last executing test programs:

14.714817461s ago: executing program 3 (id=586):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@remote}, {@multicast1}, {@dev}, {@empty}, {}, {}]}]}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x49, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x3, 0x300)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3)
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24004044}, 0x4044880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)

10.78236173s ago: executing program 3 (id=596):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000"], 0x48)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000780)=0xc)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x4f)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x61812e445b8505a9)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x200})
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, r6, &(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040)=0x17, 0xac5)
syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

9.126933231s ago: executing program 3 (id=607):
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000dca9680e", @ANYRES32], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7e, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xdddd1000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x0, 0x0, 0x2b, 0xd}, {0x200000, 0x30000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x10, 0xb5}, {0xeeef0000, 0xf000, 0x0, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x3000, 0xeeee0000, 0x9, 0x6, 0x4, 0x3, 0xb, 0xff, 0x8, 0x8, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0xc, 0x7, 0xb1, 0x9, 0x4, 0x81, 0x80, 0xfb, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0x4000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0x5, 0x9}, {0x10000, 0x1000}, {0x2000, 0x3256}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8912, &(0x7f00000000c0)={'virt_wifi0\x00', @random="cffaeefdb7c5"})
listen(r5, 0xfffffffc)
socket$inet_mptcp(0x2, 0x1, 0x106)

8.362608457s ago: executing program 3 (id=611):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x83b}, &(0x7f0000000080)=0x8)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

8.055344565s ago: executing program 0 (id=614):
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1f58a3bfabbe084c284fb7069320278f56d099915bbb98c39a2fcd4a12a6108ece84ee0351adae71e79df02f0acbf4afbd9fb7b681c98f184ae6c445d67da153336e2dbb4c1710083675199dbe43a1339fb9db7626c37df4904e8c96808e7637c7fcb61d2a6b068a3d81cb984ae403ce00e7b53fd1ab36016ac68f6fbf88b5a332553fde57fd58c63beb1a756cf525382a8eeed0490ffeb37b3b1e993c1843fcb31f92cfd170a10b9156efcb26a8ceb8a28d4a3ebbbcaaf295f9a05454fd790639bc5be6cad7b0862a5f4c1c87ec7c6ae9cd70acd06dc2c8df2df3392f32e60be9720b8d03bac9358d09ca4c14bde3cedfc48d", 0xf3}, {&(0x7f0000000840)="f7d5c56b689379ef7b073d065d9968b82d858f814fafb77a68fa302ff82420cd7771dacd2d7c0f4ae0b706e9f00289f3c94085b023b769916e8527a926b9d0f8404aab7351dd9d213a5a377da34fa7f195226f637ac4e8e5e0142bdcd52e7573c37a3861e56c899f15e6331b1858ced0d7c0b1cc3bccd7a20d84c755bb3dc58fa124d5fb5962", 0x86}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x0)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000180)=""/104, 0x68}], 0x3}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x200, 0x0, 0xf})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019340)=ANY=[@ANYBLOB="140000001000012200000000000000000000000a140000ff19845a51431fee00000000000a00000a0075841b5ab32eede28d4e80de9965226ecd7c0df161830000a4f7d5e867956241cd44522c4bdb259712e00daf35288e5e92f70aacbeafd8eb095b6e72221e52e566bfa12e8d1a236ea9ad7158954c49c65def3e5feef5d48c9768789de643511e399c39f38ef12e72f9fd6d227bc5d797f0708593172a8f7fd46f31e7b8ab247e46e8e5"], 0x28}}, 0xa000)
open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

6.773958385s ago: executing program 0 (id=616):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x8000}, 0xc)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0)
syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0)

4.655551683s ago: executing program 1 (id=621):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect$uac1(0x0, 0x10e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x4, 0x0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5335, 0x44}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x6, 0x2, [0x3, 0x8], 0x67}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x402, 0x5, 0x4, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x402, 0x5, 0x0, 0x0, 0x7, 0xd}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xdda, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x80, "91"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x1, 0xc0, "304289"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0x5, 0x8, 0x7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x4, 0x7a, 0x8, "db", "98"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x30, 0x3, 0x2, 0xf}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0x3, "e695"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0xb, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x9, 0x5, {0x7, 0x25, 0x1, 0xbf9cdb203b1e9328, 0x81, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x401, 0x8, "a7c60e0bcecd5ac54f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0xc, 0x5, 0x0, 0xd}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0xd, "e130405c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x20, 0x2, 0x2, 0x8, "", "73ea"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x3, 0x8b, {0x7, 0x25, 0x1, 0x8, 0x8c, 0xc}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x2, 0x80, 0x80, 0x8, 0x4}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0x4, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x6, 0xc94}]}, 0x8, [{0x5d, &(0x7f00000002c0)=@string={0x5d, 0x3, "2b86a1c6d99a65a5f6d93ff34088eea481be260b9c4330909003a31730fbf4f1232745736c2db470d9f5ee27983a324d708058d618977ac2111a09c376d40940dd34bb6f660b67b105567ef7b3179ba7e4a5fed765386af5adc0e7"}}, {0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "094b9ed24f9565d6cbcb0d849da6208b3f2cf98e80843e08f007fa070b7c25e3a2badb413b4309dfc622d6598e4c0e0469a2c24b735120ff698d7088f6cf735515831b0b231f4a2f4f38022b3b3cd0982f70987a62cb4f8fad91668496fff2f9e020fcd4e8d98d7dee6c4d034d8dfe516337b43830f68bead43787b8ec1a1636e68f712dc2e09ed19b67f812ab303dd7746283d9d9d37db237aa7eea0972612fdc2ec739bd22b23e5df3bfcf092d197b3f7a1039fb4e2da854c4236ed752"}}, {0x94, &(0x7f0000000400)=@string={0x94, 0x3, "a48902431cafe8d110dd4319c7b8d80ce434d1d04911e31fb53a0db58baac604c32f9a7d0f22eb76406dd1b97781625912e04ce679881a56f9531c6f397e7aa58f47b0ac9b1e74a0686c4f9a0d9e0e14ae2d0b9d68b8df68f66a943d2da0fdf96c4c43117b391e0d2bcc6e704d42b39b77e9015115ae947d9ca8bcf9e33337565c8d555dba45749f6c23b965fb5f26c70eac"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2caf}}, {0xd5, &(0x7f0000000500)=@string={0xd5, 0x3, "165dde0c9492a97f5d9ac20b7d199c7099fbc542fce526b7226a03240e524323dd3d03889b00000000000000007328957e070fa003528ca46d9a5361245a6ab92f3d20edeeda8fc0749cb5db83c61692b6e8563273abaa46f81d6f1c8a963a70a5070c7e9c275e29e3b4443df44c17b3df6ec08e1db272e7875393bd6fbe96070d35e4fe232933ac46f1dd53c80d968242c1f1f8a48541d278413c9ec18bd0636041be34e38180dce27b775da70601309ce1adadf8d41103c605229542e18300d6af4d82fd23028250b3576b2c8c30b34363dd"}}, {0x15, &(0x7f0000000600)=@string={0x15, 0x3, "f74a0a7b2ddbce471a556e47fef816a412e4b9"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2f}}, {0xb0, &(0x7f0000000680)=@string={0xb0, 0x3, "463e8b9f5856e53a9a446731f013ba2436783bf6db1ac781cedf05fa9f5d03507c050f6ce3ee10495d0709450151b93b273a8d7ff3766c732116ba20686634f91f490a288778e82f9cd83a6531eb88c0af27a7f8b881a157a1270a854b5f71ed633cb330a8edcfe6a3a06d8ae4cab9d7159d426aae7d7b6e01760031a695ecefbcdf5689150e4bee56576f949ac6b1867c3ec7c32088745f0e5c2482d9ef45a17637e5e9f34156cfaa490e441594"}}]})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r1, 0x1, 0xfffffffe, 0x25dfdbfc, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.64176592s ago: executing program 2 (id=622):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_setup(0x222, &(0x7f0000000180)=<r1=>0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)='vfat\x00', 0x4000c0, 0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x30000000, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1}])

4.498860305s ago: executing program 0 (id=623):
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x8000)
memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = msgget$private(0x0, 0x204)
msgrcv(r3, &(0x7f0000000240)={0x0, ""/250}, 0x102, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0xffffffff, 0xc, "00000000020000000000002100", '\x00', '\x00', "0000f807", ["fdd5c01000", '\x00\x00\x00\x00`\x00', "00f600040000000000003800", "000003cefd70f14003556000"]})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0x3, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e38bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

4.448389932s ago: executing program 3 (id=624):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000182000000000", @ANYRES32=r2, @ANYBLOB="000000000000000091000100000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xa}]}}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x8000, 0x8, 0x2, 0x10, 0xf, 0x1}}, {0x6, 0x2, [0xfffd]}}, {{0x1c, 0x1, {0xf, 0x1, 0x2, 0x6, 0x2, 0x9, 0x7, 0x4}}, {0xc, 0x2, [0x9, 0x1, 0x4, 0x6]}}, {{0x1c, 0x1, {0xd, 0x4, 0x0, 0x2, 0x1, 0x4, 0x5, 0x3}}, {0xa, 0x2, [0x17b, 0x6, 0xb]}}, {{0x1c, 0x1, {0x1, 0x3, 0x1, 0xd, 0x0, 0x400, 0x9, 0x2}}, {0x8, 0x2, [0xff8c, 0xf]}}, {{0x1c, 0x1, {0xfa, 0x6, 0xf, 0xa, 0x1, 0x1b, 0x401, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0xff10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200488c8}, 0x20004804)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r11, &(0x7f0000032680)=""/102392, 0x18ff8)
sendfile(r3, r3, 0x0, 0x200000)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800)
r12 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002)

4.334809894s ago: executing program 2 (id=625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = syz_io_uring_setup(0x12e, &(0x7f0000000180)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300ffffffffd439c5920800024000000001"], 0xfea1}}, 0x800)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r8, 0x641e)
r9 = dup(r7)
ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000040)={0x20, 0x1, 0x100, 0x6, 0x0, 0xffffffec, 0x0})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x2, 0x8, 0x30, 0x0, "c387bbe622e4"}]}, 0x88}, 0x1, 0x7}, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48, 0x0, 0x9}]})

4.019699084s ago: executing program 4 (id=627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ptrace$getsig(0x4202, 0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x983, 0x2, 0x7e, 0x5, 0xd, <r0=>0xffffffffffffffff})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x2, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x13a}})
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28)
r5 = socket(0x2, 0x80805, 0x0)
flistxattr(r5, &(0x7f0000000240)=""/53, 0x35)
sendmmsg$inet(r5, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)='j', 0x1}], 0x1, 0x0, 0xffffff3d}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4084)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x9}}, 0x10)
bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x78d9c8c660a6aed2, 0x2}}}, 0x17)

3.998893836s ago: executing program 1 (id=628):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000182000000000", @ANYRES32=r2, @ANYBLOB="000000000000000091000100000000009500"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x1)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200488c8}, 0x20004804)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8)
sendfile(r3, r3, 0x0, 0x200000)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800)
r9 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002)

2.917751972s ago: executing program 2 (id=629):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2bc0c1, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000000)={{@any, 0xfffffffa}, 0x1, 0x2, 0x7fffffff})
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000640)={0x1}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x2)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@hyper}, 0x1})
syz_open_pts(r6, 0x40)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2})

2.907861834s ago: executing program 4 (id=630):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0x1c, {0x54e9, 0x1}, {0x48, 0x2}, @rumble={0xaece, 0x7}})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250)
r0 = userfaultfd(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0xaba64f4add525e7f, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x10, 0x0, 0x2, 0x0, 0xfe, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x1c}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x30}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = fcntl$getown(r1, 0x9)
fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xa5, r3})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500004208000b4000000000340004803000018008000100636d7000240002801000038009000100d3060d2def000000080002400000000008000140000000160900010073797a3000"], 0xd0}}, 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f0000000080)=[{r7, 0x5004}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x18)
ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
prctl$PR_SCHED_CORE(0x53564d41, 0x2, 0x0, 0x2, 0x0)

2.21975045s ago: executing program 1 (id=631):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x3ff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x3c}}, 0x10)

1.998322999s ago: executing program 0 (id=632):
mq_unlink(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680))
getdents64(0xffffffffffffffff, 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000000c0)={0x3, 0x8a12, 0x81, 0xd148, 0x4, 0x0, 0x5})
r3 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.959784621s ago: executing program 1 (id=633):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x802, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x20, 0x11, 0x5d, {0x5d, 0x29, "2788ad4b353cd72a460a05cc17d9f35e6c97335c311c9eca939a04aba0cf0b6255319239879770990edae37368bad4d9247f8c5c18d4d92a7d261f81d0f3cc7b8bc1179e72d47474963a39200c5b41242b4bc856603e3012c2a3e2"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="2016b1000000f41c989f3ad8b34af915c6afdb0b54d7f6df8f98179cf08e649bbb4c89764d1f5fa0ef2377ce56acd6a035e7116e0807fedc8825480e27e9fdb39eb44002699e2b5ef582d99c1c8f1bdea77097042d13c85c846ce3e75440cec3912bf2b7e0f6591df30379d2012dc4e843b774fcc112cdefc5aaffa83aee7c903eba34bed42779572cbe04236f4bc0254bbc92fecae6d89057ad24cbe8eb4528c7b2911ad561e392f0530882caa2aff1358b55c5f90cd1caf17c4ab867a5e29620f2bb3a7c69824f17f31cd32680f4a14d5c046cd4ed0e4c2929d90d7a2d201e8d1362c3823e3504069de35dca7331cb3affd86e62cc288cc4a309c6e6cb0afe9edffcab532274ceb4ce755d2d07c74a67b09205813f1eda53146559c9ed348c324c6e087285f105cd9260c62e68414b5607cf8d"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r2 = gettid()
sched_getscheduler(r2)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
sendto(r0, 0x0, 0x0, 0x40085, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x55)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7de6}]}, 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000)

1.958596269s ago: executing program 2 (id=634):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x7, 0x1, 0x5, 0x81, 0x9c3c, 0x9]}, &(0x7f0000000180)=0x10)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'team0\x00'}}, 0x1e)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59})
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0x29ebb}}, 0x20}}, 0x854)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x152)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
truncate(&(0x7f00000000c0)='./bus\x00', 0x9471)
dup3(r7, r6, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0)
finit_module(r7, 0x0, 0x6)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)

1.626256149s ago: executing program 0 (id=635):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00c5fc750783ae62227027d0000004000032eacb4aa26bec25be350ae0a5f8ccd94b17d7b7ac231639eebc42b92842aa63dbf937686018b9df793186a64128570e0c0c423fb9ed5868e07300e83702f16a2a775c81056ed67f33e1533cca01ee18a8dbdcf414b2aa9f0ed6c310e82d7bac3ee48edef5bd29cb4825577c44a959c4490800e9bcb4e3076af4621d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x3d, 0xffffffff, 0x3, 0x4, 0x3, 0x1, 0x3, 0x101}})
syz_emit_ethernet(0x10c2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x0)
write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"3383c1d8ab201201b5493755"}}, {0x2, 0x7, 0x7f, 0x8, @tick, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x3}, {0x9, 0x4}}}], 0x38)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000400007012cbd7000fadbdf25037c00000400c2801c000180180010801400def16077ca2ae7a500000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000100001040000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x22000010)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5}\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r7)

1.573939082s ago: executing program 4 (id=636):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105802)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x2, 0x400, 0x9, 0x0, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r2)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3fa}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5a}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050)
sendto$inet(r0, &(0x7f00000003c0)="95d5c9c2aaba2ebf2d8e2bc4489c5ed9fd720f2a3a9c8f2f119d09152aaf854600c6c637c1c8a7b9cef2324250892c0b0ffeb3de4ebfec09800dbde9e4072d5006c5265e51ff0bf11dce83c630d7ff73dac899fa152915e2931adfe5472df740f85991ea5263499108320b9ffee238721a6c10956d40296e47eea58134f6d86d9d7e3bf962b1ec29191f0327f8d048cb3d7bdf910fcbcab848cc062df46ffe459b3a51772aa5fb3eceb4ebc54f05c78391211e855a11c53bd579aac16c52c1b8f937cdf92a6349bd88d7a80deaf11ab1d6fea73ba923", 0xd6, 0x4000000, &(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10)
read(0xffffffffffffffff, &(0x7f0000000500)=""/81, 0x51)
r5 = accept$inet(r0, &(0x7f0000000580)={0x2, 0x0, @local}, &(0x7f00000005c0)=0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000600)={<r6=>0x0, 0x4}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r6, 0x8, 0x81}, &(0x7f00000006c0)=0xc)
ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000700))
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, &(0x7f0000000840)={0x0, 0xf0, ""/240})
r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0x10)
setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f00000009c0), 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r9, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3e714b347ba97fc0e09b80259"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3e1a795375a14631fd99d28ab7"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x9, 0x6, 0x7fffffff, 0x88a2, 0x1, 0x1d6c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x2}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c40)=@o_path={&(0x7f0000000b80)='./file0\x00', r10, 0x4000, r5}, 0x18)
getsockname(r0, &(0x7f0000000c80)=@in, &(0x7f0000000d00)=0x80)
r11 = syz_socket_connect_nvme_tcp()
ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x891c, &(0x7f0000000d40)={'hsr0\x00', {0x2, 0x4e21, @local}})
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000d80)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffff9, 0x0, 0x2, 0x6a6, 0x5]}, &(0x7f0000000e00)=0x78)
syz_usb_connect(0x4, 0xd0, &(0x7f0000000e40)={{0x12, 0x1, 0x310, 0x15, 0xca, 0xc8, 0x8, 0x20f4, 0x624d, 0x5d8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x1, 0x9, 0x3, 0x80, 0x80, "", [{{0x9, 0x4, 0x3a, 0x9, 0x3, 0xb9, 0x1, 0xd4, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xa}}, @generic={0x80, 0x4, "ecbf6d671850bc4d673f40b4128a7e864261dba75f37046e249e328d3f9612b6caf7f1bcfa9aab326f25243f00b0609ab043acdd2714593f1e75f5e091c924df1152c9882b4a7cbea9a7118bf09c9f838804dbcfafb8bdb29f6e11867a5909c055751862346436de822a928efcdb34cc5b5ddd8243c9b91c73c70196d86a"}], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0xff, 0x7, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8000}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x10, 0x0, 0x5}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x8, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0x4, 0x88, 0x7f, 0x40, 0x4}, 0x12, &(0x7f0000000f80)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x1, [{0xb9, &(0x7f0000000fc0)=@string={0xb9, 0x3, "d172a4579d1feb05118c81be4efde8b00fe46a5a005d70d14afdc86190ca158e23a54dcbec5d0731c94ebdd4a14aa18e03eb0a654888d09d5d0d5716ba00e7b8b9a9aa122c74dd8a9ef11912a8f4f436b37e27fd34a83dc5890fb8d5f6c89bbbcce8531db8770176f0078a74d032e6c68d3f7547241ac7eb5a8e3a379cb319416bbe1c65709781537dbaf767548ed17c084ef912394e73483f567c812039e6b2cb30cab94381c7d23692690dd71707bddaa0d4921aa478"}}]})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

1.321873686s ago: executing program 3 (id=637):
r0 = socket(0x23, 0x2, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x10, 0x9, 0x20, 0x5}, 0x20)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40060f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x4, 0x0, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000180), 0x10001, 0x20c42)
ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000003c0)={0x2, "8000000003f6d3e51d1a62b27c578a9a265c78c4a4ffffff00", 0x3, 0x80000001, 0x3, 0x2000, 0x410, 0x2})
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}})
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.054177319s ago: executing program 1 (id=638):
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x94, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3b}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe03d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x94}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

996.63581ms ago: executing program 2 (id=639):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000680)=0xab21, 0x4)
r1 = epoll_create(0xeb5)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x10000002)
openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0)
creat(0x0, 0xecf86c37d530496c)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100))
read(r6, 0x0, 0x0)
syz_io_uring_complete(r5, 0x0)
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r7 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r7, @ANYBLOB=',wfdn=', @ANYRESHEX, @ANYBLOB=',\x00'])

907.288969ms ago: executing program 4 (id=640):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = timerfd_create(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122)
fcntl$notify(r0, 0x402, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)

726.488172ms ago: executing program 4 (id=641):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000003c0)={{&(0x7f0000000180)=[{0x0, 0x5, 0x2, {0x401, 0x7f}, 0x10, 0xfffffffffffffffb, 0x1}, {0x3, 0x4, 0x8, {0x9, 0x6}, 0x3, 0x9, 0xfffffff9}], 0x2, 0x40, 0x800, 0xcd}, {&(0x7f0000000200)=[{0x10000, 0x2}, {0xfffffffffffffff8, 0x7}, {0x3}, {0xfffffffffffffff7, 0x6}, {0x3}, {0x6, 0x2}, {0x9, 0xff}, {0x2, 0xfffffffffffffffb}, {0xff, 0xda}], 0x9, 0x10, 0x7f, 0x400}, {&(0x7f00000002c0)=[0xfffffffffffffffa, 0x5, 0xfffffffffffffe01], 0x3, 0x8, 0x87, 0x2}, {&(0x7f0000000300)=[{0x3, 0x6, 0xffea, 0x9, 0x1}, {0x5, 0x9, 0x7fffffffffffffff, 0x1, 0x485}, {0x1, 0xffffffffffffc698, 0x7fffffff, 0x62d4, 0x8}], 0x3, 0x28, 0x4, 0xd}, {&(0x7f0000000380)=[0xffffffff80000001, 0xd07], 0x2, 0x8, 0x6, 0x3080000000}})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[<r4=>0x0], &(0x7f0000000000), 0x1, r3, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000000)={0x2, 0x0, r4, 0xb0b0b0b0})

640.810644ms ago: executing program 4 (id=642):
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91a4be6bf00", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async)
syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) (async)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91a4be6bf00", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) (async)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async)

586.035595ms ago: executing program 0 (id=643):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x224}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x301000)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x31fc}}, 0x0)
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86)
madvise(&(0x7f00009ef000/0x4000)=nil, 0x13000, 0x9)
socket(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r4 = io_uring_setup(0x56ab, 0x0)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
getpid()
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a00)={{}, 0x0, 0x8, @unused=[0xe, 0xfff, 0x1, 0x8], @name="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"})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000067c0)=[{{&(0x7f0000004800)=@abs={0x1, 0x0, 0x4e25}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000000140)="5b490016d89e9adce7612b27b3a0b440dfaf670899295ccebb58af3b69aeb2abaa57c4afa05f4c0890ebf20d756f4d78cd267019ee1e49a473b5e50330bf84c93b4b2bd558a8e907dc2a7ab2de73ca1e35e5a2cbbe68e59348dd5d9c45b710838359e0cecb554f045b91353e1b04981ad5a071f3c311965e6a3bee5b5e3736e0d30fb3a32506808f3c57b91f4c63a45a51142c15354217d85742a3f89f863110a5b0e56d3ae67505b4db3046a7005b0301edd8ebdf898fcdba17"}, {&(0x7f0000000200)="224c36a4af5cedad007c3e9f8211996cba547faf43de6044ac1454ab33103d898e5b2d97eb773884c3818f60f60ee6832f28f59c9f78a9b26037552d62942371e3d8f118b8de43738b36ca92e1"}, {&(0x7f0000000280)="ff70d669df0ed8cac4eb3c4d8fdfbe63ecd162adb197cb95"}, {&(0x7f0000000300)="04f727cfaf00a34243e9b24e1d44902d8871e98216b6f7c4154ec3233101458fcb0b7c2e062502fc1a0b2479811b5a6559b56457e12ce2fab9a9912bfba7d4a05489e9ab66ae013a9855ed602cce584b4ed4d756390e1f5ed4858cc29bafe57d56ecae45db160bea35d18d2ac1cebea220b08c9146649b749b4386e806b44d497f488337aaa50be8a6f757c0db1278b78bbc"}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="fd7abdcbecee690f138728169de2eed9b598892d0a62b9e3ffa1a7efe40ab65c5c561ead0b5a05d934a63e536e21"}, {&(0x7f0000001a00)="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"}], 0x0, 0x0, 0xb0}}], 0x4000000000000e5, 0x4827762c88124f9f)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

2.60564ms ago: executing program 1 (id=644):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x1c800)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000090000003c0003"], 0x50}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56)
getsockopt$inet6_buf(r7, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r8=>0x0, 0x49, 0x8, 0x10, 0x0, {{0x16, 0x4, 0x2, 0x5, 0x58, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@generic={0x7, 0x5, "79c56a"}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x7, [0x5742, 0x2, 0x7]}, @end, @rr={0x7, 0xf, 0x2b, [@multicast2, @rand_addr=0x64010102, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@local}, {@local, 0x2}]}, @generic={0x83, 0xb, "3dfc733b7c7b15a2d2"}]}}}}})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r10, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x524}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x100}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8d4}, 0x40004)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0)

0s ago: executing program 2 (id=645):
mq_unlink(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680))
getdents64(0xffffffffffffffff, 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept$alg(r1, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000009, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000000c0)={0x3, 0x8a12, 0x81, 0xd148, 0x4, 0x0, 0x5})
r2 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

ice found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  104.463317][ T3105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.497875][ T3105] usb 3-1: Product: syz
[  104.512712][ T3105] usb 3-1: Manufacturer: syz
[  104.525589][ T3105] usb 3-1: SerialNumber: syz
[  104.579671][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  104.724978][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.182'.
[  104.916781][   T29] audit: type=1400 audit(1777793683.049:513): avc:  denied  { name_bind } for  pid=6455 comm="syz.4.172" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  104.973263][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  104.984356][   T29] audit: type=1400 audit(1777793683.049:514): avc:  denied  { node_bind } for  pid=6455 comm="syz.4.172" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  105.047713][ T5725] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  105.145757][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  105.215684][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  105.216076][ T5725] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  105.224863][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.243222][   T10] usb 4-1: Product: syz
[  105.250559][   T10] usb 4-1: Manufacturer: syz
[  105.252982][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  105.255970][   T10] usb 4-1: SerialNumber: syz
[  105.293205][ T5725] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.318102][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  105.330231][ T3105] usb 3-1: reset high-speed USB device number 6 using dummy_hcd
[  105.345252][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  105.359019][ T5725] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  105.366711][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  105.377593][ T5725] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.389415][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  105.416914][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  105.429520][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  105.431671][ T5620] usb 5-1: USB disconnect, device number 6
[  105.436468][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  105.454897][ T5725] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  105.465469][ T5620] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  105.475058][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  105.486618][ T5725] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  105.498294][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  105.515554][ T5725] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  105.534388][ T5725] usb 1-1: string descriptor 0 read error: -22
[  105.540592][   T29] audit: type=1400 audit(1777793683.669:515): avc:  denied  { create } for  pid=6470 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  105.560887][ T5725] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  105.570591][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.581940][   T29] audit: type=1400 audit(1777793683.669:516): avc:  denied  { ioctl } for  pid=6470 comm="syz.2.178" path="socket:[12802]" dev="sockfs" ino=12802 ioctlcmd=0x3b8d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  105.615519][ T5725] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  105.650027][   T29] audit: type=1400 audit(1777793683.759:517): avc:  denied  { read } for  pid=6470 comm="syz.2.178" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.670729][ T6490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6490 comm=syz.1.183
[  105.688925][   T29] audit: type=1400 audit(1777793683.759:518): avc:  denied  { open } for  pid=6470 comm="syz.2.178" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.770943][ T3105] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.780905][ T3105] usb 3-1: device firmware changed
[  105.796945][ T3105] usb 3-1: USB disconnect, device number 6
[  105.812971][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  105.837698][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  105.850636][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  106.165457][ T3105] usb 1-1: USB disconnect, device number 8
[  106.171704][ T6504] usb 1-1: Couldn't submit interrupt_out_urb -19
[  106.186266][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  106.583161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  106.763163][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  107.133181][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  107.252876][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  107.264251][   T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  107.276010][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  107.283740][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  107.330144][   T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  107.350746][   T10] usb 4-1: USB disconnect, device number 9
[  107.429678][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.755643][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  107.755659][   T29] audit: type=1400 audit(1777793685.889:522): avc:  denied  { write } for  pid=6524 comm="syz.0.192" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  107.893859][   T29] audit: type=1400 audit(1777793685.889:523): avc:  denied  { ioctl } for  pid=6524 comm="syz.0.192" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  108.452073][   T29] audit: type=1400 audit(1777793686.579:524): avc:  denied  { create } for  pid=6537 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  108.953870][   T29] audit: type=1400 audit(1777793686.579:525): avc:  denied  { connect } for  pid=6537 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  108.984365][ T5620] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  109.008895][   T29] audit: type=1400 audit(1777793686.679:526): avc:  denied  { mount } for  pid=6536 comm="syz.2.196" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  109.103490][   T29] audit: type=1400 audit(1777793686.699:527): avc:  denied  { remount } for  pid=6536 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  109.123244][ T5620] usb 2-1: device descriptor read/64, error -71
[  109.135546][ T6544] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  109.239405][   T29] audit: type=1400 audit(1777793686.709:528): avc:  denied  { ioctl } for  pid=6536 comm="syz.2.196" path="socket:[13824]" dev="sockfs" ino=13824 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  109.303005][   T29] audit: type=1400 audit(1777793687.239:529): avc:  denied  { mount } for  pid=6527 comm="syz.3.193" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  109.360327][   T29] audit: type=1400 audit(1777793687.259:530): avc:  denied  { mounton } for  pid=6527 comm="syz.3.193" path="/44/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  109.383872][ T5620] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  109.385717][   T29] audit: type=1400 audit(1777793687.259:531): avc:  denied  { mount } for  pid=6527 comm="syz.3.193" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  109.435163][ T6535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6535 comm=syz.0.195
[  109.624098][ T5620] usb 2-1: device descriptor read/64, error -71
[  109.782667][ T6556] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  109.796110][ T5620] usb usb2-port1: attempt power cycle
[  109.807466][ T3105] IPVS: starting estimator thread 0...
[  109.878889][ T5629] Bluetooth: hci2: Invalid connection link type handle 0x00c8
[  110.223312][ T6557] IPVS: using max 78 ests per chain, 187200 per kthread
[  110.984959][ T5620] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  111.023998][ T5620] usb 2-1: device descriptor read/8, error -71
[  111.026600][ T6559] team0: entered promiscuous mode
[  111.040338][ T6559] team_slave_0: entered promiscuous mode
[  111.067956][ T6559] team_slave_1: entered promiscuous mode
[  111.156736][ T6559] batadv0: entered promiscuous mode
[  111.185280][ T6559] hsr1: entered allmulticast mode
[  111.200518][ T6559] team0: entered allmulticast mode
[  111.212812][ T6559] team_slave_0: entered allmulticast mode
[  111.236461][ T6559] team_slave_1: entered allmulticast mode
[  111.273224][ T3105] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.326932][ T6559] batadv0: entered allmulticast mode
[  111.333860][ T6559] 8021q: adding VLAN 0 to HW filter on device hsr1
[  111.373216][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  111.413292][ T6559] team0: left promiscuous mode
[  111.422804][ T6559] team_slave_0: left promiscuous mode
[  111.448153][ T3105] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  111.450077][ T6559] team_slave_1: left promiscuous mode
[  111.503318][ T6559] batadv0: left promiscuous mode
[  111.529707][ T3105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.554660][   T10] usb 5-1: Using ep0 maxpacket: 32
[  111.571570][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.599817][ T3105] usb 1-1: config 0 descriptor??
[  111.611693][ T3105] cp210x 1-1:0.0: cp210x converter detected
[  111.637857][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.705540][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  111.752487][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.800938][   T10] usb 5-1: config 0 descriptor??
[  111.851087][   T10] hub 5-1:0.0: USB hub found
[  112.053396][   T10] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  112.543106][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  112.568958][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  112.641216][   T10] usb 5-1: USB disconnect, device number 7
[  112.802788][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  112.802798][   T29] audit: type=1400 audit(1777793690.929:541): avc:  denied  { write } for  pid=6606 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.013159][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  114.059070][ T3105] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  114.902699][ T3105] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  115.488530][ T3105] usb 1-1: cp210x converter now attached to ttyUSB0
[  115.565571][   T29] audit: type=1400 audit(1777793693.689:542): avc:  denied  { module_request } for  pid=6618 comm="syz.4.210" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  115.701826][ T3105] usb 1-1: USB disconnect, device number 9
[  115.722500][ T6625] capability: warning: `syz.0.211' uses 32-bit capabilities (legacy support in use)
[  115.774837][ T3105] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  115.805149][   T29] audit: type=1400 audit(1777793693.919:543): avc:  denied  { read } for  pid=6627 comm="syz.1.213" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  115.863241][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  115.916974][   T29] audit: type=1400 audit(1777793693.919:544): avc:  denied  { open } for  pid=6627 comm="syz.1.213" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  116.010766][ T3105] cp210x 1-1:0.0: device disconnected
[  116.012362][ T6644] FAULT_INJECTION: forcing a failure.
[  116.012362][ T6644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.045871][   T29] audit: type=1400 audit(1777793693.919:545): avc:  denied  { sys_module } for  pid=6618 comm="syz.4.210" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  116.094587][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT(full) 
[  116.094602][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  116.094607][ T6644] Call Trace:
[  116.094612][ T6644]  <TASK>
[  116.094618][ T6644]  dump_stack_lvl+0x100/0x190
[  116.094644][ T6644]  should_fail_ex.cold+0x5/0xa
[  116.094663][ T6644]  _copy_from_user+0x2e/0xd0
[  116.094679][ T6644]  uinput_ff_upload_from_user+0x128/0x2a0
[  116.094691][ T6644]  ? __pfx_uinput_ff_upload_from_user+0x10/0x10
[  116.094704][ T6644]  ? lockdep_init_map_type+0x5c/0x250
[  116.094719][ T6644]  ? __init_waitqueue_head+0xca/0x150
[  116.094736][ T6644]  ? input_allocate_device+0x271/0x350
[  116.094754][ T6644]  uinput_ioctl_handler.isra.0+0x40f/0x1d20
[  116.094766][ T6644]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  116.094777][ T6644]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  116.094788][ T6644]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  116.094806][ T6644]  ? __fget_files+0x215/0x3d0
[  116.094823][ T6644]  ? selinux_file_ioctl+0x13b/0x290
[  116.094836][ T6644]  ? selinux_file_ioctl+0xb6/0x290
[  116.094850][ T6644]  ? __pfx_uinput_ioctl+0x10/0x10
[  116.094861][ T6644]  __x64_sys_ioctl+0x18e/0x210
[  116.094873][ T6644]  do_syscall_64+0x10b/0xf80
[  116.094885][ T6644]  ? clear_bhb_loop+0x40/0x90
[  116.094898][ T6644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.094909][ T6644] RIP: 0033:0x7f35fd79cdd9
[  116.094918][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.094927][ T6644] RSP: 002b:00007f35fe662028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.094937][ T6644] RAX: ffffffffffffffda RBX: 00007f35fda15fa0 RCX: 00007f35fd79cdd9
[  116.094943][ T6644] RDX: 0000200000000240 RSI: 00000000406855c9 RDI: 0000000000000003
[  116.094949][ T6644] RBP: 00007f35fe662090 R08: 0000000000000000 R09: 0000000000000000
[  116.094955][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.094961][ T6644] R13: 00007f35fda16038 R14: 00007f35fda15fa0 R15: 00007ffd022af148
[  116.094974][ T6644]  </TASK>
[  116.102339][ T6648] xt_recent: Unsupported userspace flags (000000de)
[  116.335460][   T29] audit: type=1400 audit(1777793694.229:546): avc:  denied  { setopt } for  pid=6647 comm="syz.0.220" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  116.408042][   T29] audit: type=1326 audit(1777793694.379:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.1.219" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97cd9cdd9 code=0x0
[  116.618485][   T29] audit: type=1400 audit(1777793694.749:548): avc:  denied  { unmount } for  pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  116.641334][   T29] audit: type=1400 audit(1777793694.769:549): avc:  denied  { unmount } for  pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  116.712269][   T29] audit: type=1400 audit(1777793694.839:550): avc:  denied  { ioctl } for  pid=6664 comm="syz.3.225" path="socket:[14039]" dev="sockfs" ino=14039 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  116.803300][ T3105] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  116.967590][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.225'.
[  117.065716][ T3105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.077009][ T3105] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  117.086494][ T3105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.097309][ T3105] usb 3-1: config 0 descriptor??
[  117.170688][ T6671] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  117.279028][ T6676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.318237][ T3105] usbhid 3-1:0.0: can't add hid device: -71
[  117.329571][ T3105] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  117.471335][ T3105] usb 3-1: USB disconnect, device number 7
[  118.053610][ T3105] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  118.273503][ T3105] usb 3-1: Using ep0 maxpacket: 32
[  118.314856][ T3105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.386145][ T3105] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  118.788252][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  118.788291][   T29] audit: type=1400 audit(1777793696.649:557): avc:  denied  { create } for  pid=6685 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  118.953937][ T3105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.978611][ T3105] usb 3-1: config 0 descriptor??
[  118.996290][   T29] audit: type=1400 audit(1777793697.089:558): avc:  denied  { ioctl } for  pid=6683 comm="syz.1.231" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  119.041027][ T3105] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  119.065105][   T29] audit: type=1400 audit(1777793697.109:559): avc:  denied  { mount } for  pid=6685 comm="syz.4.232" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  119.104704][ T3105] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  119.198491][   T29] audit: type=1400 audit(1777793697.329:560): avc:  denied  { bind } for  pid=6683 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  119.220961][ T6659] trusted_key: encrypted_key: master key parameter is missing
[  119.277434][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  119.285993][ T3105] usb 3-1: USB disconnect, device number 8
[  119.291849][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  119.306574][   T29] audit: type=1400 audit(1777793697.429:561): avc:  denied  { write } for  pid=6697 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.332156][   T29] audit: type=1400 audit(1777793697.439:562): avc:  denied  { connect } for  pid=6697 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.366276][   T29] audit: type=1400 audit(1777793697.439:563): avc:  denied  { name_connect } for  pid=6697 comm="syz.3.235" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  119.383468][ T5717] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  119.388835][   T29] audit: type=1400 audit(1777793697.459:564): avc:  denied  { shutdown } for  pid=6697 comm="syz.3.235" lport=52250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.422326][   T29] audit: type=1400 audit(1777793697.459:565): avc:  denied  { ioctl } for  pid=6697 comm="syz.3.235" path="socket:[14087]" dev="sockfs" ino=14087 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.447294][   T10] usb 1-1: device descriptor read/64, error -71
[  119.500159][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.222'.
[  119.516874][   T29] audit: type=1326 audit(1777793697.649:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.3.237" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2243b9cdd9 code=0x0
[  119.563273][ T5717] usb 5-1: Using ep0 maxpacket: 8
[  119.570195][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61
[  119.577996][ T5717] usb 5-1: can't read configurations, error -61
[  119.613252][ T5725] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  119.683241][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  119.714657][ T5717] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  119.784825][ T5725] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  119.792893][ T5725] usb 2-1: config 0 has no interface number 0
[  119.800691][ T5725] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  119.809864][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.817906][   T10] usb 1-1: device descriptor read/64, error -71
[  119.824289][ T5725] usb 2-1: Product: syz
[  119.828444][ T5725] usb 2-1: Manufacturer: syz
[  119.833027][ T5725] usb 2-1: SerialNumber: syz
[  119.839319][ T5725] usb 2-1: config 0 descriptor??
[  119.863221][ T5717] usb 5-1: Using ep0 maxpacket: 8
[  119.870022][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61
[  119.878366][ T5717] usb 5-1: can't read configurations, error -61
[  119.885152][ T5717] usb usb5-port1: attempt power cycle
[  119.924822][   T10] usb usb1-port1: attempt power cycle
[  120.046010][ T5725] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  120.066190][ T5725] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  120.080488][ T5725] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  120.088628][ T5725] usb 2-1: media controller created
[  120.106392][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.163643][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  120.632498][ T6710] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  121.093982][ T3105] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  121.110099][ T5725] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  121.153260][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  121.160884][ T5717] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  121.207617][   T10] usb 1-1: device descriptor read/8, error -71
[  121.215378][ T5717] usb 5-1: Using ep0 maxpacket: 8
[  121.223472][ T5717] usb 5-1: unable to read config index 0 descriptor/start: -61
[  121.231384][ T5717] usb 5-1: can't read configurations, error -61
[  121.249519][ T5725] usb 2-1: USB disconnect, device number 14
[  121.375414][ T5717] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  121.406331][ T5717] usb 5-1: Using ep0 maxpacket: 8
[  121.448840][ T5717] usb 5-1: device descriptor read/all, error -71
[  121.478795][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  121.486517][ T5717] usb usb5-port1: unable to enumerate USB device
[  121.533705][   T10] usb 1-1: device descriptor read/8, error -71
[  121.545583][ T6718] syzkaller0: entered promiscuous mode
[  121.573247][ T6718] syzkaller0: entered allmulticast mode
[  121.645022][   T10] usb usb1-port1: unable to enumerate USB device
[  122.104230][ T5725] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  122.302649][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.326111][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  122.342980][ T5725] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  122.370502][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.400548][ T5725] usb 2-1: config 0 descriptor??
[  122.417940][ T5725] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  122.637999][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.674876][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.192645][ T6749] random: crng reseeded on system resumption
[  124.186087][ T3105] usb 2-1: USB disconnect, device number 15
[  124.321165][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  124.321191][   T29] audit: type=1400 audit(1777793702.449:577): avc:  denied  { ioctl } for  pid=6754 comm="syz.0.249" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  124.539633][   T29] audit: type=1400 audit(1777793702.669:578): avc:  denied  { watch watch_reads } for  pid=6757 comm="syz.2.250" path="/48/file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  124.651006][   T29] audit: type=1400 audit(1777793702.779:579): avc:  denied  { create } for  pid=6759 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  124.729056][ T6754] mmap: syz.0.249 (6754): VmData 25968640 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  124.785607][ T5787] hid_parser_main: 7 callbacks suppressed
[  124.785626][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.799254][   T29] audit: type=1400 audit(1777793702.809:580): avc:  denied  { write } for  pid=6762 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  125.261017][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.269168][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.324751][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.355070][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.370327][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.379475][   T29] audit: type=1400 audit(1777793703.499:581): avc:  denied  { write } for  pid=6767 comm="syz.2.254" name="file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  125.410061][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.550630][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.558637][   T29] audit: type=1400 audit(1777793703.499:582): avc:  denied  { open } for  pid=6767 comm="syz.2.254" path="/50/file0/file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  125.581506][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.591313][ T5787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  125.599363][   T29] audit: type=1400 audit(1777793703.659:583): avc:  denied  { setopt } for  pid=6767 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.989400][ T5787] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [����Z��w��[ba���|\rn�)A�#6�oү�?��a�I����s��5hV�3��(;��
[  125.989400][ T5787] �ѝ�P�$zɷ�X$����w[S���R��e�zx��u�S�r���l��[�5l'�ZCz2�] on 
[  126.380618][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  126.548651][ T6787] netlink: 220 bytes leftover after parsing attributes in process `syz.4.259'.
[  126.703232][ T5717] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  126.706679][   T29] audit: type=1400 audit(1777793704.829:584): avc:  denied  { map } for  pid=6788 comm="syz.2.260" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  127.380082][ T5717] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  127.389860][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  127.404843][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  127.411014][   T29] audit: type=1400 audit(1777793705.149:585): avc:  denied  { connect } for  pid=6791 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  127.432021][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.448534][   T29] audit: type=1400 audit(1777793705.149:586): avc:  denied  { execute } for  pid=6791 comm="syz.3.261" name="file0" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  127.471459][ T5717] usb 1-1: config 0 descriptor??
[  127.551250][ T6803] capability: warning: `syz.4.262' uses deprecated v2 capabilities in a way that may be insecure
[  127.587780][ T6803] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  128.398273][ T6809] input: syz0 as /devices/virtual/input/input12
[  128.571202][ T6809] dvmrp1: entered allmulticast mode
[  128.690614][ T6800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6800 comm=syz.2.263
[  128.726560][ T6822] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  128.877400][ T6806] dvmrp1: left allmulticast mode
[  129.240089][ T6826] comedi comedi0: rti802: I/O base address not correctly aligned
[  129.348019][ T5717] usb 1-1: Cannot read MAC address
[  129.363492][ T5717] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  129.467250][ T5717] usb 1-1: USB disconnect, device number 14
[  131.623218][ T5725] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  131.761080][ T6837] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.769050][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.951661][ T5725] usb 3-1: not running at top speed; connect to a high speed hub
[  132.057514][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  132.057547][   T29] audit: type=1400 audit(1777793710.159:594): avc:  denied  { listen } for  pid=6853 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  132.319754][ T5725] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  132.344595][ T5725] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  132.358285][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.367567][ T5725] usb 3-1: Product: syz
[  132.372492][ T5725] usb 3-1: Manufacturer: syz
[  132.377474][ T5725] usb 3-1: SerialNumber: syz
[  132.437049][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.457343][ T6837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.961848][   T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.045218][   T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.092633][   T29] audit: type=1400 audit(1777793711.219:595): avc:  denied  { create } for  pid=6864 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  133.140929][ T6862] netlink: 136 bytes leftover after parsing attributes in process `syz.2.277'.
[  133.156967][ T3378] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.259144][ T3378] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.325911][   T29] audit: type=1400 audit(1777793711.369:596): avc:  denied  { write } for  pid=6864 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  134.380910][   T29] audit: type=1400 audit(1777793712.509:597): avc:  denied  { create } for  pid=6876 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  134.778286][ T6879] syz_tun: entered promiscuous mode
[  134.784395][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'.
[  135.051042][   T29] audit: type=1400 audit(1777793712.839:598): avc:  denied  { setopt } for  pid=6876 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  135.228714][ T5725] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  135.242965][   T29] audit: type=1400 audit(1777793713.369:599): avc:  denied  { unmount } for  pid=6881 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  135.268884][ T5725] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  135.301730][ T5725] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  135.333632][ T5725] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  135.362798][ T6887] vlan2: entered allmulticast mode
[  135.382446][ T6887] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  135.385409][ T5725] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  136.593924][ T5725] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  136.687705][   T29] audit: type=1400 audit(1777793714.819:600): avc:  denied  { write } for  pid=6861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  136.801185][ T5725] usb 3-1: USB disconnect, device number 9
[  137.237423][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.322396][ T6899] cgroup2: Unknown parameter 'pids��(��D�e*p����'
[  137.335123][   T29] audit: type=1400 audit(1777793715.469:601): avc:  denied  { write } for  pid=6912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  137.358749][ T6915] bond1: Removing last ns target with arp_interval on
[  138.235974][ T6927] comedi comedi3: pcl818: I/O base address not correctly aligned
[  139.233607][ T6947] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  139.247425][ T6951] netlink: 136 bytes leftover after parsing attributes in process `syz.1.299'.
[  139.261341][ T6947] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  139.494937][   T29] audit: type=1400 audit(1777793717.619:602): avc:  denied  { listen } for  pid=6933 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  139.560694][   T29] audit: type=1400 audit(1777793717.689:603): avc:  denied  { write } for  pid=6925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.758379][   T29] audit: type=1400 audit(1777793717.889:604): avc:  denied  { write } for  pid=6966 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.802398][ T5725] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  141.136244][   T29] audit: type=1400 audit(1777793718.929:605): avc:  denied  { remount } for  pid=6979 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  141.230875][   T29] audit: type=1400 audit(1777793719.359:606): avc:  denied  { write } for  pid=6974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.344811][ T5725] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  141.407314][   T29] audit: type=1400 audit(1777793719.539:607): avc:  denied  { write } for  pid=6993 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  141.420299][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.525984][ T5725] usb 4-1: config 0 descriptor??
[  141.560833][ T5725] cp210x 4-1:0.0: cp210x converter detected
[  141.592466][   T29] audit: type=1400 audit(1777793719.719:608): avc:  denied  { create } for  pid=6997 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  141.625700][ T7002] syz.2.307 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  141.658046][   T29] audit: type=1400 audit(1777793719.749:609): avc:  denied  { write } for  pid=6997 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  141.819128][ T7009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7009 comm=syz.4.300
[  142.245016][   T29] audit: type=1400 audit(1777793720.379:610): avc:  denied  { mount } for  pid=7014 comm="syz.4.312" name="/" dev="autofs" ino=15008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  142.743297][ T5620] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  142.918647][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  142.918759][   T29] audit: type=1400 audit(1777793721.019:612): avc:  denied  { append } for  pid=7028 comm="syz.2.317" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.005506][ T5620] usb 1-1: not running at top speed; connect to a high speed hub
[  143.014506][ T5620] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.027750][ T5620] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  143.047180][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.066295][ T5620] usb 1-1: Product: syz
[  143.071829][ T5620] usb 1-1: Manufacturer: syz
[  143.076846][ T5620] usb 1-1: SerialNumber: syz
[  143.203234][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  143.233153][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  143.243713][ T5725] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  143.269533][ T5725] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  143.292931][   T29] audit: type=1400 audit(1777793721.419:613): avc:  denied  { write } for  pid=7033 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  143.316092][ T5725] usb 4-1: cp210x converter now attached to ttyUSB0
[  143.320029][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'.
[  143.349456][ T5725] usb 4-1: USB disconnect, device number 10
[  143.356114][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'.
[  143.382599][   T29] audit: type=1400 audit(1777793721.419:614): avc:  denied  { bind } for  pid=7033 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  143.463817][ T7036] netlink: 136 bytes leftover after parsing attributes in process `syz.0.316'.
[  143.531664][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  143.544827][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  143.625994][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  143.637347][ T5725] cp210x 4-1:0.0: device disconnected
[  143.646914][   T29] audit: type=1400 audit(1777793721.419:615): avc:  denied  { name_bind } for  pid=7033 comm="syz.3.318" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  143.753303][ T7035] netlink: 'syz.3.318': attribute type 14 has an invalid length.
[  143.932674][ T7034] netlink: 'syz.3.318': attribute type 14 has an invalid length.
[  144.061738][   T29] audit: type=1400 audit(1777793721.419:616): avc:  denied  { node_bind } for  pid=7033 comm="syz.3.318" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  144.313155][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  145.081147][ T5620] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  145.107810][ T5620] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  145.112920][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'.
[  145.118934][   T29] audit: type=1400 audit(1777793723.239:617): avc:  denied  { create } for  pid=7043 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  145.154454][ T5620] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  145.172049][ T5620] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2
[  145.187644][ T7044] bond1: entered promiscuous mode
[  145.189658][   T29] audit: type=1400 audit(1777793723.239:618): avc:  denied  { write } for  pid=7043 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  145.192778][ T7044] bond1: entered allmulticast mode
[  145.215282][ T5620] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  145.261881][   T29] audit: type=1400 audit(1777793723.389:619): avc:  denied  { unmount } for  pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  145.330955][   T29] audit: type=1400 audit(1777793723.389:620): avc:  denied  { ioctl } for  pid=7043 comm="syz.2.320" path="socket:[15131]" dev="sockfs" ino=15131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  145.344369][ T5620] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2
[  145.477280][ T5620] usb 1-1: USB disconnect, device number 15
[  145.504867][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.027713][   T29] audit: type=1400 audit(1777793724.159:621): avc:  denied  { getopt } for  pid=7051 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  146.403245][ T5620] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  146.566206][ T5620] usb 3-1: Using ep0 maxpacket: 16
[  146.583099][ T5620] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.609900][ T5620] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  146.646462][ T5620] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  146.655684][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.664021][ T5620] usb 3-1: Product: syz
[  146.667937][ T7067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.668284][ T5620] usb 3-1: Manufacturer: syz
[  146.668301][ T5620] usb 3-1: SerialNumber: syz
[  146.820352][ T7067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.905951][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.926063][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.938733][ T7067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.940886][ T7062] xt_hashlimit: size too large, truncated to 1048576
[  147.181371][ T7067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.229193][ T7081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7081 comm=syz.0.330
[  147.396067][ T5620] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  147.411960][ T5620] usb 3-1: MIDIStreaming interface descriptor not found
[  147.427562][   T47] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.547992][ T3362] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.551380][ T5620] usb 3-1: USB disconnect, device number 10
[  147.580365][ T3362] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.643111][ T3362] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.821245][ T7110] syzkaller0: entered promiscuous mode
[  147.834152][ T7110] syzkaller0: entered allmulticast mode
[  147.986609][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  147.986640][   T29] audit: type=1400 audit(1777793726.119:632): avc:  denied  { name_bind } for  pid=7120 comm="syz.2.340" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  148.017156][ T5717] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  148.661617][ T7131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7131 comm=syz.4.344
[  148.675105][   T29] audit: type=1400 audit(1777793726.809:633): avc:  denied  { ioctl } for  pid=7130 comm="syz.4.344" path="socket:[15345]" dev="sockfs" ino=15345 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  148.744038][ T5717] usb 4-1: not running at top speed; connect to a high speed hub
[  148.762179][ T5717] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  148.837244][ T5717] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  149.316426][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.324924][ T5717] usb 4-1: Product: syz
[  149.329106][ T5717] usb 4-1: Manufacturer: syz
[  149.334011][ T5717] usb 4-1: SerialNumber: syz
[  149.355185][   T29] audit: type=1400 audit(1777793727.479:634): avc:  denied  { setopt } for  pid=7135 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  149.403218][   T29] audit: type=1400 audit(1777793727.499:635): avc:  denied  { ioctl } for  pid=7140 comm="syz.1.346" path="socket:[16178]" dev="sockfs" ino=16178 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  150.325173][ T7159] netlink: 136 bytes leftover after parsing attributes in process `syz.3.336'.
[  151.020471][   T29] audit: type=1400 audit(1777793728.619:636): avc:  denied  { kexec_image_load } for  pid=7151 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  151.159274][ T7149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7149 comm=syz.0.343
[  151.367175][ T5717] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  151.394911][ T5717] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  151.423318][ T5629] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  151.423846][ T4932] Bluetooth: hci5: command 0x1003 tx timeout
[  151.430730][ T7170] overlayfs: overlapping lowerdir path
[  151.440964][ T5717] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  151.457040][ T5717] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  151.469477][ T5717] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  151.483874][ T7170] program syz.2.350 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.516082][ T5717] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  151.528572][ T5717] usb 4-1: USB disconnect, device number 11
[  151.536052][   T29] audit: type=1400 audit(1777793729.659:637): avc:  denied  { write } for  pid=7167 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  151.576531][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.873274][ T5787] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  151.975750][   T29] audit: type=1326 audit(1777793730.109:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7175 comm="syz.3.353" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2243b9cdd9 code=0x0
[  152.034873][ T5787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.060993][ T5787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  152.080151][ T5787] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  153.087282][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.107343][ T5787] usb 1-1: config 0 descriptor??
[  153.259405][   T29] audit: type=1326 audit(1777793731.389:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fd79cdd9 code=0x0
[  153.945150][   T29] audit: type=1400 audit(1777793732.079:640): avc:  denied  { getopt } for  pid=7193 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  153.954053][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.359'.
[  154.449926][ T7195] netlink: 'syz.2.358': attribute type 6 has an invalid length.
[  154.493615][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'.
[  154.522564][ T7195] fuse: Unknown parameter 'use00000000000000000000'
[  154.879197][ T5787] IPVS: starting estimator thread 0...
[  154.885983][ T7198] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  154.897539][   T29] audit: type=1400 audit(1777793732.899:641): avc:  denied  { bind } for  pid=7193 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  154.993418][ T7203] IPVS: using max 39 ests per chain, 93600 per kthread
[  155.264237][   T29] audit: type=1400 audit(1777793733.399:642): avc:  denied  { accept } for  pid=7209 comm="syz.2.363" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  155.309603][ T7212] vivid-004: =================  START STATUS  =================
[  155.318650][ T7212] vivid-004: Radio HW Seek Mode: Bounded
[  155.327088][ T7212] vivid-004: Radio Programmable HW Seek: false
[  155.334094][ T7212] vivid-004: RDS Rx I/O Mode: Block I/O
[  155.340091][ T7212] vivid-004: Generate RBDS Instead of RDS: false
[  155.347030][ T7212] vivid-004: RDS Reception: true
[  155.351972][ T7212] vivid-004: RDS Program Type: 0 inactive
[  155.357870][ T7212] vivid-004: RDS PS Name:  inactive
[  155.363205][ T7212] vivid-004: RDS Radio Text:  inactive
[  155.368838][ T7212] vivid-004: RDS Traffic Announcement: false inactive
[  155.377262][ T7212] vivid-004: RDS Traffic Program: false inactive
[  155.383291][   T35] Bluetooth: hci5: Frame reassembly failed (-84)
[  155.383751][ T5787] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  155.384741][ T7212] vivid-004: RDS Music: false inactive
[  155.404824][ T7212] vivid-004: ==================  END STATUS  ==================
[  155.525606][ T7218] netlink: 'syz.1.365': attribute type 1 has an invalid length.
[  155.535695][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short
[  155.545619][ T5787] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  155.570159][ T5787] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  155.588010][ T7221] bond1: entered promiscuous mode
[  155.595813][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.603257][ T7221] bond1: entered allmulticast mode
[  155.609568][ T7221] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.612540][ T5787] usb 4-1: Product: syz
[  155.626241][   T29] audit: type=1400 audit(1777793733.759:643): avc:  denied  { block_suspend } for  pid=7222 comm="syz.2.366" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  155.629177][ T5787] usb 4-1: Manufacturer: syz
[  155.664091][ T7218] bridge1: entered promiscuous mode
[  155.669372][ T7218] bridge1: entered allmulticast mode
[  155.689645][ T5787] usb 4-1: SerialNumber: syz
[  155.695328][   T35] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  155.718436][ T7218] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  155.815152][ T7221] bridge2: entered promiscuous mode
[  155.832890][ T7221] bridge2: entered allmulticast mode
[  155.844223][   T35] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  155.986459][ T7221] bond1: (slave bridge2): Enslaving as a backup interface with a down link
[  155.999288][ T5787] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  156.004410][   T29] audit: type=1326 audit(1777793734.129:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.367" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fd79cdd9 code=0x0
[  157.027817][ T5787] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  157.050873][ T5620] usb 1-1: USB disconnect, device number 16
[  157.067916][ T5787] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  157.085173][ T5787] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  157.095000][ T5787] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  157.103453][ T5787] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  157.111306][ T5787] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  157.372125][ T7221] bridge3: entered promiscuous mode
[  157.400127][ T7221] bridge3: entered allmulticast mode
[  157.423234][ T4932] Bluetooth: hci5: command 0x1003 tx timeout
[  157.430732][ T5629] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  157.433733][ T7221] bond1: (slave bridge3): Enslaving as a backup interface with a down link
[  157.590172][   T29] audit: type=1400 audit(1777793735.709:645): avc:  denied  { append } for  pid=7207 comm="syz.3.362" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  157.640007][   T29] audit: type=1400 audit(1777793735.769:646): avc:  denied  { write } for  pid=7207 comm="syz.3.362" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  157.690379][ T7232] netlink: 80 bytes leftover after parsing attributes in process `syz.3.362'.
[  157.918891][ T5787] usb 4-1: USB disconnect, device number 12
[  158.381096][   T29] audit: type=1326 audit(1777793736.509:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.1.375" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97cd9cdd9 code=0x0
[  159.717091][   T29] audit: type=1326 audit(1777793737.849:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.381" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97cd9cdd9 code=0x0
[  160.369583][   T29] audit: type=1400 audit(1777793738.499:649): avc:  denied  { bind } for  pid=7280 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  161.590963][   T29] audit: type=1400 audit(1777793739.719:650): avc:  denied  { create } for  pid=7301 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  161.638776][   T29] audit: type=1326 audit(1777793739.749:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.1.388" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97cd9cdd9 code=0x0
[  161.709765][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'.
[  162.273901][   T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  162.424221][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  162.432826][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  162.444522][   T10] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  162.453669][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.462836][   T10] usb 5-1: Product: syz
[  162.469825][   T10] usb 5-1: Manufacturer: syz
[  162.475047][   T10] usb 5-1: SerialNumber: syz
[  162.726907][ T7306] netlink: 136 bytes leftover after parsing attributes in process `syz.4.387'.
[  162.750842][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  162.760002][   T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  163.202992][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  163.210643][   T10] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[  163.226963][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  163.268184][   T29] audit: type=1400 audit(1777793741.399:652): avc:  denied  { connect } for  pid=7316 comm="syz.0.390" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  163.309158][   T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2
[  163.355747][   T10] usb 5-1: USB disconnect, device number 12
[  163.504024][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.673723][   T29] audit: type=1400 audit(1777793741.719:653): avc:  denied  { read } for  pid=7324 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.890782][ T7336] 9pnet_fd: Insufficient options for proto=fd
[  163.959138][   T29] audit: type=1400 audit(1777793742.089:654): avc:  denied  { setopt } for  pid=7337 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  164.764008][   T29] audit: type=1400 audit(1777793742.899:655): avc:  denied  { write } for  pid=7337 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  165.151871][   T29] audit: type=1400 audit(1777793743.279:656): avc:  denied  { ioctl } for  pid=7354 comm="syz.4.401" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  165.151896][ T7355] binder: 7354:7355 ioctl 40046205 0 returned -22
[  165.597605][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  165.980488][ T7360] overlayfs: failed to resolve './file2': -2
[  166.144779][   T10] usb 3-1: Using ep0 maxpacket: 16
[  166.310039][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.332679][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  166.346724][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  166.373218][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.418143][   T10] usb 3-1: config 0 descriptor??
[  166.457464][   T29] audit: type=1400 audit(1777793744.589:657): avc:  denied  { append } for  pid=7363 comm="syz.3.405" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  166.592544][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'.
[  166.817584][   T29] audit: type=1400 audit(1777793744.949:658): avc:  denied  { map } for  pid=7365 comm="syz.0.404" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  166.873210][   T29] audit: type=1400 audit(1777793744.949:659): avc:  denied  { execute } for  pid=7365 comm="syz.0.404" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  166.984586][   T29] audit: type=1400 audit(1777793745.109:660): avc:  denied  { setopt } for  pid=7369 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.014879][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  167.020950][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  167.076291][   T29] audit: type=1400 audit(1777793745.129:661): avc:  denied  { read } for  pid=7369 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.097407][   T10] usb 3-1: USB disconnect, device number 11
[  167.176912][ T7373] FAULT_INJECTION: forcing a failure.
[  167.176912][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.190632][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) 
[  167.190655][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  167.190665][ T7373] Call Trace:
[  167.190671][ T7373]  <TASK>
[  167.190678][ T7373]  dump_stack_lvl+0x100/0x190
[  167.190704][ T7373]  should_fail_ex.cold+0x5/0xa
[  167.190728][ T7373]  _copy_from_user+0x2e/0xd0
[  167.190754][ T7373]  snd_seq_oss_write+0x395/0x800
[  167.190783][ T7373]  ? iovec_from_user+0xda/0x140
[  167.190808][ T7373]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  167.190832][ T7373]  ? __import_iovec+0x1d2/0x640
[  167.190860][ T7373]  ? bpf_lsm_file_permission+0x9/0x10
[  167.190898][ T7373]  ? __pfx_odev_write+0x10/0x10
[  167.190916][ T7373]  odev_write+0x51/0xa0
[  167.190936][ T7373]  vfs_writev+0x5ea/0xe10
[  167.190964][ T7373]  ? __pfx_vfs_writev+0x10/0x10
[  167.190983][ T7373]  ? find_held_lock+0x2b/0x80
[  167.191000][ T7373]  ? ksys_write+0x190/0x250
[  167.191033][ T7373]  ? __fget_files+0x21f/0x3d0
[  167.191062][ T7373]  ? do_writev+0x13e/0x340
[  167.191078][ T7373]  do_writev+0x13e/0x340
[  167.191096][ T7373]  ? __pfx_do_writev+0x10/0x10
[  167.191115][ T7373]  ? rcu_is_watching+0x12/0xc0
[  167.191145][ T7373]  do_syscall_64+0x10b/0xf80
[  167.191166][ T7373]  ? clear_bhb_loop+0x40/0x90
[  167.191187][ T7373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.191205][ T7373] RIP: 0033:0x7f35fd79cdd9
[  167.191219][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.191236][ T7373] RSP: 002b:00007f35fe662028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  167.191253][ T7373] RAX: ffffffffffffffda RBX: 00007f35fda15fa0 RCX: 00007f35fd79cdd9
[  167.191263][ T7373] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003
[  167.191272][ T7373] RBP: 00007f35fe662090 R08: 0000000000000000 R09: 0000000000000000
[  167.191281][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  167.191291][ T7373] R13: 00007f35fda16038 R14: 00007f35fda15fa0 R15: 00007ffd022af148
[  167.191313][ T7373]  </TASK>
[  167.470105][ T7379] fuse: Bad value for 'fd'
[  168.190196][   T29] audit: type=1326 audit(1777793746.319:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.1.414" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97cd9cdd9 code=0x0
[  168.784178][ T7403] /dev/nullb0: Can't open blockdev
[  168.948663][   T29] audit: type=1326 audit(1777793746.899:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  168.999389][   T29] audit: type=1326 audit(1777793746.899:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  170.187140][   T29] audit: type=1326 audit(1777793746.909:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  170.213532][   T29] audit: type=1400 audit(1777793746.909:666): avc:  denied  { mounton } for  pid=7398 comm="syz.0.416" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  170.357302][   T29] audit: type=1326 audit(1777793746.919:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  170.387229][   T29] audit: type=1326 audit(1777793746.919:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  170.389184][ T7411] FAULT_INJECTION: forcing a failure.
[  170.389184][ T7411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.438901][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT(full) 
[  170.438923][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  170.438931][ T7411] Call Trace:
[  170.438937][ T7411]  <TASK>
[  170.438944][ T7411]  dump_stack_lvl+0x100/0x190
[  170.438970][ T7411]  should_fail_ex.cold+0x5/0xa
[  170.438995][ T7411]  _copy_from_user+0x2e/0xd0
[  170.439011][ T7411]  snd_ctl_elem_add_user+0x9d/0x170
[  170.439031][ T7411]  ? __pfx_snd_ctl_elem_add_user+0x10/0x10
[  170.439050][ T7411]  ? find_held_lock+0x2b/0x80
[  170.439086][ T7411]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  170.439104][ T7411]  ? do_vfs_ioctl+0x226/0x13e0
[  170.439126][ T7411]  snd_ctl_ioctl+0xb68/0x1290
[  170.439142][ T7411]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  170.439167][ T7411]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  170.439189][ T7411]  ? __fget_files+0x215/0x3d0
[  170.439208][ T7411]  ? hook_file_ioctl_common+0x149/0x410
[  170.439238][ T7411]  ? selinux_file_ioctl+0x13b/0x290
[  170.439252][ T7411]  ? selinux_file_ioctl+0xb6/0x290
[  170.439266][ T7411]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  170.439278][ T7411]  __x64_sys_ioctl+0x18e/0x210
[  170.439289][ T7411]  do_syscall_64+0x10b/0xf80
[  170.439302][ T7411]  ? clear_bhb_loop+0x40/0x90
[  170.439315][ T7411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.439326][ T7411] RIP: 0033:0x7f35fd79cdd9
[  170.439335][ T7411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.439345][ T7411] RSP: 002b:00007f35fe641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.439355][ T7411] RAX: ffffffffffffffda RBX: 00007f35fda16090 RCX: 00007f35fd79cdd9
[  170.439361][ T7411] RDX: 0000200000000340 RSI: 00000000c1105517 RDI: 0000000000000005
[  170.439368][ T7411] RBP: 00007f35fe641090 R08: 0000000000000000 R09: 0000000000000000
[  170.439374][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.439379][ T7411] R13: 00007f35fda16128 R14: 00007f35fda16090 R15: 00007ffd022af148
[  170.439395][ T7411]  </TASK>
[  170.647290][   T29] audit: type=1326 audit(1777793746.929:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  171.075998][   T29] audit: type=1326 audit(1777793746.939:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  171.201155][   T29] audit: type=1326 audit(1777793746.939:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  171.229732][ T7424] fuse: Bad value for 'fd'
[  171.431749][   T29] audit: type=1326 audit(1777793746.939:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.0.416" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f454b19cdd9 code=0x7ffc0000
[  171.593300][ T5725] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  171.743253][ T5725] usb 3-1: Using ep0 maxpacket: 16
[  171.753857][ T5725] usb 3-1: config 15 has an invalid interface number: 138 but max is 1
[  171.762260][ T5725] usb 3-1: config 15 has an invalid interface number: 104 but max is 1
[  171.792463][ T5725] usb 3-1: config 15 has no interface number 0
[  171.823640][ T5725] usb 3-1: config 15 has no interface number 1
[  171.839767][ T5725] usb 3-1: config 15 interface 138 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32
[  171.893755][ T5725] usb 3-1: config 15 interface 138 altsetting 9 has an endpoint descriptor with address 0xA3, changing to 0x83
[  171.937351][ T5725] usb 3-1: config 15 interface 138 altsetting 9 bulk endpoint 0x83 has invalid maxpacket 1023
[  171.960853][ T5725] usb 3-1: config 15 interface 138 has no altsetting 0
[  171.961449][ T7419] orangefs_mount: mount request failed with -4
[  171.971697][ T5725] usb 3-1: config 15 interface 104 has no altsetting 0
[  171.987969][ T5725] usb 3-1: New USB device found, idVendor=04b8, idProduct=0601, bcdDevice= 1.00
[  171.997363][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.007358][ T5725] usb 3-1: Product: syz
[  172.011611][ T5725] usb 3-1: Manufacturer: syz
[  172.016788][ T5725] usb 3-1: SerialNumber: syz
[  172.048359][ T7427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.055882][ T7427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  173.647262][ T7461] overlayfs: missing 'lowerdir'
[  173.708584][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'.
[  173.911739][ T7470] fuse: Bad value for 'fd'
[  174.392138][ T5725] usb-storage 3-1:15.138: USB Mass Storage device detected
[  174.456268][ T5725] usb-storage 3-1:15.138: Quirks match for vid 04b8 pid 0601: 8
[  174.472621][ T5725] scsi host1: usb-storage 3-1:15.138
[  174.501584][ T5725] usb-storage 3-1:15.104: USB Mass Storage device detected
[  174.520070][ T5725] usb-storage 3-1:15.104: Quirks match for vid 04b8 pid 0601: 8
[  174.547703][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  174.547715][   T29] audit: type=1400 audit(1777793752.679:686): avc:  denied  { mount } for  pid=7476 comm="syz.2.437" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  174.603347][   T29] audit: type=1400 audit(1777793752.739:687): avc:  denied  { search } for  pid=7476 comm="syz.2.437" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  174.626053][   T29] audit: type=1400 audit(1777793752.739:688): avc:  denied  { search } for  pid=7476 comm="syz.2.437" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  174.649391][   T29] audit: type=1400 audit(1777793752.739:689): avc:  denied  { read } for  pid=7476 comm="syz.2.437" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  174.672804][   T29] audit: type=1400 audit(1777793752.739:690): avc:  denied  { read open } for  pid=7476 comm="syz.2.437" path="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  174.695302][   T29] audit: type=1400 audit(1777793752.789:691): avc:  denied  { setattr } for  pid=7476 comm="syz.2.437" name="/" dev="configfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  174.814207][ T5725] usb 3-1: USB disconnect, device number 12
[  174.823495][   T29] audit: type=1400 audit(1777793752.949:692): avc:  denied  { ioctl } for  pid=7489 comm="syz.0.439" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  176.522733][   T29] audit: type=1400 audit(1777793754.649:693): avc:  denied  { accept } for  pid=7512 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  176.550979][ T7509] 9pnet_fd: Insufficient options for proto=fd
[  176.559576][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[  176.614877][   T29] audit: type=1400 audit(1777793754.749:694): avc:  denied  { accept } for  pid=7514 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  176.738184][   T29] audit: type=1400 audit(1777793754.869:695): avc:  denied  { set_context_mgr } for  pid=7518 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  177.133293][ T5812] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  177.175705][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  177.303400][ T5812] usb 1-1: Using ep0 maxpacket: 16
[  177.312857][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  177.327324][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  177.340636][ T5812] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  177.354215][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.362368][ T5812] usb 1-1: Product: syz
[  177.367113][ T5812] usb 1-1: Manufacturer: syz
[  177.376224][   T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  177.388768][ T5812] usb 1-1: SerialNumber: syz
[  177.393538][   T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  177.403685][   T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  177.416503][ T5812] usb 1-1: config 0 descriptor??
[  177.427161][   T10] usb 3-1: config 220 has no interface number 2
[  177.430514][ T5812] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  177.446394][   T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  177.460164][ T5812] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  177.467350][   T10] usb 3-1: config 220 interface 0 has no altsetting 0
[  177.476720][   T10] usb 3-1: config 220 interface 76 has no altsetting 0
[  177.483920][   T10] usb 3-1: config 220 interface 1 has no altsetting 0
[  177.493015][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  177.502257][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.686791][   T10] usb 3-1: Product: syz
[  177.690999][   T10] usb 3-1: Manufacturer: syz
[  177.695944][   T10] usb 3-1: SerialNumber: syz
[  178.344489][ T5812] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  178.351141][ T5812] em28xx 1-1:0.0: Config register raw data: 0x00
[  178.618763][ T3105] usb 1-1: USB disconnect, device number 17
[  178.625689][ T3105] em28xx 1-1:0.0: Disconnecting em28xx
[  178.642932][ T3105] em28xx 1-1:0.0: Freeing device
[  178.743210][ T5620] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  178.904480][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.914768][ T5620] usb 4-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  178.927751][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0
[  178.934961][ T5620] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  178.944558][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.955283][ T5620] usb 4-1: config 0 descriptor??
[  178.964057][ T5620] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  179.792584][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  179.792600][   T29] audit: type=1400 audit(1777793757.919:707): avc:  denied  { nlmsg_read } for  pid=7582 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  179.969940][   T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  179.994872][   T10] uvcvideo 3-1:220.0: No valid video chain found.
[  180.023938][   T10] usb 3-1: selecting invalid altsetting 0
[  180.143013][   T10] usb 3-1: selecting invalid altsetting 0
[  180.149284][   T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  180.160042][   T10] usb 3-1: USB disconnect, device number 13
[  180.196572][   T29] audit: type=1400 audit(1777793758.329:708): avc:  denied  { read } for  pid=7593 comm="syz.4.473" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  180.285685][   T29] audit: type=1400 audit(1777793758.359:709): avc:  denied  { open } for  pid=7593 comm="syz.4.473" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  180.478210][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  180.478223][ T5624] Bluetooth: hci1: command 0x0406 tx timeout
[  180.478250][ T5624] Bluetooth: hci4: command 0x0406 tx timeout
[  180.484377][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  180.589049][ T7605] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  180.624181][ T7605] audit: out of memory in audit_log_start
[  181.113616][ T5620] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  181.306859][ T5620] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.330924][ T5620] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  181.348151][ T5620] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  181.368960][ T5620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.389810][ T5620] usb 5-1: config 0 descriptor??
[  181.503352][ T5620] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  181.522455][ T5620] dvb-usb: bulk message failed: -22 (3/0)
[  181.532599][ T5787] usb 4-1: USB disconnect, device number 13
[  181.556218][ T5620] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  181.570963][ T5620] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  181.578297][ T5620] usb 5-1: media controller created
[  181.592991][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.344677][ T7614] dvb-usb: bulk message failed: -22 (4/0)
[  182.385028][ T5620] dvb-usb: bulk message failed: -22 (6/0)
[  182.436406][ T3311] Bluetooth: hci5: Frame reassembly failed (-84)
[  182.528458][ T5620] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  182.542104][ T5620] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14
[  182.555582][ T5620] dvb-usb: schedule remote query interval to 150 msecs.
[  182.562570][ T5620] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  182.572784][ T5620] usb 5-1: USB disconnect, device number 13
[  182.613687][ T7621] Bluetooth: hci5: Frame reassembly failed (-90)
[  182.839180][ T7631] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  182.854829][ T5620] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  182.910001][   T29] audit: type=1400 audit(1777793761.039:710): avc:  denied  { write } for  pid=7630 comm="syz.2.486" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1
[  183.473215][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  183.520067][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.490'.
[  183.641966][   T10] usb 3-1: Using ep0 maxpacket: 16
[  183.688448][   T29] audit: type=1400 audit(1777793761.809:711): avc:  denied  { map } for  pid=7644 comm="syz.4.490" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  183.723664][   T29] audit: type=1400 audit(1777793761.839:712): avc:  denied  { execute } for  pid=7644 comm="syz.4.490" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  183.726915][   T10] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  184.051840][   T10] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  184.077472][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.095497][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  184.104627][   T10] usb 3-1: config 0 has no interface number 0
[  184.124820][   T10] usb 3-1: config 0 interface 104 has no altsetting 1
[  184.344842][   T10] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  184.433535][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.464950][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  184.478412][ T4932] Bluetooth: hci5: command 0x1003 tx timeout
[  184.554719][   T10] usb 3-1: Product: syz
[  184.569308][   T10] usb 3-1: Manufacturer: syz
[  184.584534][   T10] usb 3-1: SerialNumber: syz
[  184.725156][   T10] usb 3-1: config 0 descriptor??
[  184.739033][   T10] asix 3-1:0.104: probe with driver asix failed with error -22
[  184.788222][   T29] audit: type=1400 audit(1777793762.919:713): avc:  denied  { create } for  pid=7665 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  184.939084][   T29] audit: type=1400 audit(1777793763.059:714): avc:  denied  { sys_admin } for  pid=7665 comm="syz.1.495" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  185.115609][ T7632] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  185.771058][   T29] audit: type=1326 audit(1777793763.899:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.3.499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2243b9cdd9 code=0x0
[  185.923192][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  186.054231][   T10] usb 1-1: device descriptor read/64, error -71
[  186.293195][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  186.453407][   T10] usb 1-1: device descriptor read/64, error -71
[  186.574123][   T10] usb usb1-port1: attempt power cycle
[  186.692400][ T5620] usb 3-1: USB disconnect, device number 14
[  186.836544][ T3378] Bluetooth: hci5: Frame reassembly failed (-90)
[  186.850406][   T29] audit: type=1400 audit(1777793764.979:716): avc:  denied  { create } for  pid=7709 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  186.953211][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  186.985086][   T10] usb 1-1: device descriptor read/8, error -71
[  187.081594][ T7725] netlink: 'syz.1.507': attribute type 12 has an invalid length.
[  187.091064][ T7725] netlink: 'syz.1.507': attribute type 29 has an invalid length.
[  187.111278][ T7725] netlink: 148 bytes leftover after parsing attributes in process `syz.1.507'.
[  187.123200][ T7725] netlink: 59 bytes leftover after parsing attributes in process `syz.1.507'.
[  187.233185][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  187.264446][   T10] usb 1-1: device descriptor read/8, error -71
[  187.370025][   T29] audit: type=1400 audit(1777793765.499:717): avc:  denied  { ioctl } for  pid=7730 comm="syz.4.510" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  187.395954][   T10] usb usb1-port1: unable to enumerate USB device
[  187.431053][   T29] audit: type=1400 audit(1777793765.559:718): avc:  denied  { ioctl } for  pid=7730 comm="syz.4.510" path="socket:[19722]" dev="sockfs" ino=19722 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  188.130628][   T29] audit: type=1326 audit(1777793766.259:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7746 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fd79cdd9 code=0x0
[  188.523181][ T5620] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  188.631007][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  188.638236][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  188.654592][ T5620] usb 4-1: device descriptor read/64, error -71
[  188.864368][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  188.864414][ T4932] Bluetooth: hci5: command 0x1003 tx timeout
[  188.973890][ T5620] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  189.343438][ T5620] usb 4-1: device descriptor read/64, error -71
[  190.008915][ T7759] FAULT_INJECTION: forcing a failure.
[  190.008915][ T7759] name failslab, interval 1, probability 0, space 0, times 0
[  190.083668][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.0.518 Not tainted syzkaller #0 PREEMPT(full) 
[  190.083693][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  190.083704][ T7759] Call Trace:
[  190.083709][ T7759]  <TASK>
[  190.083716][ T7759]  dump_stack_lvl+0x100/0x190
[  190.083742][ T7759]  should_fail_ex.cold+0x5/0xa
[  190.083765][ T7759]  ? process_vm_rw_core.constprop.0+0x1d7/0x950
[  190.083794][ T7759]  should_failslab+0xc2/0x120
[  190.083813][ T7759]  __kmalloc_noprof+0xe0/0x850
[  190.083838][ T7759]  ? irqentry_exit+0x246/0x790
[  190.083864][ T7759]  process_vm_rw_core.constprop.0+0x1d7/0x950
[  190.083893][ T7759]  ? __kasan_kmalloc+0xaa/0xb0
[  190.083920][ T7759]  ? copy_iovec_from_user+0xc5/0x140
[  190.083944][ T7759]  ? copy_iovec_from_user+0xcf/0x140
[  190.083971][ T7759]  ? copy_iovec_from_user+0x102/0x140
[  190.083994][ T7759]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  190.084023][ T7759]  ? iovec_from_user+0xda/0x140
[  190.084060][ T7759]  ? iovec_from_user+0xda/0x140
[  190.084087][ T7759]  process_vm_rw+0x309/0x370
[  190.084107][ T7759]  ? __pfx_process_vm_rw+0x10/0x10
[  190.084139][ T7759]  ? ksys_write+0x190/0x250
[  190.084182][ T7759]  ? ksys_write+0x1ac/0x250
[  190.084199][ T7759]  ? __pfx_ksys_write+0x10/0x10
[  190.084221][ T7759]  __x64_sys_process_vm_writev+0xe2/0x1c0
[  190.084238][ T7759]  ? do_syscall_64+0x90/0xf80
[  190.084258][ T7759]  ? lockdep_hardirqs_on+0x78/0x100
[  190.084278][ T7759]  do_syscall_64+0x10b/0xf80
[  190.084296][ T7759]  ? clear_bhb_loop+0x40/0x90
[  190.084317][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.084334][ T7759] RIP: 0033:0x7f454b19cdd9
[  190.084349][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.084365][ T7759] RSP: 002b:00007f454bf7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  190.084381][ T7759] RAX: ffffffffffffffda RBX: 00007f454b415fa0 RCX: 00007f454b19cdd9
[  190.084392][ T7759] RDX: 0000000000000067 RSI: 0000200000001c80 RDI: 0000000000000160
[  190.084403][ T7759] RBP: 00007f454bf7d090 R08: 0000000000000001 R09: 0000000000000000
[  190.084413][ T7759] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001
[  190.084423][ T7759] R13: 00007f454b416038 R14: 00007f454b415fa0 R15: 00007ffd7fb6e5e8
[  190.084447][ T7759]  </TASK>
[  190.342751][ T5620] usb usb4-port1: attempt power cycle
[  190.828951][   T29] audit: type=1400 audit(1777793768.929:720): avc:  denied  { setattr } for  pid=7775 comm="syz.0.523" name="SCTPv6" dev="sockfs" ino=19852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  190.853330][ T5620] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  191.162269][   T29] audit: type=1400 audit(1777793769.289:721): avc:  denied  { listen } for  pid=7775 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  191.183534][ T7780] Bluetooth: MGMT ver 1.23
[  191.205381][ T5620] usb 4-1: device descriptor read/8, error -71
[  191.865271][ T7789] netlink: 216 bytes leftover after parsing attributes in process `syz.4.526'.
[  192.252371][   T29] audit: type=1326 audit(1777793770.379:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.0.528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f454b19cdd9 code=0x0
[  192.433487][   T76] Bluetooth: hci5: Frame reassembly failed (-84)
[  192.440879][ T7800] Bluetooth: hci5: Frame reassembly failed (-90)
[  192.447532][   T76] Bluetooth: hci5: Frame reassembly failed (-84)
[  192.453208][ T5620] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  192.476232][ T5620] usb 4-1: not running at top speed; connect to a high speed hub
[  192.490562][ T5620] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.503545][ T5620] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  192.512629][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.520829][ T5620] usb 4-1: Product: syz
[  192.525136][ T5620] usb 4-1: Manufacturer: syz
[  192.529789][ T5620] usb 4-1: SerialNumber: syz
[  192.681320][ T7803] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  193.011402][ T7806] netlink: 136 bytes leftover after parsing attributes in process `syz.3.527'.
[  193.394444][ T7808] netlink: 144 bytes leftover after parsing attributes in process `syz.0.531'.
[  194.463223][ T4932] Bluetooth: hci5: command 0x1003 tx timeout
[  194.467681][ T7812] binder: 7811:7812 ioctl c0306201 200000000640 returned -22
[  194.482838][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  194.508341][   T29] audit: type=1400 audit(1777793772.549:723): avc:  denied  { bind } for  pid=7811 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  195.158350][ T5620] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  195.298746][ T5620] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  195.318924][ T5620] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  195.329515][ T5620] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  195.340914][ T5620] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  195.346558][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'.
[  195.348086][   T29] audit: type=1400 audit(1777793773.469:724): avc:  denied  { setopt } for  pid=7822 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  195.916659][ T5620] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  195.976889][   T29] audit: type=1400 audit(1777793774.109:725): avc:  denied  { write } for  pid=7816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.029511][ T7838] 9pnet_fd: Insufficient options for proto=fd
[  196.038305][ T5620] usb 4-1: USB disconnect, device number 17
[  196.116956][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.712891][   T29] audit: type=1400 audit(1777793774.839:726): avc:  denied  { write } for  pid=7847 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.783428][   T29] audit: type=1326 audit(1777793774.909:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.4.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35fd79cdd9 code=0x0
[  196.963576][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  197.734490][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  197.850685][ T7877] vivid-003: =================  START STATUS  =================
[  197.870595][ T7877] vivid-003: Radio HW Seek Mode: Bounded
[  197.883514][   T10] usb 4-1: device descriptor read/64, error -71
[  197.886572][ T7877] vivid-003: Radio Programmable HW Seek: 
[  197.899139][ T7879] netlink: 136 bytes leftover after parsing attributes in process `syz.1.548'.
[  197.922610][ T7881] netlink: 52 bytes leftover after parsing attributes in process `syz.0.549'.
[  197.929507][ T7877] false
[  197.946426][ T3378] Bluetooth: hci5: Frame reassembly failed (-90)
[  197.953340][ T7877] vivid-003: RDS Rx I/O Mode: Block I/O
[  197.961655][ T1232] IPVS: starting estimator thread 0...
[  197.962665][ T7884] Bluetooth: hci5: Frame reassembly failed (-84)
[  197.982070][ T7877] vivid-003: Generate RBDS Instead of RDS: false
[  198.007630][ T7877] vivid-003: RDS Reception: true
[  198.016545][ T7881] IPv6: NLM_F_CREATE should be specified when creating new route
[  198.030041][ T7877] vivid-003: RDS Program Type: 0 inactive
[  198.039918][   T29] audit: type=1400 audit(1777793776.169:728): avc:  denied  { write } for  pid=7854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.073391][ T7877] vivid-003: RDS PS Name:  inactive
[  198.074809][ T7886] IPVS: using max 45 ests per chain, 108000 per kthread
[  198.092552][ T7877] vivid-003: RDS Radio Text:  inactive
[  198.114249][ T7877] vivid-003: RDS Traffic Announcement: false inactive
[  198.130119][   T29] audit: type=1400 audit(1777793776.259:729): avc:  denied  { write } for  pid=7889 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.163220][ T7877] vivid-003: RDS Traffic Program: false inactive
[  198.169642][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  198.178715][ T7877] vivid-003: RDS Music: false inactive
[  198.194321][ T7877] vivid-003: ==================  END STATUS  ==================
[  198.325125][   T10] usb 4-1: device descriptor read/64, error -71
[  198.435632][   T10] usb usb4-port1: attempt power cycle
[  198.513204][ T5620] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  198.523940][   T29] audit: type=1400 audit(1777793776.659:730): avc:  denied  { write } for  pid=7892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.650391][   T29] audit: type=1400 audit(1777793776.779:731): avc:  denied  { write } for  pid=7909 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  198.705744][ T5620] usb 1-1: Using ep0 maxpacket: 16
[  198.718642][ T5620] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  198.742662][ T5620] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  198.773507][ T5620] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  198.802663][ T5620] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  198.813187][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  198.833699][   T10] usb 4-1: device descriptor read/8, error -71
[  198.837144][ T5620] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  198.882435][ T5620] usb 1-1: config 1 interface 0 has no altsetting 0
[  198.903236][ T5620] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  198.932413][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.967883][ T5620] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  199.073249][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  199.107619][   T10] usb 4-1: device descriptor read/8, error -71
[  199.177919][   T29] audit: type=1400 audit(1777793777.309:732): avc:  denied  { write } for  pid=7914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.234659][ T5620] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22
[  199.235596][   T10] usb usb4-port1: unable to enumerate USB device
[  199.272768][ T5620] usb 1-1: USB disconnect, device number 22
[  199.292114][   T29] audit: type=1400 audit(1777793777.419:733): avc:  denied  { write } for  pid=7938 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.639000][ T7943] comedi comedi0: Minor 2 could not be opened
[  200.105582][ T7961] /dev/nullb0: Can't open blockdev
[  200.223089][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  200.352329][   T29] audit: type=1400 audit(1777793778.479:734): avc:  denied  { write } for  pid=7940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.573513][ T7976] FAULT_INJECTION: forcing a failure.
[  200.573513][ T7976] name failslab, interval 1, probability 0, space 0, times 0
[  200.586328][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.3.561 Not tainted syzkaller #0 PREEMPT(full) 
[  200.586351][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  200.586361][ T7976] Call Trace:
[  200.586367][ T7976]  <TASK>
[  200.586373][ T7976]  dump_stack_lvl+0x100/0x190
[  200.586400][ T7976]  should_fail_ex.cold+0x5/0xa
[  200.586424][ T7976]  ? tomoyo_encode2+0xfb/0x3c0
[  200.586447][ T7976]  should_failslab+0xc2/0x120
[  200.586468][ T7976]  __kmalloc_noprof+0xe0/0x850
[  200.586500][ T7976]  tomoyo_encode2+0xfb/0x3c0
[  200.586528][ T7976]  tomoyo_encode+0x29/0x50
[  200.586551][ T7976]  tomoyo_mount_acl+0x14c/0x8b0
[  200.586573][ T7976]  ? is_bpf_text_address+0x8a/0x1a0
[  200.586597][ T7976]  ? bpf_ksym_find+0x128/0x1c0
[  200.586623][ T7976]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  200.586647][ T7976]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  200.586678][ T7976]  ? kernel_text_address+0x8d/0x100
[  200.586704][ T7976]  ? unwind_get_return_address+0x59/0xa0
[  200.586756][ T7976]  ? tomoyo_domain+0xb2/0x150
[  200.586782][ T7976]  ? tomoyo_profile+0x47/0x60
[  200.586811][ T7976]  tomoyo_mount_permission+0x214/0x460
[  200.586833][ T7976]  ? tomoyo_mount_permission+0x1f6/0x460
[  200.586858][ T7976]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  200.586899][ T7976]  security_sb_mount+0xdd/0x270
[  200.586923][ T7976]  path_mount+0x158/0x23d0
[  200.586955][ T7976]  ? __pfx_path_mount+0x10/0x10
[  200.586979][ T7976]  ? lockdep_hardirqs_on+0x78/0x100
[  200.587004][ T7976]  ? putname+0xb1/0x110
[  200.587026][ T7976]  ? kmem_cache_free+0x127/0x6c0
[  200.587060][ T7976]  ? __x64_sys_mount+0x293/0x310
[  200.587085][ T7976]  __x64_sys_mount+0x293/0x310
[  200.587113][ T7976]  ? __pfx___x64_sys_mount+0x10/0x10
[  200.587142][ T7976]  ? rcu_is_watching+0x12/0xc0
[  200.587172][ T7976]  do_syscall_64+0x10b/0xf80
[  200.587192][ T7976]  ? clear_bhb_loop+0x40/0x90
[  200.587215][ T7976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.587233][ T7976] RIP: 0033:0x7f2243b9cdd9
[  200.587248][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.587265][ T7976] RSP: 002b:00007f22449d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  200.587279][ T7976] RAX: ffffffffffffffda RBX: 00007f2243e16090 RCX: 00007f2243b9cdd9
[  200.587290][ T7976] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0
[  200.587301][ T7976] RBP: 00007f22449d9090 R08: 0000000000000000 R09: 0000000000000000
[  200.587310][ T7976] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001
[  200.587320][ T7976] R13: 00007f2243e16128 R14: 00007f2243e16090 R15: 00007ffe7a6d2c18
[  200.587343][ T7976]  </TASK>
[  200.997037][   T29] audit: type=1400 audit(1777793778.999:735): avc:  denied  { write } for  pid=7973 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.248789][   T29] audit: type=1400 audit(1777793779.379:736): avc:  denied  { remount } for  pid=7978 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  202.174348][  T803] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  202.773903][  T803] usb 5-1: Using ep0 maxpacket: 8
[  202.781541][  T803] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  202.790252][  T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  202.818856][  T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  202.829196][  T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  202.839247][  T803] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  202.863157][  T803] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  202.890726][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.283894][  T803] usb 5-1: usb_control_msg returned -32
[  203.295417][  T803] usbtmc 5-1:16.0: can't read capabilities
[  203.482848][ T7985] omfs: Invalid superblock (0)
[  203.494018][   T29] audit: type=1400 audit(1777793781.629:737): avc:  denied  { write } for  pid=7990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  203.555901][ T5620] usb 5-1: USB disconnect, device number 14
[  203.690128][   T29] audit: type=1400 audit(1777793781.819:738): avc:  denied  { write } for  pid=8023 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  203.838559][   T29] audit: type=1400 audit(1777793781.969:739): avc:  denied  { append } for  pid=8029 comm="syz.0.571" name="video6" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  203.861732][ T5725] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  204.576611][   T29] audit: type=1400 audit(1777793782.709:740): avc:  denied  { ioctl } for  pid=8038 comm="syz.1.574" path="socket:[19230]" dev="sockfs" ino=19230 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  204.602886][ T5725] usb 4-1: device descriptor read/64, error -71
[  205.003181][ T5725] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  205.144116][ T5725] usb 4-1: device descriptor read/64, error -71
[  205.176778][ T8049] fuse: Bad value for 'fd'
[  205.283583][ T5725] usb usb4-port1: attempt power cycle
[  205.322785][ T8052] netlink: 7 bytes leftover after parsing attributes in process `syz.1.578'.
[  205.402851][   T29] audit: type=1400 audit(1777793783.529:741): avc:  denied  { read } for  pid=8053 comm="syz.2.579" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  205.474837][   T29] audit: type=1400 audit(1777793783.529:742): avc:  denied  { open } for  pid=8053 comm="syz.2.579" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  205.535036][   T29] audit: type=1400 audit(1777793783.589:743): avc:  denied  { write } for  pid=8053 comm="syz.2.579" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  205.571187][   T29] audit: type=1400 audit(1777793783.619:744): avc:  denied  { append } for  pid=8053 comm="syz.2.579" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  205.632658][ T8056] FAULT_INJECTION: forcing a failure.
[  205.632658][ T8056] name failslab, interval 1, probability 0, space 0, times 0
[  205.663199][ T5725] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  205.677340][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.2.580 Not tainted syzkaller #0 PREEMPT(full) 
[  205.677360][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.677370][ T8056] Call Trace:
[  205.677376][ T8056]  <TASK>
[  205.677382][ T8056]  dump_stack_lvl+0x100/0x190
[  205.677406][ T8056]  should_fail_ex.cold+0x5/0xa
[  205.677430][ T8056]  should_failslab+0xc2/0x120
[  205.677449][ T8056]  __kvmalloc_node_noprof+0xfa/0xa00
[  205.677474][ T8056]  ? io_alloc_cache_init+0x38/0x170
[  205.677501][ T8056]  io_alloc_cache_init+0x38/0x170
[  205.677523][ T8056]  io_rsrc_cache_init+0x40/0x50
[  205.677541][ T8056]  io_uring_setup.cold+0x43d/0x1cde
[  205.677587][ T8056]  ? __pfx_io_uring_setup+0x10/0x10
[  205.677602][ T8056]  ? find_held_lock+0x2b/0x80
[  205.677618][ T8056]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  205.677642][ T8056]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  205.677687][ T8056]  ? ksys_write+0x1ac/0x250
[  205.677705][ T8056]  ? __pfx_ksys_write+0x10/0x10
[  205.677728][ T8056]  __x64_sys_io_uring_setup+0xc2/0x170
[  205.677746][ T8056]  do_syscall_64+0x10b/0xf80
[  205.677766][ T8056]  ? clear_bhb_loop+0x40/0x90
[  205.677786][ T8056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.677802][ T8056] RIP: 0033:0x7f8ad879cdd9
[  205.677816][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.677831][ T8056] RSP: 002b:00007f8ad96c3fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  205.677848][ T8056] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f8ad879cdd9
[  205.677859][ T8056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007091
[  205.677869][ T8056] RBP: 00007f8ad96c4090 R08: 0000000000000000 R09: 0000000000000101
[  205.677879][ T8056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  205.677889][ T8056] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe96312e38
[  205.677912][ T8056]  </TASK>
[  205.685266][ T5725] usb 4-1: device descriptor read/8, error -71
[  207.068473][   T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  207.068856][ T5787] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  207.224005][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  207.236803][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.262555][   T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  207.284088][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.293175][ T5787] usb 3-1: Using ep0 maxpacket: 16
[  207.298621][   T10] usb 1-1: Product: syz
[  207.304595][   T10] usb 1-1: Manufacturer: syz
[  207.310408][   T10] usb 1-1: SerialNumber: syz
[  207.320307][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.340919][ T8079] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  207.358338][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.374891][ T8079] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  207.390686][ T8079] tipc: Enabled bearer <udp:syz0>, priority 10
[  207.404610][ T8081] fuse: Bad value for 'user_id'
[  207.408623][ T5787] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.431128][ T8081] fuse: Bad value for 'user_id'
[  207.431142][ T5787] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  207.463158][ T5787] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  207.479803][ T5787] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  207.556614][ T8084] team0: No ports can be present during mode change
[  207.575291][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.642977][ T8086] netlink: 136 bytes leftover after parsing attributes in process `syz.0.583'.
[  207.666140][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.811728][ T5812] tipc: Node number set to 2130706433
[  209.220679][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  209.234906][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  209.246533][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  209.257033][   T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2
[  209.287313][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  209.470761][   T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2
[  209.510961][   T10] usb 1-1: USB disconnect, device number 23
[  209.557069][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.743412][  T803] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  209.914105][  T803] usb 5-1: Using ep0 maxpacket: 16
[  209.927515][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.952210][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[  209.961028][  T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.961055][  T803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  209.961093][  T803] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  209.961113][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.003880][  T803] usb 5-1: config 0 descriptor??
[  210.089519][   T29] audit: type=1400 audit(1777793788.219:745): avc:  denied  { shutdown } for  pid=8097 comm="syz.0.593" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  210.328563][ T8100] netlink: 144 bytes leftover after parsing attributes in process `syz.0.593'.
[  210.468640][ T5787] usb 3-1: string descriptor 0 read error: -71
[  210.482938][  T803] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input16
[  210.517186][ T5787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.532793][   T29] audit: type=1400 audit(1777793788.649:746): avc:  denied  { write } for  pid=8107 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  210.563400][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.602703][ T5787] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  210.640355][ T5787] usb 3-1: no configuration chosen from 1 choice
[  210.661256][ T5787] usb 3-1: USB disconnect, device number 15
[  210.739380][  T803] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  210.827635][  T803] usb 5-1: USB disconnect, device number 15
[  211.024039][ T5787] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  211.155754][ T8125] fuse: Bad value for 'fd'
[  211.195728][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.242047][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.277934][ T5787] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  211.300557][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.329085][ T8128] netlink: 136 bytes leftover after parsing attributes in process `syz.1.603'.
[  211.350231][ T5787] usb 3-1: config 0 descriptor??
[  211.370017][   T29] audit: type=1400 audit(1777793789.499:747): avc:  denied  { setopt } for  pid=8126 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  211.393348][   T29] audit: type=1400 audit(1777793789.499:748): avc:  denied  { setopt } for  pid=8126 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  211.965326][ T5787] hid_parser_main: 6 callbacks suppressed
[  211.965346][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.032202][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.089231][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.126764][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.178047][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.250865][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.300673][ T5787] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  212.597694][   T29] audit: type=1400 audit(1777793790.719:749): avc:  denied  { read } for  pid=8149 comm="syz.0.609" path="socket:[19416]" dev="sockfs" ino=19416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  212.680313][ T5787] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[  212.750263][ T5787] playstation 0003:054C:0BA0.0004: Failed to retrieve feature with reportID 18: -71
[  212.759841][ T5787] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -71
[  212.770573][ T5787] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4
[  212.783415][ T5787] playstation 0003:054C:0BA0.0004: Failed to create dualshock4.
[  212.796443][ T5787] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -71
[  212.809200][ T5787] usb 3-1: USB disconnect, device number 16
[  212.898102][ T8155] fido_id[8155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  212.911890][   T29] audit: type=1400 audit(1777793791.039:750): avc:  denied  { bind } for  pid=8158 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  213.581259][  T803] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  213.862131][ T8159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.905407][ T8172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.614'.
[  213.996581][  T803] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  214.017247][  T803] usb 5-1: config 0 has no interface number 0
[  214.031425][  T803] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  214.059854][  T803] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  214.087050][  T803] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  214.100704][  T803] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  214.123705][  T803] usb 5-1: Product: syz
[  214.135763][  T803] usb 5-1: SerialNumber: syz
[  214.158965][  T803] usb 5-1: config 0 descriptor??
[  214.178840][  T803] cm109 5-1:0.8: invalid payload size 0, expected 4
[  214.198912][  T803] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17
[  214.239076][   T29] audit: type=1400 audit(1777793792.359:751): avc:  denied  { bind } for  pid=8168 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  214.309463][ T8159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.427156][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  214.511919][ T8159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.549374][   T29] audit: type=1400 audit(1777793792.679:752): avc:  denied  { read write } for  pid=8178 comm="syz.0.616" dev="sockfs" ino=20530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  214.583569][ T8179] 9p: Bad value for 'rfdno'
[  214.602379][   T29] audit: type=1400 audit(1777793792.729:753): avc:  denied  { bind } for  pid=8178 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  214.658476][ T8159] bridge0: port 3(vlan2) entered disabled state
[  214.833414][ T5787] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  214.857152][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'.
[  215.009083][ T8159] vlan2 (unregistering): left promiscuous mode
[  215.023535][ T8159] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  215.024143][ T5787] usb 1-1: Using ep0 maxpacket: 32
[  215.064633][ T8159] bridge0: port 3(vlan2) entered disabled state
[  215.083657][ T5787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  215.104558][ T5787] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  215.121078][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.132997][ T5787] usb 1-1: Product: syz
[  215.138179][ T5787] usb 1-1: Manufacturer: syz
[  215.143577][ T5787] usb 1-1: SerialNumber: syz
[  215.164921][ T5787] usb 1-1: config 0 descriptor??
[  215.172451][ T8179] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  215.189323][ T5787] hub 1-1:0.0: bad descriptor, ignoring hub
[  215.204051][ T5787] hub 1-1:0.0: probe with driver hub failed with error -5
[  215.224768][ T5787] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18
[  215.268856][ T8159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.420718][  T803] usb 1-1: USB disconnect, device number 24
[  215.420750][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  216.422394][   T10] usb 5-1: USB disconnect, device number 16
[  216.457313][ T3362] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.477524][   T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  216.590498][ T3362] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.634694][ T3362] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.655601][   T29] audit: type=1400 audit(1777793794.779:754): avc:  denied  { mounton } for  pid=8200 comm="syz.2.622" path="/112/bus" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  216.668951][ T3362] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.680374][ T8201] FAT-fs (nullb0): bogus number of reserved sectors
[  216.703680][ T8201] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  217.059665][   T29] audit: type=1400 audit(1777793795.189:755): avc:  denied  { read } for  pid=8213 comm="syz.4.626" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  217.090376][ T8214] comedi comedi4: bad chanlist[0]=0xffff7fff chan=32767 range length=1
[  217.155893][ T8219] Cannot find del_set index 14804 as target
[  217.309455][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'.
[  217.373934][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'.
[  217.409352][ T8223] tipc: Can't bind to reserved service type 0
[  217.420997][ T3362] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.467516][   T29] audit: type=1400 audit(1777793795.539:756): avc:  denied  { bind } for  pid=8220 comm="syz.4.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  217.586246][ T3362] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.653019][ T3362] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.704056][ T3362] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.061668][ T8239] openvswitch: netlink: IPv4 tun info is not correct
[  219.103430][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.620114][   T29] audit: type=1400 audit(1777793797.749:757): avc:  denied  { module_load } for  pid=8242 comm="syz.2.634" path="/115/bus" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  219.683725][   T29] audit: type=1400 audit(1777793797.819:758): avc:  denied  { write } for  pid=8251 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  219.706557][   T29] audit: type=1400 audit(1777793797.839:759): avc:  denied  { accept } for  pid=8251 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  219.727087][   T29] audit: type=1400 audit(1777793797.839:760): avc:  denied  { getopt } for  pid=8251 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  219.755077][ T8254] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[  219.755077][ T8254]    program syz.0.635 not setting count and/or reply_len properly
[  219.893556][ T8254] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[  219.912523][ T8254] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  219.936720][ T8257] netlink: 'syz.3.637': attribute type 4 has an invalid length.
[  219.949266][   T29] audit: type=1400 audit(1777793798.079:761): avc:  denied  { read } for  pid=8256 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  220.163258][  T803] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  220.201106][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'.
[  220.608129][ T8267] 9pnet_fd: Insufficient options for proto=fd
[  220.715845][ T8274] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.643'.
[  220.726162][ T8274] netlink: 996 bytes leftover after parsing attributes in process `syz.0.643'.
[  220.874843][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  221.053237][   T10] usb 5-1: Using ep0 maxpacket: 32
[  221.067216][   T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  221.087915][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.117269][   T10] usb 5-1: config 0 descriptor??
[  221.137001][   T10] as10x_usb: device has been detected
[  221.161849][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  221.238707][   T10] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  221.353429][ T8272] ------------[ cut here ]------------
[  221.358974][ T8272] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  221.358995][ T8272] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#0: syz.4.642/8272
[  221.374795][ T8272] Modules linked in:
[  221.378735][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.4.642 Not tainted syzkaller #0 PREEMPT(full) 
[  221.387985][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  221.398147][ T8272] RIP: 0010:__mutex_lock+0x956/0x1b10
[  221.403582][ T8272] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8
[  221.424508][ T8272] RSP: 0018:ffffc90003547a50 EFLAGS: 00010246
[  221.430701][ T8272] RAX: 0000000000000003 RBX: ffff888045a5ab30 RCX: 1ffffffff21af9dc
[  221.440207][ T8272] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20
[  221.448235][ T8272] RBP: ffffc90003547bc0 R08: 0000000000000001 R09: 0000000000000000
[  221.456268][ T8272] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  221.464308][ T8272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  221.472315][ T8272] FS:  00007f35fe6626c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000
[  221.481537][ T8272] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  221.488274][ T8272] CR2: 0000001b33663fff CR3: 000000004aebd000 CR4: 00000000003526f0
[  221.496368][ T8272] Call Trace:
[  221.499718][ T8272]  <TASK>
[  221.502682][ T8272]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  221.508408][ T8272]  ? __mutex_lock+0x26d/0x1b10
[  221.513272][ T8272]  ? dmx_section_feed_start_filtering+0x56/0x660
[  221.519630][ T8272]  ? find_held_lock+0x2b/0x80
[  221.524382][ T8272]  ? __pfx___mutex_lock+0x10/0x10
[  221.529434][ T8272]  ? __pfx___mutex_lock+0x10/0x10
[  221.534532][ T8272]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  221.541858][ T8272]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  221.547578][ T8272]  as102_dvb_dmx_start_feed+0x7d/0x2e0
[  221.553086][ T8272]  dmx_section_feed_start_filtering+0x3a8/0x660
[  221.559419][ T8272]  dvb_dmxdev_filter_start+0x767/0xdd0
[  221.564953][ T8272]  dvb_demux_do_ioctl+0xe64/0x1200
[  221.570131][ T8272]  dvb_usercopy+0x167/0x340
[  221.574775][ T8272]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  221.580364][ T8272]  ? __pfx_dvb_usercopy+0x10/0x10
[  221.585509][ T8272]  ? selinux_file_ioctl+0x13b/0x290
[  221.590766][ T8272]  ? selinux_file_ioctl+0xb6/0x290
[  221.595978][ T8272]  dvb_demux_ioctl+0x29/0x40
[  221.600630][ T8272]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  221.606069][ T8272]  __x64_sys_ioctl+0x18e/0x210
[  221.610900][ T8272]  do_syscall_64+0x10b/0xf80
[  221.615593][ T8272]  ? clear_bhb_loop+0x40/0x90
[  221.620320][ T8272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.626294][ T8272] RIP: 0033:0x7f35fd79cdd9
[  221.630755][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.652191][ T8272] RSP: 002b:00007f35fe662028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  221.660707][ T8272] RAX: ffffffffffffffda RBX: 00007f35fda15fa0 RCX: 00007f35fd79cdd9
[  221.668717][ T8272] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
[  221.676787][ T8272] RBP: 00007f35fd832d69 R08: 0000000000000000 R09: 0000000000000000
[  221.684841][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.692865][ T8272] R13: 00007f35fda16038 R14: 00007f35fda15fa0 R15: 00007ffd022af148
[  221.700932][ T8272]  </TASK>
[  221.704039][ T8272] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  221.711299][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.4.642 Not tainted syzkaller #0 PREEMPT(full) 
[  221.720476][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  221.730505][ T8272] Call Trace:
[  221.733758][ T8272]  <TASK>
[  221.736663][ T8272]  dump_stack_lvl+0x100/0x190
[  221.741332][ T8272]  vpanic+0x552/0x970
[  221.745302][ T8272]  ? __pfx_vpanic+0x10/0x10
[  221.749782][ T8272]  ? lock_release+0x245/0x310
[  221.754453][ T8272]  panic+0xd1/0xe0
[  221.758147][ T8272]  ? __pfx_panic+0x10/0x10
[  221.762544][ T8272]  ? check_panic_on_warn+0x1f/0x90
[  221.767639][ T8272]  check_panic_on_warn.cold+0x19/0x34
[  221.772992][ T8272]  ? __mutex_lock+0x94f/0x1b10
[  221.777731][ T8272]  __warn.cold+0x191/0x328
[  221.782127][ T8272]  __report_bug+0x296/0x3d0
[  221.786607][ T8272]  ? __mutex_lock+0x94f/0x1b10
[  221.791351][ T8272]  ? __pfx___report_bug+0x10/0x10
[  221.796356][ T8272]  ? irqentry_exit+0x246/0x790
[  221.801104][ T8272]  ? __mutex_lock+0x956/0x1b10
[  221.805847][ T8272]  report_bug_entry+0xe1/0x290
[  221.810594][ T8272]  ? __mutex_lock+0x956/0x1b10
[  221.815342][ T8272]  handle_bug+0x1cd/0x2a0
[  221.819649][ T8272]  exc_invalid_op+0x17/0x50
[  221.824134][ T8272]  asm_exc_invalid_op+0x1a/0x20
[  221.828983][ T8272] RIP: 0010:__mutex_lock+0x956/0x1b10
[  221.834332][ T8272] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8
[  221.853914][ T8272] RSP: 0018:ffffc90003547a50 EFLAGS: 00010246
[  221.859953][ T8272] RAX: 0000000000000003 RBX: ffff888045a5ab30 RCX: 1ffffffff21af9dc
[  221.867895][ T8272] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20
[  221.875837][ T8272] RBP: ffffc90003547bc0 R08: 0000000000000001 R09: 0000000000000000
[  221.883792][ T8272] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  221.891739][ T8272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  221.899687][ T8272]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  221.905302][ T8272]  ? __mutex_lock+0x26d/0x1b10
[  221.910041][ T8272]  ? dmx_section_feed_start_filtering+0x56/0x660
[  221.916344][ T8272]  ? find_held_lock+0x2b/0x80
[  221.920993][ T8272]  ? __pfx___mutex_lock+0x10/0x10
[  221.925991][ T8272]  ? __pfx___mutex_lock+0x10/0x10
[  221.930988][ T8272]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  221.936593][ T8272]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  221.942207][ T8272]  as102_dvb_dmx_start_feed+0x7d/0x2e0
[  221.947654][ T8272]  dmx_section_feed_start_filtering+0x3a8/0x660
[  221.953876][ T8272]  dvb_dmxdev_filter_start+0x767/0xdd0
[  221.959314][ T8272]  dvb_demux_do_ioctl+0xe64/0x1200
[  221.964397][ T8272]  dvb_usercopy+0x167/0x340
[  221.968879][ T8272]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  221.974401][ T8272]  ? __pfx_dvb_usercopy+0x10/0x10
[  221.979407][ T8272]  ? selinux_file_ioctl+0x13b/0x290
[  221.984577][ T8272]  ? selinux_file_ioctl+0xb6/0x290
[  221.989661][ T8272]  dvb_demux_ioctl+0x29/0x40
[  221.994227][ T8272]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  221.999489][ T8272]  __x64_sys_ioctl+0x18e/0x210
[  222.004227][ T8272]  do_syscall_64+0x10b/0xf80
[  222.008791][ T8272]  ? clear_bhb_loop+0x40/0x90
[  222.013444][ T8272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.019309][ T8272] RIP: 0033:0x7f35fd79cdd9
[  222.023695][ T8272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.043274][ T8272] RSP: 002b:00007f35fe662028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  222.051660][ T8272] RAX: ffffffffffffffda RBX: 00007f35fda15fa0 RCX: 00007f35fd79cdd9
[  222.059689][ T8272] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
[  222.067642][ T8272] RBP: 00007f35fd832d69 R08: 0000000000000000 R09: 0000000000000000
[  222.075594][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.083553][ T8272] R13: 00007f35fda16038 R14: 00007f35fda15fa0 R15: 00007ffd022af148
[  222.091509][ T8272]  </TASK>
[  222.094917][ T8272] Kernel Offset: disabled
[  222.099222][ T8272] Rebooting in 86400 seconds..