last executing test programs:

14.24462138s ago: executing program 3 (id=882):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

11.296560012s ago: executing program 3 (id=888):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
prlimit64(r0, 0x8, 0x0, &(0x7f0000000040))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_complete(0x0)
symlinkat(&(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x48)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x202, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0)

10.581542119s ago: executing program 4 (id=890):
r0 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, 0x0, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
pipe(0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x5})
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000000)={0x0, {0x1}})

9.683473072s ago: executing program 3 (id=892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}}, 0x0) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)

9.512812781s ago: executing program 1 (id=893):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close_range(r0, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x18)
setgroups(0x0, 0x0)
io_setup(0x8, &(0x7f0000000240)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ae87", 0x2}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
io_submit(r2, 0x80101, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x1}])

9.496977788s ago: executing program 3 (id=894):
socket$unix(0x1, 0x1, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x69)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x80000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, 0x0)

9.272613021s ago: executing program 1 (id=896):
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x78e8316e712748a3], [0x0, 0xffffffff, 0xffffffff, 0xffffff00], 'gre0\x00', 'dvmrp1\x00', {}, {0xff}, 0x3c, 0x6, 0x0, 0x1}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xfffb, 0xfd}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffe33, &(0x7f0000000680)=ANY=[@ANYBLOB="24e6bc86d25b60bf62b70651214377ce4019c2169c2165df5fbe3cd65fe485dce4b01b54209521f295a5da5ecf5fd444f24b9106a762c564ff996109bba108787e399ad8d676f45c7f2c5db307fc64930e9ae3299d16e52a988cd6e6b2dfb1b8763ee5b176afab58a4b27b1e70c73e5e9f04478c9c182a9fb44232402e4d269a446265aeaf0010aaa3acea411952749008cc9e73fdb45d5084f8d9e021a98fe277a5ee6829bea426e3438beb01d2544d1a029b65fb496ef1c9e656311e5ba46308c5b7548efe9d3b92dcfd0151c6b92941f4b97c1a40d0a3016e217583a9a91fa27cd72048ec2879", @ANYRESDEC=r3, @ANYRESOCT=r3])
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESHEX], 0x14c}, 0x1, 0x0, 0x0, 0x4c000}, 0x44000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da)
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f0000001f00)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000900)=""/232, 0xe8}], 0x2, &(0x7f0000000dc0)=""/47, 0x2f}, 0x4}, {{&(0x7f00000005c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/193, 0xc1}, {&(0x7f0000000b00)=""/133, 0x85}], 0x2, &(0x7f0000000c00)=""/113, 0x71}, 0x1}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/62, 0x3e}, {&(0x7f0000000cc0)=""/113, 0x71}], 0x2, &(0x7f0000000d80)=""/56, 0x38}, 0x3}, {{&(0x7f0000000e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, &(0x7f0000001ec0)=""/3, 0x3}, 0x5}], 0x4, 0x10043, 0x0)

8.359119962s ago: executing program 4 (id=898):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xf, &(0x7f0000000300)={0x9, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

6.148866785s ago: executing program 2 (id=904):
syz_usb_connect(0x5, 0x24, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb300102030109020000080904000000d076d80e00000000"], 0x0)

6.035786427s ago: executing program 3 (id=906):
r0 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, 0x0, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
pipe(0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x5})
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000000)={0x0, {0x1}})

5.516683856s ago: executing program 1 (id=907):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0)
syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
write$uinput_user_dev(r3, 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000340)="b64424", &(0x7f0000000240)=@udp6=r4, 0x1}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0)

4.847830981s ago: executing program 4 (id=908):
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b629db190bdb4215729d4ec3f85f087bc4e6bea0212ed2d33fda12857254ebbc698617a23f1bb6d2f25fdafd908e0a8db1c6d53f92dd27e1f7c5b53122e5ca2273059c5149aca792b8e0627b35e89c0f29cf0e8dc66b0e590f38638670da89e916fde1ddab01e8830330bb07772fa514c9a7cc5fb1441ae8b30870e2e33cb93f7903d7d5eb8edd1b1b1dfd3ba460315ff89643a2a0aac79ea4ad7caa5608a2cba2df6743c0faf6798fabd6bd25a8bed652ffe07940b948439bf1c5b0bce3c769472dd221f9542ab16fc0d90d8c058f35754282093385163a15afbc187b08e5b5dc68ff8cc93477d0b387", 0xea}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f00000002c0)=0x10, 0x1000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000000))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202)
chdir(&(0x7f00000001c0)='./bus\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r4)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
getpid()
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x9}}, './bus\x00'})
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2)

4.669245693s ago: executing program 4 (id=909):
capset(&(0x7f0000000c00)={0x20080522}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
unshare(0x2c020400)
msgget$private(0x0, 0x240)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r6, &(0x7f00000004c0)="762db69bc937db17e3fd6d629bed21d50eddde6d7a97f3e5fe59ce6f23847328751eccd9a918a36bc58d86e39972be0aab3b3f97ee4436432622fd6225c51e3c990584d00f3c3a4da277ecc7511d4a1a1b0215b5addc09b28974e206714a04588448562db621010291c47e1a15758d477567f47341d4e2d64174ad64ca68b19dc53f3dad172d762189caad30df62f6bb89a49bf20ce2a35c8b82b234f86272278ccdbeb756c9c79c15", &(0x7f0000000580)=""/166}, 0x1a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r7, 0x89e1, 0x0)
ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000200)={0x3, @default, 0xee00})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$xdp(0x2c, 0x3, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r10=>0x0})
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))

4.540384418s ago: executing program 0 (id=910):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[], 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20080}, 0x404c400)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r3 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

4.396831544s ago: executing program 1 (id=911):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180001000000000000000000070004009500000000000000a07506d954b058573e5be82620b9cc3e702dc235739b2584aeafc5fab038e46a5c964ec173deb125059ae018cef012553d4857ae4ea6d53710b40ad44d0e6b076503a4ffd59ba102e55d86d55b832b160a911760ab82e4ac4edbc79f3b314872e4cbf40e0a392e92d1f76757dba6d25a8dd84e2834ce47f2876c5f2f8ff166cee8192a480c3ea92249c04537400d7f655b1a7c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (rerun: 32)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00') (async)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x8, 0x3)
userfaultfd(0x80001)

4.268789359s ago: executing program 0 (id=912):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @loopback, 0x20000}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setfsgid(0xffffffffffffffff)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r7, 0x0, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f00000003c0)={0x3, 0x9, 0x3})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x4000)

4.16193955s ago: executing program 1 (id=913):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc8)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
rmdir(&(0x7f0000000640)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)

3.871323881s ago: executing program 1 (id=914):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000)
madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x190280)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file0/file0\x00', 0x6b)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x2)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000})
landlock_restrict_self(r1, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x5303a, 0x0)
umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00')
fstat(r3, &(0x7f0000000200))
syz_genetlink_get_family_id$nl80211(0x0, r3)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x21, 0x0)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00')
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0xe0, 0xc0, ""/192}, &(0x7f0000000140)=0xe0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)

3.797453975s ago: executing program 2 (id=915):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6d5e, 0x0, 0x0, 0x7ffc1ffb}]})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x9}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

3.666424338s ago: executing program 4 (id=916):
socket$unix(0x1, 0x1, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x69)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x80000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, 0x0)

3.345076932s ago: executing program 0 (id=917):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000100)=0x8, 0x9, 0x1)
r1 = getpid()
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000240)='sched_switch\x00', &(0x7f0000000280)='sched_switch\x00']}, &(0x7f00000004c0)={[&(0x7f0000000340)='*\x00', 0x0, &(0x7f0000000480)='\x00']})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f0000006680))
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/174)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000380)=""/143, &(0x7f0000000000)=0x8f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
request_key(0x0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f00000042c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x20}}], 0x1, 0x0)
bind$alg(r4, 0x0, 0x0)

3.198944516s ago: executing program 0 (id=918):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xf, &(0x7f0000000300)={0x9, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

1.952708392s ago: executing program 2 (id=919):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e14060200fe80000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x5ed5, &(0x7f00000002c0)={0x0, 0xe6c, 0x100, 0xfffffffc, 0x8040001})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)

1.070321331s ago: executing program 2 (id=920):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1f, @loopback}, 0x51)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f00000000c0)={0x2, 0xe21, @empty}, 0x10)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000400)={0x0, 0xffffff1e, 0x15a4b1ab, 0x0, 0x16, "001bf106000020000000000000001f00"})
syz_open_pts(0xffffffffffffffff, 0x101)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffdfa, &(0x7f0000000200)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x5, [0x6, 0x7f, 0xec6e, 0x7, 0x6, 0x7, 0x8000, 0xc, 0x1, 0x3ff, 0xef, 0x9, 0x2, 0x3, 0x5, 0x2, 0x8, 0x0, 0x355c, 0x0, 0x7, 0xfc4a, 0x2, 0x2b13, 0x400, 0x5, 0x0, 0x0, 0x5, 0x9, 0x4, 0xf, 0x3f, 0x8, 0x2, 0xb, 0x7ff, 0x5, 0x7, 0x4, 0x7, 0x7, 0x3, 0x3, 0x6, 0xfe00, 0x1, 0x5], 0x4982}})
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000bc0))
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={'sha224-ni\x00'}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x810)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000c0000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

900.983936ms ago: executing program 0 (id=921):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x3a, 0x1, 0x0, 0x45993b5a07edc12c)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x8000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x3, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r4, 0xe, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

596.66647ms ago: executing program 0 (id=922):
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) (async)
sched_setattr(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x6, @string={0x6, 0x3, "cb2226b8"}}}, 0x0) (async, rerun: 64)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) (rerun: 64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setstatus(r3, 0x4, 0x42800) (async, rerun: 32)
close(0x3) (async, rerun: 32)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002300)="8332dc80f0d9e1551a26bddb19fafb8b59c1c47a41aaca2c34765a0f4c00c2ca59f37acb52d527f6e8ec616edb24c090a772e78e5d82994bee32c4da07a75bcd44fbfb9a34db358def5dd0b6aaa0bf6e13dc2190871cb8db948f1fbe55289560247c5dc4a45d63a06d90bdfcec9ed20e4f977d9f452153c842e9330c799c3bb623ffeb21116a62f527f36c4ccb34d8b71a6a2be00131deb6fcec097b8098cdf4767a39feddf014c223464e98a22b2275c2b7356853d7ae171e29ff77d3ec5641bca482d2e8191cfaa55c54839a833822e77c44d3bd3dd5a9d5dd3c71c21b1bb449a4bec50fb0c68f227257caaa7eb894a669e3942e345e204daa13aed5cfaede408bce81a192a1c7331aa9b651f127856677d69d326f2b0aee016dde112ee0ce55d0e4e6a37cb0e5ef8005476a977b7a2bacd9ac844f10d1518e6c2cdb4f4a60f59131f6dc200c7acfb031e578e25ccdba4280911faf559ed337605079f68cb7ad450f1a8965493103a0d5921e18c1ae0b6caf99f4e4672c5464f3e28dfc0b3392b4e062594c9a21866f85f18634f5d89a037703ac337156cb98eae7fac8e22e118b8c2b6470a0b4cba046cac7b0a794c96a38f83fbe1230535433a225a9326cfaf398a7a453feed4cc88b6fd9b8287b3dbf742f0c1c672e07be41185a791e3400b6c09ba8b1ba249f07f726496f48f9fef2df32a9051bf1693b59f3268e7496905a5df6bc2314d10c73ee2d283ca795b4d6b6da4839ab18bf5540031316d2bd6f41e51d32b1bc2ca0e9688ee45cc4f217dadb07f9508ee0a3bf16db4e453b9394cb9f8f04f1ab8653b87193157f06f698f0774bf3b992d904235a4fe9d72ddfff96c3706b01046fc490137a4b7482e57871c051c554927ea75eaf2292e0e31ba28638016f1bda4f18b5d2ce074e8db2a679433de4f39789534a4a8c99e10139d4959eabdee2c061b49b4e9487ba36f50b321b13481d4c3444ea5e9cf25d11cc11272edd56a25e7fc011502040f7b881037793ddc9f71b40d780d4050c146e4b7b29e085996e128f21730a0c4d3330399f2b97c1cd8668b611a88377bf1664be7438f0bc22bec73e37b8d3fc1f4804364dc6c2b0cd6b3b32fb0bebc21a7e7d633a36a89ef46433507513d8da864c38b93ab415a25b075a9109dc5b2aaaff100d97d5a0ebb7bfdfb152fb8ac05907dae1fc785fcdc46212f83066664663c45e4682667118dd9480c6f4add9ab40105c9357d533f5df960cf370326f25a82c43d7b65d5863cd763a81feada619b90e5b0ec77b32bd517fed2cde85e2ad1e51af8244d8701f5ef06d67398530c26ff6aebb7c5426be5a3380939915ecc88b1472e33b1a4da579924f4fd4197c7db5b40c1c38c0c123c1bdcfb3e3b3f3de1d4b2a4a36e3daec2a6319a2b05d725a3901ed084ff22c8db80bc4dd270c5a05d52f6141c42b56fc326d3b335757724b2866ab2e29ad312f7a34ee1b926b5af8a651b4fe2ae66d6704cb5887fb867bc47a42f9ba23ae66b4ba5c933b0fb62c3253a5813870fa4fbd54152cf9990103a49af2f90fff760749f1d2b049ecaceeb04fce9d6a3c596e1cf0d8341e6c1f948f830a59121c3841b95289ad401b35b0edc212ceccd53cf366a69cc2adddd8c053826c1e5ab1926451b45b56de411589f55ef4a1f0d9670b36aefd0640e54f18f82c24484773bb2363d9f0ca728a93d4199a9dd6ae523fc492c05fa24524ad8f383d0df9ea55fb6c13fa0b10f6ae833c0f5d98cfaea271c2303f9c0de869b582fa2caafed0c47921bedfc1ed6cedfaea0c3c3b3bc19eee9e0a6f796d787976a0e2bf0b246c74e03e9f197ea27f1eb6f465a93a32bc56588a87d2d9b3af2ce38b9bf05fd3b876bdc4375e200c3008cf8b88d9e98e74e30434ff22cdebb5af19c3796584de206407bc1c44bccc3ea21d79c2bbfeb16e48f0322907b911e802bfa90df95305eb31ff0a3c872c0b2f2a57e1ae0e006e9448c4d6361e85da2253f3103739fbcc0980eade4e6e012ecc8a39026a53927ab630517d1c10940da9dacbd5e3fc39d69e683934d099c1f536a74c967bbc8a6acaaee4d401f759b6bf1f643f152af6312d848535a429cd53137794d2386580e5b048ad5f3989348d0fa4559df61eb9a6972ad52e14b02cc9eb6d4c63a14cdc2d43a834997faf4d2826f11dbd5a02ebf7b816c5acf93eef0d068e663e2cf631ef6087c185b83168ce76999b33a919b5566b7d177c4c45a18d97631fc2a9e71aaa099b50aaef9a77c2bc8e7a2ac589c7f2de671091ec0be7ab13c10a1e98a8c7c5a34bbb03ee8a80f024961568a228662ddb1b791fad5ef6d4a4535db8505fae512fd29f660e08e0b406b6a61c5cf008ba9243ae799192b1c1e9d8802663ddbb343c04d0a832649afbc8ce8ddd9d5d4da27a2c379b6feec1ddf956c87b24b29aa413f7d75625a9cddf61553bdb1986169d8702f09e268aa499d1f4d0510228f9c2066977ebdc41eb7a31eb38e754a584db9642acff1395e013ce242e4afceabfaa80fe360cdd11b66dae3b854490c59523a0ffcc98726f7ac0b3bac63757f7d89949f7db576d58e13531b41d9f7b3af01c455cf3d580c3415f7dfad5aa9141e864f9dc3f48bbe8528af64de51aef54e5eb6e83bc0f8ab087e4afb778866601c48890cc051b00667960248962ecdea4cd3339838a5a1c6d2c000eda8a7a11dc5b238333a501f18612a50088dff8a8af3366c8ed96d6c42e1510bcd6412ef5457f7c9e9677ae9c5e7d6670039cf98ce7bbdb9843c0ecedef31d99de5474f999b0ebbea6a5f61a32800a9dfb9ffd67477b785d5120214dd51b4fd0ab937e9e919f5aae54cd926bcac65c7edc504088bfdf40243f148c65ade6fb8046aeea23be71f3a0be8c0c810a7a289ed9afa124735c15e12ba3206a59e07ec15fad101011b305fd285d3cd8fcc263ae017f9dc614e28051ecf2d7f803aacf4adc6865504fc1fa064f3bc2c5fb5505003d297cbc94ae87f8fce0b54f8e8b13ef742b08767cb812994a31c3bbfd7d9aed6cc75d28951f87c9f5579fe59f0737fee8bc88ee310932dbafb09438b853ba299aa0d3394c733c6a09bb0f2469314a908204a88e0c3593c01189885703cf1d29f370007b7bc385de4af2863ba840990277a2134a153ad5f275347af766edf556fb24dea7800c9e9d7648a0cc099fda4fc3d71503623c9e7577478101dbe05bbb3b0d593daf1d487ee94c56bb86e6e4e9f6deb68e546313006139a7a2bf4d9378691488bff8889996643842fb7d1859bdfb6161ec4e1d9d455ea1057b0737e694250d6eb8717b8b762c224fa583466f72eb068fb045a112f6f96bb09c06cb4dde0e5addbfb88d7b6e311f2d0c13fc81f75321c93b688f5687ec5dbe865ae56607a7d87414cfcee2228613b8fab39978c689d03cdca61eb42747aade6573a26a5340c2a44c9d32cd88aadd08906cde4b89d6f559f757c2c2ca3e0e36bda991d0af6ee3b39dcc6afc8c0be282236f820a08a17be67087c45c82aeaca29c933e42e198a6700d86e86e6e2b2ae641da36eee30fa2d5fc6d3234c1d7d657c93d23efe2ddc351a00698992d5ee4a3d3f32cec291f5dfcad9596e731e654361ca36d5de513b677850a122c974c70088695cce771ccee0e1270e447404c6a42857b87a6555df8c8a967b66afe758feeda9647088227a3abf057cc29e033be8e1a7bdfb53bd33b8f4f8f95d5420b75c15e83024b847cf87e9c21ac2e39fa3da027864c9b5b96f4463c978e60723b0cc80866d9b6b5a4b7e885c7c5bc1a7fc2ecb5bd17477a36279651cf2670911a2f92d20032fd36bba622f40e97491cc46da303e571de88b353b1eea5dfcbbfbae34db548cd7144da675a2055eef446bddfae7fa0fa7f76dffea47b901f9e41ea3e923193db3d3bae2194a106c9c41e1ecf539e9584608983e2ec127f99ac3e7cd6fab0fa77b471e786515dd5aa68baa6d74bb7a30046ef992fc978711b7532246c9fde6d3c6fd59737008cbfd004a1dbc7677f649b13d296ab859e1f0f81bd88ed264c1555d77a2c62fc3ae6062be235f681babaf202439f70e14b1d903b032c9a7a14f150b9bc1a89b9e3b2a2a6368bb32870ac167ab4a8f5b87714cb4292623d392d4fd00a86bcf8d0845a34d3cf133087cf404d6debc3037059f1434be83ccf686ffc1c9a2280c5d7ec02d21d79fccacba99d4e10fb819965db7189f58a2be169c700777931aa8c9f2a7dfc67b80d6979a8aabed5191d4e7c19ff48017a5a76ca621919c0f9471cdb5a9a4436e5ecb89405e3fe2e7dfe426e21e3d4526efb276fc06cd11e377eddda33e53263da3cb394a442db272355ab241dc8d22664ad28fabb39bd18e86b7fa0514ccdae13ded6f9331ca02e087c174497652e4e3fdcb20931a6437e13857c97e2c043d15983d0a663700538a54d8e12f2c37f238ac6e9da84d7a71b21918c2e86e204d2215752b71d724f45dd72821ec3f5df49f2a69439ce3d83884792b718295b5c0b8efca4c2b4a4f635587f85a2484ab523495f021b2e1658df958f6f03c8162b337f96cad9e44fb1586d5e10056771d82428efce294ebbe8d29de400258777afb3efc7dc18e0039bc30025e0b926b8ee7e92b4d571d072617479d105c443efbb52813d372c777950940710ed6e9a710ae541058f8aa448d124da2421467cb93ce116dc9e3b45424b59c19b30cc7013b0e22ecd8a78ed71c42ff18abfdb7a0cbd18e4344ba89ba5a923e8e70ffb4070db1f884261089d0e49ebcc2a00b84b51394c5cff30509ec606cd0206618f078c7c825e307e91a0eb3487102b9eebf89d2c29da5212917d852e86b4516b04af925737068df7311449d214ed14731ece93fa8115ba1e03ae5951662ef328452738dd09947c22f0e80a7c7051cb7bb0884e7697694fe0bcd610289c7f0670aa2168512e500a10dfdb44f97d72f717f3b80a180ebfec184ec555369d8b939c773a52ca42162cf0f958c01e2280090675036b8cbd81c34ca4c22dd04d378d415fb5973b938f40a5a72894138324dcf8c9717c9e84e21bc13927e269dcb66389fcc7f6beb71d0846653bbcbb8d044e2a6b3a6c8b68ff88372313ac46ed4d3006c9cab20e27735afeadb1b576a27b05c25a8594a7c10c30e676fc8b2cc7ea1e9822ac2fb3a837845ef0cd7fe44e4bdfd0a57449e056cf01d512e47c0257dccb4faca4cac390c7035ccddb3aae16f22401cc416d406b05dd872a4dc477ea90f4591a73fce22a5dd7c35fb9e1c774eb9b9b1b157b1a369d65229670fd3321bdefde7e840771f16e532a65947d3b4a3dfb34f78c263a7285b2b12e421a8ad6eff505ebe997540ab54425d68c58ed7e3032abc5d2966e494ecaffa5ae5ef566a205bb4ebfc88ed60c93e", 0xef1) (async)
r5 = fanotify_init(0x200, 0x0)
memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) (async)
fanotify_mark(r5, 0x1, 0x48001059, 0xffffffffffffffff, 0x0)
r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5)
unshare(0x68040200) (async)
socket$inet6(0xa, 0x3, 0x3c) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32=r2, @ANYRESDEC=0x0], 0x0, 0xc1, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

261.353551ms ago: executing program 3 (id=923):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000040016"], 0x3c}}, 0x0)
listen(r0, 0x40eca)
r4 = accept(r0, 0x0, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040), 0x10)
listen(r5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="fbb9", 0x2}], 0x1)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8)
pread64(0xffffffffffffffff, &(0x7f0000000640)=""/237, 0xed, 0x4eb)
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r9}, 0x8)
close(r6)
socket(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000080))
ptrace(0x10, 0x0)

220.548893ms ago: executing program 2 (id=924):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e00010063"], 0x84}}, 0x800)
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000001000000aa3a02020100000000ff010000000000000000000000000001000000000018907804000000000000000000000000000000acca56e7ffae34b30d99656dba14504d774fdbb54cbb0f9997ba84ec73e634fc46c9448d729f59df79d11dda573d582ab997ad05"], 0x0)

108.610925ms ago: executing program 4 (id=925):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x26, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8912, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)

0s ago: executing program 2 (id=926):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x8000300, 0x33565348, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x4}, {0x5, 0xca}, {0x2, 0xffffffff}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x8, 0x3078182a3427730f, 0x1}})
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4c, 0xaf, 0xfa, 0x8, 0x2f24, 0x3e59, 0xdbfa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa7, 0x7, 0x0, 0xff, 0x5d, 0x1, 0x5}}]}}]}}, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_off}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0xfffffffd, 0x80000001, 0x5, 0x724}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
lseek(r2, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x3, 0x23, 0x1, {0x22, 0xdab}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

kernel console output (not intermixed with test programs):

0.0: probe with driver asix failed with error -71
[  188.290674][ T6448] usb 3-1: USB disconnect, device number 17
[  188.418479][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'.
[  188.740703][  T975] usbhid 1-1:0.0: can't add hid device: -71
[  188.756003][  T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  188.767932][  T975] usb 1-1: USB disconnect, device number 19
[  188.853023][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.864864][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.008635][   T30] audit: type=1400 audit(1754687251.522:446): avc:  denied  { read } for  pid=8873 comm="syz.4.478" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  189.627650][   T30] audit: type=1400 audit(1754687251.532:447): avc:  denied  { open } for  pid=8873 comm="syz.4.478" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  189.656826][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.207218][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.387628][ T8877] 9pnet_fd: Insufficient options for proto=fd
[  191.133955][   T30] audit: type=1400 audit(1754687253.672:448): avc:  denied  { append } for  pid=8903 comm="syz.1.483" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  191.202911][ T8882] could not allocate digest TFM handle sha224-ni
[  194.225013][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.232155][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.918311][ T8938] tipc: Started in network mode
[  194.923172][ T8938] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  194.932342][ T8938] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  194.941390][ T8938] tipc: Enabled bearer <udp:syz0>, priority 10
[  195.026343][   T30] audit: type=1400 audit(1754687257.562:449): avc:  denied  { listen } for  pid=8932 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  195.110895][   T30] audit: type=1400 audit(1754687257.612:450): avc:  denied  { getopt } for  pid=8932 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  195.402176][   T30] audit: type=1400 audit(1754687257.932:451): avc:  denied  { ioctl } for  pid=8936 comm="syz.2.493" path="socket:[15152]" dev="sockfs" ino=15152 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  195.957476][ T8960] FAULT_INJECTION: forcing a failure.
[  195.957476][ T8960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.959186][   T10] tipc: Node number set to 1
[  196.015107][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.3.498 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  196.015125][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  196.015131][ T8960] Call Trace:
[  196.015135][ T8960]  <TASK>
[  196.015140][ T8960]  dump_stack_lvl+0x16c/0x1f0
[  196.015160][ T8960]  should_fail_ex+0x512/0x640
[  196.015173][ T8960]  _copy_from_user+0x2e/0xd0
[  196.015185][ T8960]  kstrtouint_from_user+0xd6/0x1d0
[  196.015200][ T8960]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  196.015215][ T8960]  ? __lock_acquire+0xb97/0x1ce0
[  196.015238][ T8960]  proc_fail_nth_write+0x83/0x220
[  196.015251][ T8960]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.015267][ T8960]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.015279][ T8960]  vfs_write+0x2a0/0x1150
[  196.015292][ T8960]  ? __pfx___mutex_lock+0x10/0x10
[  196.015303][ T8960]  ? __pfx_vfs_write+0x10/0x10
[  196.015317][ T8960]  ? __fget_files+0x20e/0x3c0
[  196.015333][ T8960]  ksys_write+0x12a/0x250
[  196.015344][ T8960]  ? __pfx_ksys_write+0x10/0x10
[  196.015358][ T8960]  do_syscall_64+0xcd/0x4c0
[  196.015369][ T8960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.015380][ T8960] RIP: 0033:0x7f4c0878d69f
[  196.015389][ T8960] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  196.015400][ T8960] RSP: 002b:00007f4c069f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  196.015410][ T8960] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c0878d69f
[  196.015417][ T8960] RDX: 0000000000000001 RSI: 00007f4c069f60a0 RDI: 0000000000000005
[  196.015423][ T8960] RBP: 00007f4c069f6090 R08: 0000000000000000 R09: 0000000000000000
[  196.015428][ T8960] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  196.015434][ T8960] R13: 00007f4c089b6038 R14: 00007f4c089b5fa0 R15: 00007ffc4bafe838
[  196.015448][ T8960]  </TASK>
[  196.374079][ T8968] 8021q: VLANs not supported on sit0
[  196.395469][ T8968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.404965][ T8968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.544519][   T30] audit: type=1400 audit(1754687259.082:452): avc:  denied  { ioctl } for  pid=8979 comm="syz.2.504" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  197.388280][   T30] audit: type=1400 audit(1754687259.902:453): avc:  denied  { write } for  pid=8988 comm="syz.2.506" path="socket:[16436]" dev="sockfs" ino=16436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  197.997617][ T9020] genirq: Flags mismatch irq 5. 00200000 (das16m1) vs. 00200000 (pcl812)
[  198.158536][ T1212] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  198.184759][   T30] audit: type=1400 audit(1754687260.722:454): avc:  denied  { accept } for  pid=9012 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  198.338904][ T1212] usb 1-1: Using ep0 maxpacket: 16
[  198.355826][ T1212] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.378537][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0
[  198.385250][ T1212] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  198.399388][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.420330][ T1212] usb 1-1: config 0 descriptor??
[  198.570418][   T30] audit: type=1400 audit(1754687261.112:455): avc:  denied  { execute } for  pid=9034 comm="syz.3.512" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  198.703485][   T30] audit: type=1400 audit(1754687261.192:456): avc:  denied  { create } for  pid=9038 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  198.727839][   T30] audit: type=1400 audit(1754687261.202:457): avc:  denied  { sys_admin } for  pid=9038 comm="syz.2.513" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  198.811832][ T5960] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  199.040845][ T9002] tmpfs: Unknown parameter '@|Þ'
[  199.148221][ T5960] usb 5-1: Using ep0 maxpacket: 16
[  199.174319][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 84, changing to 7
[  199.214165][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 17928, setting to 1024
[  199.243425][ T5960] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  199.253383][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.268176][ T5960] usb 5-1: Product: syz
[  199.272354][ T5960] usb 5-1: Manufacturer: syz
[  199.290137][ T5960] usb 5-1: SerialNumber: syz
[  199.310937][ T5960] usb 5-1: config 0 descriptor??
[  199.331959][ T1212] usbhid 1-1:0.0: can't add hid device: -71
[  199.346532][ T1212] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  199.459634][ T5960] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  199.511415][ T1212] usb 1-1: USB disconnect, device number 20
[  199.527930][ T5960] em28xx 5-1:0.0: DVB interface 0 found: isoc
[  200.100518][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.126262][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.444827][ T9102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.640966][ T5960] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  200.722079][ T5960] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  200.731650][ T5960] em28xx 5-1:0.0: board has no eeprom
[  200.829418][ T5960] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  200.844335][ T5960] em28xx 5-1:0.0: dvb set to isoc mode.
[  200.862322][ T5922] em28xx 5-1:0.0: Binding DVB extension
[  200.934611][ T5922] em28xx 5-1:0.0: Registering input extension
[  200.997009][   T30] audit: type=1400 audit(1754687263.532:458): avc:  denied  { audit_read } for  pid=9124 comm="syz.3.521" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  201.043906][ T5922] usb 5-1: USB disconnect, device number 24
[  201.050434][ T5922] em28xx 5-1:0.0: Disconnecting em28xx
[  201.055933][ T5922] em28xx 5-1:0.0: Closing input extension
[  201.136907][ T5922] em28xx 5-1:0.0: Freeing device
[  203.424705][   T30] audit: type=1400 audit(1754687263.532:459): avc:  denied  { ioctl } for  pid=9124 comm="syz.3.521" path="socket:[16546]" dev="sockfs" ino=16546 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  203.463345][   T30] audit: type=1400 audit(1754687263.672:460): avc:  denied  { bind } for  pid=9127 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  203.488188][   T30] audit: type=1400 audit(1754687263.672:461): avc:  denied  { node_bind } for  pid=9127 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  203.510827][   T30] audit: type=1400 audit(1754687263.712:462): avc:  denied  { read } for  pid=9126 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  203.778190][ T5960] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  203.955369][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'.
[  203.964693][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  203.977305][ T5960] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  203.986954][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.002193][ T5960] usb 2-1: config 0 descriptor??
[  204.008043][ T9151] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  204.443319][ T5960] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  205.316966][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'.
[  205.569997][   T51] Bluetooth: hci5: command 0x1003 tx timeout
[  205.576217][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  205.944991][ T5922] usb 2-1: reset full-speed USB device number 12 using dummy_hcd
[  206.048714][ T9135] mkiss: ax0: crc mode is auto.
[  206.867034][   T49] Bluetooth: hci5: Frame reassembly failed (-84)
[  207.126032][   T30] audit: type=1400 audit(1754687269.662:463): avc:  denied  { create } for  pid=9230 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  207.320898][ T9233] bridge1: entered promiscuous mode
[  207.405196][   T30] audit: type=1400 audit(1754687269.692:464): avc:  denied  { write } for  pid=9230 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  207.576825][   T30] audit: type=1400 audit(1754687270.112:465): avc:  denied  { accept } for  pid=9249 comm="syz.4.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  207.850284][ T5960] usb 2-1: USB disconnect, device number 12
[  207.898247][ T1212] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  207.914700][   T30] audit: type=1400 audit(1754687270.142:466): avc:  denied  { append } for  pid=9249 comm="syz.4.542" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  207.950971][ T9261] netlink: 'syz.4.543': attribute type 1 has an invalid length.
[  207.996842][ T9261] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.026932][ T9261] bond2: (slave gretap1): making interface the new active one
[  208.043322][ T9261] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  208.091107][ T1212] usb 3-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8
[  208.105105][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.113353][ T1212] usb 3-1: Product: syz
[  208.119550][ T1212] usb 3-1: Manufacturer: syz
[  208.124265][ T1212] usb 3-1: SerialNumber: syz
[  208.132056][ T1212] usb 3-1: config 0 descriptor??
[  208.138320][ T1212] hub 3-1:0.0: bad descriptor, ignoring hub
[  208.148155][ T1212] hub 3-1:0.0: probe with driver hub failed with error -5
[  208.157213][ T1212] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  208.168494][ T1212] usb 3-1: Detected SIO
[  208.175885][ T1212] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  208.380426][ T9308] lo speed is unknown, defaulting to 1000
[  208.383139][   T30] audit: type=1400 audit(1754687270.922:467): avc:  denied  { ioctl } for  pid=9238 comm="syz.2.540" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  208.388009][ T9308] lo speed is unknown, defaulting to 1000
[  208.443220][ T9308] lo speed is unknown, defaulting to 1000
[  208.444421][   T30] audit: type=1400 audit(1754687270.982:468): avc:  denied  { getopt } for  pid=9305 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  208.485264][   T30] audit: type=1400 audit(1754687271.012:469): avc:  denied  { unlink } for  pid=9305 comm="syz.1.544" name="controlC#" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  208.640665][ T9308] infiniband syz0: set active
[  208.646730][ T1212] lo speed is unknown, defaulting to 1000
[  208.653487][ T9308] infiniband syz0: added lo
[  208.696891][ T9308] RDS/IB: syz0: added
[  208.703532][ T9308] smc: adding ib device syz0 with port count 1
[  208.709964][ T9308] smc:    ib device syz0 port 1 has pnetid 
[  208.716496][ T1212] lo speed is unknown, defaulting to 1000
[  208.724403][ T9308] lo speed is unknown, defaulting to 1000
[  208.898223][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  208.904644][ T5858] Bluetooth: hci5: command 0x1003 tx timeout
[  208.918773][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.933351][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.970947][ T9308] lo speed is unknown, defaulting to 1000
[  209.712040][ T5859] Bluetooth: hci2: unexpected event for opcode 0x041c
[  209.719319][ T5859] Bluetooth: hci2: unexpected event for opcode 0x041c
[  209.846993][   T30] audit: type=1400 audit(1754687272.382:470): avc:  denied  { read } for  pid=9331 comm="syz.0.550" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  209.876615][   T30] audit: type=1400 audit(1754687272.382:471): avc:  denied  { open } for  pid=9331 comm="syz.0.550" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  209.905298][   T30] audit: type=1400 audit(1754687272.382:472): avc:  denied  { ioctl } for  pid=9331 comm="syz.0.550" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  210.001901][ T9308] lo speed is unknown, defaulting to 1000
[  210.098299][ T5960] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  210.209581][ T9308] lo speed is unknown, defaulting to 1000
[  210.252990][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.267603][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.282885][ T5960] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  210.292385][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.310374][ T5960] usb 1-1: config 0 descriptor??
[  210.320317][ T5960] xbox_remote_probe: endpoint_in message size==0?
[  210.412958][ T9308] lo speed is unknown, defaulting to 1000
[  210.419246][ T5859] Bluetooth: hci6: command 0x1003 tx timeout
[  210.426582][   T51] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  210.448228][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  210.536580][ T5960] usbhid 1-1:0.0: can't add hid device: -71
[  210.548858][ T5960] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  210.573135][ T5960] usb 1-1: USB disconnect, device number 21
[  210.626652][   T10] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  210.635832][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.657110][   T10] usb 5-1: Product: syz
[  210.664695][   T10] usb 5-1: Manufacturer: syz
[  210.670772][   T10] usb 5-1: SerialNumber: syz
[  210.677999][   T10] usb 5-1: config 0 descriptor??
[  210.691625][   T10] gspca_main: sunplus-2.14.0 probing 055f:c230
[  210.768544][ T6448] usb 3-1: USB disconnect, device number 18
[  210.782656][ T6448] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  210.838697][ T6448] ftdi_sio 3-1:0.0: device disconnected
[  211.530999][   T10] gspca_sunplus: reg_r err -110
[  211.611199][   T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  212.060143][ T9391] FAULT_INJECTION: forcing a failure.
[  212.060143][ T9391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.073405][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.1.554 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  212.073430][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  212.073440][ T9391] Call Trace:
[  212.073446][ T9391]  <TASK>
[  212.073451][ T9391]  dump_stack_lvl+0x16c/0x1f0
[  212.073472][ T9391]  should_fail_ex+0x512/0x640
[  212.073484][ T9391]  _copy_from_user+0x2e/0xd0
[  212.073497][ T9391]  memdup_user+0x6b/0xe0
[  212.073511][ T9391]  strndup_user+0x78/0xe0
[  212.073523][ T9391]  __x64_sys_mount+0x180/0x310
[  212.073539][ T9391]  ? __pfx___x64_sys_mount+0x10/0x10
[  212.073556][ T9391]  do_syscall_64+0xcd/0x4c0
[  212.073567][ T9391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.073578][ T9391] RIP: 0033:0x7f2ca458ebe9
[  212.073587][ T9391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.073597][ T9391] RSP: 002b:00007f2ca27d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  212.073607][ T9391] RAX: ffffffffffffffda RBX: 00007f2ca47b6090 RCX: 00007f2ca458ebe9
[  212.073614][ T9391] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000100
[  212.073620][ T9391] RBP: 00007f2ca27d5090 R08: 0000000000000000 R09: 0000000000000000
[  212.073626][ T9391] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[  212.073632][ T9391] R13: 00007f2ca47b6128 R14: 00007f2ca47b6090 R15: 00007ffc282d1ca8
[  212.073645][ T9391]  </TASK>
[  212.074918][ T9391] syz.1.554: attempt to access beyond end of device
[  212.074918][ T9391] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[  212.238835][ T9391] gfs2: error -5 reading superblock
[  212.512061][ T9387] SELinux:  policydb version -845211227 does not match my version range 15-35
[  212.541309][ T9387] SELinux: failed to load policy
[  212.880265][ T9403] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  212.888143][ T9403] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  212.896428][ T9403] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  212.904407][ T9403] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  212.915567][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  213.552997][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  213.758711][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.831980][   T10] usb 1-1: config 0 descriptor??
[  213.834543][   T24] usb 5-1: USB disconnect, device number 25
[  214.041757][   T10] ath6kl: Failed to submit usb control message: -71
[  214.041798][   T10] ath6kl: unable to send the bmi data to the device: -71
[  214.041813][   T10] ath6kl: Unable to send get target info: -71
[  214.043927][   T10] ath6kl: Failed to init ath6kl core: -71
[  214.044418][   T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  214.053122][   T10] usb 1-1: USB disconnect, device number 22
[  215.411216][ T5902] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  215.904433][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'.
[  215.924766][ T6448] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  215.932539][ T5902] usb 2-1: device descriptor read/64, error -71
[  216.228584][ T5902] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  216.296863][ T6448] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.307757][ T6448] usb 3-1: config 0 has no interfaces?
[  216.317254][ T6448] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  216.341172][ T9462] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  216.342556][ T9469] sctp: [Deprecated]: syz.3.566 (pid 9469) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.342556][ T9469] Use struct sctp_sack_info instead
[  216.409966][ T5902] usb 2-1: device descriptor read/64, error -71
[  216.418496][ T6448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.441646][ T6448] usb 3-1: config 0 descriptor??
[  216.549472][ T5902] usb usb2-port1: attempt power cycle
[  216.575329][ T9462] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  216.582168][ T9462] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  216.846173][ T9462] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  216.952878][ T9462] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  217.298187][ T5902] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  217.318801][ T5902] usb 2-1: device descriptor read/8, error -71
[  217.618291][ T5902] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  217.638723][ T5902] usb 2-1: device descriptor read/8, error -71
[  217.648167][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  217.748813][ T5902] usb usb2-port1: unable to enumerate USB device
[  217.868758][   T10] usb 5-1: Using ep0 maxpacket: 16
[  217.875187][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[  217.886896][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  217.896870][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  217.909805][   T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  217.919090][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.927617][   T10] usb 5-1: Product: syz
[  217.932082][   T10] usb 5-1: Manufacturer: syz
[  217.936875][   T10] usb 5-1: SerialNumber: syz
[  217.945778][   T10] usb 5-1: config 0 descriptor??
[  217.953073][ T9485] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  217.964608][   T10] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  218.499818][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  218.578222][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  218.605549][ T5922] usb 5-1: USB disconnect, device number 26
[  218.658168][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  218.745369][   T10] usb 3-1: USB disconnect, device number 19
[  219.041254][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  219.041368][ T5859] Bluetooth: hci4: command 0x0c1a tx timeout
[  219.067536][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  219.067545][   T30] audit: type=1400 audit(1754687281.592:474): avc:  denied  { name_bind } for  pid=9511 comm="syz.3.575" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  219.108005][ T9519] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.119756][ T9519] bond0: (slave rose0): Enslaving as an active interface with an up link
[  219.203871][   T30] audit: type=1400 audit(1754687281.592:475): avc:  denied  { ioctl } for  pid=9511 comm="syz.3.575" path="socket:[17970]" dev="sockfs" ino=17970 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  219.510393][ T5902] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  220.169512][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.188933][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.280840][ T5902] usb 2-1: Using ep0 maxpacket: 8
[  220.303006][ T5902] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  220.320866][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.395063][ T5902] usb 2-1: Product: syz
[  220.419126][ T5902] usb 2-1: Manufacturer: syz
[  220.423742][ T5902] usb 2-1: SerialNumber: syz
[  220.452980][ T5902] usb 2-1: config 0 descriptor??
[  220.476594][ T5902] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  220.496941][ T5902] usb 2-1: setting power ON
[  220.508210][ T5922] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  220.518311][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  220.548638][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  220.578874][ T5902] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  220.598731][ T5902] usb 2-1: media controller created
[  220.631927][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  220.651352][ T5859] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  220.684777][ T5922] usb 1-1: Using ep0 maxpacket: 32
[  220.695027][ T5902] usb 2-1: selecting invalid altsetting 6
[  220.703019][ T5902] usb 2-1: digital interface selection failed (-22)
[  220.719003][ T5902] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  220.736529][ T5922] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  220.745424][ T5902] usb 2-1: setting power OFF
[  220.771228][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  220.780535][ T5922] usb 1-1: config 0 has no interface number 0
[  220.786695][ T5902] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  220.815764][ T5922] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  220.836302][ T5902] (NULL device *): no alternate interface
[  220.850721][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.888179][ T5922] usb 1-1: Product: syz
[  220.898166][ T5922] usb 1-1: Manufacturer: syz
[  221.013419][ T5922] usb 1-1: SerialNumber: syz
[  221.027351][ T5922] usb 1-1: config 0 descriptor??
[  221.035236][ T5922] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  221.051806][ T5902] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  221.088893][ T5902] usb 2-1: USB disconnect, device number 17
[  221.256016][ T5922] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  221.274369][ T5922] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  221.475072][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  221.678950][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  221.687221][ T5922] usb 1-1: USB disconnect, device number 23
[  221.882464][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  221.921657][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  222.049465][ T5922] quatech2 1-1:0.51: device disconnected
[  222.253158][ T9659] netlink: 19 bytes leftover after parsing attributes in process `syz.4.589'.
[  224.083547][   T30] audit: type=1400 audit(1754687286.622:476): avc:  denied  { bind } for  pid=9692 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  224.136446][ T9695] netlink: 'syz.4.598': attribute type 83 has an invalid length.
[  224.198333][   T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  224.349066][   T10] usb 1-1: Using ep0 maxpacket: 8
[  224.365052][   T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  224.393246][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  224.427929][   T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  224.442493][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  224.454106][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  224.468612][   T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  224.476121][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  224.511036][   T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  224.556853][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  224.577633][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  224.593151][   T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  224.613230][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  224.635152][   T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  224.674174][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  224.714403][   T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  224.746160][   T10] usb 1-1: string descriptor 0 read error: -22
[  224.756446][   T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  224.790083][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.845140][   T10] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  225.189309][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.215110][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.238851][   T10] usb 1-1: USB disconnect, device number 24
[  225.482256][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.491865][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.649545][   T30] audit: type=1400 audit(1754687289.192:477): avc:  denied  { ioctl } for  pid=9742 comm="syz.1.606" path="socket:[18103]" dev="sockfs" ino=18103 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  227.239630][ T9756] tipc: Failed to obtain node identity
[  227.245265][ T9756] tipc: Enabling of bearer <ib:wlan0> rejected, failed to enable media
[  227.748234][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  227.830563][ T9774] FAULT_INJECTION: forcing a failure.
[  227.830563][ T9774] name failslab, interval 1, probability 0, space 0, times 0
[  227.844518][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.4.616 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  227.844543][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  227.844554][ T9774] Call Trace:
[  227.844561][ T9774]  <TASK>
[  227.844568][ T9774]  dump_stack_lvl+0x16c/0x1f0
[  227.844599][ T9774]  should_fail_ex+0x512/0x640
[  227.844615][ T9774]  ? fs_reclaim_acquire+0xae/0x150
[  227.844641][ T9774]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  227.844664][ T9774]  should_failslab+0xc2/0x120
[  227.844685][ T9774]  __kmalloc_noprof+0xd2/0x510
[  227.844709][ T9774]  tomoyo_realpath_from_path+0xc2/0x6e0
[  227.844735][ T9774]  ? tomoyo_profile+0x47/0x60
[  227.844763][ T9774]  tomoyo_path_number_perm+0x245/0x580
[  227.844786][ T9774]  ? tomoyo_path_number_perm+0x237/0x580
[  227.844808][ T9774]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  227.844829][ T9774]  ? find_held_lock+0x2b/0x80
[  227.844875][ T9774]  ? find_held_lock+0x2b/0x80
[  227.844895][ T9774]  ? hook_file_ioctl_common+0x145/0x410
[  227.844927][ T9774]  ? __fget_files+0x20e/0x3c0
[  227.844952][ T9774]  security_file_ioctl+0x9b/0x240
[  227.844977][ T9774]  __x64_sys_ioctl+0xb7/0x210
[  227.845005][ T9774]  do_syscall_64+0xcd/0x4c0
[  227.845023][ T9774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.845041][ T9774] RIP: 0033:0x7f607f38ebe9
[  227.845056][ T9774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.845073][ T9774] RSP: 002b:00007f608022d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.845091][ T9774] RAX: ffffffffffffffda RBX: 00007f607f5b5fa0 RCX: 00007f607f38ebe9
[  227.845103][ T9774] RDX: 0000200000000180 RSI: 00000000c0145608 RDI: 0000000000000003
[  227.845114][ T9774] RBP: 00007f608022d090 R08: 0000000000000000 R09: 0000000000000000
[  227.845125][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.845135][ T9774] R13: 00007f607f5b6038 R14: 00007f607f5b5fa0 R15: 00007fff033dd5a8
[  227.845160][ T9774]  </TASK>
[  227.845563][ T9774] ERROR: Out of memory at tomoyo_realpath_from_path.
[  228.068695][   T24] usb 1-1: Using ep0 maxpacket: 8
[  228.076105][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  228.084942][   T24] usb 1-1: config 7 has an invalid interface number: 60 but max is 0
[  228.095743][   T24] usb 1-1: config 7 has no interface number 0
[  228.103824][   T24] usb 1-1: New USB device found, idVendor=12d1, idProduct=ac64, bcdDevice=4f.de
[  228.114621][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.124134][   T24] usb 1-1: Product: syz
[  228.136749][   T24] usb 1-1: Manufacturer: syz
[  228.146678][   T24] usb 1-1: SerialNumber: syz
[  228.374728][   T24] qmi_wwan 1-1:7.60: probe with driver qmi_wwan failed with error -22
[  228.407179][   T24] usb 1-1: USB disconnect, device number 25
[  228.754713][   T30] audit: type=1400 audit(1754687291.052:478): avc:  denied  { getopt } for  pid=9791 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  228.829784][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.849510][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.877003][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.896327][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.912162][ T9801] netlink: 'syz.3.621': attribute type 39 has an invalid length.
[  228.976217][ T9810] netlink: 'syz.3.621': attribute type 11 has an invalid length.
[  228.995228][ T9812] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  229.251954][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'.
[  229.865931][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.956012][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.998240][ T5902] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  231.158987][ T5902] usb 1-1: Using ep0 maxpacket: 16
[  231.166592][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short
[  231.177469][ T5902] usb 1-1: config 129 has an invalid interface number: 62 but max is 0
[  231.424833][ T5902] usb 1-1: config 129 has no interface number 0
[  231.438198][ T5902] usb 1-1: New USB device found, idVendor=1199, idProduct=9010, bcdDevice= b.eb
[  231.456239][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.480108][ T5902] usb 1-1: Product: syz
[  231.490264][ T5902] usb 1-1: Manufacturer: syz
[  231.504696][ T5902] usb 1-1: SerialNumber: syz
[  231.665511][   T30] audit: type=1400 audit(1754687294.202:479): avc:  denied  { create } for  pid=9858 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  231.730403][ T5902] usb 1-1: USB disconnect, device number 26
[  232.098275][   T30] audit: type=1400 audit(1754687294.612:480): avc:  denied  { attach_queue } for  pid=9858 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  232.453580][   T30] audit: type=1400 audit(1754687294.952:481): avc:  denied  { mount } for  pid=9881 comm="syz.4.635" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  232.453628][   T30] audit: type=1400 audit(1754687294.962:482): avc:  denied  { remount } for  pid=9881 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  232.521035][   T30] audit: type=1400 audit(1754687295.062:483): avc:  denied  { unmount } for  pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  232.922635][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.931663][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.025122][ T9907] virtio-fs: tag </dev/md0> not found
[  233.032506][ T9907] syz.0.641: attempt to access beyond end of device
[  233.032506][ T9907] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0
[  233.046347][ T9907] gfs2: error -5 reading superblock
[  233.481424][ T9907] FAULT_INJECTION: forcing a failure.
[  233.481424][ T9907] name failslab, interval 1, probability 0, space 0, times 0
[  233.507158][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.0.641 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  233.507175][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  233.507181][ T9907] Call Trace:
[  233.507185][ T9907]  <TASK>
[  233.507189][ T9907]  dump_stack_lvl+0x16c/0x1f0
[  233.507210][ T9907]  should_fail_ex+0x512/0x640
[  233.507221][ T9907]  ? fs_reclaim_acquire+0xae/0x150
[  233.507237][ T9907]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  233.507251][ T9907]  should_failslab+0xc2/0x120
[  233.507264][ T9907]  __kmalloc_noprof+0xd2/0x510
[  233.507282][ T9907]  tomoyo_realpath_from_path+0xc2/0x6e0
[  233.507297][ T9907]  ? tomoyo_profile+0x47/0x60
[  233.507314][ T9907]  tomoyo_path_number_perm+0x245/0x580
[  233.507325][ T9907]  ? tomoyo_path_number_perm+0x237/0x580
[  233.507338][ T9907]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  233.507351][ T9907]  ? find_held_lock+0x2b/0x80
[  233.507376][ T9907]  ? find_held_lock+0x2b/0x80
[  233.507388][ T9907]  ? hook_file_ioctl_common+0x145/0x410
[  233.507407][ T9907]  ? __fget_files+0x20e/0x3c0
[  233.507421][ T9907]  security_file_ioctl+0x9b/0x240
[  233.507436][ T9907]  __x64_sys_ioctl+0xb7/0x210
[  233.507453][ T9907]  do_syscall_64+0xcd/0x4c0
[  233.507464][ T9907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.507475][ T9907] RIP: 0033:0x7f819658ebe9
[  233.507484][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.507494][ T9907] RSP: 002b:00007f81974ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  233.507505][ T9907] RAX: ffffffffffffffda RBX: 00007f81967b5fa0 RCX: 00007f819658ebe9
[  233.507512][ T9907] RDX: 0000000000000000 RSI: 0000000080046402 RDI: 0000000000000005
[  233.507518][ T9907] RBP: 00007f81974ab090 R08: 0000000000000000 R09: 0000000000000000
[  233.507525][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.507531][ T9907] R13: 00007f81967b6038 R14: 00007f81967b5fa0 R15: 00007ffee98e7168
[  233.507544][ T9907]  </TASK>
[  233.507871][ T9907] ERROR: Out of memory at tomoyo_realpath_from_path.
[  233.794292][ T9909] virtio-fs: tag </dev/md0> not found
[  233.811685][ T9909] syz.1.642: attempt to access beyond end of device
[  233.811685][ T9909] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[  234.040479][   T30] audit: type=1400 audit(1754687296.572:484): avc:  denied  { setopt } for  pid=9910 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  234.050522][ T9909] gfs2: error -5 reading superblock
[  234.217349][   T30] audit: type=1400 audit(1754687296.752:485): avc:  denied  { listen } for  pid=9918 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  234.270453][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  234.560177][   T10] usb 1-1: Using ep0 maxpacket: 8
[  234.600890][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  234.634519][   T10] usb 1-1: language id specifier not provided by device, defaulting to English
[  234.655405][   T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  234.668385][   T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  234.722643][   T10] usb 1-1: SerialNumber: ᰼ﶨ톊칓랟瞼嫄뭼�爔㠧˾
[  234.858187][ T5960] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  234.986633][   T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  235.001363][   T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  235.014031][   T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  235.032853][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  235.042123][ T5960] usb 5-1: config 0 has no interface number 0
[  235.076783][   T10] usb 1-1: media controller created
[  235.097058][ T5960] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.176649][ T5960] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.187371][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  235.196689][ T5960] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  235.217798][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[  235.227697][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.258011][ T5960] usb 5-1: config 0 descriptor??
[  235.283744][   T10] usb 1-1: USB disconnect, device number 27
[  235.347916][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[  235.490018][   T30] audit: type=1400 audit(1754687298.032:486): avc:  denied  { getopt } for  pid=9948 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  235.690665][ T5960] uclogic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1
[  235.877451][ T5960] usb 5-1: USB disconnect, device number 27
[  235.956655][ T9983] FAULT_INJECTION: forcing a failure.
[  235.956655][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.972014][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.0.648 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  235.972039][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.972048][ T9983] Call Trace:
[  235.972053][ T9983]  <TASK>
[  235.972060][ T9983]  dump_stack_lvl+0x16c/0x1f0
[  235.972091][ T9983]  should_fail_ex+0x512/0x640
[  235.972111][ T9983]  _copy_from_iter+0x29f/0x16f0
[  235.972132][ T9983]  ? kernel_fpu_begin_mask+0x17f/0x2a0
[  235.972156][ T9983]  ? __pfx_kernel_fpu_begin_mask+0x10/0x10
[  235.972179][ T9983]  ? __pfx__copy_from_iter+0x10/0x10
[  235.972197][ T9983]  ? do_raw_spin_lock+0x12c/0x2b0
[  235.972217][ T9983]  ? find_held_lock+0x2b/0x80
[  235.972258][ T9983]  ? rcu_is_watching+0x12/0xc0
[  235.972280][ T9983]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  235.972310][ T9983]  write_pool_user+0xe8/0x2f0
[  235.972332][ T9983]  ? __pfx_write_pool_user+0x10/0x10
[  235.972359][ T9983]  ? import_ubuf+0x1b6/0x220
[  235.972378][ T9983]  random_ioctl+0x2ce/0x4a0
[  235.972397][ T9983]  ? __pfx_random_ioctl+0x10/0x10
[  235.972420][ T9983]  ? selinux_file_ioctl+0x180/0x270
[  235.972442][ T9983]  ? selinux_file_ioctl+0xb4/0x270
[  235.972465][ T9983]  ? __pfx_random_ioctl+0x10/0x10
[  235.972485][ T9983]  __x64_sys_ioctl+0x18e/0x210
[  235.972514][ T9983]  do_syscall_64+0xcd/0x4c0
[  235.972532][ T9983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.972550][ T9983] RIP: 0033:0x7f819658ebe9
[  235.972564][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.972581][ T9983] RSP: 002b:00007f819748a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  235.972598][ T9983] RAX: ffffffffffffffda RBX: 00007f81967b6090 RCX: 00007f819658ebe9
[  235.972609][ T9983] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000005
[  235.972620][ T9983] RBP: 00007f819748a090 R08: 0000000000000000 R09: 0000000000000000
[  235.972630][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  235.972640][ T9983] R13: 00007f81967b6128 R14: 00007f81967b6090 R15: 00007ffee98e7168
[  235.972664][ T9983]  </TASK>
[  236.402820][ T9988] usb usb8: usbfs: process 9988 (syz.3.649) did not claim interface 0 before use
[  236.861179][T10005] netlink: 148 bytes leftover after parsing attributes in process `syz.1.653'.
[  237.270690][   T30] audit: type=1400 audit(1754687299.812:487): avc:  denied  { watch_reads } for  pid=10002 comm="syz.4.654" path="/125" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  237.863152][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.878599][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.948338][T10018] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  238.116175][   T30] audit: type=1400 audit(1754687300.632:488): avc:  denied  { connect } for  pid=10012 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  238.308250][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  238.348150][ T5960] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  238.481982][   T24] usb 2-1: Using ep0 maxpacket: 32
[  238.567184][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  238.575664][ T5960] usb 5-1: Using ep0 maxpacket: 8
[  238.579925][ T5960] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  238.600636][   T24] usb 2-1: config 0 has no interface number 0
[  238.600830][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.666389][ T5960] usb 5-1: Product: syz
[  238.681269][ T5960] usb 5-1: Manufacturer: syz
[  238.682174][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  238.688264][ T5960] usb 5-1: SerialNumber: syz
[  238.695752][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.710476][   T24] usb 2-1: Product: syz
[  238.710912][ T5960] usb 5-1: config 0 descriptor??
[  238.715057][   T24] usb 2-1: Manufacturer: syz
[  238.726301][   T24] usb 2-1: SerialNumber: syz
[  238.740730][   T24] usb 2-1: config 0 descriptor??
[  238.750974][ T5960] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  238.760330][ T5960] usb 5-1: setting power ON
[  238.760685][   T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  239.002445][   T24] usb 2-1: selecting invalid altsetting 1
[  239.088256][   T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  239.292809][   T10] IPVS: starting estimator thread 0...
[  239.300505][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.309834][   T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  239.319151][   T30] audit: type=1400 audit(1754687301.352:489): avc:  denied  { module_request } for  pid=10039 comm="syz.0.660" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  239.358252][   T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  239.367011][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.375331][ T5960] dvb-usb: bulk message failed: -22 (2/0)
[  239.423743][   T24] usb 2-1: media controller created
[  239.433994][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  239.480590][ T5960] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  239.488281][T10049] IPVS: using max 43 ests per chain, 103200 per kthread
[  239.491515][   T30] audit: type=1400 audit(1754687301.822:490): avc:  denied  { ioctl } for  pid=10042 comm="syz.3.661" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  239.535527][ T5960] usb 5-1: media controller created
[  239.664939][   T30] audit: type=1400 audit(1754687301.842:491): avc:  denied  { ioctl } for  pid=10042 comm="syz.3.661" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  241.087870][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  242.340269][ T5960] usb 5-1: selecting invalid altsetting 6
[  242.346734][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  242.390084][ T5960] usb 5-1: digital interface selection failed (-22)
[  242.396693][ T5960] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  242.447169][   T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  242.455090][   T30] audit: type=1400 audit(1754687304.992:492): avc:  denied  { connect } for  pid=10068 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  242.476298][   T24] zl10353_read_register: readreg error (reg=127, ret==-71)
[  242.607286][ T5960] usb 5-1: setting power OFF
[  242.613239][T10074] input: syz0 as /devices/virtual/input/input20
[  242.619483][   T30] audit: type=1400 audit(1754687305.082:493): avc:  denied  { map } for  pid=10068 comm="syz.4.663" path="socket:[18887]" dev="sockfs" ino=18887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  242.620169][   T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  242.644843][ T5960] dvb-usb: bulk message failed: -22 (2/0)
[  242.650267][   T30] audit: type=1400 audit(1754687305.092:494): avc:  denied  { read } for  pid=10068 comm="syz.4.663" path="socket:[18887]" dev="sockfs" ino=18887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  242.655934][ T5960] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  242.936361][   T24] usb 2-1: USB disconnect, device number 18
[  242.938235][ T5960] (NULL device *): no alternate interface
[  242.942627][  T975] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  243.180596][  T975] usb 3-1: Using ep0 maxpacket: 8
[  243.216995][  T975] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  243.255697][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.284031][  T975] usb 3-1: Product: syz
[  243.294841][  T975] usb 3-1: Manufacturer: syz
[  243.303580][  T975] usb 3-1: SerialNumber: syz
[  243.377961][ T5960] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  243.400337][T10095] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  243.435101][  T975] usb 3-1: config 0 descriptor??
[  243.437763][ T5960] usb 5-1: USB disconnect, device number 28
[  243.451092][   T30] audit: type=1400 audit(1754687305.992:495): avc:  denied  { read } for  pid=10110 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  243.863484][  T975] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  244.151264][   T30] audit: type=1400 audit(1754687306.692:496): avc:  denied  { append } for  pid=10070 comm="syz.2.665" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  244.251137][   T30] audit: type=1400 audit(1754687306.782:497): avc:  denied  { write } for  pid=10121 comm="syz.3.668" path="socket:[18947]" dev="sockfs" ino=18947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  245.207303][T10071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.218667][T10071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.432114][  T975] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  246.528432][  T975] usb 3-1: USB disconnect, device number 20
[  246.763667][T10129] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  246.770291][T10129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  246.880782][T10129] vhci_hcd vhci_hcd.0: Device attached
[  246.899411][T10131] vhci_hcd: connection closed
[  246.899830][   T49] vhci_hcd: stop threads
[  247.078221][   T49] vhci_hcd: release socket
[  247.087640][   T49] vhci_hcd: disconnect device
[  247.097757][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'.
[  247.128613][ T5922] usb 35-1: new high-speed USB device number 3 using vhci_hcd
[  247.137791][ T5922] usb 35-1: enqueue for inactive port 0
[  247.239118][ T5922] vhci_hcd: vhci_device speed not set
[  247.468997][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  247.469883][   T30] audit: type=1400 audit(1754687310.012:498): avc:  denied  { lock } for  pid=10155 comm="syz.0.672" path="socket:[18977]" dev="sockfs" ino=18977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  247.503838][T10156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10156 comm=syz.0.672
[  247.914678][   T10] usb 3-1: Using ep0 maxpacket: 8
[  247.933496][   T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  247.947105][T10179] ipvlan2: entered promiscuous mode
[  247.960526][   T30] audit: type=1400 audit(1754687310.502:499): avc:  denied  { write } for  pid=10177 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  247.981911][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.992575][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.004273][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.101713][   T10] usb 3-1: Product: syz
[  248.106008][   T10] usb 3-1: Manufacturer: syz
[  248.416685][   T30] audit: type=1400 audit(1754687310.952:500): avc:  denied  { setcurrent } for  pid=10180 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  248.441454][   T10] usb 3-1: SerialNumber: syz
[  248.529777][   T10] usb 3-1: config 0 descriptor??
[  248.539938][   T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  248.561893][   T10] usb 3-1: setting power ON
[  248.572639][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  248.589975][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  248.612179][   T30] audit: type=1400 audit(1754687311.152:501): avc:  denied  { execute } for  pid=10193 comm="syz.1.676" path="/dev/nullb0" dev="devtmpfs" ino=3029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1
[  248.636182][   T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  248.655767][   T10] usb 3-1: media controller created
[  248.666457][   T30] audit: type=1800 audit(1754687311.182:502): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.676" name="nullb0" dev="devtmpfs" ino=3029 res=0 errno=0
[  248.697271][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  248.717518][   T10] usb 3-1: selecting invalid altsetting 6
[  248.725527][   T10] usb 3-1: digital interface selection failed (-22)
[  248.734000][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  248.745325][   T10] usb 3-1: setting power OFF
[  248.977800][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  248.985518][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  248.996392][   T10] (NULL device *): no alternate interface
[  249.286751][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  249.307409][   T10] usb 3-1: USB disconnect, device number 21
[  249.793435][   T30] audit: type=1400 audit(1754687312.332:503): avc:  denied  { accept } for  pid=10228 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  250.073045][T10229] netlink: 16 bytes leftover after parsing attributes in process `-'.
[  250.074918][T10229] netlink: 44 bytes leftover after parsing attributes in process `-'.
[  251.076538][ T5859] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  251.653265][T10256] CUSE: info not properly terminated
[  251.661867][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'.
[  252.001141][T10274] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  252.129392][ T5902] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  252.288145][ T5902] usb 3-1: Using ep0 maxpacket: 8
[  252.301956][ T5902] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  252.315450][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.479534][ T5902] usb 3-1: Product: syz
[  252.518179][ T5902] usb 3-1: Manufacturer: syz
[  252.976905][ T5902] usb 3-1: SerialNumber: syz
[  253.135684][ T5902] usb 3-1: config 0 descriptor??
[  253.405390][ T5902] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  253.413552][ T5902] usb 3-1: setting power ON
[  253.418611][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  253.429827][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  253.440357][ T5902] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  253.454620][ T5902] usb 3-1: media controller created
[  253.609453][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  253.635238][ T5902] usb 3-1: selecting invalid altsetting 6
[  253.646792][ T5902] usb 3-1: digital interface selection failed (-22)
[  253.654395][ T5902] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  253.694710][ T5902] usb 3-1: setting power OFF
[  253.701751][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  253.709993][ T5902] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  253.748190][ T5902] (NULL device *): no alternate interface
[  254.172478][ T5902] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  254.242476][ T5902] usb 3-1: USB disconnect, device number 22
[  254.715190][T10323] hub 8-0:1.0: USB hub found
[  254.720719][T10323] hub 8-0:1.0: 1 port detected
[  255.018368][   T30] audit: type=1400 audit(1754687317.562:504): avc:  denied  { shutdown } for  pid=10329 comm="syz.2.698" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  255.220709][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.227085][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.742756][   T30] audit: type=1400 audit(1754687318.282:505): avc:  denied  { connect } for  pid=10341 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  256.101238][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.114295][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.137887][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'.
[  256.477229][   T30] audit: type=1400 audit(1754687319.012:506): avc:  denied  { read } for  pid=10360 comm="syz.1.706" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  256.575005][   T30] audit: type=1400 audit(1754687319.012:507): avc:  denied  { open } for  pid=10360 comm="syz.1.706" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  256.609454][ T5922] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  256.621944][   T30] audit: type=1400 audit(1754687319.062:508): avc:  denied  { map } for  pid=10360 comm="syz.1.706" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  256.662318][   T30] audit: type=1800 audit(1754687319.192:509): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.707" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  256.766115][   T30] audit: type=1400 audit(1754687319.302:510): avc:  denied  { listen } for  pid=10366 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.766573][T10367] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  256.858564][ T5922] usb 5-1: config 0 has no interfaces?
[  256.872897][ T5922] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  256.893915][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.946879][ T5922] usb 5-1: Product: syz
[  256.952557][ T5922] usb 5-1: Manufacturer: syz
[  256.957303][ T5922] usb 5-1: SerialNumber: syz
[  256.965108][ T5922] usb 5-1: config 0 descriptor??
[  257.113530][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  257.340589][   T12] tipc: Subscription rejected, illegal request
[  257.432901][   T30] audit: type=1400 audit(1754687319.972:511): avc:  denied  { create } for  pid=10385 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  257.478392][   T10] usb 2-1: Using ep0 maxpacket: 16
[  257.486945][   T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  257.495369][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.505670][   T10] usb 2-1: config 0 has no interface number 0
[  257.519961][   T30] audit: type=1400 audit(1754687320.062:512): avc:  denied  { listen } for  pid=10385 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  257.539566][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  257.558271][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.604814][   T10] usb 2-1: Product: syz
[  257.615259][   T10] usb 2-1: Manufacturer: syz
[  257.625333][   T10] usb 2-1: SerialNumber: syz
[  257.640218][   T10] usb 2-1: config 0 descriptor??
[  257.996575][T10371] netlink: 256 bytes leftover after parsing attributes in process `syz.1.711'.
[  258.006114][T10371] unsupported nlmsg_type 40
[  258.070089][T10371] syzkaller0: entered promiscuous mode
[  258.107968][T10371] syzkaller0: entered allmulticast mode
[  258.219594][   T30] audit: type=1400 audit(1754687320.752:513): avc:  denied  { append } for  pid=10395 comm="syz.3.715" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  259.307275][ T6448] usb 5-1: USB disconnect, device number 29
[  259.670508][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.692700][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.298556][T10433] ptrace attach of "./syz-executor exec"[5844] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  261.019384][T10425] ceph: No mds server is up or the cluster is laggy
[  262.742335][   T10] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  262.765721][   T10] usb 2-1: No valid video chain found.
[  263.033132][ T5859] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  263.851590][T10460] openvswitch: netlink: IP tunnel dst address not specified
[  263.932054][T10463] input: syz0 as /devices/virtual/input/input21
[  264.147745][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  264.147760][   T30] audit: type=1400 audit(1754687326.682:516): avc:  denied  { watch } for  pid=10461 comm="syz.2.728" path="/" dev="ramfs" ino=20533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  264.189320][   T30] audit: type=1400 audit(1754687326.722:517): avc:  denied  { watch_sb watch_reads } for  pid=10461 comm="syz.2.728" path="/" dev="ramfs" ino=20533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  264.468592][   T10] usb 2-1: USB disconnect, device number 19
[  264.866464][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.877463][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.955626][T10523] random: crng reseeded on system resumption
[  264.980618][   T30] audit: type=1400 audit(1754687327.492:518): avc:  denied  { append } for  pid=10500 comm="syz.3.731" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  267.535077][T10536] input: syz1 as /devices/virtual/input/input22
[  267.838151][ T6448] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  268.072848][ T6448] usb 1-1: device descriptor read/64, error -71
[  268.313446][ T5930] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  268.413217][T10555] netlink: 87 bytes leftover after parsing attributes in process `syz.4.738'.
[  268.425793][T10557] FAULT_INJECTION: forcing a failure.
[  268.425793][T10557] name failslab, interval 1, probability 0, space 0, times 0
[  268.440719][T10557] CPU: 1 UID: 0 PID: 10557 Comm: syz.2.737 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  268.440745][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  268.440755][T10557] Call Trace:
[  268.440761][T10557]  <TASK>
[  268.440768][T10557]  dump_stack_lvl+0x16c/0x1f0
[  268.440799][T10557]  should_fail_ex+0x512/0x640
[  268.440814][T10557]  ? __kmalloc_noprof+0xbf/0x510
[  268.440834][T10557]  ? lsm_blob_alloc+0x68/0x90
[  268.440860][T10557]  should_failslab+0xc2/0x120
[  268.440879][T10557]  __kmalloc_noprof+0xd2/0x510
[  268.440897][T10557]  ? down_write_nested+0x151/0x210
[  268.440924][T10557]  lsm_blob_alloc+0x68/0x90
[  268.440950][T10557]  security_sb_alloc+0x28/0x230
[  268.440969][T10557]  alloc_super+0x23d/0xbd0
[  268.440985][T10557]  ? sget_fc+0xd3/0xc20
[  268.441007][T10557]  sget_fc+0x116/0xc20
[  268.441025][T10557]  ? __pfx_set_anon_super_fc+0x10/0x10
[  268.441054][T10557]  ? __pfx_mqueue_fill_super+0x10/0x10
[  268.441080][T10557]  get_tree_nodev+0x28/0x190
[  268.441099][T10557]  mqueue_get_tree+0xf1/0x130
[  268.441125][T10557]  vfs_get_tree+0x8e/0x340
[  268.441150][T10557]  fc_mount_longterm+0x18/0x160
[  268.441178][T10557]  mq_init_ns+0x426/0x620
[  268.441200][T10557]  copy_ipcs+0x383/0x610
[  268.441217][T10557]  ? copy_utsname+0xab/0x470
[  268.441237][T10557]  create_new_namespaces+0x20a/0xa90
[  268.441260][T10557]  ? security_capable+0x7e/0x260
[  268.441281][T10557]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  268.441307][T10557]  ksys_unshare+0x45b/0xa40
[  268.441333][T10557]  ? __pfx_ksys_unshare+0x10/0x10
[  268.441358][T10557]  ? ksys_write+0x1ac/0x250
[  268.441383][T10557]  __x64_sys_unshare+0x31/0x40
[  268.441407][T10557]  do_syscall_64+0xcd/0x4c0
[  268.441425][T10557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.441442][T10557] RIP: 0033:0x7f25a218ebe9
[  268.441457][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.441473][T10557] RSP: 002b:00007f25a03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  268.441490][T10557] RAX: ffffffffffffffda RBX: 00007f25a23b5fa0 RCX: 00007f25a218ebe9
[  268.441501][T10557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000
[  268.441511][T10557] RBP: 00007f25a03f6090 R08: 0000000000000000 R09: 0000000000000000
[  268.441520][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.441530][T10557] R13: 00007f25a23b6038 R14: 00007f25a23b5fa0 R15: 00007ffdd660cfa8
[  268.441554][T10557]  </TASK>
[  268.766823][T10562] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.741'.
[  268.777556][   T30] audit: type=1400 audit(1754687331.312:519): avc:  denied  { write } for  pid=10560 comm="syz.3.740" lport=45150 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  268.873261][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  268.880930][ T5930] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  268.889030][ T5930] usb 2-1: config 0 has no interface number 0
[  268.895100][ T5930] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  268.904826][ T5930] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  268.913852][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.931560][T10566] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002
[  268.931639][ T6448] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  268.943303][   T30] audit: type=1400 audit(1754687331.482:520): avc:  denied  { setopt } for  pid=10560 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  268.946398][ T5930] usb 2-1: config 0 descriptor??
[  269.165956][ T6448] usb 1-1: device descriptor read/64, error -71
[  269.241094][ T5930] iowarrior 2-1:0.1: no interrupt-in endpoint found
[  269.274323][T10572] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  269.321710][ T6448] usb usb1-port1: attempt power cycle
[  269.339994][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.353079][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.688159][ T6448] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  269.729162][ T6448] usb 1-1: device descriptor read/8, error -71
[  269.765276][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.778363][ T1212] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  269.797762][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.930925][ T1212] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  269.939165][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.952300][ T1212] usb 3-1: config 0 has no interface number 0
[  269.960003][ T1212] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  269.973029][ T1212] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 8456, setting to 64
[  269.985278][ T1212] usb 3-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  270.000236][ T1212] usb 3-1: config 0 interface 11 has no altsetting 0
[  270.007592][ T1212] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  270.017184][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.027712][ T1212] usb 3-1: config 0 descriptor??
[  270.028135][ T6448] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  270.034930][ T1212] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected
[  270.048326][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7
[  270.062680][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81
[  270.074508][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82
[  270.082908][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1
[  270.088676][ T6448] usb 1-1: device descriptor read/8, error -71
[  270.090690][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2
[  270.106382][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85
[  270.115764][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5
[  270.129849][ T1212] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  270.141573][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83
[  270.149575][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84
[  270.157369][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3
[  270.166293][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4
[  270.176053][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86
[  270.184007][ T1212] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6
[  270.193784][ T1212] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  270.219511][ T6448] usb usb1-port1: unable to enumerate USB device
[  270.355923][T10609] kvm: kvm [10581]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005)
[  271.141767][T10621] netlink: 'syz.3.749': attribute type 3 has an invalid length.
[  271.149774][T10621] netlink: 'syz.3.749': attribute type 3 has an invalid length.
[  271.161329][T10618] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  271.167827][T10618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  271.270049][T10618] vhci_hcd vhci_hcd.0: Device attached
[  271.649781][   T10] usb 3-1: USB disconnect, device number 23
[  271.658709][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  271.683318][T10619] vhci_hcd: connection closed
[  271.687083][   T13] vhci_hcd: stop threads
[  271.702463][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  271.787501][   T13] vhci_hcd: release socket
[  271.802266][   T10] keyspan 3-1:0.11: device disconnected
[  271.804604][   T13] vhci_hcd: disconnect device
[  272.068464][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.076957][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.243255][   T30] audit: type=1400 audit(1754687334.782:521): avc:  denied  { setopt } for  pid=10650 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  272.479690][T10661] sctp: [Deprecated]: syz.0.756 (pid 10661) Use of int in max_burst socket option.
[  272.479690][T10661] Use struct sctp_assoc_value instead
[  273.170904][   T30] audit: type=1400 audit(1754687335.702:522): avc:  denied  { create } for  pid=10681 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  273.198615][T10686] netlink: 'syz.0.759': attribute type 26 has an invalid length.
[  273.213092][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'.
[  273.536151][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'.
[  273.717051][ T5902] usb 2-1: USB disconnect, device number 20
[  274.394409][   T30] audit: type=1400 audit(1754687336.932:523): avc:  denied  { getopt } for  pid=10716 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  275.202822][T10736] netlink: 'syz.3.770': attribute type 1 has an invalid length.
[  275.419796][T10736] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.541180][T10754] bond1: (slave veth3): Enslaving as an active interface with a down link
[  275.614018][T10736] 8021q: adding VLAN 0 to HW filter on device batadv1
[  275.628167][   T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  275.645753][T10736] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  275.701364][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  275.757530][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'.
[  275.789608][   T10] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  275.811671][   T10] usb 5-1: config 5 has no interface number 0
[  275.829467][   T10] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  275.858266][   T10] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x84 has invalid wMaxPacketSize 0
[  275.870991][   T10] usb 5-1: config 5 interface 123 has no altsetting 0
[  275.880546][   T10] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  275.897141][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.912727][   T10] usb 5-1: Product: syz
[  275.939990][   T10] usb 5-1: Manufacturer: syz
[  275.954845][   T10] usb 5-1: SerialNumber: syz
[  276.133899][T10702] Process accounting resumed
[  276.342679][T10762] usb usb9: usbfs: process 10762 (syz.4.771) did not claim interface 0 before use
[  276.654970][   T10] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  276.680591][   T10] usb 5-1: USB disconnect, device number 30
[  278.275931][   T30] audit: type=1400 audit(1754687340.812:524): avc:  denied  { write } for  pid=10847 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  278.668362][   T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  278.878313][   T10] usb 3-1: device descriptor read/64, error -71
[  279.128799][   T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  279.188613][ T1212] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  279.268870][   T10] usb 3-1: device descriptor read/64, error -71
[  279.350209][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.361976][ T1212] usb 1-1: config 0 has no interfaces?
[  279.367479][ T1212] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  279.379067][   T10] usb usb3-port1: attempt power cycle
[  279.396772][T10885] [U] 
[  279.399668][T10885] [U] 
[  279.402352][T10885] [U] 
[  279.405034][T10885] [U] 
[  279.426967][T10885] [U] 
[  279.430658][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.495264][ T1212] usb 1-1: config 0 descriptor??
[  279.815741][   T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  279.940148][   T10] usb 3-1: device descriptor read/8, error -71
[  280.188353][   T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  280.236064][   T10] usb 3-1: device descriptor read/8, error -71
[  280.359421][   T10] usb usb3-port1: unable to enumerate USB device
[  280.605309][T10912] team0: No ports can be present during mode change
[  280.629809][  T975] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  280.892884][  T975] usb 2-1: config 8 has an invalid interface number: 79 but max is 0
[  280.903371][  T975] usb 2-1: config 8 has no interface number 0
[  280.983033][T10922] overlayfs: failed lookup in lower (newroot/159, name='file0', err=-40): overlapping layers
[  280.995279][T10922] FAULT_INJECTION: forcing a failure.
[  280.995279][T10922] name failslab, interval 1, probability 0, space 0, times 0
[  281.009124][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.4.795 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  281.009148][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  281.009157][T10922] Call Trace:
[  281.009163][T10922]  <TASK>
[  281.009169][T10922]  dump_stack_lvl+0x16c/0x1f0
[  281.009198][T10922]  should_fail_ex+0x512/0x640
[  281.009215][T10922]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  281.009235][T10922]  should_failslab+0xc2/0x120
[  281.009254][T10922]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  281.009270][T10922]  ? __d_alloc+0x32/0xae0
[  281.009290][T10922]  __d_alloc+0x32/0xae0
[  281.009309][T10922]  d_alloc_parallel+0x111/0x1480
[  281.009331][T10922]  ? avc_has_perm_noaudit+0x117/0x3b0
[  281.009358][T10922]  ? __pfx_d_alloc_parallel+0x10/0x10
[  281.009380][T10922]  ? lockdep_init_map_type+0x5c/0x280
[  281.009396][T10922]  ? lockdep_init_map_type+0x5c/0x280
[  281.009412][T10922]  __lookup_slow+0x193/0x460
[  281.009432][T10922]  ? __pfx___lookup_slow+0x10/0x10
[  281.009450][T10922]  ? lock_acquire+0x62/0x350
[  281.009472][T10922]  ? pcpu_next_md_free_region+0x230/0x380
[  281.009496][T10922]  ? pcpu_next_md_free_region+0x230/0x380
[  281.009516][T10922]  ? d_lookup+0xe7/0x190
[  281.009539][T10922]  lookup_one_unlocked+0xd4/0x120
[  281.009559][T10922]  ovl_lookup_single+0x2ed/0x1270
[  281.009574][T10922]  ? __lock_acquire+0x5c1/0x1ce0
[  281.009597][T10922]  ? __pfx_ovl_lookup_single+0x10/0x10
[  281.009608][T10922]  ? find_held_lock+0x2b/0x80
[  281.009629][T10922]  ovl_lookup_layer+0x3d4/0x480
[  281.009647][T10922]  ? __pfx_ovl_lookup_layer+0x10/0x10
[  281.009659][T10922]  ? __lock_acquire+0xb97/0x1ce0
[  281.009684][T10922]  ovl_lookup+0x5bc/0x21a0
[  281.009701][T10922]  ? find_held_lock+0x2b/0x80
[  281.009719][T10922]  ? __pfx_ovl_lookup+0x10/0x10
[  281.009734][T10922]  ? d_alloc_parallel+0x828/0x1480
[  281.009761][T10922]  ? __lock_acquire+0xb97/0x1ce0
[  281.009787][T10922]  ? lockdep_init_map_type+0x5c/0x280
[  281.009803][T10922]  __lookup_slow+0x24e/0x460
[  281.009822][T10922]  ? __pfx___lookup_slow+0x10/0x10
[  281.009854][T10922]  ? lookup_fast+0x156/0x610
[  281.009870][T10922]  walk_component+0x353/0x5b0
[  281.009885][T10922]  path_lookupat+0x142/0x6d0
[  281.009901][T10922]  filename_lookup+0x224/0x5f0
[  281.009917][T10922]  ? __pfx_filename_lookup+0x10/0x10
[  281.009949][T10922]  ? getname_flags.part.0+0x1c5/0x550
[  281.009973][T10922]  user_path_at+0x3a/0x60
[  281.009987][T10922]  __x64_sys_truncate+0xf6/0x1e0
[  281.010003][T10922]  ? __pfx___x64_sys_truncate+0x10/0x10
[  281.010030][T10922]  do_syscall_64+0xcd/0x4c0
[  281.010044][T10922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.010058][T10922] RIP: 0033:0x7f607f38ebe9
[  281.010069][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.010082][T10922] RSP: 002b:00007f608020c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  281.010096][T10922] RAX: ffffffffffffffda RBX: 00007f607f5b6090 RCX: 00007f607f38ebe9
[  281.010104][T10922] RDX: 0000000000000000 RSI: 0000000000000648 RDI: 0000200000000240
[  281.010113][T10922] RBP: 00007f608020c090 R08: 0000000000000000 R09: 0000000000000000
[  281.010120][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.010128][T10922] R13: 00007f607f5b6128 R14: 00007f607f5b6090 R15: 00007fff033dd5a8
[  281.010147][T10922]  </TASK>
[  281.588678][  T975] usb 2-1: config 8 interface 79 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  281.600575][  T975] usb 2-1: config 8 interface 79 has no altsetting 0
[  281.631010][  T975] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=bc.04
[  281.640344][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.666367][  T975] usb 2-1: Product: syz
[  281.670758][  T975] usb 2-1: Manufacturer: syz
[  281.675682][  T975] usb 2-1: SerialNumber: syz
[  281.691376][T10906] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  281.855814][T10942] syzkaller1: entered promiscuous mode
[  281.864499][T10942] syzkaller1: entered allmulticast mode
[  281.928988][ T5902] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  282.032819][   T30] audit: type=1400 audit(1754687344.562:525): avc:  denied  { ioctl } for  pid=10905 comm="syz.1.793" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  282.090161][ T6448] usb 1-1: USB disconnect, device number 32
[  282.142589][ T5902] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  282.163407][ T5902] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  282.337886][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.364710][  T975] radio-si470x 2-1:8.79: could not find interrupt in endpoint
[  282.423039][  T975] radio-si470x 2-1:8.79: probe with driver radio-si470x failed with error -5
[  282.441742][ T5902] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  282.455015][ T5902] usb 5-1: config 0 has no interface number 0
[  282.464088][ T5902] usb 5-1: config 0 has no interface number 1
[  282.472279][ T5902] usb 5-1: too many endpoints for config 0 interface 2 altsetting 0: 77, using maximum allowed: 30
[  282.483512][ T6448] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  282.492984][  T975] radio-raremono 2-1:8.79: this is not Thanko's Raremono.
[  282.537136][  T975] usbhid 2-1:8.79: couldn't find an input interrupt endpoint
[  282.560331][  T975] usb 2-1: USB disconnect, device number 21
[  282.598521][ T5902] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 77
[  282.619476][ T5902] usb 5-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=f3.71
[  282.643343][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.655262][ T5902] usb 5-1: Product: syz
[  282.668720][ T6448] usb 1-1: Using ep0 maxpacket: 8
[  282.751591][ T5902] usb 5-1: Manufacturer: syz
[  282.756553][ T5902] usb 5-1: SerialNumber: syz
[  282.765311][ T6448] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  282.808555][ T6448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.852347][ T5902] usb 5-1: config 0 descriptor??
[  282.860657][ T6448] usb 1-1: Product: syz
[  282.876122][ T6448] usb 1-1: Manufacturer: syz
[  283.049688][ T6448] usb 1-1: SerialNumber: syz
[  283.511838][ T6448] usb 1-1: config 0 descriptor??
[  283.526839][ T6448] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  283.535238][ T6448] usb 1-1: setting power ON
[  283.550352][ T6448] dvb-usb: bulk message failed: -22 (2/0)
[  283.567295][ T6448] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  283.577476][ T6448] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  283.586295][ T6448] usb 1-1: media controller created
[  283.620954][ T6448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  283.646896][ T6448] usb 1-1: selecting invalid altsetting 6
[  283.649537][T10929] block nbd4: shutting down sockets
[  283.653216][ T6448] usb 1-1: digital interface selection failed (-22)
[  283.665071][ T5902] hub 5-1:0.2: Invalid hub with more than one config or interface
[  283.673155][ T5902] hub 5-1:0.2: probe with driver hub failed with error -22
[  283.683132][ T6448] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  283.703899][ T5902] usb 5-1: USB disconnect, device number 31
[  283.712218][ T6448] usb 1-1: setting power OFF
[  283.721886][ T6448] dvb-usb: bulk message failed: -22 (2/0)
[  283.748209][ T6448] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  283.767727][ T6448] (NULL device *): no alternate interface
[  283.846174][ T6448] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  284.068245][   T10] usb 1-1: USB disconnect, device number 33
[  284.169188][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  284.328403][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  284.439337][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  284.449101][ T5922] usb 2-1: config 0 has no interface number 0
[  284.552768][ T5922] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  284.564516][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.572729][ T5922] usb 2-1: Product: syz
[  284.578899][ T5922] usb 2-1: Manufacturer: syz
[  284.586320][ T5922] usb 2-1: SerialNumber: syz
[  284.627329][ T5922] usb 2-1: config 0 descriptor??
[  284.671401][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'.
[  284.680764][T11033] netlink: 5796 bytes leftover after parsing attributes in process `syz.2.810'.
[  284.700124][ T5922] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  284.722234][ T5922] usb 2-1: selecting invalid altsetting 1
[  284.731407][ T5922] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  285.177227][ T5922] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  285.251641][ T5922] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  285.271484][ T5922] usb 2-1: media controller created
[  285.397525][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  285.428357][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.437040][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.452500][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'.
[  285.759094][   T30] audit: type=1400 audit(1754687348.262:526): avc:  denied  { mount } for  pid=11046 comm="syz.0.812" name="/" dev="autofs" ino=21309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  286.233644][   T30] audit: type=1400 audit(1754687348.762:527): avc:  denied  { unmount } for  pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  286.558144][ T1212] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  286.708129][ T1212] usb 3-1: Using ep0 maxpacket: 8
[  286.716658][ T1212] usb 3-1: unable to get BOS descriptor or descriptor too short
[  286.725857][ T1212] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  286.734204][ T1212] usb 3-1: config 0 has no interface number 0
[  286.740518][ T1212] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  286.751589][ T1212] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  286.761812][ T1212] usb 3-1: config 0 interface 88 has no altsetting 0
[  286.773313][ T1212] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  286.782552][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  286.791275][ T1212] usb 3-1: Product: syz
[  286.795591][ T1212] usb 3-1: SerialNumber: syz
[  286.806677][ T1212] usb 3-1: config 0 descriptor??
[  287.090516][T11080] fuse: Bad value for 'group_id'
[  287.097744][T11080] fuse: Bad value for 'group_id'
[  287.108889][T11080] netlink: 'syz.3.818': attribute type 4 has an invalid length.
[  287.152718][T11080] netlink: 'syz.3.818': attribute type 4 has an invalid length.
[  287.370452][ T5922] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  287.445491][ T5922] zl10353_read_register: readreg error (reg=127, ret==-110)
[  287.977674][ T5922] usb 2-1: USB disconnect, device number 22
[  288.141546][   T30] audit: type=1400 audit(1754687350.682:528): avc:  denied  { create } for  pid=11086 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  288.169197][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'.
[  288.170520][   T30] audit: type=1400 audit(1754687350.682:529): avc:  denied  { write } for  pid=11086 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  288.251878][T11116] openvswitch: netlink: IP tunnel dst address not specified
[  288.263857][   T30] audit: type=1400 audit(1754687350.682:530): avc:  denied  { read } for  pid=11086 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  288.314529][   T30] audit: type=1400 audit(1754687350.702:531): avc:  denied  { create } for  pid=11086 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  288.347486][   T30] audit: type=1400 audit(1754687350.712:532): avc:  denied  { write } for  pid=11086 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  288.374502][ T5922] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  288.374534][   T30] audit: type=1400 audit(1754687350.762:533): avc:  denied  { read write } for  pid=11086 comm="syz.0.820" name="vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  288.405695][   T30] audit: type=1400 audit(1754687350.762:534): avc:  denied  { open } for  pid=11086 comm="syz.0.820" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  288.473581][   T30] audit: type=1400 audit(1754687350.782:535): avc:  denied  { ioctl } for  pid=11110 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  288.588637][T11133] FAULT_INJECTION: forcing a failure.
[  288.588637][T11133] name failslab, interval 1, probability 0, space 0, times 0
[  288.607406][T11133] CPU: 1 UID: 0 PID: 11133 Comm: syz.0.827 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  288.607430][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  288.607440][T11133] Call Trace:
[  288.607445][T11133]  <TASK>
[  288.607453][T11133]  dump_stack_lvl+0x16c/0x1f0
[  288.607483][T11133]  should_fail_ex+0x512/0x640
[  288.607498][T11133]  ? fs_reclaim_acquire+0xae/0x150
[  288.607524][T11133]  ? tomoyo_encode2+0x100/0x3e0
[  288.607544][T11133]  should_failslab+0xc2/0x120
[  288.607566][T11133]  __kmalloc_noprof+0xd2/0x510
[  288.607582][T11133]  ? d_absolute_path+0x136/0x1a0
[  288.607611][T11133]  tomoyo_encode2+0x100/0x3e0
[  288.607636][T11133]  tomoyo_encode+0x29/0x50
[  288.607656][T11133]  tomoyo_realpath_from_path+0x18f/0x6e0
[  288.607686][T11133]  tomoyo_check_open_permission+0x2ab/0x3c0
[  288.607712][T11133]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  288.607757][T11133]  ? do_raw_spin_lock+0x12c/0x2b0
[  288.607770][ T5922] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  288.607785][T11133]  tomoyo_file_open+0x6b/0x90
[  288.607811][T11133]  security_file_open+0x84/0x1e0
[  288.607832][T11133]  do_dentry_open+0x596/0x1530
[  288.607855][T11133]  vfs_open+0x82/0x3f0
[  288.607878][T11133]  path_openat+0x1de4/0x2cb0
[  288.607902][T11133]  ? __pfx_path_openat+0x10/0x10
[  288.607925][T11133]  do_filp_open+0x20b/0x470
[  288.607942][T11133]  ? __pfx_do_filp_open+0x10/0x10
[  288.607976][T11133]  ? alloc_fd+0x471/0x7d0
[  288.607999][T11133]  do_sys_openat2+0x11b/0x1d0
[  288.608022][T11133]  ? __pfx_do_sys_openat2+0x10/0x10
[  288.608040][T11133]  ? find_held_lock+0x2b/0x80
[  288.608059][T11133]  ? handle_mm_fault+0x2ab/0xd10
[  288.608087][T11133]  __x64_sys_openat+0x174/0x210
[  288.608107][T11133]  ? __pfx___x64_sys_openat+0x10/0x10
[  288.608129][T11133]  ? do_user_addr_fault+0x843/0x1370
[  288.608151][T11133]  do_syscall_64+0xcd/0x4c0
[  288.608167][T11133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.608181][T11133] RIP: 0033:0x7f819658d550
[  288.608194][T11133] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  288.608209][T11133] RSP: 002b:00007f81974a8ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  288.608224][T11133] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f819658d550
[  288.608233][T11133] RDX: 0000000000000002 RSI: 00007f8196611af4 RDI: 00000000ffffff9c
[  288.608243][T11133] RBP: 00007f8196611af4 R08: 0000000000000000 R09: 0000000000000000
[  288.608252][T11133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  288.608260][T11133] R13: 0000000000000036 R14: 00002000000002c0 R15: 00007ffee98e7168
[  288.608281][T11133]  </TASK>
[  288.608679][T11133] ERROR: Out of memory at tomoyo_realpath_from_path.
[  288.698385][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.514152][   T10] usb 1-1: new low-speed USB device number 34 using dummy_hcd
[  289.539403][ T1212] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input23
[  289.615904][ T1212] usb 3-1: USB disconnect, device number 28
[  289.681023][   T10] usb 1-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  289.692268][   T10] usb 1-1: config 1 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  289.713990][ T5922] usb 2-1: config 0 descriptor??
[  289.728325][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  289.761766][   T10] usb 1-1: string descriptor 0 read error: -22
[  289.769327][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.40
[  289.778869][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.790561][T11133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  290.000795][   T10] usbhid 1-1:1.0: can't add hid device: -71
[  290.006899][   T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  290.059903][   T10] usb 1-1: USB disconnect, device number 34
[  290.895956][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  290.895968][   T30] audit: type=1400 audit(1754687353.342:602): avc:  denied  { accept } for  pid=11184 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  291.009520][   T30] audit: type=1400 audit(1754687353.472:603): avc:  denied  { write } for  pid=11110 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  291.039138][   T30] audit: type=1400 audit(1754687353.532:604): avc:  denied  { create } for  pid=11110 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  291.060610][   T30] audit: type=1400 audit(1754687353.532:605): avc:  denied  { connect } for  pid=11110 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  291.082129][   T30] audit: type=1400 audit(1754687353.532:606): avc:  denied  { prog_run } for  pid=11110 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  291.102102][   T30] audit: type=1400 audit(1754687353.532:607): avc:  denied  { write } for  pid=11110 comm="syz.1.822" path="socket:[22176]" dev="sockfs" ino=22176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  291.138340][   T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  291.157872][ T5922] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  291.213234][ T5922] asix 2-1:0.0: probe with driver asix failed with error -71
[  291.298570][   T10] usb 5-1: Using ep0 maxpacket: 32
[  291.534043][ T5922] usb 2-1: USB disconnect, device number 23
[  291.574160][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  291.582255][   T10] usb 5-1: config 0 has no interface number 0
[  291.612420][   T30] audit: type=1400 audit(1754687354.152:608): avc:  denied  { read write } for  pid=11210 comm="syz.0.836" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  292.098166][  T975] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  292.143174][   T30] audit: type=1400 audit(1754687354.152:609): avc:  denied  { open } for  pid=11210 comm="syz.0.836" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  292.194888][   T10] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  292.212967][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.262323][   T10] usb 5-1: Product: syz
[  292.275049][  T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.280628][   T10] usb 5-1: Manufacturer: syz
[  292.295028][   T30] audit: type=1400 audit(1754687354.282:610): avc:  denied  { setopt } for  pid=11210 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  292.300353][  T975] usb 3-1: config 0 has no interfaces?
[  292.314738][   T10] usb 5-1: SerialNumber: syz
[  292.326554][   T30] audit: type=1400 audit(1754687354.572:611): avc:  denied  { kexec_image_load } for  pid=11210 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  292.443805][   T10] usb 5-1: config 0 descriptor??
[  292.478442][   T10] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  292.487691][   T10] usb 5-1: selecting invalid altsetting 1
[  292.503573][   T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  292.515917][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  292.527824][   T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  292.556351][   T10] usb 5-1: media controller created
[  292.584590][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  292.597855][  T975] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  292.623968][T11228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  292.630465][T11228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  292.637606][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.672306][T11228] vhci_hcd vhci_hcd.0: Device attached
[  292.765547][  T975] usb 3-1: config 0 descriptor??
[  292.908120][ T5922] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  292.943299][ T5847] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  293.043863][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.056676][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.198858][ T5847] usb 1-1: Using ep0 maxpacket: 16
[  293.408371][ T5847] usb 1-1: config 0 has no interfaces?
[  293.414095][ T5847] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  293.425181][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.436065][ T5847] usb 1-1: config 0 descriptor??
[  293.629903][T11261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.637834][T11261] syzkaller0: entered promiscuous mode
[  293.643527][T11261] syzkaller0: entered allmulticast mode
[  293.935405][   T10] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  293.959292][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.960939][   T10] zl10353_read_register: readreg error (reg=127, ret==-110)
[  293.984613][T11259] block device autoloading is deprecated and will be removed.
[  294.005322][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.045875][   T24] usb 1-1: USB disconnect, device number 35
[  294.053938][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'.
[  294.060591][T11259] lo speed is unknown, defaulting to 1000
[  294.148617][T11233] vhci_hcd: connection closed
[  294.170581][   T13] vhci_hcd: stop threads
[  294.181107][T11261] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.841'.
[  294.217256][   T13] vhci_hcd: release socket
[  294.222638][   T13] vhci_hcd: disconnect device
[  294.243501][T11261] tipc: Resetting bearer <eth:syzkaller0>
[  294.249419][ T5922] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  294.256891][ T5922] usb 33-1: enqueue for inactive port 0
[  294.267705][T11260] tipc: Resetting bearer <eth:syzkaller0>
[  294.272298][  T975] usb 5-1: USB disconnect, device number 32
[  294.348855][T11260] tipc: Disabling bearer <eth:syzkaller0>
[  294.362726][ T5922] vhci_hcd: vhci_device speed not set
[  294.543078][T11316] virtio-fs: tag </dev/md0> not found
[  294.552808][T11316] syz.1.843: attempt to access beyond end of device
[  294.552808][T11316] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[  294.567218][T11316] gfs2: error -5 reading superblock
[  294.943261][T11330] netlink: 84 bytes leftover after parsing attributes in process `syz.1.846'.
[  295.170821][   T10] usb 3-1: USB disconnect, device number 29
[  296.441576][T11359] veth0_to_team: entered promiscuous mode
[  296.447327][T11359] veth0_to_team: entered allmulticast mode
[  296.509978][T11366] netlink: 96 bytes leftover after parsing attributes in process `syz.2.851'.
[  296.778972][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.787450][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.925914][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  296.925930][   T30] audit: type=1400 audit(1754687359.462:637): avc:  denied  { remount } for  pid=11369 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  296.925995][T11370] tmpfs: Cannot change global quota limit on remount
[  296.977570][T11370] gfs2: gfs2 mount does not exist
[  297.071206][   T30] audit: type=1400 audit(1754687359.612:638): avc:  denied  { unmount } for  pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  297.328173][   T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  297.499981][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.504517][   T30] audit: type=1400 audit(1754687360.042:639): avc:  denied  { create } for  pid=11395 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  297.512768][   T24] usb 5-1: config 0 has no interfaces?
[  297.538347][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  297.794874][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.822447][   T24] usb 5-1: config 0 descriptor??
[  297.881709][   T30] audit: type=1400 audit(1754687360.392:640): avc:  denied  { ioctl } for  pid=11393 comm="syz.1.860" path="socket:[22486]" dev="sockfs" ino=22486 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  298.035852][   T30] audit: type=1400 audit(1754687360.392:641): avc:  denied  { getopt } for  pid=11393 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  298.055695][   T30] audit: type=1400 audit(1754687360.562:642): avc:  denied  { read } for  pid=11395 comm="syz.0.859" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.081349][   T30] audit: type=1400 audit(1754687360.562:643): avc:  denied  { open } for  pid=11395 comm="syz.0.859" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.115277][   T30] audit: type=1400 audit(1754687360.572:644): avc:  denied  { ioctl } for  pid=11395 comm="syz.0.859" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  298.305620][   T30] audit: type=1400 audit(1754687360.842:645): avc:  denied  { create } for  pid=11395 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  298.338951][   T30] audit: type=1400 audit(1754687360.842:646): avc:  denied  { write } for  pid=11395 comm="syz.0.859" name="fib_trie" dev="proc" ino=4026532813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  298.460923][T11414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.862'.
[  298.769711][T11418] netlink: 44 bytes leftover after parsing attributes in process `syz.2.861'.
[  300.406492][   T24] usb 5-1: USB disconnect, device number 33
[  301.845495][ T5859] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  302.193541][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  302.193563][   T30] audit: type=1400 audit(1754687364.642:660): avc:  denied  { connect } for  pid=11495 comm="syz.3.873" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  302.232276][   T30] audit: type=1400 audit(1754687364.672:661): avc:  denied  { write } for  pid=11495 comm="syz.3.873" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  302.696101][T11505] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer.
[  302.904322][   T30] audit: type=1400 audit(1754687365.442:662): avc:  denied  { accept } for  pid=11511 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  303.078259][   T30] audit: type=1400 audit(1754687365.442:663): avc:  denied  { getopt } for  pid=11511 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  303.239730][ T5847] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  303.323729][   T30] audit: type=1400 audit(1754687365.652:664): avc:  denied  { setopt } for  pid=11511 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  303.438174][ T5847] usb 1-1: Using ep0 maxpacket: 32
[  303.520812][ T5847] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  303.529425][ T5847] usb 1-1: config 0 has no interface number 0
[  303.584236][ T5847] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  303.594110][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.604507][ T5847] usb 1-1: Product: syz
[  303.669453][ T5847] usb 1-1: Manufacturer: syz
[  303.680589][ T5847] usb 1-1: SerialNumber: syz
[  303.801942][ T5847] usb 1-1: config 0 descriptor??
[  304.099758][ T5847] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  304.114397][ T5847] usb 1-1: selecting invalid altsetting 1
[  304.121334][ T5847] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  304.135205][ T5847] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  304.157592][ T5847] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  304.166938][ T5847] usb 1-1: media controller created
[  304.167003][T11537] netlink: 'syz.3.879': attribute type 12 has an invalid length.
[  304.200257][   T30] audit: type=1400 audit(1754687366.742:665): avc:  denied  { ioctl } for  pid=11523 comm="syz.2.877" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  304.566509][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  304.636251][   T30] audit: type=1400 audit(1754687367.152:666): avc:  denied  { read write } for  pid=11540 comm="syz.1.880" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  304.679999][T11542] netlink: 88 bytes leftover after parsing attributes in process `syz.1.880'.
[  304.693452][   T30] audit: type=1400 audit(1754687367.152:667): avc:  denied  { open } for  pid=11540 comm="syz.1.880" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  304.719869][T11542] netlink: 'syz.1.880': attribute type 21 has an invalid length.
[  304.727781][T11542] netlink: 128 bytes leftover after parsing attributes in process `syz.1.880'.
[  304.757413][T11542] netlink: 'syz.1.880': attribute type 4 has an invalid length.
[  304.798224][T11542] netlink: 3 bytes leftover after parsing attributes in process `syz.1.880'.
[  304.814445][T11545] batadv1: entered promiscuous mode
[  304.823196][T11545] 8021q: adding VLAN 0 to HW filter on device batadv1
[  305.199604][   T30] audit: type=1400 audit(1754687367.742:668): avc:  denied  { execute } for  pid=11550 comm="syz.3.882" name="file1" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  305.281541][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.375839][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.780748][ T5847] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  305.941188][ T5847] zl10353_read_register: readreg error (reg=127, ret==-110)
[  306.290029][   T24] usb 1-1: USB disconnect, device number 36
[  306.900325][   T30] audit: type=1400 audit(1754687369.382:669): avc:  denied  { create } for  pid=11576 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  307.882256][T11588] tipc: Started in network mode
[  307.887126][T11588] tipc: Node identity ac14140c, cluster identity 4711
[  307.894815][T11588] tipc: New replicast peer: 255.255.255.255
[  307.901078][T11588] tipc: Enabled bearer <udp:syz2>, priority 10
[  307.909252][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'.
[  309.018147][ T5847] tipc: Node number set to 2886997004
[  309.637192][T11606] netlink: 'syz.0.891': attribute type 5 has an invalid length.
[  309.678788][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.892'.
[  309.697204][T11606] netlink: 'syz.0.891': attribute type 7 has an invalid length.
[  309.733976][   T30] audit: type=1400 audit(1754687372.272:670): avc:  denied  { read } for  pid=11607 comm="syz.3.892" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  309.786933][T11606] : entered promiscuous mode
[  309.792253][   T30] audit: type=1400 audit(1754687372.272:671): avc:  denied  { open } for  pid=11607 comm="syz.3.892" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  310.028912][ T5847] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  310.332476][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.348939][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.478198][ T5847] usb 1-1: Using ep0 maxpacket: 32
[  310.490674][ T5847] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  310.502858][ T5847] usb 1-1: config 0 has no interface number 0
[  310.509068][ T5847] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.520240][ T5847] usb 1-1: config 0 interface 85 has no altsetting 0
[  310.534143][ T5847] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  310.552000][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.565243][ T5847] usb 1-1: Product: syz
[  310.569614][ T5847] usb 1-1: Manufacturer: syz
[  310.574823][ T5847] usb 1-1: SerialNumber: syz
[  310.583681][ T5847] usb 1-1: config 0 descriptor??
[  310.618241][ T6448] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  310.778118][ T6448] usb 2-1: Using ep0 maxpacket: 32
[  310.789175][ T6448] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  310.797557][ T6448] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  310.808308][ T6448] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  310.817506][ T6448] usb 2-1: config 1 has no interface number 0
[  310.846664][ T6448] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.863395][ T5847] appletouch 1-1:0.85: Failed to read mode from device.
[  310.867937][ T6448] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  310.892574][ T6448] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  310.933758][ T5847] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  310.986239][ T6448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.003176][ T6448] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  311.104833][T11606] netlink: 'syz.0.891': attribute type 11 has an invalid length.
[  311.160287][   T30] audit: type=1400 audit(1754687373.692:672): avc:  denied  { create } for  pid=11605 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  311.204098][ T6448] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  311.217240][ T5847] usb 1-1: USB disconnect, device number 37
[  311.295470][   T30] audit: type=1400 audit(1754687373.692:673): avc:  denied  { ioctl } for  pid=11605 comm="syz.0.891" path="socket:[23787]" dev="sockfs" ino=23787 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  311.918479][   T30] audit: type=1400 audit(1754687374.342:674): avc:  denied  { write } for  pid=11630 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  312.248534][   T30] audit: type=1400 audit(1754687374.782:675): avc:  denied  { read } for  pid=11662 comm="syz.0.900" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  312.289229][ T6448] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  312.326575][   T30] audit: type=1400 audit(1754687374.782:676): avc:  denied  { open } for  pid=11662 comm="syz.0.900" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  312.414559][   T30] audit: type=1400 audit(1754687374.952:677): avc:  denied  { read } for  pid=11670 comm="syz.2.903" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  312.897647][T11674] ieee802154 phy0 wpan0: encryption failed: -22
[  312.932522][T11673] syz.4.898: attempt to access beyond end of device
[  312.932522][T11673] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0
[  312.943987][   T30] audit: type=1400 audit(1754687374.982:678): avc:  denied  { open } for  pid=11670 comm="syz.2.903" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  312.971090][   T30] audit: type=1400 audit(1754687375.432:679): avc:  denied  { create } for  pid=11664 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  312.973105][T11673] EXT4-fs (nbd4): unable to read superblock
[  313.414635][   T10] usb 2-1: USB disconnect, device number 24
[  313.421368][   T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  313.780970][   T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  314.000724][   T24] usb 3-1: Using ep0 maxpacket: 16
[  314.088135][   T24] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 8
[  314.289236][   T24] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  314.298407][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.306398][   T24] usb 3-1: Product: syz
[  314.310644][   T24] usb 3-1: Manufacturer: syz
[  314.316151][   T24] usb 3-1: SerialNumber: syz
[  314.405825][T11645] Process accounting resumed
[  314.502709][T11704] overlayfs: failed to resolve './file1/file0': -2
[  314.683576][   T24] usb 3-1: USB disconnect, device number 30
[  315.014696][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  315.014708][   T30] audit: type=1400 audit(1754687377.552:681): avc:  denied  { create } for  pid=11722 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  315.435474][   T30] audit: type=1400 audit(1754687377.962:682): avc:  denied  { read } for  pid=11722 comm="syz.0.912" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  315.466720][   T30] audit: type=1400 audit(1754687377.962:683): avc:  denied  { open } for  pid=11722 comm="syz.0.912" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  315.551380][   T30] audit: type=1400 audit(1754687377.962:684): avc:  denied  { ioctl } for  pid=11722 comm="syz.0.912" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  315.578679][   T30] audit: type=1400 audit(1754687377.962:685): avc:  denied  { write } for  pid=11722 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  315.894022][T11742] pim6reg: entered allmulticast mode
[  315.904829][T11742] pim6reg: left allmulticast mode
[  316.441466][ T5847] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  316.665306][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  316.671661][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  316.858420][ T5847] usb 5-1: Using ep0 maxpacket: 32
[  316.902081][ T5847] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  316.941928][ T5847] usb 5-1: config 0 has no interface number 0
[  317.022620][ T5847] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  317.046864][T11751] syz.0.918: attempt to access beyond end of device
[  317.046864][T11751] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  317.080196][T11751] EXT4-fs (nbd0): unable to read superblock
[  317.107194][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.163583][ T5847] usb 5-1: Product: syz
[  317.185879][ T5847] usb 5-1: Manufacturer: syz
[  317.288219][ T5847] usb 5-1: SerialNumber: syz
[  317.312062][ T5847] usb 5-1: config 0 descriptor??
[  317.336690][T11762] netlink: 'syz.2.919': attribute type 10 has an invalid length.
[  317.351618][ T5847] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  317.363136][ T5847] usb 5-1: selecting invalid altsetting 1
[  317.387371][ T5847] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  317.409271][ T5847] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  317.519971][ T5847] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  317.531729][ T5847] usb 5-1: media controller created
[  317.949577][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  318.270185][T11760] Process accounting resumed
[  318.931868][T11781] could not allocate digest TFM handle sha224-ni
[  319.061005][ T5847] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  319.080675][ T5847] zl10353_read_register: readreg error (reg=127, ret==-110)
[  319.147229][ T5847] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  319.174618][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'.
[  319.894794][   T31] INFO: task kworker/1:4:5909 blocked for more than 143 seconds.
[  320.067222][   T30] audit: type=1400 audit(1754687381.752:686): avc:  denied  { lock } for  pid=11796 comm="syz.4.925" path="socket:[23417]" dev="sockfs" ino=23417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  320.102118][   T30] audit: type=1400 audit(1754687381.812:687): avc:  denied  { create } for  pid=11788 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  320.123896][ T5847] usb 5-1: USB disconnect, device number 34
[  320.131985][   T31]       Not tainted 6.16.0-syzkaller-12063-g37816488247d #0
[  320.157418][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  320.174737][   T30] audit: type=1400 audit(1754687381.812:688): avc:  denied  { bind } for  pid=11788 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  320.188456][   T31] task:kworker/1:4     state:D stack:22576 pid:5909  tgid:5909  ppid:2      task_flags:0x4208060 flags:0x00004000
[  320.217650][   T31] Workqueue: usb_hub_wq hub_event
[  320.218327][   T30] audit: type=1400 audit(1754687381.832:689): avc:  denied  { listen } for  pid=11788 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  320.227459][   T31] Call Trace:
[  320.259011][   T31]  <TASK>
[  320.292467][   T30] audit: type=1400 audit(1754687381.842:690): avc:  denied  { connect } for  pid=11788 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  320.347172][   T31]  __schedule+0x1190/0x5de0
[  320.351841][   T31]  ? device_del+0x64e/0x9f0
[  320.355618][   T30] audit: type=1400 audit(1754687382.092:691): avc:  denied  { write } for  pid=11788 comm="syz.3.923" path="socket:[23920]" dev="sockfs" ino=23920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  320.356348][   T31]  ? device_unregister+0x1d/0xc0
[  320.387212][   T31]  ? i2c_del_adapter+0x53e/0x6f0
[  320.392205][   T31]  ? dvb_usb_i2c_exit+0x9f/0xf0
[  320.397059][   T31]  ? __driver_probe_device+0x1de/0x440
[  320.402424][   T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  320.406974][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  320.415312][   T31]  ? __pfx___schedule+0x10/0x10
[  320.423628][   T30] audit: type=1400 audit(1754687382.092:692): avc:  denied  { setopt } for  pid=11788 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  320.425174][   T31]  ? find_held_lock+0x2b/0x80
[  320.452610][   T31]  ? schedule+0x2d7/0x3a0
[  320.456954][   T31]  schedule+0xe7/0x3a0
[  320.461093][   T31]  schedule_timeout+0x257/0x290
[  320.463690][   T30] audit: type=1400 audit(1754687382.392:693): avc:  denied  { mount } for  pid=11796 comm="syz.4.925" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  320.465939][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  320.489316][   T30] audit: type=1326 audit(1754687382.602:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.4.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f607f38ebe9 code=0x0
[  320.517093][   T31]  ? mark_held_locks+0x49/0x80
[  320.521981][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  320.527309][   T31]  __wait_for_common+0x2fc/0x4e0
[  320.533595][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  320.539153][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  320.544614][   T31]  ? __pfx_device_del+0x10/0x10
[  320.549665][   T31]  ? kobject_put+0xab/0x5a0
[  320.554157][   T31]  i2c_del_adapter+0x546/0x6f0
[  320.560549][   T31]  ? usb_free_stream_buffers.isra.0+0x1b8/0x2b0
[  320.566811][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  320.572299][   T24] usb 3-1: Using ep0 maxpacket: 8
[  320.574903][   T31]  ? rcu_is_watching+0x12/0xc0
[  320.578881][   T24] usb 3-1: config 150 has an invalid interface number: 167 but max is 0
[  320.582452][   T31]  ? kfree+0x24f/0x4d0
[  320.591337][   T24] usb 3-1: config 150 has no interface number 0
[  320.598560][   T31]  dvb_usb_i2c_exit+0x9f/0xf0
[  320.601322][   T24] usb 3-1: config 150 interface 167 has no altsetting 0
[  320.605928][   T31]  dvb_usb_device_exit+0x334/0x580
[  320.614681][   T24] usb 3-1: New USB device found, idVendor=2f24, idProduct=3e59, bcdDevice=db.fa
[  320.619060][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  320.627425][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.634354][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  320.646808][   T24] usb 3-1: Product: syz
[  320.651061][   T24] usb 3-1: Manufacturer: syz
[  320.651434][   T31]  cxusb_probe+0x1c9/0x7d0
[  320.655703][   T24] usb 3-1: SerialNumber: syz
[  320.662216][   T31]  ? mark_held_locks+0x49/0x80
[  320.670594][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[  320.675540][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  320.680870][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  320.686677][   T31]  ? __pm_runtime_set_status+0x13c/0xa80
[  320.692335][   T31]  usb_probe_interface+0x300/0xa40
[  320.698483][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  320.704121][   T31]  really_probe+0x23e/0xa90
[  320.708667][   T31]  __driver_probe_device+0x1de/0x440
[  320.713952][   T31]  driver_probe_device+0x4c/0x1b0
[  320.719027][   T31]  __device_attach_driver+0x1df/0x310
[  320.724413][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  320.730682][   T31]  bus_for_each_drv+0x156/0x1e0
[  320.735533][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  320.741099][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  320.746300][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  320.752139][   T31]  __device_attach+0x1e4/0x4b0
[  320.756880][   T31]  ? __pfx___device_attach+0x10/0x10
[  320.762479][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  320.767681][   T31]  bus_probe_device+0x17f/0x1c0
[  320.772590][   T31]  device_add+0x1148/0x1aa0
[  320.777092][   T31]  ? __pfx_device_add+0x10/0x10
[  320.782151][   T31]  ? mark_held_locks+0x49/0x80
[  320.786929][   T31]  usb_set_configuration+0x1187/0x1e20
[  320.792830][   T31]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  320.799764][   T31]  usb_generic_driver_probe+0xb1/0x110
[  320.805229][   T31]  usb_probe_device+0xef/0x3e0
[  320.810021][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  320.815389][   T31]  really_probe+0x23e/0xa90
[  320.820148][   T31]  __driver_probe_device+0x1de/0x440
[  320.825423][   T31]  ? usb_driver_applicable+0x1c7/0x220
[  320.830922][   T31]  driver_probe_device+0x4c/0x1b0
[  320.835946][   T31]  __device_attach_driver+0x1df/0x310
[  320.841373][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  320.847265][   T31]  bus_for_each_drv+0x156/0x1e0
[  320.852470][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  320.857838][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  320.863106][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  320.868995][   T31]  __device_attach+0x1e4/0x4b0
[  320.873762][   T31]  ? __pfx___device_attach+0x10/0x10
[  320.875018][T11811] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  320.879363][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  320.892855][   T31]  bus_probe_device+0x17f/0x1c0
[  320.899193][   T31]  device_add+0x1148/0x1aa0
[  320.903802][   T31]  ? __pfx_device_add+0x10/0x10
[  320.908842][   T31]  ? add_device_randomness+0xb7/0xf0
[  320.914131][   T31]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  320.920168][   T31]  usb_new_device+0xd07/0x1a60
[  320.924935][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  320.929480][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.930034][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  320.942924][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.944063][   T31]  ? mark_held_locks+0x49/0x80
[  320.956282][   T31]  hub_event+0x2f34/0x4fe0
[  320.960780][   T31]  ? __pfx_hub_event+0x10/0x10
[  320.965519][   T31]  ? __free_object+0x3c0/0x410
[  320.970706][   T31]  ? rcu_is_watching+0x12/0xc0
[  320.975474][   T31]  process_one_work+0x9cc/0x1b70
[  320.980571][   T31]  ? __pfx_hcd_resume_work+0x10/0x10
[  320.985842][   T31]  ? __pfx_process_one_work+0x10/0x10
[  320.991250][   T31]  ? assign_work+0x1a0/0x250
[  320.995841][   T31]  worker_thread+0x6c8/0xf10
[  321.002001][   T31]  ? __kthread_parkme+0x19e/0x250
[  321.007026][   T31]  ? __pfx_worker_thread+0x10/0x10
[  321.012932][   T31]  kthread+0x3c5/0x780
[  321.017001][   T31]  ? __pfx_kthread+0x10/0x10
[  321.021643][   T31]  ? rcu_is_watching+0x12/0xc0
[  321.026405][   T31]  ? __pfx_kthread+0x10/0x10
[  321.031329][   T31]  ret_from_fork+0x5d4/0x6f0
[  321.035918][   T31]  ? __pfx_kthread+0x10/0x10
[  321.040542][   T31]  ret_from_fork_asm+0x1a/0x30
[  321.045293][   T31]  </TASK>
[  321.048437][   T31] 
[  321.048437][   T31] Showing all locks held in the system:
[  321.056140][   T31] 5 locks held by kworker/1:0/24:
[  321.061680][   T31]  #0: ffff8881446e7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  321.072525][   T31]  #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  321.083802][   T31]  #2: ffff888145777198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[  321.092963][   T31]  #3: ffff888028a73198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  321.102970][   T31]  #4: ffff8880232ad278 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0xa0
[  321.114978][   T31] 1 lock held by khungtaskd/31:
[  321.120089][   T31]  #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  321.130005][   T31] 2 locks held by kworker/u8:6/1092:
[  321.135273][   T31]  #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  321.145505][   T31]  #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0
[  321.154552][   T31] 2 locks held by getty/5605:
[  321.159399][   T31]  #0: ffff88814de9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  321.169204][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  321.179644][   T31] 5 locks held by kworker/1:4/5909:
[  321.184825][   T31]  #0: ffff8881446e7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  321.196802][   T31]  #1: ffffc900040afd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  321.208873][   T31]  #2: ffff888029a87198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[  321.217877][   T31]  #3: ffff888025e64198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  321.227363][   T31]  #4: ffff888025e67160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  321.236983][   T31] 4 locks held by kworker/u8:29/11475:
[  321.242527][   T31]  #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  321.252494][   T31]  #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0
[  321.261254][   T31]  #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30
[  321.270343][   T31]  #3: ffffffff9b0b2db0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[  321.280780][   T31] 1 lock held by syz.2.926/11811:
[  321.285795][   T31]  #0: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  321.296106][   T31] 
[  321.304208][   T31] =============================================
[  321.304208][   T31] 
[  321.313330][   T31] NMI backtrace for cpu 1
[  321.313347][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  321.313368][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  321.313378][   T31] Call Trace:
[  321.313384][   T31]  <TASK>
[  321.313391][   T31]  dump_stack_lvl+0x116/0x1f0
[  321.313422][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  321.313445][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  321.313472][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  321.313501][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  321.313523][   T31]  watchdog+0xf0e/0x1260
[  321.313547][   T31]  ? __pfx_watchdog+0x10/0x10
[  321.313564][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  321.313588][   T31]  ? __kthread_parkme+0x19e/0x250
[  321.313618][   T31]  ? __pfx_watchdog+0x10/0x10
[  321.313635][   T31]  kthread+0x3c5/0x780
[  321.313652][   T31]  ? __pfx_kthread+0x10/0x10
[  321.313668][   T31]  ? rcu_is_watching+0x12/0xc0
[  321.313689][   T31]  ? __pfx_kthread+0x10/0x10
[  321.313707][   T31]  ret_from_fork+0x5d4/0x6f0
[  321.313723][   T31]  ? __pfx_kthread+0x10/0x10
[  321.313740][   T31]  ret_from_fork_asm+0x1a/0x30
[  321.313773][   T31]  </TASK>
[  321.313796][   T31] Sending NMI from CPU 1 to CPUs 0:
[  321.438287][    C0] NMI backtrace for cpu 0
[  321.438300][    C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  321.438317][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  321.438325][    C0] RIP: 0010:write_comp_data+0x0/0x90
[  321.438344][    C0] Code: 48 8b 05 9b 33 1a 12 48 8b 80 30 16 00 00 e9 57 28 da 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 67 33 1a 12 65 8b 05 78 33
[  321.438362][    C0] RSP: 0018:ffffc90000157288 EFLAGS: 00000002
[  321.438373][    C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff81be0c89
[  321.438382][    C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000001
[  321.438390][    C0] RBP: 0000000000000ed8 R08: 0000000000000001 R09: 000000000000001f
[  321.438398][    C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000fdc
[  321.438406][    C0] R13: 0000004ad77f5dd4 R14: ffffc90000157330 R15: ffff88801b888ee8
[  321.438414][    C0] FS:  0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000
[  321.438428][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  321.438436][    C0] CR2: 0000555594d22608 CR3: 000000002c43d000 CR4: 00000000003526f0
[  321.438445][    C0] Call Trace:
[  321.438449][    C0]  <TASK>
[  321.438454][    C0]  rb_read_data_buffer.constprop.0+0x149/0x430
[  321.438476][    C0]  check_buffer+0x282/0x980
[  321.438494][    C0]  ? __pfx_trace_clock_local+0x10/0x10
[  321.438509][    C0]  ? __pfx_check_buffer+0x10/0x10
[  321.438529][    C0]  ? __pfx_trace_clock_local+0x10/0x10
[  321.438548][    C0]  __rb_reserve_next.constprop.0+0x486/0x16c0
[  321.438571][    C0]  ring_buffer_lock_reserve+0x459/0x11b0
[  321.438599][    C0]  ? ring_buffer_unlock_commit+0x2e8/0x620
[  321.438613][    C0]  ? __pfx_ring_buffer_lock_reserve+0x10/0x10
[  321.438633][    C0]  ? trace_event_buffer_commit+0x204/0xa50
[  321.438653][    C0]  trace_event_buffer_lock_reserve+0x123/0x740
[  321.438671][    C0]  trace_event_buffer_reserve+0x1f7/0x350
[  321.438687][    C0]  trace_event_raw_event_bpf_trace_printk+0x104/0x260
[  321.438703][    C0]  ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10
[  321.438719][    C0]  ? __pfx_bstr_printf+0x10/0x10
[  321.438741][    C0]  ? bpf_trace_run1+0x3d9/0x580
[  321.438753][    C0]  trace_bpf_trace_printk+0x11c/0x1d0
[  321.438765][    C0]  bpf_trace_printk+0x117/0x190
[  321.438777][    C0]  ? __pfx_bpf_trace_printk+0x10/0x10
[  321.438790][    C0]  ? bpf_trace_run1+0x3d9/0x580
[  321.438806][    C0]  bpf_prog_9e1c00255e17e72e+0x39/0x3f
[  321.438818][    C0]  bpf_trace_run1+0x22e/0x580
[  321.438831][    C0]  ? __pfx_bpf_trace_run1+0x10/0x10
[  321.438844][    C0]  ? __pfx___bpf_trace_rcu_utilization+0x10/0x10
[  321.438861][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  321.438876][    C0]  ? schedule+0xe7/0x3a0
[  321.438894][    C0]  __bpf_trace_rcu_utilization+0x8d/0xc0
[  321.438909][    C0]  ? __pfx___bpf_trace_rcu_utilization+0x10/0x10
[  321.438924][    C0]  ? rcu_note_context_switch+0x192/0x1e00
[  321.438939][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  321.438955][    C0]  trace_rcu_utilization+0xd9/0x200
[  321.438967][    C0]  __schedule+0x2fd/0x5de0
[  321.438984][    C0]  ? find_held_lock+0x2b/0x80
[  321.439000][    C0]  ? __lock_acquire+0x62e/0x1ce0
[  321.439020][    C0]  ? __mod_timer+0x8f2/0xd30
[  321.439032][    C0]  ? __pfx___schedule+0x10/0x10
[  321.439052][    C0]  ? find_held_lock+0x2b/0x80
[  321.439066][    C0]  ? schedule+0x2d7/0x3a0
[  321.439084][    C0]  schedule+0xe7/0x3a0
[  321.439100][    C0]  schedule_timeout+0x123/0x290
[  321.439116][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  321.439131][    C0]  ? __pfx_process_timeout+0x10/0x10
[  321.439149][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  321.439167][    C0]  ? prepare_to_swait_event+0xf5/0x480
[  321.439187][    C0]  rcu_gp_fqs_loop+0x1ea/0xb00
[  321.439200][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  321.439212][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  321.439230][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  321.439241][    C0]  ? rcu_gp_cleanup+0x7c1/0xd90
[  321.439254][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  321.439278][    C0]  rcu_gp_kthread+0x270/0x380
[  321.439290][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  321.439302][    C0]  ? rcu_is_watching+0x12/0xc0
[  321.439317][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  321.439336][    C0]  ? __kthread_parkme+0x19e/0x250
[  321.439361][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  321.439372][    C0]  kthread+0x3c5/0x780
[  321.439385][    C0]  ? __pfx_kthread+0x10/0x10
[  321.439398][    C0]  ? rcu_is_watching+0x12/0xc0
[  321.439413][    C0]  ? __pfx_kthread+0x10/0x10
[  321.439425][    C0]  ret_from_fork+0x5d4/0x6f0
[  321.439437][    C0]  ? __pfx_kthread+0x10/0x10
[  321.439450][    C0]  ret_from_fork_asm+0x1a/0x30
[  321.439470][    C0]  </TASK>
[  321.440517][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  321.900922][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  321.912352][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  321.922410][   T31] Call Trace:
[  321.925676][   T31]  <TASK>
[  321.928594][   T31]  dump_stack_lvl+0x3d/0x1f0
[  321.933185][   T31]  vpanic+0x6e8/0x7a0
[  321.937153][   T31]  ? __pfx_vpanic+0x10/0x10
[  321.941645][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[  321.947524][   T31]  panic+0xca/0xd0
[  321.951241][   T31]  ? __pfx_panic+0x10/0x10
[  321.955652][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  321.961011][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  321.967154][   T31]  ? watchdog+0xd78/0x1260
[  321.971553][   T31]  ? watchdog+0xd6b/0x1260
[  321.975955][   T31]  watchdog+0xd89/0x1260
[  321.980183][   T31]  ? __pfx_watchdog+0x10/0x10
[  321.984839][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  321.990026][   T31]  ? __kthread_parkme+0x19e/0x250
[  321.995040][   T31]  ? __pfx_watchdog+0x10/0x10
[  321.999696][   T31]  kthread+0x3c5/0x780
[  322.003746][   T31]  ? __pfx_kthread+0x10/0x10
[  322.008315][   T31]  ? rcu_is_watching+0x12/0xc0
[  322.013059][   T31]  ? __pfx_kthread+0x10/0x10
[  322.017628][   T31]  ret_from_fork+0x5d4/0x6f0
[  322.022194][   T31]  ? __pfx_kthread+0x10/0x10
[  322.026763][   T31]  ret_from_fork_asm+0x1a/0x30
[  322.031520][   T31]  </TASK>
[  322.034701][   T31] Kernel Offset: disabled
[  322.038997][   T31] Rebooting in 86400 seconds..