last executing test programs:

45.384529399s ago: executing program 0 (id=199):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x3c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0xc201})
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe)
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
read$ptp(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec5", 0xad, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)

43.30680757s ago: executing program 0 (id=204):
socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3f)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
brk(0x80)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x2, 0x0, 0x8)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x15, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
lsm_set_self_attr(0x66, &(0x7f0000000380)=ANY=[], 0x22, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000000)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))

42.73461487s ago: executing program 0 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
capget(&(0x7f0000000040)={0x20071026}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x80, 0x2, 0x1e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x11, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002d6a2e1765dbdf25fe88000000000000000000000092fd9c9c01010100000000000000000011000000000000000000000a00000073000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000100000000000a0010000100000000000000"], 0xc4}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff)

41.024162935s ago: executing program 0 (id=214):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x3c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0xc201})
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec5", 0xad, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{0x9, 0x7f, 0x40, 0x60}, {0xc50, 0x7, 0xd, 0x1ced}, {0x9, 0xff, 0xa3, 0xd1c2}, {0x4, 0x0, 0x6}, {0x400, 0x8, 0x81, 0x23}]})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)

34.564045329s ago: executing program 0 (id=229):
syz_open_dev$video4linux(0x0, 0x3, 0x68c42)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1000"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r3, 0x0, 0x0}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000001640)={0x5, 0x3, 0x81, 0x8, 0x2, 0x2})
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)

33.590602247s ago: executing program 0 (id=233):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e61740000000000000000d4ff00000000000000000000000000000000000400399cbcde04000000"], &(0x7f0000000240)=0x28) (async)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
writev(r4, &(0x7f0000003180)=[{&(0x7f0000002080)="43cc767f", 0x4}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32, @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) (async)
clock_gettime(0x3, &(0x7f00000021c0))

18.201987434s ago: executing program 32 (id=233):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e61740000000000000000d4ff00000000000000000000000000000000000400399cbcde04000000"], &(0x7f0000000240)=0x28) (async)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
writev(r4, &(0x7f0000003180)=[{&(0x7f0000002080)="43cc767f", 0x4}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32, @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) (async)
clock_gettime(0x3, &(0x7f00000021c0))

12.280460588s ago: executing program 4 (id=284):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x20001fffffffb})
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x4}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/188, 0x27, 0xbc, 0x0, 0x400, 0x10000}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0x43, 0x5, 0xbffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xd4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x40200000}, 0x7e}, 0x10)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4)
readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=""/175, 0xaf)

10.718716897s ago: executing program 3 (id=287):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
capget(&(0x7f0000000040)={0x20071026}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xcc, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x2, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x6, 0x2, 0x7f, 0x3, 0x6, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x8, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x93, 0x5, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x6, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x800001, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x401, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0xcc, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbf, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x7, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x800, 0x0, 0x0, 0x6, 0x9, 0x9, 0x48f05dd5, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x200, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bc, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x478}}, 0x20004811)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x11, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(0xffffffffffffffff, 0x22d0, 0x20, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002d6a2e1765dbdf25fe88000000000000000000000092fd9c9c01010100000000000000000011000000000000000000000a00000073000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000100000000000a0010000100000000000000"], 0xc4}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff)

10.707836252s ago: executing program 2 (id=288):
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x34}}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)

8.846877682s ago: executing program 4 (id=290):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5], 0x1, r2, r3, 0xbc, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

8.340600301s ago: executing program 1 (id=292):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x2, 0x7)
setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3})
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x35, 0x0, "f8b52fde92949991fe52d14d9060d52f54c196d8ada43dd6353e418967a841e4a669c8b4a7598ff9116139d14b8f9125c279c04afc48bb655569f5543bc847a8c96a8d13bdab44d6f918d3219115a39d"}, 0xd8)
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000100)={0x2, 0x0, 0x3, 0x5, 0xffff, 0x5, 0x6, 0x80, 0x3})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x80100)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0x6)

8.298891764s ago: executing program 4 (id=293):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0}, 0x1c)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0)
close(r0)
execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000180)={[&(0x7f0000000000)='\x00', &(0x7f00000000c0)='/dev/adsp1\x00', &(0x7f0000000100)=':^N}\xec\xa8\x00']}, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

7.782147757s ago: executing program 3 (id=294):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160)
socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]})
listen(r0, 0xa1)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000240)="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", 0xfe}, {&(0x7f00000004c0)="b496abca44da8a8f0a285068f003000000000001008505000000d9f9824abdfb9e1db5849d48322263e2ff070000000000005a6e7491a21c048bbc5cc78da89d63521941f580639367dd6a71492c788159e04bf8ef3dfefba5c0b61450cdb84bc098fa00d74dd46f9cf717ce80ece68c0344603bc30e404670df6a26f52a1c544918d923db205da367a621e04e73e626f9a2e68a558e7feacc1cd84e0d2624f1187909067551b3bede0ee7eb54eddd38c28860f691e75f5c15b7eb99c3ff", 0xbe}, {&(0x7f0000000380)="0da2dfc5ceda", 0x6}, {&(0x7f00000027c0)="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", 0x17d}, {&(0x7f0000000140)="f254ffe548d01d4d8620103bf347ca6f878df576a8ee687a87043b0b336c21001b78caad9af4faf3560b86bf5b9a9f7827c14386f2c031484743265dd585494522117298de01c27a7b5eb09a1153eb0549bc3eaf76aee5ef290ca9ce49473ab13f83083a5589b03e3c93f6c17b55632f7b6ce8f189846ef3ff37c2bd26338979b2952cee16b47ba3880581b433078717a1300a49e27c6ff022ccf7585f344020283a7aaea5ab6c68acf5020ce8c3ab941857ebedf1f7957f899b298c9adadd1590dab2237cd1a47afbf75eecbf0123e4c43bd042b1ce64866587f6", 0xdb}, {&(0x7f0000002380)="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", 0xfa}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f00000003c0)="11", 0x1}], 0x9}, 0x20000000}], 0x1, 0x840)

7.481149501s ago: executing program 3 (id=295):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x3c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0xc201})
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe)
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)

7.230044167s ago: executing program 1 (id=296):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000840)={0x6, {{0xa, 0x4e23, 0xc5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e21, 0xb0d, @mcast2, 0xfffffff9}}}, 0x108)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x1}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_test', 0x149a82, 0x114)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12)
sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000001011679d508a8ec7a00afc6ae090d2d", @ANYRES32, @ANYBLOB], 0x28}, 0x4040)
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7)
sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="3d0f4cd5bcb659", @ANYBLOB="010027bd7000ff5bdf2d01000000080002000208000008000100"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00')
ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x80044dfe, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f0000000100)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x5, "31c53b"}})

6.817663712s ago: executing program 2 (id=297):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x3c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0xc201})
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe)
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
read$ptp(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c1", 0xb9, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)

5.679719263s ago: executing program 1 (id=298):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x7, 0xfffffffb, "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", 0x5, 0x9, 0x0, 0xf3, 0x1, 0x4, 0x1}}}, 0x120)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async, rerun: 32)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64)
r6 = getpid() (rerun: 64)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r5, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5.663903524s ago: executing program 4 (id=299):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x20001fffffffb})
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x4}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/188, 0x27, 0xbc, 0x0, 0x400, 0x10000}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0x43, 0x5, 0xbffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0xd4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x40200000}, 0x7e}, 0x10)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(&(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=""/175, 0xaf)

5.657773344s ago: executing program 3 (id=300):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
socket$kcm(0x29, 0x5, 0x0)
listen(0xffffffffffffffff, 0x100)
kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0)

4.406078021s ago: executing program 1 (id=301):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
read$FUSE(r2, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000003c0)='m', 0x1}]) (fail_nth: 2)

4.402664319s ago: executing program 2 (id=302):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffd14000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000"], 0x60}}, 0x20000000)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r4}, 0x18) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x9})
ioctl(r5, 0x8b22, &(0x7f0000000040))
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r6 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept(r1, 0x0, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c090}, 0x444c5) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="8a69aa4b815d4d98caeb80478d1efdd600000000", @ANYRES16=r9, @ANYBLOB="aba12abd7000fddbdf252c00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000080) (async)
r11 = eventfd2(0x0, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async)
close(r11) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)

4.220611726s ago: executing program 3 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
capget(&(0x7f0000000040)={0x20071026}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xcc, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x2, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x6, 0x2, 0x7f, 0x3, 0x6, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x8, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x93, 0x5, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x6, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x800001, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x401, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0xcc, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbf, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x7, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x800, 0x0, 0x0, 0x6, 0x9, 0x9, 0x48f05dd5, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x200, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bc, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x478}}, 0x20004811)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x11, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(0xffffffffffffffff, 0x22d0, 0x20, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002d6a2e1765dbdf25fe88000000000000000000000092fd9c9c01010100000000000000000011000000000000000000000a00000073000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000100000000000a0010000100000000000000"], 0xc4}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff)

3.923138075s ago: executing program 2 (id=304):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_getres(0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})
socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000f3adeb2c169c9374e35809c2", @ANYRES16=r6, @ANYBLOB="01002ebd70401700000014f6ff010000000003000000"], 0x1c}}, 0x14000010)
write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8000000000000001}}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xfffffffffffffffb}, 0x75)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x6, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f40000af1e00", [0x1, 0x6dc]}})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000040)={&(0x7f00000003c0)={{@local, 0x1}, {@host, 0x2245}, 0x400, "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"}, 0x418, 0x81})
socket$kcm(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"})
r8 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)={0x7017be0b})
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000000)={0x40000000})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x140)

2.455566487s ago: executing program 1 (id=305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x2, 0x7)
setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3})
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x35, 0x0, "f8b52fde92949991fe52d14d9060d52f54c196d8ada43dd6353e418967a841e4a669c8b4a7598ff9116139d14b8f9125c279c04afc48bb655569f5543bc847a8c96a8d13bdab44d6f918d3219115a39d"}, 0xd8)
ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000100)={0x2, 0x0, 0x3, 0x5, 0xffff, 0x5, 0x6, 0x80, 0x3})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x80100)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0x6)

2.25996164s ago: executing program 4 (id=306):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000004c0)={0x6, &(0x7f00000003c0)=[{0x3, 0x2, 0x6, 0x4}, {0x5, 0x7, 0xa, 0x43}, {0x8, 0xf, 0x2, 0xfffffff7}, {0x80, 0x0, 0xc0, 0xe}, {0x1ff, 0x7, 0x81}, {0x5, 0x3, 0x57, 0x400}]}, 0x10)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2011, {0x0, 0x0, 0x1200000000000000, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0)

1.366121396s ago: executing program 4 (id=307):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x3c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0xc201})
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d3", 0xc2, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{0x9, 0x7f, 0x40, 0x60}, {0xc50, 0x7, 0xd, 0x1ced}, {0x9, 0xff, 0xa3, 0xd1c2}, {0x4, 0x0, 0x6}, {0x400, 0x8, 0x81, 0x23}]})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)

1.365417443s ago: executing program 2 (id=308):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000840)={0x6, {{0xa, 0x4e23, 0xc5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e21, 0xb0d, @mcast2, 0xfffffff9}}}, 0x108)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x1}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_test', 0x149a82, 0x114)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12)
sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000001011679d508a8ec7a00afc6ae090d2d", @ANYRES32, @ANYBLOB], 0x28}, 0x4040)
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7)
sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="3d0f4cd5bcb659392cd9ad", @ANYBLOB="010027bd7000ff5bdf2d01000000080002000208000008000100"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00')
ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x80044dfe, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f0000000100)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x5, "31c53b"}})

1.01833952s ago: executing program 3 (id=309):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), 0x0}, 0x1c)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0)
close(r0)
execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000180)={[&(0x7f0000000000)='\x00', &(0x7f00000000c0)='/dev/adsp1\x00', &(0x7f0000000100)=':^N}\xec\xa8\x00']}, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

904.049161ms ago: executing program 2 (id=310):
r0 = socket(0x11, 0x800000003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0x6, 0x28002f7})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
socket$igmp(0x2, 0x3, 0x2)
sched_setaffinity(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r4, 0x3)
r5 = accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800)
setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

0s ago: executing program 1 (id=311):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x3c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0xc201})
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000))
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe)
bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r5, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts.
[   57.607064][   T30] audit: type=1400 audit(1765910687.392:62): avc:  denied  { mounton } for  pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   57.630419][   T30] audit: type=1400 audit(1765910687.412:63): avc:  denied  { mount } for  pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.632868][ T5803] cgroup: Unknown subsys name 'net'
[   57.659668][   T30] audit: type=1400 audit(1765910687.452:64): avc:  denied  { unmount } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.836681][ T5803] cgroup: Unknown subsys name 'cpuset'
[   57.844397][ T5803] cgroup: Unknown subsys name 'rlimit'
[   57.964081][   T30] audit: type=1400 audit(1765910687.742:65): avc:  denied  { setattr } for  pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   57.987641][   T30] audit: type=1400 audit(1765910687.742:66): avc:  denied  { create } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.027955][   T30] audit: type=1400 audit(1765910687.742:67): avc:  denied  { write } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.048902][   T30] audit: type=1400 audit(1765910687.742:68): avc:  denied  { read } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.069503][   T30] audit: type=1400 audit(1765910687.782:69): avc:  denied  { mounton } for  pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   58.095265][   T30] audit: type=1400 audit(1765910687.782:70): avc:  denied  { mount } for  pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   58.095402][ T5805] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   58.129309][   T30] audit: type=1400 audit(1765910687.912:71): avc:  denied  { relabelto } for  pid=5805 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   59.079962][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.010505][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.023981][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.044383][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.044568][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.051837][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.059863][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.066996][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   61.075028][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.081522][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.088288][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.100138][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   61.101952][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.114366][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   61.122902][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.123620][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.130997][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   61.138725][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.145237][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   61.152753][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.164974][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.170867][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.173180][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.184296][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.186716][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.200435][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.581924][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   61.702832][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   61.727567][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   61.766501][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   61.845896][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.853466][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.861511][ T5813] bridge_slave_0: entered allmulticast mode
[   61.869471][ T5813] bridge_slave_0: entered promiscuous mode
[   61.890117][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.897282][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.904520][ T5813] bridge_slave_1: entered allmulticast mode
[   61.911224][ T5813] bridge_slave_1: entered promiscuous mode
[   61.940257][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   61.975394][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.009182][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.018405][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.025613][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.032729][ T5822] bridge_slave_0: entered allmulticast mode
[   62.039462][ T5822] bridge_slave_0: entered promiscuous mode
[   62.080112][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.087512][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.094697][ T5822] bridge_slave_1: entered allmulticast mode
[   62.101434][ T5822] bridge_slave_1: entered promiscuous mode
[   62.108436][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.115676][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.122757][ T5814] bridge_slave_0: entered allmulticast mode
[   62.129564][ T5814] bridge_slave_0: entered promiscuous mode
[   62.147870][ T5813] team0: Port device team_slave_0 added
[   62.160842][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.168106][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.175320][ T5814] bridge_slave_1: entered allmulticast mode
[   62.181920][ T5814] bridge_slave_1: entered promiscuous mode
[   62.188419][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.195711][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.202781][ T5820] bridge_slave_0: entered allmulticast mode
[   62.209551][ T5820] bridge_slave_0: entered promiscuous mode
[   62.220349][ T5813] team0: Port device team_slave_1 added
[   62.239089][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.246208][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.253296][ T5820] bridge_slave_1: entered allmulticast mode
[   62.260224][ T5820] bridge_slave_1: entered promiscuous mode
[   62.278753][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.317511][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.328494][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.352719][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.359716][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.385940][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.405430][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.416374][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.426243][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.433361][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.440783][ T5824] bridge_slave_0: entered allmulticast mode
[   62.447645][ T5824] bridge_slave_0: entered promiscuous mode
[   62.454952][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.461885][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.488115][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.513431][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.522815][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.530070][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.537429][ T5824] bridge_slave_1: entered allmulticast mode
[   62.544040][ T5824] bridge_slave_1: entered promiscuous mode
[   62.558474][ T5822] team0: Port device team_slave_0 added
[   62.586791][ T5822] team0: Port device team_slave_1 added
[   62.593723][ T5814] team0: Port device team_slave_0 added
[   62.629205][ T5814] team0: Port device team_slave_1 added
[   62.636805][ T5820] team0: Port device team_slave_0 added
[   62.651531][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.676656][ T5820] team0: Port device team_slave_1 added
[   62.690310][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.699709][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.706954][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.734486][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.748917][ T5813] hsr_slave_0: entered promiscuous mode
[   62.755081][ T5813] hsr_slave_1: entered promiscuous mode
[   62.768603][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.775634][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.801657][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.819544][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.826664][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.852726][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.871655][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.878826][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.904953][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.927681][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.934642][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.960671][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.977169][ T5824] team0: Port device team_slave_0 added
[   62.991848][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.998971][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.025179][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.037449][ T5824] team0: Port device team_slave_1 added
[   63.100861][ T5814] hsr_slave_0: entered promiscuous mode
[   63.106926][ T5814] hsr_slave_1: entered promiscuous mode
[   63.112760][ T5814] debugfs: 'hsr0' already exists in 'hsr'
[   63.119026][ T5814] Cannot create hsr debugfs directory
[   63.136491][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.143441][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.169690][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.191823][ T5822] hsr_slave_0: entered promiscuous mode
[   63.195328][ T5821] Bluetooth: hci0: command tx timeout
[   63.198124][ T5822] hsr_slave_1: entered promiscuous mode
[   63.203029][ T5830] Bluetooth: hci1: command tx timeout
[   63.208981][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   63.219557][ T5822] Cannot create hsr debugfs directory
[   63.233471][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.240475][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.266439][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.274371][ T5830] Bluetooth: hci3: command tx timeout
[   63.282704][ T5817] Bluetooth: hci4: command tx timeout
[   63.288388][ T5821] Bluetooth: hci2: command tx timeout
[   63.299596][ T5820] hsr_slave_0: entered promiscuous mode
[   63.305642][ T5820] hsr_slave_1: entered promiscuous mode
[   63.311464][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   63.317351][ T5820] Cannot create hsr debugfs directory
[   63.431425][ T5824] hsr_slave_0: entered promiscuous mode
[   63.438738][ T5824] hsr_slave_1: entered promiscuous mode
[   63.444878][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   63.450590][ T5824] Cannot create hsr debugfs directory
[   63.666665][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.690438][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.702928][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.721964][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.768943][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.780959][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.791991][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.802376][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.863791][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.880117][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.899938][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.910308][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.983973][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.996307][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.009457][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.018377][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.083895][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.101489][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.111023][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.125914][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.137784][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.185496][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   64.195383][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.220595][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.227841][ T5034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.248719][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.255808][ T5034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.276574][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   64.302712][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.309834][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.322387][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.339942][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.347061][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.386561][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   64.411581][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.418698][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.441173][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.457190][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.464436][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.481079][   T30] kauditd_printk_skb: 12 callbacks suppressed
[   64.481093][   T30] audit: type=1400 audit(1765910694.262:84): avc:  denied  { sys_module } for  pid=5813 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   64.523109][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   64.568913][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.576070][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.600978][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.608075][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.643359][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.687891][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.731628][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   64.778333][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.785507][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.826321][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.833537][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.888227][ T5813] veth0_vlan: entered promiscuous mode
[   64.920922][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.942207][ T5813] veth1_vlan: entered promiscuous mode
[   65.021795][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.042246][ T5814] veth0_vlan: entered promiscuous mode
[   65.065502][ T5813] veth0_macvtap: entered promiscuous mode
[   65.084068][ T5814] veth1_vlan: entered promiscuous mode
[   65.114589][ T5813] veth1_macvtap: entered promiscuous mode
[   65.156742][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.167005][ T5814] veth0_macvtap: entered promiscuous mode
[   65.186059][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.208094][ T5814] veth1_macvtap: entered promiscuous mode
[   65.218844][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.233008][ T5822] veth0_vlan: entered promiscuous mode
[   65.255130][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.266566][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.275502][ T5821] Bluetooth: hci0: command tx timeout
[   65.281009][ T5830] Bluetooth: hci1: command tx timeout
[   65.288924][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.298585][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.311255][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.322278][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.336387][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.354444][ T5817] Bluetooth: hci4: command tx timeout
[   65.356656][ T5822] veth1_vlan: entered promiscuous mode
[   65.359897][ T5830] Bluetooth: hci3: command tx timeout
[   65.371741][ T5821] Bluetooth: hci2: command tx timeout
[   65.391602][ T3418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.401698][ T3418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.417474][ T3418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.427834][ T3418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.496710][ T5820] veth0_vlan: entered promiscuous mode
[   65.546459][ T5820] veth1_vlan: entered promiscuous mode
[   65.585181][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.593100][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.620924][ T5822] veth0_macvtap: entered promiscuous mode
[   65.640125][ T5822] veth1_macvtap: entered promiscuous mode
[   65.649208][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.657814][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.693095][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.701442][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.718964][ T5824] veth0_vlan: entered promiscuous mode
[   65.743917][   T30] audit: type=1400 audit(1765910695.522:85): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.o5eI8e/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   65.771045][   T30] audit: type=1400 audit(1765910695.522:86): avc:  denied  { mount } for  pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   65.778484][ T5824] veth1_vlan: entered promiscuous mode
[   65.798976][   T30] audit: type=1400 audit(1765910695.522:87): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.o5eI8e/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   65.828021][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.840477][ T5820] veth0_macvtap: entered promiscuous mode
[   65.851609][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.855902][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.867338][   T30] audit: type=1400 audit(1765910695.522:88): avc:  denied  { mount } for  pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   65.884846][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.899167][   T30] audit: type=1400 audit(1765910695.522:89): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.o5eI8e/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   65.931941][ T5820] veth1_macvtap: entered promiscuous mode
[   65.947411][   T30] audit: type=1400 audit(1765910695.522:90): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/root/syzkaller.o5eI8e/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   65.993145][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.002597][   T30] audit: type=1400 audit(1765910695.522:91): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   66.025286][   T30] audit: type=1400 audit(1765910695.562:92): avc:  denied  { mounton } for  pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   66.059731][ T2117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.081092][ T2117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.097952][   T30] audit: type=1400 audit(1765910695.562:93): avc:  denied  { mount } for  pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=7426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   66.100848][ T5824] veth0_macvtap: entered promiscuous mode
[   66.130963][ T2117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.148338][ T2117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.201149][ T5824] veth1_macvtap: entered promiscuous mode
[   66.213180][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.224484][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.261974][ T3418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.287695][ T3418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.304730][ T3418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.341587][ T3418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.404433][ T5935] FAULT_INJECTION: forcing a failure.
[   66.404433][ T5935] name failslab, interval 1, probability 0, space 0, times 1
[   66.417728][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) 
[   66.417744][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   66.417750][ T5935] Call Trace:
[   66.417754][ T5935]  <TASK>
[   66.417759][ T5935]  dump_stack_lvl+0x16c/0x1f0
[   66.417776][ T5935]  should_fail_ex+0x512/0x640
[   66.417791][ T5935]  ? __kmalloc_cache_noprof+0x5f/0x800
[   66.417809][ T5935]  should_failslab+0xc2/0x120
[   66.417823][ T5935]  __kmalloc_cache_noprof+0x80/0x800
[   66.417838][ T5935]  ? dev_get_by_index+0x17c/0x380
[   66.417849][ T5935]  ? bpf_xdp_link_attach+0x18c/0x900
[   66.417862][ T5935]  ? bpf_xdp_link_attach+0x18c/0x900
[   66.417872][ T5935]  bpf_xdp_link_attach+0x18c/0x900
[   66.417883][ T5935]  ? __pfx_bpf_xdp_link_attach+0x10/0x10
[   66.417893][ T5935]  ? find_held_lock+0x2b/0x80
[   66.417909][ T5935]  ? __fget_files+0x204/0x3c0
[   66.417930][ T5935]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   66.417944][ T5935]  __sys_bpf+0x2417/0x4980
[   66.417961][ T5935]  ? __pfx___sys_bpf+0x10/0x10
[   66.417974][ T5935]  ? find_held_lock+0x2b/0x80
[   66.417992][ T5935]  ? find_held_lock+0x2b/0x80
[   66.418010][ T5935]  ? __mutex_unlock_slowpath+0x161/0x790
[   66.418031][ T5935]  ? fput+0x70/0xf0
[   66.418047][ T5935]  ? ksys_write+0x1ac/0x250
[   66.418059][ T5935]  ? __pfx_ksys_write+0x10/0x10
[   66.418073][ T5935]  __x64_sys_bpf+0x78/0xc0
[   66.418087][ T5935]  ? lockdep_hardirqs_on+0x7c/0x110
[   66.418100][ T5935]  do_syscall_64+0xcd/0xf80
[   66.418113][ T5935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.418125][ T5935] RIP: 0033:0x7fc570f8f749
[   66.418133][ T5935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.418143][ T5935] RSP: 002b:00007fc571e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.418153][ T5935] RAX: ffffffffffffffda RBX: 00007fc5711e5fa0 RCX: 00007fc570f8f749
[   66.418161][ T5935] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 000000000000001c
[   66.418169][ T5935] RBP: 00007fc571e84090 R08: 0000000000000000 R09: 0000000000000000
[   66.418178][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.418186][ T5935] R13: 00007fc5711e6038 R14: 00007fc5711e5fa0 R15: 00007ffddf818588
[   66.418203][ T5935]  </TASK>
[   66.420489][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.438534][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.457852][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.678860][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.748757][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.758164][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.767282][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.776708][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.905860][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.914820][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.938070][ T2117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.946704][ T2117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.125764][ T2117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.155542][ T2117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.214964][ T5923] IPVS: starting estimator thread 0...
[   67.244414][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.252250][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.356461][ T5830] Bluetooth: hci0: command tx timeout
[   67.361925][ T5821] Bluetooth: hci1: command tx timeout
[   67.368620][ T5946] IPVS: using max 46 ests per chain, 110400 per kthread
[   67.395109][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.402922][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.434524][ T5821] Bluetooth: hci2: command tx timeout
[   67.439973][ T5821] Bluetooth: hci4: command tx timeout
[   67.448494][ T5830] Bluetooth: hci3: command tx timeout
[   67.573720][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.675637][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.777695][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.786650][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.880085][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.905518][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.186407][ T5964] netlink: 'syz.3.10': attribute type 4 has an invalid length.
[   68.194775][ T5964] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10'.
[   69.143396][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   69.315390][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'.
[   69.434485][ T5830] Bluetooth: hci0: command tx timeout
[   69.440364][ T5821] Bluetooth: hci1: command tx timeout
[   69.488956][ T5949] FAULT_INJECTION: forcing a failure.
[   69.488956][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   69.515856][ T5817] Bluetooth: hci2: command tx timeout
[   69.522305][ T5821] Bluetooth: hci3: command tx timeout
[   69.532376][ T5830] Bluetooth: hci4: command tx timeout
[   69.533890][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) 
[   69.533908][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   69.533917][ T5949] Call Trace:
[   69.533923][ T5949]  <TASK>
[   69.533928][ T5949]  dump_stack_lvl+0x16c/0x1f0
[   69.533951][ T5949]  should_fail_ex+0x512/0x640
[   69.533974][ T5949]  _copy_from_user+0x2e/0xd0
[   69.533995][ T5949]  copy_msghdr_from_user+0x98/0x160
[   69.534011][ T5949]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   69.534035][ T5949]  ___sys_sendmsg+0xfe/0x1d0
[   69.534050][ T5949]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.534088][ T5949]  __sys_sendmsg+0x16d/0x220
[   69.534102][ T5949]  ? __pfx___sys_sendmsg+0x10/0x10
[   69.534133][ T5949]  do_syscall_64+0xcd/0xf80
[   69.534152][ T5949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.534167][ T5949] RIP: 0033:0x7fc570f8f749
[   69.534179][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.534192][ T5949] RSP: 002b:00007fc571e84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.534207][ T5949] RAX: ffffffffffffffda RBX: 00007fc5711e5fa0 RCX: 00007fc570f8f749
[   69.534216][ T5949] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005
[   69.534224][ T5949] RBP: 00007fc571e84090 R08: 0000000000000000 R09: 0000000000000000
[   69.534232][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.534240][ T5949] R13: 00007fc5711e6038 R14: 00007fc5711e5fa0 R15: 00007ffddf818588
[   69.534260][ T5949]  </TASK>
[   69.584565][ T5871] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   69.644507][ T5923] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   69.743087][   T30] kauditd_printk_skb: 36 callbacks suppressed
[   69.743101][   T30] audit: type=1400 audit(1765910699.522:130): avc:  denied  { write } for  pid=5979 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   69.743498][ T5980] nftables ruleset with unbound set
[   70.732745][   T30] audit: type=1400 audit(1765910699.782:131): avc:  denied  { create } for  pid=5975 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   70.804489][ T5871] usb 2-1: Using ep0 maxpacket: 32
[   70.813182][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.824490][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.154560][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.163442][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   71.173370][   T30] audit: type=1400 audit(1765910699.822:132): avc:  denied  { create } for  pid=5977 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.194040][ T5871] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   71.202300][   T30] audit: type=1400 audit(1765910700.022:133): avc:  denied  { ioctl } for  pid=5975 comm="syz.4.14" path="socket:[7918]" dev="sockfs" ino=7918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   71.304653][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.327282][   T30] audit: type=1400 audit(1765910700.362:134): avc:  denied  { bind } for  pid=5975 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   71.339200][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.358105][ T5923] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[   71.385910][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.398704][ T5993] capability: warning: `syz.4.18' uses deprecated v2 capabilities in a way that may be insecure
[   71.481266][ T5871] usb 2-1: config 0 descriptor??
[   71.501927][ T5871] hub 2-1:0.0: USB hub found
[   71.529930][   T30] audit: type=1400 audit(1765910700.372:135): avc:  denied  { name_bind } for  pid=5975 comm="syz.4.14" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   71.551548][ T5923] usb 4-1: config 0 descriptor??
[   71.556902][   T30] audit: type=1400 audit(1765910700.372:136): avc:  denied  { node_bind } for  pid=5975 comm="syz.4.14" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   71.607678][   T30] audit: type=1400 audit(1765910700.512:137): avc:  denied  { write } for  pid=5975 comm="syz.4.14" name="icmp6" dev="proc" ino=4026533421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   71.640448][ T5995] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.997148][ T5871] hub 2-1:0.0: 1 port detected
[   71.999862][   T30] audit: type=1400 audit(1765910700.852:138): avc:  denied  { create } for  pid=5975 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   72.024430][ T5999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.089043][   T30] audit: type=1400 audit(1765910700.862:139): avc:  denied  { kexec_image_load } for  pid=5975 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   72.168878][   T49] IPVS: starting estimator thread 0...
[   72.274729][ T6007] IPVS: using max 37 ests per chain, 88800 per kthread
[   72.340530][ T5923] nintendo 0003:057E:200E.0001: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0
[   72.367495][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.384216][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   72.394249][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   72.589010][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.662461][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.675240][ T5923] nintendo 0003:057E:200E.0001: Failed charging grip handshake
[   72.696627][ T5923] nintendo 0003:057E:200E.0001: Failed to initialize controller; ret=-110
[   72.787925][ T5923] nintendo 0003:057E:200E.0001: probe - fail = -110
[   72.808464][ T5923] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -110
[   72.836883][ T5923] usb 4-1: USB disconnect, device number 2
[   72.932600][ T5871] hub 2-1:0.0: activate --> -90
[   73.806750][ T5871] usb 2-1-port1: config error
[   73.811857][    T9] usb 2-1: USB disconnect, device number 2
[   73.873084][ T6016] binder: 5970:6016 ioctl c0045002 200000000000 returned -22
[   74.147653][ T6033] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   74.208718][ T6033] erspan1: entered allmulticast mode
[   74.317926][ T6037] netlink: 720 bytes leftover after parsing attributes in process `syz.3.26'.
[   74.774251][ T5897] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   74.935186][   T30] kauditd_printk_skb: 29 callbacks suppressed
[   74.935224][   T30] audit: type=1400 audit(1765910704.702:169): avc:  denied  { read } for  pid=6045 comm="syz.1.28" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   75.215361][ T5897] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   75.237847][ T5897] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   75.253832][ T5897] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   75.278110][   T30] audit: type=1400 audit(1765910704.702:170): avc:  denied  { open } for  pid=6045 comm="syz.1.28" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   75.327641][ T5897] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   75.374927][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[   75.385526][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   75.420038][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   75.433140][   T30] audit: type=1400 audit(1765910704.872:171): avc:  denied  { unlink } for  pid=6045 comm="syz.1.28" name="#1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   75.467938][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   75.504089][   T30] audit: type=1400 audit(1765910704.892:172): avc:  denied  { mount } for  pid=6045 comm="syz.1.28" name="/" dev="overlay" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   75.531294][ T5897] usb 1-1: language id specifier not provided by device, defaulting to English
[   75.558639][ T6056] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   75.619448][   T30] audit: type=1400 audit(1765910704.982:173): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   75.650584][ T5897] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   75.926005][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.938909][ T5897] usb 1-1: Manufacturer: �
[   75.945842][ T5897] usb 1-1: config 0 descriptor??
[   75.965781][ T5897] hub 1-1:0.0: bad descriptor, ignoring hub
[   75.973987][ T5897] hub 1-1:0.0: probe with driver hub failed with error -5
[   75.981177][   T30] audit: type=1400 audit(1765910705.142:174): avc:  denied  { create } for  pid=6050 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   75.984986][ T5897] input: � as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   76.093224][   T30] audit: type=1400 audit(1765910705.142:175): avc:  denied  { connect } for  pid=6050 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   76.177082][   T30] audit: type=1400 audit(1765910705.142:176): avc:  denied  { setopt } for  pid=6050 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   76.245153][   T30] audit: type=1400 audit(1765910705.322:177): avc:  denied  { setopt } for  pid=6050 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   76.296797][   T30] audit: type=1400 audit(1765910705.362:178): avc:  denied  { create } for  pid=6055 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   76.305063][ T5897] usb 1-1: USB disconnect, device number 2
[   76.424814][ T5986] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.607894][ T6070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.844209][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   78.886416][ T6085] FAULT_INJECTION: forcing a failure.
[   78.886416][ T6085] name failslab, interval 1, probability 0, space 0, times 0
[   78.899271][ T6085] CPU: 1 UID: 0 PID: 6085 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) 
[   78.899297][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.899307][ T6085] Call Trace:
[   78.899313][ T6085]  <TASK>
[   78.899319][ T6085]  dump_stack_lvl+0x16c/0x1f0
[   78.899344][ T6085]  should_fail_ex+0x512/0x640
[   78.899368][ T6085]  ? __kmalloc_cache_noprof+0x5f/0x800
[   78.899396][ T6085]  should_failslab+0xc2/0x120
[   78.899419][ T6085]  __kmalloc_cache_noprof+0x80/0x800
[   78.899445][ T6085]  ? getname_flags.part.0+0x292/0x550
[   78.899466][ T6085]  ? getname_flags.part.0+0x292/0x550
[   78.899482][ T6085]  getname_flags.part.0+0x292/0x550
[   78.899501][ T6085]  getname_flags+0x93/0xf0
[   78.899521][ T6085]  __x64_sys_rename+0x58/0xa0
[   78.899537][ T6085]  do_syscall_64+0xcd/0xf80
[   78.899559][ T6085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.899576][ T6085] RIP: 0033:0x7fc570f8f749
[   78.899590][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.899605][ T6085] RSP: 002b:00007fc571e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   78.899622][ T6085] RAX: ffffffffffffffda RBX: 00007fc5711e5fa0 RCX: 00007fc570f8f749
[   78.899632][ T6085] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000200000000240
[   78.899642][ T6085] RBP: 00007fc571e84090 R08: 0000000000000000 R09: 0000000000000000
[   78.899651][ T6085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.899660][ T6085] R13: 00007fc5711e6038 R14: 00007fc5711e5fa0 R15: 00007ffddf818588
[   78.899683][ T6085]  </TASK>
[   79.297736][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37'.
[   79.330866][ T6087] kAFS: unable to lookup cell ''
[   79.339290][ T5923] usb 4-1: Using ep0 maxpacket: 16
[   79.352625][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.364551][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.381380][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   79.397071][ T5923] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   79.406418][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.432145][ T5923] usb 4-1: config 0 descriptor??
[   79.433746][ T6089] Illegal XDP return value 4294967294 on prog  (id 13) dev N/A, expect packet loss!
[   79.869232][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.912734][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.915388][ T6082] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   80.098715][ T6100] netlink: 504 bytes leftover after parsing attributes in process `syz.3.34'.
[   80.155807][ T6082] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   80.164107][ T6082] usb 3-1: config 0 has no interface number 0
[   80.173220][ T6082] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   80.184912][ T6082] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   80.196195][ T6082] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   80.212868][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.246876][ T6082] usb 3-1: config 0 descriptor??
[   80.275436][ T6091] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   80.328562][ T6082] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   80.529926][   T30] kauditd_printk_skb: 9 callbacks suppressed
[   80.529940][   T30] audit: type=1400 audit(1765910710.312:188): avc:  denied  { write } for  pid=6090 comm="syz.2.39" name="iowarrior0" dev="devtmpfs" ino=2802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   80.905094][ T5871] usb 3-1: USB disconnect, device number 2
[   81.222579][   T89] cfg80211: failed to load regulatory.db
[   81.391427][ T5923] usbhid 4-1:0.0: can't add hid device: -71
[   81.414385][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   81.445140][ T5923] usb 4-1: USB disconnect, device number 3
[   81.769240][   T30] audit: type=1400 audit(1765910711.552:189): avc:  denied  { firmware_load } for  pid=6114 comm="syz.3.45" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   81.774255][ T6082] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   82.015940][ T6118] syz.3.45 (6118) used greatest stack depth: 19688 bytes left
[   82.160281][ T6123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.164532][ T6082] usb 3-1: Using ep0 maxpacket: 32
[   82.173497][   T30] audit: type=1400 audit(1765910711.952:190): avc:  denied  { ioctl } for  pid=6122 comm="syz.0.48" path="socket:[8070]" dev="sockfs" ino=8070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   82.219177][ T6082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.242953][ T6082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.259115][ T6082] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   82.275719][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.294468][ T6082] usb 3-1: config 0 descriptor??
[   82.301683][ T6082] hub 3-1:0.0: USB hub found
[   82.365834][ T6134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.447592][   T30] audit: type=1400 audit(1765910712.212:191): avc:  denied  { create } for  pid=6131 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   83.170156][ T6082] hub 3-1:0.0: 1 port detected
[   83.462738][   T30] audit: type=1400 audit(1765910713.242:192): avc:  denied  { setopt } for  pid=6143 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   83.695856][   T30] audit: type=1400 audit(1765910713.272:193): avc:  denied  { setopt } for  pid=6143 comm="syz.3.53" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.793272][ T6082] hub 3-1:0.0: activate --> -90
[   83.809322][ T5884] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   83.822607][   T30] audit: type=1326 audit(1765910713.572:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.55" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2438f749 code=0x0
[   84.055623][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   84.066318][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   84.078080][ T5884] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   84.089407][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.097605][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   84.111044][ T5884] usb 4-1: Product: syz
[   84.115352][ T5884] usb 4-1: Manufacturer: syz
[   84.120527][ T5884] usb 4-1: SerialNumber: syz
[   84.314064][ T5884] usb 4-1: config 0 descriptor??
[   84.341434][ T6082] usb 3-1-port1: config error
[   84.369670][ T5923] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   84.406481][ T6082] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[   84.435881][ T5988] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   84.457296][ T5884] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress d4
[   84.473131][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   84.489888][ T6082] usb 3-1-port1: cannot disable (err = -71)
[   84.506459][ T5986] usb 3-1: USB disconnect, device number 3
[   84.513254][ T5923] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[   84.530963][ T6142] binder: 6116:6142 ioctl c0045002 200000000000 returned -22
[   84.544461][ T5923] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   84.554337][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.563183][ T5923] usb 2-1: Product: syz
[   84.567563][ T5923] usb 2-1: Manufacturer: syz
[   84.572987][ T5923] usb 2-1: SerialNumber: syz
[   84.585426][ T5923] usb 2-1: config 0 descriptor??
[   84.595021][ T6150] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   84.604224][ T5988] usb 1-1: Using ep0 maxpacket: 16
[   84.605359][ T6150] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   84.610813][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.625182][ T5923] usb 2-1: ucan: probing device on interface #0
[   84.627717][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.643595][ T5988] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   84.662620][ T5988] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   84.676252][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.687098][ T5988] usb 1-1: config 0 descriptor??
[   84.726378][ T5884] usb 4-1: USB disconnect, device number 4
[   84.810831][ T6158] udevd[6158]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.926314][ T5923] usb 2-1: ucan: failed to retrieve device info
[   85.932603][ T5923] usb 2-1: ucan: probe failed; try to update the device firmware
[   85.963245][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.734177][   T30] audit: type=1400 audit(1765910715.752:195): avc:  denied  { connect } for  pid=6148 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   86.774385][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.804047][   T30] audit: type=1400 audit(1765910716.582:196): avc:  denied  { listen } for  pid=6148 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   86.880779][ T6165] netlink: 504 bytes leftover after parsing attributes in process `syz.0.55'.
[   86.951294][   T30] audit: type=1400 audit(1765910716.612:197): avc:  denied  { accept } for  pid=6148 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   86.953856][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'.
[   87.123082][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   87.398024][   T30] audit: type=1400 audit(1765910717.182:198): avc:  denied  { read write } for  pid=6178 comm="syz.3.61" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   87.467163][   T30] audit: type=1400 audit(1765910717.212:199): avc:  denied  { open } for  pid=6178 comm="syz.3.61" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   87.641624][   T30] audit: type=1400 audit(1765910717.422:200): avc:  denied  { mounton } for  pid=6183 comm="syz.4.64" path="/15" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   87.787859][   T30] audit: type=1400 audit(1765910717.572:201): avc:  denied  { getopt } for  pid=6178 comm="syz.3.61" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   88.237386][   T30] audit: type=1400 audit(1765910718.022:202): avc:  denied  { ioctl } for  pid=6187 comm="syz.2.65" path="socket:[8167]" dev="sockfs" ino=8167 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   88.554825][ T5988] usbhid 1-1:0.0: can't add hid device: -71
[   88.560778][ T5988] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   88.610150][ T5988] usb 1-1: USB disconnect, device number 3
[   88.622295][   T30] audit: type=1400 audit(1765910718.402:203): avc:  denied  { read write } for  pid=6190 comm="syz.0.66" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   88.691949][ T6196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.910374][ T6012] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   89.020529][ T6012] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   89.068040][   T30] audit: type=1400 audit(1765910718.402:204): avc:  denied  { open } for  pid=6190 comm="syz.0.66" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   89.425693][ T6012] usb 2-1: USB disconnect, device number 4
[   92.806447][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   92.806461][   T30] audit: type=1400 audit(1765910722.592:210): avc:  denied  { setopt } for  pid=6213 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   93.691739][   T30] audit: type=1400 audit(1765910723.072:211): avc:  denied  { accept } for  pid=6216 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   93.862129][   T30] audit: type=1400 audit(1765910723.212:212): avc:  denied  { write } for  pid=6216 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   93.885067][   T30] audit: type=1400 audit(1765910723.532:213): avc:  denied  { read } for  pid=6213 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   94.044455][   T30] audit: type=1326 audit(1765910723.832:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.1.76" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d18f749 code=0x0
[   94.364411][ T5818] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   94.379774][ T6211] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.364225][ T5818] usb 2-1: Using ep0 maxpacket: 16
[   95.371804][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.382898][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.416736][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.433940][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   95.450128][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.471155][ T5818] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   95.480431][ T6211] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   95.500408][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.515649][ T6211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.525730][ T6211] usb 3-1: config 0 descriptor??
[   95.535215][ T5818] usb 2-1: config 0 descriptor??
[   95.611884][ T6259] ALSA: seq fatal error: cannot create timer (-22)
[   95.926970][ T6264] ALSA: seq fatal error: cannot create timer (-22)
[   96.023317][ T6012] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   96.337034][ T6211] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[   96.351068][ T6012] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   96.351192][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.382617][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.409977][ T6012] usb 3-1: USB disconnect, device number 4
[   96.472000][ T6273] netlink: 504 bytes leftover after parsing attributes in process `syz.1.76'.
[   96.905767][   T30] audit: type=1400 audit(1765910726.682:215): avc:  denied  { read write } for  pid=6277 comm="syz.0.88" name="mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   97.142976][   T30] audit: type=1400 audit(1765910726.692:216): avc:  denied  { open } for  pid=6277 comm="syz.0.88" path="/dev/input/mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   97.736985][ T5818] usbhid 2-1:0.0: can't add hid device: -71
[   97.743550][ T5818] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   97.759351][ T5818] usb 2-1: USB disconnect, device number 5
[   98.024569][    T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   98.160420][ T6307] hub 6-0:1.0: USB hub found
[   98.166925][ T6307] hub 6-0:1.0: 1 port detected
[   98.227826][   T30] audit: type=1400 audit(1765910727.892:217): avc:  denied  { relabelfrom } for  pid=6294 comm="syz.2.95" name="" dev="pipefs" ino=9489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   98.444594][   T30] audit: type=1400 audit(1765910727.902:218): avc:  denied  { map } for  pid=6294 comm="syz.2.95" path="pipe:[9489]" dev="pipefs" ino=9489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dhcp_state_t tclass=fifo_file permissive=1
[   98.587004][ T6314] ALSA: seq fatal error: cannot create timer (-22)
[   98.605575][    T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 232, setting to 64
[   98.628214][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[   98.741713][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   98.753974][    T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   98.764204][    T9] usb 5-1: Product: syz
[   98.774536][    T9] usb 5-1: Manufacturer: syz
[   98.782645][    T9] usb 5-1: SerialNumber: syz
[   98.872381][   T30] audit: type=1400 audit(1765910728.622:219): avc:  denied  { create } for  pid=6317 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   98.897181][    T9] usb 5-1: config 0 descriptor??
[   98.903430][ T6291] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   99.288075][    T9] usb 5-1: selecting invalid altsetting 0
[   99.315472][   T30] audit: type=1400 audit(1765910728.632:220): avc:  denied  { setopt } for  pid=6317 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   99.352719][   T30] audit: type=1400 audit(1765910728.682:221): avc:  denied  { map } for  pid=6317 comm="syz.0.101" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   99.395626][   T30] audit: type=1400 audit(1765910729.182:222): avc:  denied  { create } for  pid=6325 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.515957][   T30] audit: type=1400 audit(1765910729.212:223): avc:  denied  { write } for  pid=6325 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.574314][   T30] audit: type=1326 audit(1765910729.272:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c2438f749 code=0x0
[  100.184681][    T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  100.409947][    T9] usb 1-1: device descriptor read/64, error -71
[  100.664350][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  100.794606][    T9] usb 1-1: device descriptor read/64, error -71
[  100.843338][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.944803][    T9] usb usb1-port1: attempt power cycle
[  101.024209][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  101.036747][ T5923] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65
[  101.051540][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.066113][ T5923] usb 2-1: Product: syz
[  101.073445][ T5923] usb 2-1: Manufacturer: syz
[  101.081736][ T5923] usb 2-1: SerialNumber: syz
[  101.095604][ T5923] usb 2-1: config 0 descriptor??
[  101.107781][ T5923] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  101.184580][ T5884] usb 5-1: USB disconnect, device number 2
[  101.267303][   T30] audit: type=1400 audit(1765910731.052:225): avc:  denied  { create } for  pid=6360 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  101.294224][    T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  101.306943][ T5923] gspca_vc032x: reg_w err -71
[  101.312690][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.322082][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.322401][    T9] usb 1-1: device descriptor read/8, error -71
[  101.337272][   T30] audit: type=1400 audit(1765910731.122:226): avc:  denied  { create } for  pid=6353 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  101.341043][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.367179][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.372641][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.379220][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.386755][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.393338][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.399873][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.407310][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.439787][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.445553][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.450984][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.456954][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.463241][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.473326][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.478739][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.486490][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.491864][ T5923] gspca_vc032x: I2c Bus Busy Wait 00
[  101.499540][ T5923] gspca_vc032x: Unknown sensor...
[  101.507260][ T5923] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  101.521332][ T5923] usb 2-1: USB disconnect, device number 6
[  101.574189][    T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  101.605721][    T9] usb 1-1: device descriptor read/8, error -71
[  101.775870][    T9] usb usb1-port1: unable to enumerate USB device
[  102.983212][ T6379] ALSA: seq fatal error: cannot create timer (-22)
[  102.990128][ T6383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.173413][ T6386] Invalid logical block size (8209)
[  103.321641][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  103.321658][   T30] audit: type=1400 audit(1765910732.942:230): avc:  denied  { append } for  pid=6382 comm="syz.4.117" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.462364][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'.
[  103.492490][   T30] audit: type=1400 audit(1765910733.162:231): avc:  denied  { create } for  pid=6384 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.534591][   T30] audit: type=1400 audit(1765910733.162:232): avc:  denied  { connect } for  pid=6384 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.976638][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[  104.062245][   T30] audit: type=1400 audit(1765910733.842:233): avc:  denied  { create } for  pid=6401 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  104.128344][   T30] audit: type=1400 audit(1765910733.872:234): avc:  denied  { setopt } for  pid=6401 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  104.879398][   T30] audit: type=1400 audit(1765910734.302:235): avc:  denied  { shutdown } for  pid=6405 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  104.912229][ T6412] ceph: No mds server is up or the cluster is laggy
[  104.920216][ T6211] libceph: connect (1)[c::]:6789 error -101
[  104.939678][ T6211] libceph: mon0 (1)[c::]:6789 connect error
[  104.962119][   T30] audit: type=1326 audit(1765910734.722:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6410 comm="syz.3.127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b6398f749 code=0x0
[  105.324214][ T6211] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  105.516427][ T6211] usb 4-1: device descriptor read/64, error -71
[  105.606869][   T30] audit: type=1400 audit(1765910735.392:237): avc:  denied  { ioctl } for  pid=6429 comm="syz.1.130" path="socket:[10603]" dev="sockfs" ino=10603 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.696190][ T6432] loop6: detected capacity change from 0 to 2640
[  105.704253][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.712298][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.721012][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.730478][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.738719][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.756765][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.765235][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.777072][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.785365][ T6432] ldm_validate_partition_table(): Disk read failed.
[  105.785561][ T6430] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET)
[  105.792126][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.806662][ T6432] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.814909][ T6432] Dev loop6: unable to read RDB block 0
[  105.821327][ T6432]  loop6: unable to read partition table
[  105.828039][ T6432] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  106.012802][   T30] audit: type=1400 audit(1765910735.592:238): avc:  denied  { ioctl } for  pid=6422 comm="syz.0.129" path="socket:[9654]" dev="sockfs" ino=9654 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  106.064220][ T6211] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  106.269047][   T30] audit: type=1400 audit(1765910736.052:239): avc:  denied  { create } for  pid=6437 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  106.331226][ T6438] =======================================================
[  106.331226][ T6438] WARNING: The mand mount option has been deprecated and
[  106.331226][ T6438]          and is ignored by this kernel. Remove the mand
[  106.331226][ T6438]          option from the mount to silence this warning.
[  106.331226][ T6438] =======================================================
[  106.444641][ T6211] usb 4-1: device descriptor read/64, error -71
[  106.565641][ T6211] usb usb4-port1: attempt power cycle
[  106.971951][ T6211] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  107.006602][ T6211] usb 4-1: device descriptor read/8, error -71
[  107.053713][ T6443] ALSA: seq fatal error: cannot create timer (-22)
[  107.254193][ T6211] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  107.295519][ T6211] usb 4-1: device descriptor read/8, error -71
[  107.355575][ T6464] netlink: 830 bytes leftover after parsing attributes in process `syz.4.135'.
[  107.375381][ T6459] process 'syz.2.133' launched './file2' with NULL argv: empty string added
[  107.397441][ T6464] bond_slave_0: entered promiscuous mode
[  107.403236][ T6464] bond_slave_1: entered promiscuous mode
[  107.404718][ T6211] usb usb4-port1: unable to enumerate USB device
[  107.890381][ T6014] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.214260][ T6014] usb 5-1: Using ep0 maxpacket: 16
[  108.223581][ T6014] usb 5-1: config 8 has an invalid interface number: 143 but max is 0
[  108.249804][ T6482] ALSA: seq fatal error: cannot create timer (-22)
[  108.282911][ T6014] usb 5-1: config 8 has no interface number 0
[  108.350763][ T6014] usb 5-1: config 8 interface 143 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64
[  108.413282][ T6014] usb 5-1: config 8 interface 143 has no altsetting 0
[  108.432668][ T6014] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=71.6b
[  108.467774][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.481890][ T6014] usb 5-1: Product: syz
[  108.514184][ T6014] usb 5-1: Manufacturer: syz
[  108.518808][ T6014] usb 5-1: SerialNumber: syz
[  108.792853][ T6014] kvaser_usb 5-1:8.143: error -ENODEV: Cannot get usb endpoint(s)
[  108.808972][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  108.808987][   T30] audit: type=1400 audit(1765910738.592:262): avc:  denied  { read } for  pid=6493 comm="syz.3.140" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  108.820179][ T6014] usb 5-1: USB disconnect, device number 3
[  108.891718][   T30] audit: type=1400 audit(1765910738.632:263): avc:  denied  { open } for  pid=6493 comm="syz.3.140" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  108.945017][   T30] audit: type=1400 audit(1765910738.662:264): avc:  denied  { ioctl } for  pid=6493 comm="syz.3.140" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  109.004337][   T30] audit: type=1400 audit(1765910738.672:265): avc:  denied  { create } for  pid=6493 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  109.143327][   T30] audit: type=1400 audit(1765910738.702:266): avc:  denied  { ioctl } for  pid=6493 comm="syz.3.140" path="socket:[10720]" dev="sockfs" ino=10720 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  110.656843][   T30] audit: type=1326 audit(1765910740.442:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.2.147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc570f8f749 code=0x0
[  110.950684][   T30] audit: type=1400 audit(1765910740.732:268): avc:  denied  { setopt } for  pid=6542 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  110.974229][ T5884] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  111.114381][ T5884] usb 3-1: device descriptor read/64, error -71
[  111.168720][ T6550] binder: 6542:6550 ioctl 4018620d 0 returned -22
[  111.351675][   T30] audit: type=1400 audit(1765910741.132:269): avc:  denied  { create } for  pid=6552 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  111.465383][ T6558] Zero length message leads to an empty skb
[  111.488777][ T5884] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  111.504503][   T30] audit: type=1400 audit(1765910741.132:270): avc:  denied  { getopt } for  pid=6552 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  111.681625][ T5884] usb 3-1: device descriptor read/64, error -71
[  111.879906][ T5884] usb usb3-port1: attempt power cycle
[  111.996298][ T6571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.224219][ T5884] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  112.391123][ T5943] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  112.723657][   T30] audit: type=1400 audit(1765910742.432:271): avc:  denied  { append } for  pid=6577 comm="syz.1.154" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  112.865451][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.939571][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.012397][ T5943] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  113.055429][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.114042][ T5943] usb 5-1: config 0 descriptor??
[  113.933440][ T5943] usbhid 5-1:0.0: can't add hid device: -71
[  113.953227][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  114.002338][ T6014] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  114.063186][ T5943] usb 5-1: USB disconnect, device number 4
[  114.114464][ T5884] usb 3-1: device descriptor read/8, error -71
[  114.201358][   T30] audit: type=1400 audit(1765910743.982:272): avc:  denied  { create } for  pid=6586 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  114.256625][ T6591] netlink: 'syz.1.154': attribute type 10 has an invalid length.
[  114.294370][ T6014] usb 4-1: Using ep0 maxpacket: 32
[  114.354646][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.367781][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.509124][ T6014] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  114.518447][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.548092][ T5943] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  114.663540][ T6014] usb 4-1: config 0 descriptor??
[  114.733042][ T6599] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  114.799166][ T5943] usb 5-1: Using ep0 maxpacket: 32
[  115.092962][ T5943] usb 5-1: device descriptor read/all, error -71
[  115.549764][ T6014] hub 4-1:0.0: USB hub found
[  115.764719][ T6014] hub 4-1:0.0: 1 port detected
[  116.416381][ T6014] hub 4-1:0.0: activate --> -90
[  116.943012][ T6014] usb 4-1-port1: config error
[  116.943296][ T5884] usb 4-1: USB disconnect, device number 9
[  118.007274][   T30] audit: type=1400 audit(1765910747.792:273): avc:  denied  { setopt } for  pid=6652 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.236149][   T30] audit: type=1326 audit(1765910747.792:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.1.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d18f749 code=0x0
[  118.330250][   T30] audit: type=1400 audit(1765910747.842:275): avc:  denied  { getopt } for  pid=6652 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  118.425207][ T6014] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  118.604209][ T6014] usb 2-1: Using ep0 maxpacket: 16
[  118.612313][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.623676][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.653227][ T6014] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  118.687448][ T6014] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  118.704997][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.754270][ T5943] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  118.799200][ T6014] usb 2-1: config 0 descriptor??
[  118.944436][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  119.009920][ T6672] ALSA: seq fatal error: cannot create timer (-22)
[  119.184465][ T5943] usb 3-1: config 0 has an invalid interface number: 220 but max is 0
[  119.202935][ T5943] usb 3-1: config 0 has no interface number 0
[  119.216310][ T5943] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=c5.ea
[  119.237431][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.266032][ T5943] usb 3-1: Product: syz
[  119.274440][ T5943] usb 3-1: Manufacturer: syz
[  119.294210][ T5943] usb 3-1: SerialNumber: syz
[  119.313543][ T5943] usb 3-1: config 0 descriptor??
[  119.320330][ T5943] gspca_main: sunplus-2.14.0 probing 052b:1803
[  119.338904][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  119.346306][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  119.353265][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  119.360598][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  119.367562][ T6014] shield 0003:0955:7214.0005: unknown main item tag 0x0
[  119.379864][ T6014] input: HID 0955:7214 Haptics as /devices/virtual/input/input6
[  119.412103][ T6014] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[  119.444388][ T6014] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  119.543213][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.551949][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.574274][   T30] audit: type=1400 audit(1765910749.352:276): avc:  denied  { getopt } for  pid=6673 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  119.601611][   T30] audit: type=1400 audit(1765910749.382:277): avc:  denied  { connect } for  pid=6668 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  119.631878][ T6676] netlink: 504 bytes leftover after parsing attributes in process `syz.1.166'.
[  119.804227][ T5988] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  119.995730][ T5988] usb 4-1: config index 0 descriptor too short (expected 530, got 18)
[  120.004030][ T5988] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  120.013219][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.476322][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  120.675298][ T5943] usb 2-1: reset high-speed USB device number 7 using dummy_hcd
[  121.011132][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  121.023026][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  121.036616][ T5988] usb 4-1: config 0 descriptor??
[  121.042038][    T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  121.498816][ T5988] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  121.529605][ T5884] usb 3-1: USB disconnect, device number 9
[  121.674327][ T5821] Bluetooth: hci4: command 0x0405 tx timeout
[  121.694298][   T30] audit: type=1400 audit(1765910751.352:278): avc:  denied  { setopt } for  pid=6701 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.713484][ T6014] usb 2-1: USB disconnect, device number 7
[  122.834265][   T30] audit: type=1400 audit(1765910751.522:279): avc:  denied  { create } for  pid=6701 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  122.834298][   T30] audit: type=1400 audit(1765910751.522:280): avc:  denied  { read } for  pid=6701 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.895048][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  123.986003][ T5818] usb 4-1: USB disconnect, device number 10
[  124.058752][   T30] audit: type=1400 audit(1765910753.842:281): avc:  denied  { read write } for  pid=6707 comm="syz.3.177" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  124.085925][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  124.086807][   T30] audit: type=1400 audit(1765910753.842:282): avc:  denied  { open } for  pid=6707 comm="syz.3.177" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  124.128208][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.139286][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.184152][ T5884] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  124.208338][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.218936][ T5884] usb 3-1: config 0 descriptor??
[  124.251619][   T30] audit: type=1400 audit(1765910753.842:283): avc:  denied  { ioctl } for  pid=6707 comm="syz.3.177" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  124.252913][ T5884] hub 3-1:0.0: USB hub found
[  124.434304][ T5884] hub 3-1:0.0: 1 port detected
[  125.109488][ T5884] hub 3-1:0.0: activate --> -90
[  125.263279][ T6725] Cannot find add_set index 0 as target
[  125.776768][ T5884] usb 3-1-port1: config error
[  125.792067][ T5818] usb 3-1: USB disconnect, device number 10
[  125.822623][ T6733] binder: 6699:6733 ioctl c0045002 200000000000 returned -22
[  126.032228][   T30] audit: type=1326 audit(1765910755.812:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26cad8f749 code=0x0
[  126.374267][ T5818] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  126.554200][ T5818] usb 5-1: Using ep0 maxpacket: 16
[  126.561043][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.601501][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.637357][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  126.784858][   T30] audit: type=1400 audit(1765910756.572:285): avc:  denied  { map } for  pid=6753 comm="syz.0.188" path="socket:[11094]" dev="sockfs" ino=11094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  126.879457][   T30] audit: type=1400 audit(1765910756.602:286): avc:  denied  { read accept } for  pid=6753 comm="syz.0.188" path="socket:[11094]" dev="sockfs" ino=11094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  127.071540][   T30] audit: type=1400 audit(1765910756.602:287): avc:  denied  { write } for  pid=6753 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  127.188605][   T30] audit: type=1400 audit(1765910756.612:288): avc:  denied  { mounton } for  pid=6750 comm="syz.2.189" path="/38/file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  127.274047][   T30] audit: type=1400 audit(1765910756.612:289): avc:  denied  { mount } for  pid=6750 comm="syz.2.189" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  127.726636][ T5818] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  127.735729][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.744902][ T5818] usb 5-1: config 0 descriptor??
[  128.311587][ T6763] ALSA: seq fatal error: cannot create timer (-22)
[  128.328859][ T5818] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  128.371301][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.393629][ T5818] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  128.404433][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.416222][ T5818] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  128.435516][ T5818] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  128.445045][ T5818] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  128.481194][ T5818] input: HID 0955:7214 Haptics as /devices/virtual/input/input7
[  128.496404][ T6767] netlink: 504 bytes leftover after parsing attributes in process `syz.4.184'.
[  128.789026][ T5818] shield 0003:0955:7214.0006: Registered Thunderstrike controller
[  128.836341][ T5818] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  129.018451][ T6772] ALSA: seq fatal error: cannot create timer (-22)
[  129.515077][ T6777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.070630][ T6082] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  130.245225][ T6082] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  130.309689][   T30] audit: type=1400 audit(1765910760.092:290): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  130.314818][ T5818] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  130.392273][ T6082] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  130.423674][ T6785] Cannot find add_set index 0 as target
[  130.658006][ T6082] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  130.859886][   T30] audit: type=1400 audit(1765910760.592:291): avc:  denied  { sqpoll } for  pid=6789 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  131.263619][   T30] audit: type=1400 audit(1765910761.012:292): avc:  denied  { read } for  pid=6789 comm="syz.4.196" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  131.330727][    C1] sd 0:0:1:0: [sda] tag#540 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  131.341064][    C1] sd 0:0:1:0: [sda] tag#540 CDB: Read(6) 08 00 00 00 03 44
[  131.425125][ T5986] usb 5-1: USB disconnect, device number 7
[  131.623419][   T30] audit: type=1400 audit(1765910761.012:293): avc:  denied  { open } for  pid=6789 comm="syz.4.196" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  131.904712][   T30] audit: type=1400 audit(1765910761.112:294): avc:  denied  { ioctl } for  pid=6789 comm="syz.4.196" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  132.377211][ T6817] ALSA: seq fatal error: cannot create timer (-22)
[  132.399789][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.514421][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  132.534569][ T6818] ALSA: seq fatal error: cannot create timer (-22)
[  132.874217][ T6014] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  133.037127][ T6014] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.047350][ T6014] usb 5-1: config 0 interface 0 has no altsetting 0
[  133.053964][ T6014] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00
[  133.074210][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.093664][ T6014] usb 5-1: config 0 descriptor??
[  133.377971][   T30] audit: type=1400 audit(1765910763.142:295): avc:  denied  { mounton } for  pid=6824 comm="syz.0.204" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  133.406836][ T6828] affs: No valid root block on device nullb0
[  133.653252][   T30] audit: type=1326 audit(1765910763.432:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b6398f749 code=0x0
[  133.736416][ T6836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  133.832640][ T6840] ieee802154 phy0 wpan0: encryption failed: -22
[  133.887708][   T30] audit: type=1400 audit(1765910762.624:297): avc:  denied  { create } for  pid=6834 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  133.933729][   T30] audit: type=1400 audit(1765910762.624:298): avc:  denied  { write } for  pid=6834 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  133.959164][   T30] audit: type=1400 audit(1765910762.724:299): avc:  denied  { ioctl } for  pid=6834 comm="syz.1.207" path="socket:[12296]" dev="sockfs" ino=12296 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  133.993289][ T5943] usb 5-1: USB disconnect, device number 8
[  134.044470][ T6014] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  134.098284][ T6845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.214174][ T6014] usb 4-1: Using ep0 maxpacket: 16
[  134.245581][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.256749][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.266519][ T6014] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  134.279335][ T6014] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  134.309572][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.336720][ T6014] usb 4-1: config 0 descriptor??
[  134.382444][   T30] audit: type=1400 audit(1765910763.174:300): avc:  denied  { create } for  pid=6843 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  134.777297][ T6014] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  134.910601][ T6014] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  134.917937][ T6014] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  134.924940][ T6014] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  134.932251][ T6014] shield 0003:0955:7214.0008: unknown main item tag 0x0
[  134.993106][ T6014] input: HID 0955:7214 Haptics as /devices/virtual/input/input8
[  135.081176][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.086354][ T6014] shield 0003:0955:7214.0008: Registered Thunderstrike controller
[  135.099349][ T6857] Cannot find add_set index 0 as target
[  135.132027][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.132491][ T6014] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  135.390028][ T6862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.449895][ T6861] netlink: 504 bytes leftover after parsing attributes in process `syz.3.206'.
[  137.955578][ T5943] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  137.967525][ T5943] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  138.084176][    T9] usb 4-1: reset high-speed USB device number 11 using dummy_hcd
[  138.104400][ T5943] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  138.264671][ T5943] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  138.970846][ T6014] usb 4-1: USB disconnect, device number 11
[  140.459998][ T6908] FAULT_INJECTION: forcing a failure.
[  140.459998][ T6908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.479207][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) 
[  140.479224][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.479230][ T6908] Call Trace:
[  140.479234][ T6908]  <TASK>
[  140.479238][ T6908]  dump_stack_lvl+0x16c/0x1f0
[  140.479255][ T6908]  should_fail_ex+0x512/0x640
[  140.479273][ T6908]  _copy_from_iter+0x2a4/0x16c0
[  140.479290][ T6908]  ? __alloc_skb+0x220/0x410
[  140.479305][ T6908]  ? __alloc_skb+0x35d/0x410
[  140.479320][ T6908]  ? __pfx__copy_from_iter+0x10/0x10
[  140.479333][ T6908]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  140.479346][ T6908]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  140.479363][ T6908]  netlink_sendmsg+0x820/0xdd0
[  140.479378][ T6908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.479394][ T6908]  ____sys_sendmsg+0xa5d/0xc30
[  140.479408][ T6908]  ? copy_msghdr_from_user+0x10a/0x160
[  140.479418][ T6908]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.479436][ T6908]  ___sys_sendmsg+0x134/0x1d0
[  140.479446][ T6908]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.479470][ T6908]  __sys_sendmsg+0x16d/0x220
[  140.479480][ T6908]  ? __pfx___sys_sendmsg+0x10/0x10
[  140.479497][ T6908]  do_syscall_64+0xcd/0xf80
[  140.479511][ T6908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.479522][ T6908] RIP: 0033:0x7f5b6398f749
[  140.479530][ T6908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.479540][ T6908] RSP: 002b:00007f5b6473e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.479550][ T6908] RAX: ffffffffffffffda RBX: 00007f5b63be5fa0 RCX: 00007f5b6398f749
[  140.479556][ T6908] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  140.479562][ T6908] RBP: 00007f5b6473e090 R08: 0000000000000000 R09: 0000000000000000
[  140.479567][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.479573][ T6908] R13: 00007f5b63be6038 R14: 00007f5b63be5fa0 R15: 00007ffd693da4f8
[  140.479585][ T6908]  </TASK>
[  140.939554][   T30] audit: type=1400 audit(1765910769.484:301): avc:  denied  { mounton } for  pid=6905 comm="syz.1.222" path="/proc/158/task" dev="proc" ino=11490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  141.099781][ T6918] Bluetooth: MGMT ver 1.23
[  141.125324][   T30] audit: type=1400 audit(1765910769.884:302): avc:  denied  { bind } for  pid=6917 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  141.214369][   T30] audit: type=1400 audit(1765910769.884:303): avc:  denied  { name_bind } for  pid=6917 comm="syz.1.226" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  141.304402][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  141.317149][   T30] audit: type=1400 audit(1765910769.884:304): avc:  denied  { node_bind } for  pid=6917 comm="syz.1.226" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  141.402529][   T30] audit: type=1400 audit(1765910769.884:305): avc:  denied  { write } for  pid=6917 comm="syz.1.226" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  141.444088][   T30] audit: type=1400 audit(1765910769.884:306): avc:  denied  { name_connect } for  pid=6917 comm="syz.1.226" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  141.477826][    T9] usb 4-1: Using ep0 maxpacket: 32
[  141.505687][   T30] audit: type=1400 audit(1765910769.894:307): avc:  denied  { bind } for  pid=6917 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.548802][   T30] audit: type=1400 audit(1765910769.894:308): avc:  denied  { write } for  pid=6917 comm="syz.1.226" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.554887][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.579939][   T30] audit: type=1400 audit(1765910769.894:309): avc:  denied  { write } for  pid=6917 comm="syz.1.226" path="socket:[12395]" dev="sockfs" ino=12395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.634202][ T5988] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  141.645025][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.666967][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  141.688389][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.718322][    T9] usb 4-1: config 0 descriptor??
[  141.737027][    T9] hub 4-1:0.0: USB hub found
[  141.798262][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.809236][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.819514][ T5988] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  141.911594][ T6928] netlink: 144 bytes leftover after parsing attributes in process `syz.4.230'.
[  141.934541][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.961549][    T9] hub 4-1:0.0: 1 port detected
[  141.969151][ T5988] usb 2-1: config 0 descriptor??
[  142.039225][   T30] audit: type=1400 audit(1765910770.834:310): avc:  denied  { unmount } for  pid=6929 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  142.532600][ T6935] ALSA: seq fatal error: cannot create timer (-22)
[  142.563455][ T5988] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  142.590160][ T5988] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  142.670263][    T9] hub 4-1:0.0: activate --> -90
[  142.763621][ T5988] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE
[  142.876650][    T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  142.880914][ T5986] usb 4-1: USB disconnect, device number 12
[  142.967216][ T6939] binder: 6912:6939 ioctl c0045002 200000000000 returned -22
[  144.120939][ T6923] cp2112 0003:10C4:EA90.0009: Error starting transaction: -38
[  144.165072][ T5988] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71
[  144.218033][ T5988] usb 2-1: USB disconnect, device number 8
[  144.274293][ T5943] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  144.414182][ T5943] usb 5-1: device descriptor read/64, error -71
[  144.664196][ T5943] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  145.234213][ T5943] usb 5-1: device descriptor read/64, error -71
[  145.344552][ T5943] usb usb5-port1: attempt power cycle
[  146.254184][ T5943] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  146.285147][ T5943] usb 5-1: device descriptor read/8, error -71
[  146.335405][ T5988] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  146.690043][ T5988] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  146.702577][ T5988] usb 4-1: config 0 has no interface number 0
[  146.717825][ T5988] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  146.744766][ T5943] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  146.756934][ T5988] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  146.768462][ T5943] usb 5-1: device descriptor read/8, error -71
[  146.792006][ T5988] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  146.814761][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.836863][ T5988] usb 4-1: config 0 descriptor??
[  146.853607][ T6964] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  146.884519][ T5943] usb usb5-port1: unable to enumerate USB device
[  146.906760][ T5988] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  147.563525][ T5943] usb 4-1: USB disconnect, device number 13
[  147.964055][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  147.964071][   T30] audit: type=1400 audit(1765910776.754:312): avc:  denied  { ioctl } for  pid=6963 comm="syz.3.239" path="socket:[11596]" dev="sockfs" ino=11596 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  148.018252][ T6964] syzkaller0: entered promiscuous mode
[  148.023725][ T6964] syzkaller0: entered allmulticast mode
[  148.456060][ T6986] ALSA: seq fatal error: cannot create timer (-22)
[  149.040065][   T30] audit: type=1400 audit(1765910777.834:313): avc:  denied  { read } for  pid=6987 comm="syz.2.245" dev="sockfs" ino=11603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  149.063393][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'.
[  149.094520][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'.
[  149.147745][   T30] audit: type=1400 audit(1765910777.944:314): avc:  denied  { write } for  pid=6987 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  150.246345][ T5943] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  150.408337][ T5943] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  150.424415][ T5943] usb 2-1: config 0 has no interface number 0
[  150.442075][ T5943] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  150.463418][ T5943] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  150.487758][ T5943] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  150.504737][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.530805][ T5943] usb 2-1: config 0 descriptor??
[  150.545381][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  150.560042][ T5943] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  150.765648][ T5943] usb 2-1: USB disconnect, device number 9
[  151.332280][ T6998] syzkaller0: entered promiscuous mode
[  151.355117][ T6998] syzkaller0: entered allmulticast mode
[  151.382644][   T30] audit: type=1400 audit(1765910780.174:315): avc:  denied  { ioctl } for  pid=7002 comm="syz.4.248" path="socket:[12543]" dev="sockfs" ino=12543 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  151.454490][   T30] audit: type=1400 audit(1765910780.174:316): avc:  denied  { lock } for  pid=7002 comm="syz.4.248" path="socket:[12544]" dev="sockfs" ino=12544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  152.479964][ T7021] trusted_key: encrypted_key: insufficient parameters specified
[  153.987723][ T7032] ALSA: seq fatal error: cannot create timer (-22)
[  154.577562][ T7049] xt_hashlimit: max too large, truncated to 1048576
[  154.590828][ T7049] No such timeout policy "syz1"
[  155.454291][ T5986] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  156.426790][ T5986] usb 5-1: Using ep0 maxpacket: 32
[  156.728867][ T7062] netlink: get zone limit has 8 unknown bytes
[  157.008210][   T30] audit: type=1400 audit(1765910785.574:317): avc:  denied  { bind } for  pid=7061 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  157.628818][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.639943][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.649740][ T5986] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  157.658841][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.775209][ T5986] usb 5-1: config 0 descriptor??
[  157.892289][ T5986] hub 5-1:0.0: USB hub found
[  158.473629][ T5986] hub 5-1:0.0: 1 port detected
[  158.789017][ T7077] binder: 7075:7077 ioctl c0046209 100000000000000 returned -22
[  158.822037][   T30] audit: type=1400 audit(1765910787.614:318): avc:  denied  { ioctl } for  pid=7078 comm="syz-executor" path="socket:[11759]" dev="sockfs" ino=11759 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  158.851317][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  158.861035][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  158.872405][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  158.884558][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  158.892186][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  158.924576][ T5986] hub 5-1:0.0: activate --> -90
[  159.192333][   T24] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  159.201991][ T5986] usb 5-1: USB disconnect, device number 13
[  159.700738][ T7085] binder: 7053:7085 ioctl c0045002 200000000000 returned -22
[  160.135128][ T4934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.256600][ T7078] chnl_net:caif_netlink_parms(): no params data found
[  160.433001][ T4934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.534732][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  160.580252][ T4934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.594493][ T5986] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  160.724231][    T9] usb 5-1: Using ep0 maxpacket: 32
[  160.731105][ T4934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.745010][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.769196][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.785800][ T5986] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  160.796561][ T5986] usb 4-1: config 0 has no interface number 0
[  160.800061][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.809899][ T5986] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20
[  160.820883][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.829157][ T5986] usb 4-1: Product: syz
[  160.833406][ T5986] usb 4-1: Manufacturer: syz
[  160.837849][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.838105][ T5986] usb 4-1: SerialNumber: syz
[  160.850130][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.852874][ T5986] usb 4-1: config 0 descriptor??
[  160.862370][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.871848][ T5986] s2255 4-1:0.83: Could not find bulk-in endpoint
[  160.878413][ T5986] Sensoray 2255 driver load failed: 0xfffffff4
[  160.879608][    T9] usb 5-1: config 0 descriptor??
[  160.890257][ T7078] bridge_slave_0: entered allmulticast mode
[  160.894216][ T5986] s2255 4-1:0.83: probe with driver s2255 failed with error -12
[  160.898585][ T7078] bridge_slave_0: entered promiscuous mode
[  160.912133][    T9] hub 5-1:0.0: USB hub found
[  160.926810][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.934777][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.944562][ T7078] bridge_slave_1: entered allmulticast mode
[  160.954269][ T5830] Bluetooth: hci5: command tx timeout
[  160.955080][ T7078] bridge_slave_1: entered promiscuous mode
[  161.337359][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.356909][    T9] hub 5-1:0.0: 1 port detected
[  161.370248][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.395763][ T7104] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  161.405517][ T7104] block device autoloading is deprecated and will be removed.
[  161.418080][   T30] audit: type=1400 audit(1765910790.184:319): avc:  denied  { read } for  pid=7103 comm="syz.3.272" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  161.473307][ T7116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.493170][   T30] audit: type=1400 audit(1765910790.184:320): avc:  denied  { open } for  pid=7103 comm="syz.3.272" path="/52/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  162.007442][    T9] usb 4-1: USB disconnect, device number 14
[  162.042506][ T5871] hub 5-1:0.0: activate --> -90
[  162.069038][ T7078] team0: Port device team_slave_0 added
[  162.127529][ T7078] team0: Port device team_slave_1 added
[  162.161003][ T4934] bridge_slave_1: left allmulticast mode
[  162.178673][ T4934] bridge_slave_1: left promiscuous mode
[  162.195735][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.220414][ T4934] bridge_slave_0: left allmulticast mode
[  162.233479][ T4934] bridge_slave_0: left promiscuous mode
[  162.248755][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.277758][ T5871] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  162.284785][ T6014] usb 5-1: USB disconnect, device number 14
[  162.436248][ T7102] binder: 7101:7102 ioctl c0045002 200000000000 returned -22
[  163.046224][ T5830] Bluetooth: hci5: command tx timeout
[  163.970117][ T4934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.992200][ T4934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.014459][ T4934] bond0 (unregistering): Released all slaves
[  164.114910][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.121881][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.180901][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.200458][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.209649][ T7149] netlink: get zone limit has 8 unknown bytes
[  164.244162][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.304378][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.124376][ T5830] Bluetooth: hci5: command tx timeout
[  165.868165][ T7078] hsr_slave_0: entered promiscuous mode
[  165.886016][ T7078] hsr_slave_1: entered promiscuous mode
[  165.898487][ T7078] debugfs: 'hsr0' already exists in 'hsr'
[  165.910831][ T7078] Cannot create hsr debugfs directory
[  166.092145][ T7166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.194170][ T5830] Bluetooth: hci5: command tx timeout
[  168.422787][ T4934] hsr_slave_0: left promiscuous mode
[  168.428611][ T4934] hsr_slave_1: left promiscuous mode
[  168.437562][ T4934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.445475][ T4934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.453422][ T4934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.739749][ T4934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.867417][ T7186] cgroup: Unknown subsys name 'cpuset'
[  168.906521][ T4934] veth1_macvtap: left promiscuous mode
[  168.914279][ T4934] veth0_macvtap: left promiscuous mode
[  168.920041][ T4934] veth1_vlan: left promiscuous mode
[  168.931521][ T4934] veth0_vlan: left promiscuous mode
[  170.163264][ T4934] team0 (unregistering): Port device team_slave_1 removed
[  170.301562][ T4934] team0 (unregistering): Port device team_slave_0 removed
[  170.985308][ T7211] netlink: get zone limit has 8 unknown bytes
[  171.043685][ T7078] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.105700][ T7078] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.248595][ T7218] FAULT_INJECTION: forcing a failure.
[  172.248595][ T7218] name failslab, interval 1, probability 0, space 0, times 0
[  172.248605][ T7078] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  172.283044][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) 
[  172.283067][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  172.283076][ T7218] Call Trace:
[  172.283081][ T7218]  <TASK>
[  172.283086][ T7218]  dump_stack_lvl+0x16c/0x1f0
[  172.283111][ T7218]  should_fail_ex+0x512/0x640
[  172.283133][ T7218]  ? kmem_cache_alloc_noprof+0x62/0x770
[  172.283152][ T7218]  should_failslab+0xc2/0x120
[  172.283171][ T7218]  kmem_cache_alloc_noprof+0x83/0x770
[  172.283186][ T7218]  ? io_submit_one+0x122/0x1e70
[  172.283206][ T7218]  ? io_submit_one+0x122/0x1e70
[  172.283221][ T7218]  io_submit_one+0x122/0x1e70
[  172.283238][ T7218]  ? __lock_acquire+0x436/0x2890
[  172.283259][ T7218]  ? lockdep_hardirqs_on+0x7c/0x110
[  172.283280][ T7218]  ? __pfx_io_submit_one+0x10/0x10
[  172.283304][ T7218]  ? __might_fault+0xe3/0x190
[  172.283317][ T7218]  ? __might_fault+0x13b/0x190
[  172.283338][ T7218]  ? __x64_sys_io_submit+0x1a9/0x370
[  172.283353][ T7218]  __x64_sys_io_submit+0x1a9/0x370
[  172.283372][ T7218]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  172.283387][ T7218]  ? fput+0x70/0xf0
[  172.283420][ T7218]  do_syscall_64+0xcd/0xf80
[  172.283440][ T7218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.283456][ T7218] RIP: 0033:0x7f713d18f749
[  172.283469][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.283485][ T7218] RSP: 002b:00007f713dfd0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  172.283499][ T7218] RAX: ffffffffffffffda RBX: 00007f713d3e5fa0 RCX: 00007f713d18f749
[  172.283509][ T7218] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 00007f713df7e000
[  172.283518][ T7218] RBP: 00007f713dfd0090 R08: 0000000000000000 R09: 0000000000000000
[  172.283526][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.283535][ T7218] R13: 00007f713d3e6038 R14: 00007f713d3e5fa0 R15: 00007fff6a615a28
[  172.283556][ T7218]  </TASK>
[  172.337298][ T7078] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  172.560382][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.221070][   T30] audit: type=1400 audit(1765910801.924:321): avc:  denied  { block_suspend } for  pid=7227 comm="syz.2.304" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  174.369125][ T7241] Invalid logical block size (8209)
[  175.017782][ T4934] IPVS: stop unused estimator thread 0...
[  175.498931][ T7078] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.613672][ T7078] 8021q: adding VLAN 0 to HW filter on device team0
[  175.784554][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.791741][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.098056][   T30] audit: type=1400 audit(1765910804.774:322): avc:  denied  { listen } for  pid=7266 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  176.117154][ T7078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.128140][ T7078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.149017][ T5830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  176.159038][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  176.159064][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.159077][ T5830] Workqueue: hci0 hci_rx_work
[  176.159096][ T5830] Call Trace:
[  176.159102][ T5830]  <TASK>
[  176.159110][ T5830]  dump_stack_lvl+0x16c/0x1f0
[  176.159132][ T5830]  sysfs_warn_dup+0x7f/0xa0
[  176.159153][ T5830]  sysfs_create_dir_ns+0x24b/0x2b0
[  176.159174][ T5830]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  176.159187][ T5830]  ? find_held_lock+0x2b/0x80
[  176.159205][ T5830]  ? do_raw_spin_unlock+0x172/0x230
[  176.159219][ T5830]  kobject_add_internal+0x2c4/0x9d0
[  176.159236][ T5830]  kobject_add+0x16e/0x240
[  176.159249][ T5830]  ? __pfx_kobject_add+0x10/0x10
[  176.159265][ T5830]  ? kobject_put+0xaf/0x6f0
[  176.159277][ T5830]  ? _raw_spin_unlock+0x28/0x50
[  176.159291][ T5830]  device_add+0x288/0x1980
[  176.159303][ T5830]  ? __pfx_dev_set_name+0x10/0x10
[  176.159315][ T5830]  ? __pfx_device_add+0x10/0x10
[  176.159326][ T5830]  ? mgmt_send_event_skb+0x2fb/0x460
[  176.159340][ T5830]  hci_conn_add_sysfs+0x1a8/0x260
[  176.159353][ T5830]  le_conn_complete_evt+0x11ed/0x1fa0
[  176.159367][ T5830]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  176.159381][ T5830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  176.159395][ T5830]  hci_le_meta_evt+0x357/0x610
[  176.159405][ T5830]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  176.159418][ T5830]  hci_event_packet+0x685/0x1210
[  176.159428][ T5830]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  176.159440][ T5830]  ? __pfx_hci_event_packet+0x10/0x10
[  176.159451][ T5830]  ? kcov_remote_start+0x399/0x680
[  176.159463][ T5830]  ? lockdep_hardirqs_on+0x7c/0x110
[  176.159478][ T5830]  hci_rx_work+0x2c9/0x1020
[  176.159490][ T5830]  process_one_work+0x9ba/0x1b20
[  176.159509][ T5830]  ? __pfx_process_one_work+0x10/0x10
[  176.159525][ T5830]  ? assign_work+0x1a0/0x250
[  176.159539][ T5830]  worker_thread+0x6c8/0xf10
[  176.159555][ T5830]  ? __kthread_parkme+0x19e/0x250
[  176.159565][ T5830]  ? __pfx_worker_thread+0x10/0x10
[  176.159577][ T5830]  kthread+0x3c5/0x780
[  176.159589][ T5830]  ? __pfx_kthread+0x10/0x10
[  176.159601][ T5830]  ? rcu_is_watching+0x12/0xc0
[  176.159611][ T5830]  ? __pfx_kthread+0x10/0x10
[  176.159623][ T5830]  ret_from_fork+0x983/0xb10
[  176.159635][ T5830]  ? __pfx_ret_from_fork+0x10/0x10
[  176.159647][ T5830]  ? __switch_to+0x7af/0x10d0
[  176.159660][ T5830]  ? __pfx_kthread+0x10/0x10
[  176.159672][ T5830]  ret_from_fork_asm+0x1a/0x30
[  176.159693][ T5830]  </TASK>
[  176.159714][ T5830] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  176.428913][ T5830] Bluetooth: hci0: failed to register connection device
[  176.515993][ T5830] ==================================================================
[  176.524093][ T5830] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22f/0x240
[  176.532944][ T5830] Read of size 8 at addr ffff888020b285a8 by task kworker/u9:8/5830
[  176.540904][ T5830] 
[  176.543213][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  176.543236][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.543246][ T5830] Workqueue: hci0 hci_rx_work
[  176.543264][ T5830] Call Trace:
[  176.543270][ T5830]  <TASK>
[  176.543276][ T5830]  dump_stack_lvl+0x116/0x1f0
[  176.543294][ T5830]  print_report+0xcd/0x630
[  176.543314][ T5830]  ? __virt_addr_valid+0x81/0x610
[  176.543326][ T5830]  ? __phys_addr+0xe8/0x180
[  176.543338][ T5830]  ? l2cap_sock_new_connection_cb+0x22f/0x240
[  176.543355][ T5830]  kasan_report+0xe0/0x110
[  176.543371][ T5830]  ? l2cap_sock_new_connection_cb+0x22f/0x240
[  176.543389][ T5830]  l2cap_sock_new_connection_cb+0x22f/0x240
[  176.543406][ T5830]  l2cap_connect_cfm+0x4f0/0x1010
[  176.543422][ T5830]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  176.543438][ T5830]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  176.543451][ T5830]  le_conn_complete_evt+0x1991/0x1fa0
[  176.543466][ T5830]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  176.543487][ T5830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  176.543502][ T5830]  hci_le_meta_evt+0x357/0x610
[  176.543516][ T5830]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  176.543530][ T5830]  hci_event_packet+0x685/0x1210
[  176.543543][ T5830]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  176.543558][ T5830]  ? __pfx_hci_event_packet+0x10/0x10
[  176.543572][ T5830]  ? kcov_remote_start+0x399/0x680
[  176.543586][ T5830]  ? lockdep_hardirqs_on+0x7c/0x110
[  176.543604][ T5830]  hci_rx_work+0x2c9/0x1020
[  176.543618][ T5830]  process_one_work+0x9ba/0x1b20
[  176.543639][ T5830]  ? __pfx_process_one_work+0x10/0x10
[  176.543657][ T5830]  ? assign_work+0x1a0/0x250
[  176.543672][ T5830]  worker_thread+0x6c8/0xf10
[  176.543690][ T5830]  ? __kthread_parkme+0x19e/0x250
[  176.543703][ T5830]  ? __pfx_worker_thread+0x10/0x10
[  176.543719][ T5830]  kthread+0x3c5/0x780
[  176.543734][ T5830]  ? __pfx_kthread+0x10/0x10
[  176.543748][ T5830]  ? rcu_is_watching+0x12/0xc0
[  176.543761][ T5830]  ? __pfx_kthread+0x10/0x10
[  176.543775][ T5830]  ret_from_fork+0x983/0xb10
[  176.543790][ T5830]  ? __pfx_ret_from_fork+0x10/0x10
[  176.543804][ T5830]  ? __switch_to+0x7af/0x10d0
[  176.543821][ T5830]  ? __pfx_kthread+0x10/0x10
[  176.543836][ T5830]  ret_from_fork_asm+0x1a/0x30
[  176.543859][ T5830]  </TASK>
[  176.543864][ T5830] 
[  176.764607][ T5830] Allocated by task 5830:
[  176.768912][ T5830]  kasan_save_stack+0x33/0x60
[  176.773659][ T5830]  kasan_save_track+0x14/0x30
[  176.778323][ T5830]  __kasan_kmalloc+0xaa/0xb0
[  176.782890][ T5830]  __kmalloc_noprof+0x33d/0x910
[  176.787725][ T5830]  sk_prot_alloc+0x1a8/0x2a0
[  176.792295][ T5830]  sk_alloc+0x36/0xe30
[  176.796344][ T5830]  bt_sock_alloc+0x3b/0x3a0
[  176.800824][ T5830]  l2cap_sock_alloc.constprop.0+0x33/0x1d0
[  176.806609][ T5830]  l2cap_sock_new_connection_cb+0x101/0x240
[  176.812740][ T5830]  l2cap_connect_cfm+0x4f0/0x1010
[  176.817740][ T5830]  le_conn_complete_evt+0x1991/0x1fa0
[  176.823088][ T5830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  176.828607][ T5830]  hci_le_meta_evt+0x357/0x610
[  176.833348][ T5830]  hci_event_packet+0x685/0x1210
[  176.838357][ T5830]  hci_rx_work+0x2c9/0x1020
[  176.842860][ T5830]  process_one_work+0x9ba/0x1b20
[  176.847790][ T5830]  worker_thread+0x6c8/0xf10
[  176.852362][ T5830]  kthread+0x3c5/0x780
[  176.856409][ T5830]  ret_from_fork+0x983/0xb10
[  176.860976][ T5830]  ret_from_fork_asm+0x1a/0x30
[  176.865811][ T5830] 
[  176.868120][ T5830] Freed by task 7272:
[  176.872072][ T5830]  kasan_save_stack+0x33/0x60
[  176.876732][ T5830]  kasan_save_track+0x14/0x30
[  176.881388][ T5830]  kasan_save_free_info+0x3b/0x60
[  176.886394][ T5830]  __kasan_slab_free+0x5f/0x80
[  176.891140][ T5830]  kfree+0x2f8/0x6e0
[  176.895017][ T5830]  __sk_destruct+0x8b1/0xbc0
[  176.899588][ T5830]  sk_destruct+0xc2/0xf0
[  176.903814][ T5830]  __sk_free+0xf4/0x3e0
[  176.907951][ T5830]  sk_free+0x6a/0x90
[  176.911828][ T5830]  l2cap_sock_kill+0x171/0x350
[  176.916570][ T5830]  l2cap_sock_cleanup_listen+0x3d/0x2f0
[  176.922102][ T5830]  l2cap_sock_release+0x69/0x280
[  176.927019][ T5830]  __sock_release+0xb3/0x270
[  176.931602][ T5830]  sock_close+0x1c/0x30
[  176.935741][ T5830]  __fput+0x402/0xb70
[  176.939701][ T5830]  task_work_run+0x150/0x240
[  176.944278][ T5830]  get_signal+0x1d0/0x26d0
[  176.948675][ T5830]  arch_do_signal_or_restart+0x8f/0x7e0
[  176.954205][ T5830]  exit_to_user_mode_loop+0x8c/0x540
[  176.959472][ T5830]  do_syscall_64+0x4ee/0xf80
[  176.964053][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.969926][ T5830] 
[  176.972228][ T5830] The buggy address belongs to the object at ffff888020b28000
[  176.972228][ T5830]  which belongs to the cache kmalloc-2k of size 2048
[  176.986255][ T5830] The buggy address is located 1448 bytes inside of
[  176.986255][ T5830]  freed 2048-byte region [ffff888020b28000, ffff888020b28800)
[  177.000207][ T5830] 
[  177.002523][ T5830] The buggy address belongs to the physical page:
[  177.008926][ T5830] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20b28
[  177.017759][ T5830] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  177.026242][ T5830] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  177.033768][ T5830] page_type: f5(slab)
[  177.037734][ T5830] raw: 00fff00000000040 ffff88813ff27000 dead000000000122 0000000000000000
[  177.046309][ T5830] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  177.054875][ T5830] head: 00fff00000000040 ffff88813ff27000 dead000000000122 0000000000000000
[  177.063519][ T5830] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[  177.072167][ T5830] head: 00fff00000000003 ffffea000082ca01 00000000ffffffff 00000000ffffffff
[  177.080815][ T5830] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  177.089463][ T5830] page dumped because: kasan: bad access detected
[  177.095864][ T5830] page_owner tracks the page as allocated
[  177.101564][ T5830] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5830, tgid 5830 (kworker/u9:8), ts 176454530792, free_ts 171930582086
[  177.120993][ T5830]  post_alloc_hook+0x1af/0x220
[  177.125749][ T5830]  get_page_from_freelist+0xd0b/0x31a0
[  177.131183][ T5830]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  177.137057][ T5830]  alloc_pages_mpol+0x1fb/0x550
[  177.141888][ T5830]  new_slab+0x2c3/0x430
[  177.146026][ T5830]  ___slab_alloc+0xe18/0x1c90
[  177.150695][ T5830]  __slab_alloc.constprop.0+0x63/0x110
[  177.156146][ T5830]  __kmalloc_noprof+0x4fc/0x910
[  177.161012][ T5830]  sk_prot_alloc+0x1a8/0x2a0
[  177.165586][ T5830]  sk_alloc+0x36/0xe30
[  177.169642][ T5830]  bt_sock_alloc+0x3b/0x3a0
[  177.174125][ T5830]  l2cap_sock_alloc.constprop.0+0x33/0x1d0
[  177.179920][ T5830]  l2cap_sock_new_connection_cb+0x101/0x240
[  177.185791][ T5830]  l2cap_connect_cfm+0x4f0/0x1010
[  177.190791][ T5830]  le_conn_complete_evt+0x1991/0x1fa0
[  177.196139][ T5830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  177.201660][ T5830] page last free pid 7214 tgid 7208 stack trace:
[  177.207962][ T5830]  __free_frozen_pages+0x7df/0x1170
[  177.213143][ T5830]  __put_partials+0x130/0x170
[  177.217794][ T5830]  qlist_free_all+0x4c/0xf0
[  177.222274][ T5830]  kasan_quarantine_reduce+0x195/0x1e0
[  177.227796][ T5830]  __kasan_slab_alloc+0x69/0x90
[  177.232624][ T5830]  __kmalloc_node_track_caller_noprof+0x30b/0x930
[  177.239022][ T5830]  memdup_user+0x2a/0xe0
[  177.243243][ T5830]  __x64_sys_kexec_load+0x18e/0x230
[  177.248419][ T5830]  do_syscall_64+0xcd/0xf80
[  177.252907][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.258777][ T5830] 
[  177.261083][ T5830] Memory state around the buggy address:
[  177.266690][ T5830]  ffff888020b28480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.274726][ T5830]  ffff888020b28500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.282763][ T5830] >ffff888020b28580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.290797][ T5830]                                   ^
[  177.296139][ T5830]  ffff888020b28600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.304174][ T5830]  ffff888020b28680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.312206][ T5830] ==================================================================
[  177.321036][ T5830] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  177.328497][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) 
[  177.337953][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  177.348091][ T5830] Workqueue: hci0 hci_rx_work
[  177.352781][ T5830] Call Trace:
[  177.356148][ T5830]  <TASK>
[  177.359164][ T5830]  dump_stack_lvl+0x3d/0x1f0
[  177.363758][ T5830]  vpanic+0x640/0x6f0
[  177.367748][ T5830]  panic+0xca/0xd0
[  177.371457][ T5830]  ? __pfx_panic+0x10/0x10
[  177.375953][ T5830]  ? l2cap_sock_new_connection_cb+0x22f/0x240
[  177.382002][ T5830]  ? preempt_schedule_common+0x44/0xc0
[  177.387441][ T5830]  ? preempt_schedule_thunk+0x16/0x30
[  177.392795][ T5830]  check_panic_on_warn+0xab/0xb0
[  177.397723][ T5830]  end_report+0x107/0x160
[  177.402034][ T5830]  kasan_report+0xee/0x110
[  177.406432][ T5830]  ? l2cap_sock_new_connection_cb+0x22f/0x240
[  177.412483][ T5830]  l2cap_sock_new_connection_cb+0x22f/0x240
[  177.418366][ T5830]  l2cap_connect_cfm+0x4f0/0x1010
[  177.423372][ T5830]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  177.428815][ T5830]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  177.434251][ T5830]  le_conn_complete_evt+0x1991/0x1fa0
[  177.439606][ T5830]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  177.445309][ T5830]  hci_le_conn_complete_evt+0x23c/0x3a0
[  177.450837][ T5830]  hci_le_meta_evt+0x357/0x610
[  177.455579][ T5830]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  177.461624][ T5830]  hci_event_packet+0x685/0x1210
[  177.466541][ T5830]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  177.471805][ T5830]  ? __pfx_hci_event_packet+0x10/0x10
[  177.477157][ T5830]  ? kcov_remote_start+0x399/0x680
[  177.482251][ T5830]  ? lockdep_hardirqs_on+0x7c/0x110
[  177.487430][ T5830]  hci_rx_work+0x2c9/0x1020
[  177.491913][ T5830]  process_one_work+0x9ba/0x1b20
[  177.496847][ T5830]  ? __pfx_process_one_work+0x10/0x10
[  177.502205][ T5830]  ? assign_work+0x1a0/0x250
[  177.506882][ T5830]  worker_thread+0x6c8/0xf10
[  177.511457][ T5830]  ? __kthread_parkme+0x19e/0x250
[  177.516463][ T5830]  ? __pfx_worker_thread+0x10/0x10
[  177.521557][ T5830]  kthread+0x3c5/0x780
[  177.525610][ T5830]  ? __pfx_kthread+0x10/0x10
[  177.530182][ T5830]  ? rcu_is_watching+0x12/0xc0
[  177.534925][ T5830]  ? __pfx_kthread+0x10/0x10
[  177.539508][ T5830]  ret_from_fork+0x983/0xb10
[  177.544082][ T5830]  ? __pfx_ret_from_fork+0x10/0x10
[  177.549178][ T5830]  ? __switch_to+0x7af/0x10d0
[  177.553846][ T5830]  ? __pfx_kthread+0x10/0x10
[  177.558419][ T5830]  ret_from_fork_asm+0x1a/0x30
[  177.563189][ T5830]  </TASK>
[  177.566452][ T5830] Kernel Offset: disabled
[  177.570759][ T5830] Rebooting in 86400 seconds..