last executing test programs:

14.109144506s ago: executing program 4 (id=3108):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x9})
r4 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x10000004})
sendto$inet(r2, &(0x7f0000000180)='#}', 0x2, 0x54, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c00028005000100006309d030955796f100000008000740000000000400"], 0x70}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0xfffffffe}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x50}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100000, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@private1, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fe00c8070000562c365cbb61672300000000000000000000000000000c00090008001080", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0)
syz_clone(0xc0000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)

13.706366044s ago: executing program 4 (id=3110):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c005)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
io_uring_setup(0x3b45, &(0x7f00000002c0)={0x0, 0x86a1, 0x800, 0x0, 0x20000004})
sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0)

10.697094425s ago: executing program 0 (id=3120):
syz_open_dev$dri(&(0x7f00000000c0), 0xe0, 0x101000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x12, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)

9.741256795s ago: executing program 4 (id=3121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

9.065428341s ago: executing program 4 (id=3123):
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0)
r0 = creat(0x0, 0xecf86c37d530496c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
socket(0x2, 0x6, 0xffffffff)
r3 = openat(r0, 0x0, 0x40, 0x261)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
read(r6, 0x0, 0x0)
r7 = syz_io_uring_complete(r5, 0x0)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800000000000000400000000000000000000000000000000400a463949393ae0f300b9dbe048e0bc5f8635820076c9f01e6433d119d5f9cd315815690df6244adc95e72127dc14e5c0712f0733e810b4e3d72af1e015816e99e142e00528edf5b75f5ee6bfbb7a10db1adc0702211f1be9fb79aa40576bf0f33fe2146db50c43c9951a5a96f129e7c3b73b42fe2601469db50026f41487f3d467708f3015eaf3cc7c2d4c2cde8626116de91a899508d6ca37aa72992b3383f500cda37d27ab04b"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000104000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181b0000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94)

8.197544778s ago: executing program 1 (id=3126):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c005)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
io_uring_setup(0x3b45, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0)

8.167862883s ago: executing program 0 (id=3127):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

8.063295551s ago: executing program 4 (id=3128):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x58b803, 0x0)
landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="dd24881d3412900f7a19bc06f52dcea8479195bbf4982c5b92dccaa6ba6d4ba5ec31405dea40e5b613eb3597addbd6b7e266ac31f7f05d4820a8168481a1cc16bc7312d8082c2951ad643cb98a017ef857922fb6f84831717603c97a29779fa43e6c8bd8bbf829ddc1a4daa216beca1b3653136ab0ece6169d1c4d3e1fa5c0fc7e6cfff8bcac2c04ce8f0ce836d346643d9e51c44e07dceb55797d1b60685607a1a00ce8ca27c8a586fb461ce80a7fcbce2532fce828b7e4c1f7b9891558eb9d3ef78f30bed0e6eb668215ccd2358c879d23e72e3f0300e7342b3f9214016a8a38a59acea9"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@generic={0x80, 0xb, "09e12e5f0b6bdcf72f2ec7"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x5e, 0xe, '\x00', [@generic={0xff, 0xe, "50d650847249ad288702ebd0d654"}, @pad1, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x190}}], 0x1, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

7.187451012s ago: executing program 4 (id=3131):
syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x3818, 0x21)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10)

6.190672098s ago: executing program 1 (id=3132):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x100)
pread64(r6, &(0x7f0000000780)=""/4089, 0xff9, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030013a700002687542cbd001c0012800b00010062720e000000000000970000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x9)
getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4111, 0x100f)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
clock_gettime(0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
mq_timedsend(r6, &(0x7f0000000480)="2a82155778787de98f49a1ef5e851404bf49cdedb2b40586ede61e1c05cb122c02043eb5c65a57adaf155eff9c654534061d95afb882d87e9702c73c9fa80f141e0c22aca8511e768ff2b852ebe303707cc237665b00928d84fe3b84c494b584fd24e7a034a2f0b8b71306a6e6f9ac3f0630bc90b63964dd8b655faf6b4189538263dfb24d3b8c303e8a08df748b4f115f130c6ea2085d278636719a2f661016d237350017d2a2cfc6ae672bef58f6d8b16fa9acd2d890669a0b7be88f1333dbe7f8fee402aae25c8082f57571a04b741c63255f868dfe423d8f053eaf7ae9b176c663fd0a6a02476b", 0xe9, 0x9, &(0x7f00000005c0)={r8, r9+10000000})
connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)

6.165103781s ago: executing program 2 (id=3133):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x84880)
r1 = getpid()
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x305182, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r3, 0x0, 0xce, &(0x7f0000000180), &(0x7f0000000080)=0xfffffffffffffd9c)
r4 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10)
listen(r4, 0x80000000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
listen(0xffffffffffffffff, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000100)=0x7)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x1ffffffc, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002f80)=""/213, &(0x7f0000003080)=0xd5)
r6 = syz_pidfd_open(r1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="000010c20800"})
setns(r6, 0x24020000)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r0, r8, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3ff, 0x1, {<r10=>0xffffffffffffffff}, {}, 0x6, 0xb})
syz_open_procfs(r10, &(0x7f0000000040)='map_files\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.981417384s ago: executing program 0 (id=3134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010426bd70000000000000000006", @ANYRES32=0x0, @ANYBLOB="11a5040002000000140012880b000100697036677265000004000280196195a2e8446440cbbbb7ce7f5c6cebb1e55358af377069fe61f7df8593142bffcdadb92c6e5ed2df9bbb6f3cf789e0fdbef3a9097c4b84807c8cd54634c4c09fe00310d3a4a04a"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x39000, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r10 = accept$alg(r9, 0x0, 0x0)
splice(r7, 0x0, r10, 0x0, 0x408cd, 0x0)
write$binfmt_elf64(r6, &(0x7f0000001040)=ANY=[], 0xfffffe3e)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c)
socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

5.963319005s ago: executing program 2 (id=3135):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
move_mount(r2, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x14)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) (fail_nth: 2)

5.213360274s ago: executing program 1 (id=3136):
syz_open_dev$dri(&(0x7f00000000c0), 0xe0, 0x101000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x12, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)

5.212318913s ago: executing program 2 (id=3137):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) (fail_nth: 3)

5.057253446s ago: executing program 2 (id=3138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010426bd70000000000000000006", @ANYRES32=0x0, @ANYBLOB="11a5040002000000140012880b000100697036677265000004000280196195a2e8446440cbbbb7ce7f5c6cebb1e55358af377069fe61f7df8593142bffcdadb92c6e5ed2df9bbb6f3cf789e0fdbef3a9097c4b84807c8cd54634c4c09fe00310d3a4a04a"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x39000, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r10 = accept$alg(r9, 0x0, 0x0)
splice(r7, 0x0, r10, 0x0, 0x408cd, 0x0)
write$binfmt_elf64(r6, &(0x7f0000001040)=ANY=[], 0xfffffe3e)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c)
socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0\x00'})

3.68527345s ago: executing program 1 (id=3139):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0), 0xfffffd97)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20)
pipe2(0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x800006, 0x1, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x100, 0x1}}, 0x50)

3.44945363s ago: executing program 2 (id=3140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x58b803, 0x0)
landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="dd24881d3412900f7a19bc06f52dcea8479195bbf4982c5b92dccaa6ba6d4ba5ec31405dea40e5b613eb3597addbd6b7e266ac31f7f05d4820a8168481a1cc16bc7312d8082c2951ad643cb98a017ef857922fb6f84831717603c97a29779fa43e6c8bd8bbf829ddc1a4daa216beca1b3653136ab0ece6169d1c4d3e1fa5c0fc7e6cfff8bcac2c04ce8f0ce836d346643d9e51c44e07dceb55797d1b60685607a1a00ce8ca27c8a586fb461ce80a7fcbce2532fce828b7e4c1f7b9891558eb9d3ef78f30bed0e6eb66"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.411610613s ago: executing program 3 (id=3141):
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0xfffffffffffffff7, 0x0})
io_uring_enter(0xffffffffffffffff, 0x4590, 0x21, 0x1, 0x0, 0x0)

2.589353629s ago: executing program 3 (id=3142):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0)
r0 = creat(0x0, 0xecf86c37d530496c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a682", 0xd2}], 0x1}, 0x0)
socket(0x2, 0x6, 0xffffffff)
r3 = openat(r0, 0x0, 0x40, 0x261)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
read(r6, 0x0, 0x0)
r7 = syz_io_uring_complete(r5, 0x0)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800000000000000400000000000000000000000000000000400a463949393ae0f300b9dbe048e0bc5f8635820076c9f01e6433d119d5f9cd315815690df6244adc95e72127dc14e5c0712f0733e810b4e3d72af1e015816e99e142e00528edf5b75f5ee6bfbb7a10db1adc0702211f1be9fb79aa40576bf0f33fe2146db50c43c9951a5a96f129e7c3b73b42fe2601469db50026f41487f3d467708f3015eaf3cc7c2d4c2cde8626116de91a899508d6ca37aa72992b3383f500cda37d27ab04b"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000104000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181b0000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94)

2.589025777s ago: executing program 2 (id=3143):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)

2.338422158s ago: executing program 1 (id=3144):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
read(r1, &(0x7f0000000300)=""/141, 0x8d)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="80") (async)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="80")
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4108, 0x100c}], 0x1, 0x8, 0x1) (async)
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4108, 0x100c}], 0x1, 0x8, 0x1)

1.853316719s ago: executing program 3 (id=3145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x58b803, 0x0)
landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="dd24881d3412900f7a19bc06f52dcea8479195bbf4982c5b92dccaa6ba6d4ba5ec31405dea40e5b613eb3597addbd6b7e266ac31f7f05d4820a8168481a1cc16bc7312d8082c2951ad643cb98a017ef857922fb6f84831717603c97a29779fa43e6c8bd8bbf829ddc1a4daa216beca1b3653136ab0ece6169d1c4d3e1fa5c0fc7e6cfff8bcac2c04ce8f0ce836d346643d9e51c44e07dceb55797d1b60685607a1a00ce8ca27c8a586fb461ce80a7fcbce2532fce828b7e4c1f7b9891558eb9d3ef78f30bed0e6eb668215ccd2358c879d23e72e3f0300e7342b3f9214016a8a38a5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@generic={0x80, 0xb, "09e12e5f0b6bdcf72f2ec7"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x12, "50d650847249ad288702ebd0d654b985e890"}, @pad1, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x208}}], 0x1, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.736359553s ago: executing program 0 (id=3146):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.543771831s ago: executing program 0 (id=3147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010426bd70000000000000000006", @ANYRES32=0x0, @ANYBLOB="11a5040002000000140012880b000100697036677265000004000280196195a2e8446440cbbbb7ce7f5c6cebb1e55358af377069fe61f7df8593142bffcdadb92c6e5ed2df9bbb6f3cf789e0fdbef3a9097c4b84807c8cd54634c4c09fe00310d3a4a04a"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x39000, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r10 = accept$alg(r9, 0x0, 0x0)
splice(r7, 0x0, r10, 0x0, 0x408cd, 0x0)
write$binfmt_elf64(r6, &(0x7f0000001040)=ANY=[], 0xfffffe3e)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c)
socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0\x00'})

1.51890684s ago: executing program 3 (id=3148):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={<r3=>0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0xb6, "18f3553f301bb4d95cb5fbdae69a2085ffed1a2f3ea4958ca1a2079bcf90eb5dab847e85da7097e22cc96282849baa31c698b726814bad31eef51c4845f609fc1c4c78a548c35c4aa03ed5287e11c838e996c7160583792047ab01c782cd098b4d5655b9287e0ae4d6de1102e55f0dd7436b5c6b7ceac7e6a83d27d72d42a80fa9a78f2596e3677b8c8ace2c2485c2134a7a0e484a368f901ad328146364267052b9055164adcec3af043c2e038de16819310f40e670"}, &(0x7f0000000280)=0xbe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
close_range(r4, 0xffffffffffffffff, 0x0)

1.317648106s ago: executing program 3 (id=3149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x58b803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="dd24881d3412900f7a19bc06f52dcea8479195bbf4982c5b92dccaa6ba6d4ba5ec31405dea40e5b613eb3597addbd6b7e266ac31f7f05d4820a8168481a1cc16bc7312d8082c2951ad643cb98a017ef857922fb6f84831717603c97a29779fa43e6c8bd8bbf829ddc1a4daa216beca1b3653136ab0ece6169d1c4d3e1fa5c0fc7e6cfff8bcac2c04ce8f0ce836d346643d9e51c44e07dceb55797d1b60685607a1a00ce8ca27c8a586fb461ce80a7fcbce2532fce828b7e4c1f7b9891558eb9d3ef78f30bed0e6eb668215ccd2358c879d23e72e3f0300e7342b3f9214016a8a38a59acea9"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x108, 0x29, 0x36, {0x5e, 0x1d, '\x00', [@generic={0xff, 0x12, "50d650847249ad288702ebd0d654b985e890"}, @pad1, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x208}}], 0x1, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

507.878505ms ago: executing program 3 (id=3150):
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x60000)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x60}}, 0x0)
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) (fail_nth: 3)

485.769938ms ago: executing program 0 (id=3151):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0'}, 0x29)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b0c000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000630000200012800b0001006572737061516530c16e001000ce21000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0)

0s ago: executing program 1 (id=3152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x58b803, 0x0)
landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="dd24881d3412900f7a19bc06f52dcea8479195bbf4982c5b92dccaa6ba6d4ba5ec31405dea40e5b613eb3597addbd6b7e266ac31f7f05d4820a8168481a1cc16bc7312d8082c2951ad643cb98a017ef857922fb6f84831717603c97a29779fa43e6c8bd8bbf829ddc1a4daa216beca1b3653136ab0ece6169d1c4d3e1fa5c0fc7e6cfff8bcac2c04ce8f0ce836d346643d9e51c44e07dceb55797d1b60685607a1a00ce8ca27c8a586fb461ce80a7fcbce2532fce828b7e4c1f7b9891558eb9d3ef78f30bed0e6eb668215ccd2358c879d23e72e3f0300e7342b3f9214016a8a38a5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  583.488236][   T29] audit: type=1400 audit(1776615675.995:605): avc:  denied  { read } for  pid=13850 comm="syz.0.2383" path="socket:[63130]" dev="sockfs" ino=63130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  583.565209][T13861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2385'.
[  583.685676][ T5921] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  583.831009][T13864] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  583.868142][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  583.876989][T13864] CIFS mount error: No usable UNC path provided in device string!
[  583.876989][T13864] 
[  583.893932][ T5921] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  583.905180][T13864] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  583.936921][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  583.948218][T13862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.974880][T13868] netlink: 'syz.4.2386': attribute type 11 has an invalid length.
[  583.998436][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  584.021566][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  584.043848][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  584.075531][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  584.093182][ T5921] usb 2-1: Product: syz
[  584.103825][ T5921] usb 2-1: Manufacturer: syz
[  584.136422][ T5921] cdc_wdm 2-1:1.0: skipping garbage
[  584.146460][ T5921] cdc_wdm 2-1:1.0: skipping garbage
[  584.170113][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  584.185165][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol
[  584.326581][ T5921] usb 2-1: USB disconnect, device number 38
[  584.596264][T13862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.854311][T13862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.996251][  T798] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  585.020012][T13862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.160602][  T798] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  585.230691][  T798] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  585.329033][  T798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  585.481387][  T798] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  585.495885][  T798] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  585.527009][  T798] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  585.537329][  T798] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  585.571711][  T798] usb 2-1: Product: syz
[  585.588715][  T798] usb 2-1: Manufacturer: syz
[  585.775033][T13885] xt_connbytes: Forcing CT accounting to be enabled
[  585.782029][T13885] Cannot find set identified by id 0 to match
[  586.036790][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  586.036805][   T29] audit: type=1400 audit(1776615678.325:607): avc:  denied  { write } for  pid=13882 comm="syz.3.2390" name="file0" dev="tmpfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  586.089001][  T798] cdc_wdm 2-1:1.0: skipping garbage
[  586.105593][  T798] cdc_wdm 2-1:1.0: skipping garbage
[  586.138441][  T798] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  586.158130][  T798] cdc_wdm 2-1:1.0: Unknown control protocol
[  586.275188][T13889] fuse: Unknown parameter 'fd0x0000000000000003'
[  586.314813][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.320525][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.326288][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.332116][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.338019][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.343843][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.349730][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.355840][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.361687][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.367531][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.371313][T13891] 9p: Could not find request transport: f0xffffffffffffffff
[  586.373350][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.386559][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.392394][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.398254][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.404468][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.410342][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.416209][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.422288][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.428922][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.434921][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.440593][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.447718][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.454236][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.461635][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.467665][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.473597][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.479427][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.485278][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.492217][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.498027][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.503678][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.509542][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.515189][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.521269][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.528202][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.534063][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.539734][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.545519][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.551164][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.556977][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.562672][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.568423][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.574055][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.579808][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.585499][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.591330][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.596988][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.602704][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.608367][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.615957][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.621971][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.627744][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.633533][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.639341][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.644987][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.650711][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.656374][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.662127][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.667802][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.673581][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.679436][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.685169][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.690952][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.696614][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.702325][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.707994][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.714863][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.720508][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.726507][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[  586.732167][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[  586.738634][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  586.761926][ T5921] usb 2-1: USB disconnect, device number 39
[  586.782004][ T9278] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.822102][ T6241] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.863947][ T6241] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.878517][ T6241] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.030311][T13905] kAFS: unable to lookup cell 'ÿ'
[  587.203756][T13906] overlayfs: failed to clone upperpath
[  587.413031][T13913] overlayfs: failed to clone upperpath
[  587.585547][ T5921] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  587.767127][ T5921] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  587.790584][ T5921] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  587.818464][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  587.845648][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  587.876801][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  587.907023][ T5921] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  587.920324][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  587.941994][ T5921] usb 2-1: Product: syz
[  587.952804][ T5921] usb 2-1: Manufacturer: syz
[  587.976023][ T5921] cdc_wdm 2-1:1.0: skipping garbage
[  587.987642][ T5921] cdc_wdm 2-1:1.0: skipping garbage
[  588.005759][ T5921] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  588.016175][ T5921] cdc_wdm 2-1:1.0: Unknown control protocol
[  588.180151][ T5921] usb 2-1: USB disconnect, device number 40
[  588.703429][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'.
[  588.792745][T13920] tipc: Started in network mode
[  588.797802][T13920] tipc: Node identity ac14140f, cluster identity 4711
[  588.808712][T13920] tipc: New replicast peer: 255.255.255.255
[  588.816380][T13920] tipc: Enabled bearer <udp:syz2>, priority 10
[  588.827478][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'.
[  589.111028][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'.
[  589.155105][T13919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2401'.
[  589.839272][T13932] 9p: Could not find request transport: f0xffffffffffffffff
[  589.928260][ T5870] tipc: Node number set to 2886997007
[  589.940898][T13935] fuse: Unknown parameter 'fd0x0000000000000003'
[  590.419002][T13943] overlayfs: failed to clone upperpath
[  591.826628][   T29] audit: type=1400 audit(1776615684.395:608): avc:  denied  { map } for  pid=13966 comm="syz.1.2417" path="socket:[64146]" dev="sockfs" ino=64146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  591.866201][   T29] audit: type=1400 audit(1776615684.415:609): avc:  denied  { read } for  pid=13966 comm="syz.1.2417" path="socket:[64146]" dev="sockfs" ino=64146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  592.086887][T13974] fuse: Unknown parameter 'fd0x0000000000000003'
[  592.622736][   T29] audit: type=1400 audit(1776615685.185:610): avc:  denied  { create } for  pid=13984 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  592.642723][T13985] delete_channel: no stack
[  592.651793][   T29] audit: type=1400 audit(1776615685.215:611): avc:  denied  { setopt } for  pid=13984 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  592.667370][T13980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  593.972851][T14015] overlayfs: failed to clone upperpath
[  594.743702][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'.
[  594.763689][T14027] fuse: fd is not a fuse device
[  594.976765][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'.
[  595.079256][T14049] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2439'.
[  595.100328][T14049] fuse: Unknown parameter '}@9[}\'
[  595.108896][T14049] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  597.376598][T14083] fuse: fd is not a fuse device
[  597.492339][   T29] audit: type=1400 audit(1776615690.055:612): avc:  denied  { name_bind } for  pid=14087 comm="syz.4.2449" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  598.647554][T14111] netlink: 'syz.0.2454': attribute type 11 has an invalid length.
[  598.765697][  T984] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  598.935791][  T984] usb 2-1: Using ep0 maxpacket: 32
[  598.985770][  T984] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.005228][  T984] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.018586][  T984] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  599.028210][  T984] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  599.036893][  T984] usb 2-1: Product: syz
[  599.041284][  T984] usb 2-1: Manufacturer: syz
[  599.052589][  T984] hub 2-1:4.0: USB hub found
[  599.356379][  T984] hub 2-1:4.0: 2 ports detected
[  599.885337][T14133] fuse: fd is not a fuse device
[  600.143945][T14141] overlayfs: failed to clone upperpath
[  600.861176][  T984] hub 2-1:4.0: activate --> -90
[  600.896200][ T5823] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  600.963286][T14155] 9p: Could not find request transport: f0xffffffffffffffff
[  600.993813][ T5823] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  601.061881][  T984] hub 2-1:4.0: hub_ext_port_status failed (err = -71)
[  601.070971][ T5890] usb 2-1: USB disconnect, device number 41
[  601.123559][T14163] netlink: 'syz.4.2472': attribute type 11 has an invalid length.
[  601.182074][T14166] fuse: fd is not a fuse device
[  602.168634][T14201] overlayfs: failed to clone upperpath
[  602.212455][T14203] 9p: Could not find request transport: f0xffffffffffffffff
[  602.245544][  T798] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  602.410811][  T798] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  602.425682][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.433967][  T798] usb 2-1: Product: syz
[  602.438815][  T798] usb 2-1: Manufacturer: syz
[  602.445406][  T798] usb 2-1: SerialNumber: syz
[  602.665096][   T29] audit: type=1400 audit(1776615695.225:613): avc:  denied  { create } for  pid=14192 comm="syz.1.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  603.133875][  T798] gspca_main: pac207-2.14.0 probing 093a:2476
[  603.143549][  T798] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  603.154257][  T798] uvcvideo 2-1:13.0: Found UVC 0.00 device syz (093a:2476)
[  603.167320][  T798] uvcvideo 2-1:13.0: No valid video chain found.
[  603.178307][  T798] usb 2-1: USB disconnect, device number 42
[  603.581121][T14239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2501'.
[  603.608171][T14236] 9p: Could not find request transport: f0xffffffffffffffff
[  604.504789][T14267] x_tables: duplicate entry at hook 1
[  604.558453][T14271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2513'.
[  604.597090][T14273] overlayfs: failed to clone upperpath
[  604.620274][   T29] audit: type=1400 audit(1776615953.190:614): avc:  denied  { bind } for  pid=14272 comm="syz.0.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  604.735530][   T29] audit: type=1400 audit(1776615953.300:615): avc:  denied  { bind } for  pid=14278 comm="syz.2.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  604.792430][   T29] audit: type=1400 audit(1776615953.350:616): avc:  denied  { listen } for  pid=14278 comm="syz.2.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  605.165027][T14313] vlan2: entered allmulticast mode
[  605.177537][T14313] bond0: entered allmulticast mode
[  605.190481][T14313] bond_slave_0: entered allmulticast mode
[  605.207704][T14313] bond_slave_1: entered allmulticast mode
[  605.208652][T14315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2526'.
[  605.306556][T14315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  605.319470][T14315] bond_slave_0: left allmulticast mode
[  605.412375][T14315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  605.422648][T14315] bond_slave_1: left allmulticast mode
[  605.438765][T14315] bond0 (unregistering): Released all slaves
[  605.887169][ T8124] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  606.045560][ T8124] usb 2-1: Using ep0 maxpacket: 8
[  606.052319][ T8124] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  606.064413][ T8124] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  606.073866][ T8124] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.091621][ T8124] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  606.101866][ T8124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.110151][ T8124] usb 2-1: Product: syz
[  606.114437][ T8124] usb 2-1: Manufacturer: syz
[  606.119749][ T8124] usb 2-1: SerialNumber: syz
[  606.203435][T14338] overlayfs: failed to clone upperpath
[  606.329837][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.346064][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.413731][T14344] 9p: Could not find request transport: f0xffffffffffffffff
[  606.733989][ T8124] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  606.755524][ T8124] cdc_ncm 2-1:1.0: bind() failure
[  606.762435][ T8124] usbtest 2-1:1.0: Linux user mode ISO test driver
[  606.776999][ T8124] usbtest 2-1:1.0: high-speed {control iso-in} tests (+alt)
[  606.856612][T14367] overlayfs: failed to clone upperpath
[  606.862931][ T8124] usb 2-1: USB disconnect, device number 43
[  607.585337][T14382] fuse: fd is not a fuse device
[  608.226533][T14388] 9p: Could not find request transport: f0x0000000000000005
[  608.307386][T14403] netlink: 'syz.1.2551': attribute type 11 has an invalid length.
[  609.325280][   T29] audit: type=1400 audit(1776615957.880:617): avc:  denied  { create } for  pid=14411 comm="syz.3.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  609.479978][T14427] netlink: 'syz.2.2558': attribute type 11 has an invalid length.
[  609.540062][T14431] fuse: fd is not a fuse device
[  610.599947][ T5935] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  610.660995][   T29] audit: type=1326 audit(1776615959.230:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f90796597 code=0x7ffc0000
[  610.732855][   T29] audit: type=1326 audit(1776615959.230:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f9073db99 code=0x7ffc0000
[  610.778956][   T29] audit: type=1326 audit(1776615959.230:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f90796597 code=0x7ffc0000
[  610.832199][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  610.855339][   T29] audit: type=1326 audit(1776615959.230:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f9073db99 code=0x7ffc0000
[  610.879583][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  610.891406][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.902849][   T29] audit: type=1326 audit(1776615959.230:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f90796597 code=0x7ffc0000
[  610.929114][ T5935] usb 2-1: config 0 descriptor??
[  610.934759][   T29] audit: type=1326 audit(1776615959.230:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f9073db99 code=0x7ffc0000
[  610.959452][T14433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  610.967953][   T29] audit: type=1326 audit(1776615959.230:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f90796597 code=0x7ffc0000
[  610.997824][   T29] audit: type=1326 audit(1776615959.230:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f9073db99 code=0x7ffc0000
[  611.021793][   T29] audit: type=1326 audit(1776615959.230:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14470 comm="syz.2.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  611.402913][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.416711][T14486] fuse: fd is not a fuse device
[  611.421686][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.431937][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.448105][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.456690][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.844696][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.853489][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.870256][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.878592][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.904310][ T5935] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0
[  611.928820][ T5935] logitech-djreceiver 0003:046D:C71F.0006: collection stack underflow
[  611.946993][ T5935] logitech-djreceiver 0003:046D:C71F.0006: item 0 0 0 12 parsing failed
[  611.967483][ T5935] logitech-djreceiver 0003:046D:C71F.0006: logi_dj_probe: parse failed
[  611.977481][ T5935] logitech-djreceiver 0003:046D:C71F.0006: probe with driver logitech-djreceiver failed with error -22
[  612.004291][ T5935] usb 2-1: USB disconnect, device number 44
[  613.613310][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'.
[  613.630485][T14527] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2589'.
[  613.660325][T14527] netlink: 'syz.4.2589': attribute type 2 has an invalid length.
[  613.668130][T14527] netlink: 'syz.4.2589': attribute type 2 has an invalid length.
[  613.710080][T14532] fuse: fd is not a fuse device
[  613.727465][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'.
[  613.746353][T14527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2589'.
[  613.830739][T14538] netlink: 'syz.3.2591': attribute type 11 has an invalid length.
[  613.927445][T14540] netlink: 'syz.1.2592': attribute type 11 has an invalid length.
[  614.442260][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  614.442276][   T29] audit: type=1400 audit(1776615963.010:693): avc:  denied  { getopt } for  pid=14550 comm="syz.2.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  615.735498][ T5890] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  615.851385][T14571] fuse: fd is not a fuse device
[  615.905537][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  615.919538][ T5890] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  615.938959][ T5890] usb 2-1: config 0 has no interface number 0
[  615.954614][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  615.984268][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.007251][ T5890] usb 2-1: Product: syz
[  616.017108][ T5890] usb 2-1: Manufacturer: syz
[  616.029110][ T5890] usb 2-1: SerialNumber: syz
[  616.050192][ T5890] usb 2-1: config 0 descriptor??
[  616.126471][T14576] netlink: 'syz.3.2604': attribute type 11 has an invalid length.
[  616.294394][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'.
[  616.313702][ T5890] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  616.324650][ T5890] uvcvideo 2-1:0.31: No valid video chain found.
[  616.339206][   T29] audit: type=1400 audit(1776615964.910:694): avc:  denied  { ioctl } for  pid=14581 comm="syz.3.2606" path="socket:[66093]" dev="sockfs" ino=66093 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  616.343250][ T5890] usb 2-1: USB disconnect, device number 45
[  616.391296][T14587] hsr0: entered promiscuous mode
[  616.422395][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'.
[  616.663447][T14596] fuse: fd is not a fuse device
[  617.070080][   T29] audit: type=1400 audit(1776615965.640:695): avc:  denied  { getopt } for  pid=14616 comm="syz.0.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  617.217308][T14628] fuse: fd is not a fuse device
[  617.475151][T14647] netlink: 'syz.2.2616': attribute type 11 has an invalid length.
[  617.735714][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  617.774460][T14665] tmpfs: Bad value for 'mpol'
[  617.948690][T14669] overlayfs: unescaped trailing colons in lowerdir mount option.
[  617.990977][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'.
[  618.024852][T14674] batman_adv: batadv0: Adding interface: dummy0
[  618.043133][T14674] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.088523][T14674] batman_adv: batadv0: Interface activated: dummy0
[  618.345498][ T8124] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  618.495488][ T8124] usb 2-1: Using ep0 maxpacket: 32
[  618.505530][ T8124] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  618.520720][ T8124] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  618.529792][ T8124] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  618.538859][ T8124] usb 2-1: config 1 has no interface number 0
[  618.545164][ T8124] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 53, changing to 9
[  618.563446][ T8124] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  618.576537][ T8124] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  618.586290][ T8124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.662513][ T8124] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  618.838526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  618.844951][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  619.173182][T14700] overlayfs: failed to clone upperpath
[  619.788757][ T8124] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  621.476341][ T8124] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  621.905433][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  622.032872][ T5935] usb 2-1: USB disconnect, device number 46
[  622.075272][ T5935] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  622.267534][ T5823] Bluetooth: hci3: unexpected event for opcode 0x2746
[  622.545813][ T5935] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  623.847121][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.872968][ T5935] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  623.876153][T14729] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  623.908604][ T5935] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  623.927090][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.941898][ T5935] usb 2-1: Product: syz
[  623.952582][ T5935] usb 2-1: Manufacturer: syz
[  623.971534][ T5935] usb 2-1: SerialNumber: syz
[  623.992032][ T5935] cdc_mbim 2-1:1.0: skipping garbage
[  624.195800][T14710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  624.467428][T14743] 9p: Could not find request transport: f0xffffffffffffffff
[  624.614912][T14750] bond1: option xmit_hash_policy: invalid value (6)
[  624.636647][T14750] bond1 (unregistering): Released all slaves
[  624.704390][T14752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  624.764093][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  624.788186][T14752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  624.811951][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'.
[  624.822134][T14758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2642'.
[  624.825734][T14710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.833367][T14758] netlink: 'syz.2.2642': attribute type 1 has an invalid length.
[  624.847523][T14758] netlink: 'syz.2.2642': attribute type 2 has an invalid length.
[  624.856829][T14710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.899399][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'.
[  624.912883][T14710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  624.941430][ T5935] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  624.954590][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2642'.
[  624.973307][ T5935] cdc_mbim 2-1:1.0: setting rx_max = 2048
[  625.030237][T14764] fuse: fd is not a fuse device
[  625.151746][ T5935] cdc_mbim 2-1:1.0: setting tx_max = 184
[  625.167668][ T5935] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  625.294459][ T5935] wwan wwan0: port wwan0mbim0 attached
[  625.323236][ T5935] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 1a:5a:2a:d8:08:1a
[  625.343920][ T5935] usb 2-1: USB disconnect, device number 47
[  626.511375][ T5935] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  627.345131][   T29] audit: type=1400 audit(1776615975.910:696): avc:  denied  { read } for  pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  627.571026][T14779] 9p: Could not find request transport: f0xffffffffffffffff
[  627.694501][T14786] fuse: fd is not a fuse device
[  628.643310][ T5935] wwan wwan0: port wwan0mbim0 disconnected
[  628.932728][   T29] audit: type=1400 audit(1776615977.490:697): avc:  denied  { write } for  pid=14787 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  629.273602][T14803] fuse: fd is not a fuse device
[  629.348601][ T5935] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  629.476831][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  629.496594][T14813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2660'.
[  629.519246][T14813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2660'.
[  629.528404][ T5935] usb 2-1: Using ep0 maxpacket: 32
[  629.544981][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  629.591668][ T5935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.608773][T14813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2660'.
[  630.587586][ T5935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.600196][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  630.609380][ T5935] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  630.617888][ T5935] usb 2-1: Product: syz
[  630.622067][ T5935] usb 2-1: Manufacturer: syz
[  630.634425][ T5935] hub 2-1:4.0: USB hub found
[  630.898293][ T5935] hub 2-1:4.0: 2 ports detected
[  631.518451][T14827] 9p: Could not find request transport: f0xffffffffffffffff
[  631.974975][T14845] overlayfs: failed to clone upperpath
[  632.767323][  T984] hub 2-1:4.0: activate --> -90
[  632.978535][ T8124] usb 2-1: USB disconnect, device number 48
[  632.988892][  T984] hub 2-1:4.0: hub_ext_port_status failed (err = -71)
[  633.109382][T14851] overlayfs: failed to clone upperpath
[  634.032041][T14859] fuse: fd is not a fuse device
[  634.117304][T14865] FAULT_INJECTION: forcing a failure.
[  634.117304][T14865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  634.160860][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.1.2673 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  634.160892][T14865] Tainted: [L]=SOFTLOCKUP
[  634.160898][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  634.160909][T14865] Call Trace:
[  634.160915][T14865]  <TASK>
[  634.160922][T14865]  dump_stack_lvl+0x100/0x190
[  634.160951][T14865]  should_fail_ex.cold+0x5/0xa
[  634.160976][T14865]  _copy_from_user+0x2e/0xd0
[  634.160997][T14865]  do_devconfig_ioctl+0x11e/0x6d0
[  634.161017][T14865]  ? comedi_unlocked_ioctl+0x180/0x3310
[  634.161043][T14865]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  634.161078][T14865]  ? find_held_lock+0x2b/0x80
[  634.161111][T14865]  comedi_unlocked_ioctl+0x860/0x3310
[  634.161136][T14865]  ? tomoyo_path_number_perm+0x188/0x580
[  634.161166][T14865]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  634.161196][T14865]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  634.161218][T14865]  ? do_vfs_ioctl+0x226/0x13e0
[  634.161245][T14865]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  634.161272][T14865]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  634.161309][T14865]  ? __fget_files+0x215/0x3d0
[  634.161327][T14865]  ? hook_file_ioctl_common+0x149/0x410
[  634.161356][T14865]  ? selinux_file_ioctl+0x13b/0x290
[  634.161382][T14865]  ? selinux_file_ioctl+0xb6/0x290
[  634.161411][T14865]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  634.161437][T14865]  __x64_sys_ioctl+0x18e/0x210
[  634.161465][T14865]  do_syscall_64+0x10b/0xf80
[  634.161490][T14865]  ? clear_bhb_loop+0x40/0x90
[  634.161510][T14865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.161527][T14865] RIP: 0033:0x7f931d99c819
[  634.161540][T14865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  634.161556][T14865] RSP: 002b:00007f931e90c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  634.161573][T14865] RAX: ffffffffffffffda RBX: 00007f931dc15fa0 RCX: 00007f931d99c819
[  634.161584][T14865] RDX: 0000200000000540 RSI: 0000000040946400 RDI: 0000000000000003
[  634.161594][T14865] RBP: 00007f931e90c090 R08: 0000000000000000 R09: 0000000000000000
[  634.161651][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  634.161661][T14865] R13: 00007f931dc16038 R14: 00007f931dc15fa0 R15: 00007ffd0b47e7e8
[  634.161689][T14865]  </TASK>
[  634.683698][T14868] 9p: Could not find request transport: f0xffffffffffffffff
[  635.029537][T14884] overlayfs: failed to clone upperpath
[  635.957667][   T29] audit: type=1400 audit(1776615984.520:698): avc:  denied  { append } for  pid=14895 comm="syz.1.2683" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  636.176032][T14898] netlink: 'syz.1.2683': attribute type 3 has an invalid length.
[  636.979018][   T29] audit: type=1400 audit(1776615985.550:699): avc:  denied  { read append } for  pid=14906 comm="syz.1.2687" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  637.038934][   T29] audit: type=1400 audit(1776615985.550:700): avc:  denied  { open } for  pid=14906 comm="syz.1.2687" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  637.065441][T14909] fuse: fd is not a fuse device
[  637.079359][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'.
[  637.090519][T14914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2688'.
[  637.100161][T14908] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  637.100263][T14908] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  637.112781][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2688'.
[  637.139095][T14908] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  637.151558][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'.
[  637.167725][T14908] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  637.184041][T14914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2688'.
[  637.200275][T14908] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  637.216902][T14908] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  637.230175][T14908] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  637.247212][T14908] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  637.264480][T14908] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  637.284648][T14908] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  637.299038][T14908] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  637.348890][T14917] 9p: Could not find request transport: f0xffffffffffffffff
[  638.379001][ T5870] IPVS: starting estimator thread 0...
[  638.515563][T14938] IPVS: using max 45 ests per chain, 108000 per kthread
[  639.195607][ T5823] Bluetooth: hci2: command 0x0406 tx timeout
[  639.203201][ T5823] Bluetooth: hci1: command 0x0406 tx timeout
[  639.258562][T12528] Bluetooth: hci3: command 0x0406 tx timeout
[  639.258573][ T5823] Bluetooth: hci0: command 0x0406 tx timeout
[  639.328409][T12528] Bluetooth: hci4: command 0x0406 tx timeout
[  639.546015][ T5870] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  639.710598][ T5870] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  639.755551][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.798157][ T5870] usb 2-1: Product: syz
[  639.817834][ T5870] usb 2-1: Manufacturer: syz
[  639.878764][ T5870] usb 2-1: SerialNumber: syz
[  639.894791][ T5870] usb 2-1: config 0 descriptor??
[  640.311068][ T5870] usb 2-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85)
[  640.626613][ T5870] usb 2-1: no permanent extended address found, random address set
[  640.639746][ T5870] usb 2-1: atusb_probe: initialization failed, error = -524
[  640.671486][ T5870] atusb 2-1:0.0: probe with driver atusb failed with error -524
[  640.944683][ T5935] usb 2-1: USB disconnect, device number 49
[  640.984888][T14995] netlink: 'syz.2.2713': attribute type 11 has an invalid length.
[  641.076052][T14997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2714'.
[  641.235600][T12528] Bluetooth: hci1: command 0x0406 tx timeout
[  641.242857][T12528] Bluetooth: hci2: command 0x0406 tx timeout
[  641.315611][T12528] Bluetooth: hci0: command 0x0406 tx timeout
[  641.322604][ T5823] Bluetooth: hci3: command 0x0406 tx timeout
[  641.405467][T12528] Bluetooth: hci4: command 0x0406 tx timeout
[  641.725594][ T5921] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  642.101881][ T5921] usb 2-1: Using ep0 maxpacket: 8
[  642.818382][ T5921] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  643.281295][ T5921] usb 2-1: config 0 has no interface number 0
[  643.543160][T12528] Bluetooth: hci3: command 0x0406 tx timeout
[  643.671927][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'.
[  643.870547][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  643.886370][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.894521][ T5921] usb 2-1: Product: syz
[  643.899149][ T5921] usb 2-1: Manufacturer: syz
[  643.903760][ T5921] usb 2-1: SerialNumber: syz
[  643.912113][ T5921] usb 2-1: config 0 descriptor??
[  643.938454][T15037] netlink: 'syz.0.2727': attribute type 11 has an invalid length.
[  644.087344][   T29] audit: type=1400 audit(1776615992.650:701): avc:  denied  { setopt } for  pid=15043 comm="syz.2.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  644.152665][ T5921] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  644.172336][ T5921] uvcvideo 2-1:0.31: No valid video chain found.
[  644.192040][ T5921] usb 2-1: USB disconnect, device number 50
[  644.819620][   T29] audit: type=1400 audit(1776615993.390:702): avc:  denied  { create } for  pid=15051 comm="syz.2.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  646.292555][T15076] netlink: 'syz.2.2740': attribute type 11 has an invalid length.
[  647.794931][T15086] fuse: fd is not a fuse device
[  647.927287][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  647.943730][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  647.954604][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  647.963340][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  647.975852][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  648.312289][T15087] chnl_net:caif_netlink_parms(): no params data found
[  649.270295][   T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.490317][T15123] netlink: 'syz.3.2752': attribute type 11 has an invalid length.
[  649.515248][T15087] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.536742][T15087] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.617939][T15087] bridge_slave_0: entered allmulticast mode
[  649.642173][T15087] bridge_slave_0: entered promiscuous mode
[  650.606487][ T5823] Bluetooth: hci5: command tx timeout
[  650.974567][   T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.034476][T15087] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.051997][T15087] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.062123][T15142] netlink: 'syz.1.2757': attribute type 21 has an invalid length.
[  651.070940][T15087] bridge_slave_1: entered allmulticast mode
[  651.087059][T15142] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2757'.
[  651.088200][T15087] bridge_slave_1: entered promiscuous mode
[  651.162047][T15142] netlink: 'syz.1.2757': attribute type 4 has an invalid length.
[  651.179669][T15142] netlink: 'syz.1.2757': attribute type 5 has an invalid length.
[  651.195671][T15142] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2757'.
[  651.364068][   T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.441826][T15087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.469605][T15087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.598001][   T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.633336][T15087] team0: Port device team_slave_0 added
[  651.653899][T15087] team0: Port device team_slave_1 added
[  651.711142][T15087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.718940][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.754070][T15087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.783522][T15087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.796148][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.836730][T15087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.117905][T15087] hsr_slave_0: entered promiscuous mode
[  652.129800][T15087] hsr_slave_1: entered promiscuous mode
[  652.136621][T15087] debugfs: 'hsr0' already exists in 'hsr'
[  652.143002][T15087] Cannot create hsr debugfs directory
[  652.231747][T15170] netlink: 'syz.1.2763': attribute type 11 has an invalid length.
[  652.675646][ T5823] Bluetooth: hci5: command tx timeout
[  654.755731][ T5823] Bluetooth: hci5: command tx timeout
[  654.808735][   T48] bridge_slave_1: left allmulticast mode
[  654.825551][   T48] bridge_slave_1: left promiscuous mode
[  654.833644][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.851384][   T48] bridge_slave_0: left allmulticast mode
[  654.857310][   T48] bridge_slave_0: left promiscuous mode
[  654.864184][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.055496][ T5935] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  655.195474][ T5935] usb 2-1: device descriptor read/64, error -71
[  655.401200][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'.
[  655.414228][T15209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2774'.
[  655.424850][T15209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2774'.
[  655.435863][T15209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2774'.
[  655.516740][ T5935] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  655.630984][T15213] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2775'.
[  655.671156][ T5935] usb 2-1: device descriptor read/64, error -71
[  655.786572][ T5935] usb usb2-port1: attempt power cycle
[  655.872879][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.908768][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.922115][   T48] bond0 (unregistering): Released all slaves
[  656.156796][ T5935] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  656.197487][ T5935] usb 2-1: device descriptor read/8, error -71
[  656.300989][T15227] fuse: fd is not a fuse device
[  656.457693][ T5935] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  656.490344][T15231] netlink: 'syz.0.2779': attribute type 11 has an invalid length.
[  656.520591][ T5935] usb 2-1: device descriptor read/8, error -71
[  656.648938][ T5935] usb usb2-port1: unable to enumerate USB device
[  656.812219][   T29] audit: type=1400 audit(1776616005.380:703): avc:  denied  { create } for  pid=15238 comm="syz.2.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  656.848408][ T5823] Bluetooth: hci5: command tx timeout
[  657.284157][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'.
[  657.345070][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2784'.
[  657.394015][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2784'.
[  657.429578][T15249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2784'.
[  659.381466][T15087] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  659.470953][T15087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  659.495840][T15087] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  659.537090][T15087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  659.568556][T15087] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  659.581160][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'.
[  659.624769][T15284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2790'.
[  659.635633][T15087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  659.642329][T15284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'.
[  659.663229][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'.
[  659.683491][T15087] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  659.690862][T15284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2790'.
[  659.727694][T15087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  660.725275][T15308] loop2: detected capacity change from 0 to 7
[  660.769323][   T29] audit: type=1400 audit(1776616009.340:704): avc:  denied  { link } for  pid=15307 comm="syz.1.2796" name="#35" dev="tmpfs" ino=2751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  660.850154][T15308]  loop2: [CUMANA/ADFS] p1 [ADFS] p1
[  660.850957][   T29] audit: type=1400 audit(1776616009.370:705): avc:  denied  { rename } for  pid=15307 comm="syz.1.2796" name="#36" dev="tmpfs" ino=2751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  660.912403][T15308] loop2: partition table partially beyond EOD, truncated
[  660.975103][T15308] loop2: p1 size 284998237 extends beyond EOD, truncated
[  661.477542][T15087] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.541581][T15087] 8021q: adding VLAN 0 to HW filter on device team0
[  661.554187][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.561382][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.682173][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.689339][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.933087][T15319] 9p: Could not find request transport: f0xffffffffffffffff
[  662.329523][T15087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.478654][   T48] hsr_slave_0: left promiscuous mode
[  662.570238][   T48] veth1_macvtap: left promiscuous mode
[  662.589069][   T48] veth1_vlan: left promiscuous mode
[  662.604826][   T48] veth0_vlan: left promiscuous mode
[  662.798537][T15340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2803'.
[  662.925047][   T29] audit: type=1400 audit(1776616011.490:706): avc:  denied  { mount } for  pid=15338 comm="syz.2.2803" name="/" dev="autofs" ino=68431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  663.056502][T15351] fuse: fd is not a fuse device
[  663.538685][   T48] team0 (unregistering): Port device team_slave_1 removed
[  663.598960][   T48] team0 (unregistering): Port device team_slave_0 removed
[  663.650808][T15364] 9p: Could not find request transport: f0xffffffffffffffff
[  665.004180][T15087] veth0_vlan: entered promiscuous mode
[  665.522864][T15087] veth1_vlan: entered promiscuous mode
[  665.596283][T15390] xt_CT: No such helper "snmp_trap"
[  665.662940][   T48] IPVS: stop unused estimator thread 0...
[  665.719552][T15087] veth0_macvtap: entered promiscuous mode
[  665.756994][T15087] veth1_macvtap: entered promiscuous mode
[  665.816577][T15087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.863998][T15087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.905191][T13805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.939523][T13805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.972189][T13805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.008213][T13805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.212194][T13815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.425493][T13815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.590915][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.612985][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.654739][   T29] audit: type=1400 audit(1776616015.220:707): avc:  denied  { mounton } for  pid=15087 comm="syz-executor" path="/root/syzkaller.cNp3eN/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  666.751860][   T29] audit: type=1400 audit(1776616015.260:708): avc:  denied  { mounton } for  pid=15087 comm="syz-executor" path="/root/syzkaller.cNp3eN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  666.811597][   T29] audit: type=1400 audit(1776616015.260:709): avc:  denied  { mounton } for  pid=15087 comm="syz-executor" path="/root/syzkaller.cNp3eN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=69798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  666.878221][   T29] audit: type=1400 audit(1776616015.270:710): avc:  denied  { mounton } for  pid=15087 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  668.695333][   T29] audit: type=1400 audit(1776616017.260:711): avc:  denied  { getopt } for  pid=15455 comm="syz.4.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  668.697750][T15457] netlink: 'syz.4.2820': attribute type 8 has an invalid length.
[  668.758201][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'.
[  671.002152][T15509] 9p: Could not find request transport: f0xffffffffffffffff
[  671.490330][T12528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  671.511320][T12528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  671.522463][T12528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  671.530279][T12528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  671.537935][T12528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  671.585711][T15529] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  671.952682][T15524] chnl_net:caif_netlink_parms(): no params data found
[  672.151919][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2841'.
[  672.198175][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'.
[  672.348728][T13815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.372717][T13815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.684641][T15567] netlink: 'syz.3.2843': attribute type 11 has an invalid length.
[  672.759196][T13815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.797850][T13815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.902484][T15524] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.930035][T15524] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.526403][T15524] bridge_slave_0: entered allmulticast mode
[  673.535862][T15524] bridge_slave_0: entered promiscuous mode
[  673.547719][T15524] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.554972][T15524] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.562355][T15524] bridge_slave_1: entered allmulticast mode
[  673.569993][T15524] bridge_slave_1: entered promiscuous mode
[  673.603606][T15524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.616416][T15524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.642307][ T5823] Bluetooth: hci3: command tx timeout
[  673.826501][T13815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  673.933395][T13815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.038997][   T29] audit: type=1400 audit(1776616022.610:712): avc:  denied  { append } for  pid=15594 comm="syz.1.2849" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  674.138448][T15524] team0: Port device team_slave_0 added
[  674.284886][T13815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.329304][T13815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.439712][T15524] team0: Port device team_slave_1 added
[  674.633104][T15524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.664842][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.725733][T15524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.766963][T15524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.790723][T15524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.888595][T15524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  675.331652][T15524] hsr_slave_0: entered promiscuous mode
[  675.341408][T15524] hsr_slave_1: entered promiscuous mode
[  675.362110][T15524] debugfs: 'hsr0' already exists in 'hsr'
[  675.382245][T15524] Cannot create hsr debugfs directory
[  676.134975][ T5823] Bluetooth: hci3: command tx timeout
[  676.573508][T13815] bridge_slave_1: left allmulticast mode
[  676.593592][T13815] bridge_slave_1: left promiscuous mode
[  676.609750][T13815] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.667661][T13815] bridge_slave_0: left allmulticast mode
[  676.676060][T13815] bridge_slave_0: left promiscuous mode
[  676.690380][T13815] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.576617][T15670] 9p: Could not find request transport: f0xffffffffffffffff
[  677.732350][T15678] overlayfs: failed to clone upperpath
[  678.195479][ T5823] Bluetooth: hci3: command tx timeout
[  678.439366][T15680] No such timeout policy "syz1"
[  678.479489][T13815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  678.498175][T15686] netlink: 'syz.2.2868': attribute type 2 has an invalid length.
[  678.519346][T13815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  678.537314][T13815] bond0 (unregistering): Released all slaves
[  678.552462][T15686] netlink: 'syz.2.2868': attribute type 1 has an invalid length.
[  678.766546][   T29] audit: type=1400 audit(1776616027.340:713): avc:  denied  { accept } for  pid=15684 comm="syz.2.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  679.762513][T15713] netlink: 'syz.1.2870': attribute type 10 has an invalid length.
[  680.095256][T15713] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.103812][T15713] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.116193][T15713] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.123330][T15713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  680.130795][T15713] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.137910][T15713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.149277][T15713] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  680.276517][T12528] Bluetooth: hci3: command tx timeout
[  680.284986][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  680.291667][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  681.095579][ T5935] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  681.197754][T15736] overlayfs: failed to clone upperpath
[  681.665520][T12528] Bluetooth: hci5: command 0x0406 tx timeout
[  681.695580][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  681.795242][ T5935] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.894013][ T5935] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.923403][T15524] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  681.955967][ T5935] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  681.980875][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  682.001357][ T5935] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  682.020203][T15524] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  682.034099][ T5935] usb 5-1: Product: syz
[  682.050115][ T5935] usb 5-1: Manufacturer: syz
[  682.057258][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  682.080055][T15746] overlayfs: conflicting lowerdir path
[  682.100069][ T5935] hub 5-1:4.0: USB hub found
[  682.120142][T15524] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  682.140826][T15746] netlink: 'syz.1.2878': attribute type 1 has an invalid length.
[  682.233678][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  682.264988][T15746] 8021q: adding VLAN 0 to HW filter on device bond2
[  682.295794][ T5935] hub 5-1:4.0: 2 ports detected
[  682.322392][T15524] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  682.351659][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'.
[  682.399355][T15524] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  682.410021][T15754] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2879'.
[  682.434683][T15754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2879'.
[  682.483682][T15754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2879'.
[  682.538638][ T5823] Bluetooth: hci2: unexpected event for opcode 0x080c
[  683.276892][T15524] 8021q: adding VLAN 0 to HW filter on device bond0
[  683.406064][T15524] 8021q: adding VLAN 0 to HW filter on device team0
[  683.491938][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.499100][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  683.530376][ T5935] hub 5-1:4.0: activate --> -90
[  683.630082][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.637332][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  683.730849][ T5935] hub 5-1:4.0: hub_ext_port_status failed (err = 0)
[  683.762307][   T29] audit: type=1326 audit(1776616032.330:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  683.806253][   T29] audit: type=1326 audit(1776616032.380:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  683.891304][   T29] audit: type=1326 audit(1776616032.380:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  683.903727][T15777] netlink: 'syz.2.2882': attribute type 2 has an invalid length.
[  683.945911][ T5935] usb 5-1: USB disconnect, device number 26
[  684.001346][   T29] audit: type=1326 audit(1776616032.380:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  684.072750][   T29] audit: type=1326 audit(1776616032.380:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  684.096775][T13815] hsr_slave_0: left promiscuous mode
[  684.112896][T13815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  684.129043][T13815] batman_adv: batadv0: Removing interface: batadv_slave_0
[  684.147324][T13815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.157890][   T29] audit: type=1326 audit(1776616032.380:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  684.187162][T13815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.215034][T13815] veth1_macvtap: left promiscuous mode
[  684.227535][T13815] veth1_vlan: left promiscuous mode
[  684.232843][   T29] audit: type=1326 audit(1776616032.380:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  684.263910][T13815] veth0_vlan: left promiscuous mode
[  684.273963][   T29] audit: type=1326 audit(1776616032.380:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  684.333787][   T29] audit: type=1326 audit(1776616032.380:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9079c819 code=0x7ffc0000
[  684.410848][   T29] audit: type=1326 audit(1776616032.380:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.2.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f9075d04e code=0x7ffc0000
[  684.660486][T15785] syz.4.2884 (15785): /proc/15782/oom_adj is deprecated, please use /proc/15782/oom_score_adj instead.
[  684.754090][T13815] team0 (unregistering): Port device team_slave_1 removed
[  684.843786][T13815] team0 (unregistering): Port device team_slave_0 removed
[  685.462283][T15795] overlayfs: failed to clone upperpath
[  685.747566][T15802] overlayfs: failed to clone upperpath
[  686.312811][T15801] netlink: 'syz.3.2886': attribute type 39 has an invalid length.
[  686.764798][T15812] overlayfs: failed to clone upperpath
[  687.485655][T15524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  687.563698][T15805] SELinux: failed to load policy
[  687.639977][T13815] IPVS: stop unused estimator thread 0...
[  687.676573][T15524] veth0_vlan: entered promiscuous mode
[  688.034175][T15524] veth1_vlan: entered promiscuous mode
[  688.075317][T15524] veth0_macvtap: entered promiscuous mode
[  688.108335][T15524] veth1_macvtap: entered promiscuous mode
[  688.202641][T15524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  688.253771][T15524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  688.302954][T13815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  688.338502][T13815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  688.381872][T13815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  688.396242][T15827] netlink: 'syz.1.2895': attribute type 11 has an invalid length.
[  688.414292][T13815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  688.948591][T13809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  688.984830][T13809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  689.053583][T15836] vxcan3: entered promiscuous mode
[  689.090956][T13809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  689.112622][T13809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  689.282056][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  689.282361][   T29] audit: type=1400 audit(1776616037.850:815): avc:  denied  { ioctl } for  pid=15841 comm="syz.1.2899" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  689.622257][T15853] trusted_key: encrypted_key: insufficient parameters specified
[  689.639833][T15856] SELinux: security_context_str_to_sid (5ýÆÉ]ÖS9q#“�ë) failed with errno=-22
[  690.169260][T15871] netlink: 'syz.3.2903': attribute type 1 has an invalid length.
[  690.208012][T15871] 8021q: adding VLAN 0 to HW filter on device bond1
[  690.616635][T15881] mkiss: ax0: crc mode is auto.
[  690.759103][T15883] 9p: Could not find request transport: f0xffffffffffffffff
[  692.244905][ T5870] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  692.385510][ T5870] usb 1-1: device descriptor read/64, error -71
[  693.737497][ T5870] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  694.175510][ T5870] usb 1-1: device descriptor read/64, error -71
[  694.286372][ T5870] usb usb1-port1: attempt power cycle
[  695.466821][T15403] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  695.590183][T13813] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.607578][T15403] usb 2-1: device descriptor read/64, error -71
[  695.673144][T12528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  695.692485][T12528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  695.702127][T12528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  695.710046][T12528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  695.724819][T12528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  695.756911][T13813] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.777935][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'.
[  695.802134][T15945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2925'.
[  695.825877][T15945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'.
[  695.846643][T15403] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  695.878807][T15945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2925'.
[  695.893996][T15945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2925'.
[  695.914867][T13813] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.015626][T15403] usb 2-1: device descriptor read/64, error -71
[  696.064360][T13813] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.126581][T15403] usb usb2-port1: attempt power cycle
[  696.226676][   T29] audit: type=1400 audit(1776616044.800:816): avc:  denied  { read write } for  pid=15951 comm="syz.0.2926" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  696.279140][   T29] audit: type=1400 audit(1776616044.800:817): avc:  denied  { open } for  pid=15951 comm="syz.0.2926" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  696.477255][T15403] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  696.515949][T15403] usb 2-1: device descriptor read/8, error -71
[  696.551023][T15942] chnl_net:caif_netlink_parms(): no params data found
[  696.695480][ T5935] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  696.825471][T15403] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  696.902478][T15969] overlayfs: failed to clone upperpath
[  697.335515][ T5935] usb 1-1: Using ep0 maxpacket: 8
[  697.465980][T15403] usb 2-1: device descriptor read/8, error -71
[  697.585203][ T5935] usb 1-1: config index 0 descriptor too short (expected 26, got 18)
[  697.587474][T15403] usb usb2-port1: unable to enumerate USB device
[  697.598844][T15942] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.611554][T15942] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.622921][ T5935] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  697.633948][T15942] bridge_slave_0: entered allmulticast mode
[  697.658744][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.668237][T15942] bridge_slave_0: entered promiscuous mode
[  697.686329][ T5935] usb 1-1: Product: syz
[  697.694591][T13813] bridge_slave_1: left allmulticast mode
[  697.706050][ T5935] usb 1-1: Manufacturer: syz
[  697.711110][T13813] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.724929][ T5935] usb 1-1: SerialNumber: syz
[  697.727859][T13813] bridge_slave_0: left allmulticast mode
[  697.756711][T13813] bridge_slave_0: left promiscuous mode
[  697.772539][T13813] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.826117][T15977] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2931'.
[  697.835789][ T5823] Bluetooth: hci1: command tx timeout
[  697.881759][ T5935] usb 1-1: config 0 descriptor??
[  697.898669][ T5935] gspca_main: sq930x-2.14.0 probing 2770:930c
[  698.416119][ T5935] gspca_sq930x: reg_r 001f failed -110
[  698.504356][ T5935] sq930x 1-1:0.0: probe with driver sq930x failed with error -110
[  698.688000][   T29] audit: type=1400 audit(1776616047.170:818): avc:  denied  { listen } for  pid=15984 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  698.943503][   T29] audit: type=1400 audit(1776616047.220:819): avc:  denied  { accept } for  pid=15984 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  699.147706][   T29] audit: type=1400 audit(1776616047.460:820): avc:  denied  { accept } for  pid=15988 comm="syz.1.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  699.875612][ T5823] Bluetooth: hci1: command tx timeout
[  699.948085][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'.
[  700.026519][T16006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2935'.
[  700.075148][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'.
[  700.123361][T16004] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2935'.
[  700.220329][T13813] bond1 (unregistering): Released all slaves
[  700.267539][T15942] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.282271][T15942] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.300088][T15942] bridge_slave_1: entered allmulticast mode
[  700.337755][T15942] bridge_slave_1: entered promiscuous mode
[  700.368819][ T5477] 8021q: adding VLAN 0 to HW filter on device eth1
[  700.615784][T15942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  700.637133][T16022] 9p: Could not find request transport: f0xffffffffffffffff
[  700.704146][T15942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  700.873801][T15942] team0: Port device team_slave_0 added
[  701.031770][T15942] team0: Port device team_slave_1 added
[  701.548604][T15942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  701.560929][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  701.596588][T15942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  701.689439][T15942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  701.699771][T15942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  701.730233][T15942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.957273][T12528] Bluetooth: hci1: command tx timeout
[  702.071400][T15942] hsr_slave_0: entered promiscuous mode
[  702.103976][T15942] hsr_slave_1: entered promiscuous mode
[  702.855723][ T5823] Bluetooth: hci2: Opcode 0x206a failed: -110
[  702.863749][T12528] Bluetooth: hci2: command 0x0406 tx timeout
[  703.786792][T16074] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  703.821977][T16074] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  703.910889][   T29] audit: type=1400 audit(1776616052.460:821): avc:  denied  { firmware_load } for  pid=16070 comm="syz.3.2951" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  703.912204][T16074] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  703.996750][ T5477] 8021q: adding VLAN 0 to HW filter on device eth2
[  704.035980][T12528] Bluetooth: hci1: command tx timeout
[  704.150721][T15403] usb 1-1: USB disconnect, device number 37
[  705.599690][T16094] netlink: 'syz.3.2956': attribute type 3 has an invalid length.
[  706.649125][T15942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  706.945105][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  707.017621][T15942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  707.077540][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  707.102881][T15942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  707.145256][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  707.180684][T15942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  707.241588][T15942] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  707.749543][T16131] binder: Bad value for 'max'
[  708.912003][T16145] overlayfs: failed to clone upperpath
[  708.924905][T15942] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.440151][T15942] 8021q: adding VLAN 0 to HW filter on device team0
[  709.487735][T13805] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.494905][T13805] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.579219][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.586374][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.808796][ T5935] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  709.977808][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  710.026403][ T5935] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  710.069353][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.095008][ T5935] usb 5-1: Product: syz
[  710.118535][ T5935] usb 5-1: Manufacturer: syz
[  710.136290][ T5935] usb 5-1: SerialNumber: syz
[  710.162528][ T5935] usb 5-1: config 0 descriptor??
[  710.194237][ T5935] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  710.314120][T13813] hsr_slave_0: left promiscuous mode
[  710.342865][T13813] hsr_slave_1: left promiscuous mode
[  710.366182][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.399876][T13813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.441448][T13813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.459460][ T5935] gspca_ov534_9: reg_w failed -71
[  710.464272][T13813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  711.488649][T13813] veth1_macvtap: left promiscuous mode
[  711.503113][T13813] veth0_macvtap: left promiscuous mode
[  711.517807][T13813] veth1_vlan: left promiscuous mode
[  711.534671][T13813] veth0_vlan: left promiscuous mode
[  711.772053][T16183] 9p: Could not find request transport: f0xffffffffffffffff
[  711.795447][ T5935] gspca_ov534_9: Unknown sensor 0000
[  711.795539][ T5935] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  711.859980][ T5935] usb 5-1: USB disconnect, device number 27
[  712.705239][T13813] team0 (unregistering): Port device team_slave_1 removed
[  712.725499][  T798] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  712.743721][T13813] team0 (unregistering): Port device team_slave_0 removed
[  712.875542][   T29] audit: type=1326 audit(1776616061.440:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  712.929129][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.950290][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.968109][   T29] audit: type=1326 audit(1776616061.490:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.043691][  T798] usb 1-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00
[  713.064318][   T29] audit: type=1400 audit(1776616061.520:824): avc:  denied  { getopt } for  pid=16217 comm="syz.1.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  713.096369][  T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.118877][  T798] usb 1-1: config 0 descriptor??
[  713.151131][T15942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.155036][   T29] audit: type=1326 audit(1776616061.580:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.225556][   T29] audit: type=1326 audit(1776616061.590:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.257612][   T29] audit: type=1326 audit(1776616061.590:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.325179][   T29] audit: type=1326 audit(1776616061.590:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.354004][T16212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.360330][   T29] audit: type=1326 audit(1776616061.600:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.390219][   T29] audit: type=1326 audit(1776616061.600:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.415142][T16212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.426154][   T29] audit: type=1326 audit(1776616061.600:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16214 comm="syz.3.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  713.557925][T13813] IPVS: stop unused estimator thread 0...
[  713.626324][  T798] hid (null): invalid report_count 43684
[  713.638359][  T798] hid (null): global environment stack underflow
[  713.648289][T15942] veth0_vlan: entered promiscuous mode
[  713.660090][  T798] hid (null): unknown global tag 0xd
[  713.694667][T15942] veth1_vlan: entered promiscuous mode
[  713.700816][  T798] hid_parser_main: 362 callbacks suppressed
[  713.700830][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.745353][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.757280][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.767685][T15942] veth0_macvtap: entered promiscuous mode
[  713.778101][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.786808][T15942] veth1_macvtap: entered promiscuous mode
[  713.800404][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.823763][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.839000][T15942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.858370][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.875166][T15942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.886704][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.909053][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.924527][  T422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  713.940220][  T798] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0
[  713.949963][  T422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.968180][  T798] hid-generic 0003:0B05:1AFE.0007: invalid report_count 43684
[  713.993995][  T422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.005135][  T798] hid-generic 0003:0B05:1AFE.0007: item 0 2 1 9 parsing failed
[  714.012893][  T422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  714.029877][  T798] hid-generic 0003:0B05:1AFE.0007: probe with driver hid-generic failed with error -22
[  714.075040][  T798] usb 1-1: USB disconnect, device number 38
[  714.240580][T13805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.268609][T13805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.317385][  T422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.326657][  T422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.315633][T15404] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  715.478333][T15404] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  715.487436][T15404] usb 3-1: config 0 has no interface number 0
[  716.738414][T15404] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  716.758841][T15404] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid maxpacket 13075, setting to 64
[  716.774430][T15404] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  716.783672][T15404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.791715][T15404] usb 3-1: Product: syz
[  716.795907][T15404] usb 3-1: Manufacturer: syz
[  716.800493][T15404] usb 3-1: SerialNumber: syz
[  716.847633][T15404] usb 3-1: config 0 descriptor??
[  716.872778][T16247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  716.890664][T16247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  716.930254][T15404] usb-storage 3-1:0.20: USB Mass Storage device detected
[  717.005908][T15404] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  717.428696][T15404] scsi host1: usb-storage 3-1:0.20
[  717.475819][T15404] usb 3-1: USB disconnect, device number 29
[  717.680945][T16268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  717.792552][T16275] overlayfs: failed to clone upperpath
[  718.241757][T16281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  718.695949][T16287] 9p: Bad value for 'rfdno'
[  719.482960][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  719.483009][   T29] audit: type=1326 audit(1776616068.050:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  719.587181][T15403] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  719.611785][   T29] audit: type=1326 audit(1776616068.090:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  719.697964][   T29] audit: type=1326 audit(1776616068.090:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  719.748578][   T29] audit: type=1326 audit(1776616068.230:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  719.814500][   T29] audit: type=1326 audit(1776616068.230:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  719.867266][   T29] audit: type=1326 audit(1776616068.320:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  719.877033][T15403] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  719.967111][   T29] audit: type=1326 audit(1776616068.350:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  720.023135][T15403] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  720.045246][   T29] audit: type=1326 audit(1776616068.360:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  720.106450][T15403] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  720.119264][   T29] audit: type=1326 audit(1776616068.360:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  720.178193][T15403] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  720.214631][   T29] audit: type=1326 audit(1776616068.360:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f505979c819 code=0x7ffc0000
[  720.215629][T15403] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  720.322260][T15403] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  720.333254][T15403] usb 2-1: Product: syz
[  720.337704][T15403] usb 2-1: Manufacturer: syz
[  720.362700][T15403] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  720.385478][ T5870] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  720.525650][ T5870] usb 1-1: device descriptor read/64, error -71
[  720.564187][T15403] usb 2-1: USB disconnect, device number 59
[  720.766038][ T5870] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  720.916373][ T5870] usb 1-1: device descriptor read/64, error -71
[  721.036606][ T5870] usb usb1-port1: attempt power cycle
[  721.066325][T15403] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  721.104521][  T984] hid_parser_main: 166 callbacks suppressed
[  721.104534][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.119892][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.128809][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.163054][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.178362][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.195478][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.204161][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.215477][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.223429][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.231200][  T984] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  721.242834][T15403] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  721.245286][  T984] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  721.287496][T15403] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  721.327190][T15403] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  721.365928][T15403] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  721.392381][ T5870] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  721.418085][T15403] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  721.455038][T15403] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  721.469731][ T5870] usb 1-1: device descriptor read/8, error -71
[  721.476163][T16325] fido_id[16325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  721.484984][T15403] usb 2-1: Product: syz
[  721.532468][T16327] FAULT_INJECTION: forcing a failure.
[  721.532468][T16327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.553246][T16327] CPU: 0 UID: 0 PID: 16327 Comm: syz.2.3010 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.553273][T16327] Tainted: [L]=SOFTLOCKUP
[  721.553280][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  721.553291][T16327] Call Trace:
[  721.553297][T16327]  <TASK>
[  721.553303][T16327]  dump_stack_lvl+0x100/0x190
[  721.553330][T16327]  should_fail_ex.cold+0x5/0xa
[  721.553358][T16327]  _copy_to_user+0x32/0xd0
[  721.553379][T16327]  simple_read_from_buffer+0xcb/0x170
[  721.553400][T16327]  proc_fail_nth_read+0x1af/0x230
[  721.553426][T16327]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  721.553451][T16327]  ? rw_verify_area+0xce/0x6d0
[  721.553474][T16327]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  721.553497][T16327]  vfs_read+0x1e4/0xb30
[  721.553524][T16327]  ? __pfx_vfs_read+0x10/0x10
[  721.553550][T16327]  ? __fget_files+0x215/0x3d0
[  721.553575][T16327]  ? __fget_files+0x21f/0x3d0
[  721.553601][T16327]  ksys_read+0x12a/0x250
[  721.553627][T16327]  ? __pfx_ksys_read+0x10/0x10
[  721.553655][T16327]  ? rcu_is_watching+0x12/0xc0
[  721.553685][T16327]  do_syscall_64+0x10b/0xf80
[  721.553709][T16327]  ? clear_bhb_loop+0x40/0x90
[  721.553732][T16327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.553749][T16327] RIP: 0033:0x7fc44575d04e
[  721.553765][T16327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  721.553783][T16327] RSP: 002b:00007fc4466f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  721.553801][T16327] RAX: ffffffffffffffda RBX: 00007fc4466f76c0 RCX: 00007fc44575d04e
[  721.553813][T16327] RDX: 000000000000000f RSI: 00007fc4466f70a0 RDI: 0000000000000004
[  721.553824][T16327] RBP: 00007fc4466f7090 R08: 0000000000000000 R09: 0000000000000000
[  721.553835][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.553845][T16327] R13: 00007fc445a16038 R14: 00007fc445a15fa0 R15: 00007ffcbabb5188
[  721.553870][T16327]  </TASK>
[  721.760581][T15403] usb 2-1: Manufacturer: syz
[  721.788184][T15403] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  721.897501][ T5870] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  721.932973][  T798] usb 2-1: USB disconnect, device number 60
[  721.957787][ T5870] usb 1-1: device descriptor read/8, error -71
[  722.065657][ T5870] usb usb1-port1: unable to enumerate USB device
[  723.312202][T16336] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  723.526931][  T984] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  723.979545][T16359] __nla_validate_parse: 1 callbacks suppressed
[  723.979573][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'.
[  724.020751][T16363] netlink: 'syz.4.3021': attribute type 1 has an invalid length.
[  724.029628][T16363] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3021'.
[  724.039416][T16363] netlink: 'syz.4.3021': attribute type 1 has an invalid length.
[  724.054010][T16363] netlink: 638 bytes leftover after parsing attributes in process `syz.4.3021'.
[  724.059275][T16359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3018'.
[  724.063407][T16363] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3021'.
[  724.083801][T16367] netlink: 'syz.4.3021': attribute type 3 has an invalid length.
[  724.105880][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'.
[  724.134068][T16359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'.
[  724.226418][T16372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3018'.
[  724.324768][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'.
[  725.015357][T16379] netlink: 'syz.4.3024': attribute type 3 has an invalid length.
[  725.025571][T16379] netlink: 'syz.4.3024': attribute type 1 has an invalid length.
[  725.661524][ T8124] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  725.916414][ T8124] usb 5-1: device descriptor read/64, error -71
[  726.023198][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  726.023215][   T29] audit: type=1326 audit(1776616074.590:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.114781][   T29] audit: type=1326 audit(1776616074.630:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.203734][   T29] audit: type=1326 audit(1776616074.770:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.225473][ T8124] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  726.303908][   T29] audit: type=1326 audit(1776616074.770:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.371038][   T29] audit: type=1326 audit(1776616074.830:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.431090][   T29] audit: type=1326 audit(1776616074.860:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.496487][   T29] audit: type=1326 audit(1776616074.870:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.570598][   T29] audit: type=1326 audit(1776616074.870:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  726.645739][ T8124] usb 5-1: device descriptor read/64, error -71
[  726.652921][   T29] audit: type=1326 audit(1776616074.940:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac735d04e code=0x7ffc0000
[  726.762196][   T29] audit: type=1326 audit(1776616075.130:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feac739c4ab code=0x7ffc0000
[  726.805483][ T5935] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  726.910653][ T8124] usb usb5-port1: attempt power cycle
[  726.984569][T16412] PKCS7: Unknown OID: [4] 0.0.9.0(bad)
[  726.993691][T16412] PKCS7: Only support pkcs7_signedData type
[  728.415448][ T5935] usb 1-1: Using ep0 maxpacket: 8
[  728.577655][ T8124] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  728.609841][ T8124] usb 5-1: device descriptor read/8, error -71
[  728.682256][T16402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3030'.
[  728.865478][ T8124] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  728.913321][ T8124] usb 5-1: device descriptor read/8, error -71
[  729.057125][ T8124] usb usb5-port1: unable to enumerate USB device
[  729.947617][ T5935] usb 1-1: device descriptor read/all, error -71
[  730.773114][T16455] overlayfs: failed to clone upperpath
[  731.309570][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'.
[  731.311230][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'.
[  731.336781][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'.
[  731.360968][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'.
[  731.402719][T16471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'.
[  731.421510][  T984] IPVS: starting estimator thread 0...
[  731.452132][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  731.452149][   T29] audit: type=1400 audit(1776616080.020:899): avc:  denied  { wake_alarm } for  pid=16466 comm="syz.4.3048" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  731.518054][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3046'.
[  731.545525][T16472] IPVS: using max 75 ests per chain, 180000 per kthread
[  731.555633][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'.
[  731.583699][T13815] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  731.615629][T13815] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  731.620760][T16475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3046'.
[  731.645544][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'.
[  731.667439][T13815] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  731.677908][T13815] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  732.075866][   T29] audit: type=1400 audit(1776616080.620:900): avc:  denied  { create } for  pid=16478 comm="syz.1.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  732.152063][T16483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3051'.
[  732.374425][  T984] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  732.536940][  T984] usb 5-1: unable to get BOS descriptor or descriptor too short
[  732.560777][  T984] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  732.582704][  T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.601813][  T984] usb 5-1: Product: syz
[  732.608075][  T984] usb 5-1: Manufacturer: syz
[  732.615626][  T984] usb 5-1: SerialNumber: syz
[  732.757912][   T29] audit: type=1400 audit(1776616081.330:901): avc:  denied  { write } for  pid=16488 comm="syz.1.3054" path="socket:[74452]" dev="sockfs" ino=74452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  732.852643][  T984] usb 5-1: unit 5 not found!
[  732.870028][  T984] usb 5-1: unit 3 not found!
[  733.562393][T16509] overlayfs: failed to clone upperpath
[  735.835317][   T29] audit: type=1400 audit(1776616084.400:902): avc:  denied  { append } for  pid=16534 comm="syz.0.3068" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  735.897840][  T984] snd-usb-us122l 5-1:1.1: usb_set_interface error
[  735.920999][  T984] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  735.955247][   T29] audit: type=1400 audit(1776616084.410:903): avc:  denied  { map } for  pid=16534 comm="syz.0.3068" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  735.990567][  T984] usb 5-1: USB disconnect, device number 32
[  736.046300][T16533] udevd[16533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  736.068783][   T29] audit: type=1400 audit(1776616084.410:904): avc:  denied  { execute } for  pid=16534 comm="syz.0.3068" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  736.620360][   T29] audit: type=1400 audit(1776616085.190:905): avc:  denied  { create } for  pid=16530 comm="syz.1.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  736.898207][T16555] overlayfs: failed to clone upperpath
[  737.290356][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  737.303756][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  737.314687][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  737.324291][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  737.331903][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  738.942832][T16582] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3079'.
[  739.381546][ T3472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  739.404729][ T5823] Bluetooth: hci4: command tx timeout
[  739.767752][ T3472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.347766][T16569] chnl_net:caif_netlink_parms(): no params data found
[  740.484368][ T3472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  740.527460][ T3472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.576260][   T29] audit: type=1326 audit(1776616089.140:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.656708][   T29] audit: type=1326 audit(1776616089.170:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.730158][   T29] audit: type=1326 audit(1776616089.170:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.799057][   T29] audit: type=1326 audit(1776616089.230:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.866456][   T29] audit: type=1326 audit(1776616089.230:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.920952][   T29] audit: type=1326 audit(1776616089.360:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.947571][   T29] audit: type=1326 audit(1776616089.360:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.971921][   T29] audit: type=1326 audit(1776616089.360:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  740.995423][   T29] audit: type=1326 audit(1776616089.460:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16606 comm="syz.2.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc44579c819 code=0x7ffc0000
[  741.171939][ T3472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.202962][ T3472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.425302][ T3472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.475531][ T5823] Bluetooth: hci4: command tx timeout
[  741.765905][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  741.944716][ T3472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.955214][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  742.002228][T16569] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.015992][T16569] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.023833][T16569] bridge_slave_0: entered allmulticast mode
[  742.034743][T16569] bridge_slave_0: entered promiscuous mode
[  742.044503][T16569] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.075126][T16569] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.091691][T16569] bridge_slave_1: entered allmulticast mode
[  742.108275][T16569] bridge_slave_1: entered promiscuous mode
[  742.263812][T16569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.332341][T16569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.584022][T16569] team0: Port device team_slave_0 added
[  742.825930][T16569] team0: Port device team_slave_1 added
[  743.014681][T16569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.044797][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.130356][T16569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.166057][T16569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.189448][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.249343][T16569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.555473][ T5823] Bluetooth: hci4: command tx timeout
[  744.330058][ T3472] bridge_slave_1: left allmulticast mode
[  744.337576][ T3472] bridge_slave_1: left promiscuous mode
[  744.346609][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.368177][ T3472] bridge_slave_0: left allmulticast mode
[  744.376694][ T3472] bridge_slave_0: left promiscuous mode
[  744.384251][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.815044][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  744.850878][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  744.875972][ T3472] bond0 (unregistering): Released all slaves
[  744.893483][ T3472] bond1 (unregistering): Released all slaves
[  744.951460][T16569] hsr_slave_0: entered promiscuous mode
[  744.978939][T16569] hsr_slave_1: entered promiscuous mode
[  745.013618][T16569] debugfs: 'hsr0' already exists in 'hsr'
[  745.048689][T16569] Cannot create hsr debugfs directory
[  745.060180][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  745.060193][   T29] audit: type=1400 audit(1776616093.620:922): avc:  denied  { audit_write } for  pid=16671 comm="syz.2.3100" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  745.231729][   T29] audit: type=1326 audit(1776616093.780:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.303918][   T29] audit: type=1326 audit(1776616093.780:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.349177][   T29] audit: type=1326 audit(1776616093.800:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.458386][   T29] audit: type=1326 audit(1776616093.800:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.537472][   T29] audit: type=1326 audit(1776616093.800:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.625182][ T5477] 8021q: adding VLAN 0 to HW filter on device eth1
[  745.642758][ T5823] Bluetooth: hci4: command tx timeout
[  745.645450][   T29] audit: type=1326 audit(1776616093.850:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.743032][   T29] audit: type=1326 audit(1776616093.850:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.835953][   T29] audit: type=1326 audit(1776616093.850:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  745.870730][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3108'.
[  745.882984][T16700] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3108'.
[  745.896244][T16700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3108'.
[  745.929230][   T29] audit: type=1326 audit(1776616093.850:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16676 comm="syz.0.3101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac739c819 code=0x7ffc0000
[  746.008753][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3108'.
[  746.047523][T16700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3108'.
[  748.165001][T16569] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  748.223098][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  748.256892][T16569] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  748.283609][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  748.310538][T16569] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  748.346812][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  748.381117][T16569] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  748.419987][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  749.050652][T16569] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.277631][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  749.303979][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  749.328658][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  749.350753][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  749.400043][ T3472] veth1_macvtap: left promiscuous mode
[  749.416938][ T3472] veth0_macvtap: left promiscuous mode
[  749.446522][ T3472] veth1_vlan: left promiscuous mode
[  749.467851][ T3472] veth0_vlan: left promiscuous mode
[  750.259861][ T3472] pim6reg (unregistering): left allmulticast mode
[  750.350345][T16792] FAULT_INJECTION: forcing a failure.
[  750.350345][T16792] name failslab, interval 1, probability 0, space 0, times 0
[  750.391212][T16792] CPU: 0 UID: 0 PID: 16792 Comm: syz.4.3121 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  750.391244][T16792] Tainted: [L]=SOFTLOCKUP
[  750.391255][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  750.391265][T16792] Call Trace:
[  750.391271][T16792]  <TASK>
[  750.391279][T16792]  dump_stack_lvl+0x100/0x190
[  750.391306][T16792]  should_fail_ex.cold+0x5/0xa
[  750.391330][T16792]  ? tomoyo_realpath_from_path+0xb6/0x690
[  750.391348][T16792]  should_failslab+0xc2/0x120
[  750.391366][T16792]  __kmalloc_noprof+0xe0/0x850
[  750.391390][T16792]  ? kfree+0x1dd/0x6c0
[  750.391415][T16792]  tomoyo_realpath_from_path+0xb6/0x690
[  750.391439][T16792]  tomoyo_path_number_perm+0x23c/0x580
[  750.391464][T16792]  ? tomoyo_path_number_perm+0x22e/0x580
[  750.391489][T16792]  ? __lock_acquire+0x484/0x2630
[  750.391512][T16792]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  750.391562][T16792]  ? find_held_lock+0x2b/0x80
[  750.391593][T16792]  ? __fget_files+0x215/0x3d0
[  750.391611][T16792]  ? hook_file_ioctl_common+0x149/0x410
[  750.391630][T16792]  ? __fget_files+0x215/0x3d0
[  750.391653][T16792]  ? __fget_files+0x21f/0x3d0
[  750.391676][T16792]  security_file_ioctl+0xd3/0x230
[  750.391704][T16792]  __x64_sys_ioctl+0xb7/0x210
[  750.391733][T16792]  do_syscall_64+0x10b/0xf80
[  750.391757][T16792]  ? clear_bhb_loop+0x40/0x90
[  750.391778][T16792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.391796][T16792] RIP: 0033:0x7fa1fd99c819
[  750.391812][T16792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.391829][T16792] RSP: 002b:00007fa1fe929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  750.391846][T16792] RAX: ffffffffffffffda RBX: 00007fa1fdc15fa0 RCX: 00007fa1fd99c819
[  750.391862][T16792] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  750.391873][T16792] RBP: 00007fa1fe929090 R08: 0000000000000000 R09: 0000000000000000
[  750.391884][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  750.391895][T16792] R13: 00007fa1fdc16038 R14: 00007fa1fdc15fa0 R15: 00007ffd66cdec38
[  750.391921][T16792]  </TASK>
[  750.391929][T16792] ERROR: Out of memory at tomoyo_realpath_from_path.
[  751.199904][ T3472] team_slave_1 (unregistering): left allmulticast mode
[  751.217130][ T3472] team0 (unregistering): Port device team_slave_1 removed
[  751.234197][ T3472] team_slave_0 (unregistering): left allmulticast mode
[  751.244360][ T3472] team0 (unregistering): Port device team_slave_0 removed
[  751.441135][ T3472] team0 (unregistering): left allmulticast mode
[  751.570561][T16569] 8021q: adding VLAN 0 to HW filter on device team0
[  751.653375][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.660587][ T9278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.698638][  T422] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.705816][  T422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.847750][ T3472] IPVS: stop unused estimator thread 0...
[  752.179507][T16831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  752.681899][T16831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  752.813627][T16569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  752.896317][T16831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.097078][T16831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.197397][T16569] veth0_vlan: entered promiscuous mode
[  753.263585][T16569] veth1_vlan: entered promiscuous mode
[  753.474156][T13809] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.560963][T13809] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.590226][T16569] veth0_macvtap: entered promiscuous mode
[  753.623686][T16569] veth1_macvtap: entered promiscuous mode
[  753.735629][T13813] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.787476][ T3472] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  753.820536][T16569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  753.848591][T16569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  753.901632][ T3472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.955345][ T3472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.128096][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3132'.
[  754.269378][ T3472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.536065][ T3472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.779549][T13805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.808232][T13805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.992608][T13805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.022055][T13805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.255458][T16227] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  758.429491][T16227] usb 2-1: Using ep0 maxpacket: 16
[  758.461018][T16227] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  758.488626][T16227] usb 2-1: config 0 interface 0 has no altsetting 0
[  758.500790][T16227] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  758.525822][T16227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.546710][T16227] usb 2-1: config 0 descriptor??
[  759.200793][T16227] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  759.618010][T15404] usb 2-1: USB disconnect, device number 61
[  759.729485][T16932] FAULT_INJECTION: forcing a failure.
[  759.729485][T16932] name failslab, interval 1, probability 0, space 0, times 0
[  759.742252][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.3.3150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.742282][T16932] Tainted: [L]=SOFTLOCKUP
[  759.742288][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  759.742299][T16932] Call Trace:
[  759.742305][T16932]  <TASK>
[  759.742312][T16932]  dump_stack_lvl+0x100/0x190
[  759.742339][T16932]  should_fail_ex.cold+0x5/0xa
[  759.742364][T16932]  should_failslab+0xc2/0x120
[  759.742382][T16932]  __kmalloc_cache_noprof+0x7a/0x6f0
[  759.742404][T16932]  ? __io_uring_add_tctx_node+0x1ac/0x4c0
[  759.742433][T16932]  ? __sanitizer_cov_trace_pc+0x3f/0x70
[  759.742458][T16932]  __io_uring_add_tctx_node+0x1ac/0x4c0
[  759.742486][T16932]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  759.742514][T16932]  ? __fget_files+0x21f/0x3d0
[  759.742538][T16932]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[  759.742567][T16932]  __do_sys_io_uring_enter+0x1656/0x1b50
[  759.742595][T16932]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  759.742620][T16932]  ? fput+0x79/0x100
[  759.742640][T16932]  ? ksys_write+0x1ac/0x250
[  759.742667][T16932]  ? __pfx_ksys_write+0x10/0x10
[  759.742695][T16932]  ? rcu_is_watching+0x12/0xc0
[  759.742724][T16932]  do_syscall_64+0x10b/0xf80
[  759.742748][T16932]  ? clear_bhb_loop+0x40/0x90
[  759.742775][T16932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.742793][T16932] RIP: 0033:0x7f9b9f19c819
[  759.742808][T16932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.742825][T16932] RSP: 002b:00007f9b9d310028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  759.742843][T16932] RAX: ffffffffffffffda RBX: 00007f9b9f416180 RCX: 00007f9b9f19c819
[  759.742854][T16932] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000005
[  759.742865][T16932] RBP: 00007f9b9d310090 R08: 0000000000000000 R09: 0000000000000000
[  759.742875][T16932] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  759.742885][T16932] R13: 00007f9b9f416218 R14: 00007f9b9f416180 R15: 00007ffed0be7e18
[  759.742908][T16932]  </TASK>
[  759.743392][T16932] ------------[ cut here ]------------
[  759.958485][T16932] !test_bit(IO_WQ_BIT_EXIT, &wq->state)
[  759.958498][T16932] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0, CPU#1: syz.3.3150/16932
[  759.974839][T16932] Modules linked in:
[  759.979331][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.3.3150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  759.990949][T16932] Tainted: [L]=SOFTLOCKUP
[  759.995278][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  760.005402][T16932] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0
[  760.011223][T16932] Code: ff e8 0d 37 16 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 4d 31 16 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 ea 36 16 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 1c 0d 83 fd e9 72 f8 ff ff 48 8b 3c 24
[  760.030957][T16932] RSP: 0018:ffffc900031c7bd0 EFLAGS: 00010293
[  760.037275][T16932] RAX: 0000000000000000 RBX: ffff8880560b0000 RCX: ffffffff84f32a76
[  760.045342][T16932] RDX: ffff88805405ca00 RSI: ffffffff84f33276 RDI: ffff88805405ca00
[  760.053408][T16932] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  760.061460][T16932] R10: 0000000000000000 R11: ffffffffffff8c88 R12: 1ffff92000638f9c
[  760.069482][T16932] R13: 0000000000000000 R14: ffff88805405d368 R15: ffff888057dfc818
[  760.078261][T16932] FS:  00007f9b9d3106c0(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000
[  760.087807][T16932] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  760.094408][T16932] CR2: 00007f9b9d30fff8 CR3: 0000000065290000 CR4: 00000000003526f0
[  760.102474][T16932] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  760.110499][T16932] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  760.118882][T16932] Call Trace:
[  760.122166][T16932]  <TASK>
[  760.125096][T16932]  ? dump_stack_lvl+0x17c/0x190
[  760.130125][T16932]  ? __pfx_io_wq_put_and_exit+0x10/0x10
[  760.135707][T16932]  ? rcu_is_watching+0x12/0xc0
[  760.140481][T16932]  ? trace_kmalloc+0xe3/0x110
[  760.145160][T16932]  ? __kmalloc_cache_noprof+0x298/0x6f0
[  760.150799][T16932]  ? __io_uring_add_tctx_node+0x1ac/0x4c0
[  760.156575][T16932]  __io_uring_add_tctx_node+0x3e8/0x4c0
[  760.162143][T16932]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  760.168310][T16932]  ? __fget_files+0x21f/0x3d0
[  760.173685][T16932]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[  760.180783][T16932]  __do_sys_io_uring_enter+0x1656/0x1b50
[  760.186494][T16932]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  760.192518][T16932]  ? fput+0x79/0x100
[  760.196552][T16932]  ? ksys_write+0x1ac/0x250
[  760.201065][T16932]  ? __pfx_ksys_write+0x10/0x10
[  760.205974][T16932]  ? rcu_is_watching+0x12/0xc0
[  760.210755][T16932]  do_syscall_64+0x10b/0xf80
[  760.215410][T16932]  ? clear_bhb_loop+0x40/0x90
[  760.220091][T16932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.226051][T16932] RIP: 0033:0x7f9b9f19c819
[  760.230460][T16932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.250153][T16932] RSP: 002b:00007f9b9d310028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  760.258618][T16932] RAX: ffffffffffffffda RBX: 00007f9b9f416180 RCX: 00007f9b9f19c819
[  760.266691][T16932] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000005
[  760.274662][T16932] RBP: 00007f9b9d310090 R08: 0000000000000000 R09: 0000000000000000
[  760.283665][T16932] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  760.292265][T16932] R13: 00007f9b9f416218 R14: 00007f9b9f416180 R15: 00007ffed0be7e18
[  760.300307][T16932]  </TASK>
[  760.303340][T16932] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  760.310622][T16932] CPU: 1 UID: 0 PID: 16932 Comm: syz.3.3150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  760.321556][T16932] Tainted: [L]=SOFTLOCKUP
[  760.325871][T16932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  760.335923][T16932] Call Trace:
[  760.339197][T16932]  <TASK>
[  760.342122][T16932]  dump_stack_lvl+0x100/0x190
[  760.346804][T16932]  vpanic+0x552/0x970
[  760.350784][T16932]  ? __pfx_vpanic+0x10/0x10
[  760.355291][T16932]  panic+0xd1/0xe0
[  760.359028][T16932]  ? __pfx_panic+0x10/0x10
[  760.363438][T16932]  ? check_panic_on_warn+0x1f/0x90
[  760.368537][T16932]  check_panic_on_warn.cold+0x19/0x34
[  760.373894][T16932]  ? io_wq_put_and_exit+0x8a7/0x9d0
[  760.379077][T16932]  __warn.cold+0x191/0x328
[  760.383480][T16932]  __report_bug+0x296/0x3d0
[  760.387973][T16932]  ? io_wq_put_and_exit+0x8a7/0x9d0
[  760.393158][T16932]  ? __pfx___report_bug+0x10/0x10
[  760.398168][T16932]  ? irqentry_exit+0x246/0x790
[  760.402922][T16932]  ? lockdep_hardirqs_on+0x78/0x100
[  760.408108][T16932]  ? irqentry_exit+0x246/0x790
[  760.412860][T16932]  ? io_wq_put_and_exit+0x8a7/0x9d0
[  760.418044][T16932]  ? io_wq_put_and_exit+0x8a7/0x9d0
[  760.423227][T16932]  report_bug+0xb2/0x220
[  760.427460][T16932]  ? io_wq_put_and_exit+0x8a7/0x9d0
[  760.432641][T16932]  handle_bug+0x16a/0x2a0
[  760.436961][T16932]  exc_invalid_op+0x17/0x50
[  760.441452][T16932]  asm_exc_invalid_op+0x1a/0x20
[  760.446284][T16932] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0
[  760.452073][T16932] Code: ff e8 0d 37 16 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 4d 31 16 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 ea 36 16 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 1c 0d 83 fd e9 72 f8 ff ff 48 8b 3c 24
[  760.471660][T16932] RSP: 0018:ffffc900031c7bd0 EFLAGS: 00010293
[  760.477709][T16932] RAX: 0000000000000000 RBX: ffff8880560b0000 RCX: ffffffff84f32a76
[  760.485668][T16932] RDX: ffff88805405ca00 RSI: ffffffff84f33276 RDI: ffff88805405ca00
[  760.493620][T16932] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  760.501569][T16932] R10: 0000000000000000 R11: ffffffffffff8c88 R12: 1ffff92000638f9c
[  760.509533][T16932] R13: 0000000000000000 R14: ffff88805405d368 R15: ffff888057dfc818
[  760.517511][T16932]  ? io_wq_put_and_exit+0xa6/0x9d0
[  760.522617][T16932]  ? io_wq_put_and_exit+0x8a6/0x9d0
[  760.527813][T16932]  ? dump_stack_lvl+0x17c/0x190
[  760.532651][T16932]  ? __pfx_io_wq_put_and_exit+0x10/0x10
[  760.538181][T16932]  ? rcu_is_watching+0x12/0xc0
[  760.542932][T16932]  ? trace_kmalloc+0xe3/0x110
[  760.547595][T16932]  ? __kmalloc_cache_noprof+0x298/0x6f0
[  760.553124][T16932]  ? __io_uring_add_tctx_node+0x1ac/0x4c0
[  760.558839][T16932]  __io_uring_add_tctx_node+0x3e8/0x4c0
[  760.564375][T16932]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  760.570432][T16932]  ? __fget_files+0x21f/0x3d0
[  760.575103][T16932]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[  760.581864][T16932]  __do_sys_io_uring_enter+0x1656/0x1b50
[  760.587491][T16932]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  760.593474][T16932]  ? fput+0x79/0x100
[  760.597352][T16932]  ? ksys_write+0x1ac/0x250
[  760.601846][T16932]  ? __pfx_ksys_write+0x10/0x10
[  760.606702][T16932]  ? rcu_is_watching+0x12/0xc0
[  760.611481][T16932]  do_syscall_64+0x10b/0xf80
[  760.616058][T16932]  ? clear_bhb_loop+0x40/0x90
[  760.620722][T16932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.626596][T16932] RIP: 0033:0x7f9b9f19c819
[  760.631041][T16932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.650630][T16932] RSP: 002b:00007f9b9d310028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  760.659027][T16932] RAX: ffffffffffffffda RBX: 00007f9b9f416180 RCX: 00007f9b9f19c819
[  760.666994][T16932] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000005
[  760.674958][T16932] RBP: 00007f9b9d310090 R08: 0000000000000000 R09: 0000000000000000
[  760.682910][T16932] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  760.690871][T16932] R13: 00007f9b9f416218 R14: 00007f9b9f416180 R15: 00007ffed0be7e18
[  760.698860][T16932]  </TASK>
[  760.702317][T16932] Kernel Offset: disabled
[  760.706628][T16932] Rebooting in 86400 seconds..