276][ T5891] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  437.790200][T10148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1100'.
[  437.945745][ T5891] usb 1-1: Using ep0 maxpacket: 32
[  437.966138][ T5891] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  437.979234][ T5891] usb 1-1: config 0 has no interface number 0
[  438.343580][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054e6ac00: rx timeout, send abort
[  438.353692][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805588d400: rx timeout, send abort
[  438.362258][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054e6ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  438.378044][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805588d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  438.595926][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'.
[  439.236512][ T5910] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  439.258840][ T5891] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  439.273781][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.459125][ T5891] usb 1-1: Product: syz
[  439.464519][ T5891] usb 1-1: Manufacturer: syz
[  439.469662][ T5891] usb 1-1: SerialNumber: syz
[  439.521762][ T5891] usb 1-1: config 0 descriptor??
[  439.547287][ T5910] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.693690][ T5891] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  439.722600][ T5910] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.732857][ T5891] usb 1-1: qt2_attach - failed to power on unit: -71
[  439.773037][ T5891] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  439.784297][ T5910] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.826752][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0
[  439.826796][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  439.840068][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  439.852306][ T5910] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  439.864922][ T5891] usb 1-1: USB disconnect, device number 32
[  439.905417][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.934817][ T5910] usb 2-1: config 0 descriptor??
[  440.174039][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  440.174060][   T30] audit: type=1400 audit(1764491757.340:916): avc:  denied  { getopt } for  pid=10146 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  440.230267][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.355780][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.951467][ T5910] usbhid 2-1:0.0: can't add hid device: -71
[  440.975038][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  441.075298][ T5910] usb 2-1: USB disconnect, device number 38
[  441.223777][   T30] audit: type=1400 audit(1764491758.390:917): avc:  denied  { append } for  pid=10178 comm="syz.0.1110" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  441.230174][T10180] random: crng reseeded on system resumption
[  441.898943][   T30] audit: type=1400 audit(1764491758.400:918): avc:  denied  { open } for  pid=10178 comm="syz.0.1110" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  442.959942][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[  447.381487][   T30] audit: type=1400 audit(1764491764.510:919): avc:  denied  { execute } for  pid=10216 comm="syz.1.1119" dev="hugetlbfs" ino=31273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  447.636614][   T30] audit: type=1400 audit(1764491764.510:920): avc:  denied  { execute_no_trans } for  pid=10216 comm="syz.1.1119" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=31273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  448.369273][   T30] audit: type=1400 audit(1764491764.900:921): avc:  denied  { create } for  pid=10224 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  448.389466][    C0] vkms_vblank_simulate: vblank timer overrun
[  448.393106][T10225] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  448.429090][T10225] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  448.458268][   T30] audit: type=1400 audit(1764491764.900:922): avc:  denied  { write } for  pid=10224 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  448.572390][   T30] audit: type=1400 audit(1764491765.700:923): avc:  denied  { read } for  pid=10224 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  449.248397][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'.
[  449.638800][   T30] audit: type=1400 audit(1764491765.700:924): avc:  denied  { connect } for  pid=10224 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  449.673631][   T30] audit: type=1400 audit(1764491766.850:925): avc:  denied  { read } for  pid=10224 comm="syz.3.1122" path="socket:[32329]" dev="sockfs" ino=32329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  450.501846][   T30] audit: type=1400 audit(1764491767.670:926): avc:  denied  { sys_module } for  pid=10242 comm="syz.2.1115" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  450.522929][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.596746][   T30] audit: type=1400 audit(1764491767.770:927): avc:  denied  { name_bind } for  pid=10242 comm="syz.2.1115" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  450.736529][   T30] audit: type=1800 audit(1764491767.900:928): pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.1115" name="/newroot/221/file0" dev="tmpfs" ino=1176 res=0 errno=0
[  450.759900][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.924279][T10256] ptrace attach of "./syz-executor exec"[5807] was attempted by ""[10256]
[  450.934054][T10256] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1128'.
[  451.166822][T10258] binder: 10257:10258 unknown command 0
[  451.173542][T10258] binder: 10257:10258 ioctl c0306201 200000000080 returned -22
[  451.198496][T10258] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1129'.
[  451.362640][T10261] could not allocate digest TFM handle hmac(sha256-neon)
[  454.557640][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  454.557654][   T30] audit: type=1400 audit(1764491771.730:934): avc:  denied  { ioctl } for  pid=10280 comm="syz.1.1136" path="socket:[32410]" dev="sockfs" ino=32410 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  454.696091][T10293] netlink: 'syz.0.1133': attribute type 4 has an invalid length.
[  454.704000][T10293] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1133'.
[  455.027226][   T30] audit: type=1400 audit(1764491771.770:935): avc:  denied  { read } for  pid=10280 comm="syz.1.1136" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  455.670050][   T30] audit: type=1400 audit(1764491771.770:936): avc:  denied  { open } for  pid=10280 comm="syz.1.1136" path="/230/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  457.540501][T10310] FAULT_INJECTION: forcing a failure.
[  457.540501][T10310] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.553663][T10310] CPU: 1 UID: 0 PID: 10310 Comm: syz.1.1140 Not tainted syzkaller #0 PREEMPT(full) 
[  457.553679][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  457.553687][T10310] Call Trace:
[  457.553691][T10310]  <TASK>
[  457.553695][T10310]  dump_stack_lvl+0x16c/0x1f0
[  457.553711][T10310]  should_fail_ex+0x512/0x640
[  457.553727][T10310]  _copy_from_user+0x2e/0xd0
[  457.553742][T10310]  __sys_bpf+0x248/0x4980
[  457.553761][T10310]  ? __pfx___sys_bpf+0x10/0x10
[  457.553776][T10310]  ? find_held_lock+0x2b/0x80
[  457.553793][T10310]  ? find_held_lock+0x2b/0x80
[  457.553809][T10310]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  457.553830][T10310]  ? fput+0x9b/0xd0
[  457.553844][T10310]  ? ksys_write+0x1ac/0x250
[  457.553854][T10310]  ? __pfx_ksys_write+0x10/0x10
[  457.553867][T10310]  __x64_sys_bpf+0x78/0xc0
[  457.553877][T10310]  ? lockdep_hardirqs_on+0x7c/0x110
[  457.553892][T10310]  do_syscall_64+0xcd/0xfa0
[  457.553904][T10310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.553915][T10310] RIP: 0033:0x7f82ac18f749
[  457.553926][T10310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.553936][T10310] RSP: 002b:00007f82acfa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  457.553947][T10310] RAX: ffffffffffffffda RBX: 00007f82ac3e5fa0 RCX: 00007f82ac18f749
[  457.553954][T10310] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[  457.553961][T10310] RBP: 00007f82acfa4090 R08: 0000000000000000 R09: 0000000000000000
[  457.553968][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.553974][T10310] R13: 00007f82ac3e6038 R14: 00007f82ac3e5fa0 R15: 00007ffdc62d1b08
[  457.553990][T10310]  </TASK>
[  458.522517][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  459.124573][ T5940] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  459.818815][    T9] usb 5-1: Using ep0 maxpacket: 32
[  459.848603][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.852648][T10333] vivid-000: kernel_thread() failed
[  460.060874][    T9] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  460.074057][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.109484][    T9] usb 5-1: config 4 has no interface number 0
[  460.115833][ T5940] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  460.222758][    T9] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.234507][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.243393][    T9] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.254421][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  460.264089][ T5940] usb 3-1: config 0 descriptor??
[  460.272835][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.315937][    T9] hub 5-1:4.128: USB hub found
[  460.622407][    T9] hub 5-1:4.128: 2 ports detected
[  460.628503][    T9] hub 5-1:4.128: Using single TT (err -22)
[  460.856743][   T30] audit: type=1400 audit(1764491777.980:937): avc:  denied  { mount } for  pid=10321 comm="syz.2.1143" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  461.081019][T10319] Sensor B: =================  START STATUS  =================
[  461.106703][T10319] Sensor B: Test Pattern: 75% Colorbar
[  461.137531][T10319] Sensor B: Show Information: All
[  461.182380][T10319] Sensor B: Vertical Flip: false
[  461.187774][T10319] Sensor B: Horizontal Flip: false
[  461.193229][T10319] Sensor B: Brightness: 128
[  461.201477][T10319] Sensor B: Contrast: 128
[  461.221483][T10319] Sensor B: Hue: 0
[  461.226502][T10319] Sensor B: Saturation: 128
[  461.233799][T10319] Sensor B: ==================  END STATUS  ==================
[  461.898252][    T9] hub 5-1:4.128: hub_hub_status failed (err = -32)
[  461.952028][    T9] hub 5-1:4.128: config failed, can't get hub status (err -32)
[  462.138520][ T5940] usbhid 3-1:0.0: can't add hid device: -71
[  462.151129][   T30] audit: type=1400 audit(1764491779.310:938): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  462.170959][    C0] vkms_vblank_simulate: vblank timer overrun
[  462.177166][ T5940] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  462.219116][ T5940] usb 3-1: USB disconnect, device number 21
[  462.478125][   T30] audit: type=1400 audit(1764491779.650:939): avc:  denied  { create } for  pid=10355 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  462.553327][    T9] usb 5-1: USB disconnect, device number 27
[  463.019898][   T30] audit: type=1400 audit(1764491780.190:940): avc:  denied  { mount } for  pid=10352 comm="syz.2.1152" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  463.190544][   T30] audit: type=1400 audit(1764491780.360:941): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  463.242307][ T5940] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  463.923084][T10373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  463.984767][ T5930] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  464.043177][T10377] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  464.072228][ T5940] usb 2-1: Using ep0 maxpacket: 32
[  464.087048][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'.
[  464.109954][ T5940] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  464.135576][ T5940] usb 2-1: config 0 has no interface number 0
[  464.152845][ T5930] usb 1-1: Using ep0 maxpacket: 16
[  464.163557][ T5940] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  464.174099][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.190032][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.198552][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.202500][T10380] FAULT_INJECTION: forcing a failure.
[  464.202500][T10380] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.209444][ T5940] usb 2-1: Product: syz
[  464.226521][ T5930] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  464.235888][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.241416][T10380] CPU: 1 UID: 0 PID: 10380 Comm: syz.4.1161 Not tainted syzkaller #0 PREEMPT(full) 
[  464.241442][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  464.241454][T10380] Call Trace:
[  464.241461][T10380]  <TASK>
[  464.241467][T10380]  dump_stack_lvl+0x16c/0x1f0
[  464.241491][T10380]  should_fail_ex+0x512/0x640
[  464.241517][T10380]  _copy_from_user+0x2e/0xd0
[  464.241541][T10380]  video_usercopy+0xee2/0x1720
[  464.241561][T10380]  ? __pfx___video_do_ioctl+0x10/0x10
[  464.241590][T10380]  ? selinux_kernel_read_file+0x70/0x130
[  464.241611][T10380]  ? __pfx_video_usercopy+0x10/0x10
[  464.241670][T10380]  v4l2_ioctl+0x1bd/0x250
[  464.241695][T10380]  ? __pfx_v4l2_ioctl+0x10/0x10
[  464.241721][T10380]  __x64_sys_ioctl+0x18e/0x210
[  464.241750][T10380]  do_syscall_64+0xcd/0xfa0
[  464.241770][T10380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.241789][T10380] RIP: 0033:0x7fa86cf8f749
[  464.241804][T10380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.241821][T10380] RSP: 002b:00007fa86deb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  464.241839][T10380] RAX: ffffffffffffffda RBX: 00007fa86d1e5fa0 RCX: 00007fa86cf8f749
[  464.241851][T10380] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003
[  464.241863][T10380] RBP: 00007fa86deb7090 R08: 0000000000000000 R09: 0000000000000000
[  464.241874][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.241884][T10380] R13: 00007fa86d1e6038 R14: 00007fa86d1e5fa0 R15: 00007fffe8a153a8
[  464.241911][T10380]  </TASK>
[  464.290946][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'.
[  464.415507][ T5940] usb 2-1: Manufacturer: syz
[  464.420147][ T5940] usb 2-1: SerialNumber: syz
[  464.430047][T10383] trusted_key: encrypted_key: insufficient parameters specified
[  464.442287][ T5940] usb 2-1: config 0 descriptor??
[  464.452419][   T30] audit: type=1400 audit(1764491781.620:942): avc:  denied  { append } for  pid=10382 comm="syz.4.1162" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  464.465241][ T5940] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  464.496511][ T5930] usb 1-1: config 0 descriptor??
[  464.696110][T10385] netlink: 'syz.3.1158': attribute type 7 has an invalid length.
[  464.704610][ T5940] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  464.803250][ T5940] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  465.009265][ T5930] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  465.033746][ T5930] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  465.050669][ T5930] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  465.058169][ T5930] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  465.070361][ T5930] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  465.120458][ T5930] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  465.182910][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  465.190802][ T1205] usb 2-1: USB disconnect, device number 39
[  465.208921][ T1205] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  465.256760][ T5930] usb 1-1: USB disconnect, device number 33
[  465.272885][ T1205] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  465.304534][ T5940] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  465.338904][ T1205] quatech2 2-1:0.51: device disconnected
[  465.462510][ T5940] usb 5-1: Using ep0 maxpacket: 8
[  465.473576][ T5940] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  465.485463][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.510243][ T5940] usb 5-1: config 0 descriptor??
[  465.854391][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.935889][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.962318][ T5940] usb 5-1: string descriptor 0 read error: -71
[  465.968569][ T5940] uvcvideo 5-1:0.0: Found multiple Units with ID 1
[  466.009925][ T5940] uvcvideo 5-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  466.024574][ T5940] uvcvideo 5-1:0.0: No valid video chain found.
[  466.242247][ T5940] usb 5-1: USB disconnect, device number 28
[  466.489218][   T30] audit: type=1400 audit(1764491783.660:943): avc:  denied  { wake_alarm } for  pid=10399 comm="syz.3.1167" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  466.587666][   T30] audit: type=1400 audit(1764491783.760:944): avc:  denied  { create } for  pid=10402 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  466.793612][   T30] audit: type=1400 audit(1764491783.920:945): avc:  denied  { kexec_image_load } for  pid=10399 comm="syz.3.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  466.996651][   T24] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  468.084525][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.317873][   T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  468.319003][   T30] audit: type=1400 audit(1764491785.240:946): avc:  denied  { connect } for  pid=10414 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  468.408169][   T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  468.417891][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.447285][   T24] usb 2-1: Product: syz
[  468.461731][   T24] usb 2-1: Manufacturer: syz
[  468.500697][   T24] usb 2-1: SerialNumber: syz
[  468.516268][   T24] usb 2-1: config 0 descriptor??
[  468.565168][T10422] FAULT_INJECTION: forcing a failure.
[  468.565168][T10422] name failslab, interval 1, probability 0, space 0, times 0
[  468.609267][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.2.1174 Not tainted syzkaller #0 PREEMPT(full) 
[  468.609299][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  468.609311][T10422] Call Trace:
[  468.609318][T10422]  <TASK>
[  468.609325][T10422]  dump_stack_lvl+0x16c/0x1f0
[  468.609349][T10422]  should_fail_ex+0x512/0x640
[  468.609371][T10422]  ? __kmalloc_cache_noprof+0x5f/0x780
[  468.609401][T10422]  should_failslab+0xc2/0x120
[  468.609424][T10422]  __kmalloc_cache_noprof+0x72/0x780
[  468.609449][T10422]  ? qnx6_init_fs_context+0x3f/0xd0
[  468.609480][T10422]  ? __pfx_qnx6_init_fs_context+0x10/0x10
[  468.609506][T10422]  ? qnx6_init_fs_context+0x3f/0xd0
[  468.609532][T10422]  qnx6_init_fs_context+0x3f/0xd0
[  468.609558][T10422]  ? __pfx_qnx6_init_fs_context+0x10/0x10
[  468.609583][T10422]  alloc_fs_context+0x54d/0x9c0
[  468.609612][T10422]  __x64_sys_fsopen+0xeb/0x240
[  468.609638][T10422]  do_syscall_64+0xcd/0xfa0
[  468.609659][T10422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.609679][T10422] RIP: 0033:0x7fb946b8f749
[  468.609700][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.609718][T10422] RSP: 002b:00007fb94798e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  468.609736][T10422] RAX: ffffffffffffffda RBX: 00007fb946de5fa0 RCX: 00007fb946b8f749
[  468.609749][T10422] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000380
[  468.609761][T10422] RBP: 00007fb94798e090 R08: 0000000000000000 R09: 0000000000000000
[  468.609781][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.609792][T10422] R13: 00007fb946de6038 R14: 00007fb946de5fa0 R15: 00007ffe86c8d228
[  468.609822][T10422]  </TASK>
[  468.748840][   T30] audit: type=1400 audit(1764491785.920:947): avc:  denied  { mounton } for  pid=10423 comm="syz.4.1175" path="/212/file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  468.808841][    C0] vkms_vblank_simulate: vblank timer overrun
[  468.872764][T10406] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  468.890136][   T30] audit: type=1400 audit(1764491786.000:948): avc:  denied  { map } for  pid=10419 comm="syz.0.1173" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  468.923994][   T30] audit: type=1400 audit(1764491786.100:949): avc:  denied  { write } for  pid=10402 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  468.932269][ T5940] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  469.052336][   T30] audit: type=1400 audit(1764491786.220:950): avc:  denied  { create } for  pid=10428 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  469.163310][ T9989] nci: nci_rsp_packet: unknown rsp opcode 0x333
[  469.182021][   T30] audit: type=1400 audit(1764491786.350:951): avc:  denied  { getopt } for  pid=10428 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  469.213547][   T30] audit: type=1400 audit(1764491786.350:952): avc:  denied  { bind } for  pid=10428 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  469.225807][ T5940] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  469.256367][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.274755][ T5940] usb 4-1: Product: syz
[  469.383820][ T5940] usb 4-1: Manufacturer: syz
[  469.460941][    T9] usb 1-1: new low-speed USB device number 34 using dummy_hcd
[  469.557868][ T5940] usb 4-1: SerialNumber: syz
[  469.580304][ T5940] usb 4-1: config 0 descriptor??
[  469.738277][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  469.761366][    T9] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  469.797838][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  469.806721][ T5940] usb-storage 4-1:0.0: USB Mass Storage device detected
[  470.762479][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.771142][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.782335][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  470.830419][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.873349][    T9] usb 1-1: config 0 descriptor??
[  470.879519][T10436] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  471.038729][   T24] usb 2-1: USB disconnect, device number 40
[  471.636926][ T5940] usb 4-1: USB disconnect, device number 21
[  471.874422][    T9] logitech 0003:046D:C20E.0013: rdesc size test failed for formula gp
[  471.896750][    T9] logitech 0003:046D:C20E.0013: unknown main item tag 0x0
[  471.904527][    T9] logitech 0003:046D:C20E.0013: unknown main item tag 0x0
[  471.911671][    T9] logitech 0003:046D:C20E.0013: unknown main item tag 0x0
[  472.025002][    T9] logitech 0003:046D:C20E.0013: unknown main item tag 0x0
[  472.036055][    T9] logitech 0003:046D:C20E.0013: unknown main item tag 0x0
[  472.206975][T10462] !
: renamed from dummy0 (while UP)
[  472.486370][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  472.486379][   T30] audit: type=1400 audit(1764491789.280:955): avc:  denied  { ioctl } for  pid=10456 comm="syz.4.1182" path="/215/file0" dev="tmpfs" ino=1156 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  472.509014][T10436] sctp: [Deprecated]: syz.0.1177 (pid 10436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  472.509014][T10436] Use struct sctp_sack_info instead
[  472.536292][    T9] logitech 0003:046D:C20E.0013: hidraw0: USB HID v0.15 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0
[  472.592336][ T5910] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  472.605023][   T30] audit: type=1400 audit(1764491789.660:956): avc:  denied  { write } for  pid=10428 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  472.775695][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  472.831025][ T5910] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.856867][ T5910] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.862313][   T30] audit: type=1400 audit(1764491790.020:957): avc:  denied  { connect } for  pid=10428 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  472.886704][    C0] vkms_vblank_simulate: vblank timer overrun
[  472.903809][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  472.919913][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.940138][ T5910] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  473.299974][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.464687][ T5910] usb 4-1: Product: syz
[  473.469255][ T5910] usb 4-1: Manufacturer: syz
[  473.505996][ T5910] hub 4-1:4.0: USB hub found
[  473.692299][   T30] audit: type=1400 audit(1764491790.850:958): avc:  denied  { ioctl } for  pid=10470 comm="syz.4.1184" path="socket:[32736]" dev="sockfs" ino=32736 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  473.739480][ T5910] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  473.933368][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.942013][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.952730][T10458] openvswitch: netlink: Key 26 has unexpected len 0 expected 16
[  474.038395][T10429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  474.091268][ T5940] usb 1-1: USB disconnect, device number 34
[  474.111146][ T5910] usb 4-1: USB disconnect, device number 22
[  474.685503][   T30] audit: type=1400 audit(1764491791.850:959): avc:  denied  { execute_no_trans } for  pid=10480 comm="syz.1.1186" path="/239/file2" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  475.156089][   T30] audit: type=1400 audit(1764491792.290:960): avc:  denied  { watch } for  pid=10483 comm="syz.3.1188" path="/258" dev="tmpfs" ino=1375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  475.610493][   T30] audit: type=1400 audit(1764491792.300:961): avc:  denied  { watch_sb } for  pid=10483 comm="syz.3.1188" path="/258" dev="tmpfs" ino=1375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  475.637102][   T30] audit: type=1400 audit(1764491792.300:962): avc:  denied  { watch_sb watch_reads } for  pid=10483 comm="syz.3.1188" path="/258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  475.682667][    C0] vkms_vblank_simulate: vblank timer overrun
[  476.100975][T10481] FAULT_INJECTION: forcing a failure.
[  476.100975][T10481] name failslab, interval 1, probability 0, space 0, times 0
[  476.116781][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.1.1186 Not tainted syzkaller #0 PREEMPT(full) 
[  476.116808][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  476.116819][T10481] Call Trace:
[  476.116825][T10481]  <TASK>
[  476.116832][T10481]  dump_stack_lvl+0x16c/0x1f0
[  476.116854][T10481]  should_fail_ex+0x512/0x640
[  476.116875][T10481]  ? fs_reclaim_acquire+0xae/0x150
[  476.116899][T10481]  should_failslab+0xc2/0x120
[  476.116922][T10481]  __kmalloc_cache_noprof+0x72/0x780
[  476.116949][T10481]  ? tomoyo_init_log+0x197/0x2140
[  476.116974][T10481]  ? tomoyo_init_log+0x197/0x2140
[  476.116991][T10481]  tomoyo_init_log+0x197/0x2140
[  476.117012][T10481]  ? lockdep_hardirqs_on+0x7c/0x110
[  476.117037][T10481]  ? tomoyo_domain_quota_is_ok+0x2e7/0x5a0
[  476.117065][T10481]  ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0
[  476.117093][T10481]  ? __pfx_tomoyo_init_log+0x10/0x10
[  476.117116][T10481]  ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0
[  476.117154][T10481]  tomoyo_supervisor+0x302/0x13b0
[  476.117185][T10481]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  476.117212][T10481]  ? irqentry_exit+0x3b/0x90
[  476.117229][T10481]  ? lockdep_hardirqs_on+0x7c/0x110
[  476.117257][T10481]  ? tomoyo_check_acl+0x2e4/0x410
[  476.117283][T10481]  ? kasan_check_range+0x75/0x1b0
[  476.117312][T10481]  ? tomoyo_check_acl+0x1f7/0x410
[  476.117344][T10481]  tomoyo_unix_entry+0x49c/0x650
[  476.117368][T10481]  ? __pfx_tomoyo_unix_entry+0x10/0x10
[  476.117410][T10481]  tomoyo_socket_connect_permission+0x31f/0x360
[  476.117436][T10481]  ? __pfx_tomoyo_socket_connect_permission+0x10/0x10
[  476.117475][T10481]  security_socket_connect+0x9b/0x240
[  476.117506][T10481]  __sys_connect_file+0x8f/0x1a0
[  476.117533][T10481]  __sys_connect+0x13b/0x160
[  476.117554][T10481]  ? __pfx___sys_connect+0x10/0x10
[  476.117574][T10481]  ? rcu_is_watching+0x12/0xc0
[  476.117618][T10481]  __x64_sys_connect+0x72/0xb0
[  476.117638][T10481]  ? lockdep_hardirqs_on+0x7c/0x110
[  476.117659][T10481]  do_syscall_64+0xcd/0xfa0
[  476.117681][T10481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.117701][T10481] RIP: 0033:0x7f82ac18f749
[  476.117717][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.117735][T10481] RSP: 002b:00007f82acfa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  476.117754][T10481] RAX: ffffffffffffffda RBX: 00007f82ac3e5fa0 RCX: 00007f82ac18f749
[  476.117768][T10481] RDX: 000000000000006e RSI: 0000200000000340 RDI: 0000000000000004
[  476.117780][T10481] RBP: 00007f82acfa4090 R08: 0000000000000000 R09: 0000000000000000
[  476.117792][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.117804][T10481] R13: 00007f82ac3e6038 R14: 00007f82ac3e5fa0 R15: 00007ffdc62d1b08
[  476.117834][T10481]  </TASK>
[  476.394495][ T5910] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  476.561868][ T5910] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  476.570123][ T5910] usb 4-1: config 1 has no interface number 0
[  476.673480][ T5910] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  476.687186][ T5910] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  476.701651][ T5910] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.074475][ T5910] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  477.085363][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.093696][ T5910] usb 4-1: Product: syz
[  477.097979][ T5910] usb 4-1: Manufacturer: syz
[  477.103196][ T5910] usb 4-1: SerialNumber: syz
[  477.383980][T10491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  478.820045][   T30] audit: type=1400 audit(1764491795.990:963): avc:  denied  { read write } for  pid=10526 comm="syz.0.1198" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  478.955407][   T30] audit: type=1400 audit(1764491795.990:964): avc:  denied  { open } for  pid=10526 comm="syz.0.1198" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  479.028830][   T30] audit: type=1400 audit(1764491796.000:965): avc:  denied  { write } for  pid=10526 comm="syz.0.1198" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  479.051815][    C0] vkms_vblank_simulate: vblank timer overrun
[  479.792401][ T5910] usb 4-1: Error in usbnet_get_endpoints (-71)
[  479.927292][ T5910] usb 4-1: USB disconnect, device number 23
[  480.052232][   T30] audit: type=1400 audit(1764491797.220:966): avc:  denied  { create } for  pid=10542 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  480.447152][   T30] audit: type=1400 audit(1764491797.220:967): avc:  denied  { connect } for  pid=10542 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  480.532773][   T30] audit: type=1400 audit(1764491797.280:968): avc:  denied  { accept } for  pid=10542 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  480.552194][    C0] vkms_vblank_simulate: vblank timer overrun
[  480.562642][   T30] audit: type=1400 audit(1764491797.400:969): avc:  denied  { read } for  pid=10542 comm="syz.4.1203" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  480.585704][    C0] vkms_vblank_simulate: vblank timer overrun
[  480.619489][   T30] audit: type=1400 audit(1764491797.400:970): avc:  denied  { open } for  pid=10542 comm="syz.4.1203" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  480.947271][T10549] netlink: 'syz.2.1200': attribute type 7 has an invalid length.
[  481.089387][   T30] audit: type=1400 audit(1764491798.260:971): avc:  denied  { create } for  pid=10551 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  481.886693][   T30] audit: type=1400 audit(1764491798.650:972): avc:  denied  { read write } for  pid=10551 comm="syz.4.1204" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  483.883082][T10581] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  484.044868][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'.
[  484.221420][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  484.221437][   T30] audit: type=1400 audit(1764491801.390:975): avc:  denied  { setopt } for  pid=10593 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  484.255175][T10595] tmpfs: Bad value for 'mpol'
[  484.381522][   T30] audit: type=1400 audit(1764491801.430:976): avc:  denied  { write } for  pid=10593 comm="syz.1.1213" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  484.404786][    C0] vkms_vblank_simulate: vblank timer overrun
[  484.419573][   T30] audit: type=1400 audit(1764491801.430:977): avc:  denied  { open } for  pid=10593 comm="syz.1.1213" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  485.167154][   T30] audit: type=1400 audit(1764491802.340:978): avc:  denied  { read append } for  pid=10593 comm="syz.1.1213" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  485.190982][    C0] vkms_vblank_simulate: vblank timer overrun
[  485.412784][   T30] audit: type=1400 audit(1764491802.340:979): avc:  denied  { map } for  pid=10593 comm="syz.1.1213" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  485.436264][    C0] vkms_vblank_simulate: vblank timer overrun
[  485.523952][   T30] audit: type=1400 audit(1764491802.340:980): avc:  denied  { execute } for  pid=10593 comm="syz.1.1213" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  485.569524][   T30] audit: type=1400 audit(1764491802.480:981): avc:  denied  { name_connect } for  pid=10593 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  485.607702][T10608] netlink: 'syz.2.1216': attribute type 3 has an invalid length.
[  485.615725][T10608] netlink: 'syz.2.1216': attribute type 3 has an invalid length.
[  487.293298][T10623] 9pnet_fd: Insufficient options for proto=fd
[  488.050960][T10640] CIFS: VFS: Malformed UNC in devname
[  488.265812][T10642] netlink: 'syz.3.1222': attribute type 7 has an invalid length.
[  490.887146][T10675] netlink: 556 bytes leftover after parsing attributes in process `syz.0.1233'.
[  491.036581][T10679] CIFS: VFS: Malformed UNC in devname
[  493.562231][ T5891] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  494.282492][ T5891] usb 2-1: Using ep0 maxpacket: 8
[  494.667896][ T5910] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  494.871452][T10743] syzkaller1: entered allmulticast mode
[  494.888037][T10743] netlink: 'syz.3.1247': attribute type 1 has an invalid length.
[  494.895868][T10743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1247'.
[  494.957023][ T5910] usb 1-1: Using ep0 maxpacket: 32
[  495.016049][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0
[  495.033393][ T5910] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  495.872925][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.912222][ T5910] usb 1-1: Product: syz
[  495.917501][ T5910] usb 1-1: Manufacturer: syz
[  495.942913][ T5910] usb 1-1: SerialNumber: syz
[  496.256063][ T5910] usb 1-1: config 0 descriptor??
[  496.397094][ T5910] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  496.416954][ T5910] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  496.498308][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short
[  496.511397][T10754] tmpfs: Bad value for 'mpol'
[  496.538454][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -71
[  496.558441][ T5910] usb 1-1: USB disconnect, device number 35
[  496.708032][ T5891] usb 2-1: can't read configurations, error -71
[  499.515616][T10780] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  500.036426][   T30] audit: type=1400 audit(1764491817.210:982): avc:  denied  { write } for  pid=10783 comm="syz.4.1260" path="socket:[34829]" dev="sockfs" ino=34829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  500.882760][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  501.134832][   T30] audit: type=1400 audit(1764491818.290:983): avc:  denied  { setopt } for  pid=10792 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  501.487966][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.494334][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  501.502212][    T9] usb 4-1: Using ep0 maxpacket: 32
[  501.509568][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  501.518462][    T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  501.535513][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.547168][    T9] usb 4-1: Product: syz
[  501.562195][    T9] usb 4-1: Manufacturer: syz
[  501.566847][    T9] usb 4-1: SerialNumber: syz
[  501.595628][    T9] usb 4-1: config 0 descriptor??
[  501.656171][T10803] loop5: detected capacity change from 0 to 7
[  501.721976][T10803] Dev loop5: unable to read RDB block 7
[  501.727779][T10803]  loop5: unable to read partition table
[  501.733671][T10803] loop5: partition table beyond EOD, truncated
[  501.739860][T10803] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  501.762310][ T5891] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  501.922328][ T5891] usb 5-1: Using ep0 maxpacket: 32
[  501.929412][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0
[  501.944754][ T5891] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  501.990619][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.017456][ T5891] usb 5-1: Product: syz
[  502.021652][ T5891] usb 5-1: Manufacturer: syz
[  502.022870][    T9] gs_usb 4-1:0.0: Couldn't get device config: (err=-32)
[  502.040241][    T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32
[  502.043664][ T5891] usb 5-1: SerialNumber: syz
[  502.065326][ T5891] usb 5-1: config 0 descriptor??
[  502.292553][T10809] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1269'.
[  502.311821][T10809] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1269'.
[  502.387348][   T30] audit: type=1400 audit(1764491819.560:984): avc:  denied  { bind } for  pid=10784 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  502.391990][T10809] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1269'.
[  502.856899][T10821] CIFS: Unable to determine destination address
[  503.647483][ T5891] gs_usb 5-1:0.0: Couldn't get device config: (err=-32)
[  503.658745][ T5891] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32
[  503.672193][   T30] audit: type=1400 audit(1764491819.960:985): avc:  denied  { create } for  pid=10784 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  503.794358][   T30] audit: type=1400 audit(1764491819.980:986): avc:  denied  { bind } for  pid=10784 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  503.813829][   T30] audit: type=1400 audit(1764491819.980:987): avc:  denied  { node_bind } for  pid=10784 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  504.080168][T10826] CIFS: Unable to determine destination address
[  504.587371][ T5891] usb 4-1: USB disconnect, device number 24
[  505.122582][ T1205] usb 5-1: USB disconnect, device number 29
[  505.855531][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  506.181898][ T5910] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  506.362299][ T5910] usb 3-1: device descriptor read/64, error -71
[  507.062955][ T5910] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  507.212840][ T5910] usb 3-1: device descriptor read/64, error -71
[  507.323729][ T5910] usb usb3-port1: attempt power cycle
[  507.692256][ T5910] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  507.722572][T10853] netlink: 'syz.4.1276': attribute type 3 has an invalid length.
[  507.730514][T10853] netlink: 'syz.4.1276': attribute type 3 has an invalid length.
[  507.743001][ T5910] usb 3-1: device descriptor read/8, error -71
[  508.174147][ T5910] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  508.263781][ T5910] usb 3-1: device descriptor read/8, error -71
[  508.374980][ T5910] usb usb3-port1: unable to enumerate USB device
[  508.477635][   T30] audit: type=1400 audit(1764491825.620:988): avc:  denied  { write } for  pid=10858 comm="syz.0.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  508.616097][   T30] audit: type=1400 audit(1764491825.630:989): avc:  denied  { read } for  pid=10858 comm="syz.0.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  509.816788][ T5891] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  509.942270][ T5910] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  510.074396][ T5891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  510.230676][ T5891] usb 4-1: config 0 has no interface number 0
[  510.240785][ T5891] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  510.250849][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.269080][ T5891] usb 4-1: Product: syz
[  510.372246][ T5910] usb 1-1: device descriptor read/64, error -71
[  510.808098][ T5891] usb 4-1: Manufacturer: syz
[  510.815931][ T5891] usb 4-1: SerialNumber: syz
[  510.837101][ T5891] usb 4-1: config 0 descriptor??
[  511.505619][T10884] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  511.985595][ T5891] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  512.082446][ T5910] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  512.100769][ T5891] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  512.223089][ T5891] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  512.231190][ T5891] usb 4-1: media controller created
[  512.251763][T10886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1284'.
[  512.261069][ T5910] usb 1-1: device descriptor read/64, error -71
[  512.348404][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  512.392721][ T5910] usb usb1-port1: attempt power cycle
[  513.311652][ T5891] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  513.410769][ T5891] usb 4-1: USB disconnect, device number 25
[  513.993072][ T5910] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  514.155133][ T5910] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  514.155221][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.562412][ T5910] usb 5-1: config 0 descriptor??
[  515.564546][ T5910] cp210x 5-1:0.0: cp210x converter detected
[  515.584292][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1293'.
[  515.770496][ T5910] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  515.770527][ T5910] cp210x 5-1:0.0: querying part number failed
[  515.845863][ T5910] usb 5-1: cp210x converter now attached to ttyUSB0
[  516.630705][T10912] tty tty27: ldisc open failed (-12), clearing slot 26
[  517.500693][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'.
[  517.619686][   T30] audit: type=1400 audit(1764491834.780:990): avc:  denied  { setopt } for  pid=10939 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  517.922778][   T24] usb 5-1: USB disconnect, device number 30
[  517.938900][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  517.965319][   T24] cp210x 5-1:0.0: device disconnected
[  520.411204][T10980] FAULT_INJECTION: forcing a failure.
[  520.411204][T10980] name failslab, interval 1, probability 0, space 0, times 0
[  520.424124][T10980] CPU: 1 UID: 0 PID: 10980 Comm: syz.4.1314 Not tainted syzkaller #0 PREEMPT(full) 
[  520.424151][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  520.424163][T10980] Call Trace:
[  520.424169][T10980]  <TASK>
[  520.424177][T10980]  dump_stack_lvl+0x16c/0x1f0
[  520.424201][T10980]  should_fail_ex+0x512/0x640
[  520.424223][T10980]  ? fs_reclaim_acquire+0xae/0x150
[  520.424247][T10980]  should_failslab+0xc2/0x120
[  520.424270][T10980]  __kmalloc_noprof+0xdd/0x880
[  520.424296][T10980]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  520.424326][T10980]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  520.424348][T10980]  tomoyo_realpath_from_path+0xc2/0x6e0
[  520.424373][T10980]  ? tomoyo_profile+0x47/0x60
[  520.424400][T10980]  tomoyo_path_number_perm+0x245/0x580
[  520.424417][T10980]  ? tomoyo_path_number_perm+0x237/0x580
[  520.424439][T10980]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  520.424457][T10980]  ? __schedule+0x11a3/0x5de0
[  520.424484][T10980]  ? find_held_lock+0x2b/0x80
[  520.424535][T10980]  ? find_held_lock+0x2b/0x80
[  520.424557][T10980]  ? hook_file_ioctl_common+0x145/0x410
[  520.424589][T10980]  ? __fget_files+0x20e/0x3c0
[  520.424614][T10980]  security_file_ioctl+0x9b/0x240
[  520.424638][T10980]  __x64_sys_ioctl+0xb7/0x210
[  520.424673][T10980]  do_syscall_64+0xcd/0xfa0
[  520.424693][T10980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.424713][T10980] RIP: 0033:0x7fa86cf8f749
[  520.424728][T10980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  520.424747][T10980] RSP: 002b:00007fa86de75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  520.424766][T10980] RAX: ffffffffffffffda RBX: 00007fa86d1e6180 RCX: 00007fa86cf8f749
[  520.424779][T10980] RDX: 0000200000000200 RSI: 00000000000089e2 RDI: 0000000000000004
[  520.424791][T10980] RBP: 00007fa86de75090 R08: 0000000000000000 R09: 0000000000000000
[  520.424803][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.424814][T10980] R13: 00007fa86d1e6218 R14: 00007fa86d1e6180 R15: 00007fffe8a153a8
[  520.424844][T10980]  </TASK>
[  520.424870][T10980] ERROR: Out of memory at tomoyo_realpath_from_path.
[  520.771451][T10983] bridge0: port 3(gretap0) entered blocking state
[  520.780749][T10983] bridge0: port 3(gretap0) entered disabled state
[  520.792135][T10983] gretap0: entered allmulticast mode
[  520.832773][T10983] gretap0: left allmulticast mode
[  521.183336][T10984] netlink: 'syz.2.1310': attribute type 7 has an invalid length.
[  522.702247][   T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  523.393682][   T24] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  523.444971][   T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  523.535023][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  523.574211][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  523.602903][   T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  523.613334][   T24] usb 1-1: Product: syz
[  523.692423][   T24] usb 1-1: Manufacturer: syz
[  523.692505][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  523.706754][   T24] usb 1-1: SerialNumber: syz
[  523.786847][   T24] usb 1-1: config 0 descriptor??
[  523.829005][   T24] hub 1-1:0.0: bad descriptor, ignoring hub
[  523.835727][   T24] hub 1-1:0.0: probe with driver hub failed with error -5
[  523.871762][   T24] usb 1-1: selecting invalid altsetting 0
[  523.924219][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.943874][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.965610][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  523.994872][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.070929][T11012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  524.103989][   T24] usb 1-1: USB disconnect, device number 39
[  524.154333][    T9] usb 2-1: config 0 descriptor??
[  524.991433][ T5891] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  525.026992][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'.
[  525.104164][T11019] 8021q: adding VLAN 0 to HW filter on device bond1
[  525.124507][T11019] bond0: (slave bond1): Enslaving as an active interface with an up link
[  525.162243][   T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  525.192285][ T5891] usb 3-1: Using ep0 maxpacket: 32
[  525.197950][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  525.207208][ T5891] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  525.240495][ T5891] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  525.312105][ T5891] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  525.321473][   T24] usb 1-1: Using ep0 maxpacket: 16
[  525.332356][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  525.353571][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  525.367910][   T24] usb 1-1: device descriptor read/all, error -71
[  525.375624][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  525.388933][ T5891] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  525.404668][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.450828][ T5891] usb 3-1: config 0 descriptor??
[  525.722253][   T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  525.735769][ T5891] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  525.927537][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.939495][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  525.963619][   T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  525.988085][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.013126][   T24] usb 1-1: config 0 descriptor??
[  526.057998][   T30] audit: type=1400 audit(1764491843.230:991): avc:  denied  { ioctl } for  pid=11033 comm="syz.3.1331" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  526.083883][    C0] vkms_vblank_simulate: vblank timer overrun
[  526.141102][   T30] audit: type=1400 audit(1764491843.260:992): avc:  denied  { read write } for  pid=11007 comm="syz.2.1324" name="lp0" dev="devtmpfs" ino=3375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  526.165282][   T30] audit: type=1400 audit(1764491843.260:993): avc:  denied  { open } for  pid=11007 comm="syz.2.1324" path="/dev/usb/lp0" dev="devtmpfs" ino=3375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  526.444689][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  526.451366][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  526.464432][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.486187][    T9] usb 2-1: USB disconnect, device number 43
[  526.498428][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'.
[  526.514922][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  526.524143][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.533424][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.540498][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.551905][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.559599][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.579903][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  526.589754][   T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  526.616035][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  526.623099][   T24] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  526.638539][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  526.650578][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  526.660918][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  526.672852][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  526.682669][T11039] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  526.694880][T11039] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
[  526.712972][   T24] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE
[  526.882309][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  527.042345][    T9] usb 2-1: Using ep0 maxpacket: 32
[  527.052606][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.065525][    T9] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  527.075442][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  527.083552][    T9] usb 2-1: Product: syz
[  527.087873][    T9] usb 2-1: Manufacturer: syz
[  527.092570][    T9] usb 2-1: SerialNumber: syz
[  527.099900][    T9] usb 2-1: config 0 descriptor??
[  527.113249][    T9] usb 2-1: no audio or video endpoints found
[  527.127050][T11026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.136457][T11026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.176809][   T24] cp2112 0003:10C4:EA90.0014: error setting SMBus config
[  527.187821][   T24] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71
[  527.228771][   T24] usb 1-1: USB disconnect, device number 41
[  527.287771][ T5891] usb 3-1: USB disconnect, device number 26
[  527.312500][ T5891] usblp0: removed
[  527.327011][T10752] usb 2-1: USB disconnect, device number 44
[  527.644446][T11051] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  527.742285][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  527.942406][    T9] usb 5-1: Using ep0 maxpacket: 8
[  527.969458][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.991335][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  528.017483][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.056380][    T9] usb 5-1: config 0 descriptor??
[  528.078929][    T9] iowarrior 5-1:0.0: no interrupt-in endpoint found
[  528.172399][ T5891] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  528.456163][ T5891] usb 3-1: Using ep0 maxpacket: 16
[  528.601899][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.619171][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.710675][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  528.872362][T10752] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  528.970737][ T5891] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  528.981496][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.002199][ T5891] usb 3-1: config 0 descriptor??
[  529.092230][T10752] usb 4-1: device descriptor read/64, error -71
[  529.403718][T10752] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  529.482461][ T5891] HID 045e:07da: Invalid code 65791 type 1
[  529.496042][ T5891] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0015/input/input20
[  529.518656][ T5891] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  529.714688][ T5891] usb 3-1: USB disconnect, device number 27
[  529.752289][T10752] usb 4-1: device descriptor read/64, error -71
[  529.862465][T11074] fido_id[11074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  529.863604][T10752] usb usb4-port1: attempt power cycle
[  529.894472][   T30] audit: type=1400 audit(1764491847.070:994): avc:  denied  { create } for  pid=11076 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  529.914852][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.924317][   T30] audit: type=1400 audit(1764491847.090:995): avc:  denied  { write } for  pid=11076 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  530.132381][    T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  530.292579][T10752] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  530.399595][T10752] usb 4-1: device descriptor read/8, error -71
[  530.430146][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.445516][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.468094][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  530.477768][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.489076][    T9] usb 2-1: config 0 descriptor??
[  530.552690][ T5891] usb 5-1: USB disconnect, device number 31
[  530.612869][T11087] ieee802154 phy0 wpan0: encryption failed: -22
[  530.650947][   T30] audit: type=1400 audit(1764491847.820:996): avc:  denied  { read } for  pid=11086 comm="syz.2.1345" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  530.681659][   T30] audit: type=1400 audit(1764491847.820:997): avc:  denied  { open } for  pid=11086 comm="syz.2.1345" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  530.706051][T10752] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  530.723426][T10752] usb 4-1: device descriptor read/8, error -71
[  530.723988][   T30] audit: type=1400 audit(1764491847.850:998): avc:  denied  { ioctl } for  pid=11086 comm="syz.2.1345" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  530.755207][    C0] vkms_vblank_simulate: vblank timer overrun
[  530.777383][T11097] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1349'.
[  530.850396][   T30] audit: type=1400 audit(1764491848.020:999): avc:  denied  { accept } for  pid=11096 comm="syz.0.1349" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  530.885892][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'.
[  530.930877][T10752] usb usb4-port1: unable to enumerate USB device
[  532.255004][   T30] audit: type=1400 audit(1764491849.410:1000): avc:  denied  { getopt } for  pid=11112 comm="syz.2.1353" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  533.065188][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  533.082270][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  533.124773][    T9] usb 2-1: USB disconnect, device number 45
[  533.456324][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  533.522554][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  533.559436][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  533.578523][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  533.649386][T11127] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1356'.
[  533.659875][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1356'.
[  533.727755][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  533.764520][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  533.791624][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  533.801650][T11129] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  533.811647][T11129] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
[  533.878185][T11136] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  533.910301][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'.
[  533.921579][T11140] netlink: 'syz.3.1361': attribute type 30 has an invalid length.
[  533.987029][ T9989] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  534.018625][ T9989] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  534.045440][   T30] audit: type=1400 audit(1764491851.220:1001): avc:  denied  { getopt } for  pid=11142 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  534.065212][    C0] vkms_vblank_simulate: vblank timer overrun
[  534.083944][T11144] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1363'.
[  534.094389][ T9989] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.154301][ T9989] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  534.198325][T11144] tmpfs: Bad value for 'mpol'
[  534.306520][   T30] audit: type=1400 audit(1764491851.480:1002): avc:  denied  { read open } for  pid=11149 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  534.332248][    C0] vkms_vblank_simulate: vblank timer overrun
[  534.820022][   T30] audit: type=1400 audit(1764491851.480:1003): avc:  denied  { getattr } for  pid=11149 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  534.935707][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'.
[  534.946557][   T30] audit: type=1400 audit(1764491852.110:1004): avc:  denied  { nlmsg_read } for  pid=11150 comm="syz.1.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  535.899287][T11162] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  536.922258][   T30] audit: type=1400 audit(1764491854.040:1005): avc:  denied  { setopt } for  pid=11171 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  537.304336][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'.
[  537.498286][T11180] blktrace: Concurrent blktraces are not allowed on nbd3
[  537.865058][   T30] audit: type=1400 audit(1764491855.010:1006): avc:  denied  { add_name } for  pid=11146 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  537.974587][   T30] audit: type=1400 audit(1764491855.010:1007): avc:  denied  { create } for  pid=11146 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  538.051304][   T30] audit: type=1400 audit(1764491855.010:1008): avc:  denied  { write } for  pid=11146 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=8203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  538.087639][   T30] audit: type=1400 audit(1764491855.010:1009): avc:  denied  { append } for  pid=11146 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=8203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  538.696972][   T30] audit: type=1400 audit(1764491855.480:1010): avc:  denied  { block_suspend } for  pid=11182 comm="syz.1.1371" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.852308][   T30] audit: type=1400 audit(1764491855.900:1011): avc:  denied  { remove_name } for  pid=11192 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=8203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  539.167226][T11209] FAULT_INJECTION: forcing a failure.
[  539.167226][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  539.167263][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.0.1377 Not tainted syzkaller #0 PREEMPT(full) 
[  539.167287][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  539.167298][T11209] Call Trace:
[  539.167305][T11209]  <TASK>
[  539.167313][T11209]  dump_stack_lvl+0x16c/0x1f0
[  539.167337][T11209]  should_fail_ex+0x512/0x640
[  539.167365][T11209]  _copy_from_user+0x2e/0xd0
[  539.167391][T11209]  core_sys_select+0x2c8/0xc20
[  539.167419][T11209]  ? __pfx_core_sys_select+0x10/0x10
[  539.167444][T11209]  ? lock_acquire+0x179/0x350
[  539.167483][T11209]  ? set_user_sigmask+0x21b/0x2b0
[  539.167523][T11209]  ? __pfx_set_user_sigmask+0x10/0x10
[  539.167552][T11209]  do_pselect.constprop.0+0x19f/0x1e0
[  539.167574][T11209]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  539.167595][T11209]  ? __pfx___schedule+0x10/0x10
[  539.167630][T11209]  __x64_sys_pselect6+0x182/0x240
[  539.167651][T11209]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  539.167679][T11209]  do_syscall_64+0xcd/0xfa0
[  539.167700][T11209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.167720][T11209] RIP: 0033:0x7f07f618f749
[  539.167736][T11209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.167754][T11209] RSP: 002b:00007f07f43d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  539.167773][T11209] RAX: ffffffffffffffda RBX: 00007f07f63e6090 RCX: 00007f07f618f749
[  539.167786][T11209] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  539.167798][T11209] RBP: 00007f07f43d5090 R08: 0000000000000000 R09: 0000000000000000
[  539.167810][T11209] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  539.167822][T11209] R13: 00007f07f63e6128 R14: 00007f07f63e6090 R15: 00007ffe61313078
[  539.167851][T11209]  </TASK>
[  540.264010][   T30] audit: type=1400 audit(1764491855.900:1012): avc:  denied  { unlink } for  pid=11192 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=8203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  540.452623][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  540.584706][    T9] usb 5-1: device descriptor read/64, error -71
[  540.852219][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  541.014170][    T9] usb 5-1: device descriptor read/64, error -71
[  541.105215][   T30] audit: type=1400 audit(1764491858.280:1013): avc:  denied  { connect } for  pid=11214 comm="syz.1.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  541.161320][    T9] usb usb5-port1: attempt power cycle
[  541.594377][T11237] team0: Device xfrm1 is of different type
[  544.275307][T11271] libceph: resolve '0' (ret=-3): failed
[  544.334280][T11271] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1389'.
[  544.692280][T10752] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  544.962247][T10752] usb 2-1: Using ep0 maxpacket: 16
[  544.970413][T10752] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  544.982381][T10752] usb 2-1: config 0 has no interface number 0
[  544.988463][T10752] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 172, setting to 64
[  545.067849][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1394'.
[  545.077158][T11290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1394'.
[  545.185191][T11290] Cannot find add_set index 0 as target
[  545.292354][   T30] audit: type=1400 audit(1764491862.300:1014): avc:  denied  { write } for  pid=11285 comm="syz.2.1394" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  545.510799][T10752] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  545.527030][   T30] audit: type=1400 audit(1764491862.310:1015): avc:  denied  { ioctl } for  pid=11285 comm="syz.2.1394" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  545.558659][T10752] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  545.571239][T10752] usb 2-1: Manufacturer: syz
[  545.578762][T10752] usb 2-1: SerialNumber: syz
[  545.597220][T10752] usb 2-1: config 0 descriptor??
[  546.481822][T11301] blktrace: Concurrent blktraces are not allowed on nbd3
[  547.094652][T10752] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  547.200982][T10752] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  547.428587][T10752] usb 2-1: USB disconnect, device number 46
[  547.518868][   T30] audit: type=1400 audit(1764491864.690:1016): avc:  denied  { write } for  pid=11314 comm="syz.3.1401" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  547.997906][   T30] audit: type=1400 audit(1764491865.170:1017): avc:  denied  { mounton } for  pid=11322 comm="syz.2.1404" path="/proc/1000/task" dev="proc" ino=36263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  548.096293][   T30] audit: type=1400 audit(1764491865.170:1018): avc:  denied  { mount } for  pid=11322 comm="syz.2.1404" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  549.303541][   T30] audit: type=1400 audit(1764491866.470:1019): avc:  denied  { read write } for  pid=11329 comm="syz.2.1406" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  549.458369][   T30] audit: type=1400 audit(1764491866.470:1020): avc:  denied  { open } for  pid=11329 comm="syz.2.1406" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  551.370270][   T30] audit: type=1400 audit(1764491868.540:1021): avc:  denied  { ioctl } for  pid=11345 comm="syz.3.1411" path="socket:[36307]" dev="sockfs" ino=36307 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  551.528909][T11347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11347 comm=syz.3.1411
[  551.795349][T11342] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  551.895616][   T30] audit: type=1400 audit(1764491869.070:1022): avc:  denied  { ioctl } for  pid=11349 comm="syz.0.1412" path="socket:[37198]" dev="sockfs" ino=37198 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  551.936467][   T30] audit: type=1400 audit(1764491869.070:1023): avc:  denied  { connect } for  pid=11349 comm="syz.0.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  551.992236][ T5940] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  552.006824][   T30] audit: type=1326 audit(1764491869.180:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f618f749 code=0x7ffc0000
[  552.031244][   T30] audit: type=1326 audit(1764491869.180:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f618f749 code=0x7ffc0000
[  552.055114][   T30] audit: type=1326 audit(1764491869.180:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f07f618f749 code=0x7ffc0000
[  552.079005][   T30] audit: type=1326 audit(1764491869.180:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f618f749 code=0x7ffc0000
[  552.110385][   T30] audit: type=1326 audit(1764491869.180:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f618f749 code=0x7ffc0000
[  552.143487][   T30] audit: type=1326 audit(1764491869.180:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07f618df90 code=0x7ffc0000
[  552.172319][   T30] audit: type=1326 audit(1764491869.180:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.0.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f618f749 code=0x7ffc0000
[  552.203847][ T1205] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  552.211516][ T5940] usb 4-1: Using ep0 maxpacket: 16
[  552.232722][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.243163][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  552.254943][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  552.266218][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  552.279114][    T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  552.289711][ T5940] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  552.299052][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.308186][ T5940] usb 4-1: Product: syz
[  552.312417][ T5940] usb 4-1: Manufacturer: syz
[  552.317039][ T5940] usb 4-1: SerialNumber: syz
[  552.333109][ T5940] usb 4-1: config 0 descriptor??
[  552.366779][ T1205] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  552.376556][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.392173][ T1205] usb 3-1: Product: syz
[  552.396363][ T1205] usb 3-1: Manufacturer: syz
[  552.401134][ T1205] usb 3-1: SerialNumber: syz
[  552.422606][ T5940] rc_core: IR keymap rc-xbox-dvd not found
[  552.428496][ T5940] Registered IR keymap rc-empty
[  552.435524][ T5940] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  552.446798][ T5940] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22
[  552.464713][    T9] usb 1-1: config 4 has an invalid interface number: 231 but max is 0
[  552.489191][    T9] usb 1-1: config 4 has no interface number 0
[  552.515730][    T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  552.542530][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.562393][    T9] usb 1-1: Product: syz
[  552.566674][    T9] usb 1-1: Manufacturer: syz
[  552.571335][    T9] usb 1-1: SerialNumber: syz
[  552.637462][    T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  552.645707][   T24] usb 4-1: USB disconnect, device number 30
[  552.645894][    C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  553.509011][ T1205] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  553.521034][ T1205] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  553.547923][ T1205] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  553.593878][ T1205] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  553.621978][ T1205] usb 3-1: USB disconnect, device number 28
[  555.633134][    T9] vp7045: USB control message 'out' went wrong.
[  555.722572][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  556.022406][    T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  556.063634][    T9] usb 1-1: USB disconnect, device number 42
[  557.952051][   T30] kauditd_printk_skb: 50 callbacks suppressed
[  557.952065][   T30] audit: type=1400 audit(1764491875.120:1081): avc:  denied  { setopt } for  pid=11409 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  558.168756][T11411] qnx4: unable to read the superblock
[  558.654258][ T5930] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  558.792401][ T5930] usb 1-1: device descriptor read/64, error -71
[  558.860019][T11418] FAULT_INJECTION: forcing a failure.
[  558.860019][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  558.873619][T11418] CPU: 1 UID: 0 PID: 11418 Comm: syz.2.1428 Not tainted syzkaller #0 PREEMPT(full) 
[  558.873645][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  558.873657][T11418] Call Trace:
[  558.873664][T11418]  <TASK>
[  558.873671][T11418]  dump_stack_lvl+0x16c/0x1f0
[  558.873696][T11418]  should_fail_ex+0x512/0x640
[  558.873723][T11418]  _copy_to_user+0x32/0xd0
[  558.873748][T11418]  simple_read_from_buffer+0xcb/0x170
[  558.873778][T11418]  proc_fail_nth_read+0x197/0x240
[  558.873803][T11418]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  558.873826][T11418]  ? rw_verify_area+0xcf/0x6c0
[  558.873852][T11418]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  558.873875][T11418]  vfs_read+0x1e4/0xcf0
[  558.873897][T11418]  ? __pfx___mutex_lock+0x10/0x10
[  558.873917][T11418]  ? __pfx_vfs_read+0x10/0x10
[  558.873944][T11418]  ? __fget_files+0x20e/0x3c0
[  558.873973][T11418]  ksys_read+0x12a/0x250
[  558.873991][T11418]  ? __pfx_ksys_read+0x10/0x10
[  558.874017][T11418]  do_syscall_64+0xcd/0xfa0
[  558.874039][T11418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.874059][T11418] RIP: 0033:0x7fb946b8e15c
[  558.874081][T11418] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  558.874099][T11418] RSP: 002b:00007fb94796d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  558.874118][T11418] RAX: ffffffffffffffda RBX: 00007fb946de6090 RCX: 00007fb946b8e15c
[  558.874135][T11418] RDX: 000000000000000f RSI: 00007fb94796d0a0 RDI: 0000000000000005
[  558.874146][T11418] RBP: 00007fb94796d090 R08: 0000000000000000 R09: 0000000000000000
[  558.874157][T11418] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  558.874169][T11418] R13: 00007fb946de6128 R14: 00007fb946de6090 R15: 00007ffe86c8d228
[  558.874199][T11418]  </TASK>
[  559.032202][ T5930] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  559.312219][ T5930] usb 1-1: device descriptor read/64, error -71
[  559.422890][ T5930] usb usb1-port1: attempt power cycle
[  559.582234][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  559.772238][ T5930] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  559.774872][   T24] usb 3-1: Using ep0 maxpacket: 32
[  559.799245][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  559.812740][   T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  559.812838][ T5930] usb 1-1: device descriptor read/8, error -71
[  559.822346][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.836673][   T24] usb 3-1: Product: syz
[  559.840946][   T24] usb 3-1: Manufacturer: syz
[  559.846034][   T24] usb 3-1: SerialNumber: syz
[  559.863216][   T24] usb 3-1: config 0 descriptor??
[  560.122415][ T5930] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  560.163391][ T5930] usb 1-1: device descriptor read/8, error -71
[  560.192440][T10752] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  560.274504][ T5930] usb usb1-port1: unable to enumerate USB device
[  560.284531][   T24] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  560.291724][   T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32
[  560.934793][T11439] CIFS: Unable to determine destination address
[  561.329962][T10752] usb 5-1: Using ep0 maxpacket: 32
[  561.351999][T10752] usb 5-1: config 0 interface 0 has no altsetting 0
[  561.367780][T10752] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  561.384794][T10752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.402142][T10752] usb 5-1: Product: syz
[  561.406447][T10752] usb 5-1: Manufacturer: syz
[  561.411166][T10752] usb 5-1: SerialNumber: syz
[  561.420918][T10752] usb 5-1: config 0 descriptor??
[  561.893956][T10752] gs_usb 5-1:0.0: Couldn't get device config: (err=-32)
[  561.904017][T10752] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32
[  562.497420][T10752] usb 3-1: USB disconnect, device number 29
[  562.643870][T11451] CIFS: Unable to determine destination address
[  562.999304][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  563.010124][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  563.681083][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  563.697124][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  563.710524][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  563.721376][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  563.730406][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  563.752018][   T30] audit: type=1400 audit(1764491880.920:1082): avc:  denied  { mounton } for  pid=11462 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  564.110484][T11462] chnl_net:caif_netlink_parms(): no params data found
[  564.146079][ T1205] usb 5-1: USB disconnect, device number 35
[  564.770697][   T30] audit: type=1400 audit(1764491881.940:1083): avc:  denied  { write } for  pid=11475 comm="syz.2.1444" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  564.840701][T11462] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.848097][T11462] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.862848][T11462] bridge_slave_0: entered allmulticast mode
[  564.879798][T11462] bridge_slave_0: entered promiscuous mode
[  564.896291][T11462] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.907918][T11462] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.929466][T11462] bridge_slave_1: entered allmulticast mode
[  564.969519][T11462] bridge_slave_1: entered promiscuous mode
[  565.077739][T11462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.115693][T11462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.277011][T11462] team0: Port device team_slave_0 added
[  565.665301][T11462] team0: Port device team_slave_1 added
[  565.822972][ T5810] Bluetooth: hci5: command tx timeout
[  565.840574][T11462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.858218][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.892493][T11462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.907192][T11462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.914515][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.941946][T11462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.381075][T11462] hsr_slave_0: entered promiscuous mode
[  567.389280][T11462] hsr_slave_1: entered promiscuous mode
[  567.403784][T11462] debugfs: 'hsr0' already exists in 'hsr'
[  567.409537][T11462] Cannot create hsr debugfs directory
[  567.692185][ T5930] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  567.902208][ T5930] usb 3-1: Using ep0 maxpacket: 32
[  567.902389][ T5827] Bluetooth: hci5: command tx timeout
[  567.930208][ T5930] usb 3-1: config 0 interface 0 has no altsetting 0
[  567.987376][ T5930] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  568.034401][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.083184][ T5930] usb 3-1: Product: syz
[  568.110551][ T5930] usb 3-1: Manufacturer: syz
[  568.122162][ T5930] usb 3-1: SerialNumber: syz
[  568.143983][ T5930] usb 3-1: config 0 descriptor??
[  568.181733][T11462] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  568.236699][T11462] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  568.337163][T11462] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  568.398782][T11462] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  568.571955][T11462] 8021q: adding VLAN 0 to HW filter on device bond0
[  568.601047][ T5930] gs_usb 3-1:0.0: Couldn't get device config: (err=-32)
[  568.636715][T11462] 8021q: adding VLAN 0 to HW filter on device team0
[  568.659329][ T5930] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32
[  568.697929][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.705079][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  568.755503][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.762658][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.815197][T11462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  568.877674][T11520] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1456'.
[  569.236298][T11546] CIFS: Unable to determine destination address
[  569.982344][ T5810] Bluetooth: hci5: command 0x040f tx timeout
[  570.218761][T11462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  570.547821][T11462] veth0_vlan: entered promiscuous mode
[  570.558094][T11462] veth1_vlan: entered promiscuous mode
[  570.594634][T11462] veth0_macvtap: entered promiscuous mode
[  570.598972][T11462] veth1_macvtap: entered promiscuous mode
[  570.617598][T11462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.646073][T11462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.654536][T10571] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.654588][T10571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.654622][T10571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.654654][T10571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.729379][ T5930] usb 3-1: USB disconnect, device number 30
[  570.807972][T10706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.807996][T10706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.890169][T10706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.923325][T10706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.937550][   T30] audit: type=1400 audit(1764491888.100:1084): avc:  denied  { mounton } for  pid=11462 comm="syz-executor" path="/root/syzkaller.VirKNZ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  570.937597][   T30] audit: type=1400 audit(1764491888.100:1085): avc:  denied  { mounton } for  pid=11462 comm="syz-executor" path="/root/syzkaller.VirKNZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  570.937635][   T30] audit: type=1400 audit(1764491888.100:1086): avc:  denied  { mounton } for  pid=11462 comm="syz-executor" path="/root/syzkaller.VirKNZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  570.937676][   T30] audit: type=1400 audit(1764491888.110:1087): avc:  denied  { unmount } for  pid=11462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  570.988690][   T30] audit: type=1400 audit(1764491888.170:1088): avc:  denied  { mounton } for  pid=11462 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  570.991127][   T30] audit: type=1400 audit(1764491888.170:1089): avc:  denied  { mount } for  pid=11462 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  570.991176][   T30] audit: type=1400 audit(1764491888.170:1090): avc:  denied  { mounton } for  pid=11462 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  572.066133][ T5810] Bluetooth: hci5: command 0x040f tx timeout
[  573.233607][    C0] vkms_vblank_simulate: vblank timer overrun
[  574.144991][ T5810] Bluetooth: hci5: command 0x040f tx timeout
[  575.055513][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1471'.
[  575.822294][   T30] audit: type=1400 audit(1764491892.980:1091): avc:  denied  { create } for  pid=11605 comm="syz.5.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  576.295189][   T30] audit: type=1400 audit(1764491892.980:1092): avc:  denied  { bind } for  pid=11605 comm="syz.5.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  576.567218][T11616] netlink: 'syz.5.1476': attribute type 21 has an invalid length.
[  576.589990][T11616] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1476'.
[  577.195242][T11618] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  577.207319][T11616] binder: BINDER_SET_CONTEXT_MGR already set
[  577.233008][T11616] binder: 11614:11616 ioctl 4018620d 2000000001c0 returned -16
[  577.349630][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'.
[  577.929719][   T30] audit: type=1400 audit(1764491895.100:1093): avc:  denied  { create } for  pid=11623 comm="syz.5.1478" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  578.027769][   T30] audit: type=1400 audit(1764491895.110:1094): avc:  denied  { mounton } for  pid=11623 comm="syz.5.1478" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  578.410719][T11625] orangefs_mount: mount request failed with -4
[  578.451565][   T30] audit: type=1400 audit(1764491895.620:1095): avc:  denied  { unlink } for  pid=11462 comm="syz-executor" name="file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  578.660811][T11635] netlink: 'syz.2.1477': attribute type 7 has an invalid length.
[  578.877161][T11638] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  579.108530][   T30] audit: type=1400 audit(1764491896.280:1096): avc:  denied  { read } for  pid=11636 comm="\" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  579.156277][T11640] sd 0:0:1:0: PR command failed: 1026
[  579.161825][T11640] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  579.175343][T11640] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  580.571083][   T30] audit: type=1400 audit(1764491896.280:1097): avc:  denied  { open } for  pid=11636 comm="\" path="/272/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  580.594919][    C0] vkms_vblank_simulate: vblank timer overrun
[  580.601579][   T30] audit: type=1400 audit(1764491896.310:1098): avc:  denied  { ioctl } for  pid=11636 comm="syz.4.1482" path="/272/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  580.901477][T11649] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  580.922177][T11649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  580.979687][T11649] overlayfs: failed to resolve './file1': -2
[  580.992443][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  581.208956][T11656] netlink: 'syz.3.1486': attribute type 3 has an invalid length.
[  581.217803][T11656] netlink: 'syz.3.1486': attribute type 3 has an invalid length.
[  581.611014][   T30] audit: type=1400 audit(1764491898.780:1099): avc:  denied  { setopt } for  pid=11658 comm="syz.4.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  581.631258][    C0] vkms_vblank_simulate: vblank timer overrun
[  582.008637][    T9] usb 6-1: config 0 has an invalid interface number: 108 but max is 0
[  582.020887][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.031104][   T30] audit: type=1400 audit(1764491899.200:1100): avc:  denied  { bind } for  pid=11658 comm="syz.4.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  582.112260][    T9] usb 6-1: config 0 has no interface number 0
[  582.121807][    T9] usb 6-1: config 0 interface 108 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  582.148519][    T9] usb 6-1: config 0 interface 108 has no altsetting 0
[  582.155445][    T9] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7
[  582.176189][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.186932][    T9] usb 6-1: config 0 descriptor??
[  582.763888][    T9] usb 6-1: string descriptor 0 read error: -71
[  582.825086][T11670] netlink: 'syz.4.1490': attribute type 3 has an invalid length.
[  582.833973][T11670] netlink: 'syz.4.1490': attribute type 3 has an invalid length.
[  583.191883][    T9] usbserial_generic 6-1:0.108: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  583.222943][    T9] usbserial_generic 6-1:0.108: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  583.241769][    T9] usbserial_generic 6-1:0.108: device has no bulk endpoints
[  583.320484][    T9] safe_serial 6-1:0.108: safe_serial converter detected
[  583.358057][    T9] safe_serial 6-1:0.108: probe with driver safe_serial failed with error -22
[  583.732230][    T9] usb 6-1: USB disconnect, device number 2
[  584.073266][T10752] usb 1-1: new low-speed USB device number 47 using dummy_hcd
[  584.293828][T10752] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  584.348884][T10752] usb 1-1: config 0 has no interface number 0
[  584.386551][T10752] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  584.511566][T10752] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  584.528099][T10752] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  584.596549][T10752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.708616][T10752] usb 1-1: config 0 descriptor??
[  584.732071][T11677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  584.792676][T10752] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  586.189671][ T5925] usb 1-1: USB disconnect, device number 47
[  586.195776][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  586.740359][T11700] netlink: 'syz.3.1500': attribute type 3 has an invalid length.
[  586.748338][T11700] netlink: 'syz.3.1500': attribute type 3 has an invalid length.
[  587.194210][ T5925] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  587.388846][ T5925] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  587.462158][ T5925] usb 6-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config
[  587.502210][ T5925] usb 6-1: config 220 has no interface number 2
[  587.519331][ T5925] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  587.638311][ T5925] usb 6-1: config 220 interface 0 has no altsetting 0
[  587.723659][   T30] audit: type=1400 audit(1764491904.880:1101): avc:  denied  { getopt } for  pid=11715 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  587.793181][ T5925] usb 6-1: config 220 interface 76 has no altsetting 0
[  587.810763][   T30] audit: type=1400 audit(1764491904.880:1102): avc:  denied  { accept } for  pid=11715 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  587.881293][ T5925] usb 6-1: config 220 interface 1 has no altsetting 0
[  588.100982][   T30] audit: type=1400 audit(1764491904.890:1103): avc:  denied  { mount } for  pid=11715 comm="syz.0.1506" name="/" dev="overlay" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  588.170669][ T5925] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  588.253279][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.261313][ T5925] usb 6-1: Product: syz
[  588.265698][   T30] audit: type=1800 audit(1764491904.940:1104): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1506" name="file1" dev="overlay" ino=1650 res=0 errno=0
[  588.288134][ T5925] usb 6-1: Manufacturer: syz
[  588.307883][ T5925] usb 6-1: SerialNumber: syz
[  588.320423][T11724] IPv6: Can't replace route, no match found
[  588.406159][   T30] audit: type=1804 audit(1764491904.960:1105): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1506" name="/newroot/308/bus/file1" dev="overlay" ino=1650 res=1 errno=0
[  588.429201][    C0] vkms_vblank_simulate: vblank timer overrun
[  588.673531][   T30] audit: type=1400 audit(1764491905.850:1106): avc:  denied  { write } for  pid=11706 comm="syz.5.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  589.155712][ T5925] usb 6-1: selecting invalid altsetting 0
[  590.696322][ T5925] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  591.018449][ T5925] uvcvideo 6-1:220.0: No valid video chain found.
[  591.072601][ T5925] usb 6-1: selecting invalid altsetting 0
[  591.078957][ T5925] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  591.108864][ T5925] usb 6-1: USB disconnect, device number 3
[  591.371018][   T30] audit: type=1400 audit(1764491908.470:1107): avc:  denied  { ioctl } for  pid=11745 comm="syz.3.1514" path="socket:[39379]" dev="sockfs" ino=39379 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  591.395817][    C0] vkms_vblank_simulate: vblank timer overrun
[  591.649204][T11751] tls_set_device_offload: netdev not found
[  591.677924][T11751] random: crng reseeded on system resumption
[  591.684995][   T30] audit: type=1400 audit(1764491908.850:1108): avc:  denied  { mount } for  pid=11750 comm="syz.2.1515" name="/" dev="autofs" ino=39435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  591.725161][   T30] audit: type=1400 audit(1764491908.850:1109): avc:  denied  { write } for  pid=11750 comm="syz.2.1515" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  591.748288][    C0] vkms_vblank_simulate: vblank timer overrun
[  591.780858][   T30] audit: type=1400 audit(1764491908.890:1110): avc:  denied  { ioctl } for  pid=11750 comm="syz.2.1515" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  593.127273][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  593.127289][   T30] audit: type=1400 audit(1764491910.300:1112): avc:  denied  { setopt } for  pid=11739 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  593.329393][ T5810] Bluetooth: hci3: unexpected event for opcode 0x0407
[  593.419810][   T30] audit: type=1400 audit(1764491910.500:1113): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  595.714377][   T30] audit: type=1400 audit(1764491912.880:1114): avc:  denied  { ioctl } for  pid=11797 comm="syz.2.1528" path="socket:[39575]" dev="sockfs" ino=39575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  595.782151][   T30] audit: type=1400 audit(1764491912.880:1115): avc:  denied  { getopt } for  pid=11797 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  596.212394][   T30] audit: type=1400 audit(1764491912.880:1116): avc:  denied  { write } for  pid=11797 comm="syz.2.1528" lport=41942 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  596.832988][ T5940] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  597.234301][T11816] 
[  597.236748][T11816] =====================================================
[  597.243664][T11816] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  597.251113][T11816] syzkaller #0 Not tainted
[  597.255514][T11816] -----------------------------------------------------
[  597.262427][T11816] syz.3.1533/11816 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  597.270141][T11816] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80
[  597.278777][T11816] 
[  597.278777][T11816] and this task is already holding:
[  597.286132][T11816] ffff888074fcb320 (&f_owner->lock){...-}-{3:3}, at: send_sigurg+0x5f/0xc80
[  597.294851][T11816] which would create a new lock dependency:
[  597.300728][T11816]  (&f_owner->lock){...-}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  597.308316][T11816] 
[  597.308316][T11816] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  597.317749][T11816]  (&client->buffer_lock){..-.}-{3:3}
[  597.317776][T11816] 
[  597.317776][T11816] ... which became SOFTIRQ-irq-safe at:
[  597.330802][T11816]   lock_acquire+0x179/0x350
[  597.335378][T11816]   _raw_spin_lock+0x2e/0x40
[  597.339964][T11816]   evdev_pass_values+0x10e/0x9b0
[  597.344978][T11816]   evdev_events+0x1bb/0x390
[  597.349556][T11816]   input_pass_values+0x74e/0x880
[  597.354567][T11816]   input_handle_event+0xb29/0x14d0
[  597.359755][T11816]   input_event+0x8e/0xd0
[  597.364070][T11816]   hidinput_hid_event+0x90b/0x2440
[  597.369254][T11816]   hid_process_event+0x4b7/0x5e0
[  597.374256][T11816]   hid_report_raw_event+0xa0a/0x1290
[  597.379609][T11816]   __hid_input_report.constprop.0+0x33f/0x450
[  597.385746][T11816]   hid_irq_in+0x35e/0x870
[  597.390152][T11816]   __usb_hcd_giveback_urb+0x38b/0x610
[  597.395597][T11816]   usb_hcd_giveback_urb+0x39b/0x450
[  597.400867][T11816]   dummy_timer+0x1809/0x3a00
[  597.405522][T11816]   __hrtimer_run_queues+0x202/0xad0
[  597.410791][T11816]   hrtimer_run_softirq+0x17d/0x350
[  597.415971][T11816]   handle_softirqs+0x219/0x8e0
[  597.420806][T11816]   __irq_exit_rcu+0x109/0x170
[  597.425552][T11816]   irq_exit_rcu+0x9/0x30
[  597.429880][T11816]   sysvec_apic_timer_interrupt+0xa4/0xc0
[  597.435596][T11816]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  597.441644][T11816]   __slab_free+0x72/0x4e0
[  597.446048][T11816]   qlist_free_all+0x4d/0x120
[  597.450700][T11816]   kasan_quarantine_reduce+0x195/0x1e0
[  597.456219][T11816]   __kasan_slab_alloc+0x69/0x90
[  597.461140][T11816]   kmem_cache_alloc_noprof+0x250/0x6e0
[  597.466668][T11816]   getname_flags.part.0+0x4c/0x550
[  597.471852][T11816]   getname_flags+0x93/0xf0
[  597.476331][T11816]   do_sys_openat2+0xb8/0x1d0
[  597.480989][T11816]   __x64_sys_openat+0x174/0x210
[  597.485910][T11816]   do_syscall_64+0xcd/0xfa0
[  597.490477][T11816]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.496434][T11816] 
[  597.496434][T11816] to a SOFTIRQ-irq-unsafe lock:
[  597.503423][T11816]  (tasklist_lock){.+.+}-{3:3}
[  597.503445][T11816] 
[  597.503445][T11816] ... which became SOFTIRQ-irq-unsafe at:
[  597.516025][T11816] ...
[  597.516031][T11816]   lock_acquire+0x179/0x350
[  597.523149][T11816]   _raw_read_lock+0x5f/0x70
[  597.527728][T11816]   __do_wait+0x105/0x890
[  597.532041][T11816]   do_wait+0x21d/0x590
[  597.536174][T11816]   kernel_wait+0x9f/0x160
[  597.540571][T11816]   call_usermodehelper_exec_work+0xf1/0x170
[  597.546533][T11816]   process_one_work+0x9cf/0x1b70
[  597.551536][T11816]   worker_thread+0x6c8/0xf10
[  597.556191][T11816]   kthread+0x3c5/0x780
[  597.560328][T11816]   ret_from_fork+0x675/0x7d0
[  597.564981][T11816]   ret_from_fork_asm+0x1a/0x30
[  597.569819][T11816] 
[  597.569819][T11816] other info that might help us debug this:
[  597.569819][T11816] 
[  597.580019][T11816] Chain exists of:
[  597.580019][T11816]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[  597.580019][T11816] 
[  597.593289][T11816]  Possible interrupt unsafe locking scenario:
[  597.593289][T11816] 
[  597.601581][T11816]        CPU0                    CPU1
[  597.606920][T11816]        ----                    ----
[  597.612257][T11816]   lock(tasklist_lock);
[  597.616475][T11816]                                local_irq_disable();
[  597.623203][T11816]                                lock(&client->buffer_lock);
[  597.630549][T11816]                                lock(&f_owner->lock);
[  597.637371][T11816]   <Interrupt>
[  597.640797][T11816]     lock(&client->buffer_lock);
[  597.645795][T11816] 
[  597.645795][T11816]  *** DEADLOCK ***
[  597.645795][T11816] 
[  597.653908][T11816] 2 locks held by syz.3.1533/11816:
[  597.659078][T11816]  #0: ffff888035096cd8 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xd35/0x1340
[  597.668542][T11816]  #1: ffff888074fcb320 (&f_owner->lock){...-}-{3:3}, at: send_sigurg+0x5f/0xc80
[  597.677659][T11816] 
[  597.677659][T11816] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  597.688037][T11816]   -> (&client->buffer_lock){..-.}-{3:3} {
[  597.693921][T11816]      IN-SOFTIRQ-W at:
[  597.698050][T11816]                         lock_acquire+0x179/0x350
[  597.704527][T11816]                         _raw_spin_lock+0x2e/0x40
[  597.711013][T11816]                         evdev_pass_values+0x10e/0x9b0
[  597.717928][T11816]                         evdev_events+0x1bb/0x390
[  597.724586][T11816]                         input_pass_values+0x74e/0x880
[  597.731504][T11816]                         input_handle_event+0xb29/0x14d0
[  597.738610][T11816]                         input_event+0x8e/0xd0
[  597.744854][T11816]                         hidinput_hid_event+0x90b/0x2440
[  597.751960][T11816]                         hid_process_event+0x4b7/0x5e0
[  597.758885][T11816]                         hid_report_raw_event+0xa0a/0x1290
[  597.766150][T11816]                         __hid_input_report.constprop.0+0x33f/0x450
[  597.774198][T11816]                         hid_irq_in+0x35e/0x870
[  597.780508][T11816]                         __usb_hcd_giveback_urb+0x38b/0x610
[  597.787864][T11816]                         usb_hcd_giveback_urb+0x39b/0x450
[  597.795055][T11816]                         dummy_timer+0x1809/0x3a00
[  597.801632][T11816]                         __hrtimer_run_queues+0x202/0xad0
[  597.808811][T11816]                         hrtimer_run_softirq+0x17d/0x350
[  597.815900][T11816]                         handle_softirqs+0x219/0x8e0
[  597.822644][T11816]                         __irq_exit_rcu+0x109/0x170
[  597.829298][T11816]                         irq_exit_rcu+0x9/0x30
[  597.835515][T11816]                         sysvec_apic_timer_interrupt+0xa4/0xc0
[  597.843132][T11816]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  597.851085][T11816]                         __slab_free+0x72/0x4e0
[  597.857411][T11816]                         qlist_free_all+0x4d/0x120
[  597.863973][T11816]                         kasan_quarantine_reduce+0x195/0x1e0
[  597.871405][T11816]                         __kasan_slab_alloc+0x69/0x90
[  597.878228][T11816]                         kmem_cache_alloc_noprof+0x250/0x6e0
[  597.885670][T11816]                         getname_flags.part.0+0x4c/0x550
[  597.892761][T11816]                         getname_flags+0x93/0xf0
[  597.899151][T11816]                         do_sys_openat2+0xb8/0x1d0
[  597.905717][T11816]                         __x64_sys_openat+0x174/0x210
[  597.912547][T11816]                         do_syscall_64+0xcd/0xfa0
[  597.919033][T11816]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.926916][T11816]      INITIAL USE at:
[  597.930968][T11816]                        lock_acquire+0x179/0x350
[  597.937362][T11816]                        _raw_spin_lock_irq+0x36/0x50
[  597.944113][T11816]                        evdev_read+0x436/0xee0
[  597.950342][T11816]                        vfs_readv+0x5c1/0x8b0
[  597.956482][T11816]                        do_readv+0x28c/0x340
[  597.962531][T11816]                        do_syscall_64+0xcd/0xfa0
[  597.968922][T11816]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.976703][T11816]    }
[  597.979351][T11816]    ... key      at: [<ffffffff9ae2a0e0>] __key.83+0x0/0x40
[  597.986709][T11816]  -> (&new->fa_lock){...-}-{3:3} {
[  597.991899][T11816]     IN-SOFTIRQ-R at:
[  597.995944][T11816]                       lock_acquire+0x179/0x350
[  598.002249][T11816]                       _raw_read_lock_irqsave+0x46/0x90
[  598.009253][T11816]                       kill_fasync+0x138/0x510
[  598.015474][T11816]                       tun_net_xmit+0x1301/0x18d0
[  598.022042][T11816]                       dev_hard_start_xmit+0x97/0x740
[  598.028868][T11816]                       sch_direct_xmit+0x1b2/0xcf0
[  598.035438][T11816]                       __dev_queue_xmit+0x144d/0x4490
[  598.042527][T11816]                       tipc_l2_send_msg+0x30b/0x490
[  598.049189][T11816]                       tipc_bearer_xmit_skb+0x1c0/0x430
[  598.056194][T11816]                       tipc_disc_timeout+0x5b2/0x850
[  598.062956][T11816]                       call_timer_fn+0x19a/0x620
[  598.069345][T11816]                       __run_timers+0x6ef/0x960
[  598.075909][T11816]                       run_timer_base+0x114/0x190
[  598.082394][T11816]                       run_timer_softirq+0x1a/0x40
[  598.088969][T11816]                       handle_softirqs+0x219/0x8e0
[  598.095541][T11816]                       __irq_exit_rcu+0x109/0x170
[  598.102021][T11816]                       irq_exit_rcu+0x9/0x30
[  598.108063][T11816]                       sysvec_apic_timer_interrupt+0xa4/0xc0
[  598.115502][T11816]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  598.123286][T11816]                       rcu_is_watching+0x0/0xc0
[  598.129591][T11816]                       lock_acquire+0x2cd/0x350
[  598.135894][T11816]                       is_module_text_address+0x33/0x220
[  598.142982][T11816]                       kernel_text_address+0x81/0x100
[  598.149810][T11816]                       __kernel_text_address+0xd/0x40
[  598.156634][T11816]                       unwind_get_return_address+0x59/0xa0
[  598.163896][T11816]                       arch_stack_walk+0xa6/0x100
[  598.170375][T11816]                       stack_trace_save+0x8e/0xc0
[  598.176855][T11816]                       kasan_save_stack+0x33/0x60
[  598.183333][T11816]                       kasan_save_track+0x14/0x30
[  598.189809][T11816]                       __kasan_kmalloc+0xaa/0xb0
[  598.196200][T11816]                       __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  598.204415][T11816]                       kmalloc_reserve+0xef/0x2c0
[  598.210901][T11816]                       __alloc_skb+0x166/0x380
[  598.217119][T11816]                       alloc_skb_with_frags+0xe0/0x860
[  598.224038][T11816]                       sock_alloc_send_pskb+0x7f9/0x980
[  598.231052][T11816]                       unix_dgram_sendmsg+0x3e9/0x17f0
[  598.237969][T11816]                       __sys_sendto+0x4a3/0x520
[  598.244282][T11816]                       __x64_sys_sendto+0xe0/0x1c0
[  598.250851][T11816]                       do_syscall_64+0xcd/0xfa0
[  598.257163][T11816]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.264858][T11816]     INITIAL USE at:
[  598.268815][T11816]                      lock_acquire+0x179/0x350
[  598.275030][T11816]                      _raw_write_lock_irq+0x36/0x50
[  598.281691][T11816]                      fasync_remove_entry+0xb2/0x1e0
[  598.288436][T11816]                      fasync_helper+0xaf/0xd0
[  598.294570][T11816]                      fuse_dev_fasync+0xad/0x100
[  598.300960][T11816]                      __fput+0x96b/0xb70
[  598.306663][T11816]                      task_work_run+0x150/0x240
[  598.312968][T11816]                      exit_to_user_mode_loop+0xec/0x130
[  598.319966][T11816]                      do_syscall_64+0x426/0xfa0
[  598.326281][T11816]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.333929][T11816]     INITIAL READ USE at:
[  598.338318][T11816]                           lock_acquire+0x179/0x350
[  598.344971][T11816]                           _raw_read_lock_irqsave+0x74/0x90
[  598.352324][T11816]                           kill_fasync+0x138/0x510
[  598.358895][T11816]                           fuse_dev_queue_req+0x226/0x310
[  598.366154][T11816]                           __fuse_simple_request+0x4d1/0xe10
[  598.373584][T11816]                           fuse_lookup_name+0x2ad/0x780
[  598.380586][T11816]                           fuse_lookup+0x26a/0x560
[  598.387155][T11816]                           __lookup_slow+0x251/0x460
[  598.393901][T11816]                           walk_component+0x353/0x5b0
[  598.400733][T11816]                           path_lookupat+0x142/0x6d0
[  598.407466][T11816]                           filename_lookup+0x224/0x5f0
[  598.414373][T11816]                           vfs_statx+0x101/0x3f0
[  598.420767][T11816]                           do_statx+0xef/0x170
[  598.426986][T11816]                           __x64_sys_statx+0x136/0x1e0
[  598.433902][T11816]                           do_syscall_64+0xcd/0xfa0
[  598.440553][T11816]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.448593][T11816]   }
[  598.451156][T11816]   ... key      at: [<ffffffff9ab44da0>] __key.0+0x0/0x40
[  598.458336][T11816]   ... acquired at:
[  598.462198][T11816]    _raw_read_lock_irqsave+0x74/0x90
[  598.467553][T11816]    kill_fasync+0x138/0x510
[  598.472129][T11816]    evdev_pass_values+0x619/0x9b0
[  598.477226][T11816]    evdev_events+0x1bb/0x390
[  598.481882][T11816]    input_pass_values+0x74e/0x880
[  598.486975][T11816]    input_handle_event+0xf00/0x14d0
[  598.492241][T11816]    input_inject_event+0x1e8/0x3b0
[  598.497433][T11816]    evdev_write+0x457/0x750
[  598.502020][T11816]    vfs_write+0x2a0/0x11d0
[  598.506512][T11816]    ksys_write+0x1f8/0x250
[  598.510995][T11816]    do_syscall_64+0xcd/0xfa0
[  598.515653][T11816]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.521697][T11816] 
[  598.523996][T11816] -> (&f_owner->lock){...-}-{3:3} {
[  598.529187][T11816]    IN-SOFTIRQ-R at:
[  598.533140][T11816]                     lock_acquire+0x179/0x350
[  598.539275][T11816]                     _raw_read_lock_irqsave+0x46/0x90
[  598.546108][T11816]                     send_sigio+0x31/0x3e0
[  598.551983][T11816]                     kill_fasync+0x214/0x510
[  598.558031][T11816]                     tun_net_xmit+0x1301/0x18d0
[  598.564339][T11816]                     dev_hard_start_xmit+0x97/0x740
[  598.570991][T11816]                     sch_direct_xmit+0x1b2/0xcf0
[  598.577383][T11816]                     __dev_queue_xmit+0x144d/0x4490
[  598.584036][T11816]                     tipc_l2_send_msg+0x30b/0x490
[  598.590527][T11816]                     tipc_bearer_xmit_skb+0x1c0/0x430
[  598.597361][T11816]                     tipc_disc_timeout+0x5b2/0x850
[  598.603932][T11816]                     call_timer_fn+0x19a/0x620
[  598.610149][T11816]                     __run_timers+0x6ef/0x960
[  598.616286][T11816]                     run_timer_base+0x114/0x190
[  598.622601][T11816]                     run_timer_softirq+0x1a/0x40
[  598.629003][T11816]                     handle_softirqs+0x219/0x8e0
[  598.635414][T11816]                     __irq_exit_rcu+0x109/0x170
[  598.641739][T11816]                     irq_exit_rcu+0x9/0x30
[  598.647627][T11816]                     sysvec_apic_timer_interrupt+0xa4/0xc0
[  598.654907][T11816]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  598.662525][T11816]                     rcu_is_watching+0x0/0xc0
[  598.668666][T11816]                     lock_acquire+0x2cd/0x350
[  598.674796][T11816]                     is_module_text_address+0x33/0x220
[  598.681709][T11816]                     kernel_text_address+0x81/0x100
[  598.688374][T11816]                     __kernel_text_address+0xd/0x40
[  598.695030][T11816]                     unwind_get_return_address+0x59/0xa0
[  598.702121][T11816]                     arch_stack_walk+0xa6/0x100
[  598.708431][T11816]                     stack_trace_save+0x8e/0xc0
[  598.714742][T11816]                     kasan_save_stack+0x33/0x60
[  598.721048][T11816]                     kasan_save_track+0x14/0x30
[  598.727350][T11816]                     __kasan_kmalloc+0xaa/0xb0
[  598.733566][T11816]                     __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  598.741610][T11816]                     kmalloc_reserve+0xef/0x2c0
[  598.747922][T11816]                     __alloc_skb+0x166/0x380
[  598.753976][T11816]                     alloc_skb_with_frags+0xe0/0x860
[  598.760745][T11816]                     sock_alloc_send_pskb+0x7f9/0x980
[  598.767579][T11816]                     unix_dgram_sendmsg+0x3e9/0x17f0
[  598.774324][T11816]                     __sys_sendto+0x4a3/0x520
[  598.780462][T11816]                     __x64_sys_sendto+0xe0/0x1c0
[  598.786859][T11816]                     do_syscall_64+0xcd/0xfa0
[  598.792992][T11816]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.800515][T11816]    INITIAL USE at:
[  598.804386][T11816]                    lock_acquire+0x179/0x350
[  598.810429][T11816]                    _raw_write_lock_irq+0x36/0x50
[  598.816924][T11816]                    __f_setown+0x61/0x3c0
[  598.822721][T11816]                    f_setown+0x122/0x290
[  598.828425][T11816]                    do_fcntl+0xfa6/0x15a0
[  598.834394][T11816]                    __x64_sys_fcntl+0x163/0x200
[  598.840706][T11816]                    do_syscall_64+0xcd/0xfa0
[  598.846781][T11816]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.854215][T11816]    INITIAL READ USE at:
[  598.858520][T11816]                         lock_acquire+0x179/0x350
[  598.865003][T11816]                         _raw_read_lock_irqsave+0x46/0x90
[  598.872194][T11816]                         send_sigio+0x31/0x3e0
[  598.878425][T11816]                         kill_fasync+0x214/0x510
[  598.884822][T11816]                         tun_net_xmit+0x1301/0x18d0
[  598.891479][T11816]                         dev_hard_start_xmit+0x97/0x740
[  598.898483][T11816]                         sch_direct_xmit+0x1b2/0xcf0
[  598.905230][T11816]                         __dev_queue_xmit+0x144d/0x4490
[  598.912232][T11816]                         neigh_resolve_output+0x53a/0x940
[  598.919412][T11816]                         ip6_finish_output2+0xad1/0x1cf0
[  598.926503][T11816]                         __ip6_finish_output+0x3cd/0x1010
[  598.933693][T11816]                         ip6_output+0x253/0x710
[  598.939999][T11816]                         ndisc_send_skb+0xa85/0x1f50
[  598.946748][T11816]                         ndisc_send_rs+0x129/0x670
[  598.953341][T11816]                         addrconf_dad_completed+0x49d/0x10d0
[  598.960800][T11816]                         addrconf_dad_work+0xcfb/0x14e0
[  598.967806][T11816]                         process_one_work+0x9cf/0x1b70
[  598.974723][T11816]                         worker_thread+0x6c8/0xf10
[  598.981744][T11816]                         kthread+0x3c5/0x780
[  598.987793][T11816]                         ret_from_fork+0x675/0x7d0
[  598.994378][T11816]                         ret_from_fork_asm+0x1a/0x30
[  599.001237][T11816]  }
[  599.003713][T11816]  ... key      at: [<ffffffff9ab44de0>] __key.1+0x0/0x40
[  599.010819][T11816]  ... acquired at:
[  599.014609][T11816]    _raw_read_lock_irqsave+0x46/0x90
[  599.019979][T11816]    send_sigio+0x31/0x3e0
[  599.024381][T11816]    kill_fasync+0x214/0x510
[  599.028953][T11816]    tun_net_xmit+0x1301/0x18d0
[  599.033790][T11816]    dev_hard_start_xmit+0x97/0x740
[  599.038974][T11816]    sch_direct_xmit+0x1b2/0xcf0
[  599.043893][T11816]    __dev_queue_xmit+0x144d/0x4490
[  599.049089][T11816]    neigh_resolve_output+0x53a/0x940
[  599.054450][T11816]    ip6_finish_output2+0xad1/0x1cf0
[  599.059715][T11816]    __ip6_finish_output+0x3cd/0x1010
[  599.065066][T11816]    ip6_output+0x253/0x710
[  599.069547][T11816]    ndisc_send_skb+0xa85/0x1f50
[  599.074465][T11816]    ndisc_send_rs+0x129/0x670
[  599.079210][T11816]    addrconf_dad_completed+0x49d/0x10d0
[  599.084829][T11816]    addrconf_dad_work+0xcfb/0x14e0
[  599.090005][T11816]    process_one_work+0x9cf/0x1b70
[  599.095099][T11816]    worker_thread+0x6c8/0xf10
[  599.099838][T11816]    kthread+0x3c5/0x780
[  599.104056][T11816]    ret_from_fork+0x675/0x7d0
[  599.108807][T11816]    ret_from_fork_asm+0x1a/0x30
[  599.113746][T11816] 
[  599.116047][T11816] 
[  599.116047][T11816] the dependencies between the lock to be acquired
[  599.116054][T11816]  and SOFTIRQ-irq-unsafe lock:
[  599.129516][T11816] -> (tasklist_lock){.+.+}-{3:3} {
[  599.134623][T11816]    HARDIRQ-ON-R at:
[  599.138581][T11816]                     lock_acquire+0x179/0x350
[  599.144733][T11816]                     _raw_read_lock+0x5f/0x70
[  599.150881][T11816]                     __do_wait+0x105/0x890
[  599.156782][T11816]                     do_wait+0x21d/0x590
[  599.162479][T11816]                     kernel_wait+0x9f/0x160
[  599.168437][T11816]                     call_usermodehelper_exec_work+0xf1/0x170
[  599.175961][T11816]                     process_one_work+0x9cf/0x1b70
[  599.182527][T11816]                     worker_thread+0x6c8/0xf10
[  599.188754][T11816]                     kthread+0x3c5/0x780
[  599.194451][T11816]                     ret_from_fork+0x675/0x7d0
[  599.200670][T11816]                     ret_from_fork_asm+0x1a/0x30
[  599.207069][T11816]    SOFTIRQ-ON-R at:
[  599.211026][T11816]                     lock_acquire+0x179/0x350
[  599.217158][T11816]                     _raw_read_lock+0x5f/0x70
[  599.223295][T11816]                     __do_wait+0x105/0x890
[  599.229173][T11816]                     do_wait+0x21d/0x590
[  599.234865][T11816]                     kernel_wait+0x9f/0x160
[  599.240821][T11816]                     call_usermodehelper_exec_work+0xf1/0x170
[  599.248345][T11816]                     process_one_work+0x9cf/0x1b70
[  599.254912][T11816]                     worker_thread+0x6c8/0xf10
[  599.261149][T11816]                     kthread+0x3c5/0x780
[  599.266848][T11816]                     ret_from_fork+0x675/0x7d0
[  599.273067][T11816]                     ret_from_fork_asm+0x1a/0x30
[  599.279465][T11816]    INITIAL USE at:
[  599.283334][T11816]                    lock_acquire+0x179/0x350
[  599.289375][T11816]                    _raw_write_lock_irq+0x36/0x50
[  599.295862][T11816]                    copy_process+0x4fe3/0x76a0
[  599.302086][T11816]                    kernel_clone+0xfc/0x930
[  599.308046][T11816]                    user_mode_thread+0xc8/0x110
[  599.314354][T11816]                    rest_init+0x23/0x2b0
[  599.320055][T11816]                    start_kernel+0x3f6/0x4e0
[  599.326106][T11816]                    x86_64_start_reservations+0x18/0x30
[  599.333110][T11816]                    x86_64_start_kernel+0x130/0x190
[  599.339765][T11816]                    common_startup_64+0x13e/0x148
[  599.346249][T11816]    INITIAL READ USE at:
[  599.350553][T11816]                         lock_acquire+0x179/0x350
[  599.357029][T11816]                         _raw_read_lock+0x5f/0x70
[  599.363518][T11816]                         __do_wait+0x105/0x890
[  599.369742][T11816]                         do_wait+0x21d/0x590
[  599.375780][T11816]                         kernel_wait+0x9f/0x160
[  599.382085][T11816]                         call_usermodehelper_exec_work+0xf1/0x170
[  599.389963][T11816]                         process_one_work+0x9cf/0x1b70
[  599.396879][T11816]                         worker_thread+0x6c8/0xf10
[  599.403442][T11816]                         kthread+0x3c5/0x780
[  599.409485][T11816]                         ret_from_fork+0x675/0x7d0
[  599.416049][T11816]                         ret_from_fork_asm+0x1a/0x30
[  599.422797][T11816]  }
[  599.425270][T11816]  ... key      at: [<ffffffff8e00c098>] tasklist_lock+0x18/0x40
[  599.432966][T11816]  ... acquired at:
[  599.436745][T11816]    lock_acquire+0x179/0x350
[  599.441397][T11816]    _raw_read_lock+0x5f/0x70
[  599.446058][T11816]    send_sigurg+0xed/0xc80
[  599.450541][T11816]    sk_send_sigurg+0x76/0x360
[  599.455281][T11816]    unix_stream_sendmsg+0xfa5/0x1340
[  599.460632][T11816]    ____sys_sendmsg+0xa98/0xc70
[  599.465541][T11816]    ___sys_sendmsg+0x134/0x1d0
[  599.470370][T11816]    __sys_sendmmsg+0x200/0x420
[  599.475201][T11816]    __x64_sys_sendmmsg+0x9c/0x100
[  599.480294][T11816]    do_syscall_64+0xcd/0xfa0
[  599.484946][T11816]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.490987][T11816] 
[  599.493283][T11816] 
[  599.493283][T11816] stack backtrace:
[  599.499144][T11816] CPU: 1 UID: 8630 PID: 11816 Comm: syz.3.1533 Not tainted syzkaller #0 PREEMPT(full) 
[  599.499163][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  599.499172][T11816] Call Trace:
[  599.499179][T11816]  <TASK>
[  599.499186][T11816]  dump_stack_lvl+0x116/0x1f0
[  599.499201][T11816]  check_irq_usage+0x7dc/0x920
[  599.499229][T11816]  ? check_path.constprop.0+0x24/0x50
[  599.499253][T11816]  ? __lock_acquire+0x1285/0x1c90
[  599.499265][T11816]  __lock_acquire+0x1285/0x1c90
[  599.499282][T11816]  lock_acquire+0x179/0x350
[  599.499295][T11816]  ? send_sigurg+0xed/0xc80
[  599.499317][T11816]  _raw_read_lock+0x5f/0x70
[  599.499338][T11816]  ? send_sigurg+0xed/0xc80
[  599.499356][T11816]  send_sigurg+0xed/0xc80
[  599.499374][T11816]  ? find_held_lock+0x2b/0x80
[  599.499393][T11816]  sk_send_sigurg+0x76/0x360
[  599.499412][T11816]  unix_stream_sendmsg+0xfa5/0x1340
[  599.499433][T11816]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  599.499452][T11816]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  599.499474][T11816]  ____sys_sendmsg+0xa98/0xc70
[  599.499489][T11816]  ? copy_msghdr_from_user+0x10a/0x160
[  599.499507][T11816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  599.499522][T11816]  ? find_held_lock+0x2b/0x80
[  599.499542][T11816]  ___sys_sendmsg+0x134/0x1d0
[  599.499561][T11816]  ? __pfx____sys_sendmsg+0x10/0x10
[  599.499585][T11816]  ? find_held_lock+0x2b/0x80
[  599.499608][T11816]  __sys_sendmmsg+0x200/0x420
[  599.499628][T11816]  ? __pfx___sys_sendmmsg+0x10/0x10
[  599.499650][T11816]  ? __pfx_do_futex+0x10/0x10
[  599.499670][T11816]  ? xfd_validate_state+0x61/0x180
[  599.499695][T11816]  __x64_sys_sendmmsg+0x9c/0x100
[  599.499713][T11816]  ? lockdep_hardirqs_on+0x7c/0x110
[  599.499727][T11816]  do_syscall_64+0xcd/0xfa0
[  599.499741][T11816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.499756][T11816] RIP: 0033:0x7f5f7878f749
[  599.499770][T11816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  599.499784][T11816] RSP: 002b:00007f5f79592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  599.499803][T11816] RAX: ffffffffffffffda RBX: 00007f5f789e6270 RCX: 00007f5f7878f749
[  599.499813][T11816] RDX: 0000000000000001 RSI: 0000200000011500 RDI: 000000000000000b
[  599.499822][T11816] RBP: 00007f5f78813f91 R08: 0000000000000000 R09: 0000000000000000
[  599.499831][T11816] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000
[  599.499840][T11816] R13: 00007f5f789e6308 R14: 00007f5f789e6270 R15: 00007ffdd2e90198
[  599.499855][T11816]  </TASK>
[  599.751098][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  599.760351][ T5810] Bluetooth: hci3: Injecting HCI hardware error event
[  599.767267][ T5810] Bluetooth: hci3: hardware error 0x00
[  599.781604][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  599.948195][ T5940] usb 5-1: Using ep0 maxpacket: 32
[  599.958214][ T5940] usb 5-1: device descriptor read/all, error -61
[  600.080146][T11824] CIFS: Unable to determine destination address
[  600.223792][ T5940] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  600.409724][ T5940] usb 5-1: device descriptor read/64, error -71
[  600.532305][ T5940] usb usb5-port1: attempt power cycle
[  600.882157][ T5940] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  600.902551][ T5940] usb 5-1: device descriptor read/8, error -71
[  601.142159][ T5940] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  601.186743][ T5940] usb 5-1: device descriptor read/8, error -71
[  601.302273][ T5940] usb usb5-port1: unable to enumerate USB device
[  601.822244][ T5810] Bluetooth: hci3: Opcode 0x0c03 failed: -110