last executing test programs:

8.592193501s ago: executing program 4 (id=707):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r3, 0x11, 0x1, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000440)={{0x2, 0x4, 0x4, 0x6, 'syz1\x00', 0x8953}, 0x3, 0x1, 0x3, r4, 0x4, 0x10000, 'syz0\x00', &(0x7f00000002c0)=['\x00', '/dev/kvm\x00', '-%\x00', '\x00'], 0xe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
ioprio_get$pid(0x1, r4)
syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x82}}}, 0x7)
prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

7.9894169s ago: executing program 0 (id=709):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000005, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0xb77, 0x3014, 0x0, 0x0, 0x9, 0x3, 0xa4de36948e08189d}})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x7)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6b}, "b6256c36a0c9e21b57ddf016aca20525d94f876f38b0fd5601a4818657d15dd9eef306de8bec7827f33095f03df15f85d0ee59c25bad1076715c7352e320bf528fe0900866c9f7ab66f1c7ca26a9bbc003966eac86971453ae46a751e550a8798607971e83e886b5debf33"}, 0x6f)

7.938049128s ago: executing program 4 (id=710):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00f10000000000006800", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000540)}], 0x3, &(0x7f00000013c0)=""/4096, 0x1000}, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, "fee8a2ab78fc17a29d09f8421ddaac09000000a4b4ffff9603dda1af1ea80000000039cc2bdd000000deff00000000000000fbffffff0014a2648f00", "68bae8db0808038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac006482283b00", "90be8b1c55f96400", [0x800]}})

7.243576372s ago: executing program 3 (id=711):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/496], 0x1f0}}], 0x1, 0x810)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x4)
splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48180}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newtfilter={0x30, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x50)
r8 = accept4(r5, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe28181", 0x53}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdc", 0x72}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e146", 0x39}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584a9520a9b2886ea581c9e6098ed884e7cb51726b360fbb37b", 0x4d}, {&(0x7f0000000900)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

7.24262576s ago: executing program 4 (id=712):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x91)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket(0x2000000000000021, 0x2, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})

7.210026121s ago: executing program 0 (id=713):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f008", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x91)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket(0x2000000000000021, 0x2, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})

6.047391562s ago: executing program 3 (id=717):
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]})

5.986326551s ago: executing program 3 (id=718):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)

5.822040861s ago: executing program 3 (id=719):
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f00009f4000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0xc8346000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)
syz_open_dev$vcsu(0x0, 0x6, 0x18800)
syz_open_procfs(0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r5, &(0x7f0000000800)="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"/1451, 0x5ab, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4000014)

4.260999729s ago: executing program 3 (id=720):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r1, 0x1f, "33f4f44260eb364a09b8c88b906ad06b83576ce5f65998e1489723a048198f"}, &(0x7f0000000340)=0xffffffffffffff3c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000019780)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000193c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fanotify_init(0x4, 0x2)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

4.16846297s ago: executing program 0 (id=721):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)

3.906568681s ago: executing program 0 (id=723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)

3.850903155s ago: executing program 0 (id=724):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202"], 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000040001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000540)='./cgroup\x00')
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r4, 0x7ffffffc, 0x0)
getdents64(r4, 0x0, 0x45)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x10000, 0x7, 0x2, 0x7e73, 0x7fffffffffffffff, 0x6, 0x95})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2.875662061s ago: executing program 4 (id=727):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x682800, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r1 = dup2(r0, r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
sendmsg$can_raw(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x17, 0x3, 0x0, 0x0, "bc0e741cc73deea52710fff479080267c33a4f79681d6742466ee1fc17013fbaa0e287736f582423da73da5b95c1e70019c3546f84a4a83a48844f0ed6fd4779"}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4000005)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'geneve0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x5, 0x1, 0xfffffffd, 0x50b, 0xffffffff, 0x401, 0xe, 0x3}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0xf7, &(0x7f0000000400)=""/247, 0x41100, 0x3, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540)=[0x1, r1, r1, r1], &(0x7f0000000580)=[{0x0, 0x4, 0x58c, 0x5}, {0x5, 0x4, 0x7, 0x2}, {0x4, 0x4, 0xf, 0xb}, {0x1, 0x4, 0xd, 0x9}, {0x0, 0x5, 0xc, 0x3}, {0x5, 0x5, 0x10, 0xc}, {0x0, 0x3, 0x9, 0x9}, {0x1, 0x1, 0x3}, {0x3, 0x2, 0x0, 0xc}, {0x1, 0x4, 0xc, 0x9}], 0x10, 0xe}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x4, 0x800, 0xd55, 0x5a7ca7fd, 0xfffffffc}, 0x14)
r4 = syz_open_dev$swradio(&(0x7f0000000740), 0x0, 0x2)
fcntl$notify(r4, 0x402, 0x0)
preadv(r3, &(0x7f0000001940)=[{&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/199, 0xc7}], 0x3, 0x7fff, 0x10)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001980)={<r5=>0x0, @rand_addr, @multicast2}, &(0x7f00000019c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001a80)={'ip6tnl0\x00', &(0x7f0000001a00)={'syztnl0\x00', r5, 0x2f, 0x16, 0x40, 0x3ff, 0x3a, @remote, @remote, 0x1, 0x1, 0x80, 0x58}})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000001ac0)=""/193)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)
connect$tipc(r1, &(0x7f0000001bc0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000001c00), 0x24580, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001c40)='/dev/iommu\x00', 0x0, r0)
ioctl$int_in(r4, 0x5421, &(0x7f0000001c80)=0x965)
r6 = getpid()
syz_open_procfs$namespace(r6, &(0x7f0000001cc0)='ns/pid_for_children\x00')
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001d00))
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000001d40)={0x1, 0x1, @start={0x49}})
r7 = memfd_create(&(0x7f0000001dc0)='%}\x00', 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001e00)={0x0, r7}, 0x8)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x6208}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x24, 0x0, 0x110, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3ff}}, ["", "", "", ""]}, 0x24}}, 0x20048850)

2.782624894s ago: executing program 2 (id=728):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]})

2.551845083s ago: executing program 2 (id=730):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x71, 0x1000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2000000000, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000019300)={'syz', 0x0}, &(0x7f0000019340)="b93296e49381b39be8385a657d187e6a61bbbcac96486ec20478dc8804a9b9e8183b179c67449ae948316495af9cd89013fc4853e0596ec9b753fe19a5ae5addad0ab97db8df5e655c6f49593dc6a14b18bf0da8ad60cbf522cb774f2f2b2d050599c843dc62ec86", 0x68, 0xffffffffffffffff)
r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="fa225d", 0x3, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000440)={0x0, r5, r6}, 0x0, 0x0, 0x0)
keyctl$get_security(0x11, r6, &(0x7f0000000100)=""/28, 0x1c)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c00078008000640000010000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000a3063d41d26c00"], 0x58}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="db53a7d1f3a514800b00000000738f00140000000000"], 0x14}}, 0x8000)
r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020)
connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, @none, 0xf8}, 0xa)
bind$rds(r2, &(0x7f0000000040)={0x2, 0xce24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)

1.964062908s ago: executing program 4 (id=731):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002e977f508c70b02007c9e01020b0109022400010f01e01009049a070277333d00090509f0000404024009050b"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x0, 0x0, 0x0, 0x7400}, 0x20010)

1.713043963s ago: executing program 1 (id=732):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d"], 0x200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x140}}], 0x1, 0x810)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d7374617469633a302c0021d31fe453fecbe13bb614561f8ccf4e12818c0b0ae03e48cc5b9596638463fe3cc3ad0ecd39ac390827311c54506ecca7467e637903313c455c1ed3d84054357242bbf82f83a71d1b5ed93282a1d6409df67736ad7548418b071c3b629e52874de0a267b814c2effbc9f00f0000ecffffff32"])
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000100), 0x0, 0x8000}])
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc175", 0x62}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb50}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x3c, r8, 0x14, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xbb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)

1.633324619s ago: executing program 2 (id=733):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000440)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdbA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5]\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800)
r4 = getpgid(0x0)
read$hidraw(r1, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0)
clock_adjtime(0x3, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x6, 0x80000000, 0x7cca, 0x6, 0x5, 0xffffffffffffffc0, 0x4, 0xd, 0x7, 0xf, 0x8c, 0xd01, 0x0, 0x4, 0x40000080008, 0xfffffffffffffff9, 0x8000, 0x2, 0x7, 0x1, 0x9014, 0x11, 0x8000008})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
migrate_pages(r4, 0x2, &(0x7f0000000200)=0x9, &(0x7f0000000080)=0xa)
socket$inet_tcp(0x2, 0x1, 0x0)

1.212039887s ago: executing program 1 (id=734):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = socket(0x2, 0x3, 0xff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001ac0)=""/198, 0xbc}, {&(0x7f0000001800)=""/22, 0x3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f0000001940)=""/193, 0xc1}], 0x6, &(0x7f0000001880)=""/98, 0x62}, 0x2}], 0x1, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x3, 0x288501)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0xac6c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x809305901d69afe4}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="9d5f648ff6ae2f28010000002708000000050000", @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB="00000000000600000000000000080000000000000000000000000000c6b3f34e673e5933efed3d57685e61446c607f3598f0ec9651f7c5455a85658b060105aa40318cfbc67470cbe8763eb752e0d522a78b7fb54bba2552dc0b24fc0a5f5c82b64897fb9ac527e89fd8a6eaeea560ee5e89bc35c3b85114bfd7d55e62f4776679d9d668a8b32078"], 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300))
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000001d00)=ANY=[@ANYBLOB="5bf7c63a171bc3e8f06ee0cc6e176e2ab7fc5785a4600b997ad165c8050794f545", @ANYRES32=0x0, @ANYBLOB="0080000000000000df250c1e000008000300", @ANYRESOCT=r3, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$nl_rdma(0x10, 0x3, 0x14)

850.92259ms ago: executing program 0 (id=735):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
unshare(0x22020400)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x100000001, 0x80000080, r2})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x40)
inotify_rm_watch(r5, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902)
r6 = semget(0x3, 0x2, 0x20)
semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000002c0)={{0x3, r3, r4, r3, r4, 0x20, 0xbf4}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d1})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x28, 0x20, 0x301, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff}}]}, 0x28}}, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040))

567.963613ms ago: executing program 2 (id=736):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r11 = io_uring_setup(0x668a, &(0x7f0000000040)={0x0, 0xc89f, 0x40, 0x7, 0x20002f5})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async)
r12 = socket$inet(0x2, 0x80001, 0x84) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x39, 0x0, 0xffffffffffffff4d, 0x2c}, 0x4000845)
io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r13, 0x5760, 0x1f)

498.255051ms ago: executing program 3 (id=737):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x91)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket(0x2000000000000021, 0x2, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})

403.392808ms ago: executing program 2 (id=738):
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0xffc0, 0xc02, 0x9, 0x1b, 0x402, 0x39})
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa79}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed2", 0x13}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c81f005fb311", 0x31}, {0x0}], 0x6}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

382.781271ms ago: executing program 2 (id=739):
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @private=0xa010100, @broadcast, @multicast2}}}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

349.822291ms ago: executing program 1 (id=740):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={<r3=>0x0, 0x7b, "d17e52918cd5a033a362a6deff1ad1cd6cb75719cae1a86fbab2bebb1d5deeb53a2578bf7c9425f1a6d694451f29530e39d3bff1622830fb19272ccdbddbdf9e3a25e15e3abfbb9be1fa742809ba4945ea56df4757e882e0091d165ea12910e064f442d003925b05ffd4e0b00066ff458eb0865719b906b646877c"}, &(0x7f0000000300)=0x83)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x73f, 0x4, 0x3, 0x96d3, 0x565770ee, 0xc, 0x7fffffff, r3}, &(0x7f0000000380)=0x20)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000003c0)=0x1, 0x4)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000800)={0x0, 0x0, 0x1c, 0x5, 0xf5, &(0x7f0000000400)="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"})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000840)={0x0, r0})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x20002, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000cc0)={0x0, 0x0, 0x11, 0x1c, 0x122, &(0x7f00000008c0)="531373d91bee04cdc115f281f21798679b5a672b09d9ceead9eeb4f663faaad950ef6f0897eb117a9613921fa9f68c8a82171c693b5e8b0a4d933ec078fee8b47c5e775a82178a938f74b9c371897216bf29ac32f54a5f81d0cf1214b7734ad921080781281095f8b06efd7864fbaeb9eeac4c5047d14f1ccf391a675615fe6a85919c150ca8b62b199c0c4c190dc584b24e58cd78d02c932b8316a172b3324ab877baf2f5c34bcf33cf7f106674e964efcc264e5583e958287328787288106293a0da3fa88f4f1abf4f1c10f6d83d1bc0a735415205d932a0ecea0ef6f8f71a7a7a3742944ca4f9e2cc3bd6bd124e75ec95fe48c1df1606558c1143e1096fa8ff1fbcdce20b018e00b43de47b9a0163eb0180067eaa511690cb09b5e4c72ec40e771b75d150ce768adf54d343d3e4879d6205611ae109993127ecd0e1aa7fc1cc8d63288d2be56c8a470385f92c97439d6efcdcc8153c72c34e1001569c5154d60fb717cecf6391d15cecab0266f82b3d7328dbd42c82da5c69849a4634e11e98ddf61e4e6276510ac56d8064669de726c26742615032c955f17e774435f5e7f1ab78b85a087f508e5eb56a1aaface40e4ef7c50a03d9b10dc13d4e6166714c2b98c09f02e0c9c5f2155a4f5144c1db464eff83867500c7f638eee0dc3bc3ac45630b39d8c7c289879963080a848c9917d741211bed6860adce3dddb3089e7050f79d15c52c5a2c037e515d75f27dc206fafb45f328bab1f0a6862ed2c1604cc1bc0f5bfcfa15714948fe7737a437ec03d4964b6101e0dcbaacd13b40b68e82d608f4f6f8785e561d263ff84bced5144d344178e4b755255a34754e37cb59ea56104817cbcde2fe88b6cf0318ee03edaf3e3ac0f19cb93d8086534fa5ad40481bad7bc0c7e6a718eeee882d90d3be6435b447327cda6dc3e44886e57e4d1b1a469e1de959ebe4c13d0eb4f001b74cb5109ede6d03b989501fa1726cde6489ceed15d01fd69ffb891f0b3aa14a0f1f5ff878e8087052fd98fe0d7cb0654fae466de3640b2c3da01a63038407eda2bf75fb9e308409045aee0c9e3ad5bb3cce4410d1ca37e566bc9c302ddfa3529c6c8e3c7746f299ae84829f2cf6c4e685551062e039a3d543437a000db67c070fdd21f4f6fe6260d62db65d3457f5702ebfb1663b162b9705fbc2a9f5828e4d8e2b7b18d551b5d60e7fb3e32f692102ba77d4330a112484e54655d99719f1e8382f45ebd717c7c21de373c9916bb4ca47b31264cbb30b11c013441dd45996238a34ddab210e96a1d180d93fdbbe6ad810958bf298ddd45d6146f70ae8cd7f121691b989427be5ff965ea7104d0f0a8c530c22c4c8b5ac3d674b5bac0c4c75d2d790c64115f0a54c587a57f2a3a681d52c2eb73def96376be7a4075d6c8ee1170237d508d425c55c5e06f50be17ac93de389b0"})
r6 = syz_io_uring_setup(0xaae, &(0x7f0000000d00)={0x0, 0x9d8b, 0x4000, 0x3, 0x6b}, &(0x7f0000000d80), &(0x7f0000000dc0))
syz_io_uring_setup(0x2035, &(0x7f0000000e00)={0x0, 0x78c8, 0x2000, 0x1, 0x2ae, 0x0, r6}, &(0x7f0000000e80), &(0x7f0000000ec0))
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000f40)={&(0x7f0000000f00)=""/49, 0x2000, 0x800, 0x6, 0x3}, 0x20)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000f80)={"cbe1005bf1231320ac73bdd5b78bf370", 0x0, <r7=>0x0, {0xfff, 0xb}, {0x1000, 0x7}, 0x2, [0xaced, 0x7, 0x7, 0x0, 0x7, 0x7, 0x100000000000000, 0xf, 0x5, 0x4, 0x7, 0x1, 0x1, 0x9, 0x8, 0x8]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001140)={{r0}, r7, 0x2, @inherit={0x88, &(0x7f0000001080)={0x0, 0x8, 0x401, 0x10001, {0xc, 0x0, 0x3, 0x1d, 0x80000001}, [0xffffffffffffffdd, 0x80000000, 0x6, 0x7fff, 0x1, 0x40, 0x8000000000000000, 0x0]}}, @name="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"})
syz_io_uring_setup(0x5f89, &(0x7f0000002140)={0x0, 0x9943, 0x10000, 0x3, 0x26e, 0x0, r0}, &(0x7f00000021c0), &(0x7f0000002200))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002240))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000002280)={0xc4, "aa5fe47b56c3b7335e1bb4d5b97629f2aca20a5c8b1c456a683355145713cf4b", 0x4, 0x200, 0x3, 0xb2ee, 0x10, 0x0, 0xab83, 0x1})
timerfd_create(0x2, 0x800)
r8 = accept4(r0, &(0x7f0000002300)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000002380)=0x80, 0x800)
write$char_usb(r0, &(0x7f00000023c0)="fc9c6942401b140ba2a7d7f17b8881e2ad5b475b9d26bb3de8262df9b3c0bdb1936b58af2f169934dfc71224e476d1c92e6b40551599c51713dcbf5abb0116cb3877555c1ea3f34a33fe4a645dca0f7090fc00664cddd697dcb4cdc2c053ee2007d44400f1b3810b9346a18195e751788ac9b939a8d4000a0d3f4a479ee70be98e2b27da20dd5571784442cbe5d414fac0490d508373ec7733762f869ca7c9da6998f523aeee6dcedebecc2f3435c14d7cb6657689f6af6447677f942628c00abe094a7cfebdc63a7aa44cad7a519d9bbc64306c992d5180db7fdbb07289ea4d", 0xe0)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000024c0)=""/212)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000025c0))
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002600)=@assoc_value={0x0, 0x331b961f}, 0x8)

243.798143ms ago: executing program 1 (id=741):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
socket$inet(0xa, 0x801, 0x84)
r5 = syz_open_procfs(0x0, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$getflags(r6, 0x3)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8})

243.231955ms ago: executing program 4 (id=742):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x1, 0x1})

43.758546ms ago: executing program 1 (id=743):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x71, 0x1000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2000000000, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000019300)={'syz', 0x0}, &(0x7f0000019340)="b93296e49381b39be8385a657d187e6a61bbbcac96486ec20478dc8804a9b9e8183b179c67449ae948316495af9cd89013fc4853e0596ec9b753fe19a5ae5addad0ab97db8df5e655c6f49593dc6a14b18bf0da8ad60cbf522cb774f2f2b2d050599c843dc62ec86", 0x68, 0xffffffffffffffff)
r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="fa225d", 0x3, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000440)={0x0, r5, r6}, 0x0, 0x0, 0x0)
keyctl$get_security(0x11, r6, &(0x7f0000000100)=""/28, 0x1c)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c00078008000640000010000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000a3063d41d26c00"], 0x58}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="db53a7d1f3a514800b00000000738f00140000000000"], 0x14}}, 0x8000)
r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020)
connect$bt_rfcomm(r8, &(0x7f00000000c0)={0x1f, @none, 0xf8}, 0xa)
bind$rds(r2, &(0x7f0000000040)={0x2, 0xce24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)

0s ago: executing program 1 (id=744):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
keyctl$unlink(0x9, r0, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x10, 0x8, {0x7ff, 0x1}, 0x6e, 0xb153})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b)

kernel console output (not intermixed with test programs):

ting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.372428][ T1220] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  138.385643][ T1220] usb 3-1: config 0 interface 0 has no altsetting 0
[  138.392299][ T1220] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  138.434187][ T6831] vcan0: tx drop: invalid sa for name 0x0100000000000000
[  138.445112][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.591985][ T1220] usb 3-1: config 0 descriptor??
[  138.623396][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  138.623414][   T30] audit: type=1400 audit(2000000300.375:412): avc:  denied  { ioctl } for  pid=6834 comm="syz.4.241" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  139.153811][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'.
[  139.464267][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[  139.591832][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[  140.004622][ T1220] usbhid 3-1:0.0: can't add hid device: -71
[  140.029609][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[  140.036896][ T1220] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  140.070846][ T1220] usb 3-1: USB disconnect, device number 8
[  140.081804][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[  140.429022][ T6860] syzkaller0: entered promiscuous mode
[  140.435531][ T6860] syzkaller0: entered allmulticast mode
[  141.651268][ T5863] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  141.717451][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  141.806667][ T5863] usb 2-1: Using ep0 maxpacket: 8
[  141.815055][ T5863] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  141.823728][ T5863] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  141.981455][ T6880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  142.052316][ T5863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  142.062504][ T5863] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  142.072369][ T5863] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  142.085513][   T10] usb 3-1: Using ep0 maxpacket: 32
[  142.091636][ T5863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  142.101965][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.114341][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  142.161679][   T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  142.175734][ T5863] usbtmc 2-1:16.0: bulk endpoints not found
[  142.184413][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.196919][   T10] usb 3-1: config 0 descriptor??
[  142.734961][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'.
[  142.744262][ T6888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.255'.
[  142.787020][   T30] audit: type=1400 audit(2000000304.487:413): avc:  denied  { ioctl } for  pid=6884 comm="syz.4.255" path="socket:[12344]" dev="sockfs" ino=12344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  143.773640][ T6888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=6888 comm=syz.4.255
[  143.800070][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'.
[  143.844803][ T6903] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001
[  144.087073][   T30] audit: type=1400 audit(2000000305.848:414): avc:  denied  { read write } for  pid=6911 comm="syz.3.258" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  144.222459][   T30] audit: type=1400 audit(2000000305.848:415): avc:  denied  { open } for  pid=6911 comm="syz.3.258" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  144.259153][ T1589] usb 2-1: USB disconnect, device number 11
[  144.270544][ T6912] MPI: mpi too large (130952 bits)
[  144.277100][   T30] audit: type=1400 audit(2000000306.038:416): avc:  denied  { getopt } for  pid=6911 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  144.812186][   T30] audit: type=1400 audit(2000000306.568:417): avc:  denied  { create } for  pid=6920 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  144.917498][   T30] audit: type=1400 audit(2000000306.598:418): avc:  denied  { ioctl } for  pid=6920 comm="syz.1.260" path="socket:[12378]" dev="sockfs" ino=12378 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  145.198517][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  145.354984][ T5863] usb 4-1: Using ep0 maxpacket: 32
[  145.374786][ T5863] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  145.390748][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.413697][ T5863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  145.428679][ T5863] usb 4-1: config 0 has no interface number 0
[  145.441380][ T5863] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  145.450721][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.458857][ T5863] usb 4-1: Product: syz
[  145.467243][ T5863] usb 4-1: Manufacturer: syz
[  145.471911][ T5863] usb 4-1: SerialNumber: syz
[  145.485802][ T5863] usb 4-1: config 0 descriptor??
[  145.619464][ T5863] viperboard 4-1:0.61: version 0.00 found at bus 004 address 008
[  145.647082][ T5863] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  145.657234][ T5863] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  146.526691][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'.
[  146.537376][ T6924] netlink: 'syz.1.260': attribute type 12 has an invalid length.
[  146.611905][   T30] audit: type=1400 audit(2000000308.359:419): avc:  denied  { remount } for  pid=6934 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  146.639104][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'.
[  146.719069][ T6924] netlink: 'syz.1.260': attribute type 12 has an invalid length.
[  147.139278][   T10] usb 3-1: string descriptor 0 read error: -71
[  147.150538][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  147.157242][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  147.182849][   T10] usb 3-1: USB disconnect, device number 9
[  147.531964][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.266'.
[  147.586593][ T6947] capability: warning: `syz.0.268' uses deprecated v2 capabilities in a way that may be insecure
[  147.953622][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  148.027798][ T5928] usb 4-1: USB disconnect, device number 8
[  148.183243][   T10] usb 3-1: Using ep0 maxpacket: 8
[  148.195136][   T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  148.203368][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  148.213507][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  148.224965][   T10] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  148.604106][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.618172][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.627534][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.648343][   T10] usbtmc 3-1:16.0: bulk endpoints not found
[  148.649716][ T6958] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  149.088313][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'.
[  149.163149][ T5928] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  149.215063][   T30] audit: type=1400 audit(2000000310.960:420): avc:  denied  { read } for  pid=6959 comm="syz.4.272" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  149.363171][ T5928] usb 4-1: Using ep0 maxpacket: 8
[  149.427404][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short
[  149.474212][ T5928] usb 4-1: config 8 has an invalid interface number: 255 but max is 8
[  149.486649][   T30] audit: type=1400 audit(2000000310.960:421): avc:  denied  { open } for  pid=6959 comm="syz.4.272" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  149.511962][ T5928] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 9
[  149.683155][ T5928] usb 4-1: config 8 has no interface number 0
[  149.743993][ T5928] usb 4-1: config 8 interface 255 has no altsetting 0
[  149.763376][ T5928] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00
[  149.787267][ T5928] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  149.801855][ T5928] usb 4-1: Product: syz
[  149.814867][ T5928] usb 4-1: Manufacturer: syz
[  149.821712][ T5928] usb 4-1: SerialNumber: syz
[  150.646767][ T5928] catc 4-1:8.255: Can't set altsetting 1.
[  150.656462][ T5928] catc 4-1:8.255: probe with driver catc failed with error -5
[  150.675941][ T5928] usb 4-1: USB disconnect, device number 9
[  150.766522][ T5916] usb 3-1: USB disconnect, device number 10
[  150.872191][   T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  151.757199][ T6982] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  151.766601][ T6982] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  151.778398][ T6982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  151.824078][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  151.838312][   T24] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.870897][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  151.895496][   T24] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40
[  151.912480][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.946597][   T24] usb 2-1: Product: syz
[  151.955887][   T24] usb 2-1: Manufacturer: syz
[  151.961319][   T24] usb 2-1: SerialNumber: syz
[  152.121686][  T791] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  152.341642][  T791] usb 5-1: Using ep0 maxpacket: 32
[  152.417477][  T791] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  153.192807][   T13] batman_adv: batadv0: IGMP Querier appeared
[  153.198992][   T13] batman_adv: batadv0: MLD Querier appeared
[  153.238228][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  153.259834][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  153.278973][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  153.306659][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  153.321279][  T791] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  153.331444][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.340301][  T791] usb 5-1: Product: syz
[  153.344860][  T791] usb 5-1: Manufacturer: syz
[  153.349476][  T791] usb 5-1: SerialNumber: syz
[  153.367024][  T791] usb 5-1: config 0 descriptor??
[  153.432511][   T30] audit: type=1400 audit(2000000001.440:422): avc:  denied  { write } for  pid=6972 comm="syz.1.276" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  153.731156][   T24] usbhid 2-1:1.0: can't add hid device: -71
[  153.747971][   T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  153.784192][   T24] usb 2-1: USB disconnect, device number 12
[  153.829000][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.836370][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.857013][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.877303][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.895027][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.906642][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.919998][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.932001][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.945670][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.960546][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  153.990598][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.005386][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.286'.
[  154.165674][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.182251][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.193533][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.304003][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.316876][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.329054][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.357857][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.371159][  T791] iforce 5-1:0.0: usb_submit_urb failed: -71
[  154.390621][  T791] input input7: Timeout waiting for response from device.
[  154.419320][  T791] usb 5-1: USB disconnect, device number 8
[  155.117849][ T7030] No such timeout policy "syz1"
[  156.293852][ T7032] netlink: 68 bytes leftover after parsing attributes in process `syz.3.285'.
[  156.611692][ T1589] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  156.651641][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  156.771605][ T1589] usb 3-1: Using ep0 maxpacket: 16
[  156.782958][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.803019][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.824623][ T1589] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  156.834841][   T10] usb 2-1: Using ep0 maxpacket: 8
[  156.845558][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  156.854275][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.867117][ T1589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.878611][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.891571][   T30] audit: type=1800 audit(2000000004.900:423): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.293" name="bus" dev="tmpfs" ino=350 res=0 errno=0
[  156.914034][ T1589] usb 3-1: config 0 descriptor??
[  156.920314][   T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  156.942612][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.957147][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  156.966413][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.999954][   T10] usbtmc 2-1:16.0: bulk endpoints not found
[  157.048695][   T30] audit: type=1400 audit(2000000005.060:424): avc:  denied  { shutdown } for  pid=7041 comm="syz.3.293" lport=49178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.338356][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.360197][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.830239][ T1589] usbhid 3-1:0.0: can't add hid device: -71
[  157.837656][ T1589] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  157.849251][ T1589] usb 3-1: USB disconnect, device number 11
[  158.261882][ T7060] comedi comedi3: pcl724: I/O port conflict (0xd,4)
[  158.504247][ T1589] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  158.661619][ T1589] usb 3-1: Using ep0 maxpacket: 16
[  158.689458][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.712527][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.723005][ T1589] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  158.735271][ T1589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.749054][ T1589] usb 3-1: config 0 descriptor??
[  158.802808][   T30] audit: type=1400 audit(2000000006.820:425): avc:  denied  { execute } for  pid=7064 comm="syz.4.298" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  159.062738][ T7038] ntfs3(nullb0): Primary boot signature is not NTFS.
[  159.125324][ T7038] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  159.597965][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  159.608226][ T1589] usbhid 3-1:0.0: can't add hid device: -71
[  159.614872][ T1589] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  159.625183][ T1589] usb 3-1: USB disconnect, device number 12
[  159.654268][ T5916] usb 2-1: USB disconnect, device number 13
[  159.691635][  T791] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  159.712370][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.301'.
[  159.799162][ T7074] overlayfs: failed to clone lowerpath
[  159.805673][   T30] audit: type=1400 audit(2000000007.810:426): avc:  denied  { mount } for  pid=7073 comm="syz.0.300" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  159.845013][ T7074] overlayfs: failed to clone lowerpath
[  159.872326][  T791] usb 4-1: Using ep0 maxpacket: 8
[  159.910893][  T791] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  159.951605][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.954626][   T30] audit: type=1400 audit(2000000007.960:427): avc:  denied  { block_suspend } for  pid=7075 comm="syz.4.302" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  159.981622][  T791] usb 4-1: Product: syz
[  159.981645][  T791] usb 4-1: Manufacturer: syz
[  159.981659][  T791] usb 4-1: SerialNumber: syz
[  159.984861][  T791] usb 4-1: config 0 descriptor??
[  161.041710][  T791] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  161.363732][ T7104] fuse: Bad value for 'fd'
[  161.482412][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'.
[  161.545577][   T30] audit: type=1400 audit(2000000009.560:428): avc:  denied  { getopt } for  pid=7107 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.584062][ T7106] fuse: Unknown parameter 'fdJ�'
[  162.010729][   T30] audit: type=1400 audit(2000000009.970:429): avc:  denied  { create } for  pid=7111 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  162.102930][   T30] audit: type=1400 audit(2000000010.110:430): avc:  denied  { ioctl } for  pid=7111 comm="syz.1.311" path="socket:[12710]" dev="sockfs" ino=12710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  162.210508][  T791] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  162.295601][  T791] usb 4-1: USB disconnect, device number 10
[  162.751709][   T30] audit: type=1400 audit(2000000010.750:431): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  162.855113][   T30] audit: type=1326 audit(2000000010.870:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.4.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff181b9c629 code=0x0
[  163.037954][   T30] audit: type=1400 audit(2000000011.050:433): avc:  denied  { write } for  pid=7148 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  163.289928][ T7156] Mount JFS Failure: -22
[  163.294323][ T7156] jfs_mount failed w/return code = -22
[  163.432528][ T7159] fuse: Bad value for 'fd'
[  163.443148][ T1589] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  163.477555][   T30] audit: type=1400 audit(2000000011.490:434): avc:  denied  { unmount } for  pid=7158 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  163.621606][ T1589] usb 2-1: Using ep0 maxpacket: 32
[  163.647442][ T1589] usb 2-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config
[  163.661685][ T1589] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  163.681548][ T1589] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  163.710285][ T1589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.723619][ T7163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7163 comm=syz.0.323
[  163.873276][ T1589] usb 2-1: Product: syz
[  163.877481][ T1589] usb 2-1: Manufacturer: syz
[  163.880703][ T7170] overlayfs: failed to clone lowerpath
[  163.892178][ T1589] usb 2-1: SerialNumber: syz
[  163.893770][ T7170] overlayfs: failed to clone lowerpath
[  164.749196][   T30] audit: type=1400 audit(2000000012.360:435): avc:  denied  { read } for  pid=7167 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  164.784476][ T1589] usb 2-1: config 0 descriptor??
[  164.971631][   T30] audit: type=1400 audit(2000000012.960:436): avc:  denied  { append } for  pid=7164 comm="syz.3.324" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  165.045463][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.077231][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.768695][ T7193] netlink: 'syz.4.327': attribute type 10 has an invalid length.
[  165.777669][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'.
[  166.376947][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'.
[  166.708077][    T9] usb 2-1: USB disconnect, device number 14
[  166.732759][ T7198] use of bytesused == 0 is deprecated and will be removed in the future,
[  166.748629][ T7198] use the actual size instead.
[  166.792267][ T5813] Bluetooth: hci3: command 0x0405 tx timeout
[  166.889901][   T30] audit: type=1326 audit(2000000014.900:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.1.335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f748ef9c629 code=0x0
[  167.015774][ T7216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7216 comm=syz.0.336
[  167.394479][ T7221] overlayfs: failed to clone lowerpath
[  167.916950][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'.
[  167.965492][   T30] audit: type=1400 audit(2000000015.980:438): avc:  denied  { read write } for  pid=5810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  168.060547][   T30] audit: type=1400 audit(2000000015.980:439): avc:  denied  { open } for  pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  168.101485][   T30] audit: type=1400 audit(2000000015.980:440): avc:  denied  { ioctl } for  pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  168.152955][   T30] audit: type=1400 audit(2000000016.150:441): avc:  denied  { read } for  pid=7244 comm="syz.2.346" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  168.252290][   T30] audit: type=1400 audit(2000000016.150:442): avc:  denied  { open } for  pid=7244 comm="syz.2.346" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  168.566442][ T7251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7251 comm=syz.2.347
[  168.610965][   T30] audit: type=1400 audit(2000000016.150:443): avc:  denied  { write } for  pid=7244 comm="syz.2.346" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  168.643162][   T30] audit: type=1400 audit(2000000016.160:444): avc:  denied  { map_create } for  pid=7237 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  168.741804][   T30] audit: type=1400 audit(2000000016.240:445): avc:  denied  { create } for  pid=7237 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.781617][   T30] audit: type=1400 audit(2000000016.250:446): avc:  denied  { write } for  pid=7237 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.999173][   T30] audit: type=1400 audit(2000000016.250:447): avc:  denied  { read } for  pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  169.191786][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  169.369177][ T7272] overlayfs: failed to clone lowerpath
[  169.401685][   T10] usb 3-1: Using ep0 maxpacket: 8
[  169.451645][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  169.519848][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  169.562441][ T7275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7275 comm=syz.0.352
[  169.586865][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  169.611324][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  169.652136][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  169.679819][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  169.728336][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[  169.748898][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  169.784947][   T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  169.801762][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.829854][   T10] usb 3-1: Product: syz
[  169.879985][   T10] usb 3-1: Manufacturer: syz
[  169.900385][   T10] usb 3-1: SerialNumber: syz
[  169.929477][   T10] usb 3-1: config 0 descriptor??
[  169.950034][ T7259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.965359][ T7259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.999855][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  172.590720][ T7300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7300 comm=syz.1.359
[  173.044541][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  173.044557][   T30] audit: type=1400 audit(2000000021.060:502): avc:  denied  { read write } for  pid=7311 comm="syz.1.360" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  173.084418][   T30] audit: type=1400 audit(2000000021.060:503): avc:  denied  { open } for  pid=7311 comm="syz.1.360" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  173.418837][ T5916] usb 3-1: USB disconnect, device number 13
[  173.547117][   T30] audit: type=1400 audit(2000000021.530:504): avc:  denied  { write } for  pid=7318 comm="syz.1.362" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  173.924305][   T30] audit: type=1400 audit(2000000021.530:505): avc:  denied  { open } for  pid=7318 comm="syz.1.362" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  173.951021][   T30] audit: type=1400 audit(2000000021.540:506): avc:  denied  { name_bind } for  pid=7318 comm="syz.1.362" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  174.024878][   T30] audit: type=1400 audit(2000000021.540:507): avc:  denied  { node_bind } for  pid=7318 comm="syz.1.362" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  174.157988][   T30] audit: type=1400 audit(2000000021.550:508): avc:  denied  { append } for  pid=7318 comm="syz.1.362" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  174.202060][   T30] audit: type=1400 audit(2000000021.550:509): avc:  denied  { map } for  pid=7318 comm="syz.1.362" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  174.261443][ T7333] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  174.272699][   T30] audit: type=1400 audit(2000000021.550:510): avc:  denied  { execute } for  pid=7318 comm="syz.1.362" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  174.357657][   T30] audit: type=1400 audit(2000000022.040:511): avc:  denied  { prog_run } for  pid=7326 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  176.674106][ T7359] Mount JFS Failure: -22
[  176.678415][ T7359] jfs_mount failed w/return code = -22
[  177.222178][ T7361] tipc: Started in network mode
[  177.228595][ T7361] tipc: Node identity 4, cluster identity 4711
[  177.235038][ T7361] tipc: Node number set to 4
[  177.785087][ T7366] bridge1: entered promiscuous mode
[  177.790320][ T7366] bridge1: entered allmulticast mode
[  178.557063][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  178.557080][   T30] audit: type=1400 audit(2000000026.570:534): avc:  denied  { map } for  pid=7367 comm="syz.4.374" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  178.608045][ T7372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'.
[  178.853734][ T7381] cgroup: release_agent respecified
[  178.869182][   T30] audit: type=1400 audit(2000000026.570:535): avc:  denied  { read write } for  pid=7367 comm="syz.4.374" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  179.062345][ T7382] bond1: entered promiscuous mode
[  179.067401][ T7382] bond1: entered allmulticast mode
[  179.081650][   T30] audit: type=1400 audit(2000000026.610:536): avc:  denied  { bind } for  pid=7369 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  179.233449][   T30] audit: type=1400 audit(2000000026.640:537): avc:  denied  { read } for  pid=7369 comm="syz.1.375" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  179.274447][ T7382] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.283617][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  179.304339][   T30] audit: type=1400 audit(2000000026.640:538): avc:  denied  { open } for  pid=7369 comm="syz.1.375" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  180.821582][   T30] audit: type=1400 audit(2000000026.640:539): avc:  denied  { ioctl } for  pid=7369 comm="syz.1.375" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  181.063901][   T30] audit: type=1400 audit(2000000026.660:540): avc:  denied  { unmount } for  pid=7375 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  181.203790][   T30] audit: type=1400 audit(2000000026.830:541): avc:  denied  { append } for  pid=7378 comm="syz.2.370" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  181.297248][   T30] audit: type=1400 audit(2000000027.290:542): avc:  denied  { create } for  pid=7378 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  181.351737][   T30] audit: type=1400 audit(2000000027.290:543): avc:  denied  { bind } for  pid=7378 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  182.035527][ T7427] No such timeout policy "syz1"
[  182.784551][ T7440] warning: `syz.3.390' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  182.812593][ T7440] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  183.134390][ T7447] bridge2: entered promiscuous mode
[  183.139671][ T7447] bridge2: entered allmulticast mode
[  183.468865][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.391'.
[  183.797926][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  183.797958][   T30] audit: type=1400 audit(2000000031.800:574): avc:  denied  { connect } for  pid=7450 comm="syz.3.392" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  184.244520][ T7455] overlayfs: conflicting lowerdir path
[  184.252471][ T7455] overlayfs: conflicting lowerdir path
[  184.815788][   T30] audit: type=1400 audit(2000000032.810:575): avc:  denied  { create } for  pid=7461 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  185.157811][   T30] audit: type=1400 audit(2000000032.820:576): avc:  denied  { write } for  pid=7461 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  185.181755][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  185.205841][   T30] audit: type=1400 audit(2000000033.140:577): avc:  denied  { read write } for  pid=7464 comm="syz.3.397" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  185.237723][   T30] audit: type=1400 audit(2000000033.140:578): avc:  denied  { open } for  pid=7464 comm="syz.3.397" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  185.267107][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'.
[  185.423002][   T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  185.439580][   T30] audit: type=1400 audit(2000000033.170:579): avc:  denied  { mount } for  pid=7464 comm="syz.3.397" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  185.441596][   T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  185.632680][   T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  185.645558][   T24] usb 2-1: config 220 has no interface number 2
[  185.652243][   T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  185.667287][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[  185.675311][   T24] usb 2-1: config 220 interface 76 has no altsetting 0
[  185.689554][   T24] usb 2-1: config 220 interface 1 has no altsetting 0
[  185.698968][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  185.710891][   T30] audit: type=1400 audit(2000000033.720:580): avc:  denied  { create } for  pid=7471 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  185.712574][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.754277][   T24] usb 2-1: Product: syz
[  185.758483][   T24] usb 2-1: Manufacturer: syz
[  185.768660][   T24] usb 2-1: SerialNumber: syz
[  185.786012][   T30] audit: type=1400 audit(2000000033.720:581): avc:  denied  { setopt } for  pid=7471 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  185.808296][   T30] audit: type=1400 audit(2000000033.780:582): avc:  denied  { connect } for  pid=7476 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  185.958168][   T30] audit: type=1400 audit(2000000033.780:583): avc:  denied  { getopt } for  pid=7476 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  186.014966][   T24] usb 2-1: selecting invalid altsetting 0
[  186.060411][   T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  186.108044][   T24] uvcvideo 2-1:220.0: No valid video chain found.
[  186.153827][ T5131] Bluetooth: hci4: command 0x0406 tx timeout
[  186.156265][ T5819] Bluetooth: hci0: command 0x0406 tx timeout
[  186.160062][ T5131] Bluetooth: hci1: command 0x0406 tx timeout
[  186.168823][ T5819] Bluetooth: hci2: command 0x0406 tx timeout
[  186.181249][ T7487] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  186.200893][   T24] usb 2-1: selecting invalid altsetting 0
[  186.226718][   T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  186.274376][   T24] usb 2-1: USB disconnect, device number 15
[  186.503344][ T7494] bridge2: entered promiscuous mode
[  186.508656][ T7494] bridge2: entered allmulticast mode
[  186.976001][ T7499] overlayfs: conflicting lowerdir path
[  186.987259][ T7499] overlayfs: conflicting lowerdir path
[  187.372243][ T7506] bridge3: entered promiscuous mode
[  187.377543][ T7506] bridge3: entered allmulticast mode
[  188.306583][ T7513] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  188.335462][ T7519] : Can't lookup blockdev
[  188.456749][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'.
[  188.968189][    C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  189.235507][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  189.315889][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  189.315924][   T30] audit: type=1400 audit(2000000037.230:599): avc:  denied  { mounton } for  pid=7532 comm="syz.3.415" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  189.498496][ T7542] bridge1: entered promiscuous mode
[  189.503754][ T7542] bridge1: entered allmulticast mode
[  189.559940][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  189.861743][ T1589] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  189.909025][ T7533] overlayfs: conflicting lowerdir path
[  189.968159][ T7533] overlayfs: conflicting lowerdir path
[  190.248678][ T7551] netlink: 'syz.4.418': attribute type 8 has an invalid length.
[  190.259110][ T7551] bridge0: port 3(batadv0) entered disabled state
[  190.266999][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.275110][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.553131][ T1589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  190.570178][ T1589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  190.635965][ T1589] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  190.670104][ T1589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.686192][ T1589] usb 4-1: Product: syz
[  190.690549][ T1589] usb 4-1: Manufacturer: syz
[  190.698662][ T1589] usb 4-1: SerialNumber: syz
[  190.717931][ T1589] usb 4-1: config 0 descriptor??
[  190.756596][   T30] audit: type=1326 audit(2000000038.770:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.1.420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f748ef9c629 code=0x0
[  191.029781][   T30] audit: type=1400 audit(2000000038.980:601): avc:  denied  { remount } for  pid=7532 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  191.105014][   T30] audit: type=1400 audit(2000000039.110:602): avc:  denied  { name_bind } for  pid=7561 comm="syz.4.422" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  191.497202][   T30] audit: type=1400 audit(2000000039.510:603): avc:  denied  { setopt } for  pid=7568 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  191.595310][ T7570] fuse: Bad value for 'fd'
[  191.615385][   T30] audit: type=1400 audit(2000000039.600:604): avc:  denied  { create } for  pid=7568 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  191.722090][   T30] audit: type=1400 audit(2000000039.600:605): avc:  denied  { create } for  pid=7568 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  191.896452][   T30] audit: type=1400 audit(2000000039.600:606): avc:  denied  { bind } for  pid=7568 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  191.929998][ T7561] [U] v�
[  191.957521][   T30] audit: type=1400 audit(2000000039.610:607): avc:  denied  { write } for  pid=7568 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  192.190450][ T7576] overlayfs: overlapping lowerdir path
[  192.210664][   T30] audit: type=1400 audit(2000000040.220:608): avc:  denied  { write } for  pid=7579 comm="syz.2.430" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  192.245185][ T1589] usb 4-1: USB disconnect, device number 11
[  192.798980][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.976152][ T7589] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  192.986935][ T7589] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  192.998933][ T7589] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  193.161618][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  193.219015][   T51] Bluetooth: hci3: link tx timeout
[  193.225777][   T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  193.236393][   T51] Bluetooth: hci3: link tx timeout
[  193.246215][   T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  193.406101][    T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  193.438643][    T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  193.484707][ T7611] Mount JFS Failure: -22
[  193.489032][ T7611] jfs_mount failed w/return code = -22
[  193.818646][    T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping
[  193.836309][    T9] usb 2-1: config 220 has an invalid descriptor of length 224, skipping remainder of the config
[  193.847312][    T9] usb 2-1: config 220 has no interface number 2
[  193.855433][    T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  193.869442][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[  193.879485][    T9] usb 2-1: config 220 interface 76 has no altsetting 0
[  193.888029][    T9] usb 2-1: config 220 interface 1 has no altsetting 0
[  193.903032][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  193.913713][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.925184][    T9] usb 2-1: Product: syz
[  193.929632][    T9] usb 2-1: Manufacturer: syz
[  193.937546][    T9] usb 2-1: SerialNumber: syz
[  194.165114][    T9] usb 2-1: selecting invalid altsetting 0
[  194.192993][    T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  194.213885][    T9] uvcvideo 2-1:220.0: No valid video chain found.
[  194.244860][    T9] usb 2-1: selecting invalid altsetting 0
[  194.253478][    T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  194.274408][    T9] usb 2-1: USB disconnect, device number 16
[  194.541700][  T791] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  195.271672][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  195.296535][  T791] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  195.594996][  T791] usb 3-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config
[  195.607984][  T791] usb 3-1: config 0 has no interface number 0
[  195.620885][  T791] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  195.630501][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.640076][  T791] usb 3-1: Product: syz
[  195.644714][  T791] usb 3-1: Manufacturer: syz
[  195.649409][  T791] usb 3-1: SerialNumber: syz
[  195.664152][  T791] usb 3-1: config 0 descriptor??
[  195.767875][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  195.767890][   T30] audit: type=1326 audit(2000000043.780:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff181b9c629 code=0x7ffc0000
[  195.856637][  T791] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  195.868816][  T791] uvcvideo 3-1:0.64: No valid video chain found.
[  195.878059][   T30] audit: type=1326 audit(2000000043.780:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff181b9c629 code=0x7ffc0000
[  195.902301][   T30] audit: type=1326 audit(2000000043.780:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff181b9c629 code=0x7ffc0000
[  195.926530][   T30] audit: type=1326 audit(2000000043.780:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff181b9c629 code=0x7ffc0000
[  195.951189][   T30] audit: type=1326 audit(2000000043.780:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff181b9c629 code=0x7ffc0000
[  195.974715][   T30] audit: type=1326 audit(2000000043.780:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff181b9dec7 code=0x7ffc0000
[  195.998217][   T30] audit: type=1326 audit(2000000043.780:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff181b5cece code=0x7ffc0000
[  196.044904][   T30] audit: type=1326 audit(2000000043.780:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff181b5cece code=0x7ffc0000
[  196.118631][   T30] audit: type=1326 audit(2000000043.780:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff181b5cece code=0x7ffc0000
[  196.142194][   T30] audit: type=1326 audit(2000000043.780:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff181b5cece code=0x7ffc0000
[  196.197013][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.204724][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.239085][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.291474][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.543398][ T7646] netlink: 5 bytes leftover after parsing attributes in process `syz.3.445'.
[  196.553403][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'.
[  196.986214][   T24] usb 3-1: USB disconnect, device number 14
[  197.224945][  T791] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  197.368731][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'.
[  197.411565][  T791] usb 2-1: Using ep0 maxpacket: 16
[  197.422220][  T791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  197.441414][  T791] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  197.464468][  T791] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1048, setting to 1024
[  197.495481][  T791] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  197.522816][  T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.538376][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.551579][  T791] usb 2-1: Product: 鸆皕荦⢽㭲⁸럜⿊퇓狏Ɦ䗝珒׏힓疿뢋ꅟꢖ࿈Ꮰᘴ꺦䮟Ⱛ㛬៻蠮桩扖㕴돎౪ᇂ㽪票車毸苗褺撔珞흎联뻧䨧僱い愧훣ᇒ슮瘩巬㫿곭渵뀈
[  197.591595][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  197.609352][  T791] usb 2-1: Manufacturer: ᐄ
[  197.632932][  T791] usb 2-1: SerialNumber: 驉⹨䏅䑒㾫췅ﭣ墎▢隡춯ퟷ⧺軿稕搟융鄌䶖⅙鐛㓢ấ❴␗ㄪ닱ꪕ懲먹忒Ί썻᥎创㙳욎눷፦ᣄ῟ⷞ漢嚅顧䉕儸삉㯳枎᠊휏袛
[  198.140030][ T7655] overlay: Unknown parameter '/re0'
[  198.155878][  T791] cdc_ncm 2-1:1.0: bind() failure
[  198.169705][  T791] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  198.179957][  T791] cdc_ncm 2-1:1.1: bind() failure
[  198.249372][  T791] usb 2-1: USB disconnect, device number 17
[  198.737373][ T7666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7666 comm=syz.2.451
[  199.484933][ T7662] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  200.164397][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'.
[  200.573116][ T7695] bridge2: entered promiscuous mode
[  200.578398][ T7695] bridge2: entered allmulticast mode
[  200.892278][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'.
[  201.744422][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'.
[  201.753959][ T7699] nbd: nbd64 already in use
[  201.888558][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  201.931599][ T5863] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  202.820391][ T5863] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  202.828944][ T5863] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  202.871738][ T5863] usb 5-1: config 220 has no interface number 2
[  202.878088][ T5863] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  202.965548][ T5863] usb 5-1: config 220 interface 0 has no altsetting 0
[  202.981593][ T5863] usb 5-1: config 220 interface 76 has no altsetting 0
[  202.988513][ T5863] usb 5-1: config 220 interface 1 has no altsetting 0
[  203.515166][ T5863] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  203.524485][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.532567][ T5863] usb 5-1: Product: syz
[  203.536740][ T5863] usb 5-1: Manufacturer: syz
[  203.541377][ T5863] usb 5-1: SerialNumber: syz
[  203.693268][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  203.693286][   T30] audit: type=1400 audit(2000000051.710:685): avc:  denied  { read } for  pid=7726 comm="syz.2.461" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  203.724162][ T7727] autofs4:pid:7727:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc0189379)
[  203.743618][ T7727] autofs4:pid:7727:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379)
[  203.780737][   T30] audit: type=1400 audit(2000000051.740:686): avc:  denied  { open } for  pid=7726 comm="syz.2.461" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  203.811191][ T5863] usb 5-1: selecting invalid altsetting 0
[  203.818611][ T5863] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  203.835614][ T5863] uvcvideo 5-1:220.0: No valid video chain found.
[  203.845695][   T30] audit: type=1400 audit(2000000051.740:687): avc:  denied  { ioctl } for  pid=7726 comm="syz.2.461" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  203.875191][ T5863] usb 5-1: selecting invalid altsetting 0
[  203.881001][ T5863] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  203.903532][ T5863] usb 5-1: USB disconnect, device number 9
[  204.000373][   T30] audit: type=1400 audit(2000000052.010:688): avc:  denied  { mount } for  pid=7731 comm="syz.2.469" name="/" dev="autofs" ino=14840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  204.043917][ T7733] SELinux:  Context system_u:object_r:root_t:s0 is not valid (left unmapped).
[  204.071763][   T30] audit: type=1400 audit(2000000052.060:689): avc:  denied  { relabelfrom } for  pid=7731 comm="syz.2.469" name="" dev="pipefs" ino=14839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  204.113967][ T7740] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  204.135430][   T30] audit: type=1400 audit(2000000052.080:690): avc:  denied  { relabelto } for  pid=7731 comm="syz.2.469" name="" dev="pipefs" ino=14839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:root_t:s0"
[  204.178911][   T30] audit: type=1400 audit(2000000052.130:691): avc:  denied  { unlink } for  pid=7739 comm="syz.3.470" name="#9" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  204.340690][   T30] audit: type=1400 audit(2000000052.350:692): avc:  denied  { read } for  pid=7746 comm="syz.4.475" path="socket:[14867]" dev="sockfs" ino=14867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  204.379226][   T30] audit: type=1400 audit(2000000052.380:693): avc:  denied  { mount } for  pid=7748 comm="syz.3.472" name="/" dev="ramfs" ino=16091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  204.416473][   T30] audit: type=1400 audit(2000000052.430:694): avc:  denied  { connect } for  pid=7746 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  204.416489][ T7754] syz.4.475 uses obsolete (PF_INET,SOCK_PACKET)
[  204.447983][ T7751] netlink: 'syz.2.474': attribute type 4 has an invalid length.
[  204.496727][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  204.701738][ T5911] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  204.945691][ T7762] syzkaller0: entered promiscuous mode
[  204.968780][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short
[  204.988668][ T5911] usb 5-1: not running at top speed; connect to a high speed hub
[  204.997542][ T7762] syzkaller0: entered allmulticast mode
[  205.032525][ T5911] usb 5-1: config 129 has an invalid interface number: 87 but max is 0
[  205.051417][ T7762] tipc: Started in network mode
[  205.059256][ T5911] usb 5-1: config 129 has no interface number 0
[  205.065934][ T5911] usb 5-1: config 129 interface 87 has no altsetting 0
[  205.075419][ T5911] usb 5-1: New USB device found, idVendor=0403, idProduct=f06d, bcdDevice= 8.00
[  205.075545][ T7762] tipc: Node identity 8ea085a3ccf3, cluster identity 4711
[  205.084834][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.084903][ T5911] usb 5-1: Product: syz
[  205.084953][ T5911] usb 5-1: Manufacturer: syz
[  205.085008][ T5911] usb 5-1: SerialNumber: syz
[  205.131875][ T7762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.183245][ T7761] tipc: Resetting bearer <eth:syzkaller0>
[  205.361751][ T7761] tipc: Disabling bearer <eth:syzkaller0>
[  205.437104][ T5911] ftdi_sio 5-1:129.87: FTDI USB Serial Device converter detected
[  205.494469][ T5911] usb 5-1: Detected FT4232H
[  205.601987][ T5911] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  205.632067][ T5911] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  206.108273][ T5911] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  206.133737][ T5911] usb 5-1: USB disconnect, device number 10
[  206.177204][ T5911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  206.230989][ T5911] ftdi_sio 5-1:129.87: device disconnected
[  206.573034][ T7780] tipc: Started in network mode
[  206.577937][ T7780] tipc: Node identity 84e, cluster identity 4711
[  206.600839][ T7780] tipc: Node number set to 2126
[  206.607072][ T7782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.450768][ T7812] No such timeout policy "syz1"
[  207.519539][ T1589] IPVS: starting estimator thread 0...
[  207.681793][ T7814] IPVS: using max 41 ests per chain, 98400 per kthread
[  208.761600][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  209.003116][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.010469][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  209.010485][   T30] audit: type=1400 audit(2000000057.020:709): avc:  denied  { write } for  pid=7840 comm="syz.2.499" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  209.014435][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.106564][ T7846] netlink: 320 bytes leftover after parsing attributes in process `syz.0.498'.
[  209.444962][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  209.459998][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  209.471186][   T10] usb 4-1: SerialNumber: syz
[  209.850655][   T30] audit: type=1400 audit(2000000057.860:710): avc:  denied  { ioctl } for  pid=7851 comm="syz.2.501" path="socket:[16372]" dev="sockfs" ino=16372 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  210.133933][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  210.301596][   T24] usb 5-1: Using ep0 maxpacket: 8
[  210.308126][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  210.320752][   T24] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  210.329958][   T24] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  210.339290][   T24] usb 5-1: Product: syz
[  210.343916][   T24] usb 5-1: Manufacturer: syz
[  210.348515][   T24] usb 5-1: SerialNumber: syz
[  210.421624][ T5911] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  210.673472][   T24] usb 5-1: palm_os_3_probe - error -110 getting connection information
[  210.682115][   T24] visor 5-1:1.0: probe with driver visor failed with error -110
[  210.702849][ T5911] usb 3-1: config 4 has an invalid interface number: 121 but max is 0
[  210.711057][ T5911] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  210.721743][ T5911] usb 3-1: config 4 has no interface number 0
[  210.728067][ T5911] usb 3-1: config 4 interface 121 has no altsetting 0
[  210.766516][ T5911] usb 3-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca
[  210.784531][ T7869] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  210.819915][ T7869] smc: net device hsr0 applied user defined pnetid SYZ2
[  210.831519][ T7869] smc: net device hsr0 erased user defined pnetid SYZ2
[  210.865049][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.901814][ T5911] usb 3-1: Product: syz
[  210.921886][ T5911] usb 3-1: Manufacturer: syz
[  210.955031][ T5911] usb 3-1: SerialNumber: syz
[  211.182324][   T10] usb 4-1: 0:2 : does not exist
[  211.187341][   T10] usb 4-1: unit 5: unexpected type 0x0e
[  211.235774][   T10] usb 4-1: USB disconnect, device number 12
[  211.265676][   T24] usb 5-1: USB disconnect, device number 11
[  211.298394][   T30] audit: type=1400 audit(2000000059.310:711): avc:  denied  { create } for  pid=7862 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  211.676050][   T30] audit: type=1400 audit(2000000059.690:712): avc:  denied  { read append } for  pid=7871 comm="syz.1.507" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  211.730653][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  211.738161][ T5911] usb 3-1: USB disconnect, device number 15
[  211.759112][   T30] audit: type=1400 audit(2000000059.690:713): avc:  denied  { open } for  pid=7871 comm="syz.1.507" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  211.821320][ T7874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'.
[  211.849067][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'.
[  211.860034][   T30] audit: type=1400 audit(2000000059.870:714): avc:  denied  { bind } for  pid=7875 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  211.999612][   T30] audit: type=1400 audit(2000000060.010:715): avc:  denied  { create } for  pid=7880 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  212.021756][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  212.071193][ T7882] FAULT_INJECTION: forcing a failure.
[  212.071193][ T7882] name failslab, interval 1, probability 0, space 0, times 0
[  212.085492][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(full) 
[  212.085518][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  212.085530][ T7882] Call Trace:
[  212.085536][ T7882]  <TASK>
[  212.085544][ T7882]  dump_stack_lvl+0x100/0x190
[  212.085584][ T7882]  should_fail_ex.cold+0x5/0xa
[  212.085608][ T7882]  should_failslab+0xc2/0x120
[  212.085634][ T7882]  __kmalloc_cache_noprof+0x7a/0x6f0
[  212.085653][ T7882]  ? sctp_association_new+0xbb/0x2990
[  212.085681][ T7882]  sctp_association_new+0xbb/0x2990
[  212.085709][ T7882]  sctp_connect_new_asoc+0x1a8/0x770
[  212.085733][ T7882]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  212.085765][ T7882]  sctp_sendmsg+0x171a/0x22b0
[  212.085793][ T7882]  ? __pfx_sctp_sendmsg+0x10/0x10
[  212.085820][ T7882]  ? __pfx_sock_has_perm+0x10/0x10
[  212.085860][ T7882]  ? __pfx_sctp_sendmsg+0x10/0x10
[  212.085882][ T7882]  inet_sendmsg+0x11c/0x140
[  212.085906][ T7882]  ____sys_sendmsg+0x9ad/0xc30
[  212.085930][ T7882]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.085961][ T7882]  ___sys_sendmsg+0x190/0x1e0
[  212.085984][ T7882]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.086005][ T7882]  ? rcu_is_watching+0x12/0xc0
[  212.086036][ T7882]  ? find_held_lock+0x2b/0x80
[  212.086075][ T7882]  __sys_sendmmsg+0x205/0x430
[  212.086104][ T7882]  ? __pfx___sys_sendmmsg+0x10/0x10
[  212.086129][ T7882]  ? trace_sched_exit_tp+0x13a/0x180
[  212.086162][ T7882]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  212.086192][ T7882]  ? fput+0x79/0x100
[  212.086212][ T7882]  ? exit_to_user_mode_loop+0xdd/0x4a0
[  212.086239][ T7882]  ? rcu_is_watching+0x12/0xc0
[  212.086262][ T7882]  __x64_sys_sendmmsg+0x9c/0x100
[  212.086287][ T7882]  ? lockdep_hardirqs_on+0x78/0x100
[  212.086315][ T7882]  do_syscall_64+0x106/0xf80
[  212.086331][ T7882]  ? clear_bhb_loop+0x40/0x90
[  212.086354][ T7882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.086372][ T7882] RIP: 0033:0x7ff181b9c629
[  212.086386][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.086403][ T7882] RSP: 002b:00007ff17fdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  212.086421][ T7882] RAX: ffffffffffffffda RBX: 00007ff181e16180 RCX: 00007ff181b9c629
[  212.086432][ T7882] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003
[  212.086443][ T7882] RBP: 00007ff17fdd5090 R08: 0000000000000000 R09: 0000000000000000
[  212.086453][ T7882] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001
[  212.086463][ T7882] R13: 00007ff181e16218 R14: 00007ff181e16180 R15: 00007ffdae81bff8
[  212.086487][ T7882]  </TASK>
[  212.222310][   T30] audit: type=1400 audit(2000000060.010:716): avc:  denied  { ioctl } for  pid=7880 comm="syz.3.510" path="socket:[15056]" dev="sockfs" ino=15056 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  212.353533][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.383657][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.399640][   T24] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  212.401149][   T30] audit: type=1400 audit(2000000060.010:717): avc:  denied  { getopt } for  pid=7880 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  212.409145][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.439510][   T24] usb 2-1: config 0 descriptor??
[  212.521594][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  212.673522][   T10] usb 4-1: Using ep0 maxpacket: 8
[  212.686587][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.713841][   T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  212.741557][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.901309][   T10] usb 4-1: config 0 descriptor??
[  212.941362][ T7889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7889 comm=syz.2.512
[  213.126320][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  213.148072][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  213.173891][   T24] usb 2-1: USB disconnect, device number 18
[  213.199856][   T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  213.371654][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  213.409858][   T30] audit: type=1400 audit(2000000061.420:718): avc:  denied  { write } for  pid=7897 comm="syz.2.515" name="mcfilter" dev="proc" ino=4026533417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  213.501240][ T7902] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[  213.565459][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.585599][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  213.609428][ T5916] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  213.619502][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  213.630469][ T5916] usb 5-1: SerialNumber: syz
[  214.438310][ T7907] netlink: 'syz.4.513': attribute type 13 has an invalid length.
[  214.479674][ T7907] netlink: 'syz.4.513': attribute type 17 has an invalid length.
[  214.662242][ T7910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.518'.
[  214.833912][ T7907] bridge0: port 3(batadv0) entered blocking state
[  214.840440][ T7907] bridge0: port 3(batadv0) entered forwarding state
[  214.847438][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.854522][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.861811][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.868868][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.912115][ T1171] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled
[  214.971885][ T7907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.043481][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'.
[  215.071179][ T5916] usb 5-1: 0:2 : does not exist
[  215.077062][ T7912] netlink: 'syz.1.519': attribute type 7 has an invalid length.
[  215.091317][ T7912] netlink: 'syz.1.519': attribute type 8 has an invalid length.
[  215.165040][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'.
[  215.191948][ T5916] usb 5-1: USB disconnect, device number 12
[  215.310264][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  215.319193][   T30] audit: type=1400 audit(2000000063.320:719): avc:  denied  { setopt } for  pid=7911 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  215.339298][ T7912] batadv0: entered promiscuous mode
[  215.358750][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.377980][ T7912] dummy0: entered promiscuous mode
[  215.393255][ T7912] batadv0: left promiscuous mode
[  215.409335][ T7912] dummy0: left promiscuous mode
[  216.261795][ T5916] usb 4-1: USB disconnect, device number 13
[  216.350399][   T30] audit: type=1400 audit(2000000064.360:720): avc:  denied  { connect } for  pid=7924 comm="syz.1.523" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  216.379144][ T7931] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  216.464250][   T30] audit: type=1400 audit(2000000064.410:721): avc:  denied  { create } for  pid=7930 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  216.652560][ T7938] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7938 comm=syz.1.528
[  216.672670][ T7941] fuse: Bad value for 'fd'
[  216.971682][   T30] audit: type=1400 audit(2000000064.850:722): avc:  denied  { connect } for  pid=7939 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  217.252259][ T5928] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  217.259556][   T30] audit: type=1400 audit(2000000064.850:723): avc:  denied  { read } for  pid=7939 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  217.411550][ T5928] usb 5-1: Using ep0 maxpacket: 8
[  217.414964][   T30] audit: type=1400 audit(2000000065.430:724): avc:  denied  { wake_alarm } for  pid=7949 comm="syz.0.531" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  217.514614][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short
[  217.527100][ T5928] usb 5-1: config 8 has an invalid interface number: 255 but max is 8
[  217.547689][ T5928] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 9
[  217.587068][ T5911] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  217.601578][ T5928] usb 5-1: config 8 has no interface number 0
[  217.616409][ T5928] usb 5-1: config 8 interface 255 has no altsetting 0
[  217.665410][ T5928] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00
[  217.749103][ T5928] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  217.801103][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  217.830202][ T5928] usb 5-1: Product: syz
[  217.851023][ T5928] usb 5-1: Manufacturer: syz
[  217.872147][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  217.921608][ T5928] usb 5-1: SerialNumber: syz
[  217.927006][ T5916] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  217.990712][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 61305, setting to 1024
[  218.005675][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024
[  218.021654][ T5911] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  218.030890][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.040847][ T5911] usb 4-1: Product: syz
[  218.045218][ T5911] usb 4-1: Manufacturer: syz
[  218.049862][ T5911] usb 4-1: SerialNumber: syz
[  218.056907][ T5911] usb 4-1: config 0 descriptor??
[  218.062459][ T7948] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  218.070298][ T7948] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  218.084816][ T5911] usb 4-1: ucan: probing device on interface #0
[  218.136777][   T10] Process accounting resumed
[  218.152425][ T5916] usb 2-1: Using ep0 maxpacket: 16
[  218.180676][ T5916] usb 2-1: config 104 has an invalid interface number: 96 but max is 3
[  218.197087][ T5916] usb 2-1: config 104 has an invalid interface number: 57 but max is 3
[  218.207591][ T5928] catc 5-1:8.255: Can't set altsetting 1.
[  218.215185][ T5928] catc 5-1:8.255: probe with driver catc failed with error -5
[  218.223648][ T5916] usb 2-1: config 104 has an invalid descriptor of length 0, skipping remainder of the config
[  218.247250][ T5928] usb 5-1: USB disconnect, device number 13
[  218.253366][ T5916] usb 2-1: config 104 has 2 interfaces, different from the descriptor's value: 4
[  218.321624][ T5911] usb 4-1: ucan: device protocol version -695498749 is not supported
[  218.394574][ T5916] usb 2-1: config 104 has no interface number 0
[  218.400834][ T5916] usb 2-1: config 104 has no interface number 1
[  218.413909][ T5911] usb 4-1: ucan: probe failed; try to update the device firmware
[  218.428278][ T5916] usb 2-1: config 104 interface 96 altsetting 153 has an invalid descriptor for endpoint zero, skipping
[  218.439830][ T5916] usb 2-1: config 104 interface 96 altsetting 153 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  218.452861][ T5916] usb 2-1: config 104 interface 96 altsetting 153 endpoint 0x7 has invalid maxpacket 112, setting to 64
[  218.469908][ T5916] usb 2-1: config 104 interface 57 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  218.494255][ T5916] usb 2-1: config 104 interface 96 has no altsetting 0
[  218.503833][ T5916] usb 2-1: config 104 interface 57 has no altsetting 0
[  218.514236][ T5916] usb 2-1: New USB device found, idVendor=19d2, idProduct=0191, bcdDevice=20.fd
[  218.602074][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.615698][ T5916] usb 2-1: Product: ᰁ
[  218.619979][ T5916] usb 2-1: Manufacturer: 䤒ĥ魤勇섃ྰ쏓Ἶꄯ쪫ኳ捇厕쳰騙൭鿔ꎗ죲⧑듚脟묉앆徹ⷠ㱆깶劅닧︽ᕉ붓撸៦螗쁼暹᯲߆ﻮ
[  218.666018][ T5916] usb 2-1: SerialNumber: ࠔ
[  218.855886][   T30] audit: type=1400 audit(2000000066.870:725): avc:  denied  { map } for  pid=7947 comm="syz.3.530" path="/proc/374" dev="proc" ino=15254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  218.887412][ T5916] option 2-1:104.96: GSM modem (1-port) converter detected
[  218.952646][   T30] audit: type=1400 audit(2000000066.970:726): avc:  denied  { mounton } for  pid=7967 comm="syz.4.535" path="/92/file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  219.116526][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'.
[  219.176745][ T5916] usb 2-1: USB disconnect, device number 19
[  219.193923][ T5916] option 2-1:104.96: device disconnected
[  219.249544][ T7981] overlayfs: failed to clone lowerpath
[  219.256784][ T7981] overlayfs: failed to clone lowerpath
[  219.431703][ T5816] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  219.610579][ T5816] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  219.625532][ T5816] usb 3-1: config 0 has no interface number 0
[  219.642890][ T5816] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  219.652804][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.668935][ T5816] usb 3-1: Product: syz
[  219.681242][ T5816] usb 3-1: Manufacturer: syz
[  219.698165][ T5816] usb 3-1: SerialNumber: syz
[  219.721211][ T5816] usb 3-1: config 0 descriptor??
[  219.811616][ T5916] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  220.043238][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.053160][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.066838][ T5916] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  220.076088][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.101684][ T5916] usb 2-1: config 0 descriptor??
[  220.327205][ T7990] No such timeout policy "syz1"
[  220.626679][ T5863] usb 4-1: USB disconnect, device number 14
[  220.853329][   T30] audit: type=1400 audit(2000000068.870:727): avc:  denied  { create } for  pid=7997 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  221.008667][ T5916] usbhid 2-1:0.0: can't add hid device: -71
[  221.022008][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  221.038610][ T5916] usb 2-1: USB disconnect, device number 20
[  221.075920][   T30] audit: type=1400 audit(2000000068.890:728): avc:  denied  { ioctl } for  pid=7997 comm="syz.4.544" path="socket:[16683]" dev="sockfs" ino=16683 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  221.120854][ T8003] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  221.152440][   T30] audit: type=1400 audit(2000000069.170:729): avc:  denied  { bind } for  pid=8001 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  221.251383][ T5816] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  221.262130][ T5816] asix 3-1:0.251: probe with driver asix failed with error -524
[  221.935304][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.945598][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.950453][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.986774][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.988796][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.022388][ T5863] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  222.047126][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.161612][ T5816] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  222.181661][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  222.191796][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short
[  222.217096][ T5863] usb 4-1: config 8 has an invalid interface number: 255 but max is 8
[  222.234044][ T5863] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 9
[  222.249614][ T5863] usb 4-1: config 8 has no interface number 0
[  222.268015][ T5863] usb 4-1: config 8 interface 255 has no altsetting 0
[  222.525490][ T5863] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00
[  222.536734][ T5863] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  222.546559][   T30] audit: type=1400 audit(2000000070.550:730): avc:  denied  { getopt } for  pid=8010 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  222.566085][ T5863] usb 4-1: Product: syz
[  222.570350][ T5863] usb 4-1: Manufacturer: syz
[  222.593382][ T5863] usb 4-1: SerialNumber: syz
[  222.672701][ T8024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8024 comm=syz.4.552
[  222.771786][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'.
[  222.819265][ T5863] catc 4-1:8.255: Can't set altsetting 1.
[  222.825464][ T5863] catc 4-1:8.255: probe with driver catc failed with error -5
[  222.857628][ T5863] usb 4-1: USB disconnect, device number 15
[  222.924858][   T10] usb 3-1: USB disconnect, device number 16
[  223.333659][   T30] audit: type=1400 audit(2000000071.350:731): avc:  denied  { create } for  pid=8043 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  223.336146][ T8044] overlay: ./file0 is not a directory
[  223.386983][   T30] audit: type=1400 audit(2000000071.350:732): avc:  denied  { connect } for  pid=8043 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  223.423223][ T5816] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  223.539006][   T30] audit: type=1400 audit(2000000071.350:733): avc:  denied  { mount } for  pid=8043 comm="syz.0.557" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  223.613229][ T5816] usb 2-1: Using ep0 maxpacket: 16
[  223.620947][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short
[  223.633217][ T5816] usb 2-1: config 6 has an invalid interface number: 63 but max is 0
[  223.641438][ T5816] usb 2-1: config 6 has no interface number 0
[  223.650116][ T5816] usb 2-1: config 6 interface 63 has no altsetting 0
[  223.665572][ T5816] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=80.c8
[  223.679249][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.750162][ T5816] usb 2-1: Product: syz
[  223.758610][ T5816] usb 2-1: Manufacturer: syz
[  223.763627][ T5816] usb 2-1: SerialNumber: syz
[  224.005763][ T5916] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  224.049155][   T30] audit: type=1400 audit(2000000072.060:734): avc:  denied  { write } for  pid=8030 comm="syz.1.553" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  224.173829][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.183780][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  224.211722][ T5916] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  224.221767][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.304153][ T5916] usb 4-1: config 0 descriptor??
[  224.770017][ T5916] usbhid 4-1:0.0: can't add hid device: -71
[  224.796141][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  224.806473][ T8057] tipc: Enabled bearer <ib:wg1>, priority 0
[  224.830925][ T5916] usb 4-1: USB disconnect, device number 16
[  225.273068][ T5863] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  225.669964][ T5863] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  225.687732][ T5863] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  225.711586][ T5863] usb 3-1: config 220 has no interface number 2
[  225.728708][ T5863] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  226.226671][ T1589] tipc: Node number set to 1112769955
[  226.233934][ T5863] usb 3-1: config 220 interface 0 has no altsetting 0
[  226.240791][ T5863] usb 3-1: config 220 interface 76 has no altsetting 0
[  226.249792][ T5863] usb 3-1: config 220 interface 1 has no altsetting 0
[  226.249852][   T30] audit: type=1400 audit(2000000073.840:735): avc:  denied  { getopt } for  pid=8076 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.283165][ T5863] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  226.301561][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.309663][ T5863] usb 3-1: Product: syz
[  226.345240][ T5863] usb 3-1: Manufacturer: syz
[  226.355147][ T5863] usb 3-1: SerialNumber: syz
[  226.457193][ T5816] usb 2-1: Firmware version (0.0) predates our first public release.
[  226.498280][ T5816] usb 2-1: Please update to version 0.2 or newer
[  226.559809][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'.
[  226.666834][ T5816] usb 2-1: USB disconnect, device number 22
[  226.737484][ T5863] usb 3-1: selecting invalid altsetting 0
[  226.753844][ T5863] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  226.763837][ T5863] uvcvideo 3-1:220.0: No valid video chain found.
[  226.910405][   T30] audit: type=1400 audit(2000000074.840:736): avc:  denied  { mount } for  pid=8074 comm="syz.3.569" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  226.936165][ T5863] usb 3-1: selecting invalid altsetting 0
[  226.948752][ T8094] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  226.961300][ T5863] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  227.088249][ T5863] usb 3-1: USB disconnect, device number 17
[  227.106438][   T30] audit: type=1400 audit(2000000075.120:737): avc:  denied  { ioctl } for  pid=8101 comm="syz.0.574" path="socket:[16829]" dev="sockfs" ino=16829 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  227.331948][   T30] audit: type=1400 audit(2000000075.340:738): avc:  denied  { connect } for  pid=8107 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  227.552777][   T30] audit: type=1400 audit(2000000075.570:739): avc:  denied  { ioctl } for  pid=8110 comm="syz.3.576" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  227.737997][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'.
[  228.137935][ T8114] hfsplus: unable to find HFS+ superblock
[  229.021350][   T30] audit: type=1326 audit(2000000077.030:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.1.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748ef9c629 code=0x0
[  229.083885][   T30] audit: type=1400 audit(2000000077.100:741): avc:  denied  { create } for  pid=8134 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  229.187434][   T30] audit: type=1400 audit(2000000077.190:742): avc:  denied  { bind } for  pid=8134 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  229.311698][   T30] audit: type=1400 audit(2000000077.250:743): avc:  denied  { create } for  pid=8134 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  229.332439][   T30] audit: type=1400 audit(2000000077.270:744): avc:  denied  { write } for  pid=8134 comm="syz.3.583" path="socket:[16898]" dev="sockfs" ino=16898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  229.590240][ T8149] No such timeout policy "syz1"
[  231.108077][ T8162] netlink: 'syz.0.589': attribute type 10 has an invalid length.
[  231.244947][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.253038][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.343921][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.351106][ T8162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.358580][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.365875][ T8162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.686508][ T8162] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  231.921925][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'.
[  231.932138][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  231.932154][   T30] audit: type=1400 audit(2000000079.930:746): avc:  denied  { create } for  pid=8170 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  232.078794][ T8167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'.
[  232.099558][   T30] audit: type=1400 audit(2000000079.940:747): avc:  denied  { write } for  pid=8170 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  232.192549][ T8165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8165 comm=syz.4.591
[  232.292231][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  232.601980][   T30] audit: type=1400 audit(2000000080.280:748): avc:  denied  { append } for  pid=8164 comm="syz.4.591" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  232.640828][   T30] audit: type=1400 audit(2000000080.290:749): avc:  denied  { ioctl } for  pid=8164 comm="syz.4.591" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  232.665741][   T10] usb 4-1: device descriptor read/64, error -71
[  232.935772][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  233.091637][   T10] usb 4-1: device descriptor read/64, error -71
[  233.098763][   T30] audit: type=1400 audit(2000000081.110:750): avc:  denied  { ioctl } for  pid=8168 comm="syz.1.592" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  233.182158][ T5863] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  233.215224][   T10] usb usb4-port1: attempt power cycle
[  233.219057][ T8183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  233.327470][   T30] audit: type=1400 audit(2000000081.230:751): avc:  denied  { watch watch_reads } for  pid=8181 comm="syz.2.595" path="/proc/455/net/netlink" dev="proc" ino=4026533392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  233.363231][ T5863] usb 5-1: Using ep0 maxpacket: 32
[  233.375124][ T5863] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  233.414247][ T5863] usb 5-1: config 0 has no interface number 0
[  233.447277][ T5863] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.488463][ T5863] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.533985][ T5863] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  233.555354][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.592067][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  233.601833][ T5863] usb 5-1: config 0 descriptor??
[  233.632085][   T10] usb 4-1: device descriptor read/8, error -71
[  233.881576][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  233.905133][   T10] usb 4-1: device descriptor read/8, error -71
[  234.032412][   T10] usb usb4-port1: unable to enumerate USB device
[  234.208322][ T8195] bond1: Removing last arp target with arp_interval on
[  234.231671][ T5916] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  234.252755][   T10] usb 5-1: USB disconnect, device number 14
[  234.292266][ T8195] bond1: entered promiscuous mode
[  234.297334][ T8195] bond1: entered allmulticast mode
[  234.351046][ T8195] 8021q: adding VLAN 0 to HW filter on device bond1
[  234.412550][ T5916] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  234.431047][ T5916] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  234.452508][ T5916] usb 3-1: config 220 has no interface number 2
[  234.458779][ T5916] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  234.482145][ T5916] usb 3-1: config 220 interface 0 has no altsetting 0
[  234.495314][ T5916] usb 3-1: config 220 interface 76 has no altsetting 0
[  234.503187][ T5916] usb 3-1: config 220 interface 1 has no altsetting 0
[  234.535650][ T5916] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  234.565882][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.573997][ T5916] usb 3-1: Product: syz
[  234.580897][ T5916] usb 3-1: Manufacturer: syz
[  234.585815][ T5916] usb 3-1: SerialNumber: syz
[  234.827995][ T5916] usb 3-1: selecting invalid altsetting 0
[  234.848314][ T5916] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  235.191717][ T5916] uvcvideo 3-1:220.0: No valid video chain found.
[  235.207549][ T5916] usb 3-1: selecting invalid altsetting 0
[  235.224712][ T5916] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  235.250980][ T5916] usb 3-1: USB disconnect, device number 18
[  235.301569][   T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  235.500855][   T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  235.524067][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.536375][   T10] usb 2-1: Product: syz
[  235.548759][   T10] usb 2-1: Manufacturer: syz
[  235.553816][   T10] usb 2-1: SerialNumber: syz
[  235.646668][   T10] usb 2-1: config 0 descriptor??
[  235.798130][ T8214] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.927834][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'.
[  236.073524][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.087058][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.099229][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.113174][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.131249][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.144410][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.156436][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.173061][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.186655][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.198488][ T8219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.386231][   T10] airspy 2-1:0.0: Board ID: 00
[  236.429657][   T30] audit: type=1326 audit(2000000084.360:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  236.613571][   T30] audit: type=1326 audit(2000000084.360:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  237.603293][   T30] audit: type=1326 audit(2000000084.360:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  237.626777][ T8228] Illegal XDP return value 1373903940 on prog  (id 99) dev syz_tun, expect packet loss!
[  238.251721][  T791] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  238.440693][   T10] airspy 2-1:0.0: Firmware version: 
[  238.448971][   T30] audit: type=1326 audit(2000000084.360:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  238.481583][   T30] audit: type=1326 audit(2000000084.360:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  238.506483][   T30] audit: type=1326 audit(2000000084.360:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  238.530767][   T30] audit: type=1326 audit(2000000084.360:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  238.554293][   T30] audit: type=1326 audit(2000000084.360:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803859c629 code=0x7ffc0000
[  238.581571][  T791] usb 4-1: Using ep0 maxpacket: 32
[  238.607635][  T791] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  238.618852][  T791] usb 4-1: config 0 has no interface number 1
[  238.644169][  T791] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  238.649334][ T8233] netlink: 56 bytes leftover after parsing attributes in process `syz.2.610'.
[  238.686760][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.730291][  T791] usb 4-1: Product: syz
[  238.751257][  T791] usb 4-1: Manufacturer: syz
[  238.877780][   T10] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f
[  238.888518][   T10] airspy 2-1:0.0: Registered as swradio24
[  238.895395][   T10] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  239.039468][ T8238] No such timeout policy "syz1"
[  239.323784][  T791] usb 4-1: SerialNumber: syz
[  239.335033][  T791] usb 4-1: config 0 descriptor??
[  239.372714][   T10] usb 2-1: USB disconnect, device number 23
[  239.471446][   T30] audit: type=1400 audit(2000000087.480:760): avc:  denied  { setattr } for  pid=8240 comm="syz.4.612" name="tty29" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  239.521285][  T791] viperboard 4-1:0.61: version 0.00 found at bus 004 address 021
[  239.726036][  T791] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  239.738891][  T791] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  240.175496][  T791] viperboard 4-1:0.0: version 0.00 found at bus 004 address 021
[  240.192346][  T791] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  240.202346][  T791] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  241.748757][ T5863] usb 4-1: USB disconnect, device number 21
[  241.845376][ T8264] overlayfs: overlapping lowerdir path
[  241.904542][ T8266] overlayfs: overlapping lowerdir path
[  242.097904][   T30] audit: type=1400 audit(2000000090.110:761): avc:  denied  { accept } for  pid=8271 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  243.058916][   T30] audit: type=1400 audit(2000000091.070:762): avc:  denied  { read } for  pid=8282 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  243.717124][ T8301] netlink: 56 bytes leftover after parsing attributes in process `syz.1.627'.
[  244.244258][ T8306] overlayfs: overlapping lowerdir path
[  244.271355][ T8306] overlayfs: overlapping lowerdir path
[  244.974109][ T8331] Mount JFS Failure: -22
[  244.978432][ T8331] jfs_mount failed w/return code = -22
[  245.912284][   T30] audit: type=1400 audit(2000000092.770:763): avc:  denied  { listen } for  pid=8317 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  246.600918][   T30] audit: type=1400 audit(2000000094.610:764): avc:  denied  { ioctl } for  pid=8341 comm="syz.4.639" path="socket:[18150]" dev="sockfs" ino=18150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  246.840501][ T5806] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  247.312371][ T1108] batman_adv: batadv0: MLD Querier appeared
[  247.331649][ T5928] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  247.348752][   T30] audit: type=1400 audit(2000000095.360:765): avc:  denied  { read } for  pid=8351 comm="syz.1.638" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  247.396897][   T30] audit: type=1400 audit(2000000095.400:766): avc:  denied  { write } for  pid=8353 comm="syz.3.642" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  247.434196][ T8354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8354 comm=syz.1.638
[  247.451581][ T8354] xt_ipcomp: unknown flags 1D
[  247.464083][   T30] audit: type=1400 audit(2000000095.400:767): avc:  denied  { ioctl } for  pid=8353 comm="syz.3.642" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  247.507356][ T5928] usb 5-1: device descriptor read/64, error -71
[  247.761620][ T5928] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  247.863557][ T8368] bridge4: entered promiscuous mode
[  247.868803][ T8368] bridge4: entered allmulticast mode
[  248.009403][ T5928] usb 5-1: device descriptor read/64, error -71
[  248.052221][ T8376] FAULT_INJECTION: forcing a failure.
[  248.052221][ T8376] name failslab, interval 1, probability 0, space 0, times 0
[  248.064942][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.2.646 Not tainted syzkaller #0 PREEMPT(full) 
[  248.064966][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  248.064982][ T8376] Call Trace:
[  248.064988][ T8376]  <TASK>
[  248.064996][ T8376]  dump_stack_lvl+0x100/0x190
[  248.065030][ T8376]  should_fail_ex.cold+0x5/0xa
[  248.065054][ T8376]  should_failslab+0xc2/0x120
[  248.065081][ T8376]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  248.065103][ T8376]  ? do_getname+0x35/0x390
[  248.065128][ T8376]  do_getname+0x35/0x390
[  248.065150][ T8376]  user_path_at+0x26/0x60
[  248.065175][ T8376]  __x64_sys_mount+0x1fb/0x310
[  248.065195][ T8376]  ? __pfx___x64_sys_mount+0x10/0x10
[  248.065222][ T8376]  do_syscall_64+0x106/0xf80
[  248.065239][ T8376]  ? clear_bhb_loop+0x40/0x90
[  248.065261][ T8376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.065280][ T8376] RIP: 0033:0x7fd5a299c629
[  248.065294][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.065311][ T8376] RSP: 002b:00007fd5a37f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  248.065330][ T8376] RAX: ffffffffffffffda RBX: 00007fd5a2c16180 RCX: 00007fd5a299c629
[  248.065341][ T8376] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00002000000002c0
[  248.065358][ T8376] RBP: 00007fd5a37f8090 R08: 0000000000000000 R09: 0000000000000000
[  248.065368][ T8376] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001
[  248.065378][ T8376] R13: 00007fd5a2c16218 R14: 00007fd5a2c16180 R15: 00007fff9cb26358
[  248.065403][ T8376]  </TASK>
[  248.239427][   T30] audit: type=1400 audit(2000000096.060:768): avc:  denied  { getopt } for  pid=8370 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  248.259178][ T5928] usb usb5-port1: attempt power cycle
[  248.611592][ T5928] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  248.652513][ T5928] usb 5-1: device descriptor read/8, error -71
[  248.904683][ T5928] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  248.952479][ T5928] usb 5-1: device descriptor read/8, error -71
[  249.129385][ T5928] usb usb5-port1: unable to enumerate USB device
[  249.418826][   T30] audit: type=1400 audit(2000000097.400:769): avc:  denied  { kexec_image_load } for  pid=8381 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  249.501433][   T30] audit: type=1400 audit(2000000097.430:770): avc:  denied  { connect } for  pid=8381 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  249.593717][   T30] audit: type=1400 audit(2000000097.480:771): avc:  denied  { setopt } for  pid=8393 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  249.925976][   T30] audit: type=1400 audit(2000000097.780:772): avc:  denied  { ioctl } for  pid=8404 comm="syz.4.654" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x4b6d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  250.161109][   T30] audit: type=1326 audit(2000000098.140:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8403 comm="syz.2.655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a299c629 code=0x0
[  250.396954][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  250.416375][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  251.149349][   T30] audit: type=1400 audit(2000000099.160:774): avc:  denied  { read } for  pid=8447 comm="syz.2.657" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  251.306840][   T30] audit: type=1400 audit(2000000099.160:775): avc:  denied  { open } for  pid=8447 comm="syz.2.657" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  251.706723][   T30] audit: type=1400 audit(2000000099.240:776): avc:  denied  { watch watch_reads } for  pid=8453 comm="syz.0.660" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  251.959544][   T30] audit: type=1400 audit(2000000099.250:777): avc:  denied  { execute } for  pid=8447 comm="syz.2.657" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  252.119062][ T8471] FAULT_INJECTION: forcing a failure.
[  252.119062][ T8471] name failslab, interval 1, probability 0, space 0, times 0
[  252.217422][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: syz.1.663 Not tainted syzkaller #0 PREEMPT(full) 
[  252.217440][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  252.217447][ T8471] Call Trace:
[  252.217451][ T8471]  <TASK>
[  252.217455][ T8471]  dump_stack_lvl+0x100/0x190
[  252.217476][ T8471]  should_fail_ex.cold+0x5/0xa
[  252.217490][ T8471]  should_failslab+0xc2/0x120
[  252.217506][ T8471]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  252.217520][ T8471]  ? __alloc_skb+0x140/0x710
[  252.217538][ T8471]  __alloc_skb+0x140/0x710
[  252.217552][ T8471]  ? __alloc_skb+0x5b7/0x710
[  252.217566][ T8471]  ? __pfx___alloc_skb+0x10/0x10
[  252.217584][ T8471]  netlink_alloc_large_skb+0x69/0x150
[  252.217596][ T8471]  netlink_sendmsg+0x680/0xda0
[  252.217609][ T8471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.217619][ T8471]  ? __might_fault+0x60/0x140
[  252.217635][ T8471]  ____sys_sendmsg+0xa54/0xc30
[  252.217648][ T8471]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.217666][ T8471]  ___sys_sendmsg+0x190/0x1e0
[  252.217679][ T8471]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.217706][ T8471]  __sys_sendmsg+0x170/0x220
[  252.217723][ T8471]  ? __pfx___sys_sendmsg+0x10/0x10
[  252.217747][ T8471]  do_syscall_64+0x106/0xf80
[  252.217757][ T8471]  ? clear_bhb_loop+0x40/0x90
[  252.217771][ T8471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.217782][ T8471] RIP: 0033:0x7f748ef9c629
[  252.217796][ T8471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.217812][ T8471] RSP: 002b:00007f748fdba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.217828][ T8471] RAX: ffffffffffffffda RBX: 00007f748f215fa0 RCX: 00007f748ef9c629
[  252.217839][ T8471] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  252.217848][ T8471] RBP: 00007f748fdba090 R08: 0000000000000000 R09: 0000000000000000
[  252.217858][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.217867][ T8471] R13: 00007f748f216038 R14: 00007f748f215fa0 R15: 00007ffc98d77e18
[  252.217888][ T8471]  </TASK>
[  253.526109][ T8481] No such timeout policy "syz1"
[  253.796630][   T30] audit: type=1400 audit(2000000101.810:778): avc:  denied  { ioctl } for  pid=8482 comm="syz.3.667" path="socket:[17331]" dev="sockfs" ino=17331 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  253.995056][ T8486] random: crng reseeded on system resumption
[  254.353665][   T30] audit: type=1400 audit(2000000102.010:779): avc:  denied  { write } for  pid=8479 comm="syz.1.665" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  254.381521][   T30] audit: type=1400 audit(2000000102.010:780): avc:  denied  { open } for  pid=8479 comm="syz.1.665" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  254.515412][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'.
[  254.865659][ T8493] netlink: 32 bytes leftover after parsing attributes in process `syz.1.670'.
[  255.317435][ T8496] netlink: 52 bytes leftover after parsing attributes in process `syz.2.669'.
[  255.409330][ T8498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8498 comm=syz.2.669
[  255.654155][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.661558][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.783288][ T8499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.671'.
[  255.820245][ T8498] netlink: 76 bytes leftover after parsing attributes in process `syz.2.669'.
[  255.891942][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.899020][ T8498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.906483][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.913574][ T8498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.055084][ T8499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.671'.
[  256.076739][ T8498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.669'.
[  256.117539][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.124788][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.721575][   T30] audit: type=1400 audit(2000000104.720:781): avc:  denied  { create } for  pid=8504 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  256.966485][   T30] audit: type=1400 audit(2000000104.720:782): avc:  denied  { ioctl } for  pid=8504 comm="syz.4.675" path="socket:[17375]" dev="sockfs" ino=17375 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  257.927746][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'.
[  258.381316][ T8543] random: crng reseeded on system resumption
[  258.434755][   T30] audit: type=1400 audit(2000000106.410:783): avc:  denied  { ioctl } for  pid=8538 comm="syz.3.685" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  259.361592][  T791] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  259.494558][   T30] audit: type=1400 audit(2000000107.510:784): avc:  denied  { bind } for  pid=8553 comm="syz.2.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  259.494719][ T8554] Bluetooth: MGMT ver 1.23
[  259.522620][ T8554] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  259.559345][  T791] usb 4-1: Using ep0 maxpacket: 32
[  259.574580][  T791] usb 4-1: config 0 has an invalid interface number: 172 but max is 0
[  259.587800][  T791] usb 4-1: config 0 has no interface number 0
[  259.601341][  T791] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=c2.a1
[  259.614194][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.635602][  T791] usb 4-1: config 0 descriptor??
[  259.666296][  T791] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  259.851100][  T791] gspca_sn9c2028: read1 error -71
[  259.931555][ T8565] No such timeout policy "syz1"
[  260.281193][  T791] gspca_sn9c2028: read1 error -71
[  260.286672][  T791] gspca_sn9c2028: read1 error -71
[  260.291841][  T791] sn9c2028 4-1:0.172: probe with driver sn9c2028 failed with error -71
[  260.302977][  T791] usb 4-1: USB disconnect, device number 22
[  261.191730][   T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  261.561566][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  261.593921][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  261.630874][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.662412][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  261.717605][   T10] usb 4-1: string descriptor 0 read error: -22
[  261.725440][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  261.755168][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.923373][   T10] usb 4-1: 0:2 : does not exist
[  262.181694][ T8599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8599 comm=syz.4.700
[  262.264435][   T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  262.295042][   T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  262.306221][   T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  262.350402][   T30] audit: type=1400 audit(2000000110.360:785): avc:  denied  { append } for  pid=8602 comm="syz.3.701" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  263.032598][   T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  263.099977][   T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  263.136273][   T10] usb 4-1: USB disconnect, device number 23
[  263.428702][ T8611] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  263.495434][ T8611] block device autoloading is deprecated and will be removed.
[  263.957249][   T30] audit: type=1400 audit(2000000111.920:786): avc:  denied  { mounton } for  pid=8618 comm="syz.4.707" path="/127/file0" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  264.300712][ T5806] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  265.291740][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  265.782490][ T8647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8647 comm=syz.1.715
[  265.991550][   T10] usb 5-1: Using ep0 maxpacket: 32
[  266.002204][   T10] usb 5-1: config 0 has an invalid interface number: 61 but max is 1
[  266.011631][   T10] usb 5-1: config 0 has no interface number 1
[  266.021034][   T10] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  266.037794][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.066192][   T10] usb 5-1: Product: syz
[  266.080706][   T10] usb 5-1: Manufacturer: syz
[  266.094008][   T10] usb 5-1: SerialNumber: syz
[  266.117008][   T10] usb 5-1: config 0 descriptor??
[  266.137620][   T30] audit: type=1400 audit(2000000114.150:787): avc:  denied  { mount } for  pid=8636 comm="syz.2.714" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  266.253384][   T10] viperboard 5-1:0.61: version 0.00 found at bus 005 address 019
[  266.326245][   T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  266.362098][   T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  266.509512][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  266.551000][   T10] viperboard 5-1:0.0: version 0.00 found at bus 005 address 019
[  267.787913][ T5863] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  267.800517][ T5863] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  267.800694][   T10] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  267.823998][ T5863] usb 2-1: config 220 has no interface number 2
[  267.830958][ T5863] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  267.921166][   T10] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  267.933456][ T5863] usb 2-1: config 220 interface 0 has no altsetting 0
[  267.940247][ T5863] usb 2-1: config 220 interface 76 has no altsetting 0
[  267.948748][ T5863] usb 2-1: config 220 interface 1 has no altsetting 0
[  267.983670][ T5863] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  268.001372][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.014836][ T5863] usb 2-1: Product: syz
[  268.024284][ T5863] usb 2-1: Manufacturer: syz
[  268.051981][ T5863] usb 2-1: SerialNumber: syz
[  268.077937][ T8668] overlayfs: failed to clone lowerpath
[  268.113975][ T8668] overlayfs: failed to clone lowerpath
[  268.145926][ T5928] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  268.263411][   T30] audit: type=1400 audit(2000000884.366:788): avc:  denied  { getopt } for  pid=8674 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  268.283995][ T5863] usb 2-1: selecting invalid altsetting 0
[  268.301081][ T5863] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  268.314389][ T5928] usb 4-1: Using ep0 maxpacket: 8
[  268.353710][ T5928] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  268.369227][ T5928] usb 4-1: config 0 has no interface number 0
[  268.383045][ T5928] usb 4-1: too many endpoints for config 0 interface 89 altsetting 152: 225, using maximum allowed: 30
[  268.406912][ T5928] usb 4-1: config 0 interface 89 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 225
[  268.436474][ T5863] uvcvideo 2-1:220.0: No valid video chain found.
[  268.447967][ T5928] usb 4-1: config 0 interface 89 has no altsetting 0
[  268.457748][ T5928] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  268.468116][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.476477][ T5928] usb 4-1: Product: syz
[  268.481109][ T5928] usb 4-1: Manufacturer: syz
[  268.486170][ T5928] usb 4-1: SerialNumber: syz
[  268.557308][ T8679] overlayfs: failed to resolve './file0': -2
[  268.571722][ T5928] usb 4-1: config 0 descriptor??
[  268.578190][ T5863] usb 2-1: selecting invalid altsetting 0
[  268.586281][ T5863] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  268.807482][   T30] audit: type=1400 audit(2000000884.923:789): avc:  denied  { create } for  pid=8680 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  269.180351][ T5816] usb 5-1: USB disconnect, device number 19
[  269.183490][   T30] audit: type=1400 audit(2000000884.933:790): avc:  denied  { bind } for  pid=8680 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  269.215129][ T5863] usb 2-1: USB disconnect, device number 24
[  270.418846][ T5806] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  270.587551][ T8709] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  270.628109][ T5863] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  270.801288][ T5863] usb 5-1: config 15 has an invalid interface number: 154 but max is 0
[  270.818445][ T5863] usb 5-1: config 15 has no interface number 0
[  270.843911][ T5863] usb 5-1: config 15 interface 154 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 8
[  270.983098][ T5863] usb 5-1: config 15 interface 154 altsetting 7 endpoint 0xB has invalid wMaxPacketSize 0
[  270.995267][ T5863] usb 5-1: config 15 interface 154 has no altsetting 0
[  271.007771][ T5863] usb 5-1: string descriptor 0 read error: -22
[  271.014496][ T5863] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c
[  271.028942][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  271.067778][ T5863] ati_remote 5-1:15.154: ati_remote_probe: Unexpected endpoint_in
[  271.259208][ T5863] usb 5-1: USB disconnect, device number 20
[  271.319463][   T30] audit: type=1400 audit(2000000887.579:791): avc:  denied  { lock } for  pid=8713 comm="syz.0.735" path="socket:[19921]" dev="sockfs" ino=19921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  271.506380][ T5928] gspca_main: se401-2.14.0 probing 047d:5003
[  271.924675][ T5928] usb 4-1: reset high-speed USB device number 24 using dummy_hcd
[  271.940137][ T5928] usb 4-1: device reset changed ep0 maxpacket size!
[  271.955823][ T5928] gspca_se401: read req failed req 0x06 error -19
[  271.968558][ T5928] usb 4-1: USB disconnect, device number 24
[  271.999272][ T5911] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  272.110073][ T8715] ==================================================================
[  272.118166][ T8715] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1a4/0x1d0
[  272.127378][ T8715] Read of size 8 at addr ffff88806073bb00 by task syz.0.735/8715
[  272.135110][ T8715] 
[  272.137423][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(full) 
[  272.137440][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  272.137448][ T8715] Call Trace:
[  272.137453][ T8715]  <TASK>
[  272.137458][ T8715]  dump_stack_lvl+0x100/0x190
[  272.137481][ T8715]  print_report+0x156/0x4c9
[  272.137501][ T8715]  ? __virt_addr_valid+0x81/0x620
[  272.137519][ T8715]  ? __phys_addr+0xe8/0x180
[  272.137537][ T8715]  ? __list_del_entry_valid_or_report+0x1a4/0x1d0
[  272.137560][ T8715]  kasan_report+0xdf/0x1e0
[  272.137581][ T8715]  ? __list_del_entry_valid_or_report+0x1a4/0x1d0
[  272.137605][ T8715]  __list_del_entry_valid_or_report+0x1a4/0x1d0
[  272.137627][ T8715]  bulk_make_private+0xd8/0x720
[  272.137651][ T8715]  umount_tree+0x3fb/0xec0
[  272.137673][ T8715]  ? lock_acquire+0x1cf/0x380
[  272.137693][ T8715]  ? __pfx_umount_tree+0x10/0x10
[  272.137710][ T8715]  ? switch_task_namespaces+0x89/0x2c0
[  272.137731][ T8715]  put_mnt_ns+0x267/0x300
[  272.137746][ T8715]  switch_task_namespaces+0x133/0x2c0
[  272.137763][ T8715]  do_exit+0x824/0x2aa0
[  272.137784][ T8715]  ? __pfx_do_exit+0x10/0x10
[  272.137802][ T8715]  ? do_raw_spin_lock+0x128/0x260
[  272.137815][ T8715]  ? find_held_lock+0x2b/0x80
[  272.137829][ T8715]  ? get_signal+0x7e0/0x21e0
[  272.137846][ T8715]  do_group_exit+0xd5/0x2a0
[  272.137866][ T8715]  get_signal+0x1ec7/0x21e0
[  272.137884][ T8715]  ? __pfx_get_signal+0x10/0x10
[  272.137899][ T8715]  ? do_futex+0x192/0x350
[  272.137921][ T8715]  arch_do_signal_or_restart+0x91/0x7a0
[  272.137941][ T8715]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  272.137961][ T8715]  ? __pfx___x64_sys_futex+0x10/0x10
[  272.137982][ T8715]  exit_to_user_mode_loop+0x86/0x4a0
[  272.138005][ T8715]  do_syscall_64+0x67c/0xf80
[  272.138018][ T8715]  ? clear_bhb_loop+0x40/0x90
[  272.138033][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.138046][ T8715] RIP: 0033:0x7f803859c629
[  272.138056][ T8715] Code: Unable to access opcode bytes at 0x7f803859c5ff.
[  272.138063][ T8715] RSP: 002b:00007f803942c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  272.138077][ T8715] RAX: fffffffffffffe00 RBX: 00007f8038816098 RCX: 00007f803859c629
[  272.138086][ T8715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8038816098
[  272.138094][ T8715] RBP: 00007f8038816090 R08: 0000000000000000 R09: 0000000000000000
[  272.138103][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.138111][ T8715] R13: 00007f8038816128 R14: 00007fff0d6a73e0 R15: 00007fff0d6a74c8
[  272.138124][ T8715]  </TASK>
[  272.138128][ T8715] 
[  272.382013][ T8715] Allocated by task 8715:
[  272.386318][ T8715]  kasan_save_stack+0x30/0x50
[  272.390979][ T8715]  kasan_save_track+0x14/0x30
[  272.395635][ T8715]  __kasan_slab_alloc+0x89/0x90
[  272.400465][ T8715]  kmem_cache_alloc_noprof+0x241/0x6e0
[  272.405904][ T8715]  alloc_vfsmnt+0x23/0x6a0
[  272.410297][ T8715]  clone_mnt+0x4b/0x930
[  272.414432][ T8715]  vfs_open_tree+0xb02/0x1500
[  272.419090][ T8715]  __x64_sys_open_tree+0xa3/0x150
[  272.424092][ T8715]  do_syscall_64+0x106/0xf80
[  272.428657][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.434528][ T8715] 
[  272.436829][ T8715] Freed by task 0:
[  272.440520][ T8715]  kasan_save_stack+0x30/0x50
[  272.445179][ T8715]  kasan_save_track+0x14/0x30
[  272.449837][ T8715]  kasan_save_free_info+0x3b/0x70
[  272.454836][ T8715]  __kasan_slab_free+0x5f/0x80
[  272.459579][ T8715]  kmem_cache_free+0x124/0x6a0
[  272.464339][ T8715]  rcu_core+0x5a2/0x10d0
[  272.468557][ T8715]  handle_softirqs+0x1eb/0x9e0
[  272.473303][ T8715]  __irq_exit_rcu+0xef/0x150
[  272.477871][ T8715]  irq_exit_rcu+0x9/0x30
[  272.482092][ T8715]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  272.487707][ T8715]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  272.493763][ T8715] 
[  272.496074][ T8715] Last potentially related work creation:
[  272.501763][ T8715]  kasan_save_stack+0x30/0x50
[  272.506428][ T8715]  kasan_record_aux_stack+0xa7/0xc0
[  272.511603][ T8715]  __call_rcu_common.constprop.0+0xa5/0x9b0
[  272.517480][ T8715]  task_work_run+0x150/0x240
[  272.522048][ T8715]  exit_to_user_mode_loop+0x100/0x4a0
[  272.527402][ T8715]  do_syscall_64+0x67c/0xf80
[  272.531973][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.537844][ T8715] 
[  272.540145][ T8715] Second to last potentially related work creation:
[  272.546704][ T8715]  kasan_save_stack+0x30/0x50
[  272.551361][ T8715]  kasan_record_aux_stack+0xa7/0xc0
[  272.556535][ T8715]  task_work_add+0x28b/0x3b0
[  272.561101][ T8715]  mntput_no_expire_slowpath+0x3da/0xb00
[  272.566733][ T8715]  mntput_no_expire+0x1fd/0x220
[  272.571566][ T8715]  mntput+0x6b/0xa0
[  272.575357][ T8715]  vfs_open_tree+0x1235/0x1500
[  272.580108][ T8715]  __x64_sys_open_tree+0xa3/0x150
[  272.585141][ T8715]  do_syscall_64+0x106/0xf80
[  272.589730][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.595604][ T8715] 
[  272.597908][ T8715] The buggy address belongs to the object at ffff88806073ba40
[  272.597908][ T8715]  which belongs to the cache mnt_cache of size 352
[  272.611765][ T8715] The buggy address is located 192 bytes inside of
[  272.611765][ T8715]  freed 352-byte region [ffff88806073ba40, ffff88806073bba0)
[  272.625540][ T8715] 
[  272.627840][ T8715] The buggy address belongs to the physical page:
[  272.634239][ T8715] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806073a1c0 pfn:0x6073a
[  272.644294][ T8715] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  272.652770][ T8715] memcg:ffff8880381c3801
[  272.656986][ T8715] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  272.665464][ T8715] page_type: f5(slab)
[  272.669424][ T8715] raw: 00fff00000000240 ffff88814047e140 ffffea0001e19210 ffffea0001f72510
[  272.677986][ T8715] raw: ffff88806073a1c0 0000000800120007 00000000f5000000 ffff8880381c3801
[  272.686547][ T8715] head: 00fff00000000240 ffff88814047e140 ffffea0001e19210 ffffea0001f72510
[  272.695196][ T8715] head: ffff88806073a1c0 0000000800120007 00000000f5000000 ffff8880381c3801
[  272.703845][ T8715] head: 00fff00000000001 ffffea000181ce81 00000000ffffffff 00000000ffffffff
[  272.712531][ T8715] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  272.721185][ T8715] page dumped because: kasan: bad access detected
[  272.727574][ T8715] page_owner tracks the page as allocated
[  272.733261][ T8715] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5810, tgid 5810 (syz-executor), ts 61330266042, free_ts 13994429867
[  272.754598][ T8715]  post_alloc_hook+0x153/0x170
[  272.759359][ T8715]  get_page_from_freelist+0x111d/0x3140
[  272.764884][ T8715]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  272.770755][ T8715]  new_slab+0xa6/0x6d0
[  272.774804][ T8715]  refill_objects+0x26b/0x400
[  272.779459][ T8715]  __pcs_replace_empty_main+0x19f/0x600
[  272.785004][ T8715]  kmem_cache_alloc_noprof+0x480/0x6e0
[  272.790449][ T8715]  alloc_vfsmnt+0x23/0x6a0
[  272.794865][ T8715]  clone_mnt+0x4b/0x930
[  272.799002][ T8715]  copy_tree+0x329/0xbf0
[  272.803222][ T8715]  copy_mnt_ns+0x2bd/0xc30
[  272.807616][ T8715]  create_new_namespaces+0xd3/0xac0
[  272.812795][ T8715]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  272.818410][ T8715]  ksys_unshare+0x455/0xab0
[  272.822901][ T8715]  __x64_sys_unshare+0x31/0x40
[  272.827646][ T8715]  do_syscall_64+0x106/0xf80
[  272.832213][ T8715] page last free pid 1 tgid 1 stack trace:
[  272.837994][ T8715]  __free_frozen_pages+0x7ca/0x10a0
[  272.843185][ T8715]  free_contig_range+0xde/0x1d0
[  272.848018][ T8715]  destroy_args+0xa8/0x7a0
[  272.852414][ T8715]  debug_vm_pgtable+0x1b66/0x34c0
[  272.857418][ T8715]  do_one_initcall+0x11d/0x760
[  272.862246][ T8715]  kernel_init_freeable+0x6e5/0x7a0
[  272.867427][ T8715]  kernel_init+0x1f/0x1e0
[  272.871734][ T8715]  ret_from_fork+0x754/0xd80
[  272.876300][ T8715]  ret_from_fork_asm+0x1a/0x30
[  272.881048][ T8715] 
[  272.883350][ T8715] Memory state around the buggy address:
[  272.888955][ T8715]  ffff88806073ba00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  272.896995][ T8715]  ffff88806073ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  272.905032][ T8715] >ffff88806073bb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  272.913068][ T8715]                    ^
[  272.917110][ T8715]  ffff88806073bb80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  272.925154][ T8715]  ffff88806073bc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  272.933190][ T8715] ==================================================================
[  272.942389][ T8715] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  272.949591][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(full) 
[  272.958759][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  272.968802][ T8715] Call Trace:
[  272.972057][ T8715]  <TASK>
[  272.974961][ T8715]  dump_stack_lvl+0x100/0x190
[  272.979622][ T8715]  vpanic+0x552/0x970
[  272.983577][ T8715]  ? __pfx_vpanic+0x10/0x10
[  272.988070][ T8715]  ? mark_held_locks+0x40/0x70
[  272.992827][ T8715]  ? __list_del_entry_valid_or_report+0x1a4/0x1d0
[  272.999227][ T8715]  panic+0xd1/0xe0
[  273.002921][ T8715]  ? __pfx_panic+0x10/0x10
[  273.007310][ T8715]  ? check_panic_on_warn+0x1f/0x90
[  273.012418][ T8715]  check_panic_on_warn.cold+0x19/0x34
[  273.017766][ T8715]  end_report.part.0+0x3a/0x90
[  273.022504][ T8715]  kasan_report.cold+0xe/0x18
[  273.027429][ T8715]  ? __list_del_entry_valid_or_report+0x1a4/0x1d0
[  273.033833][ T8715]  __list_del_entry_valid_or_report+0x1a4/0x1d0
[  273.040054][ T8715]  bulk_make_private+0xd8/0x720
[  273.044893][ T8715]  umount_tree+0x3fb/0xec0
[  273.049283][ T8715]  ? lock_acquire+0x1cf/0x380
[  273.053937][ T8715]  ? __pfx_umount_tree+0x10/0x10
[  273.058846][ T8715]  ? switch_task_namespaces+0x89/0x2c0
[  273.064280][ T8715]  put_mnt_ns+0x267/0x300
[  273.068580][ T8715]  switch_task_namespaces+0x133/0x2c0
[  273.073935][ T8715]  do_exit+0x824/0x2aa0
[  273.078067][ T8715]  ? __pfx_do_exit+0x10/0x10
[  273.082636][ T8715]  ? do_raw_spin_lock+0x128/0x260
[  273.087635][ T8715]  ? find_held_lock+0x2b/0x80
[  273.092287][ T8715]  ? get_signal+0x7e0/0x21e0
[  273.096848][ T8715]  do_group_exit+0xd5/0x2a0
[  273.101327][ T8715]  get_signal+0x1ec7/0x21e0
[  273.105803][ T8715]  ? __pfx_get_signal+0x10/0x10
[  273.110627][ T8715]  ? do_futex+0x192/0x350
[  273.114936][ T8715]  arch_do_signal_or_restart+0x91/0x7a0
[  273.120457][ T8715]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  273.126584][ T8715]  ? __pfx___x64_sys_futex+0x10/0x10
[  273.131849][ T8715]  exit_to_user_mode_loop+0x86/0x4a0
[  273.137116][ T8715]  do_syscall_64+0x67c/0xf80
[  273.141679][ T8715]  ? clear_bhb_loop+0x40/0x90
[  273.146328][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.152193][ T8715] RIP: 0033:0x7f803859c629
[  273.156578][ T8715] Code: Unable to access opcode bytes at 0x7f803859c5ff.
[  273.163562][ T8715] RSP: 002b:00007f803942c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  273.171943][ T8715] RAX: fffffffffffffe00 RBX: 00007f8038816098 RCX: 00007f803859c629
[  273.179885][ T8715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8038816098
[  273.187830][ T8715] RBP: 00007f8038816090 R08: 0000000000000000 R09: 0000000000000000
[  273.195773][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.203713][ T8715] R13: 00007f8038816128 R14: 00007fff0d6a73e0 R15: 00007fff0d6a74c8
[  273.211659][ T8715]  </TASK>
[  273.214925][ T8715] Kernel Offset: disabled
[  273.219228][ T8715] Rebooting in 86400 seconds..