last executing test programs:

14.044969356s ago: executing program 3 (id=518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

13.186056447s ago: executing program 3 (id=522):
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x2102000, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX]) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000ffff2abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000202000140010028001280090068af03bc4c84de74f7ee941a010076657468000000001800028014000100000000002570e1ad111c95dfc9debb45a38f67c84330663c93fa36383de77ce32cf1ca08740a03f11ed621149c0773d1f82ae48e0605ea5293fdd62c40a56791ca1e8de58fc993a64e1872bc4d6b6c38bb5a4319077ffd85de3d01268b30fefd421514690aea6b658fe717d6eccc3d9c2ee167cf00eb5d51e681d9f9dca08933f9683daf1212a1865554b9137fe10371bf37f91c54ca67f1f1f582f5a98e38932d73487f7fc4ebba8014", @ANYRES32=0x0, @ANYBLOB="00000100020502000a000100aaaaaaaaaabb0000"], 0x54}}, 0x280048c6)
r3 = socket$kcm(0xa, 0x5, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c9, 0xa3d4, 0x9dff, 0xe, "3d52e3ff00"})
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"})
r5 = syz_open_pts(r4, 0x0) (async)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) (async)
r7 = dup3(r5, r4, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000002060108000000000000000000000000050001000700000005000500000000000500010007000000d5f273e44f809cb30138b604a4f501eec095d114fad4c1cb85f7b9e1383509ed8cf80c041ca74a8f6e9427bbb56ec7a2ba95faba6ce4d8265fca7d47c9169dc6e81d4ba55544ee4a96fe6670093a50226607d3"], 0x2c}}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
getpid()
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
syz_usb_connect(0x6, 0x993, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x72, 0x35, 0x7, 0xff, 0x7b0, 0x6, 0x3f99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x981, 0x4, 0x2, 0x5, 0x0, 0x4, "", [{{0x9, 0x4, 0xaf, 0x0, 0x6, 0x38, 0x7d, 0x55, 0x7f, [@uac_as, @generic={0xb5, 0x31, "b39cccda293225e8ce644790bbec3e1eadde09c22c94e79086b6e62bb4afaab3d9c56d51ba2fa6fe34985016a0cc1b700138d9c99cc0705a4b2077ac3c6586cc729a16b599f0a35ccea0750334ab290197811f6e5be4aa7a12057abf591369b4527cc8699db0356b1c197817e40802a34f943cd5cf62957d1bb2aa67a6b679941b617e950b96a80646b1f225224f1339930bcecea4ab410aecc0823e433843366a06dea1779dae54600e9754a33cf48d895caa"}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0xa, 0x3, 0xfc, [@generic={0xb7, 0x24, "a2c409fed9062ff681629459c116ee831b335e7e52d9c9eb43940de88a3d5d57abebccd1a2fbc9a3b479c5bfb94973715ba2b734704983da7e759a5547968d9e3a030dde7e8e642a95fde9a8d1dc234d4513b179d2760a455aae2670d812af4f6abc0384903d85868464199b49d46d353fdbb4c907bdfd4e4a722464804d3cfa89ff4dd1b2c5c80e661e99f6dd5a7783531495f46a46431b42705714ebb5f5da682011c82d66e5624734339d81a2cdf8c847789815"}]}}, {{0x9, 0x5, 0x8a, 0x0, 0x3ff, 0x0, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0xd4, 0xf8}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xd1, 0x9, 0x1, [@generic={0xa7, 0xe, "a26e64da28bc4e9fa88079e4b744550ac3d2a8423bef51dca6c12c08bb49bcd6718e89c36865d49827816f5bf3c8c7def8e6c81efbafbc87f5a34eae1fadc4862c32fdc76fb9d797fe4ae96f8bac3ccc96a68390130006308223b88e7ebdf94f095e4f13eb332c728fd678d7686e59416bc807f78e7f7f9cd366c8a80bcc0e7f72fde98f8f13596aa32574e859e5c44beea00f64a429f0faf050559e2afb41bcc36da1f781"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x7, 0x8, 0x9, [@generic={0xcd, 0x7, "6bf8e9ea0abbcc2f31ab14c1bd8b8e543381f71a9236d0a9c20d302f65145081cb58ea42f4ac3fe0a7099fba7f0e8bd76ccc1745f3b22dee69ff9dc9957411303f54b512fa8451cf4ff254d5cce22d028539e33c8d616ff4a2adb6ae9e79e437b9f4901f86ecc205bc2d321346be33b1e8ae179d1cc4a28a566618fcf4a69c8914e61cf28cf77ffbd011cc3fe3779ae5c41df1ac715a479d5c8b3752aa082051858cb5e73c53d7532b2f8ee513181ba9317abc02fbdc58b6ab53cb6a16d8aa53488d02f1ffbf86664491d3"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0x22, 0x3, 0x5, 0xe0, 0x1f, 0x8, 0x4, [@hid_hid={0x9, 0x21, 0x5, 0xf, 0x1, {0x22, 0xf5e}}, @uac_control={{0xa, 0x24, 0x1, 0x61, 0x3e}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x4, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x403, 0x4, 0x80, 0x200, 0x7, 0xf}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x5}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x84, "df"}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x5, 0x5, "ef41"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x3, 0x1, [0x2], 0x42}]}], [{{0x9, 0x5, 0xd, 0x10, 0x2cf71907ff90f238, 0x0, 0x71}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x1, 0x7, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x55, 0x3ff}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0xd3, 0xf9, 0x0, [@generic={0x92, 0x9, "2272f314d3724c3ecf6acef909bfd7c8ade66b6d608b76bbd94b4b4f53559679de68199fe9a39abf340b72cfca08c0efb63b4341fba041e056f9cb2249846086ff0235938e9da95a29643c455123248903444ef64e73d647cbd316a7e18a484c13470fb92268a82ccb001d404a5ecefc59791db166be4bd5cdb2fd5ac25cb004d7dc2d669e58f518f10078fc86aea02e"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0xc5, 0x1, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xed, 0x2}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x80, 0x2, 0xf, [@generic={0xec, 0x7, "db2b82342290966b01351ba0ccc68883f08bf689d71fa1496895cc119954fa0aea976fc2cb27262d11c54601dfc6aa81fc3f0bdf44b435479624e8e4e1abdf4e97f19e91e14c84190b2badca1e1c8fc12abcc39b01313a48009b56f226bff056c13036b22cc68ecdee48ad392aca071af38b8bdbbe607049932e478605acf08300915562ea7b577c9ddd23117eb0bc3a4f65e3f5d8bef5d2d400babfcf1cd2b0526805c048f2e200c84d2862fe9fb4ca05cf2c66cd51fe587a3dd44cf11f58619a3fb304a00f51b1dde9cab47bd16cc78ec9935a8f684eb2faf259d53831448a73d268abec1f7f7807c3"}, @generic={0xa2, 0x11, "e67f98032fa376d9232bf90407b3fb441df21f471e22d96dafe2ecbfe3dcc072af8a69326c08b03ad3e078650219faeb3ef939f13b74e23cb59e7fd20481a000225216b4a05731a9b91d2f1cb63554eeb6d54cc87d0f930d1888156ddaf654433f1f4dad9aab83d46668444fcaf534c17316721115c52fd7276df6700cd54c9f6c2613204658ca436a202d3e9e7966325bf5a9b76930215bdc2ef1730d7cfabb"}]}}]}}, {{0x9, 0x4, 0xaf, 0xa8, 0x9, 0x6a, 0xd3, 0x2e, 0x0, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x52, 0x9, 0x6, 0x1}]}], [{{0x9, 0x5, 0x5, 0x2, 0x10, 0x30, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x2, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x87, 0xb}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xf6, 0x7, 0x0, [@generic={0x27, 0x6, "2b4b4b36145b7d5bfbe9c0c2f17bf66cbb61384d394d581e10454ae7d7c09ab97112a0a9df"}, @generic={0xf, 0xb, "c1a46d994d4bed3253dad9bfe0"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x6, 0x7b, 0x7f, [@generic={0xe5, 0xf, "3bb7f1135d3650c48a45c68b6c6e5d8d44f50372c48eb91d3b7bc3806f423a54af6d516da287ad3bb61beec69ae96bda08e90c8c47aa29506e99de099acee4192f5737f7ed041a18f006671ff7ec3f97be2d4c5f0e81c19d363169360f3d0b714bf2e47eadc9722576b3c43b60fdc6fa5826e8ce8d42aa90b5931ad5163809f0b28b091bb966c01676145c5059e2edd019bffb2520b68820564ec6e2782f28d261e1941cebc9d6b47fec9832e7cda7bf24853d71893dba109a6993c7721bf68e0e78ecee907f02d72e74679d0d14896f475f6827ee920e6c92552bb4c715e8adb89af8"}]}}, {{0x9, 0x5, 0x8e, 0x11, 0x200, 0xf9, 0x2, 0xd, [@generic={0x96, 0x7, "f22fd21fd7a475a9669a5de04450d4431714da6b354a6431b82c06398c1c29d9935348f2a9f9777b062c0c5a0d2eddabd26adb196a085a318aefd6ec2fcd4a1fd9753d3a08abbeb0fa665d0b7ff7a004c3c2972b2ec0bef86a9d5b3e36456714026dc9a9b64e44cf0a63e3e9030292d6aa2093f8fe0ad45e3dabae4f3d9d790d271c9ffdf3383db82096752557218b4d92dd649c"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x4, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xe, 0x5, 0xfe}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x5, 0x5f, 0x82, [@generic={0xd9, 0x23, "59639112b364178d762ed38466d99ec36d5b9788d1eacc4c797874ff77131c2482adf897855052217a22fcddfa6f64b90363051e0043e8ac94dfdbb402149eae8a73a1b881ee71a6d82e380c69949ce5c7116a2e93a0f7155b444abd113f224c3acbf426e73a737bd5a045d3a70d5630651fd86a76dae6303745aa114e50208eb574d306bcdeae13fdb1ce1d32ea0ea20e981316fbdbc65da29a8ed55ba659862b21bf916e6e2256a5b330c86d7e32118b2d0edde1040ab22420ed73d308704228bb024780771a889e53416c00759d154744949941318c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0xaf, 0x8, 0x3, 0xd7, 0xf2, 0x90, 0x7, [], [{{0x9, 0x5, 0x18f, 0x4, 0x3ff, 0x5, 0x3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}, @generic={0x49, 0x2, "4857eb03fa20a9218ce2bbe837a505bfec8271004e02f82946a397210f58ca1dc16e12ec046ff46b126f69cf4ed4d15c1af11917be22309b9a693d9b2f06ed69c362d3ebe2a469"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x83b994a19b29e471, 0xd, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x1}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x7, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xd}]}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x110, 0x4, 0x2, 0x8, 0x10, 0x6}, 0xd1, &(0x7f0000001200)={0x5, 0xf, 0xd1, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x8, 0x8}, @ptm_cap={0x3}, @generic={0x97, 0x10, 0xb, "9371e94a9e126f53c1ce7481ee5cd24291c1e5250928f2a164a9f5b9226f4ef359f7eb897b782694a1b96a8083db9bcc457864e889902fdd2317ee39f269e3e9a6174a3f65e91cfa25a7340e3f9c25e093907a1816815762b559b5b8b5e5aa20a8f953df2360a6e9152364a7bc7bd9ac9b6cb4a6a9642baebfe5c625c59ed8ae40bf87be514da4ca215c4a44bedc7fd6a5852a54"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "63ca89579d3cf2ab3631002650c41df8"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b1b890c9ecf1da825bfa350ff68d2755"}]}, 0x1, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x812}}]}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) (async)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async)
sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000002008400"/24], 0x18}, 0xd1) (async)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004000/0x2000)=nil})

12.387465183s ago: executing program 3 (id=526):
syz_pidfd_open(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x7, &(0x7f0000000100)=[{0xd, 0x4, 0x8, 0x8c}, {0x3, 0xf9, 0x0, 0xfd7}, {0x7, 0x0, 0x9, 0x3}, {0x4, 0xff, 0x1, 0xfe84}, {0xb, 0x7, 0x6, 0x583}, {0x80, 0x2, 0xe, 0x9}, {0x1, 0x6, 0x4, 0xe455}]})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
r1 = dup(r0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1494)
fcntl$setstatus(r2, 0x4, 0x0)
fcntl$setstatus(r2, 0x4, 0x41b10dca2fafb197)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1c, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000580)="890700008014ce9fa284138fb70a592075c35b6ef536aa1006964f813d470f4f2729efe8a0cb95361374e9a1b8783286ad6a452c8091574d7643a375a0bd567fc2e7b6e9b9d47a0aeba0d539f508804922a6f59b4e32f5644f2f4c00"/102, 0x66)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x6, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x1, 0x6, 0xff, 0x0, 0x401}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000005cc0), 0x0, 0x20044000)
read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000000f7ffffffffffffff0066fc7000"/27], 0x513300)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone3(&(0x7f00000004c0)={0x40000, &(0x7f0000000280), &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340), {0x2e}, &(0x7f0000000380)=""/4, 0x4, &(0x7f00000003c0)=""/146, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r1}}, 0x58)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0xdf0, &(0x7f0000000540)=""/63)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})

12.126169284s ago: executing program 0 (id=527):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000480)=0x4)
syz_ublk_setup_io_uring(0x23d4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000140))
syz_usb_connect(0x3, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xc9, 0xb9, 0xbd, 0x20, 0x10d2, 0x81d2, 0x11e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x3, 0x90, 0x67, "", [{{0x9, 0x4, 0xa1, 0x4, 0x0, 0xdf, 0x45, 0xde, 0x3}}]}}]}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)
syz_ublk_setup_queues(r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0xfffffe, 0x1a0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0)

11.520041083s ago: executing program 4 (id=528):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="266354798f3e2d74d46cb05ba8943d690bac5faf6c07bc57bbfa7f08865958df5822fa67f552c1ab14fedbe10380459e15f6f665fe0280a791725ecb691e6308241f53e232a37c8508107d8bd81a41a849dad211c5b5ce169ec92e14f3ff089ec86e49", 0x63, 0x44015, 0x0, 0x0)

11.195899655s ago: executing program 4 (id=529):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
r2 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20000014})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1)
read(r5, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c69666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000003060102000018000c9e157e020000062a0002007379a16a027988e4b31c010007"], 0x28}, 0x1, 0x0, 0x0, 0x48c5}, 0x200408f0)
fcntl$lock(r6, 0x26, &(0x7f0000000200)={0x1, 0x4, 0x3, 0x100000000000000})
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff)
poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007)

10.859605201s ago: executing program 3 (id=532):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="000336010000fb0386ee30d3c911fbc3"], 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=ANY=[@ANYBLOB="05000000040000000200000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000001000000b70400000000000085000000c3000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23)
open_by_handle_at(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="17000000fb"], 0x402800)
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000080)={0x8})

8.020490602s ago: executing program 0 (id=537):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
r2 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20000014})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0)
vmsplice(r2, 0x0, 0xad, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c69666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000003060102000018000c9e157e020000062a0002007379a16a027988e4b31c010007"], 0x28}, 0x1, 0x0, 0x0, 0x48c5}, 0x200408f0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff)
poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007)

7.979722808s ago: executing program 4 (id=538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x539140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x4070bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x404c894)
r6 = syz_io_uring_setup(0xefd, &(0x7f0000000700)={0x0, 0xaa32, 0x10000, 0x5, 0x59}, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000000c0), &(0x7f0000000080)=<r8=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_ublk_add_dev(r6, r7, 0x0, r8, &(0x7f0000000240)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x4, 0x86f, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f00000002c0))
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8)
lseek(r9, 0xc, 0x4)
fstat(r9, &(0x7f00000002c0))
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x1010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

7.610897086s ago: executing program 4 (id=541):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
r2 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20000014})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0)
vmsplice(r2, 0x0, 0xad, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1)
read(0xffffffffffffffff, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c69666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000003060102000018000c9e157e020000062a0002007379a16a027988e4b31c010007"], 0x28}, 0x1, 0x0, 0x0, 0x48c5}, 0x200408f0)
fcntl$lock(r5, 0x26, &(0x7f0000000200)={0x1, 0x4, 0x3, 0x100000000000000})
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff)
poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007)

6.762324061s ago: executing program 2 (id=542):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10031212e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

6.60725574s ago: executing program 2 (id=543):
socket$nl_route(0x10, 0x3, 0x0)
fsopen(0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073799a3100000000050005000200000005000400000000000c0007800800134000000007"], 0x54}}, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x6, {0xe0000000, 0x4, 0x0, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8000}, &(0x7f00000005c0)=0x8)

5.943517794s ago: executing program 2 (id=544):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

5.837520851s ago: executing program 3 (id=545):
r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000003e00)=[{{&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/20, 0x14}], 0x4, &(0x7f00000004c0)=""/71, 0x47}, 0x3}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000002440)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000f80)=""/4096, 0x1b7}, {&(0x7f0000001f80)=""/219, 0xdb}, {&(0x7f0000002080)=""/206, 0xce}, {&(0x7f0000002180)=""/145, 0x91}, {&(0x7f0000002240)=""/235, 0xeb}, {&(0x7f0000002340)=""/48, 0x30}, {&(0x7f0000002380)=""/146, 0x92}], 0x9, &(0x7f0000000100)}, 0x7f}, {{&(0x7f0000002540)=@tipc=@name, 0x80, &(0x7f0000002940)=[{&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f00000027c0)=""/80, 0x50}, {&(0x7f0000002840)=""/213, 0xd5}], 0x4}, 0x7fff}, {{&(0x7f0000002980)=@nfc_llcp, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002a00)=""/50, 0x32}], 0x1, &(0x7f0000002a80)=""/140, 0x8c}, 0x80000000}, {{&(0x7f0000002b40)=@phonet, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002bc0)=""/142, 0x8e}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000000980)=""/158, 0x9e}, {&(0x7f0000003d40)=""/32, 0x20}], 0x4, &(0x7f0000003dc0)=""/29, 0x1d}, 0x1000}], 0x5, 0x40010060, &(0x7f0000003f40))
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r2, &(0x7f0000000000)={0x9, 0x6, 0x2, 0x0, 0x1}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050048e8000010002000400000"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000466000/0x3000)=nil, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r7)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x20, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x17f41f2157d8eae}, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
ioctl$SNDCTL_SEQ_RESET(r9, 0x5100)
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.731380971s ago: executing program 2 (id=546):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setgid(0xee00)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00')
pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x1)
fchdir(r1)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r5, 0x6, 0x1)

4.929542944s ago: executing program 0 (id=547):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000480)=0x4)
syz_ublk_setup_io_uring(0x23d4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000140))
syz_usb_connect(0x3, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xc9, 0xb9, 0xbd, 0x20, 0x10d2, 0x81d2, 0x11e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x3, 0x90, 0x67, "", [{{0x9, 0x4, 0xa1, 0x4, 0x0, 0xdf, 0x45, 0xde, 0x3}}]}}]}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)
syz_ublk_setup_queues(r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0xfffffe, 0x1a0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0)

4.790005671s ago: executing program 2 (id=549):
socket(0x10, 0x803, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ec0)='nouser\x03\"\x1dm\x9e\'', 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10000000)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
syz_usb_connect$midi(0x5, 0x31, &(0x7f0000004240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x7, 0x20, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x7, [], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x8, 0x4, 0x9, {0x4}}}]}}}}}]}}, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2000000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
lstat(&(0x7f0000000180)='./file0\x00', 0x0)
fcntl$getown(r6, 0x9)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990)
sendfile(r6, r7, 0x0, 0xffffffff000)
recvmmsg(r6, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0)
getsockname$tipc(r7, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x9)

4.607874646s ago: executing program 1 (id=551):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2)
write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x2)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, r5)
setpgid(0x0, r5)
fchdir(r4)
lstat(&(0x7f0000000380)='./file0\x00', 0x0)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close(0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x2, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4000)

4.464230349s ago: executing program 4 (id=552):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x72, 0x45, 0xb4, 0x10, 0x572, 0xc689, 0x359a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x6, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x8, 0x0, 0xe3, 0x8, 0xfc, 0xc2}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002900)='/sys/kernel/uevent_seqnum', 0x4a02c0, 0x40)
readv(r4, &(0x7f0000003680)=[{&(0x7f0000003540)=""/25, 0x19}], 0x1)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x2000, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x15e)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, &(0x7f00000006c0)='.\x00', 0x40001a2)
r8 = fanotify_init(0xf00, 0x0)
fanotify_mark(r8, 0x105, 0x5000003a, r6, 0x0)
open(&(0x7f0000000380)='./bus\x00', 0x105040, 0x145)
creat(&(0x7f0000000200)='./bus\x00', 0x94)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.523531013s ago: executing program 1 (id=553):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c0010800400058004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020008402505a1a44000010203010902680002010040000904000001020e0000052406"], 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ffcb06f47340000209040009010301011009210100080122f4010905810300040a060809050203080010050a"], &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x8d, 0x6, 0x0, 0x40, 0x8}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0xffffffffffffff70}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c01}}, {0xcd, &(0x7f0000000240)=@string={0xcd, 0x3, "8505d1deb10a7b17a9883388433aa89d665de9f39e591350146c238723beed40830c9ff2eb577f3313c286bd51429b9d1d5e381d497c2538aee3d94d64e6a3fcbc2f63f0c49f3cb49fd3d217f17cc2aa87e75cc01d4d87e360c5e4e784f0a95d1704015ad1536156958defb1e92d0ad37399a8fb6176499e23019cdb1cb86fc2872749f5248694d9ed74c93a780d2e966368eb2b1844192ac36b91a9189e2d1a49c7fae01c8e9dc8065440681f6fe85d943f65ac6546abdeca87c31fa0c44549ff7016ab3cc8c8923b5e92"}}, {0x2d, &(0x7f0000000340)=@string={0x2d, 0x3, "85fb8279c0aa61550fd0deb6df4c25038d6c704b169906133ab5efc442895ab1398733f70006bff5028494"}}, {0x9d, &(0x7f0000000380)=@string={0x9d, 0x3, "7b356b0747f0ef8db2d831eb84630d51d7fe34a1dab4a23d119cd7c7947504e1f0957f251249d62a5698e93cf6d3cf55b8f7f6f684cc98a5052490c31501afa0883b8d72ad057b161aecdb208084fac5351ac5d2457118cdcf18400eb1d3f923b46c2404666726b00b76f0ca1cab453ab9b52b59b71648a8d55d5aea4f76a5998d27df0c8ca8679efaff8b6410494c4b1f55a81716ba991f265309"}}]})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2643)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000800)={0x0, 0x80, 0x2, &(0x7f0000000000)={0x1a, "e551595944bd993e9f61070b25780e0000dd2a35446df6de515c5a5ae4e1e1b1fb"}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xff4}]}}}]}, 0x38}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001a00)={0x14, &(0x7f00000004c0)={0x0, 0x31, 0x2e, {0x2e, 0x31, "6ebae985ca007b91ee3154df77cb58cc732e85d75432b2c5f1db4fbcb27b9eef527fe30dd244c6cbdf91f715"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000001a40)={0x20, 0x0, 0x7e, "56eed50a1e9dc5ec0fb83e105aaf83f93ea4183508c453364047391e9e7acf964d3ea85ce991fb3ba6f8381091f295bcd3074e0837cbdf9bb92399b750fa704d5da47d00a390d5134533be581d683a0ce9ee55d5aa47707207002c4d3b17d40958ce038b849f0900000000000000bcea2873ce1887489c0294a99b2427bd"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xb}})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)=""/112, 0x70)
r7 = accept4(r6, 0x0, 0x0, 0x800)
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000700)="9d27092bc47395fca99a6ff80a4e0587d94f41ed14f6f075cb60f30ca1744d192544e0391078ddc6491d85df725d2e477d232e645be3e95d963bdd587a4d96a4e9360b64a8e6a4192d78d8aef9b844c25eeb0941e684c3bfd3b1935a011c06bf1fe208a7634b5ff749f10c8fd7b92a78841c517f759b428f36c5478632ec7bc146f55e0a792815e13d005a5d640a088bbf7ca002303011de671d7e3aa185ee03848e8fadf122", &(0x7f0000000840)="134276fede627effa8d32b7fff9a5f2dca36f94e3b61f500c3720c35a30ed3066bf4e7585fa4c03c4f2be349dc507ffb1fe5d76d31cc30acdc8b9cfe8538f32d04c7fb025ef5cc7445797b223f568cdecf203e5233df20746c48f25694e9e59ea3db2d67e5dbe955b3f1ef002f713c58ec94a2c13d5a9bd3309f30d0"}}, &(0x7f00000007c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483)
ioctl$VIDIOC_DQEVENT(r8, 0x80885659, 0x0)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000009c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018}], 0x1, 0x40800)

2.359720961s ago: executing program 1 (id=554):
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x0, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, r4, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9})
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="aefdda", 0x3}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.924475911s ago: executing program 1 (id=555):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r4, &(0x7f00000007c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_ATTR(r4, &(0x7f0000000100)={0x78, 0x0, r5, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r6, r7, 0x0, 0x200, 0x1000000}}}, 0x78)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r8, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r9, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r9, r10, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
getgroups(0xa, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0x0])
fcntl$getownex(r0, 0x10, &(0x7f00000005c0))
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r12, &(0x7f0000006380)={0x2020, 0x0, <r13=>0x0, <r14=>0x0}, 0x2020)
syz_fuse_handle_req(r12, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0xfffffffc, r14, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r12, &(0x7f0000004300)={0x50, 0x0, r13, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
sendmmsg$unix(r3, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="af780ad0f21a5bc24a450143436aea444a46736f27071d3d63eaec174a47bcec68566e8176d297795c4b05341cdb0830e7e437c3c0f1f44f2d364d5f19a830b78cef4b507e842ff8e46984764d1108a988d7819f81608331ce38ad863d9b96750f223da2ecc6176e59d1aa7e909bdcb2498986ccafa4ae52411177f8f6fe5085e09159b4418eefd647256dd8feaeae8345072677e26b34cf7cad80bd8238efcde9f937e547084d7bc792e45bfba1982be0f8069766863e098910fb31c4628cca010a663189d2b808174b77e0a2f862bcba4f1f47fa14fbbd8b5cd64cb65bd870a18cec4bf389b8f75f67da4bf9944f6c76d68250", 0xf4}, {&(0x7f0000000480)="ee4b82bb091705b172804a0fee0f5563698735a902a0b4b677bec0f7378bda382f28d4ecbb4f751648daf562a93def6f492bd0b17b0dc4f5320d67238accc860477fa1d95f6d8c4a29bbd94451e336e20643c6386b5eb8333d7f9a40574906cf17a410c6b08e65366c8cfc5f246f2dc7a1068b7ee7e4dbb3ec5c5df99389bdecae7048caf58f7854e2107b46f5ce27e113", 0x91}], 0x2, &(0x7f00000006c0)=[@cred={{0x0, 0x1, 0x2, {r1, r9, r7}}}, @cred={{0x1c, 0x1, 0x2, {r1, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r11}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r8, r3, r0, r0, r4, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r0]}}], 0xc0, 0x20004000}}], 0x1, 0x24008000)
recvmmsg(r2, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9d)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})

1.831846742s ago: executing program 0 (id=556):
r0 = syz_open_procfs(0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (fail_nth: 2)

1.234792034s ago: executing program 3 (id=557):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
r2 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x20000014})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0)
vmsplice(r2, 0x0, 0xad, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400010000000900020073797a32000000000500050002000005050001000600000013000300686173683a6e65742c69666163650000"], 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000003060102000018000c9e157e020000062a0002007379a16a027988e4b31c010007"], 0x28}, 0x1, 0x0, 0x0, 0x48c5}, 0x200408f0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff)
poll(&(0x7f0000000140)=[{r4, 0x2cfc08c20dafc34e}, {r2, 0xf102}], 0x2, 0x8000007)

1.103384774s ago: executing program 0 (id=558):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x100101)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
add_key$keyring(&(0x7f0000000200), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00')
read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020)

751.399983ms ago: executing program 1 (id=559):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0xfffffffe, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x24040080)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
dup3(r0, r1, 0x0) (fail_nth: 2)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2b0, 0x1, 0x20003, 0x19f}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
io_setup(0x7, &(0x7f00000002c0)=<r8=>0x0)
io_submit(r8, 0x4, &(0x7f0000001940)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000340)="ee48f3acf21ea9aafd94259d2a85be576f555b49bf85284cc413b07fdade214a6be5608d3ded5083e932ac70c5564048e7edc587a3", 0x35, 0x100, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x2fc, r3, &(0x7f00000003c0)="7b8fbacc1c36b08fd7da9241f56eb32be0b517697291ceb7bb8578a7fadf185c3c8fd893abcc0a43da5fae4f8754250f32f3a1a4290dbaaf40261c92dfc84da582c49226079a4ea4d66bd3beba0a7a6fff1367e6f26ff2b5b55e348968656650711edcb2cfc5bb8f1e50b3200bfc18cfc2ec933bce961222b0b4592995c9e275a71dd53578a4e7ac498197ff", 0x8c, 0xfffffffffffffffb, 0x0, 0x3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f00000007c0)="41bb383bee099a8166fefd4d8f5e69d6978801bfb96228c2d904f56760fbbe5a9fb18c40adcec7073a65357797f3b248c3b5bd07b53e7da6266eca1ba0740a725029c9e2184df46cd5f2ef4f633aa5882c5dace9ec882064fc377b9b233ebda5743375fe3667f88c2109de941ae63b7f1ecb3165cc4fb9e7637c9fc92e7a26f2165bb7c5895e7a3d1e17c5839aaccd52bb783492ea08d4422705f72b76a5d72f0640176fb7197638a6316edd6b044999b00b17201490948bfc3763ce58a24caf7a092695f90bbe241792c083446be1c2697c819afec8cb9504020f6860e74e2100192550ac9707971b6b1244a0886ec645c5f1751f63fe5d98ed11042a65adec9efc62d0c2993713c8a65784ca951cf9ee7c5506c12704984ed3ac154a6b6f9920d76b794c2b1b0f2b88e18f24836bb34f67d0aa07ac2caea05f25cd93321d5361ef5c40b4a40435ba4714b03283b05d3f7497a380085bffb38d28de9856e698a7d608a97d12264ae9ba8eebf07f887c2b9c803911e7e6d36b42544a797a73796c6e4e1a9779bf7f3ea3c587b7f302caa7cc9723b3117f05cb2cd83482af1b873ef2b48a48881f66519858c097d00aca4592bba62a8335ace835094970adfab74ddbeccc387d032659b4f3e846009c2cc8d745b56d8cb78b2f5b6d203194f335e879ae743ba3f2d84fb4423684f2c6166ea69be9e2d29fa1e5c0417e175e437940b4c504dc05556d4f4da37039b3ce1353ef6d80ad7469fdce58c4a738eaa11911bd3e429afdf69bab7083616e7300397b967e894e82a4c0f6d8d16327245d735a044820d019716013981700c1c7174440db2f1582820071c011f6ec3f4926f11877b086ac1a8ac2fdb1dbb73c012d7e21a896c10ba5d5ff4fdf22eee7aeda272eb7dd2d07d9ee2138a1baec3e2cc3362e2a760459151fe6ed09bf65fcc16653f370afaf70a87d55f8ba7c3b6f283848e5eadba11368ec1b9dcc347cff54767efdba90f20e231056b6c7c9232fab2c18837e41b81cf16566a3f97e21636df2b288809dcf14e8c9d5a3f4de07cdffe7aeae1c0b997d10e519de47dfb9db5b21cc5786165202590a45d3549dad8361f8f48458d5d995719152a5b31cfc128563481c7984668c6c9980908fdb09131aad0a9593583d0a6592fa9dbbd8e448bd950152a0e72a205519bf2b091c72ec95eaa2394b796783cf760a4e249d41666fb4b540a2abf1aeba96c9171896c1815c42156e6e7d71aeb1b3d895aac62522ac9b4e558c22e3ed26b50087316e46725262298fff62e4d933888f805e6e4d1f5c7f24258b6b2aa85e4bd92e02b9f1e9ac1fa5c88b132fb8cca731e32099149256c1df1fee9459b339b3d6d62cb824fb87d1a11a7ef3a2d9f4f67b990b12439da2259986d199d831db71a30a688135156537997e1fa351e093ed94027b2961b7e98625a063a753219c7636b237087689e525675f132d41d63805f27bdc9d0d5a7d1946d070250d579898eb06989b62fcaeb22c1f622ff2f343f8c8dcfdaf0d9d064f9583430793e0fc3ee2afe0f15dd60fd404a7ed8ac9fcc0f7ff7f6d8734d1300f2b57ff50566dd93dc657f194d6f5348307a4ad23596617b76521dbbfcfac227554d3acb0176ea44c5f49190c359923e516e4d315706591e7abd85995956acfc6bc2dd71f33fd4b949b27975e2f1536a1c0ff55a0edada9cf0bea24eef93a109e381d7812c04a438ea5e3bed7d516bfd4e288b5af9fff893902b5f81a9fd3d5af0059f7abfb7bc8162f1d54f8507060d953c3fdd5f2ee50c25eadc9cd7df67bb92b092dcf14f95ee9e54f7eb79889ef316c107b04babb0eb71403e6b307cb00642321f0053b64e68ebcba44ffcdb987969cc4112941ffbcff3be485baffd0ef613aacbc3143dabd189cbdbb047d0c85b4feb28fdc84a4c6161c2a8e99cdb8f8db2b8abe408c220706ca531d1b0b95c92493832cd9e6c7fe2ce27a73eea75c597ca0802914afc6ff9847f4fde4d3e9592d0ae82beabb7d019fea1a22fd54f22e2437b7ccfe36c67f5112b4f5cb812b54720008a73fa3027455e2bfc4d9c49fc9ebe162ab474ea74372e62380e56f567d260ca69aeac071fe1c234fa9e4fa81b10d296eaa989dc6b48ac033243e8df236fe3effbcdc852f0457968d8ba117adf084ffde2f277e513929f06167bbb72a162181b71d5d88e1a090cc05e89249ee4bcf515aa4d5b8f46fe58d40bb0baf8f9da17ea11592df305b6228c8cc889d6fde201c6d5ee95a1d706009a366bacf650788e059500d11d7c7511a17e61cbc6693ab546259e2fe211afcc853320523b3de5f3b3eb8ff16c428fa81a6f12b7588af0ff404a93a307e5fe9337b16d6eb560e859c02b01b07f2bec87445a40b82d939eeb14eefbfcab8bbe44eca0c7fd463c733cc244195fbf6bd7fd1803c2a9cb13a7fcaff59fdac7d403badd4549bcef922d1908f8604ad665fa894c2e34f9192cbd2f9b957b25964be5d653d5cde7d1d67c7f2fd841bfe2fad60631ac9b9a95db8f32c161ff0d9d1c49f7f2debbbb64d4eb084547e1cd427204514155060f5c8c94e3efac9dea7cb6f45738bddbea909c22d58060a44d4422d719a865b5adf843e9dfb764d110ea8468a807cc01df8fd4832e4194251d8abdfcf0dd371e4b14b1e33920d29640770c1ada199cf7fa6ab97ffbbd067149e0cd82f00af073ad0231701812b44f364fd53e5b4c6a5bee5fc1e4bd4052dea39ec7d9aceb83615a7dab748315934f3f5c40b5a85304a2117088d37a1402b746391ced80fdc64d938cc3ff2bd8a65ceb802fc88d2ee9b47c066d6ce03f6d83fc4aba922b521c3fcf72876c252b9a436caacffa79d92a7b738ebbfd6ba25a3122f5b03a877883ab1d1ac419e7ebefcbae17d80c01458e54ae4fecfb8fbd355c3f34e26a75f4407b05a803930132f9bcdc4189a076995fabfb673eed5f4d8e4894fa5e793951c6fd8405a17ec9c039fa70b89cceea5bfc5e84c15837d9db852d34113ffdd180b1ed7cae88247111341c1a211d5d030748e290ec76ca0eaaf6ab145a7008eb38a2c186df17be95a60a620090df1666fbbbab6c96dc596a397be2324bf607cad804e432dc41d3bb833ef8808a94d873e3572057aae6297a2816745cbbd1626726b4c0687abb3e29afa2329967e8d972b42e2878d162c7b31758a7b93e1fc7d2fc41a11d06f76cad2ac3008bd2495dc9ecbf8ae5205ad13c502d5ab29897574ec419d2a9072da7024aae46ecaeb3f527383080e1598df0ec3c054f7b09ffd5141518282fc1f7d99b854d002403389d47cb4dfd6aa7d51c9bf9934493424c02eca4de58c528245e78f4c8b3eee0e034dd1f2faedf6a7210aea201e9dd6b9e92f086e786e450508b094bca82ca405b27f0b04c7d5241899079c8f3016e8c257e9e580d584f1d815aa9ab48d127db5ed73199149d522301ed4ef64a57a62367f8cecca15993b080bc10df0a8cdcb6b4ae0f96d9d474076f60155fb84c734e8795a5aaf19235199e2f4a5cbe66fb58c6bb8bf42eaf3b21faa6fb3010fc1366ead8d46337cb2aba518ada77569ef79e7c6b044d582ff0eeeba4acf00976af53bbe6394d4e09f88094edf6cf9f6cb7034e4faa43663b4321eaa7bb14f1f48ff99c34f2fd75d40db548a9d98288e0df9ad28cf40dd9842e9d2ed8190919495adea563ff63fb0d6fe203fa38363d0fef634cb5dc071041e771258000d335fbb99f2b67ad60ba3cb9a3746a0c9e6da001b5679fe88eeb95d6c15be0483e9809b7acbac12c312b421555d48ac36385df42e83cac07fe0408bf7dfad0a837f3dddb86549838f88698a2f391dbad78f0bb0042f24244bb1b362afbe86a8795fc3eae1cb4862ec17456830c3be071497bd26d909b8a9cee9d828ebbd39cca4107d2c16b61a1f43ec5a58e42d0805d0592118cf28d51d4901e94620713bbb4466988eafda6374319218b0c32b2a737dbf899f1342c3fd9807da5b4eeba1f061d43fc189865a5766f03deb5fe5014476d479b5c68d30ef91115fea5707d0bb1323a421eef62b57935aee68b25f9cc02dc19a52b942c6f40beeed02dbab3305a6590ff9886ba8b89f5d9c949052837daaf2a22aa6d94429fede1ab8637a450a601dde8b9f18a8bb4f0b71b57ceaaf765954ecc1cf049f29c6a2e85f9fa72708456a819219efb1940d646d930e3dc73d570ebd2cebbbb21a758a765f31514308daf62de269ee5f2d93c420f868b76e1a65228c68f0934a5366b3ec6a80c9cb5a9744ada5e930f39e2aa36dc9000168d3803222fae1042933b08cc17c890301f86975d4844f4fb5c1e75f9b244f2c3248aced3464f9f9ba5ce2ceda5926ba2c7f6f0286bd878c9d1eacb22b2bf430e046bc4743f44df43f1a9951e4ef0a0a55b4458596af24741b76220ec40a8f6fb477317c121e08b5a76f2c165afd576caa6cc1c42b8f8e78a65bc8eb8e760c298aa0fe9c247f2d6c654cef0312ceb33acd34ccc93aa1c3692873015b1ef50dee17de33ef2ad838c7e8e898e84e5a886a6b3f07edea9aab254395687679e67fde4bab6c156977c6e54d72061182e5a5663dd470b6c9571ea23688261956109778f10ceeb5f74839e3ece71c4d228d0e26bcf204e5be06339da50e661bd542c8c9750192f539dc29b3f0727e6b2f65a9ae0ceb53be0fdb602b88b8bc1a16f1b6a6bed9877526d8b3747401739bc14ae3d5d4aca870d81530415ba77427360a1de4c240162c2960c640366c0785da16e92dfd845639735aaa68138206f4a9c81d130f250d669e66d8f99164770c54e47ccb2af9ddca0ac1f86c29d80245c61d2881df282c4a643fd251753f62a247dc61ad1aeb753d5dad0588c4cc3d2cee72b4b47e4308467e012ff359ba84604676fdddaa2a02d81119ce641f7c43875000b9252a9900a13fa3dd72194e8456795491b3e3f1047b0ff2e36e9dedd0a2a6123728e3e7c612e0703062cc346741d1ba8add83522acd409761e19e3cf38d029f77bd9c1547f0a68d0bd3c66cb14f7a74eaefd1bb6c148852ccda48fed6ecfe3ea270eb63fa10eafb961245fe43337a4842f9af99d0b4578fc612a107c59394290252ef3ace35d8c8a87b95c25a6191b7d4e83f5985c4d21290bade6110744fdb1851017eb67934555fd49bc40fc87033cc1f0c799ae2ebeeb58dbb79c41230a410ae14d7e7112e04bbb3c80ba6dd9eedd855014f2ab308eccb6f6f22f28ecd3b0d41f4d633b932aba144a35d1d211cf87c0969c3c99ef5a2754b6a7bc8486bd5e5b255dba714f61ace75d44c929d84a86d6392eb5e2b31cd1b84cde13a12cc857e1c54e28d28fa3c5f49bb8df0e271594c045cb0b001b4a4da59d6cd8f8536dfa8a2bcb64155a5795f4aca362442e88b09e3fca403318b52b24e692ee22a35fa53359a3ed1d58b4e371a4d4e1059d1a4a5df445c1ac468099dcd9b6c17994312c134059d4ec7fd9072b3fabe54e820a250be45f4208c3c0b654e89fcdd30a359814ae9d14fbea1fbc6812c5dcc3fd9f889243d543cc6549480e78d58df25b927da8af993eec0ba9e62298e2e14865d1379e55bbd47c0265f46175a3d33dde8bbd19a96187b5313cf2c02db77a7cda4b7690ac54b0fa613dd13b5c7a951c6ea390c8c2e762a6804cd9b07b0e1881d2de8a110ac32a5b2d6ef86f84ed79159bbac294d8cbe36c26b041f90c3308481ef2d339808c91febd500c52315f8b9de55250ecb4865f62f02e49733135b2ed5fc34bc53ccbe8e526e74dd7ec60dbd7543a1b0347dfd46", 0x1000, 0x2, 0x0, 0x2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2, 0xd76, r1, &(0x7f0000001800)="ee4b5787985fecd48ce4c71a47df2bba3a4b58a48e49530656e5d7116ed60f800349cb7e7c697588376527c1eba7c6e6d08b596efb208923c948455081b1043154c1a8b05f65691f2af22088cfdadcd9b59ec595bca411f41bdc4e66a4890b63ebecf7a8bc086a897cc444fc73b1af7ad672c2fab6591805c8581656ba5b568074f4b8c13e97b5e79444d4b691a24f03f5b42f4693012b9cb6713eaf36748fb2b6be52bdfd6e286f3b83519677456880321ad6d7d22e778f1104ecd2772f01afdca49aabe1e6112e74d3856c3deab2ca59aa411eb005431fdc297810f1ec92add70051e1fde40219b5c7b41d27b87962", 0xf0, 0x0, 0x0, 0x2}])
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
socket(0x0, 0x4, 0x80)
syz_ublk_setup_queues(r3, r9, &(0x7f0000000180)={0x0, 0x1, 0xc0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1fff, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4830, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x1, 0x40101, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x6, 0x367}}], 0x1, 0x0, 0x0)

709.115254ms ago: executing program 2 (id=560):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x26e900, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x4, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4})
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)

595.31352ms ago: executing program 1 (id=561):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000029000000000000000001fc02000000000001000107144e23000000ffff003a0000000000000053000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="380100201a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a00c7a13a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x844)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0xb6, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0xfffffffd, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$UI_DEV_CREATE(r0, 0x5501)

536.326284ms ago: executing program 0 (id=562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0)
clock_adjtime(0x0, &(0x7f0000000e00)={0x1, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0xfffffffffffffdff})
r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x1, @local, 0x7}]}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @broadcast}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c064)

0s ago: executing program 4 (id=563):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000340)={0x7})
r4 = gettid()
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
kcmp(r4, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x20000000, 0x0, 0x7, 0xff, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [0x0, 0xab]}})
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000180)={0x8d, 0x1, 0x3, 0x7, 0x3, 0x3, "b8067bdca1a66e65920f2fda16f4192a", 0x7, 0x7, 0xff, 0x9, 0x7, 0x5, 0x4})
socket$nl_netfilter(0x10, 0x3, 0xc)
shmdt(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)

kernel console output (not intermixed with test programs):

i2: Opcode 0x0406 failed: -4
[   98.020861][ T6167] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   98.059868][ T6167] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   98.069315][   T29] gspca_sunplus: reg_r err -71
[   98.077647][   T29] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[   98.085760][ T6167] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.111629][   T29] usb 3-1: USB disconnect, device number 4
[   98.117548][ T6167] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.130744][ T6167] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   98.137129][ T6167] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.161841][ T6167] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.186602][ T6167] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   98.192752][ T6167] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   98.216387][ T6167] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   98.279052][   T30] kauditd_printk_skb: 7 callbacks suppressed
[   98.279067][   T30] audit: type=1400 audit(1783943878.259:348): avc:  denied  { create } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   98.340972][   T30] audit: type=1400 audit(1783943878.279:349): avc:  denied  { bind } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   98.397344][ T6178] capability: warning: `syz.0.81' uses deprecated v2 capabilities in a way that may be insecure
[   98.439505][   T30] audit: type=1400 audit(1783943878.289:350): avc:  denied  { setopt } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   98.610129][   T30] audit: type=1400 audit(1783943878.289:351): avc:  denied  { listen } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   98.629906][   T30] audit: type=1400 audit(1783943878.289:352): avc:  denied  { connect } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   99.623095][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout
[   99.655821][ T6186] syz.3.82 (6186): drop_caches: 2
[   99.977284][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[   99.986002][   T30] audit: type=1400 audit(1783943878.329:353): avc:  denied  { accept } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.095314][   T30] audit: type=1400 audit(1783943878.329:354): avc:  denied  { write } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.138444][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout
[  100.144839][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  100.172998][   T30] audit: type=1400 audit(1783943878.369:355): avc:  denied  { mount } for  pid=6177 comm="syz.0.81" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  100.202136][   T30] audit: type=1400 audit(1783943878.389:356): avc:  denied  { read } for  pid=6175 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.224770][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout
[  100.249665][   T30] audit: type=1400 audit(1783943878.459:357): avc:  denied  { ioctl } for  pid=6180 comm="syz.3.82" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  100.283562][ T6192] FAULT_INJECTION: forcing a failure.
[  100.283562][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  100.311781][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.4.84 Not tainted syzkaller #0 PREEMPT(full) 
[  100.311805][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  100.311813][ T6192] Call Trace:
[  100.311819][ T6192]  <TASK>
[  100.311825][ T6192]  dump_stack_lvl+0x100/0x190
[  100.311850][ T6192]  should_fail_ex.cold+0x5/0xa
[  100.311871][ T6192]  _copy_to_user+0x32/0xd0
[  100.311892][ T6192]  simple_read_from_buffer+0xcb/0x170
[  100.311921][ T6192]  proc_fail_nth_read+0x1af/0x230
[  100.311943][ T6192]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.311968][ T6192]  ? rw_verify_area+0xce/0x6d0
[  100.311989][ T6192]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  100.312011][ T6192]  vfs_read+0x1e4/0xb40
[  100.312036][ T6192]  ? __pfx_vfs_read+0x10/0x10
[  100.312059][ T6192]  ? __fget_files+0x215/0x3d0
[  100.312090][ T6192]  ? __fget_files+0x21f/0x3d0
[  100.312121][ T6192]  ksys_read+0x12a/0x250
[  100.312143][ T6192]  ? __pfx_ksys_read+0x10/0x10
[  100.312172][ T6192]  do_syscall_64+0x115/0x870
[  100.312196][ T6192]  ? clear_bhb_loop+0x40/0x90
[  100.312218][ T6192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.312235][ T6192] RIP: 0033:0x7ff263d5e68e
[  100.312250][ T6192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  100.312266][ T6192] RSP: 002b:00007ff264d3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  100.312283][ T6192] RAX: ffffffffffffffda RBX: 00007ff264d3e6c0 RCX: 00007ff263d5e68e
[  100.312293][ T6192] RDX: 000000000000000f RSI: 00007ff264d3e0a0 RDI: 0000000000000007
[  100.312303][ T6192] RBP: 00007ff264d3e090 R08: 0000000000000000 R09: 0000000000000000
[  100.312312][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.312322][ T6192] R13: 00007ff264026038 R14: 00007ff264025fa0 R15: 00007ffe224d14a8
[  100.312343][ T6192]  </TASK>
[  101.137246][ T5805] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  101.318524][ T5805] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  101.339700][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  101.368937][ T5805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  101.408910][ T5805] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  101.433598][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.477796][ T6217] input: syz0 as /devices/virtual/input/input10
[  101.484704][ T5805] usb 1-1: config 0 descriptor??
[  101.492351][ T6209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  101.659282][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout
[  101.825780][ T6213] macsec1: entered promiscuous mode
[  101.844649][ T6213] virt_wifi0: entered promiscuous mode
[  101.926631][ T5805] hid-steam 0003:28DE:1205.0007: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0
[  101.968849][ T6211] veth1_to_bond: entered allmulticast mode
[  102.017241][ T5805] hid-steam 0003:28DE:1205.0007: Steam Controller 'XXXXXXXXXX' connected
[  102.061835][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.081357][ T6210] veth1_to_bond: left allmulticast mode
[  102.104375][ T5805] input: Steam Deck as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.0007/input/input11
[  102.221048][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.221847][ T5805] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.0007/input/input12
[  102.227921][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.311432][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout
[  102.419178][ T5805] hid-steam 0003:28DE:1205.0008: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0
[  102.821564][ T5805] usb 1-1: USB disconnect, device number 2
[  102.998589][ T6234] fido_id[6234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  103.001679][ T5805] hid-steam 0003:28DE:1205.0007: Steam Controller 'XXXXXXXXXX' disconnected
[  103.087109][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.097970][ T5748] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  103.706532][ T5748] usb 4-1: Using ep0 maxpacket: 16
[  103.976471][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.288515][ T5748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.308873][ T5748] usb 4-1: config 0 has no interfaces?
[  104.319486][ T5748] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  104.328568][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.331819][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  104.331831][   T30] audit: type=1400 audit(1783943884.053:373): avc:  denied  { shutdown } for  pid=6240 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.336547][ T5748] usb 4-1: Product: syz
[  104.336566][ T5748] usb 4-1: Manufacturer: syz
[  104.362182][   T30] audit: type=1400 audit(1783943884.063:374): avc:  denied  { getopt } for  pid=6240 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.390256][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout
[  104.396691][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout
[  104.398623][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.402772][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout
[  104.415339][ T5748] usb 4-1: SerialNumber: syz
[  104.431229][ T5748] usb 4-1: config 0 descriptor??
[  104.494784][ T6245] syz.1.98 (6245) used greatest stack depth: 19464 bytes left
[  104.555625][   T30] audit: type=1400 audit(1783943884.533:375): avc:  denied  { unmount } for  pid=6249 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  104.577071][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  104.821077][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  104.849559][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  105.140209][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  105.155635][   T10] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  105.314119][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.347442][   T10] usb 1-1: config 0 descriptor??
[  105.393110][    T9] usb 4-1: USB disconnect, device number 6
[  105.403826][ T6242] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  105.625800][ T6264] netlink: 'syz.4.106': attribute type 3 has an invalid length.
[  105.662649][   T30] audit: type=1400 audit(1783943885.574:376): avc:  denied  { create } for  pid=6262 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  105.701080][   T30] audit: type=1400 audit(1783943885.594:377): avc:  denied  { write } for  pid=6262 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  105.898603][   T10] hid-steam 0003:28DE:1205.0009: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0
[  105.926302][   T30] audit: type=1400 audit(1783943885.894:378): avc:  denied  { setopt } for  pid=6270 comm="syz.1.109" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.991209][   T10] hid-steam 0003:28DE:1205.0009: Steam Controller 'XXXXXXXXXX' connected
[  106.143429][   T10] input: Steam Deck as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.0009/input/input13
[  106.315537][   T10] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.0009/input/input14
[  106.461399][   T30] audit: type=1400 audit(1783943886.434:379): avc:  denied  { setopt } for  pid=6262 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  106.489458][   T10] hid-steam 0003:28DE:1205.000A: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0
[  106.533038][   T30] audit: type=1400 audit(1783943886.434:380): avc:  denied  { shutdown } for  pid=6262 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  106.555696][   T10] usb 1-1: USB disconnect, device number 3
[  106.604222][   T10] hid-steam 0003:28DE:1205.0009: Steam Controller 'XXXXXXXXXX' disconnected
[  106.626637][ T6280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.782420][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  106.933423][ T6289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.339324][ T6298] 9pnet_fd: Insufficient options for proto=fd
[  107.345699][   T30] audit: type=1400 audit(1783943887.304:381): avc:  denied  { read write } for  pid=6296 comm="syz.0.115" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  107.429456][   T30] audit: type=1400 audit(1783943887.304:382): avc:  denied  { open } for  pid=6296 comm="syz.0.115" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  108.087241][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  108.247685][   T10] usb 3-1: Using ep0 maxpacket: 16
[  108.261221][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  108.267240][ T5748] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.283952][   T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  108.305745][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  108.321332][   T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  108.348931][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.401958][   T10] usb 3-1: config 0 descriptor??
[  108.460316][ T5748] usb 4-1: Using ep0 maxpacket: 16
[  108.475721][ T5748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.497232][ T5748] usb 4-1: config 0 has no interfaces?
[  108.510745][ T5748] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  108.534640][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.552198][ T5748] usb 4-1: Product: syz
[  108.566121][ T5748] usb 4-1: Manufacturer: syz
[  108.581778][ T5748] usb 4-1: SerialNumber: syz
[  108.595265][ T5748] usb 4-1: config 0 descriptor??
[  109.047224][ T5748] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  109.218751][ T5748] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  109.260696][ T5748] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  109.280082][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  109.296065][ T5748] usb 1-1: SerialNumber: syz
[  109.411429][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  109.424657][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  109.459530][   T10] usb 3-1: USB disconnect, device number 5
[  109.486854][ T5805] usb 4-1: USB disconnect, device number 7
[  110.323021][ T5748] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  110.374222][ T5748] libceph: connect (1)[c::]:6789 error -101
[  110.382417][ T5748] libceph: mon0 (1)[c::]:6789 connect error
[  110.390431][ T5748] libceph: connect (1)[c::]:6789 error -101
[  110.396448][ T5748] libceph: mon0 (1)[c::]:6789 connect error
[  110.501055][ T6343] netlink: 'syz.1.131': attribute type 10 has an invalid length.
[  110.510239][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.131'.
[  110.519408][ T6343] bridge0: port 3(dummy0) entered blocking state
[  110.525801][ T6343] bridge0: port 3(dummy0) entered disabled state
[  110.532370][ T6343] dummy0: entered allmulticast mode
[  110.538913][ T6343] dummy0: entered promiscuous mode
[  110.544459][ T6343] bridge0: port 3(dummy0) entered blocking state
[  110.551874][ T6343] bridge0: port 3(dummy0) entered forwarding state
[  110.680839][ T5711] libceph: connect (1)[c::]:6789 error -101
[  110.689810][ T6335] ceph: No mds server is up or the cluster is laggy
[  110.803375][ T6346] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  111.186104][ T5711] libceph: mon0 (1)[c::]:6789 connect error
[  111.404510][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  111.404526][   T30] audit: type=1400 audit(1783943891.382:390): avc:  denied  { mmap_zero } for  pid=6351 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  111.410818][ T6354] 9pnet_fd: Insufficient options for proto=fd
[  111.514614][   T30] audit: type=1400 audit(1783943891.492:391): avc:  denied  { shutdown } for  pid=6355 comm="syz.3.136" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  111.647247][   T30] audit: type=1400 audit(1783943891.492:392): avc:  denied  { create } for  pid=6355 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  111.680369][ T6362] FAULT_INJECTION: forcing a failure.
[  111.680369][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.693928][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(full) 
[  111.693954][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  111.693964][ T6362] Call Trace:
[  111.693969][ T6362]  <TASK>
[  111.693975][ T6362]  dump_stack_lvl+0x100/0x190
[  111.694001][ T6362]  should_fail_ex.cold+0x5/0xa
[  111.694022][ T6362]  _copy_from_user+0x2e/0xd0
[  111.694042][ T6362]  snd_timer_user_params.isra.0+0xe6/0x950
[  111.694068][ T6362]  ? __pfx_snd_timer_user_params.isra.0+0x10/0x10
[  111.694094][ T6362]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  111.694121][ T6362]  ? __lock_acquire+0x49f/0x1a40
[  111.694146][ T6362]  __snd_timer_user_ioctl.isra.0+0xfb8/0x2750
[  111.694173][ T6362]  ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10
[  111.694198][ T6362]  ? lock_acquire+0x1b9/0x370
[  111.694221][ T6362]  ? rcu_is_watching+0x12/0xc0
[  111.694245][ T6362]  ? trace_contention_end+0x126/0x160
[  111.694267][ T6362]  ? __mutex_lock+0x26d/0x1bd0
[  111.694293][ T6362]  ? snd_timer_user_ioctl+0x4a/0xb0
[  111.694317][ T6362]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  111.694342][ T6362]  ? __pfx___mutex_lock+0x10/0x10
[  111.694386][ T6362]  snd_timer_user_ioctl+0x72/0xb0
[  111.694409][ T6362]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  111.694434][ T6362]  __x64_sys_ioctl+0x18e/0x210
[  111.694457][ T6362]  do_syscall_64+0x115/0x870
[  111.694478][ T6362]  ? clear_bhb_loop+0x40/0x90
[  111.694499][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.694517][ T6362] RIP: 0033:0x7f55e399de59
[  111.694532][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.694548][ T6362] RSP: 002b:00007f55e4863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.694564][ T6362] RAX: ffffffffffffffda RBX: 00007f55e3c26090 RCX: 00007f55e399de59
[  111.694574][ T6362] RDX: 0000200000000440 RSI: 0000000040505412 RDI: 0000000000000003
[  111.694584][ T6362] RBP: 00007f55e4863090 R08: 0000000000000000 R09: 0000000000000000
[  111.694593][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.694609][ T6362] R13: 00007f55e3c26128 R14: 00007f55e3c26090 R15: 00007fff8b310488
[  111.694632][ T6362]  </TASK>
[  112.076599][   T30] audit: type=1400 audit(1783943892.052:393): avc:  denied  { bind } for  pid=6363 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.130880][   T30] audit: type=1400 audit(1783943892.082:394): avc:  denied  { getopt } for  pid=6363 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.237698][ T5748] usb 1-1: USB disconnect, device number 4
[  112.279904][ T6356] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  112.314989][ T6356] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  112.330636][ T6356] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  112.394560][ T6356] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  112.405396][ T6356] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  113.577231][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout
[  113.865148][   T30] audit: type=1400 audit(1783943893.842:395): avc:  denied  { execute } for  pid=6401 comm="syz.4.149" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  113.957329][ T5711] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  114.118046][ T5711] usb 4-1: Using ep0 maxpacket: 32
[  114.136356][ T5711] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  114.157485][ T5711] usb 4-1: config 0 has no interface number 0
[  114.182802][ T5711] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  114.208554][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.234191][ T5711] usb 4-1: Product: syz
[  114.253110][ T5711] usb 4-1: Manufacturer: syz
[  114.276515][ T5711] usb 4-1: SerialNumber: syz
[  114.298971][ T5711] usb 4-1: config 0 descriptor??
[  114.377365][ T4926] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.377365][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  114.457708][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout
[  114.457745][ T4926] Bluetooth: hci3: command 0x0c1a tx timeout
[  114.501902][ T6412] macsec1: entered promiscuous mode
[  114.553672][ T6412] virt_wifi0: entered promiscuous mode
[  114.733667][ T5711] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  114.766664][ T5711] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  114.924694][ T6411] veth1_to_bond: entered allmulticast mode
[  114.939124][ T6410] veth1_to_bond: left allmulticast mode
[  115.098852][   T30] audit: type=1400 audit(1783943895.082:396): avc:  denied  { create } for  pid=6424 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  115.123307][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'.
[  115.123644][   T30] audit: type=1400 audit(1783943895.102:397): avc:  denied  { write } for  pid=6424 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  115.157480][ T6425] bond1: entered promiscuous mode
[  115.162540][ T6425] bond1: entered allmulticast mode
[  115.168079][ T5748] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.913229][ T5748] usb 3-1: Using ep0 maxpacket: 32
[  115.923235][ T5748] usb 3-1: config 11 has an invalid interface number: 161 but max is 0
[  115.933029][ T5748] usb 3-1: config 11 has no interface number 0
[  115.939985][ T5748] usb 3-1: config 11 interface 161 has no altsetting 0
[  115.942572][   T30] audit: type=1326 audit(1783943895.922:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.4.157" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff263d9de59 code=0x0
[  115.949031][ T5748] usb 3-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  115.981887][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.990318][ T5748] usb 3-1: Product: syz
[  115.994664][ T5748] usb 3-1: Manufacturer: syz
[  116.004104][ T5748] usb 3-1: SerialNumber: syz
[  116.042669][ T5711] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  116.054851][ T5711] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  116.250569][   T30] audit: type=1400 audit(1783943896.232:399): avc:  denied  { ioctl } for  pid=6431 comm="syz.4.157" path="socket:[11418]" dev="sockfs" ino=11418 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  116.276556][ T6434] netlink: 'syz.4.157': attribute type 3 has an invalid length.
[  116.291633][ T6434] netlink: 'syz.4.157': attribute type 1 has an invalid length.
[  116.292496][ T6441] 9pnet_fd: Insufficient options for proto=fd
[  116.300169][ T6434] netlink: 224 bytes leftover after parsing attributes in process `syz.4.157'.
[  116.315580][ T6434] NCSI netlink: No device for ifindex 0
[  116.904840][ T6447] 8021q: VLANs not supported on ipvlan0
[  116.915325][   T30] audit: type=1400 audit(1783943896.882:400): avc:  denied  { ioctl } for  pid=6443 comm="syz.4.160" path="socket:[11437]" dev="sockfs" ino=11437 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  117.298168][   T30] audit: type=1400 audit(1783943896.972:401): avc:  denied  { read write } for  pid=6443 comm="syz.4.160" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  117.334921][ T5748] usblcd 3-1:11.161: USBLCD model not supported.
[  117.339674][   T30] audit: type=1400 audit(1783943896.972:402): avc:  denied  { open } for  pid=6443 comm="syz.4.160" path="/32/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  117.350751][ T5748] usb 3-1: USB disconnect, device number 6
[  117.578995][   T10] usb 4-1: USB disconnect, device number 8
[  117.777231][   T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  117.806803][ T6456] fuse: fd is not a fuse device
[  117.949128][   T29] usb 5-1: Using ep0 maxpacket: 16
[  117.964699][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.986783][   T29] usb 5-1: config 0 has no interfaces?
[  117.995152][   T30] audit: type=1326 audit(1783943897.972:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.0.163" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f941a39de59 code=0x0
[  117.997270][   T29] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  118.061275][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.093173][   T29] usb 5-1: Product: syz
[  118.094724][   T30] audit: type=1326 audit(1783943898.072:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.2.164" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55e399de59 code=0x0
[  118.105690][   T29] usb 5-1: Manufacturer: syz
[  118.177098][   T29] usb 5-1: SerialNumber: syz
[  118.201568][   T29] usb 5-1: config 0 descriptor??
[  118.304606][ T6463] netlink: 'syz.2.164': attribute type 3 has an invalid length.
[  118.322640][ T6463] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[  118.337203][ T6463] netlink: 224 bytes leftover after parsing attributes in process `syz.2.164'.
[  118.354911][ T6463] NCSI netlink: No device for ifindex 0
[  118.375097][ T6462] netlink: 'syz.0.163': attribute type 3 has an invalid length.
[  118.389281][ T6462] netlink: 'syz.0.163': attribute type 1 has an invalid length.
[  118.398219][ T6462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.163'.
[  118.436563][ T6462] NCSI netlink: No device for ifindex 0
[  118.657390][   T29] usb 5-1: USB disconnect, device number 3
[  118.758880][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.168'.
[  118.782877][   T30] audit: type=1400 audit(1783943898.762:405): avc:  denied  { bind } for  pid=6480 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  118.929389][   T30] audit: type=1400 audit(1783943898.792:406): avc:  denied  { connect } for  pid=6480 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  119.153979][   T30] audit: type=1400 audit(1783943898.792:407): avc:  denied  { ioctl } for  pid=6480 comm="syz.0.169" path="/dev/sg0" dev="devtmpfs" ino=754 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  119.357578][ T6487] netlink: 'syz.1.171': attribute type 1 has an invalid length.
[  119.405336][ T6490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.617219][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  120.372698][ T6492] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  120.442661][ T6492] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  120.602615][ T6492] bond1: (slave vti0): making interface the new active one
[  120.675338][ T6492] bond1: (slave vti0): Enslaving as an active interface with an up link
[  120.867206][   T10] usb 3-1: Using ep0 maxpacket: 8
[  120.918735][   T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  120.926985][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.937127][   T10] usb 3-1: config 0 has no interface number 0
[  120.944976][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  121.137183][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.174957][   T10] usb 3-1: Product: syz
[  121.189009][   T10] usb 3-1: Manufacturer: syz
[  121.210655][   T10] usb 3-1: SerialNumber: syz
[  121.229620][   T10] usb 3-1: config 0 descriptor??
[  121.243835][   T10] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  121.266612][   T10] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized!
[  121.294162][   T10] uvcvideo 3-1:0.31: Failed to create links for entity 32774
[  121.312867][   T10] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  121.448492][ T5805] usb 3-1: USB disconnect, device number 7
[  121.477230][   T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  121.495407][   T30] audit: type=1400 audit(1783943901.472:408): avc:  denied  { map } for  pid=6505 comm="syz.3.177" path="/dev/sg0" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  121.630284][   T29] usb 1-1: Using ep0 maxpacket: 16
[  121.637672][   T29] usb 1-1: unable to get BOS descriptor or descriptor too short
[  121.657376][   T29] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  121.674055][   T29] usb 1-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.692040][   T29] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  121.710692][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.718936][   T29] usb 1-1: Product: syz
[  121.723228][   T29] usb 1-1: Manufacturer: syz
[  121.730808][   T29] usb 1-1: SerialNumber: syz
[  121.806132][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.178'.
[  121.962621][   T29] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  121.976046][   T29] snd-usb-audio 1-1:5.0: probe with driver snd-usb-audio failed with error -22
[  122.163234][   T30] audit: type=1400 audit(1783943902.142:409): avc:  denied  { mounton } for  pid=6503 comm="syz.0.176" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  122.217659][   T30] audit: type=1326 audit(1783943902.192:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55e399de59 code=0x0
[  122.340763][ T6520] netlink: 'syz.2.181': attribute type 3 has an invalid length.
[  122.349690][ T6520] netlink: 'syz.2.181': attribute type 1 has an invalid length.
[  122.357727][ T6520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.181'.
[  122.367539][ T6520] NCSI netlink: No device for ifindex 0
[  122.406611][   T29] usb 1-1: 2:1 : invalid Cluster Descriptor size
[  122.649705][   T29] usb 1-1: USB disconnect, device number 5
[  123.335617][   T30] audit: type=1400 audit(1783943903.312:411): avc:  denied  { watch watch_reads } for  pid=6528 comm="syz.3.184" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  123.685590][   T30] audit: type=1400 audit(1783943903.662:412): avc:  denied  { ioctl } for  pid=6536 comm="syz.0.185" path="socket:[11159]" dev="sockfs" ino=11159 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.926848][ T6543] FAULT_INJECTION: forcing a failure.
[  123.926848][ T6543] name failslab, interval 1, probability 0, space 0, times 0
[  123.959048][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.0.186 Not tainted syzkaller #0 PREEMPT(full) 
[  123.959074][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  123.959084][ T6543] Call Trace:
[  123.959090][ T6543]  <TASK>
[  123.959097][ T6543]  dump_stack_lvl+0x100/0x190
[  123.959124][ T6543]  should_fail_ex.cold+0x5/0xa
[  123.959147][ T6543]  should_failslab+0xc2/0x120
[  123.959169][ T6543]  __kmalloc_cache_noprof+0x91/0x6c0
[  123.959196][ T6543]  ? rcu_is_watching+0x12/0xc0
[  123.959220][ T6543]  ? vhost_task_create+0xee/0x370
[  123.959241][ T6543]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  123.959271][ T6543]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  123.959292][ T6543]  vhost_task_create+0xee/0x370
[  123.959311][ T6543]  ? __pfx_vhost_task_create+0x10/0x10
[  123.959340][ T6543]  ? __pfx_vhost_task_fn+0x10/0x10
[  123.959361][ T6543]  ? __pfx___mutex_lock+0x10/0x10
[  123.959388][ T6543]  ? kasan_quarantine_put+0x104/0x240
[  123.959411][ T6543]  kvm_mmu_post_init_vm+0x1b3/0x360
[  123.959438][ T6543]  kvm_arch_vcpu_ioctl_run+0x66/0x1890
[  123.959464][ T6543]  ? kvm_vcpu_ioctl+0x1531/0x1700
[  123.959488][ T6543]  kvm_vcpu_ioctl+0x730/0x1700
[  123.959509][ T6543]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  123.959529][ T6543]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  123.959551][ T6543]  ? do_vfs_ioctl+0x226/0x13e0
[  123.959576][ T6543]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  123.959599][ T6543]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  123.959633][ T6543]  ? __fget_files+0x215/0x3d0
[  123.959660][ T6543]  ? hook_file_ioctl_common+0x140/0x440
[  123.959684][ T6543]  ? selinux_file_ioctl+0x13b/0x290
[  123.959708][ T6543]  ? selinux_file_ioctl+0xb6/0x290
[  123.959733][ T6543]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  123.959754][ T6543]  __x64_sys_ioctl+0x18e/0x210
[  123.959779][ T6543]  do_syscall_64+0x115/0x870
[  123.959804][ T6543]  ? clear_bhb_loop+0x40/0x90
[  123.959825][ T6543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.959843][ T6543] RIP: 0033:0x7f941a39de59
[  123.959859][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.959874][ T6543] RSP: 002b:00007f941b1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.959892][ T6543] RAX: ffffffffffffffda RBX: 00007f941a625fa0 RCX: 00007f941a39de59
[  123.959903][ T6543] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  123.959919][ T6543] RBP: 00007f941b1c0090 R08: 0000000000000000 R09: 0000000000000000
[  123.959929][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.959938][ T6543] R13: 00007f941a626038 R14: 00007f941a625fa0 R15: 00007ffc227ef158
[  123.959963][ T6543]  </TASK>
[  124.243623][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'.
[  124.245814][ T6548] IPv4: Oversized IP packet from 127.202.26.0
[  124.274501][   T30] audit: type=1400 audit(1783943904.252:413): avc:  denied  { bind } for  pid=6547 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  124.777276][   T30] audit: type=1400 audit(1783943904.752:414): avc:  denied  { map } for  pid=6561 comm="syz.2.193" path="socket:[11257]" dev="sockfs" ino=11257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  124.854720][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.192'.
[  124.863917][   T30] audit: type=1400 audit(1783943904.762:415): avc:  denied  { accept } for  pid=6561 comm="syz.2.193" path="socket:[11257]" dev="sockfs" ino=11257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  124.935894][ T6565] FAULT_INJECTION: forcing a failure.
[  124.935894][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.979613][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) 
[  124.979638][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  124.979648][ T6565] Call Trace:
[  124.979654][ T6565]  <TASK>
[  124.979660][ T6565]  dump_stack_lvl+0x100/0x190
[  124.979687][ T6565]  should_fail_ex.cold+0x5/0xa
[  124.979709][ T6565]  _copy_from_user+0x2e/0xd0
[  124.979731][ T6565]  do_ip_getsockopt+0x42a/0x2510
[  124.979750][ T6565]  ? kernel_text_address+0x40/0x100
[  124.979771][ T6565]  ? __pfx_do_ip_getsockopt+0x10/0x10
[  124.979791][ T6565]  ? find_held_lock+0x2b/0x80
[  124.979816][ T6565]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  124.979833][ T6565]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  124.979851][ T6565]  ? avc_has_perm_noaudit+0x145/0x3b0
[  124.979868][ T6565]  ? __lock_acquire+0x49f/0x1a40
[  124.979888][ T6565]  ? __pfx_avc_has_perm+0x10/0x10
[  124.979910][ T6565]  ? find_held_lock+0x2b/0x80
[  124.979944][ T6565]  ip_getsockopt+0xa1/0x1e0
[  124.979964][ T6565]  ? __pfx_ip_getsockopt+0x10/0x10
[  124.979982][ T6565]  ? _copy_from_user+0x59/0xd0
[  124.980002][ T6565]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  124.980030][ T6565]  tcp_getsockopt+0xa1/0x110
[  124.980052][ T6565]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  124.980075][ T6565]  do_sock_getsockopt+0x50a/0x6e0
[  124.980095][ T6565]  ? __lock_acquire+0x49f/0x1a40
[  124.980115][ T6565]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  124.980135][ T6565]  ? rcu_read_lock_any_held+0x6a/0xa0
[  124.980163][ T6565]  ? find_held_lock+0x2b/0x80
[  124.980193][ T6565]  ? __fget_files+0x21f/0x3d0
[  124.980224][ T6565]  __sys_getsockopt+0x148/0x260
[  124.980245][ T6565]  ? __x64_sys_getsockopt+0xbd/0x160
[  124.980260][ T6565]  __x64_sys_getsockopt+0xbd/0x160
[  124.980274][ T6565]  ? do_syscall_64+0x90/0x870
[  124.980298][ T6565]  ? lockdep_hardirqs_on+0x78/0x100
[  124.980322][ T6565]  do_syscall_64+0x115/0x870
[  124.980345][ T6565]  ? clear_bhb_loop+0x40/0x90
[  124.980365][ T6565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.980381][ T6565] RIP: 0033:0x7f55e399de59
[  124.980396][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.980412][ T6565] RSP: 002b:00007f55e4884028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  124.980428][ T6565] RAX: ffffffffffffffda RBX: 00007f55e3c25fa0 RCX: 00007f55e399de59
[  124.980441][ T6565] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003
[  124.980451][ T6565] RBP: 00007f55e4884090 R08: 0000200000000240 R09: 0000000000000000
[  124.980461][ T6565] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  124.980470][ T6565] R13: 00007f55e3c26038 R14: 00007f55e3c25fa0 R15: 00007fff8b310488
[  124.980493][ T6565]  </TASK>
[  125.437076][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[  126.462658][   T30] audit: type=1400 audit(1783943906.442:416): avc:  denied  { name_bind } for  pid=6569 comm="syz.4.197" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  126.865323][   T30] audit: type=1400 audit(1783943906.842:417): avc:  denied  { create } for  pid=6587 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  126.891531][ T6588] Bluetooth: MGMT ver 1.23
[  126.918424][   T30] audit: type=1400 audit(1783943906.872:418): avc:  denied  { bind } for  pid=6587 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  127.037340][   T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  127.240639][   T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.264424][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  127.276654][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  127.291650][   T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  127.304402][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  127.314141][   T29] usb 4-1: Product: syz
[  127.323790][   T29] usb 4-1: Manufacturer: syz
[  127.337474][   T29] usb 4-1: SerialNumber: syz
[  127.598762][   T29] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  127.817065][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  127.817081][   T30] audit: type=1400 audit(1783943907.792:420): avc:  denied  { read write } for  pid=6570 comm="syz.3.198" name="lp0" dev="devtmpfs" ino=2921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  128.006563][ T6615] warning: `syz.0.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  128.206922][   T30] audit: type=1400 audit(1783943907.792:421): avc:  denied  { open } for  pid=6570 comm="syz.3.198" path="/dev/usb/lp0" dev="devtmpfs" ino=2921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  128.240549][   T30] audit: type=1400 audit(1783943907.982:422): avc:  denied  { setopt } for  pid=6605 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  128.758561][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.207'.
[  128.855973][ T5711] usb 4-1: USB disconnect, device number 9
[  128.904929][ T5711] usblp0: removed
[  128.947507][   T29] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  129.108583][   T29] usb 1-1: config 0 has no interfaces?
[  129.233501][   T29] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  129.299971][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.331742][   T29] usb 1-1: config 0 descriptor??
[  129.491336][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[  129.622306][   T10] usb 1-1: USB disconnect, device number 6
[  129.912384][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'.
[  130.138070][   T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.302573][   T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  130.317214][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.352476][   T29] usb 5-1: Product: syz
[  130.366987][   T29] usb 5-1: Manufacturer: syz
[  130.385238][   T29] usb 5-1: SerialNumber: syz
[  130.507427][ T5711] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  130.702666][ T5711] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  130.743205][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  130.768983][ T5711] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  130.801410][ T5711] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  130.822878][   T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  130.835270][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.862845][   T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  130.875378][ T5711] usb 1-1: config 0 descriptor??
[  130.886104][ T6651] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  131.331832][ T5711] hid-steam 0003:28DE:1205.000B: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0
[  131.408349][ T5711] hid-steam 0003:28DE:1205.000B: Steam Controller 'XXXXXXXXXX' connected
[  131.433743][ T5711] input: Steam Deck as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.000B/input/input16
[  131.491479][ T5711] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.000B/input/input17
[  131.568052][ T5711] hid-steam 0003:28DE:1205.000C: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0
[  131.640097][ T5711] usb 1-1: USB disconnect, device number 7
[  131.712407][ T6666] fido_id[6666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  131.727258][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  131.758677][ T5711] hid-steam 0003:28DE:1205.000B: Steam Controller 'XXXXXXXXXX' disconnected
[  131.918493][   T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  131.937121][   T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  131.938253][   T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  131.954476][   T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  131.980671][   T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  131.989807][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.003164][   T10] usb 3-1: config 0 has no interface number 0
[  132.006452][   T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  132.009596][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  132.028086][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.039095][   T10] usb 3-1: config 0 descriptor??
[  132.042167][   T29] usb 5-1: USB disconnect, device number 4
[  132.328654][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.359333][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.654019][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[  132.750000][   T30] audit: type=1400 audit(1783943912.642:423): avc:  denied  { create } for  pid=6662 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  132.999373][   T30] audit: type=1400 audit(1783943912.652:424): avc:  denied  { write } for  pid=6662 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  133.554899][   T30] audit: type=1400 audit(1783943913.532:425): avc:  denied  { create } for  pid=6694 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  133.632624][ T6699] 9p: Bad value for 'rfdno'
[  134.546865][ T5805] usb 3-1: USB disconnect, device number 8
[  134.935050][ T6710] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  135.287276][   T29] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  135.407655][ T6703] netlink: 204 bytes leftover after parsing attributes in process `syz.3.234'.
[  135.426687][   T30] audit: type=1326 audit(1783943915.402:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.523746][   T30] audit: type=1326 audit(1783943915.402:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.526784][   T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  135.639581][   T30] audit: type=1326 audit(1783943915.432:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.640638][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  135.678330][   T30] audit: type=1326 audit(1783943915.432:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.688832][   T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  135.726375][   T30] audit: type=1326 audit(1783943915.432:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.754238][   T30] audit: type=1326 audit(1783943915.432:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.781240][   T30] audit: type=1326 audit(1783943915.432:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.810339][   T29] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  135.820166][   T30] audit: type=1326 audit(1783943915.432:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.1.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  135.847556][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.873229][   T29] usb 5-1: config 0 descriptor??
[  135.882214][ T6705] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  136.340219][   T29] hid-steam 0003:28DE:1205.000D: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0
[  136.437409][   T29] hid-steam 0003:28DE:1205.000D: Steam Controller 'XXXXXXXXXX' connected
[  136.484907][   T29] input: Steam Deck as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.000D/input/input18
[  136.574540][   T29] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.000D/input/input19
[  136.602075][ T6728] SELinux: security policydb version 17 (MLS) not backwards compatible
[  136.679338][ T6728] SELinux: failed to load policy
[  136.762505][   T29] hid-steam 0003:28DE:1205.000E: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0
[  136.846904][   T29] usb 5-1: USB disconnect, device number 5
[  137.060428][   T29] hid-steam 0003:28DE:1205.000D: Steam Controller 'XXXXXXXXXX' disconnected
[  137.089087][ T6732] fido_id[6732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  137.187507][ T5748] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  137.367196][ T5748] usb 3-1: Using ep0 maxpacket: 32
[  137.384973][ T5748] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  137.426637][ T5748] usb 3-1: config 0 has no interface number 0
[  137.458353][ T5748] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  137.543047][ T5748] usb 3-1: config 0 interface 184 has no altsetting 0
[  137.568724][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.573465][ T5748] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  137.641597][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.704054][ T5748] usb 3-1: Product: syz
[  137.723401][ T5748] usb 3-1: Manufacturer: syz
[  137.736131][ T5748] usb 3-1: SerialNumber: syz
[  137.898979][ T5748] usb 3-1: config 0 descriptor??
[  137.962848][ T5748] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  138.057874][ T5748] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  139.908607][ T5748] usb 3-1: USB disconnect, device number 9
[  140.085840][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.254'.
[  140.101327][   T30] kauditd_printk_skb: 95 callbacks suppressed
[  140.101340][   T30] audit: type=1326 audit(1783943920.082:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.3.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1c219de59 code=0x0
[  141.458206][   T30] audit: type=1326 audit(1783943921.432:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  141.537805][   T30] audit: type=1326 audit(1783943921.432:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  141.609819][   T30] audit: type=1326 audit(1783943921.432:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  141.679696][ T6810] FAULT_INJECTION: forcing a failure.
[  141.679696][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.697281][   T30] audit: type=1326 audit(1783943921.432:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  141.717230][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) 
[  141.717254][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  141.717262][ T6810] Call Trace:
[  141.717268][ T6810]  <TASK>
[  141.717275][ T6810]  dump_stack_lvl+0x100/0x190
[  141.717298][ T6810]  should_fail_ex.cold+0x5/0xa
[  141.717319][ T6810]  _copy_from_user+0x2e/0xd0
[  141.717338][ T6810]  dma_buf_ioctl+0x57b/0x8a0
[  141.717364][ T6810]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  141.717385][ T6810]  ? __fget_files+0x215/0x3d0
[  141.717407][ T6810]  ? hook_file_ioctl_common+0x140/0x440
[  141.717428][ T6810]  ? selinux_file_ioctl+0x13b/0x290
[  141.717448][ T6810]  ? selinux_file_ioctl+0xb6/0x290
[  141.717472][ T6810]  ? __pfx_dma_buf_ioctl+0x10/0x10
[  141.717495][ T6810]  __x64_sys_ioctl+0x18e/0x210
[  141.717517][ T6810]  do_syscall_64+0x115/0x870
[  141.717539][ T6810]  ? clear_bhb_loop+0x40/0x90
[  141.717557][ T6810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.717573][ T6810] RIP: 0033:0x7f55e399de59
[  141.717587][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.717601][ T6810] RSP: 002b:00007f55e4884028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  141.717617][ T6810] RAX: ffffffffffffffda RBX: 00007f55e3c25fa0 RCX: 00007f55e399de59
[  141.717627][ T6810] RDX: 00002000000000c0 RSI: 0000000040086200 RDI: 0000000000000005
[  141.717636][ T6810] RBP: 00007f55e4884090 R08: 0000000000000000 R09: 0000000000000000
[  141.717645][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.717654][ T6810] R13: 00007f55e3c26038 R14: 00007f55e3c25fa0 R15: 00007fff8b310488
[  141.717675][ T6810]  </TASK>
[  141.908706][   T30] audit: type=1326 audit(1783943921.432:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  141.935538][   T30] audit: type=1326 audit(1783943921.432:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  142.083934][   T30] audit: type=1326 audit(1783943921.432:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  142.111213][   T30] audit: type=1326 audit(1783943921.432:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  142.141980][   T30] audit: type=1326 audit(1783943921.432:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6798 comm="syz.3.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc1c219de59 code=0x7ffc0000
[  142.267257][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  142.427683][    T9] usb 4-1: Using ep0 maxpacket: 32
[  142.435726][    T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  142.450789][    T9] usb 4-1: config 0 has no interface number 0
[  142.470245][    T9] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  142.482295][    T9] usb 4-1: config 0 interface 184 has no altsetting 0
[  142.496309][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  142.506046][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.514576][    T9] usb 4-1: Product: syz
[  142.519536][    T9] usb 4-1: Manufacturer: syz
[  142.524296][    T9] usb 4-1: SerialNumber: syz
[  142.548895][    T9] usb 4-1: config 0 descriptor??
[  142.557261][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  142.574241][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  142.609855][    T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22
[  142.708809][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  142.757506][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.775312][   T10] usb 5-1: config 0 descriptor??
[  142.785903][   T10] cp210x 5-1:0.0: cp210x converter detected
[  143.887699][ T6845] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  144.708087][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'.
[  144.769963][ T4926] Bluetooth: hci2: unexpected event for opcode 0x0419
[  145.864425][ T5711] usb 4-1: USB disconnect, device number 10
[  145.918577][   T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  146.087255][   T29] usb 3-1: Using ep0 maxpacket: 32
[  146.099106][   T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  146.118628][   T29] usb 3-1: config 0 has no interface number 0
[  146.129652][   T29] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  146.149522][   T29] usb 3-1: config 0 interface 1 has no altsetting 0
[  146.159967][   T29] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  146.171002][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.179717][   T29] usb 3-1: Product: syz
[  146.184073][   T29] usb 3-1: Manufacturer: syz
[  146.189977][   T29] usb 3-1: SerialNumber: syz
[  146.197998][   T29] usb 3-1: config 0 descriptor??
[  146.776263][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  146.776281][   T30] audit: type=1326 audit(1783943926.752:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  146.852459][   T30] audit: type=1326 audit(1783943926.752:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  146.899076][   T30] audit: type=1326 audit(1783943926.792:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  146.926172][   T30] audit: type=1326 audit(1783943926.792:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.051908][   T30] audit: type=1326 audit(1783943926.792:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.131288][   T30] audit: type=1326 audit(1783943926.792:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.211797][   T30] audit: type=1326 audit(1783943926.792:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.293205][   T30] audit: type=1326 audit(1783943926.792:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.320026][ T5805] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  147.363195][   T30] audit: type=1326 audit(1783943926.802:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.470980][   T30] audit: type=1326 audit(1783943926.802:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff263d9de59 code=0x7ffc0000
[  147.572625][   T29] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  147.600169][   T29] cx231xx 3-1:0.1: Failed to read PCB config
[  147.618711][   T29] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  147.647028][   T29] usb 3-1: USB disconnect, device number 10
[  147.987373][   T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  148.108941][ T6922] netlink: 'syz.1.295': attribute type 21 has an invalid length.
[  148.150485][ T6922] netlink: 156 bytes leftover after parsing attributes in process `syz.1.295'.
[  148.169095][   T29] usb 3-1: Using ep0 maxpacket: 32
[  148.189373][   T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  148.206514][   T29] usb 3-1: config 0 has no interface number 0
[  148.283068][   T29] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  148.301999][   T29] usb 3-1: config 0 interface 1 has no altsetting 0
[  148.311245][   T29] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  148.322155][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.331180][   T29] usb 3-1: Product: syz
[  148.402715][   T29] usb 3-1: Manufacturer: syz
[  148.410962][   T29] usb 3-1: SerialNumber: syz
[  148.442292][   T29] usb 3-1: config 0 descriptor??
[  148.872815][ T6938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'.
[  149.081341][   T29] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  149.118159][   T29] cx231xx 3-1:0.1: Failed to read PCB config
[  149.162684][   T29] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  149.234613][   T29] usb 3-1: USB disconnect, device number 11
[  149.603051][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  149.663038][ T6950] netlink: 'syz.4.303': attribute type 4 has an invalid length.
[  149.799738][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.826106][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.886482][   T29] kernel read not supported for file /205/net/if_inet6 (pid: 29 comm: kworker/1:1)
[  149.967233][   T10] usb 5-1: USB disconnect, device number 6
[  150.050371][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  150.096765][   T10] cp210x 5-1:0.0: device disconnected
[  150.212739][ T6962] FAULT_INJECTION: forcing a failure.
[  150.212739][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.280914][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.0.306 Not tainted syzkaller #0 PREEMPT(full) 
[  150.280940][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  150.280951][ T6962] Call Trace:
[  150.280957][ T6962]  <TASK>
[  150.280963][ T6962]  dump_stack_lvl+0x100/0x190
[  150.280991][ T6962]  should_fail_ex.cold+0x5/0xa
[  150.281014][ T6962]  _copy_from_user+0x2e/0xd0
[  150.281037][ T6962]  comedi_unlocked_ioctl+0x146a/0x3310
[  150.281060][ T6962]  ? tomoyo_path_number_perm+0x188/0x580
[  150.281088][ T6962]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  150.281115][ T6962]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.281136][ T6962]  ? do_vfs_ioctl+0x226/0x13e0
[  150.281156][ T6962]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  150.281178][ T6962]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  150.281211][ T6962]  ? __fget_files+0x215/0x3d0
[  150.281236][ T6962]  ? hook_file_ioctl_common+0x140/0x440
[  150.281260][ T6962]  ? selinux_file_ioctl+0x13b/0x290
[  150.281283][ T6962]  ? selinux_file_ioctl+0xb6/0x290
[  150.281308][ T6962]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  150.281331][ T6962]  __x64_sys_ioctl+0x18e/0x210
[  150.281356][ T6962]  do_syscall_64+0x115/0x870
[  150.281380][ T6962]  ? clear_bhb_loop+0x40/0x90
[  150.281402][ T6962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.281420][ T6962] RIP: 0033:0x7f941a39de59
[  150.281435][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.281452][ T6962] RSP: 002b:00007f941b1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.281470][ T6962] RAX: ffffffffffffffda RBX: 00007f941a625fa0 RCX: 00007f941a39de59
[  150.281481][ T6962] RDX: 0000000000000000 RSI: 000000008010640b RDI: 0000000000000003
[  150.281491][ T6962] RBP: 00007f941b1c0090 R08: 0000000000000000 R09: 0000000000000000
[  150.281502][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.281512][ T6962] R13: 00007f941a626038 R14: 00007f941a625fa0 R15: 00007ffc227ef158
[  150.281535][ T6962]  </TASK>
[  150.588374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  151.011552][ T6967] netlink: 'syz.2.308': attribute type 3 has an invalid length.
[  151.021755][ T6967] netlink: 'syz.2.308': attribute type 1 has an invalid length.
[  151.034686][ T6967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.308'.
[  151.054043][ T6967] NCSI netlink: No device for ifindex 4294967295
[  151.128629][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.313'.
[  151.242992][ T6987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'.
[  152.140572][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  152.325780][   T10] usb 4-1: device descriptor read/64, error -71
[  152.452065][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  152.452082][   T30] audit: type=1400 audit(1783943932.432:637): avc:  denied  { create } for  pid=7005 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  152.505053][ T7008] macsec0: entered promiscuous mode
[  152.567503][ T7005] macsec0: left promiscuous mode
[  152.577234][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  152.727209][   T10] usb 4-1: device descriptor read/64, error -71
[  152.857593][   T10] usb usb4-port1: attempt power cycle
[  153.218598][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  153.236117][   T30] audit: type=1400 audit(1783943933.212:638): avc:  denied  { create } for  pid=7013 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  153.259172][   T10] usb 4-1: device descriptor read/8, error -71
[  153.276797][   T30] audit: type=1400 audit(1783943933.252:639): avc:  denied  { ioctl } for  pid=7013 comm="syz.2.323" path="socket:[13764]" dev="sockfs" ino=13764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  153.369220][   T30] audit: type=1400 audit(1783943933.352:640): avc:  denied  { read } for  pid=7017 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  153.410763][ T7023] netlink: 'syz.1.326': attribute type 11 has an invalid length.
[  153.457345][ T5343] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  153.497587][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  153.541481][   T10] usb 4-1: device descriptor read/8, error -71
[  153.640791][ T5343] usb 1-1: Using ep0 maxpacket: 32
[  153.660230][   T10] usb usb4-port1: unable to enumerate USB device
[  153.676709][ T5343] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  153.689350][ T5343] usb 1-1: config 0 has no interface number 0
[  153.695867][ T5343] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.715714][ T5343] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0
[  153.728763][ T5343] usb 1-1: config 0 interface 184 has no altsetting 0
[  153.773913][ T5343] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  153.788898][ T5343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.796926][ T5343] usb 1-1: Product: syz
[  153.802024][ T5343] usb 1-1: Manufacturer: syz
[  153.806652][ T5343] usb 1-1: SerialNumber: syz
[  153.816530][ T5343] usb 1-1: config 0 descriptor??
[  153.828299][ T5343] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  153.855360][ T5343] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  154.073067][ T7035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.121899][   T30] audit: type=1400 audit(1783943935.102:641): avc:  denied  { append } for  pid=7045 comm="syz.4.333" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  155.314077][   T30] audit: type=1400 audit(1783943935.122:642): avc:  denied  { ioctl } for  pid=7045 comm="syz.4.333" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  155.380552][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[  155.391157][   T30] audit: type=1400 audit(1783943935.352:643): avc:  denied  { bind } for  pid=7054 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  155.419410][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.091959][   T30] audit: type=1400 audit(1783943935.352:644): avc:  denied  { setopt } for  pid=7054 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  156.968755][ T5343] usb 1-1: USB disconnect, device number 8
[  158.510506][   T30] audit: type=1400 audit(1783943938.472:645): avc:  denied  { mount } for  pid=7065 comm="syz.0.338" name="/" dev="ramfs" ino=13934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  158.774673][ T7085] fuse: Unknown parameter 'grou00000000000000000000'
[  159.248797][ T7094] 9pnet_fd: Insufficient options for proto=fd
[  162.010695][   T30] audit: type=1400 audit(1783943941.988:646): avc:  denied  { read write } for  pid=7107 comm="syz.0.350" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  162.039167][ T7108] loop4: detected capacity change from 0 to 2640
[  162.048037][   T30] audit: type=1400 audit(1783943942.008:647): avc:  denied  { open } for  pid=7107 comm="syz.0.350" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  162.082701][ T7108] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  162.099472][ T7108] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  162.117323][ T7108] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  162.128678][ T7108] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  162.138541][ T7108] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  162.148921][ T7108] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  162.158148][ T7108] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  162.167560][ T7108] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  162.178999][ T7108] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  162.189636][ T7108] Buffer I/O error on dev loop4, logical block 9, lost async page write
[  164.113331][   T30] audit: type=1400 audit(1783943944.088:648): avc:  denied  { write } for  pid=7144 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  164.551207][ T5805] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  164.727320][ T5805] usb 3-1: Using ep0 maxpacket: 32
[  164.748455][ T5805] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  164.763445][ T5805] usb 3-1: config 0 has no interface number 0
[  164.796579][ T5805] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  164.832114][ T5805] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0
[  164.859354][ T5805] usb 3-1: config 0 interface 184 has no altsetting 0
[  164.879206][ T5805] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  164.889517][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.899629][ T5805] usb 3-1: Product: syz
[  164.903873][ T5805] usb 3-1: Manufacturer: syz
[  164.909223][ T5805] usb 3-1: SerialNumber: syz
[  164.919481][ T5805] usb 3-1: config 0 descriptor??
[  164.925922][ T7160] fuse: Unknown parameter 'fuse'
[  164.934931][ T5805] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  164.938580][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'.
[  164.958335][ T5805] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  165.237671][ T5726] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  166.031904][ T7175] 9p: Bad value for 'rfdno'
[  166.463992][   T30] audit: type=1400 audit(1783943946.426:649): avc:  denied  { search } for  pid=7174 comm="syz.1.369" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  166.864478][   T30] audit: type=1400 audit(1783943946.426:650): avc:  denied  { search } for  pid=7174 comm="syz.1.369" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  166.897468][   T30] audit: type=1400 audit(1783943946.426:651): avc:  denied  { read } for  pid=7174 comm="syz.1.369" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  166.919740][   T30] audit: type=1400 audit(1783943946.426:652): avc:  denied  { read open } for  pid=7174 comm="syz.1.369" path="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  167.032127][ T5726] usb 5-1: Using ep0 maxpacket: 8
[  167.046584][ T5726] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  167.057196][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.094403][ T5726] pvrusb2: Hardware description: Terratec Grabster AV400
[  167.117600][ T5726] pvrusb2: **********
[  167.129149][ T5726] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  167.148857][ T5726] pvrusb2: Important functionality might not be entirely working.
[  167.161494][ T5726] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  167.175694][ T5726] pvrusb2: **********
[  167.471552][ T2363] pvrusb2: Invalid write control endpoint
[  167.512540][ T5726] usb 3-1: USB disconnect, device number 12
[  167.620626][ T5343] IPVS: starting estimator thread 0...
[  167.631657][ T7162] pvrusb2: Invalid write control endpoint
[  167.639546][ T5343] usb 5-1: USB disconnect, device number 7
[  167.655809][   T30] audit: type=1400 audit(1783943947.606:653): avc:  denied  { append } for  pid=7161 comm="syz.4.366" name="i2c-1" dev="devtmpfs" ino=2988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  168.029869][ T7197] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20264
[  168.095672][ T7193] IPVS: using max 44 ests per chain, 105600 per kthread
[  168.125169][ T2363] pvrusb2: Invalid write control endpoint
[  168.131899][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  168.143262][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  168.156222][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  168.167820][ T2363] pvrusb2: Device being rendered inoperable
[  168.179296][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  168.188667][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  168.254119][ T2363] pvrusb2: Attached sub-driver cx25840
[  168.261230][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  168.273413][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  168.599262][   T30] audit: type=1400 audit(1783943948.576:654): avc:  denied  { create } for  pid=7208 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  168.639157][   T30] audit: type=1400 audit(1783943948.576:655): avc:  denied  { write } for  pid=7208 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  168.734077][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'.
[  168.764810][ T7210] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  169.656680][   T30] audit: type=1400 audit(1783943949.626:656): avc:  denied  { write } for  pid=7217 comm="syz.3.381" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  169.745004][ T7234] netlink: 'syz.0.383': attribute type 12 has an invalid length.
[  169.760051][ T5343] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  169.972806][ T7234] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  170.658718][ T5343] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  170.783277][ T5343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.795559][ T7241] process 'syz.0.387' launched './file0' with NULL argv: empty string added
[  170.811972][   T30] audit: type=1400 audit(1783943950.766:657): avc:  denied  { execute } for  pid=7238 comm="syz.0.387" name="file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  170.812486][ T7241] Invalid argument reading file caps for ./file0
[  170.858630][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  170.892442][ T5343] usb 3-1: SerialNumber: syz
[  170.902386][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'.
[  170.913736][   T30] audit: type=1400 audit(1783943950.786:658): avc:  denied  { execute_no_trans } for  pid=7238 comm="syz.0.387" path="/68/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  170.949727][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  171.267375][ T5748] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  171.273450][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  171.424398][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.437438][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  171.456093][   T10] usb 5-1: SerialNumber: syz
[  171.588659][ T5748] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  171.609402][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  171.632891][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  171.635247][ T5343] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  171.677283][ T5748] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  171.696705][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.719470][ T5748] usb 4-1: config 0 descriptor??
[  171.737310][ T7249] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  172.100522][ T7254] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  172.456456][ T5748] hid-steam 0003:28DE:1205.000F: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0
[  172.457961][   T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  172.527212][ T5748] hid-steam 0003:28DE:1205.000F: Steam Controller 'XXXXXXXXXX' connected
[  172.559742][ T5748] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.000F/input/input23
[  172.644557][ T5748] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.000F/input/input24
[  172.728304][ T5748] hid-steam 0003:28DE:1205.0010: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0
[  173.082873][ T7261] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  173.514242][ T5343] usb 3-1: USB disconnect, device number 13
[  173.526784][ T5748] usb 4-1: USB disconnect, device number 16
[  173.645275][ T5748] hid-steam 0003:28DE:1205.000F: Steam Controller 'XXXXXXXXXX' disconnected
[  174.478352][   T29] usb 5-1: USB disconnect, device number 8
[  175.175239][ T7289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.197580][ T7287] overlayfs: statfs failed on './file0'
[  176.522262][ T7300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.613762][ T7307] 9pnet_fd: Insufficient options for proto=fd
[  177.798766][   T30] audit: type=1400 audit(1783943957.766:659): avc:  denied  { create } for  pid=7282 comm="syz.4.397" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  178.036617][   T30] audit: type=1400 audit(1783943958.006:660): avc:  denied  { unlink } for  pid=5607 comm="syz-executor" name="file1" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  178.503006][   T30] audit: type=1400 audit(1783943958.448:661): avc:  denied  { accept } for  pid=7323 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  179.752287][ T7345] netlink: 'syz.1.414': attribute type 2 has an invalid length.
[  180.137450][   T30] audit: type=1400 audit(1783943960.038:662): avc:  denied  { getopt } for  pid=7346 comm="syz.4.415" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  181.074809][ T4926] Bluetooth: hci4: unexpected event for opcode 0x0c7c
[  181.387271][ T7376] FAULT_INJECTION: forcing a failure.
[  181.387271][ T7376] name failslab, interval 1, probability 0, space 0, times 0
[  181.402910][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(full) 
[  181.402934][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  181.402943][ T7376] Call Trace:
[  181.402949][ T7376]  <TASK>
[  181.402955][ T7376]  dump_stack_lvl+0x100/0x190
[  181.402980][ T7376]  should_fail_ex.cold+0x5/0xa
[  181.402998][ T7376]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  181.403024][ T7376]  should_failslab+0xc2/0x120
[  181.403044][ T7376]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.403064][ T7376]  ? skb_clone+0x190/0x400
[  181.403084][ T7376]  skb_clone+0x190/0x400
[  181.403102][ T7376]  netlink_deliver_tap+0xaed/0xcc0
[  181.403131][ T7376]  netlink_unicast+0x62b/0x850
[  181.403158][ T7376]  ? __pfx_netlink_unicast+0x10/0x10
[  181.403182][ T7376]  ? __pfx_sock_has_perm+0x10/0x10
[  181.403208][ T7376]  netlink_sendmsg+0x8b0/0xda0
[  181.403236][ T7376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.403270][ T7376]  ? selinux_socket_sendmsg+0x198/0x2f0
[  181.403295][ T7376]  ____sys_sendmsg+0xa4d/0xbe0
[  181.403316][ T7376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.403341][ T7376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.403375][ T7376]  ___sys_sendmsg+0x190/0x1e0
[  181.403401][ T7376]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.403422][ T7376]  ? __lock_acquire+0x49f/0x1a40
[  181.403443][ T7376]  ? get_pid_task+0x106/0x250
[  181.403496][ T7376]  __sys_sendmsg+0x160/0x210
[  181.403515][ T7376]  ? __pfx___sys_sendmsg+0x10/0x10
[  181.403546][ T7376]  do_syscall_64+0x115/0x870
[  181.403571][ T7376]  ? clear_bhb_loop+0x40/0x90
[  181.403592][ T7376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.403610][ T7376] RIP: 0033:0x7fc1c219de59
[  181.403624][ T7376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.403640][ T7376] RSP: 002b:00007fc1c3036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.403657][ T7376] RAX: ffffffffffffffda RBX: 00007fc1c2425fa0 RCX: 00007fc1c219de59
[  181.403668][ T7376] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  181.403677][ T7376] RBP: 00007fc1c3036090 R08: 0000000000000000 R09: 0000000000000000
[  181.403686][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.403695][ T7376] R13: 00007fc1c2426038 R14: 00007fc1c2425fa0 R15: 00007ffe8e4fe6c8
[  181.403717][ T7376]  </TASK>
[  181.406180][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.537739][ T5748] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  181.656468][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.745861][ T7387] mmap: syz.1.426 (7387) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  181.758868][   T30] audit: type=1400 audit(1783943961.718:663): avc:  denied  { write } for  pid=7382 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  181.830334][ T5748] usb 5-1: Using ep0 maxpacket: 8
[  181.837861][ T5748] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  181.847455][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.858757][ T5748] pvrusb2: Hardware description: Terratec Grabster AV400
[  181.865995][ T5748] pvrusb2: **********
[  181.870826][ T5748] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  181.887161][ T5748] pvrusb2: Important functionality might not be entirely working.
[  181.895264][ T5748] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  181.907287][ T5748] pvrusb2: **********
[  182.071913][ T7367] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  182.082695][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.100298][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.131019][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.146383][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.189259][ T2363] pvrusb2: Invalid write control endpoint
[  182.309990][ T2363] pvrusb2: Invalid write control endpoint
[  182.322351][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  182.334720][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  182.343618][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  182.354548][ T2363] pvrusb2: Device being rendered inoperable
[  182.369013][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  182.379673][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  182.448648][ T7367] pvrusb2: Attempted to execute control transfer when device not ok
[  182.458940][ T2363] pvrusb2: Attached sub-driver cx25840
[  182.472702][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  183.008289][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  183.307685][ T7402] tmpfs: Unknown parameter ''
[  183.372858][   T30] audit: type=1400 audit(1783943963.300:664): avc:  denied  { read write } for  pid=7398 comm="syz.2.430" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  183.712890][ T7404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.721869][   T30] audit: type=1400 audit(1783943963.300:665): avc:  denied  { open } for  pid=7398 comm="syz.2.430" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  183.721914][   T30] audit: type=1400 audit(1783943963.300:666): avc:  denied  { ioctl } for  pid=7398 comm="syz.2.430" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  184.099526][   T30] audit: type=1400 audit(1783943964.080:667): avc:  denied  { read write } for  pid=7409 comm="syz.2.434" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  184.123748][ T7411] macsec0: entered promiscuous mode
[  184.135583][   T30] audit: type=1400 audit(1783943964.110:668): avc:  denied  { open } for  pid=7409 comm="syz.2.434" path="/88/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  184.165955][ T7410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.434'.
[  184.213929][ T7408] macsec0: left promiscuous mode
[  184.327675][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'.
[  184.429473][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'.
[  184.748902][ T7433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.035610][ T7431] IPv6: NLM_F_CREATE should be specified when creating new route
[  185.055878][   T10] usb 5-1: USB disconnect, device number 9
[  185.907309][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  186.077138][    T9] usb 3-1: Using ep0 maxpacket: 8
[  186.083926][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  186.151325][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.178860][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  186.282199][ T5805] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  186.677981][    T9] pvrusb2: **********
[  186.682027][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  186.707640][    T9] pvrusb2: Important functionality might not be entirely working.
[  186.732177][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  186.761951][    T9] pvrusb2: **********
[  186.771287][ T2363] pvrusb2: Invalid write control endpoint
[  186.830480][ T7467] FAULT_INJECTION: forcing a failure.
[  186.830480][ T7467] name failslab, interval 1, probability 0, space 0, times 0
[  186.839815][ T2363] pvrusb2: Invalid write control endpoint
[  186.956768][ T7467] CPU: 0 UID: 0 PID: 7467 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(full) 
[  186.956793][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  186.956803][ T7467] Call Trace:
[  186.956809][ T7467]  <TASK>
[  186.956816][ T7467]  dump_stack_lvl+0x100/0x190
[  186.956842][ T7467]  should_fail_ex.cold+0x5/0xa
[  186.956863][ T7467]  should_failslab+0xc2/0x120
[  186.956890][ T7467]  __kmalloc_noprof+0xfc/0x820
[  186.956908][ T7467]  ? tomoyo_encode2+0xfb/0x3c0
[  186.956937][ T7467]  tomoyo_encode2+0xfb/0x3c0
[  186.956965][ T7467]  tomoyo_encode+0x29/0x50
[  186.956989][ T7467]  tomoyo_realpath_from_path+0x18c/0x690
[  186.957030][ T7467]  tomoyo_path_number_perm+0x23c/0x580
[  186.957051][ T7467]  ? tomoyo_path_number_perm+0x22e/0x580
[  186.957077][ T7467]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  186.957118][ T7467]  ? find_held_lock+0x2b/0x80
[  186.957142][ T7467]  ? __fget_files+0x215/0x3d0
[  186.957168][ T7467]  ? hook_file_ioctl_common+0x140/0x440
[  186.957184][ T7467]  ? __fget_files+0x215/0x3d0
[  186.957221][ T7467]  ? __fget_files+0x21f/0x3d0
[  186.957250][ T7467]  security_file_ioctl+0xd3/0x230
[  186.957274][ T7467]  __x64_sys_ioctl+0xb7/0x210
[  186.957299][ T7467]  do_syscall_64+0x115/0x870
[  186.957323][ T7467]  ? clear_bhb_loop+0x40/0x90
[  186.957345][ T7467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.957362][ T7467] RIP: 0033:0x7f55e399de59
[  186.957377][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.957393][ T7467] RSP: 002b:00007f55e4863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  186.957411][ T7467] RAX: ffffffffffffffda RBX: 00007f55e3c26090 RCX: 00007f55e399de59
[  186.957423][ T7467] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000004
[  186.957433][ T7467] RBP: 00007f55e4863090 R08: 0000000000000000 R09: 0000000000000000
[  186.957443][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.957453][ T7467] R13: 00007f55e3c26128 R14: 00007f55e3c26090 R15: 00007fff8b310488
[  186.957478][ T7467]  </TASK>
[  187.165244][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  187.174550][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  187.178411][ T7467] ERROR: Out of memory at tomoyo_realpath_from_path.
[  187.182283][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  187.189902][ T5805] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  187.189926][ T5805] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  187.189942][ T5805] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  187.189970][ T5805] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  187.199989][ T2363] pvrusb2: Device being rendered inoperable
[  187.201877][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  187.249022][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  187.258466][ T2363] pvrusb2: Attached sub-driver cx25840
[  187.263950][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  187.274051][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  187.306710][ T7467] pvrusb2: Attempted to execute control transfer when device not ok
[  187.579511][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9
[  187.763692][ T7474] overlayfs: failed to clone upperpath
[  187.837794][    T9] usb 3-1: USB disconnect, device number 14
[  187.860878][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  187.873220][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 189, setting to 8
[  187.885612][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  187.942019][ T5805] usb 5-1: string descriptor 0 read error: -22
[  187.951308][ T5805] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  187.980985][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.011502][ T5805] usb 5-1: config 0 descriptor??
[  188.026395][ T7454] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  188.037922][ T5805] hub 5-1:0.0: bad descriptor, ignoring hub
[  188.047066][ T5805] hub 5-1:0.0: probe with driver hub failed with error -5
[  188.268893][ T7454] fuse: Unknown parameter 'user_id00000000000000000000'
[  188.371131][ T7486] fuse: Bad value for 'user_id'
[  188.376103][ T7486] fuse: Bad value for 'user_id'
[  188.391552][   T30] audit: type=1400 audit(1783943968.370:669): avc:  denied  { create } for  pid=7485 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  188.436400][ T7488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.436516][   T30] audit: type=1400 audit(1783943968.390:670): avc:  denied  { connect } for  pid=7485 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  188.469972][ T5805] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  188.520487][   T30] audit: type=1400 audit(1783943968.500:671): avc:  denied  { write } for  pid=7485 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  188.639763][ T5805] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.717037][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  188.881647][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  189.325617][ T5805] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  189.338685][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  189.347227][ T5805] usb 1-1: SerialNumber: syz
[  189.530586][    T9] usb 5-1: USB disconnect, device number 10
[  189.622332][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.648374][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.740240][   T30] audit: type=1400 audit(1783943969.720:672): avc:  denied  { listen } for  pid=7501 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  189.804330][ T7504] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  189.837232][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  189.871361][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.995074][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  190.020400][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.048721][    T9] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.060882][ T5805] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  190.074135][    T9] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.094241][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  190.123780][    T9] usb 3-1: string descriptor 0 read error: -22
[  190.131548][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40
[  190.154380][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.166860][ T7516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.470794][    T9] kone 0003:1E7D:2CED.0011: unexpected long global item
[  191.493230][    T9] kone 0003:1E7D:2CED.0011: parse failed
[  191.499338][    T9] kone 0003:1E7D:2CED.0011: probe with driver kone failed with error -22
[  191.500000][ T7521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.572318][ T5805] usb 3-1: USB disconnect, device number 15
[  191.933693][ T5805] usb 1-1: USB disconnect, device number 9
[  192.184656][ T7530] FAULT_INJECTION: forcing a failure.
[  192.184656][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.306830][ T7530] CPU: 1 UID: 0 PID: 7530 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(full) 
[  192.306854][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  192.306864][ T7530] Call Trace:
[  192.306870][ T7530]  <TASK>
[  192.306875][ T7530]  dump_stack_lvl+0x100/0x190
[  192.306900][ T7530]  should_fail_ex.cold+0x5/0xa
[  192.306919][ T7530]  _copy_from_iter+0x1f4/0x1690
[  192.306942][ T7530]  ? __asan_memset+0x23/0x50
[  192.306967][ T7530]  ? __pfx__copy_from_iter+0x10/0x10
[  192.306987][ T7530]  ? __pfx___alloc_skb+0x10/0x10
[  192.307012][ T7530]  netlink_sendmsg+0x808/0xda0
[  192.307037][ T7530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.307062][ T7530]  ? selinux_socket_sendmsg+0x198/0x2f0
[  192.307088][ T7530]  ____sys_sendmsg+0xa4d/0xbe0
[  192.307108][ T7530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.307132][ T7530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.307163][ T7530]  ___sys_sendmsg+0x190/0x1e0
[  192.307186][ T7530]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.307211][ T7530]  ? __lock_acquire+0x49f/0x1a40
[  192.307231][ T7530]  ? get_pid_task+0x106/0x250
[  192.307281][ T7530]  __sys_sendmsg+0x160/0x210
[  192.307298][ T7530]  ? __pfx___sys_sendmsg+0x10/0x10
[  192.307326][ T7530]  do_syscall_64+0x115/0x870
[  192.307351][ T7530]  ? clear_bhb_loop+0x40/0x90
[  192.307372][ T7530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.307387][ T7530] RIP: 0033:0x7f55e399de59
[  192.307401][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.307416][ T7530] RSP: 002b:00007f55e4884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.307432][ T7530] RAX: ffffffffffffffda RBX: 00007f55e3c25fa0 RCX: 00007f55e399de59
[  192.307442][ T7530] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  192.307452][ T7530] RBP: 00007f55e4884090 R08: 0000000000000000 R09: 0000000000000000
[  192.307462][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.307471][ T7530] R13: 00007f55e3c26038 R14: 00007f55e3c25fa0 R15: 00007fff8b310488
[  192.307494][ T7530]  </TASK>
[  192.307627][   T30] audit: type=1400 audit(1783943972.190:673): avc:  denied  { listen } for  pid=7529 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  192.625904][   T30] audit: type=1400 audit(1783943972.600:674): avc:  denied  { name_connect } for  pid=7529 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  193.958964][ T4926] Bluetooth: hci2: unexpected cc 0x1407 length: 4 < 9
[  193.965843][ T4926] Bluetooth: hci2: unexpected event for opcode 0x1407
[  194.179802][ T7552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.182325][ T4926] Bluetooth: hci3: unexpected event for opcode 0x1408
[  195.871837][ T7565] fuse: Bad value for 'fd'
[  195.895798][   T30] audit: type=1400 audit(1783943975.850:675): avc:  denied  { mounton } for  pid=7563 comm="syz.1.479" path="/144/file0" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  195.982635][ T7562] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  196.737872][   T30] audit: type=1400 audit(1783943976.710:676): avc:  denied  { write } for  pid=7577 comm="syz.2.484" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  197.069478][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  197.300519][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  197.309762][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.324390][   T10] usb 4-1: Product: syz
[  197.328703][   T10] usb 4-1: Manufacturer: syz
[  197.333302][   T10] usb 4-1: SerialNumber: syz
[  197.832728][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  197.845403][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  197.866804][ T4926] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  198.222849][ T4926] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  198.315298][ T7614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.562043][   T30] audit: type=1400 audit(1783943978.540:677): avc:  denied  { mounton } for  pid=7617 comm="syz.0.496" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  199.579014][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  199.612308][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'.
[  199.621457][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  199.623123][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  199.680076][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  199.702082][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  199.770289][   T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  199.824502][   T10] usb 4-1: USB disconnect, device number 17
[  200.037435][   T30] audit: type=1400 audit(1783943980.010:678): avc:  denied  { create } for  pid=7637 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  200.113212][ T4926] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  200.141314][ T7636] macsec0: entered promiscuous mode
[  200.221878][ T7643] team0: No ports can be present during mode change
[  200.829230][   T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  200.846444][ T7632] macsec0: left promiscuous mode
[  200.917192][ T5343] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  201.022814][   T10] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  201.036634][   T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4
[  201.051178][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  201.063306][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  201.091079][   T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  201.100962][ T5343] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  201.113933][   T10] usb 4-1: Product: syz
[  201.129684][   T10] usb 4-1: Manufacturer: syz
[  201.137671][ T5343] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4
[  201.150514][   T10] usb 4-1: SerialNumber: syz
[  201.165691][   T10] usb 4-1: config 0 descriptor??
[  201.171374][ T5343] usb 3-1: config 0 interface 0 has no altsetting 0
[  201.183012][   T10] usb 4-1: selecting invalid altsetting 0
[  201.193139][ T5343] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  201.205285][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  201.224892][ T5343] usb 3-1: Product: syz
[  201.240151][ T5343] usb 3-1: Manufacturer: syz
[  201.252629][ T5343] usb 3-1: SerialNumber: syz
[  201.277519][ T5343] usb 3-1: config 0 descriptor??
[  201.391218][ T5343] usb 3-1: selecting invalid altsetting 0
[  201.426408][   T10] usb 4-1: USB disconnect, device number 18
[  201.511643][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.540446][   T30] audit: type=1400 audit(1783943981.520:679): avc:  denied  { read } for  pid=7674 comm="syz.3.512" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  201.567266][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.682526][ T7671] veth1_to_bond: entered allmulticast mode
[  201.698404][   T30] audit: type=1400 audit(1783943981.520:680): avc:  denied  { open } for  pid=7674 comm="syz.3.512" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  201.803991][ T7666] veth1_to_bond: left allmulticast mode
[  201.819979][   T30] audit: type=1400 audit(1783943981.610:681): avc:  denied  { module_request } for  pid=7666 comm="syz.4.510" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  201.889470][ T5748] usb 3-1: USB disconnect, device number 16
[  201.895920][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.938871][ T7683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  206.325106][   T30] audit: type=1400 audit(1783943986.300:682): avc:  denied  { create } for  pid=7710 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  206.436885][ T7716] overlayfs: upper fs does not support file handles, falling back to index=off.
[  206.619994][ T7721] netlink: 'syz.4.520': attribute type 4 has an invalid length.
[  206.709250][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'.
[  206.732587][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.522'.
[  206.826609][   T30] audit: type=1400 audit(1783943986.800:683): avc:  denied  { bind } for  pid=7722 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  206.886014][ T7733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.944533][   T30] audit: type=1400 audit(1783943987.730:684): avc:  denied  { map } for  pid=7737 comm="syz.3.526" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  208.324054][   T30] audit: type=1400 audit(1783943988.300:685): avc:  denied  { ioctl } for  pid=7737 comm="syz.3.526" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  208.442558][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'.
[  208.488544][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  208.648525][    T9] usb 1-1: Using ep0 maxpacket: 32
[  208.658751][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.529'.
[  208.677486][    T9] usb 1-1: config 11 has an invalid interface number: 161 but max is 0
[  208.692333][    T9] usb 1-1: config 11 has no interface number 0
[  208.704631][    T9] usb 1-1: config 11 interface 161 has no altsetting 0
[  208.727568][    T9] usb 1-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  208.739393][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.755765][    T9] usb 1-1: Product: syz
[  208.763328][    T9] usb 1-1: Manufacturer: syz
[  208.776979][    T9] usb 1-1: SerialNumber: syz
[  208.913425][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.922478][ T5711] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  209.731664][ T5711] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  210.904442][ T5711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.913565][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.921752][ T5711] usb 4-1: SerialNumber: syz
[  210.965707][    T9] usblcd 1-1:11.161: USBLCD model not supported.
[  211.001763][    T9] usb 1-1: USB disconnect, device number 10
[  211.414729][   T30] audit: type=1326 audit(1783943991.390:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  211.522286][   T30] audit: type=1326 audit(1783943991.390:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  211.614567][ T5711] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  211.653514][   T30] audit: type=1326 audit(1783943991.390:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  211.752099][   T30] audit: type=1326 audit(1783943991.390:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  211.868297][   T30] audit: type=1326 audit(1783943991.420:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.042205][   T30] audit: type=1326 audit(1783943991.420:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.649223][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'.
[  212.675650][   T30] audit: type=1326 audit(1783943991.420:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.747204][   T30] audit: type=1326 audit(1783943991.470:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.806411][ T7789] IPv4: Oversized IP packet from 127.202.26.0
[  212.829695][   T30] audit: type=1326 audit(1783943991.470:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.856558][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'.
[  212.900482][   T30] audit: type=1326 audit(1783943991.470:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.928313][   T30] audit: type=1326 audit(1783943991.470:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  212.971440][   T30] audit: type=1326 audit(1783943991.470:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  213.034097][   T30] audit: type=1326 audit(1783943991.480:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  213.074559][   T30] audit: type=1326 audit(1783943991.480:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.1.536" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa007b9de59 code=0x7ffc0000
[  213.659368][ T5711] usb 4-1: USB disconnect, device number 19
[  215.017167][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  215.057187][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  215.178754][    T9] usb 1-1: Using ep0 maxpacket: 32
[  215.185221][    T9] usb 1-1: config 11 has an invalid interface number: 161 but max is 0
[  215.193695][    T9] usb 1-1: config 11 has no interface number 0
[  215.200380][    T9] usb 1-1: config 11 interface 161 has no altsetting 0
[  215.208929][    T9] usb 1-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  215.218046][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.226027][    T9] usb 1-1: Product: syz
[  215.230246][   T10] usb 3-1: Using ep0 maxpacket: 32
[  215.235381][    T9] usb 1-1: Manufacturer: syz
[  215.240086][    T9] usb 1-1: SerialNumber: syz
[  215.246071][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  215.258897][   T10] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  215.268718][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.276734][   T10] usb 3-1: Product: syz
[  215.281606][   T10] usb 3-1: Manufacturer: syz
[  215.286218][   T10] usb 3-1: SerialNumber: syz
[  215.327450][ T5343] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  215.601612][ T5343] usb 5-1: unable to get BOS descriptor or descriptor too short
[  216.241279][ T7824] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  217.611651][ T5343] usb 5-1: not running at top speed; connect to a high speed hub
[  217.669513][    T9] usblcd 1-1:11.161: USBLCD model not supported.
[  217.676325][ T5343] usb 5-1: config 64 interface 0 has no altsetting 0
[  217.686927][ T5343] usb 5-1: New USB device found, idVendor=0572, idProduct=c689, bcdDevice=35.9a
[  217.696700][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.708092][    T9] usb 1-1: USB disconnect, device number 11
[  217.715995][ T5343] usb 5-1: Product: syz
[  217.720578][ T5343] usb 5-1: Manufacturer: syz
[  217.727367][ T5343] usb 5-1: SerialNumber: syz
[  217.883795][ T7829] fuse: fd is not a fuse device
[  217.889774][ T7829] fuse: fd is not a fuse device
[  217.904178][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  217.924527][ T7831] FAULT_INJECTION: forcing a failure.
[  217.924527][ T7831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.937717][ T7831] CPU: 0 UID: 0 PID: 7831 Comm: syz.0.556 Not tainted syzkaller #0 PREEMPT(full) 
[  217.937732][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  217.937741][ T7831] Call Trace:
[  217.937745][ T7831]  <TASK>
[  217.937749][ T7831]  dump_stack_lvl+0x100/0x190
[  217.937765][ T7831]  should_fail_ex.cold+0x5/0xa
[  217.937779][ T7831]  _copy_to_user+0x32/0xd0
[  217.937793][ T7831]  pagemap_read+0x51b/0x830
[  217.937810][ T7831]  ? __pfx_pagemap_read+0x10/0x10
[  217.937830][ T7831]  ? rw_verify_area+0xce/0x6d0
[  217.937843][ T7831]  ? __pfx_pagemap_read+0x10/0x10
[  217.937858][ T7831]  vfs_read+0x1e4/0xb40
[  217.937874][ T7831]  ? __pfx_vfs_read+0x10/0x10
[  217.937887][ T7831]  ? find_held_lock+0x2b/0x80
[  217.937902][ T7831]  ? __fget_files+0x215/0x3d0
[  217.937918][ T7831]  ? __fget_files+0x215/0x3d0
[  217.937936][ T7831]  ? __fget_files+0x21f/0x3d0
[  217.937956][ T7831]  __x64_sys_pread64+0x1eb/0x250
[  217.937972][ T7831]  ? __pfx___x64_sys_pread64+0x10/0x10
[  217.937991][ T7831]  do_syscall_64+0x115/0x870
[  217.938007][ T7831]  ? clear_bhb_loop+0x40/0x90
[  217.938020][ T7831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.938031][ T7831] RIP: 0033:0x7f941a39de59
[  217.938040][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.938050][ T7831] RSP: 002b:00007f941b1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  217.938061][ T7831] RAX: ffffffffffffffda RBX: 00007f941a625fa0 RCX: 00007f941a39de59
[  217.938068][ T7831] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000006
[  217.938074][ T7831] RBP: 00007f941b1c0090 R08: 0000000000000000 R09: 0000000000000000
[  217.938080][ T7831] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000001
[  217.938086][ T7831] R13: 00007f941a626038 R14: 00007f941a625fa0 R15: 00007ffc227ef158
[  217.938100][ T7831]  </TASK>
[  217.947042][ T7833] overlayfs: failed to clone upperpath
[  218.159546][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  218.159562][   T30] audit: type=1400 audit(1783943998.140:723): avc:  denied  { watch } for  pid=7818 comm="syz.4.552" path="/90" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  218.187529][   T30] audit: type=1400 audit(1783943998.140:724): avc:  denied  { watch } for  pid=7818 comm="syz.4.552" path="/90" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  218.213731][   T30] audit: type=1400 audit(1783943998.140:725): avc:  denied  { watch_sb watch_reads } for  pid=7818 comm="syz.4.552" path="/90" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  218.285430][ T5343] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  218.337761][   T10] usb 3-1: USB disconnect, device number 17
[  218.346826][ T5343] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  218.364194][ T5343] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  218.724066][ T5343] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  218.737934][ T5343] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  218.800762][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.816554][ T5343] usb 5-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C' in warm state
[  218.871483][ T5343] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  218.940848][ T5343] usb 5-1: USB disconnect, device number 11
[  219.040253][ T7847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.217353][    C0] ==================================================================
[  220.225436][    C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  220.234793][    C0] Read of size 1 at addr ffff88802aae2010 by task swapper/0/0
[  220.242316][    C0] 
[  220.244628][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  220.244641][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  220.244648][    C0] Call Trace:
[  220.244652][    C0]  <IRQ>
[  220.244657][    C0]  dump_stack_lvl+0x100/0x190
[  220.244672][    C0]  print_report+0x13d/0x4b0
[  220.244687][    C0]  ? __virt_addr_valid+0x239/0x430
[  220.244701][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  220.244715][    C0]  kasan_report+0xdf/0x1c0
[  220.244728][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  220.244744][    C0]  llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  220.244758][    C0]  ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10
[  220.244773][    C0]  llc_conn_state_process+0x3ec/0x1480
[  220.244791][    C0]  llc_conn_tmr_common_cb+0x2d4/0x880
[  220.244803][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  220.244818][    C0]  call_timer_fn+0x19a/0x610
[  220.244829][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  220.244840][    C0]  ? __run_timers+0x747/0xb00
[  220.244851][    C0]  ? rcu_is_watching+0x12/0xc0
[  220.244866][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  220.244881][    C0]  __run_timers+0x757/0xb00
[  220.244893][    C0]  ? __pfx___run_timers+0x10/0x10
[  220.244904][    C0]  ? trace_csd_function_exit+0x73/0x1f0
[  220.244917][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  220.244930][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  220.244945][    C0]  run_timer_base+0x114/0x190
[  220.244956][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  220.244968][    C0]  run_timer_softirq+0x1a/0x50
[  220.244979][    C0]  handle_softirqs+0x1ea/0x9b0
[  220.244992][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  220.245005][    C0]  ? _raw_spin_unlock+0x28/0x50
[  220.245017][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  220.245034][    C0]  __irq_exit_rcu+0x162/0x210
[  220.245047][    C0]  irq_exit_rcu+0x9/0x30
[  220.245059][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  220.245074][    C0]  </IRQ>
[  220.245078][    C0]  <TASK>
[  220.245082][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.245094][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  220.245107][    C0] Code: 56 e1 5e 00 48 89 df 5b e9 9d 5c 64 00 be 03 00 00 00 5b e9 32 5a 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 65 8b 05 85 a3 59 12 48 8b 34 24 65 48 8b 15 61 a3 59
[  220.245118][    C0] RSP: 0018:ffffffff8e807e08 EFLAGS: 00000293
[  220.245127][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd6ff8
[  220.245134][    C0] RDX: ffffffff8e891480 RSI: ffffffff81fd7002 RDI: ffffffff8e891480
[  220.245141][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  220.245148][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  220.245154][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: 000000000008b000
[  220.245162][    C0]  ? flush_smp_call_function_queue+0x158/0x1f0
[  220.245176][    C0]  ? flush_smp_call_function_queue+0x162/0x1f0
[  220.245190][    C0]  flush_smp_call_function_queue+0x168/0x1f0
[  220.245203][    C0]  do_idle+0x359/0x5b0
[  220.245217][    C0]  ? __pfx_do_idle+0x10/0x10
[  220.245232][    C0]  cpu_startup_entry+0x4f/0x60
[  220.245246][    C0]  rest_init+0x251/0x260
[  220.245262][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  220.245274][    C0]  start_kernel+0x48e/0x490
[  220.245292][    C0]  x86_64_start_reservations+0x24/0x30
[  220.245303][    C0]  x86_64_start_kernel+0x12b/0x130
[  220.245313][    C0]  common_startup_64+0x13e/0x158
[  220.245333][    C0]  </TASK>
[  220.245337][    C0] 
[  220.581067][    C0] Allocated by task 7848:
[  220.585373][    C0]  kasan_save_stack+0x30/0x50
[  220.590034][    C0]  kasan_save_track+0x14/0x30
[  220.594693][    C0]  __kasan_kmalloc+0xaa/0xb0
[  220.599272][    C0]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  220.604633][    C0]  llc_sap_open+0x120/0x3b0
[  220.609135][    C0]  llc_ui_autobind.isra.0+0x2ae/0x580
[  220.614530][    C0]  llc_ui_connect+0x582/0xdb0
[  220.619200][    C0]  __sys_connect_file+0x141/0x1a0
[  220.624225][    C0]  __sys_connect+0x141/0x170
[  220.628813][    C0]  __x64_sys_connect+0x72/0xb0
[  220.633561][    C0]  do_syscall_64+0x115/0x870
[  220.638136][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.644006][    C0] 
[  220.646333][    C0] Freed by task 0:
[  220.650027][    C0]  kasan_save_stack+0x30/0x50
[  220.654681][    C0]  kasan_save_track+0x14/0x30
[  220.659359][    C0]  kasan_save_free_info+0x3b/0x70
[  220.664373][    C0]  __kasan_slab_free+0x5f/0x80
[  220.669119][    C0]  __rcu_free_sheaf_prepare+0x5d/0x2f0
[  220.674563][    C0]  rcu_free_sheaf+0x1a/0xe0
[  220.679041][    C0]  rcu_core+0x5a2/0x10d0
[  220.683285][    C0]  handle_softirqs+0x1ea/0x9b0
[  220.688034][    C0]  __irq_exit_rcu+0x162/0x210
[  220.692689][    C0]  irq_exit_rcu+0x9/0x30
[  220.696911][    C0]  sysvec_call_function_single+0xa3/0xc0
[  220.702527][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  220.708486][    C0] 
[  220.710794][    C0] The buggy address belongs to the object at ffff88802aae2000
[  220.710794][    C0]  which belongs to the cache kmalloc-2k of size 2048
[  220.724908][    C0] The buggy address is located 16 bytes inside of
[  220.724908][    C0]  freed 2048-byte region [ffff88802aae2000, ffff88802aae2800)
[  220.738679][    C0] 
[  220.740981][    C0] The buggy address belongs to the physical page:
[  220.747366][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802aae5000 pfn:0x2aae0
[  220.757405][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  220.765876][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  220.774348][    C0] page_type: f5(slab)
[  220.778308][    C0] raw: 00fff00000000240 ffff88813fe22000 ffffea0001f23210 ffffea0000df7010
[  220.786881][    C0] raw: ffff88802aae5000 0000000800080007 00000000f5000000 0000000000000000
[  220.795454][    C0] head: 00fff00000000240 ffff88813fe22000 ffffea0001f23210 ffffea0000df7010
[  220.804105][    C0] head: ffff88802aae5000 0000000800080007 00000000f5000000 0000000000000000
[  220.812753][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  220.821400][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  220.830043][    C0] page dumped because: kasan: bad access detected
[  220.836428][    C0] page_owner tracks the page as allocated
[  220.842117][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4966, tgid 4966 (klogd), ts 69497480231, free_ts 69468887847
[  220.862843][    C0]  post_alloc_hook+0xfd/0x120
[  220.867515][    C0]  get_page_from_freelist+0xf48/0x3530
[  220.872959][    C0]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  220.878837][    C0]  new_slab+0xa2/0x650
[  220.882893][    C0]  refill_objects+0xe3/0x410
[  220.887465][    C0]  __pcs_replace_empty_main+0x376/0x680
[  220.892994][    C0]  __kmalloc_cache_noprof+0x479/0x6c0
[  220.898347][    C0]  syslog_print+0xf8/0x620
[  220.902741][    C0]  do_syslog+0x5bd/0x6d0
[  220.906964][    C0]  __x64_sys_syslog+0x74/0xb0
[  220.911622][    C0]  do_syscall_64+0x115/0x870
[  220.916196][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.922080][    C0] page last free pid 5607 tgid 5607 stack trace:
[  220.928381][    C0]  __free_frozen_pages+0x79f/0x1090
[  220.933560][    C0]  qlist_free_all+0x47/0xf0
[  220.938037][    C0]  kasan_quarantine_reduce+0x1a0/0x1f0
[  220.943471][    C0]  __kasan_slab_alloc+0x69/0x90
[  220.948299][    C0]  __kmalloc_node_track_caller_noprof+0x2cd/0x830
[  220.954692][    C0]  kmemdup_noprof+0x29/0x60
[  220.959174][    C0]  neigh_sysctl_register+0xb4/0x660
[  220.964359][    C0]  addrconf_sysctl_register+0xb9/0x200
[  220.969800][    C0]  addrconf_notify+0x2ed/0x1ba0
[  220.974626][    C0]  notifier_call_chain+0x99/0x3f0
[  220.979637][    C0]  call_netdevice_notifiers_info+0xbe/0x110
[  220.985511][    C0]  netif_change_name+0x4d9/0x830
[  220.990435][    C0]  do_setlink.isra.0+0x31e4/0x3e60
[  220.995526][    C0]  rtnl_newlink+0x11c2/0x2380
[  221.000183][    C0]  rtnetlink_rcv_msg+0x95e/0xe90
[  221.005097][    C0]  netlink_rcv_skb+0x159/0x420
[  221.009856][    C0] 
[  221.012155][    C0] Memory state around the buggy address:
[  221.017759][    C0]  ffff88802aae1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.025795][    C0]  ffff88802aae1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.033832][    C0] >ffff88802aae2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.041877][    C0]                          ^
[  221.046438][    C0]  ffff88802aae2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.054473][    C0]  ffff88802aae2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.062516][    C0] ==================================================================
[  221.070701][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  221.077893][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  221.086824][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  221.096879][    C0] Call Trace:
[  221.100155][    C0]  <IRQ>
[  221.102997][    C0]  dump_stack_lvl+0x100/0x190
[  221.107677][    C0]  vpanic+0x552/0x970
[  221.111657][    C0]  ? __pfx_vpanic+0x10/0x10
[  221.116159][    C0]  ? ct_nmi_exit+0xd5/0x1b0
[  221.120681][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  221.127273][    C0]  panic+0xd1/0xe0
[  221.130995][    C0]  ? __pfx_panic+0x10/0x10
[  221.135407][    C0]  ? check_panic_on_warn+0x1f/0x90
[  221.140525][    C0]  check_panic_on_warn.cold+0x19/0x34
[  221.145895][    C0]  end_report.part.0+0x3a/0x90
[  221.150664][    C0]  kasan_report.cold+0xe/0x18
[  221.155343][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  221.161935][    C0]  llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  221.168350][    C0]  ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10
[  221.175284][    C0]  llc_conn_state_process+0x3ec/0x1480
[  221.180737][    C0]  llc_conn_tmr_common_cb+0x2d4/0x880
[  221.186105][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  221.191720][    C0]  call_timer_fn+0x19a/0x610
[  221.196303][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  221.201392][    C0]  ? __run_timers+0x747/0xb00
[  221.206041][    C0]  ? rcu_is_watching+0x12/0xc0
[  221.210795][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  221.216412][    C0]  __run_timers+0x757/0xb00
[  221.220897][    C0]  ? __pfx___run_timers+0x10/0x10
[  221.225898][    C0]  ? trace_csd_function_exit+0x73/0x1f0
[  221.231417][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  221.237551][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  221.242558][    C0]  run_timer_base+0x114/0x190
[  221.247225][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  221.252416][    C0]  run_timer_softirq+0x1a/0x50
[  221.257170][    C0]  handle_softirqs+0x1ea/0x9b0
[  221.261920][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  221.267181][    C0]  ? _raw_spin_unlock+0x28/0x50
[  221.272009][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  221.277619][    C0]  __irq_exit_rcu+0x162/0x210
[  221.282270][    C0]  irq_exit_rcu+0x9/0x30
[  221.286499][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  221.292122][    C0]  </IRQ>
[  221.295026][    C0]  <TASK>
[  221.297930][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.303881][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  221.309926][    C0] Code: 56 e1 5e 00 48 89 df 5b e9 9d 5c 64 00 be 03 00 00 00 5b e9 32 5a 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 65 8b 05 85 a3 59 12 48 8b 34 24 65 48 8b 15 61 a3 59
[  221.329506][    C0] RSP: 0018:ffffffff8e807e08 EFLAGS: 00000293
[  221.335555][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd6ff8
[  221.343500][    C0] RDX: ffffffff8e891480 RSI: ffffffff81fd7002 RDI: ffffffff8e891480
[  221.351446][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  221.359402][    C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  221.367360][    C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: 000000000008b000
[  221.375327][    C0]  ? flush_smp_call_function_queue+0x158/0x1f0
[  221.381461][    C0]  ? flush_smp_call_function_queue+0x162/0x1f0
[  221.387592][    C0]  flush_smp_call_function_queue+0x168/0x1f0
[  221.393544][    C0]  do_idle+0x359/0x5b0
[  221.397587][    C0]  ? __pfx_do_idle+0x10/0x10
[  221.402152][    C0]  cpu_startup_entry+0x4f/0x60
[  221.406896][    C0]  rest_init+0x251/0x260
[  221.411119][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  221.416637][    C0]  start_kernel+0x48e/0x490
[  221.421119][    C0]  x86_64_start_reservations+0x24/0x30
[  221.426558][    C0]  x86_64_start_kernel+0x12b/0x130
[  221.431648][    C0]  common_startup_64+0x13e/0x158
[  221.436573][    C0]  </TASK>
[  221.439767][    C0] Kernel Offset: disabled
[  221.444064][    C0] Rebooting in 86400 seconds..