last executing test programs:

34.999417552s ago: executing program 0 (id=830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000002f0067ea25bd7000fcdbdf3e0b0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4a, 0x0, 0x3, 0x0, 0xff, 0x0, 0x0, 0xfd, 0x0, 0x2, 0xc00, 0x2aa, 0x0, 0x1, 0x3, 0x6162b9dd, [0x3, 0x6d]}})
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0xffffffffffff0000, 0x800, 0x6, 0xbc64, 0x2, 0xa, 0x2, 0x8, 0x3, 0xfffffffffffffffe, 0x6, 0x560, 0x5, 0x3, 0x8, 0x8000000000000001], 0x70000, 0x110002})
getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1)
ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x1000, 0x0, 0x0, {0x5d, 0xff21}}, {0x4355ef15, 0x1, 0x0, {0x80, 0x8, 0x2}}, {0x6, 0x2, 0x0, {0x2, 0x5e, 0x1}}, {0x7, 0x0, 0x0, {0x80, 0x4, 0x1}}], 0x4, 0x20, 0xffff, 0xe905})

33.62777862s ago: executing program 0 (id=837):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x88, 0x503380)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0xc, 0x7, {0x7, 0xe645a90ca55c38fb, "95c227e7bb"}}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x18, 0x2, 0x4, 0x3, 0xda, 0x2470}}}, &(0x7f0000000800)={0x84, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x10, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}})
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
ioctl$FIBMAP(0xffffffffffffffff, 0x1261, 0x0)

32.96601637s ago: executing program 0 (id=839):
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x40, @private2, 0x6}, 0x1c)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10)

31.525216249s ago: executing program 0 (id=843):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
fcntl$addseals(r5, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000200)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

29.703373536s ago: executing program 0 (id=846):
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={0x0}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x8000c80, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000300)=""/194, 0xc2)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r5, &(0x7f0000000240), 0x12)

28.165654552s ago: executing program 0 (id=851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pppoe(0x18, 0x1, 0x0) (fail_nth: 8)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCDISCONN(r3, 0x7439)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)

27.785522391s ago: executing program 32 (id=851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pppoe(0x18, 0x1, 0x0) (fail_nth: 8)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCDISCONN(r3, 0x7439)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)

13.127370259s ago: executing program 1 (id=887):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x404c084)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00'})
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'batadv0\x00', 0x8000})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r8, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r9, 0x5111)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)

12.043130798s ago: executing program 1 (id=888):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$loop(&(0x7f00000000c0), 0x592b, 0x8800)
msgsnd(0x0, 0xfffffffffffffffd, 0x0, 0x800)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
syz_emit_vhci(0x0, 0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg\x00'})
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2, 0x3, 0x700, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
syz_open_dev$hidraw(0x0, 0x2, 0x4d8800)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[], 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
time(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000000f00)=""/102400, 0x19000)
r10 = syz_open_procfs(0x0, 0x0)
preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

10.23747245s ago: executing program 1 (id=892):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x88, 0x503380)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0xc, 0x7, {0x7, 0xe645a90ca55c38fb, "95c227e7bb"}}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x18, 0x2, 0x4, 0x3, 0xda, 0x2470}}}, &(0x7f0000000800)={0x84, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x10, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7e}, 0x0})
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
ioctl$FIBMAP(0xffffffffffffffff, 0x1261, 0x0)

10.233250037s ago: executing program 3 (id=893):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003980)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x1, 0x436, 0x0, 0x0}}, &(0x7f0000003a00))
syz_usb_connect$uac1(0x2, 0x82, &(0x7f0000005dc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x67, 0xa0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x22, 0x6, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3f, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x467c, 0xa, 0xd1}, @as_header={0x7, 0x24, 0x1, 0x5, 0xfa, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x8, 0x2, {0x7, 0x25, 0x1, 0x4, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000005f80)={0xa, &(0x7f0000005ec0)={0xa, 0x6, 0x300, 0x0, 0x40, 0x0, 0x20, 0x9}, 0x10, &(0x7f0000005f00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4c, 0x1, 0xd5a4, 0x3}]}, 0x1, [{0x0, 0x0}]})

8.723565447s ago: executing program 3 (id=900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

8.616506608s ago: executing program 1 (id=901):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x84}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1', 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x14000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000180)={{0x79, 0x40}, {0xe, 0xfc}, 0x5, 0x1, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r5, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r7, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

8.551563128s ago: executing program 3 (id=902):
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={0x0}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22001, 0x0)
write$tun(r4, &(0x7f00000000c0)={@val={0x0, 0x88b5}, @val={0x1, 0x3, 0x2, 0x2, 0x5, 0x3}, @arp=@generic={0x22d, 0x1b, 0x6, 0x5, 0x2, @random="472543d52df7", "f17a2bab5e", @local, "7407d7f776c10b08c0b23ed95845ea00"}}, 0x37)
r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x8000c80, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000300)=""/194, 0xc2)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r7, &(0x7f0000000240), 0x12)

7.604893083s ago: executing program 4 (id=907):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000580)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x2, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x5, 0x0, 0x5, {[@eol, @mss={0x2, 0x4, 0x9}, @nop]}}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @ipv6=@gre_packet={0x1, 0x6, '@h\v', 0x329, 0x2f, 0xff, @remote, @empty, {[@fragment={0x2c, 0x0, 0x6, 0x0, 0x0, 0x3, 0x68}, @hopopts={0x2e, 0x10, '\x00', [@generic={0x1, 0x80, "ef9e1fdad4fbe581be2d0e6ecdef74c4e57fcda7ea9bbe1b975f6d5ce3a8a31a03d754e98ee3a54167554610880860b38488c203edf9dd7d896f3bd730f5df7d6a221a7121006fb5c846681e16e766860a07378d956138d563d692f05bcdf7c478b03d74a81fdcc14148e83bc82b67e94c506f582b00b8946e65cf234834605a"}]}, @hopopts={0x32, 0x4, '\x00', [@pad1, @generic={0x4, 0x14, "5e607cc3772ab1244a183e3e5dadcab958a56c3c"}, @padn, @enc_lim={0x4, 0x1, 0x7}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x57, 0x0, [], "fcc9447203108bb4b4676ff57b0f978ef6fc7afb853a60346025d23d207a95779e224ec30476aea39d3c380e41a270f789c0023bf9d4165043ab2ba5deed1953a346e2b2db1cbea283e7d7570f1e4941008e21f0e22016"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "178318e8c36fb86ff70a8eb961e52eaee4b389846f485f925e4e820dfb73a4fe6d50aaaaed845862ad0b5aed8e158d1a8b18ca397d905091f2d99baa9b7ddb7c5205bd0b13e196e2b413551d5ffb5e8a74bed215df98a86abd18a086e6e091076782119e4ccc91b2ba5297f10e5912f6dbb9d79de36d206c0e41c9605064df5db3b66e883d98797eae0a9f2697b664b14d1d8d2457b14bc00a598adb5c0c1b5a0f1083d2f55117b59c72fa62b5a763b15cdba96301a54fad1985b3988461a4853debd9c5e0c15896e219ba48871c99c2bf83e27408c224a139"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xfa], "f19368a640f72dca5eb92fe3ca699fcc17f11ae56fc9b2f53016f61dcb797bcc6b00454d429e2919cf0368314584c46f4c16714f6bb3c3fb3dd71a765c19b06bed3f48c9c75953472eca87fcfce27c8e4ffd4a06247aeb4f0e70fb17f761831f6c09955ffd6f7987f67bab63708367eb28425ad7e286a2473aa20fc2be1186e6e5ed34b8beee9122701bdd5a2d6ff95d61c4ded4700382a4e3a49ff340c0ad55772e1ec6b1"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x6e, 0x0, 0x1, 0x3, 0x0, 0x13}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x2c, 0x1, 0x0, 0x1, 0x5, 0x40}, 0x2, {0x8001, 0x7f, 0x2, 0x3, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "145cea63b288a0b9b7321e8fe0b9e05a024db428cfb52f3fd7ebb73c745e1c37005a47d80e15fb753c4a75d74996b351b3cdd078073855cc04176c678416afdc90921f681a74"}}}}}, 0x351)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, &(0x7f0000000180))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0)
write(r4, &(0x7f0000000300)='lzo-rle', 0x7)

7.576160781s ago: executing program 3 (id=908):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
fcntl$addseals(r5, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000200)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

6.575163017s ago: executing program 3 (id=909):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)={0x2, [0x1, 0x6d58]}, 0x8)
dup(r3)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0)
write$tun(r1, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x64, 0x6000, 0xbb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xfff, 0x0, 0x2e}}}}}}}, 0x3e)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x24004844)
ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000300)='\x00')
syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRES8=r0], 0x0)

6.183149043s ago: executing program 2 (id=911):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)="636f6d6d6f6e5f706964203e2030f3", 0xf)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
socket$kcm(0x11, 0x20000000000000a, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0xfffd, 0x3, 0x800, 0x81}, 'syz0\x00', 0x10})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
clock_gettime(0x0, &(0x7f0000002280)={<r4=>0x0, <r5=>0x0})
futimesat(r0, &(0x7f0000002240)='./tracing\x00', &(0x7f00000022c0)={{r4, r5/1000+60000}, {0x77359400}})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r8, 0x1ff})
syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00')

5.5668005s ago: executing program 4 (id=912):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

5.363551769s ago: executing program 1 (id=913):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
fcntl$addseals(r5, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000200)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

5.121933869s ago: executing program 2 (id=915):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x806c5864, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09"], 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$peekuser(0x3, r1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f3142, 0x0)
ioctl$TCSETAW(r3, 0x5407, 0x0)
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020a3a5d40f905ffff9f61010203010902120001bd00100209047fc700ff02"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
openat$ttyS3(0xffffff9c, 0x0, 0x105200, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x2, 0x4, 0x6d}, 0x2c)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="27a1995b794b8e14123b5b17883a026f0d1e73ea209453d52274e0ac6d62f83fe90539448b0669b734f64bbcb21cee0afd8e2e57ee4e7f04ecdb0d3e2cb8b5667e1104e87610e95f5971e149dbe3e3acf74064f151cddcea92ca", 0x5a}], 0x10000000000003b8}, 0x40004804)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001a00010000020000002329d85e953ca71112856ac076b1af2644f68cead8f5e776"], 0x14}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))

4.430623474s ago: executing program 4 (id=916):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x73, 0xac, "df40eb33ba5272dbd82113adc10f45d27f757ce382369bd7e460d6c0e1c2112efceeab461af585591835ea887196eb98f15ed247524737842b5a11eb25480055108355396c4868988da3fed8573a87030b94e5181b682e0d45e27142adccc145fabc0bc88454f69649948e0ca79942"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) (async)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
close(r1) (async)
r2 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) (async)
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff)
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000200))
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
io_uring_setup(0x4435, &(0x7f0000000280)={0x0, 0x73bd, 0x2000, 0x3, 0x3bf, 0x0, r4}) (async)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000300)={0x9, {"414b2b63e11d649b6d1c1f200aac898b", "a9e2c8aff647ecf5db9b8337fd692303", "6481a54bb5e41c249c2f684f32bc557d"}, 0x800, 0x1}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000340)={<r5=>0x0, 0x3, 0x8})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000740)={r5, 0x1, 0xce8c, 0x1}) (async)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000b40)={0x9, 0x1, 0xfff9})
ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000b80)={0x2, 0x1, 0x817, 0x0, 0x3})
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000bc0)={r4, 0x8a, 0x2, "08aa5edba8da97137383c2a8659665dcb1bc69600ef56e8de1db52b929b4460820163e2fe9b9a6defcc1f5ad59adc4d0953b60003f516930aba9056f3122b88e02f6bb24534185"})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async)
pipe2(&(0x7f0000000d40)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x800)
close_range(r4, r9, 0x2) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f0000000dc0)={0x468, r0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x43f, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb}, @device_b, @broadcast, @random="d3d788d636ad"}, 0x2, 0x20, @random=0x2, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x0, 0x0, {0x3, 0x1fc0, 0x0, 0x191, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x6, 0x6f}}, [{0xdd, 0xb7, "9d10a2c042622425672096848dc0891194be96d72c36a27cc48baa593bf3b87a666c1959739de841aaab41c321ba451568bbedd5d8ecad75ff647ecd41a1bf362b07c6197aded0dc4fde3a5a0ef25e71215d238c3979da3262368e1d3c1c169795f675801950a3a46c003e88dd6e895c303953d4c8bd656d550731d448dfc3fc4f8ca12692ca312540831ed3e94fbc72f136e76ea9998ae359dd5d9b21deb23a0a234a876b4428378629eb44012a3db6a5383de25fb259"}, {0xdd, 0x63, "deaa66bfe2bf016edca278be9dd440b144191fd6abf228b7ce16983f8ef511fd5914cb045f60fb90d7fa06923f67dec173fc4da891885f1326de4088884f48436945be3474a65f2f62660213c04bfa7de873822bbe1c56d870a30093cb55d1102606b5"}, {0xdd, 0xfd, "148b7aba2a6dbc9e46e89fa93976fdad52a145cb2cc83dfc9131d9ba5afb49a5fe62d14211f8485eeffd7f96fb9ea362bccc291d9217ba4b29e7c2191b7090d51b03aebeab7e3ffcbab887aa035202dd653984f744becce696fd65a3500b2202ce699256f10ff0c038b414a3913e9d3468186f3808e9f4489ce120848f51fda83b4a5f5479c6824778a5b156f92fa399a4447aa21dbaf7a8701e9a8716fe501bf50802e2e186036d8d52e87193e2df7d281af1ce055ee2b0e8681f0a31cac5caefe17ceb2c50e526fe4deaca1923d736e9d1c6840b338f3c9bc10824298631fbdd4d150d77db6c062f9939b12657ba48c032553904f8e0404aadd0a72a"}, {0xdd, 0x82, "69e0ff52604bc38ea2c9a4a86ecea35f9033e832627ed8fb4e9acfb1d5e524546acfd2d9e5ed2fa5131dc65ae8f83a62c9357b2a5c7ff50350b627fc90465f41725f8c6b80b73d226bc06b50d9a4822494b1dadaf54efa03886511c39ebbcd694a7f92f8952dff7792d7c1875e95218bbdbb3e6a439e84f024b68255455174c93b2e"}, {0xdd, 0xcd, "d9c64427d73b2f77eec21f065fd799cd53f9e47e06c2ee720fc6398f1ac493f2c15e63a9aea678f5a05b805449dccba046f35974be27305156de2e09c941849937842233073b0859ed3db700d64f2585b6333e045ce80ba8cc5de259345932c9346a156686050a4f673cd7341a3074c0d174bc140e449f710816bcb69cd4cef8a2cc21f28ec6f07dd6371f2037f79891ee40d58cfbdd70adcd2f9ef0672eeec5a2e5b6bcc1971c5a676d836891ae13616e3d77e87c62848e5c9e99922b9c7e3d1dcaef813929a9274e62b519e2"}, {0xdd, 0x9, "4b0c0e3392c6210052"}, {0xdd, 0x2d, "0e6c0548b2ec41eb270e4b3a9b691f0a904abec0d22991a96b911b82a83b1fed8ffe50628bfd74eda34d7df4e9"}, {0xdd, 0x55, "654cc401d224f02be9f0579f07c4dd22b41d82170c50b39d05b0c64174ec2b7214110951bfa7f5600e52f78318a229eae6a0ceda91062c0d8862b96fef8b47477902496e8e7f2004538bcb5a569678015f2ac8ec07"}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x24000000}, 0x8048) (async)
ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000012c0)="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")
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000013c0)={0xfff, {{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x10}}}, 0x88) (async)
fallocate(r4, 0x8, 0xff, 0x1) (async)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x20, 0x0, 0x208, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24) (async)
mount$bpf(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0x2, &(0x7f0000001600)={[{@mode={'mode', 0x3d, 0x3}}], [{@obj_user={'obj_user', 0x3d, '^{]&&'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x35, 0xa2, 0x32, 0x39, 0x39], 0x2d, [0x34, 0x63, 0x0, 0x63], 0x2d, [0x62, 0x66, 0x38, 0x31], 0x2d, [0x32, 0x34, 0x63, 0x65], 0x2d, [0x66, 0x61, 0x31, 0x35, 0x35, 0x34, 0x65, 0x32]}}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wpan0\x00'}}]})
ioctl$BTRFS_IOC_ENCODED_WRITE(r6, 0x40809440, &(0x7f0000001a00)={&(0x7f0000001980)=[{&(0x7f0000001680)="3d5cfca1c94c3e7427b2993d6756badc72abdb6d0538b2599f33a85a50e94f2fe4347bbfaee9b3d605c3df9813577782e699d09e7c10228596935e16d4afe36267a7ace6e3f2a05c3ef78792f13825ff5daba9ddce048474a8ca85f774f92fb8", 0x60}, {&(0x7f0000001700)="62dbbf1dc4312570bcf09c90506bd950d565ce1af9aa3d4a0bffb8fd846f0ed127bce5a670fd8dbaa3e0", 0x2a}, {&(0x7f0000001740)="cab2934438d78995e0092c221546b1374bb1eef47715d8fc16d32b0ac0190ea62a8e5ea1bfc173330f00f73ab189feba1acafa807a801d3f6d2484cf6536ca425b4b4b91bf1a47d5f81f36949c54793f7371debf3f1d0d7999ec782298d2f178be19583df4818e00d0016adc3fe826ceb2ce5aa56ea839f5316c8a94361cb58f7b2f42f39b6a498f37d08cb5f280f1c65de16fcbd5", 0x95}, {&(0x7f0000001800)="4254a134c496f1cdfe1a5c5a22464fb4c864ba43229dd3cc45852ac3a5d80cc23cf3d6a256245347a4c5d0d224bbf62e0e044aa02a57e4da4745adc91f70b87cfbae3ceecedef7a3900d56c8443426bab5fbc45a235055a145c0b0022b02ff0ce1a2b5e452103f5043373af831ffee3a20cda542f009f94b4f04cf4b", 0x7c}, {&(0x7f0000001880)="8598b7cfeb751246d9314f9cda225fddcec1e34c8beda0be6de343e927674fb157aec36f610d21592ec7ee5bb896c8addf7dd210cbf463c6b3da7e57ca8b", 0x3e}, {&(0x7f00000018c0)="310924a32d25d6dcac590bbced37273a6e527558641c67ce4aba35b8cbfe3fab8bac31c9f86a2448be4e90134e34b14357ccff1a6638f5fd21ef78bf64", 0x3d}, {&(0x7f0000001900)="a9e680657c8b4f3eb31b9b97bd6395a8bd19c9ee9c62db0768d7ef066d6614b2c7b587f0a9bb22cff8897442f483dc743c202c6d9b1f8590a3a1669a1e63301ee1a741b2f7e433568523b3b301d2c958b0a4098cd81e0edcd70bcc05b2f70a2b7e9494d8b29bd33c3a165f2c124e8895", 0x70}], 0x7, 0x4, 0x0, 0x8, 0xffffffff, 0x8, 0x3, 0x3})
ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000001a80)={0x1400000000000000, 0x30000, 0xfffffffffffff9f7, 0x3, 0x2})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001ac0)=0x1, 0x8)

4.221561062s ago: executing program 1 (id=917):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4004004)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x6)
io_uring_setup(0x4001, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080), 0x4)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4840)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r2 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
syz_usb_disconnect(r3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

3.775187964s ago: executing program 4 (id=919):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
fcntl$addseals(r5, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000200)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

2.804998518s ago: executing program 4 (id=920):
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x24, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x10000007, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b5, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x80003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x0, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x9, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0xfffffffe, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0x7, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b397, 0x8001, 0x200001, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x43ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x8000491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x234, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x7, 0x7f, 0x9d27, 0x8, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x20, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x1000, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xdcce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x8000000e, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x9, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = dup(r8)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2.459247147s ago: executing program 5 (id=922):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x40, @private2, 0x6}, 0x1c)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0)

2.358033984s ago: executing program 5 (id=923):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000580)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x2, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x5, 0x0, 0x5, {[@eol, @mss={0x2, 0x4, 0x9}, @nop]}}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @ipv6=@gre_packet={0x1, 0x6, '@h\v', 0x329, 0x2f, 0xff, @remote, @empty, {[@fragment={0x2c, 0x0, 0x6, 0x0, 0x0, 0x3, 0x68}, @hopopts={0x2e, 0x10, '\x00', [@generic={0x1, 0x80, "ef9e1fdad4fbe581be2d0e6ecdef74c4e57fcda7ea9bbe1b975f6d5ce3a8a31a03d754e98ee3a54167554610880860b38488c203edf9dd7d896f3bd730f5df7d6a221a7121006fb5c846681e16e766860a07378d956138d563d692f05bcdf7c478b03d74a81fdcc14148e83bc82b67e94c506f582b00b8946e65cf234834605a"}]}, @hopopts={0x32, 0x4, '\x00', [@pad1, @generic={0x4, 0x14, "5e607cc3772ab1244a183e3e5dadcab958a56c3c"}, @padn, @enc_lim={0x4, 0x1, 0x7}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x57, 0x0, [], "fcc9447203108bb4b4676ff57b0f978ef6fc7afb853a60346025d23d207a95779e224ec30476aea39d3c380e41a270f789c0023bf9d4165043ab2ba5deed1953a346e2b2db1cbea283e7d7570f1e4941008e21f0e22016"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "178318e8c36fb86ff70a8eb961e52eaee4b389846f485f925e4e820dfb73a4fe6d50aaaaed845862ad0b5aed8e158d1a8b18ca397d905091f2d99baa9b7ddb7c5205bd0b13e196e2b413551d5ffb5e8a74bed215df98a86abd18a086e6e091076782119e4ccc91b2ba5297f10e5912f6dbb9d79de36d206c0e41c9605064df5db3b66e883d98797eae0a9f2697b664b14d1d8d2457b14bc00a598adb5c0c1b5a0f1083d2f55117b59c72fa62b5a763b15cdba96301a54fad1985b3988461a4853debd9c5e0c15896e219ba48871c99c2bf83e27408c224a139"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xfa], "f19368a640f72dca5eb92fe3ca699fcc17f11ae56fc9b2f53016f61dcb797bcc6b00454d429e2919cf0368314584c46f4c16714f6bb3c3fb3dd71a765c19b06bed3f48c9c75953472eca87fcfce27c8e4ffd4a06247aeb4f0e70fb17f761831f6c09955ffd6f7987f67bab63708367eb28425ad7e286a2473aa20fc2be1186e6e5ed34b8beee9122701bdd5a2d6ff95d61c4ded4700382a4e3a49ff340c0ad55772e1ec6b1"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x6e, 0x0, 0x1, 0x3, 0x0, 0x13}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x2c, 0x1, 0x0, 0x1, 0x5, 0x40}, 0x2, {0x8001, 0x7f, 0x2, 0x3, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "145cea63b288a0b9b7321e8fe0b9e05a024db428cfb52f3fd7ebb73c745e1c37005a47d80e15fb753c4a75d74996b351b3cdd078073855cc04176c678416afdc90921f681a74"}}}}}, 0x351)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000180))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0)
write(r3, &(0x7f0000000300)='lzo-rle', 0x7)

2.169428747s ago: executing program 2 (id=924):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x84}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)='1', 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x14000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000180)={{0x79, 0x40}, {0xe, 0xfc}, 0x5, 0x1, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r5, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r7, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.635971369s ago: executing program 5 (id=925):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff81}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x20, r3, 0x832, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040090) (async)
capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)={0x0, 0xfff, 0x7, 0x0, 0x1000})
ioctl$TCFLSH(r2, 0x5453, 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15) (async)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) (async)
chdir(&(0x7f0000000100)='./file0\x00')
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) (async)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) (async)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async)
write$sndseq(r9, &(0x7f0000000b80)=[{0x57, 0xe4, 0x9, 0x40, @tick=0x4, {0x4, 0x9}, {0x4, 0x9}, @addr={0x3, 0x5e}}], 0x1c) (async)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014"], 0x3c}}, 0x0)
r10 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r10, 0xffffffff80000901, 0x0, &(0x7f0000000500)) (async)
sendmsg$nl_crypto(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001100019c2dbc151d6d80e33ab80d699131d3c7b2f3d1e8f0c923ca1cd673de6435d7d01845dfaf172972ff72f532e29e11e609d0c51d32cd14f1aba27a1bb6bd35ec016d8aeff8ac35f15b99"], 0xe0}, 0x1, 0x0, 0x0, 0x4042090}, 0x408d0)

1.498982556s ago: executing program 2 (id=926):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

1.306402492s ago: executing program 2 (id=927):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
fcntl$addseals(r5, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1000000, 0x0, 0x4000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000200)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

603.614634ms ago: executing program 5 (id=928):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xf, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket(0xa, 0x2, 0x0)
sendto$l2tp(r3, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x405, 0x2}, 0x10)
r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4}]})
close_range(r5, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0], <r6=>0x0, 0x3f, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000700)={0xe3, <r7=>r4, 0x1})
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x10, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xac}, @call={0x85, 0x0, 0x0, 0x60}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffc0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @func, @map_fd={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f0000000240)='GPL\x00', 0x262, 0xf3, &(0x7f0000000280)=""/243, 0x41000, 0x31, '\x00', 0x0, @fallback=0x35, r1, 0x8, &(0x7f0000000380)={0x1, 0xba}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0xfff}, 0x10, r6, r0, 0x3, &(0x7f00000007c0)=[r1, r0, r1, r1, r7, r8, r0, r0], &(0x7f0000000800)=[{0x4, 0x4, 0x5, 0x6}, {0x3, 0x5, 0x7}, {0x3, 0x4, 0xe, 0x4}], 0x10, 0x1000}, 0x94)

527.13983ms ago: executing program 3 (id=929):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
getrandom(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000280)={0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0)
write$tcp_mem(r2, &(0x7f0000000780)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48)
set_mempolicy(0x2, &(0x7f0000000040)=0x2, 0x200)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
pwritev(r4, &(0x7f00000006c0)=[{&(0x7f0000000440)="968b1ebc6cc7df7555acff39d6c852123b722fe772738c40712ad04508fc63a6410a66850055a0ca1f4841fce5d0996f0b3188f39b32b6f0cdb1452ac5865c57f66a5483dcb4d5ce0cdcf65de159ed2a66bec1324281f3ac289dec6dc5f4d584494dc500ff2367c9c46460827468e199ec9b2d596a0ae5622031a2d496b88a0eca169c7bb03d0684e73048c5dbd245e8400aa2803dd40dc7cde430dcd90b3d53ed14eeb5143df1fa644aa577ab59e6883aba47", 0xb3}, {&(0x7f0000000500)="36407eb9ba7faaed81b514d8d4068de61115d2865ed4a24b3d0c5959c0003ec4a450aa7c35cacc44bc10c0202f229b5b9592b73d7d98a49cbad9a8e83a127637b67064feed19d7999375f08186ab6aca505f29d13a8ee42f9488019d190d1b2bcefe90fec9099df9336ab55a08f644887d0b86ab60c13404da3a07b0e70ca5a13d6b2669ce5839718b0cf6b9aee2f1f5c628f59238d71386ed0f232be48438de1f48bc08ffc4a5a0b59efd5741682460d775", 0xb2}, {&(0x7f00000005c0)="fd5cea9f7bca5cc5869f9fa4ec5c7f2df8a32153d7f4e331549a31e7e2412983070ec8d1fbd74aba54f39d85331008715b23d451ecbb540d1c2d04db73325563f9a828d5ff055c33ec763388bc2048345c334263b12894c6dc8853021faf1e0df42c201808c76dc8b5397335906d82dd6cfa675d1c6584e230f32ec4f4b0f0cd5d096744903df542f8f9bd9f54f7be97b4b3adb406cacfe9e3079e4bd302efe178adf05436e2ef6b161d1a73a9892988a25302437a36a2ddb906c23a26b97028cf968dada5222d70bfd443fc9d02a59635097cc8d100e18b77e6635c64246602442527", 0xe3}], 0x3, 0x8, 0xd14)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000000)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0xe000000, @empty, 0x4}}, 0x101, 0x5, 0x7f, 0x3, 0x42, 0x9, 0xb1}, &(0x7f0000000100)=0x9c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x20, @empty}}, 0x0, 0x800, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)

371.709562ms ago: executing program 2 (id=930):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x5, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="112233445566b3889900aabbccdd", 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xc7a8c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@arm64={0x82, 0xd8, 0xce, '\x00', 0x1})
r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0x58, &(0x7f00000002c0)}, 0x10)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0%\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1501000000000000080025000100000008000500", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

321.865956ms ago: executing program 4 (id=931):
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={0x0}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22001, 0x0)
write$tun(r4, &(0x7f00000000c0)={@val={0x0, 0x88b5}, @val={0x1, 0x3, 0x2, 0x2, 0x5, 0x3}, @arp=@generic={0x22d, 0x1b, 0x6, 0x5, 0x2, @random="472543d52df7", "f17a2bab5e", @local, "7407d7f776c10b08c0b23ed95845ea00"}}, 0x37)
r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x8000c80, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000300)=""/194, 0xc2)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r7, &(0x7f0000000240), 0x12)

187.189279ms ago: executing program 5 (id=932):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x40, @private2, 0x6}, 0x1c)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0)

0s ago: executing program 5 (id=933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], 0x0}, 0x94)
r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r4, 0xffff)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
fcntl$addseals(r4, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r4, 0x1000000, 0x0, 0x4000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})

kernel console output (not intermixed with test programs):

lid length.
[  248.447673][   T30] audit: type=1400 audit(1788400266.708:1212): avc:  denied  { write } for  pid=8006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.616402][   T30] audit: type=1400 audit(1788400267.868:1213): avc:  denied  { read write } for  pid=8031 comm="syz.2.569" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  249.616461][   T30] audit: type=1400 audit(1788400267.868:1214): avc:  denied  { open } for  pid=8031 comm="syz.2.569" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  249.773990][ T8037] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  250.251753][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  250.251816][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  250.307226][ T5698] hid_parser_main: 2091 callbacks suppressed
[  250.307279][ T5698] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  250.344158][   T30] audit: type=1400 audit(1788400268.608:1215): avc:  denied  { write } for  pid=8040 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  250.453863][ T5698] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  250.715868][ T8047] fido_id[8047]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  250.803889][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[  251.529400][ T8053] comedi comedi1: s526: I/O base address or length out of range
[  253.814955][   T30] audit: type=1400 audit(1788400272.078:1216): avc:  denied  { mount } for  pid=8086 comm="syz.3.583" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  253.938970][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.951195][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.964046][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[  254.529951][   T30] audit: type=1400 audit(1788400272.788:1217): avc:  denied  { read } for  pid=8086 comm="syz.3.583" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  255.924255][ T8095] netlink: 'syz.3.585': attribute type 1 has an invalid length.
[  256.430872][ T8101] fuse: Bad value for 'fd'
[  256.762916][   T30] audit: type=1400 audit(1788400274.678:1218): avc:  denied  { mount } for  pid=8097 comm="syz.1.587" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  256.806827][   T30] audit: type=1400 audit(1788400274.698:1219): avc:  denied  { mounton } for  pid=8097 comm="syz.1.587" path="/116/sec/tomoyo/profile" dev="securityfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  258.028049][ T8112] netlink: 'syz.4.579': attribute type 1 has an invalid length.
[  258.099175][ T5711] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  259.206730][ T5711] usb 2-1: Using ep0 maxpacket: 16
[  259.280985][ T5711] usb 2-1: device descriptor read/all, error -71
[  259.281404][   T30] audit: type=1400 audit(1788400277.548:1220): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  259.369320][   T30] audit: type=1400 audit(1788400277.618:1221): avc:  denied  { mounton } for  pid=8117 comm="syz.4.592" path="/proc/425/task" dev="proc" ino=19884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  259.369552][   T30] audit: type=1400 audit(1788400277.628:1222): avc:  denied  { associate } for  pid=8119 comm="syz.4.592" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  259.696384][   T30] audit: type=1400 audit(1788400277.958:1223): avc:  denied  { name_connect } for  pid=8117 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  261.116617][ T8132] FAULT_INJECTION: forcing a failure.
[  261.116617][ T8132] name failslab, interval 1, probability 0, space 0, times 0
[  261.116667][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.3.598 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  261.116698][ T8132] Tainted: [L]=SOFTLOCKUP
[  261.116705][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  261.116717][ T8132] Call Trace:
[  261.116724][ T8132]  <TASK>
[  261.116732][ T8132]  dump_stack_lvl+0x100/0x190
[  261.116766][ T8132]  should_fail_ex.cold+0x5/0xa
[  261.116790][ T8132]  ? arp_constructor+0x3ad/0xd60
[  261.116819][ T8132]  should_failslab+0xc2/0x120
[  261.116843][ T8132]  kmem_cache_alloc_noprof+0x92/0x6a0
[  261.116863][ T8132]  ? skb_clone+0x190/0x400
[  261.116887][ T8132]  skb_clone+0x190/0x400
[  261.116907][ T8132]  neigh_probe+0x5d/0x110
[  261.116928][ T8132]  __neigh_event_send+0xabe/0x13d0
[  261.116960][ T8132]  neigh_resolve_output+0x550/0x8f0
[  261.116987][ T8132]  ? __pfx____neigh_create+0x10/0x10
[  261.117015][ T8132]  ip_finish_output2+0x851/0x2400
[  261.117042][ T8132]  ? __pfx_ip_finish_output2+0x10/0x10
[  261.117061][ T8132]  ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10
[  261.117080][ T8132]  ? nf_nat_ipv4_out+0xb2/0x510
[  261.117101][ T8132]  ? find_held_lock+0x2b/0x80
[  261.117131][ T8132]  __ip_finish_output.part.0+0x444/0x6f0
[  261.117155][ T8132]  ip_output+0x39b/0xc10
[  261.117175][ T8132]  ? __pfx_ip_output+0x10/0x10
[  261.117194][ T8132]  ? ip_make_skb+0x1f4/0x310
[  261.117217][ T8132]  ? __pfx_ip_finish_output+0x10/0x10
[  261.117237][ T8132]  ? __pfx_ip_make_skb+0x10/0x10
[  261.117258][ T8132]  ? __pfx_ip_output+0x10/0x10
[  261.117278][ T8132]  ip_send_skb+0x232/0x2a0
[  261.117298][ T8132]  udp_send_skb+0xa38/0xfc0
[  261.117333][ T8132]  udp_sendmsg+0x1760/0x2710
[  261.117360][ T8132]  ? __pfx_udp_sendmsg+0x10/0x10
[  261.117381][ T8132]  ? __lock_acquire+0x4c5/0x1ec0
[  261.117415][ T8132]  ? release_sock+0x21/0x280
[  261.117439][ T8132]  ? inet_autobind+0x145/0x1a0
[  261.117460][ T8132]  ? find_held_lock+0x2b/0x80
[  261.117491][ T8132]  ? lockdep_hardirqs_on+0x7d/0x110
[  261.117519][ T8132]  ? inet_autobind+0x145/0x1a0
[  261.117538][ T8132]  ? __local_bh_enable_ip+0xa5/0x120
[  261.117559][ T8132]  ? inet_autobind+0x14a/0x1a0
[  261.117579][ T8132]  ? __pfx_udp_sendmsg+0x10/0x10
[  261.117600][ T8132]  inet_sendmsg+0x105/0x140
[  261.117625][ T8132]  __sys_sendto+0x453/0x4e0
[  261.117652][ T8132]  ? __pfx_inet_sendmsg+0x10/0x10
[  261.117675][ T8132]  ? __pfx___sys_sendto+0x10/0x10
[  261.117712][ T8132]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  261.117748][ T8132]  ? ksys_write+0x1ac/0x250
[  261.117767][ T8132]  ? __pfx_ksys_write+0x10/0x10
[  261.117789][ T8132]  __x64_sys_sendto+0xe0/0x1c0
[  261.117817][ T8132]  ? do_syscall_64+0xae/0x790
[  261.117838][ T8132]  ? lockdep_hardirqs_on+0x7d/0x110
[  261.117860][ T8132]  do_syscall_64+0x123/0x790
[  261.117884][ T8132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.117904][ T8132] RIP: 0033:0x7fe92939e159
[  261.117921][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.117939][ T8132] RSP: 002b:00007fe92a1b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  261.117958][ T8132] RAX: ffffffffffffffda RBX: 00007fe929625fa0 RCX: 00007fe92939e159
[  261.117971][ T8132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  261.117982][ T8132] RBP: 00007fe92a1b3090 R08: 0000200000000900 R09: 0000000000000010
[  261.117994][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.118004][ T8132] R13: 00007fe929626038 R14: 00007fe929625fa0 R15: 00007ffc8fa81428
[  261.118032][ T8132]  </TASK>
[  261.645208][   T30] audit: type=1400 audit(1788400279.908:1224): avc:  denied  { getopt } for  pid=8134 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  261.752315][   T30] audit: type=1400 audit(1788400280.018:1225): avc:  denied  { write } for  pid=8133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  261.862997][   T30] audit: type=1400 audit(1788400280.128:1226): avc:  denied  { write } for  pid=8149 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  262.359989][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.360551][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.362457][ T8167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[  262.442933][ T8162] can0: slcan on ttyS3.
[  262.447229][ T8168] FAULT_INJECTION: forcing a failure.
[  262.447229][ T8168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.449419][   T30] audit: type=1400 audit(1788400280.708:1227): avc:  denied  { write } for  pid=8151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  263.391729][ T8168] CPU: 1 UID: 0 PID: 8168 Comm: syz.0.593 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.391761][ T8168] Tainted: [L]=SOFTLOCKUP
[  263.391768][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  263.391778][ T8168] Call Trace:
[  263.391785][ T8168]  <TASK>
[  263.391793][ T8168]  dump_stack_lvl+0x100/0x190
[  263.391824][ T8168]  should_fail_ex.cold+0x5/0xa
[  263.391851][ T8168]  _copy_to_user+0x32/0xd0
[  263.391881][ T8168]  simple_read_from_buffer+0xcb/0x170
[  263.391903][ T8168]  proc_fail_nth_read+0x1af/0x230
[  263.391925][ T8168]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  263.391947][ T8168]  ? rw_verify_area+0xce/0x6d0
[  263.391970][ T8168]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  263.391990][ T8168]  vfs_read+0x1e4/0xb40
[  263.392018][ T8168]  ? lock_acquire+0x1d1/0x380
[  263.392035][ T8168]  ? __fget_files+0x34/0x3d0
[  263.392055][ T8168]  ? __pfx_vfs_read+0x10/0x10
[  263.392078][ T8168]  ? find_held_lock+0x2b/0x80
[  263.392102][ T8168]  ? __fget_files+0x215/0x3d0
[  263.392126][ T8168]  ? __fget_files+0x21f/0x3d0
[  263.392153][ T8168]  ksys_read+0x12a/0x250
[  263.392169][ T8168]  ? __pfx_ksys_read+0x10/0x10
[  263.392192][ T8168]  do_syscall_64+0x123/0x790
[  263.392215][ T8168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.392234][ T8168] RIP: 0033:0x7f2ea995e98e
[  263.392250][ T8168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  263.392267][ T8168] RSP: 002b:00007f2ea7bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  263.392286][ T8168] RAX: ffffffffffffffda RBX: 00007f2ea7bf66c0 RCX: 00007f2ea995e98e
[  263.392298][ T8168] RDX: 000000000000000f RSI: 00007f2ea7bf60a0 RDI: 0000000000000004
[  263.392309][ T8168] RBP: 00007f2ea7bf6090 R08: 0000000000000000 R09: 0000000000000000
[  263.392321][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.392331][ T8168] R13: 00007f2ea9c26128 R14: 00007f2ea9c26090 R15: 00007ffe33475c68
[  263.392356][ T8168]  </TASK>
[  263.417344][   T30] audit: type=1400 audit(1788400281.678:1228): avc:  denied  { read } for  pid=8175 comm="syz.3.600" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  263.418083][   T30] audit: type=1400 audit(1788400281.688:1229): avc:  denied  { open } for  pid=8175 comm="syz.3.600" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  263.717063][ T8160] can0 (unregistered): slcan off ttyS3.
[  263.792102][ T8176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'.
[  263.919531][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.928346][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.078998][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'.
[  264.099015][ T8194] xt_cgroup: path and classid specified
[  264.526021][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  264.526065][   T30] audit: type=1400 audit(1788400282.788:1231): avc:  denied  { write } for  pid=8195 comm="syz.3.606" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  264.557235][   T30] audit: type=1400 audit(1788400282.828:1232): avc:  denied  { open } for  pid=8195 comm="syz.3.606" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  264.633676][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.644074][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.680929][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.693784][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.722500][   T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  264.781335][   T10] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  266.081648][   T30] audit: type=1326 audit(1788400284.348:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.081711][   T30] audit: type=1326 audit(1788400284.348:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.103352][   T30] audit: type=1326 audit(1788400284.348:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.103403][   T30] audit: type=1326 audit(1788400284.348:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.103435][   T30] audit: type=1326 audit(1788400284.348:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.112489][   T30] audit: type=1326 audit(1788400284.378:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.130387][   T30] audit: type=1326 audit(1788400284.378:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.132448][   T30] audit: type=1326 audit(1788400284.378:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8214 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a23b9e159 code=0x7ffc0000
[  266.552205][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.615'.
[  266.843730][ T8235] FAULT_INJECTION: forcing a failure.
[  266.843730][ T8235] name failslab, interval 1, probability 0, space 0, times 0
[  266.843777][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: syz.0.617 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.843806][ T8235] Tainted: [L]=SOFTLOCKUP
[  266.843813][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  266.843824][ T8235] Call Trace:
[  266.843832][ T8235]  <TASK>
[  266.843840][ T8235]  dump_stack_lvl+0x100/0x190
[  266.843873][ T8235]  should_fail_ex.cold+0x5/0xa
[  266.843902][ T8235]  should_failslab+0xc2/0x120
[  266.843934][ T8235]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[  266.843958][ T8235]  ? snd_pcm_hw_rule_add+0x3b3/0x510
[  266.843985][ T8235]  krealloc_node_align_noprof+0x321/0x3e0
[  266.844009][ T8235]  snd_pcm_hw_rule_add+0x3b3/0x510
[  266.844030][ T8235]  ? __pfx_snd_pcm_hw_rule_format+0x10/0x10
[  266.844058][ T8235]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  266.844081][ T8235]  ? mutex_init_lockdep+0xf1/0x120
[  266.844104][ T8235]  ? snd_pcm_attach_substream+0x287/0xd20
[  266.844135][ T8235]  snd_pcm_open_substream+0x54a/0x1850
[  266.844159][ T8235]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  266.844180][ T8235]  ? lockdep_init_map_type+0x5c/0x250
[  266.844199][ T8235]  ? lockdep_init_map_type+0x5c/0x250
[  266.844221][ T8235]  snd_pcm_oss_open+0x715/0x1380
[  266.844252][ T8235]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  266.844278][ T8235]  ? __pfx_default_wake_function+0x10/0x10
[  266.844302][ T8235]  ? __lock_acquire+0x4c5/0x1ec0
[  266.844328][ T8235]  ? do_raw_spin_lock+0x128/0x260
[  266.844352][ T8235]  ? soundcore_open+0x231/0x5a0
[  266.844373][ T8235]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  266.844397][ T8235]  soundcore_open+0x2e3/0x5a0
[  266.844418][ T8235]  ? __pfx_soundcore_open+0x10/0x10
[  266.844436][ T8235]  chrdev_open+0x234/0x6a0
[  266.844459][ T8235]  ? __pfx_chrdev_open+0x10/0x10
[  266.844481][ T8235]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  266.844514][ T8235]  do_dentry_open+0x6ab/0x14d0
[  266.844531][ T8235]  ? __pfx_chrdev_open+0x10/0x10
[  266.844557][ T8235]  vfs_open+0x82/0x3f0
[  266.844583][ T8235]  path_openat+0x19fa/0x2440
[  266.844610][ T8235]  ? __pfx_path_openat+0x10/0x10
[  266.844639][ T8235]  do_file_open+0x20e/0x430
[  266.844662][ T8235]  ? __pfx_do_file_open+0x10/0x10
[  266.844702][ T8235]  ? _raw_spin_unlock+0x28/0x50
[  266.844731][ T8235]  ? alloc_fd+0x471/0x7a0
[  266.844760][ T8235]  do_sys_openat2+0x10f/0x1e0
[  266.844785][ T8235]  ? __pfx_do_sys_openat2+0x10/0x10
[  266.844810][ T8235]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  266.844839][ T8235]  __x64_sys_openat+0x12d/0x210
[  266.844864][ T8235]  ? __pfx___x64_sys_openat+0x10/0x10
[  266.844898][ T8235]  do_syscall_64+0x123/0x790
[  266.844927][ T8235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.844946][ T8235] RIP: 0033:0x7f2ea999e159
[  266.844963][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.844981][ T8235] RSP: 002b:00007f2eaa79c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  266.844999][ T8235] RAX: ffffffffffffffda RBX: 00007f2ea9c25fa0 RCX: 00007f2ea999e159
[  266.845011][ T8235] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  266.845022][ T8235] RBP: 00007f2ea9a35024 R08: 0000000000000000 R09: 0000000000000000
[  266.845033][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.845043][ T8235] R13: 00007f2ea9c26038 R14: 00007f2ea9c25fa0 R15: 00007ffe33475c68
[  266.845069][ T8235]  </TASK>
[  267.496865][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.497181][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.582871][ T8253] 9p: Bad value for 'wfdno'
[  267.644316][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.644633][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.112531][ T8264] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  268.123470][ T8264] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  268.128521][ T8264] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  268.559783][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.560094][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.229456][ T5711] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  269.359168][ T5711] usb 4-1: device descriptor read/64, error -71
[  269.575395][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.587480][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.598815][ T5711] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  269.608867][   T10] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  269.621994][ T8273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.623'.
[  269.738828][ T5711] usb 4-1: device descriptor read/64, error -71
[  269.759413][   T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  269.774522][   T10] usb 2-1: config 4 has an invalid interface number: 44 but max is 0
[  269.774551][   T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  269.774573][   T10] usb 2-1: config 4 has no interface number 0
[  269.774605][   T10] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  269.814246][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.814295][   T10] usb 2-1: Product: syz
[  269.814320][   T10] usb 2-1: Manufacturer: syz
[  269.814337][   T10] usb 2-1: SerialNumber: syz
[  269.848977][ T5711] usb usb4-port1: attempt power cycle
[  270.189066][ T5711] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  270.220405][ T5711] usb 4-1: device descriptor read/8, error -71
[  270.248841][   T10] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  270.277510][   T10] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  270.290958][   T10] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  270.291014][   T10] usb 2-1: media controller created
[  270.307703][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  270.379665][   T10] DVB: Unable to find symbol dib7000p_attach()
[  270.379685][   T10] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  270.418365][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  270.424687][   T30] audit: type=1400 audit(1788400288.678:1254): avc:  denied  { write } for  pid=8279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  270.458983][ T5711] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  270.492100][ T5711] usb 4-1: device descriptor read/8, error -71
[  270.546288][   T30] audit: type=1400 audit(1788400288.808:1255): avc:  denied  { write } for  pid=8294 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  270.599425][ T5711] usb usb4-port1: unable to enumerate USB device
[  270.648816][   T10] rc_core: IR keymap rc-dib0700-rc5 not found
[  270.648846][   T10] Registered IR keymap rc-empty
[  270.649037][   T10] dvb-usb: could not initialize remote control.
[  270.649047][   T10] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  270.686501][   T10] usb 2-1: USB disconnect, device number 28
[  270.709856][   T10] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  271.113156][   T30] audit: type=1400 audit(1788400289.378:1256): avc:  denied  { write } for  pid=8296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.180955][   T30] audit: type=1800 audit(1788400289.448:1257): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.625" name=8006 dev="sda1" ino=2050 res=0 errno=0
[  271.222431][ T8307] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups)
[  271.266319][   T30] audit: type=1400 audit(1788400289.528:1258): avc:  denied  { write } for  pid=8309 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  271.507118][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'.
[  271.596736][   T30] audit: type=1800 audit(1788400289.858:1259): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.628" name=8006 dev="sda1" ino=2050 res=0 errno=0
[  271.637331][ T8316] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups)
[  272.766347][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.779919][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.807572][   T30] audit: type=1400 audit(1788400292.068:1260): avc:  denied  { setopt } for  pid=8327 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  273.908449][ T8341] netlink: 'syz.2.634': attribute type 1 has an invalid length.
[  274.054077][ T8341] 8021q: adding VLAN 0 to HW filter on device bond2
[  274.055286][ T8343] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  274.086844][ T8343] bond2: entered allmulticast mode
[  274.139791][ T8344] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  274.214236][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'.
[  274.214686][ T8341] bond2: left allmulticast mode
[  274.215060][ T8341] 8021q: adding VLAN 0 to HW filter on device bond2
[  274.229479][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  274.338998][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  274.339055][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  274.451210][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  274.451268][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  274.559176][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  274.559211][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  274.642312][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.642674][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.669590][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  274.669635][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  274.714977][   T30] audit: type=1400 audit(1788400292.978:1261): avc:  denied  { ioctl } for  pid=8352 comm="syz.2.638" path="socket:[20638]" dev="sockfs" ino=20638 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  274.779695][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  274.990322][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  276.040288][    T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  276.041119][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.041144][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.041171][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.059500][    T9] usb 4-1: config 0 descriptor??
[  276.458989][   T30] audit: type=1400 audit(1788400294.688:1262): avc:  denied  { write } for  pid=8354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  276.550502][ T8355] 9p: Bad value for 'wfdno'
[  276.699312][ T5711] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  276.902667][ T5711] usb 2-1: device descriptor read/64, error -71
[  277.033173][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.033223][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.034690][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.034719][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.034743][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.034774][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.034798][    T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  277.096347][    T9] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  277.141394][   T30] audit: type=1400 audit(1788400295.408:1263): avc:  denied  { write } for  pid=8382 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.148968][ T5711] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  277.150583][    T9] cp2112 0003:10C4:EA90.0007: error requesting version
[  277.162798][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'.
[  277.197222][    T9] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -5
[  277.210153][   T30] audit: type=1400 audit(1788400295.478:1264): avc:  denied  { append } for  pid=8386 comm="syz.4.644" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  277.280185][ T5711] usb 2-1: device descriptor read/64, error -71
[  277.389035][ T5711] usb usb2-port1: attempt power cycle
[  277.630397][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  277.738921][ T5711] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  277.773981][ T5711] usb 2-1: device descriptor read/8, error -71
[  278.008925][ T5711] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  278.031047][ T5711] usb 2-1: device descriptor read/8, error -71
[  278.139639][ T5711] usb usb2-port1: unable to enumerate USB device
[  278.685135][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.685522][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.781888][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.784877][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.844633][   T30] audit: type=1400 audit(1788400297.108:1265): avc:  denied  { write } for  pid=8390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  279.006861][   T30] audit: type=1400 audit(1788400297.268:1266): avc:  denied  { write } for  pid=8420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  279.058511][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.061024][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.130419][ T7538] net_ratelimit: 62 callbacks suppressed
[  280.130481][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  280.130503][ T7538] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  280.199110][ T5711] usb 4-1: USB disconnect, device number 30
[  280.247708][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  280.247768][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  280.359661][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  280.359709][ T7538] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  280.908951][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  280.949018][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  280.969118][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  280.969164][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  281.259015][ T5698] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  281.423336][ T5698] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  281.425254][ T5698] usb 2-1: config 4 has an invalid interface number: 44 but max is 0
[  281.425276][ T5698] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  281.425292][ T5698] usb 2-1: config 4 has no interface number 0
[  281.425319][ T5698] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  281.428568][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.428588][ T5698] usb 2-1: Product: syz
[  281.428600][ T5698] usb 2-1: Manufacturer: syz
[  281.428613][ T5698] usb 2-1: SerialNumber: syz
[  281.696985][   T30] audit: type=1400 audit(1788400299.958:1267): avc:  denied  { setopt } for  pid=8436 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  282.063576][ T5698] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  282.083491][ T5698] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  282.087149][ T5698] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  282.087187][ T5698] usb 2-1: media controller created
[  282.093902][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  282.244012][ T5698] DVB: Unable to find symbol dib7000p_attach()
[  282.244040][ T5698] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  282.327595][   T30] audit: type=1400 audit(1788400300.588:1268): avc:  denied  { write } for  pid=8440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  282.357983][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.358313][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.441057][ T5698] rc_core: IR keymap rc-dib0700-rc5 not found
[  282.442729][ T5698] Registered IR keymap rc-empty
[  282.442905][ T5698] dvb-usb: could not initialize remote control.
[  282.442912][ T5698] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  282.498455][ T5698] usb 2-1: USB disconnect, device number 33
[  282.533685][   T30] audit: type=1400 audit(1788400300.798:1269): avc:  denied  { write } for  pid=8458 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  282.583561][ T5698] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  282.706257][   T30] audit: type=1400 audit(1788400300.968:1270): avc:  denied  { ioctl } for  pid=8460 comm="syz.0.655" path="socket:[20786]" dev="sockfs" ino=20786 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  282.715967][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.716263][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.732205][ T5711] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  282.814931][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'.
[  282.882243][ T5711] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  282.893113][ T5711] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  282.893133][ T5711] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  282.893148][ T5711] usb 4-1: config 0 interface 0 has no altsetting 0
[  282.893164][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.905841][ T5711] usb 4-1: config 0 descriptor??
[  283.018450][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.030215][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.152996][   T30] audit: type=1400 audit(1788400301.418:1271): avc:  denied  { write } for  pid=8464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.304037][   T30] audit: type=1400 audit(1788400301.568:1272): avc:  denied  { write } for  pid=8481 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.437559][ T8484] netlink: 'syz.2.658': attribute type 1 has an invalid length.
[  283.454866][ T5711] input: HID 05ac:0324 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0324.0008/input/input25
[  283.469664][ T5698] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  284.559107][ T5698] usb 2-1: Using ep0 maxpacket: 32
[  284.560028][ T5698] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  284.572763][ T5698] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  284.572787][ T5698] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  284.572807][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0
[  284.578780][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.578804][ T5698] usb 2-1: Product: syz
[  284.578817][ T5698] usb 2-1: Manufacturer: syz
[  284.578829][ T5698] usb 2-1: SerialNumber: syz
[  284.604649][ T5698] usb 2-1: config 0 descriptor??
[  284.678238][ T5711] magicmouse 0003:05AC:0324.0008: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0324] on usb-dummy_hcd.3-1/input0
[  284.691737][ T5711] magicmouse 0003:05AC:0324.0008: unable to request touch data (-71)
[  284.943694][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.944075][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.982207][ T5711] magicmouse 0003:05AC:0324.0008: probe with driver magicmouse failed with error -71
[  285.003043][ T5711] usb 4-1: USB disconnect, device number 31
[  285.112486][ T8494] fido_id[8494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  285.138444][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.150156][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.159181][ T7563] net_ratelimit: 55 callbacks suppressed
[  285.159217][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  285.159238][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  285.236821][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.272486][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.285106][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  285.285145][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  285.388899][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  285.388943][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  285.509008][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  285.509066][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  285.628866][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  285.628910][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  285.915583][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.927227][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.102183][ T5698] gs_usb 2-1:0.0: Couldn't get device config: (err=-110)
[  286.102231][ T5698] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110
[  286.357905][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'.
[  286.558475][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.574037][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.490216][ T5711] usb 2-1: USB disconnect, device number 34
[  287.625710][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.635191][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.959259][ T8537] netlink: 'syz.1.673': attribute type 1 has an invalid length.
[  287.982909][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.983316][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.099375][ T8543] FAULT_INJECTION: forcing a failure.
[  288.099375][ T8543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.113710][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.1.674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.113741][ T8543] Tainted: [L]=SOFTLOCKUP
[  288.113748][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  288.113758][ T8543] Call Trace:
[  288.113765][ T8543]  <TASK>
[  288.113772][ T8543]  dump_stack_lvl+0x100/0x190
[  288.113804][ T8543]  should_fail_ex.cold+0x5/0xa
[  288.113828][ T8543]  _copy_to_user+0x32/0xd0
[  288.113857][ T8543]  simple_read_from_buffer+0xcb/0x170
[  288.113881][ T8543]  proc_fail_nth_read+0x1af/0x230
[  288.113903][ T8543]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  288.113925][ T8543]  ? rw_verify_area+0xce/0x6d0
[  288.113953][ T8543]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  288.113973][ T8543]  vfs_read+0x1e4/0xb40
[  288.114004][ T8543]  ? __pfx_vfs_read+0x10/0x10
[  288.114046][ T8543]  ksys_read+0x12a/0x250
[  288.114062][ T8543]  ? __pfx_ksys_read+0x10/0x10
[  288.114086][ T8543]  do_syscall_64+0x123/0x790
[  288.114115][ T8543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.114134][ T8543] RIP: 0033:0x7f193c95e98e
[  288.114150][ T8543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  288.114167][ T8543] RSP: 002b:00007f193d806fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  288.114186][ T8543] RAX: ffffffffffffffda RBX: 00007f193d8076c0 RCX: 00007f193c95e98e
[  288.114197][ T8543] RDX: 000000000000000f RSI: 00007f193d8070a0 RDI: 0000000000000005
[  288.114208][ T8543] RBP: 00007f193d807090 R08: 0000000000000000 R09: 0000000000000000
[  288.114219][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.114230][ T8543] R13: 00007f193cc26038 R14: 00007f193cc25fa0 R15: 00007ffebe952768
[  288.114255][ T8543]  </TASK>
[  288.455080][   T30] audit: type=1400 audit(1788400306.718:1273): avc:  denied  { write } for  pid=8532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  289.352286][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.352629][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.365814][ T8552] 9p: Bad value for 'wfdno'
[  289.565212][   T30] audit: type=1400 audit(1788400307.828:1274): avc:  denied  { write } for  pid=8557 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  289.639082][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.648889][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.685896][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.696927][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.139479][   T30] audit: type=1400 audit(1788400308.408:1275): avc:  denied  { append } for  pid=8570 comm="syz.3.670" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  291.035903][ T7563] net_ratelimit: 54 callbacks suppressed
[  291.035956][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  291.076374][   T30] audit: type=1400 audit(1788400308.408:1276): avc:  denied  { read } for  pid=8570 comm="syz.3.670" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  291.076439][   T30] audit: type=1400 audit(1788400308.408:1277): avc:  denied  { open } for  pid=8570 comm="syz.3.670" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  291.146197][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  291.262904][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  291.262948][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  291.372278][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  291.372323][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  291.480574][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  291.480621][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  291.481191][   T30] audit: type=1400 audit(1788400309.748:1278): avc:  denied  { write } for  pid=8566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.446774][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  292.446821][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  292.536225][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.546733][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.625840][   T30] audit: type=1400 audit(1788400310.888:1279): avc:  denied  { write } for  pid=8589 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  295.352427][   T30] audit: type=1400 audit(1788400313.168:1280): avc:  denied  { ioctl } for  pid=8602 comm="syz.3.680" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  295.488391][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.504173][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.580000][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.589162][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.647232][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.647551][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.872498][ T8623] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[  296.905878][   T13] net_ratelimit: 34 callbacks suppressed
[  296.905922][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  296.905946][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  296.932531][   T30] audit: type=1400 audit(1788400315.198:1281): avc:  denied  { read } for  pid=8624 comm="syz.4.689" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  296.959093][   T30] audit: type=1400 audit(1788400315.228:1282): avc:  denied  { open } for  pid=8624 comm="syz.4.689" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  297.009886][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  297.009927][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  297.032175][   T30] audit: type=1400 audit(1788400315.298:1283): avc:  denied  { write } for  pid=8615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  297.121807][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  297.121856][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  298.021860][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  298.021907][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  298.073727][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.074057][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.098362][   T30] audit: type=1400 audit(1788400316.368:1284): avc:  denied  { write } for  pid=8645 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  298.134650][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  298.134702][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  298.185406][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.185758][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.553257][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.553634][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.593107][ T8658] 9p: Bad value for 'wfdno'
[  298.877886][   T30] audit: type=1400 audit(1788400317.138:1285): avc:  denied  { write } for  pid=8650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  299.075734][   T30] audit: type=1400 audit(1788400317.338:1286): avc:  denied  { write } for  pid=8672 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  300.072243][ T5802] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  301.132519][ T5802] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  301.134824][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.159000][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.159395][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.374132][ T5802] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  301.653619][   T30] audit: type=1400 audit(1788400319.918:1287): avc:  denied  { write } for  pid=8687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  301.684655][ T2323] usb 4-1: USB disconnect, device number 32
[  301.745601][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.757699][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.963332][   T30] audit: type=1400 audit(1788400320.228:1288): avc:  denied  { write } for  pid=8705 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  301.970328][   T42] net_ratelimit: 39 callbacks suppressed
[  301.970345][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  301.970363][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  302.079368][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  302.079421][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  302.188910][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  302.188958][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  302.299287][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  302.299333][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  302.409013][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  302.410578][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  302.469409][ T5711] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  302.544784][   T30] audit: type=1400 audit(1788400320.808:1289): avc:  denied  { write } for  pid=8709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  302.620039][ T5711] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  302.631741][ T5711] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  302.631784][ T5711] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  302.631823][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0
[  302.631853][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.673168][ T5711] usb 2-1: config 0 descriptor??
[  302.714740][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  302.781815][   T30] audit: type=1400 audit(1788400321.048:1290): avc:  denied  { write } for  pid=8722 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  302.938297][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.938987][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.110736][ T5711] usbhid 2-1:0.0: can't add hid device: -71
[  303.110836][ T5711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  303.130402][ T5711] usb 2-1: USB disconnect, device number 35
[  304.460705][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'.
[  304.482484][ T8738] ip6erspan0: entered promiscuous mode
[  304.496166][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'.
[  304.795180][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.795547][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.939255][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.939658][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.885636][ T8763] kvm: MONITOR instruction emulated as NOP!
[  307.029639][ T1520] net_ratelimit: 50 callbacks suppressed
[  307.029695][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  307.029720][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  307.141098][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  307.141133][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  307.198234][   T30] audit: type=1400 audit(1788400325.458:1291): avc:  denied  { accept } for  pid=8776 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  307.250916][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  307.250960][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  307.286003][ T8775] kAFS: unable to lookup cell 'ÿ'
[  307.362523][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  307.362568][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  307.380116][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[  307.479215][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  307.479257][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  308.028871][ T5802] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  308.094297][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.105191][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.179524][ T5802] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  308.190041][ T5802] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  308.201199][ T5802] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  308.201230][ T5802] usb 4-1: config 0 interface 0 has no altsetting 0
[  308.201263][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.232246][ T5802] usb 4-1: config 0 descriptor??
[  309.582807][ T5802] usbhid 4-1:0.0: can't add hid device: -71
[  309.582909][ T5802] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  309.603431][ T5802] usb 4-1: USB disconnect, device number 33
[  309.628778][ T2323] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  309.781981][ T2323] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  309.782846][ T2323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.782879][ T2323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  309.782897][ T2323] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  309.782916][ T2323] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  309.782946][ T2323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.789435][   T30] audit: type=1400 audit(1788400328.058:1292): avc:  denied  { getopt } for  pid=8804 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  309.829122][ T8805] overlay: Unknown parameter 'pcr'
[  310.237456][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.237820][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.303179][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.303554][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.463778][ T2323] gud 2-1:1.0: Failed to add properties (error=-5)
[  310.463825][ T2323] gud 2-1:1.0: probe with driver gud failed with error -5
[  312.060828][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  312.060894][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  312.080520][   T42] net_ratelimit: 50 callbacks suppressed
[  312.080562][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  312.080586][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  312.164018][ T1485] usb 2-1: USB disconnect, device number 36
[  312.194582][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  312.194633][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  312.300582][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  312.300702][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  312.363587][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.363918][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.410018][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  312.410076][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  312.463112][ T8846] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[  312.488813][ T5802] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  312.520358][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  312.520406][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  312.548786][ T1485] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  312.628939][ T5802] usb 4-1: device descriptor read/64, error -71
[  312.698995][ T1485] usb 2-1: Using ep0 maxpacket: 32
[  312.704484][ T1485] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  312.719089][ T1485] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  312.719118][ T1485] usb 2-1: config 0 has no interface number 0
[  312.734951][ T1485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.734985][ T1485] usb 2-1: Product: syz
[  312.735002][ T1485] usb 2-1: Manufacturer: syz
[  312.735014][ T1485] usb 2-1: SerialNumber: syz
[  312.744796][ T1485] usb 2-1: config 0 descriptor??
[  312.752011][ T1485] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  312.868730][ T5802] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  312.985441][ T1485] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  313.008840][ T5802] usb 4-1: device descriptor read/64, error -71
[  313.017522][ T1485] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  313.118983][ T5802] usb usb4-port1: attempt power cycle
[  313.283079][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.283446][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.315390][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.315807][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.390191][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.395297][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.468759][ T5802] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  313.489585][ T5802] usb 4-1: device descriptor read/8, error -71
[  313.524647][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  313.525031][ T1485] usb 2-1: USB disconnect, device number 37
[  313.577656][ T1485] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  313.601975][ T1485] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  313.607720][ T1485] quatech2 2-1:0.51: device disconnected
[  313.699237][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[  313.708612][ T8862] kAFS: No cell specified
[  313.730696][ T5802] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  313.759165][ T5802] usb 4-1: device descriptor read/8, error -71
[  313.879114][ T5802] usb usb4-port1: unable to enumerate USB device
[  314.077529][   T30] audit: type=1400 audit(1788400332.338:1293): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  315.188763][ T5802] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  315.262710][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.263038][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.349187][ T5802] usb 2-1: Using ep0 maxpacket: 32
[  315.349765][ T5802] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  315.350789][ T5802] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  315.350808][ T5802] usb 2-1: config 0 has no interface number 0
[  315.352416][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.352435][ T5802] usb 2-1: Product: syz
[  315.352447][ T5802] usb 2-1: Manufacturer: syz
[  315.352459][ T5802] usb 2-1: SerialNumber: syz
[  315.354433][ T5802] usb 2-1: config 0 descriptor??
[  315.356222][ T5802] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  315.524424][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.524672][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.563031][ T5802] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  315.566313][ T5802] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  315.583061][ T1485] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  315.740061][ T1485] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  315.750079][ T1485] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  315.750118][ T1485] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  315.750153][ T1485] usb 4-1: config 0 interface 0 has no altsetting 0
[  315.750182][ T1485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.795584][ T1485] usb 4-1: config 0 descriptor??
[  316.031211][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  316.040068][    T9] usb 2-1: USB disconnect, device number 38
[  316.060347][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  316.080865][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  316.097234][    T9] quatech2 2-1:0.51: device disconnected
[  316.378924][ T1485] usbhid 4-1:0.0: can't add hid device: -71
[  316.379018][ T1485] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  316.396284][ T1485] usb 4-1: USB disconnect, device number 38
[  317.530736][ T7595] net_ratelimit: 59 callbacks suppressed
[  317.530774][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  317.530795][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  317.670432][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.670847][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  317.670868][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  317.695637][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.730064][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.741197][   T30] audit: type=1400 audit(1788400336.008:1294): avc:  denied  { sqpoll } for  pid=8897 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  317.765108][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.783998][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  317.791945][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  317.869488][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.874269][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.908930][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  317.909001][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  318.019377][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  318.019428][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  318.372662][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.383143][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.458777][ T5698] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  318.588803][ T5698] usb 2-1: device descriptor read/64, error -71
[  318.760906][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.761280][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.850391][ T5698] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  319.900101][ T5698] usb 2-1: device descriptor read/64, error -71
[  320.011440][ T5698] usb usb2-port1: attempt power cycle
[  321.086777][ T5698] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  321.105935][ T5698] usb 2-1: device descriptor read/8, error -71
[  321.622923][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.623347][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.922254][   T55] net_ratelimit: 41 callbacks suppressed
[  322.922328][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  322.922353][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  323.032199][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  323.032243][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  323.139069][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  323.139819][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  323.228308][   T30] audit: type=1400 audit(1788400341.488:1295): avc:  denied  { create } for  pid=8955 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  323.251284][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  323.251326][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  323.255871][   T30] audit: type=1400 audit(1788400341.518:1296): avc:  denied  { bind } for  pid=8955 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  323.275433][   T30] audit: type=1400 audit(1788400341.538:1297): avc:  denied  { setopt } for  pid=8955 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  323.359707][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  323.359739][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  324.155294][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.176107][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.619570][ T8978] netlink: 'syz.1.778': attribute type 1 has an invalid length.
[  326.275884][   T30] audit: type=1400 audit(1788400344.538:1298): avc:  denied  { mount } for  pid=8988 comm="syz.0.783" name="/" dev="configfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  326.306963][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.318883][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.481063][   T30] audit: type=1400 audit(1788400344.748:1299): avc:  denied  { search } for  pid=8988 comm="syz.0.783" name="/" dev="configfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  326.481113][   T30] audit: type=1400 audit(1788400344.748:1300): avc:  denied  { search } for  pid=8988 comm="syz.0.783" name="cluster" dev="configfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  326.481147][   T30] audit: type=1400 audit(1788400344.748:1301): avc:  denied  { write search } for  pid=8988 comm="syz.0.783" name="cluster" dev="configfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  326.481169][   T30] audit: type=1400 audit(1788400344.748:1302): avc:  denied  { add_name } for  pid=8988 comm="syz.0.783" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  326.481189][   T30] audit: type=1400 audit(1788400344.748:1303): avc:  denied  { create } for  pid=8988 comm="syz.0.783" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  326.768933][ T8995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.777954][ T8995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.949000][   T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  327.100558][   T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  327.101466][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.320550][   T44] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  327.501503][ T9000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.511114][ T9000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.556239][ T5711] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  327.575628][ T5711] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  327.999331][ T7595] net_ratelimit: 71 callbacks suppressed
[  327.999369][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  327.999412][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  328.108913][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  328.108974][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  328.229503][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  328.229543][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  328.339253][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  328.339296][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  329.457761][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  329.457797][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  330.613567][   T30] audit: type=1400 audit(1788400348.878:1304): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  331.921595][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.925021][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.358759][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  332.408472][ T9045] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  332.518836][    T9] usb 4-1: Using ep0 maxpacket: 32
[  332.520559][    T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  332.527094][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.527260][    T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  332.527373][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  332.605743][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.605795][    T9] usb 4-1: Product: syz
[  332.617292][    T9] usb 4-1: Manufacturer: syz
[  332.617342][    T9] usb 4-1: SerialNumber: syz
[  332.675703][    T9] usb 4-1: config 0 descriptor??
[  332.722177][    T9] gs_usb 4-1:0.0: Required endpoints not found
[  333.029873][   T13] net_ratelimit: 42 callbacks suppressed
[  333.036571][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.082164][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  333.209515][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.209672][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  333.289089][ T2323] usb 2-1: USB disconnect, device number 43
[  333.319043][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.319082][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  333.408834][ T9049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'.
[  333.426489][ T9042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.426853][ T9042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.439060][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.439083][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  333.460089][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.460409][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.523935][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.524276][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.549465][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.570501][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  333.719937][   T30] audit: type=1400 audit(1788400351.978:1305): avc:  denied  { read } for  pid=9052 comm="syz.2.801" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  333.743835][   T30] audit: type=1400 audit(1788400352.018:1306): avc:  denied  { ioctl } for  pid=9052 comm="syz.2.801" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  333.890764][   T30] audit: type=1400 audit(1788400352.158:1307): avc:  denied  { firmware_load } for  pid=9052 comm="syz.2.801" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  333.918752][   T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  334.048825][   T44] usb 2-1: device descriptor read/64, error -71
[  334.154174][ T1485] usb 4-1: USB disconnect, device number 39
[  334.339184][   T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  334.588143][   T44] usb 2-1: device descriptor read/64, error -71
[  334.689113][   T44] usb usb2-port1: attempt power cycle
[  335.888762][   T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  335.909269][   T44] usb 2-1: device descriptor read/8, error -71
[  336.148884][   T44] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  336.169464][   T44] usb 2-1: device descriptor read/8, error -71
[  336.279093][   T44] usb usb2-port1: unable to enumerate USB device
[  336.548555][ T9054] syz.2.801 (9054) used greatest stack depth: 18568 bytes left
[  336.675704][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.685889][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.896465][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.905339][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.065394][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'.
[  337.118351][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'.
[  337.226300][   T30] audit: type=1400 audit(1788400355.488:1308): avc:  denied  { attach_queue } for  pid=9088 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  337.428180][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.428615][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.465529][ T9103] 9p: Bad value for 'wfdno'
[  337.548742][ T5698] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  337.698769][ T5698] usb 4-1: Using ep0 maxpacket: 32
[  337.699441][ T5698] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  337.700287][ T5698] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  337.700309][ T5698] usb 4-1: config 0 has no interface number 0
[  337.702016][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.702054][ T5698] usb 4-1: Product: syz
[  337.702067][ T5698] usb 4-1: Manufacturer: syz
[  337.702080][ T5698] usb 4-1: SerialNumber: syz
[  337.719241][ T5698] usb 4-1: config 0 descriptor??
[  337.731222][ T5698] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  338.850173][   T13] net_ratelimit: 68 callbacks suppressed
[  338.850238][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.873083][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.879820][ T5698] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  338.888829][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.913880][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.930018][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.931108][ T5698] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  338.950686][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.968809][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.983507][   T30] audit: type=1400 audit(1788400357.248:1309): avc:  denied  { mount } for  pid=9107 comm="syz.0.816" name="/" dev="autofs" ino=22350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  338.989616][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  338.989656][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  339.126348][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  339.843869][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  339.854511][ T5711] usb 4-1: USB disconnect, device number 40
[  339.870991][ T5711] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  339.901641][ T5711] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  339.902213][ T5711] quatech2 4-1:0.51: device disconnected
[  339.917197][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.917528][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.996710][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.997065][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.126255][ T9123] FAULT_INJECTION: forcing a failure.
[  341.126255][ T9123] name failslab, interval 1, probability 0, space 0, times 0
[  341.127342][ T9123] CPU: 0 UID: 0 PID: 9123 Comm: syz.3.821 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  341.127372][ T9123] Tainted: [L]=SOFTLOCKUP
[  341.127378][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  341.127389][ T9123] Call Trace:
[  341.127396][ T9123]  <TASK>
[  341.127403][ T9123]  dump_stack_lvl+0x100/0x190
[  341.127434][ T9123]  should_fail_ex.cold+0x5/0xa
[  341.127459][ T9123]  should_failslab+0xc2/0x120
[  341.127481][ T9123]  kmem_cache_alloc_noprof+0x92/0x6a0
[  341.127502][ T9123]  ? vm_area_dup+0x27/0x9d0
[  341.127529][ T9123]  vm_area_dup+0x27/0x9d0
[  341.127554][ T9123]  __split_vma+0x19c/0x1de0
[  341.127584][ T9123]  ? __pfx___split_vma+0x10/0x10
[  341.127606][ T9123]  ? mas_next_slot+0xc05/0x13a0
[  341.127642][ T9123]  vms_gather_munmap_vmas+0x3a5/0x1720
[  341.127668][ T9123]  ? rcu_is_watching+0x13/0xc0
[  341.127691][ T9123]  ? trace_sched_exit_tp+0x120/0x160
[  341.127718][ T9123]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  341.127756][ T9123]  ? __pfx___schedule+0x10/0x10
[  341.127778][ T9123]  do_vmi_align_munmap+0x287/0x5f0
[  341.127807][ T9123]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  341.127861][ T9123]  ? mas_walk+0x260/0x310
[  341.127884][ T9123]  do_vmi_munmap+0x1f8/0x3e0
[  341.127914][ T9123]  unmap_source_vma+0x1df/0x8f0
[  341.127944][ T9123]  ? __pfx_unmap_source_vma+0x10/0x10
[  341.127978][ T9123]  ? __sanitizer_cov_trace_pc+0xc/0x70
[  341.128001][ T9123]  ? vm_stat_account+0xee/0x190
[  341.128027][ T9123]  move_vma+0x778/0xc30
[  341.128055][ T9123]  ? __pfx_move_vma+0x10/0x10
[  341.128081][ T9123]  ? selinux_mmap_addr+0x2b/0x110
[  341.128106][ T9123]  ? security_mmap_addr+0x71/0x1e0
[  341.128125][ T9123]  ? __get_unmapped_area+0x255/0x3e0
[  341.128148][ T9123]  ? vrm_set_new_addr+0x1f5/0x2a0
[  341.128176][ T9123]  mremap_to+0x234/0x4c0
[  341.128202][ T9123]  ? __pfx_mremap_to+0x10/0x10
[  341.128234][ T9123]  __do_sys_mremap+0xc70/0x1780
[  341.128261][ T9123]  ? sched_clock_cpu+0x6c/0x570
[  341.128288][ T9123]  ? lock_acquire+0x1d1/0x380
[  341.128314][ T9123]  ? __pfx_sched_clock_cpu+0x10/0x10
[  341.128342][ T9123]  ? __pfx___do_sys_mremap+0x10/0x10
[  341.128368][ T9123]  ? find_held_lock+0x2b/0x80
[  341.128392][ T9123]  ? __schedule+0x315b/0x6920
[  341.128411][ T9123]  ? rcu_is_watching+0x13/0xc0
[  341.128434][ T9123]  ? trace_sched_exit_tp+0x120/0x160
[  341.128457][ T9123]  ? __schedule+0x126b/0x6920
[  341.128488][ T9123]  ? __pfx___schedule+0x10/0x10
[  341.128515][ T9123]  do_syscall_64+0x123/0x790
[  341.128538][ T9123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.128556][ T9123] RIP: 0033:0x7fe92939e159
[  341.128572][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.128589][ T9123] RSP: 002b:00007fe92a192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  341.128607][ T9123] RAX: ffffffffffffffda RBX: 00007fe929626090 RCX: 00007fe92939e159
[  341.128618][ T9123] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000
[  341.128629][ T9123] RBP: 00007fe92a192090 R08: 0000200000005000 R09: 0000000000000000
[  341.128642][ T9123] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  341.128651][ T9123] R13: 00007fe929626128 R14: 00007fe929626090 R15: 00007ffc8fa81428
[  341.128672][ T9123]  </TASK>
[  342.168406][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.170885][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.197800][   T30] audit: type=1400 audit(1788400360.458:1310): avc:  denied  { audit_write } for  pid=9129 comm="syz.1.818" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  342.222738][   T30] audit: type=1400 audit(1788400360.488:1311): avc:  denied  { read write } for  pid=9129 comm="syz.1.818" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  342.227296][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'.
[  342.247616][   T30] audit: type=1400 audit(1788400360.508:1312): avc:  denied  { open } for  pid=9129 comm="syz.1.818" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  342.331182][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.348523][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.875513][ T9145] FAULT_INJECTION: forcing a failure.
[  342.875513][ T9145] name failslab, interval 1, probability 0, space 0, times 0
[  342.876098][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.3.823 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  342.876130][ T9145] Tainted: [L]=SOFTLOCKUP
[  342.876138][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  342.876151][ T9145] Call Trace:
[  342.876160][ T9145]  <TASK>
[  342.876170][ T9145]  dump_stack_lvl+0x100/0x190
[  342.876206][ T9145]  should_fail_ex.cold+0x5/0xa
[  342.876237][ T9145]  should_failslab+0xc2/0x120
[  342.876264][ T9145]  __kvmalloc_node_noprof+0x113/0x9b0
[  342.876288][ T9145]  ? __kmalloc_noprof+0x350/0x840
[  342.876310][ T9145]  ? hash_ipmark_create+0xd54/0x1430
[  342.876356][ T9145]  hash_ipmark_create+0xd54/0x1430
[  342.876392][ T9145]  ? __pfx_hash_ipmark_create+0x10/0x10
[  342.876425][ T9145]  ip_set_create+0x6c4/0x1510
[  342.876461][ T9145]  ? __pfx_ip_set_create+0x10/0x10
[  342.876509][ T9145]  ? __rcu_read_unlock+0x26a/0x5e0
[  342.876532][ T9145]  ? rcu_is_watching+0x13/0xc0
[  342.876568][ T9145]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  342.876603][ T9145]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  342.876630][ T9145]  ? __lock_acquire+0x4c5/0x1ec0
[  342.876654][ T9145]  ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90
[  342.876704][ T9145]  ? avc_has_perm_noaudit+0x145/0x3b0
[  342.876740][ T9145]  netlink_rcv_skb+0x159/0x420
[  342.876772][ T9145]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  342.876799][ T9145]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.876843][ T9145]  ? ns_capable+0xd2/0xf0
[  342.876869][ T9145]  nfnetlink_rcv+0x1b3/0x440
[  342.876895][ T9145]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  342.876918][ T9145]  ? rcu_is_watching+0x13/0xc0
[  342.876953][ T9145]  netlink_unicast+0x585/0x850
[  342.876989][ T9145]  ? __pfx_netlink_unicast+0x10/0x10
[  342.877030][ T9145]  netlink_sendmsg+0x8b0/0xda0
[  342.877067][ T9145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.877102][ T9145]  ? selinux_socket_sendmsg+0x198/0x2f0
[  342.877140][ T9145]  ____sys_sendmsg+0xa4d/0xbe0
[  342.877165][ T9145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.877200][ T9145]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.877241][ T9145]  ___sys_sendmsg+0x190/0x1e0
[  342.877272][ T9145]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.877315][ T9145]  ? find_held_lock+0x2b/0x80
[  342.877384][ T9145]  __sys_sendmsg+0x160/0x210
[  342.877407][ T9145]  ? __pfx___sys_sendmsg+0x10/0x10
[  342.877447][ T9145]  do_syscall_64+0x123/0x790
[  342.877476][ T9145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.877499][ T9145] RIP: 0033:0x7fe92939e159
[  342.877518][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.877538][ T9145] RSP: 002b:00007fe9275f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.877557][ T9145] RAX: ffffffffffffffda RBX: 00007fe929626180 RCX: 00007fe92939e159
[  342.877569][ T9145] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000a
[  342.877579][ T9145] RBP: 00007fe9275f6090 R08: 0000000000000000 R09: 0000000000000000
[  342.877590][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.877601][ T9145] R13: 00007fe929626218 R14: 00007fe929626180 R15: 00007ffc8fa81428
[  342.877626][ T9145]  </TASK>
[  343.254308][ T9146] netlink: 'syz.4.828': attribute type 1 has an invalid length.
[  343.869979][   T42] net_ratelimit: 61 callbacks suppressed
[  343.870028][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  343.870110][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  343.982143][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  343.982195][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  344.031445][ T9153] netlink: 'syz.1.829': attribute type 1 has an invalid length.
[  344.090622][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  344.090669][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  344.206307][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  344.206361][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  344.337500][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  344.337535][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  344.388734][ T5802] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  344.544112][   T30] audit: type=1400 audit(1788400362.798:1313): avc:  denied  { map } for  pid=9161 comm="syz.1.834" path="socket:[24017]" dev="sockfs" ino=24017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  344.544186][   T30] audit: type=1400 audit(1788400362.798:1314): avc:  denied  { read } for  pid=9161 comm="syz.1.834" path="socket:[24017]" dev="sockfs" ino=24017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  344.594281][ T9166] netlink: 'syz.1.834': attribute type 13 has an invalid length.
[  344.594308][ T9166] netlink: 'syz.1.834': attribute type 17 has an invalid length.
[  344.628725][ T5802] usb 4-1: Using ep0 maxpacket: 32
[  344.634471][ T5802] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  344.644842][ T5802] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  344.644887][ T5802] usb 4-1: config 0 has no interface number 0
[  344.661608][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.669844][ T5802] usb 4-1: Product: syz
[  344.674099][ T5802] usb 4-1: Manufacturer: syz
[  344.678797][ T5802] usb 4-1: SerialNumber: syz
[  344.692728][ T5802] usb 4-1: config 0 descriptor??
[  344.700274][ T5802] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  344.709537][ T9166] gretap0: refused to change device tx_queue_len
[  344.792174][ T9167] lo speed is unknown, defaulting to 1000
[  344.815990][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.816324][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.897170][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.909079][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.922960][ T5802] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  344.947624][ T9180] 9p: Bad value for 'wfdno'
[  344.954120][ T5802] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  345.338522][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  345.348743][ T5698] usb 4-1: USB disconnect, device number 41
[  345.372476][ T5698] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  345.414735][ T5698] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  345.428403][ T5698] quatech2 4-1:0.51: device disconnected
[  346.346159][   T30] audit: type=1400 audit(1788400364.608:1315): avc:  denied  { mount } for  pid=9197 comm="syz.2.842" name="/" dev="ramfs" ino=24596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  346.384989][    T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  346.523497][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  346.540052][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  346.540106][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  346.542660][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.542705][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.584700][    T9] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  348.109011][    T9] uvcvideo 4-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[  348.111326][    T9] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  348.111370][    T9] uvcvideo 4-1:1.1: Failed to initialize the device (-71).
[  348.111778][    T9] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71
[  348.139398][    T9] usb 4-1: USB disconnect, device number 42
[  348.697794][   T30] audit: type=1400 audit(1788400366.958:1316): avc:  denied  { unlink } for  pid=5606 comm="syz-executor" name="ubi0" dev="devtmpfs" ino=2923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  348.728862][   T30] audit: type=1400 audit(1788400366.958:1317): avc:  denied  { unlink } for  pid=5606 comm="syz-executor" name="nullb1" dev="devtmpfs" ino=2876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  348.904295][   T55] net_ratelimit: 85 callbacks suppressed
[  348.904341][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  348.904365][   T55] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  349.009220][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  349.009264][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  349.062046][ T7448] raw-gadget.8 gadget.0: failed to queue disconnect event
[  349.119967][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  349.120012][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  349.220813][ T9214] netlink: 'syz.3.847': attribute type 1 has an invalid length.
[  349.228978][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  349.248790][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  349.281795][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  349.300300][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  350.048545][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.051017][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.153670][   T30] audit: type=1400 audit(1788400368.418:1318): avc:  denied  { append } for  pid=9220 comm="syz.3.850" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  350.186048][   T30] audit: type=1400 audit(1788400368.448:1319): avc:  denied  { ioctl } for  pid=9220 comm="syz.3.850" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  350.507884][   T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.776871][   T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.852298][ T9236] fuse: Bad value for 'user_id'
[  350.852321][ T9236] fuse: Bad value for 'user_id'
[  350.892456][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  350.901534][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  350.914474][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  350.927069][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  350.934648][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  351.008507][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  351.008935][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  351.015954][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  351.033431][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  351.040866][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  351.077953][   T30] audit: type=1400 audit(1788400369.308:1320): avc:  denied  { mounton } for  pid=9237 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  351.126863][   T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.054562][ T5698] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  352.219300][ T5698] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  352.229338][ T5698] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  352.229381][ T5698] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  352.229409][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0
[  352.229439][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.272567][ T5698] usb 2-1: config 0 descriptor??
[  352.313194][   T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.505788][ T5615] Bluetooth: hci4: command tx timeout
[  353.648913][ T9258] netlink: 'syz.3.860': attribute type 1 has an invalid length.
[  353.910500][ T7595] net_ratelimit: 89 callbacks suppressed
[  353.910556][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  353.928797][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  353.949714][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  353.968846][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  353.968890][ T7595] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  353.988150][ T5698] input: HID 05ac:0324 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0324.000A/input/input32
[  354.073939][ T5698] magicmouse 0003:05AC:0324.000A: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0324] on usb-dummy_hcd.1-1/input0
[  354.081714][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  355.166580][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  355.178749][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  355.198791][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  355.219481][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  355.388037][ T5698] magicmouse 0003:05AC:0324.000A: unable to request touch data (-71)
[  355.518627][ T5698] magicmouse 0003:05AC:0324.000A: probe with driver magicmouse failed with error -71
[  355.532163][ T5615] Bluetooth: hci4: command tx timeout
[  355.538401][   T42] bridge_slave_1: left allmulticast mode
[  355.554708][ T5698] usb 2-1: USB disconnect, device number 48
[  355.569133][   T42] bridge_slave_1: left promiscuous mode
[  355.569830][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.613368][   T42] bridge_slave_0: left allmulticast mode
[  355.613417][   T42] bridge_slave_0: left promiscuous mode
[  355.619736][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.780572][ T5698] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  356.868855][   T30] audit: type=1400 audit(1788400375.128:1321): avc:  denied  { write } for  pid=9269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  356.960314][ T5698] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  356.971397][ T5698] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  356.971432][ T5698] usb 2-1: config 0 has no interface number 0
[  356.971474][ T5698] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.971497][ T5698] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.971525][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.016949][ T5698] usb 2-1: config 0 descriptor??
[  357.112086][   T30] audit: type=1400 audit(1788400375.378:1322): avc:  denied  { write } for  pid=9287 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  357.454124][ T5698] prodikeys 0003:041E:2801.000B: item fetching failed at offset 5/7
[  357.469072][ T5698] prodikeys 0003:041E:2801.000B: hid parse failed
[  357.475740][ T5698] prodikeys 0003:041E:2801.000B: probe with driver prodikeys failed with error -22
[  357.518106][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.532526][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.553959][   T42] bond0 (unregistering): Released all slaves
[  357.566160][   T42] bond1 (unregistering): Released all slaves
[  357.584594][   T42] bond2 (unregistering): Released all slaves
[  357.608882][ T5615] Bluetooth: hci4: command tx timeout
[  357.643531][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1
[  357.665814][ T9237] lo speed is unknown, defaulting to 1000
[  357.732485][   T25] usb 2-1: USB disconnect, device number 49
[  357.931828][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.940709][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.982437][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.992163][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.204119][ T7538] net_ratelimit: 89 callbacks suppressed
[  359.204163][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.219553][ T7595] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.248927][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.268780][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.288798][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.308790][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.344336][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.356724][   T30] audit: type=1400 audit(1788400377.618:1323): avc:  denied  { write } for  pid=9297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  359.358728][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.378738][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.400387][   T55] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  359.564762][   T30] audit: type=1400 audit(1788400377.828:1324): avc:  denied  { write } for  pid=9327 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  359.689824][ T5615] Bluetooth: hci4: command tx timeout
[  359.706874][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2
[  360.510316][ T5698] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  361.409508][ T5698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  361.419907][ T5698] usb 2-1: unable to read config index 0 descriptor/start: -71
[  361.419949][ T5698] usb 2-1: can't read configurations, error -71
[  361.442450][ T9342] netlink: 'syz.4.871': attribute type 1 has an invalid length.
[  361.535981][   T42] hsr_slave_0: left promiscuous mode
[  361.544605][   T42] hsr_slave_1: left promiscuous mode
[  361.545277][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.545306][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.553209][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.553226][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.652764][   T30] audit: type=1400 audit(1788400379.918:1325): avc:  denied  { write } for  pid=9337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  361.678170][   T42] veth1_macvtap: left promiscuous mode
[  361.678330][   T42] veth0_macvtap: left promiscuous mode
[  361.679741][   T42] veth1_vlan: left promiscuous mode
[  361.679819][   T42] veth0_vlan: left promiscuous mode
[  361.785342][   T30] audit: type=1400 audit(1788400380.048:1326): avc:  denied  { write } for  pid=9360 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  362.045871][   T42] team0 (unregistering): Port device team_slave_1 removed
[  362.058460][   T42] team0 (unregistering): Port device team_slave_0 removed
[  362.148199][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3
[  362.199815][ T5711] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  362.370109][ T5711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  362.382352][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.441447][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.441562][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.441707][ T9237] bridge_slave_0: entered allmulticast mode
[  362.443378][ T9237] bridge_slave_0: entered promiscuous mode
[  362.446047][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.446162][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.446260][ T9237] bridge_slave_1: entered allmulticast mode
[  362.447593][ T9237] bridge_slave_1: entered promiscuous mode
[  362.494205][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.509172][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.604308][ T9237] team0: Port device team_slave_0 added
[  362.613264][ T9237] team0: Port device team_slave_1 added
[  362.639544][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.646739][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.652455][ T5711] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  362.673472][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.692537][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.702547][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.728757][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.747647][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.756559][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.840808][   T42] IPVS: stop unused estimator thread 0...
[  362.881177][ T9237] hsr_slave_0: entered promiscuous mode
[  362.881966][ T9237] hsr_slave_1: entered promiscuous mode
[  362.882457][ T9237] debugfs: 'hsr0' already exists in 'hsr'
[  362.882470][ T9237] Cannot create hsr debugfs directory
[  363.106591][   T30] audit: type=1400 audit(1788400381.368:1327): avc:  denied  { write } for  pid=9370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  364.222524][   T42] net_ratelimit: 166 callbacks suppressed
[  364.222580][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.242550][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.258962][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.283416][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.298954][   T30] audit: type=1400 audit(1788400382.568:1328): avc:  denied  { write } for  pid=9396 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  364.300648][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.318879][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.341641][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.361779][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.361970][ T1520] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  364.471565][ T1520] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  364.494046][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.494459][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.540014][ T9405] 9p: Bad value for 'wfdno'
[  364.588810][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4
[  364.789112][ T9237] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  364.810783][ T9237] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  364.811747][ T9237] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  364.834157][ T9237] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  364.838117][ T9237] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  364.871776][ T9237] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  364.873252][ T9237] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  364.905637][ T9237] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  365.022830][ T9420] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  365.257150][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.326134][ T9237] 8021q: adding VLAN 0 to HW filter on device team0
[  365.361096][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.361229][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.390034][ T1520] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.390109][ T1520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.457692][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.458087][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.905235][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.115950][ T9237] veth0_vlan: entered promiscuous mode
[  366.123909][ T9237] veth1_vlan: entered promiscuous mode
[  366.152039][ T9237] veth0_macvtap: entered promiscuous mode
[  366.156949][ T9237] veth1_macvtap: entered promiscuous mode
[  366.171832][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.175000][ T9237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.218992][ T7595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.250695][ T7538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.293451][   T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.325289][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.325325][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.330243][ T7538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.381995][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.382035][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.401806][   T30] audit: type=1400 audit(1788400384.668:1329): avc:  denied  { mounton } for  pid=9237 comm="syz-executor" path="/root/syzkaller.pjP1EI/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  366.427558][   T30] audit: type=1400 audit(1788400384.688:1330): avc:  denied  { mount } for  pid=9237 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  366.488395][   T30] audit: type=1400 audit(1788400384.738:1331): avc:  denied  { mounton } for  pid=9237 comm="syz-executor" path="/root/syzkaller.pjP1EI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  366.488466][   T30] audit: type=1400 audit(1788400384.748:1332): avc:  denied  { mounton } for  pid=9237 comm="syz-executor" path="/root/syzkaller.pjP1EI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  366.824013][   T30] audit: type=1400 audit(1788400385.088:1333): avc:  denied  { mounton } for  pid=9237 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  366.824073][   T30] audit: type=1400 audit(1788400385.088:1334): avc:  denied  { mount } for  pid=9237 comm="syz-executor" name="/" dev="gadgetfs" ino=7065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  366.871422][   T30] audit: type=1400 audit(1788400385.138:1335): avc:  denied  { mounton } for  pid=9237 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  368.092355][ T9473] netlink: 'syz.5.853': attribute type 21 has an invalid length.
[  368.092389][ T9473] netlink: 128 bytes leftover after parsing attributes in process `syz.5.853'.
[  368.092512][ T9473] netlink: 'syz.5.853': attribute type 5 has an invalid length.
[  368.092528][ T9473] netlink: 'syz.5.853': attribute type 6 has an invalid length.
[  368.092541][ T9473] netlink: 3 bytes leftover after parsing attributes in process `syz.5.853'.
[  368.141321][ T5802] usb 4-1: USB disconnect, device number 43
[  368.428760][ T1485] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  368.578955][ T5802] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  368.583442][ T1485] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  368.585807][ T1485] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  368.585827][ T1485] usb 2-1: config 0 has no interface number 0
[  368.585856][ T1485] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.585878][ T1485] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.585905][ T1485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.597482][ T1485] usb 2-1: config 0 descriptor??
[  368.726149][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.737169][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.749668][ T9482] netlink: 'syz.2.895': attribute type 1 has an invalid length.
[  368.799481][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.799847][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.821017][ T5802] usb 4-1: not running at top speed; connect to a high speed hub
[  368.828942][ T5802] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  368.839024][ T5802] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 34, changing to 4
[  368.850117][ T5802] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  368.863630][ T5802] usb 4-1: string descriptor 0 read error: -22
[  368.863744][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.888361][ T5802] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  368.978781][ T5711] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  369.010673][ T1485] prodikeys 0003:041E:2801.000C: item fetching failed at offset 5/7
[  369.011121][ T1485] prodikeys 0003:041E:2801.000C: hid parse failed
[  369.011186][ T1485] prodikeys 0003:041E:2801.000C: probe with driver prodikeys failed with error -22
[  369.082742][ T5802] usb 4-1: found format II with max.bitrate = 18044, frame size=10
[  369.082774][ T5802] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  369.108847][ T5711] usb 6-1: device descriptor read/64, error -71
[  369.154274][ T5802] usb 4-1: USB disconnect, device number 44
[  369.214512][   T25] usb 2-1: USB disconnect, device number 52
[  369.306093][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'.
[  369.329726][   T13] net_ratelimit: 90 callbacks suppressed
[  369.329773][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  369.350502][ T5711] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  369.350646][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  369.362190][ T9487] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 743
[  369.369407][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  369.369431][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  369.478897][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  369.478946][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  369.478996][ T5711] usb 6-1: device descriptor read/64, error -71
[  369.588890][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  369.588962][   T42] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  369.589041][ T5711] usb usb6-port1: attempt power cycle
[  369.695460][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.695801][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.698801][   T42] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  369.929747][ T5711] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  369.955481][ T5711] usb 6-1: device descriptor read/8, error -71
[  370.118796][ T5802] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  370.191419][ T5711] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  370.209934][ T5711] usb 6-1: device descriptor read/8, error -71
[  370.269227][ T5802] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  370.279814][ T5802] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  370.279855][ T5802] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  370.279894][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0
[  370.279924][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.319069][ T5711] usb usb6-port1: unable to enumerate USB device
[  370.329115][ T5802] usb 2-1: config 0 descriptor??
[  370.640267][ T9512] lo speed is unknown, defaulting to 1000
[  370.750144][ T9517] netlink: 'syz.4.906': attribute type 1 has an invalid length.
[  370.796886][ T5802] input: HID 05ac:0324 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0324.000D/input/input35
[  370.845591][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.845942][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.844749][ T5802] magicmouse 0003:05AC:0324.000D: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0324] on usb-dummy_hcd.1-1/input0
[  372.060041][   T30] audit: type=1400 audit(1788400390.328:1336): avc:  denied  { append } for  pid=9529 comm="syz.5.910" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  372.092780][ T5802] usb 2-1: USB disconnect, device number 53
[  373.136021][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  373.136089][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  373.214750][   T30] audit: type=1400 audit(1788400391.478:1337): avc:  denied  { unmount } for  pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  373.914474][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.924606][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.993814][   T30] audit: type=1400 audit(1788400392.258:1338): avc:  denied  { create } for  pid=9545 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  374.113608][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.114399][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.558088][  T292] net_ratelimit: 70 callbacks suppressed
[  374.558127][  T292] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  374.558150][  T292] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  374.660481][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  374.660521][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  374.679106][ T5802] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  375.597929][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  375.597978][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  375.648948][ T5802] usb 4-1: device descriptor read/64, error -71
[  375.701104][ T7538] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  375.701145][ T7538] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  375.808952][   T13] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  375.808997][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  375.898716][ T5802] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  376.040303][ T5802] usb 4-1: device descriptor read/64, error -71
[  376.150081][ T5802] usb usb4-port1: attempt power cycle
[  376.291019][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.302231][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.398935][   T30] audit: type=1400 audit(1788400394.658:1339): avc:  denied  { write } for  pid=9568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  376.499432][ T5802] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  376.519581][ T5802] usb 4-1: device descriptor read/8, error -71
[  376.549449][   T30] audit: type=1400 audit(1788400394.818:1340): avc:  denied  { write } for  pid=9585 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  376.758711][ T5802] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  376.791010][ T5802] usb 4-1: device descriptor read/8, error -71
[  376.898990][ T5802] usb usb4-port1: unable to enumerate USB device
[  376.976928][ T9608] capability: warning: `syz.5.925' uses deprecated v2 capabilities in a way that may be insecure
[  376.977204][   T13] IPVS: starting estimator thread 0...
[  377.019173][   T30] audit: type=1400 audit(1788400395.288:1341): avc:  denied  { nlmsg_read } for  pid=9603 comm="syz.5.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  377.022094][   T30] audit: type=1400 audit(1788400395.288:1342): avc:  denied  { write } for  pid=9603 comm="syz.5.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  377.098710][ T9609] IPVS: using max 48 ests per chain, 115200 per kthread
[  377.734868][   T30] audit: type=1400 audit(1788400395.998:1343): avc:  denied  { write } for  pid=9590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  377.779924][ T5801] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  377.931801][ T5801] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  377.932701][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.955583][   T30] audit: type=1400 audit(1788400396.218:1344): avc:  denied  { write } for  pid=9620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.045136][   T30] audit: type=1400 audit(1788400396.308:1345): avc:  denied  { ioctl } for  pid=9623 comm="syz.3.929" path="socket:[27649]" dev="sockfs" ino=27649 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  378.096333][   T30] audit: type=1400 audit(1788400396.358:1346): avc:  denied  { shutdown } for  pid=9623 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  378.157124][ T5801] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  378.377847][   T25] usb 2-1: USB disconnect, device number 54
[  378.403203][   T25] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI
[  378.415285][   T25] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  378.423680][   T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.434447][   T25] Tainted: [L]=SOFTLOCKUP
[  378.438775][   T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  378.448836][   T25] Workqueue: usb_hub_wq hub_event
[  378.453906][   T25] RIP: 0010:klist_put+0x4d/0x1d0
[  378.458869][   T25] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c ee 0c
[  378.478488][   T25] RSP: 0018:ffffc900001f7450 EFLAGS: 00010202
[  378.484547][   T25] RAX: dffffc0000000000 RBX: ffff888058583c80 RCX: ffffc9001d1e3000
[  378.492507][   T25] RDX: 000000000000000b RSI: ffffffff8bc55645 RDI: 0000000000000058
[  378.500543][   T25] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224e110
[  378.508488][   T25] R10: ffffffff91270883 R11: 0000000000000000 R12: 0000000000000000
[  378.516434][   T25] R13: 0000000000000001 R14: ffffffff91270840 R15: dffffc0000000000
[  378.524380][   T25] FS:  0000000000000000(0000) GS:ffff888123c61000(0000) knlGS:0000000000000000
[  378.533301][   T25] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.539896][   T25] CR2: 00007ffca366dff8 CR3: 0000000055099000 CR4: 00000000003526f0
[  378.547926][   T25] Call Trace:
[  378.551219][   T25]  <TASK>
[  378.554221][   T25]  klist_remove+0x14c/0x2e0
[  378.558710][   T25]  ? __pfx_klist_remove+0x10/0x10
[  378.563712][   T25]  ? device_links_driver_cleanup+0x2f7/0x3e0
[  378.569677][   T25]  device_release_driver_internal+0x4fb/0x620
[  378.575726][   T25]  ? __rcu_read_lock+0x40/0x70
[  378.580482][   T25]  usb_driver_release_interface+0x10e/0x190
[  378.586410][   T25]  acm_disconnect+0x8a2/0xc10
[  378.591083][   T25]  usb_unbind_interface+0x1dd/0x9e0
[  378.596263][   T25]  ? __pfx_usb_unbind_interface+0x10/0x10
[  378.601974][   T25]  device_remove+0x12a/0x180
[  378.606556][   T25]  device_release_driver_internal+0x44e/0x620
[  378.612610][   T25]  bus_remove_device+0x2bc/0x560
[  378.617540][   T25]  ? __pfx_bus_remove_device+0x10/0x10
[  378.622990][   T25]  ? __pfx_device_remove_attrs+0x10/0x10
[  378.628621][   T25]  device_del+0x376/0x9b0
[  378.632980][   T25]  ? __pfx_device_del+0x10/0x10
[  378.637831][   T25]  ? kobject_put+0xb9/0x640
[  378.642328][   T25]  usb_disable_device+0x367/0x810
[  378.647376][   T25]  usb_disconnect+0x2e2/0x9a0
[  378.652058][   T25]  hub_event+0x1bb1/0x4420
[  378.656476][   T25]  ? __lock_acquire+0x4c5/0x1ec0
[  378.661407][   T25]  ? __pfx_hub_event+0x10/0x10
[  378.666155][   T25]  ? mark_lock+0xea0/0x1020
[  378.670647][   T25]  ? lock_acquire+0x1d1/0x380
[  378.675297][   T25]  ? process_one_work+0xa2c/0x1b10
[  378.680391][   T25]  ? process_one_work+0x906/0x1b10
[  378.685480][   T25]  ? process_one_work+0x906/0x1b10
[  378.690571][   T25]  process_one_work+0xac7/0x1b10
[  378.695540][   T25]  ? __pfx_process_one_work+0x10/0x10
[  378.700923][   T25]  ? lock_acquire+0x1d1/0x380
[  378.705600][   T25]  ? __pfx_hub_event+0x10/0x10
[  378.710351][   T25]  worker_thread+0x5ef/0xe50
[  378.714940][   T25]  ? kthread+0x13a/0x450
[  378.719175][   T25]  ? __pfx_worker_thread+0x10/0x10
[  378.724276][   T25]  kthread+0x373/0x450
[  378.728345][   T25]  ? __pfx_kthread+0x10/0x10
[  378.732931][   T25]  ret_from_fork+0x730/0xd60
[  378.737502][   T25]  ? __pfx_ret_from_fork+0x10/0x10
[  378.742609][   T25]  ? __switch_to+0x800/0x10f0
[  378.747286][   T25]  ? __pfx_kthread+0x10/0x10
[  378.751870][   T25]  ret_from_fork_asm+0x1a/0x30
[  378.756624][   T25]  </TASK>
[  378.759616][   T25] Modules linked in:
[  378.763924][   T25] ---[ end trace 0000000000000000 ]---
[  378.805259][   T30] audit: type=1400 audit(1788400397.068:1347): avc:  denied  { read } for  pid=4955 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  378.843758][   T30] audit: type=1400 audit(1788400397.108:1348): avc:  denied  { search } for  pid=4955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.865470][   T30] audit: type=1400 audit(1788400397.108:1349): avc:  denied  { write search } for  pid=4955 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  378.887735][   T30] audit: type=1400 audit(1788400397.108:1350): avc:  denied  { add_name } for  pid=4955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  379.360916][   T30] audit: type=1400 audit(1788400397.108:1351): avc:  denied  { create } for  pid=4955 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  379.386119][   T30] audit: type=1400 audit(1788400397.648:1352): avc:  denied  { append open } for  pid=4955 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  379.670520][ T7563] net_ratelimit: 44 callbacks suppressed
[  379.670561][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  379.670579][ T7563] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  379.778781][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in
** replaying previous printk message **
[  379.778781][ T7563] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms
[  379.784986][   T25] RIP: 0010:klist_put+0x4d/0x1d0
[  379.785018][   T25] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c ee 0c
[  379.785034][   T25] RSP: 0018:ffffc900001f7450 EFLAGS: 00010202
[  379.785048][   T25] RAX: dffffc0000000000 RBX: ffff888058583c80 RCX: ffffc9001d1e3000
[  379.785059][   T25] RDX: 000000000000000b RSI: ffffffff8bc55645 RDI: 0000000000000058
[  379.785069][   T25] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff224e110
[  379.785078][   T25] R10: ffffffff91270883 R11: 0000000000000000 R12: 0000000000000000
[  379.785087][   T25] R13: 0000000000000001 R14: ffffffff91270840 R15: dffffc0000000000
[  379.785097][   T25] FS:  0000000000000000(0000) GS:ffff888123c61000(0000) knlGS:0000000000000000
[  379.785113][   T25] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  379.785123][   T25] CR2: 0000561f262e4300 CR3: 000000005db1a000 CR4: 00000000003526f0
[  379.785136][   T25] Kernel panic - not syncing: Fatal exception
[  379.897153][   T25] Kernel Offset: disabled
[  379.901464][   T25] Rebooting in 86400 seconds..