last executing test programs:

10m37.517322483s ago: executing program 4 (id=1751):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000180)=0x3fa, 0x4)
bind$bt_hci(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x400000e0)
r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0x4b2, 0x800, 0x80000004, 0x1f4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f0d, 0x0, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10m35.854491208s ago: executing program 4 (id=1754):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000007940)=[{0x0}, {&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/257, 0x101}], 0x4}, 0x8}], 0x1, 0x10022, 0x0)

10m29.743674457s ago: executing program 4 (id=1766):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000180)=0x3fa, 0x4)
bind$bt_hci(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x400000e0)
r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0x4b2, 0x800, 0x80000004, 0x1f4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f0d, 0x0, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10m28.239931656s ago: executing program 4 (id=1770):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$bt_hci(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_io_uring(0x3e74, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480))
syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0x4b2, 0x800, 0x80000004, 0x1f4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f0d, 0x0, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10m25.825298836s ago: executing program 4 (id=1776):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

10m25.035541529s ago: executing program 4 (id=1780):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

10m9.873404162s ago: executing program 32 (id=1780):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

4m33.756494093s ago: executing program 0 (id=2790):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000019200)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000019240)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
syz_emit_vhci(&(0x7f0000019280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf)
nanosleep(&(0x7f00000192c0)={0x0, 0x5f5e100}, 0x0)
setns(0xc9, 0x0)
r8 = socket(0x1f, 0x5, 0x8)
setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000019300)={0x0, 0x3e8}, 0x10)
connect(r8, &(0x7f00000193c0)=@generic={0x1f, "0102030405060100"}, 0x80)
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

4m31.801603531s ago: executing program 0 (id=2800):
r0 = socket$kcm(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

4m31.616119151s ago: executing program 0 (id=2802):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000580), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000005c0)={&(0x7f0000000600)=[{0x8001, 0x0, 0x3f, &(0x7f0000000640)="d5c9c2acbd76639d65c57ae1ce544671192220ea818136f224709454025c4a8cc88c43a2765dd0801067817a2cb4c56a546156c84fc80ccb7e322f58eb9687"}, {0x200, 0x2811, 0x0, 0x0}], 0x2})

4m28.414294345s ago: executing program 0 (id=2818):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000580)='.\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000600)='./file0/../file0\x00', &(0x7f0000000640)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2125099, 0x0)

4m28.271163707s ago: executing program 0 (id=2821):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000009bc0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000009c00)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000009c40)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000009d00)=0x1)
sched_setattr(0x0, 0x0, 0x0)

4m27.528597785s ago: executing program 0 (id=2825):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x1, 0x5, 0x0, &(0x7f0000003640)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r0, 0x0, 0xe, 0x0, &(0x7f0000003700)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x6102, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m27.408516736s ago: executing program 33 (id=2825):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x1, 0x5, 0x0, &(0x7f0000003640)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003680)={r0, 0x0, 0xe, 0x0, &(0x7f0000003700)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x6102, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m7.171598179s ago: executing program 6 (id=2934):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0x88}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x1a0}}}, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x400337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xfffffffd}}], 0x1, 0x0, 0x0)

4m6.978552101s ago: executing program 6 (id=2937):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r3, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
fchmod(r0, 0x90)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

4m5.677423644s ago: executing program 6 (id=2942):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000480)='1', 0x1)

4m4.938287322s ago: executing program 6 (id=2943):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7800fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030003"], 0x34}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000)

4m4.890321794s ago: executing program 6 (id=2946):
unshare(0x22020600)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000004a", @ANYRES32], 0x50)

4m4.201869807s ago: executing program 6 (id=2952):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000180)='0', 0x1)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000029c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000002a00)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000002a40)=0x41, 0x4)
sendmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{0x0}], 0x1}}], 0x1, 0x4000041)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000002b40)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0xff, 0x2}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x1, 0xff, 0x3}, 0x1, 0xff}], 0x40)

3m49.060028632s ago: executing program 34 (id=2952):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000180)='0', 0x1)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000029c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000002a00)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000002a40)=0x41, 0x4)
sendmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{0x0}], 0x1}}], 0x1, 0x4000041)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000002b40)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0xff, 0x2}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x1, 0xff, 0x3}, 0x1, 0xff}], 0x40)

11.831390785s ago: executing program 2 (id=3999):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(r0, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x8, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

7.338969254s ago: executing program 5 (id=4005):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)

7.218516116s ago: executing program 2 (id=4007):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000019200)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000019240)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
syz_emit_vhci(&(0x7f0000019280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf)
nanosleep(&(0x7f00000192c0)={0x0, 0x5f5e100}, 0x0)
setns(0xc9, 0x0)
r7 = socket(0x1f, 0x5, 0x8)
setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000019300)={0x0, 0x3e8}, 0x10)
bind(r7, 0x0, 0x0)
connect(r7, &(0x7f00000193c0)=@generic={0x1f, "0102030405060100"}, 0x80)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

7.099962373s ago: executing program 3 (id=4008):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x8)
write(r0, &(0x7f0000000400)='address_group grp1 0.0,0.0-255.255.255.255\naddress_groux grp1!::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\nacl_group stream bind @grp1 0-655;', 0x8b)

6.975478581s ago: executing program 3 (id=4009):
r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}})
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0xd)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={<r6=>0x0})
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x3, r7, 0x3, 0x80000})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

6.352093735s ago: executing program 7 (id=4010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

5.431457574s ago: executing program 7 (id=4011):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'})

5.3916931s ago: executing program 5 (id=4012):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fanotify_init(0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x8001, 0xd0, 0x7c, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x4, 0x9, 0x0, 0xa, 0x9ff, 0x400}, 0x0, 0x0)

5.37090594s ago: executing program 3 (id=4013):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(0x0, 0x5, 0x155081)
ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000002, 0x401d031, r4, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ef2000/0x4000)=nil, 0x4000, 0x0, 0x3fb, 0x1000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x480})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0)

4.685103791s ago: executing program 1 (id=4014):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

4.562351155s ago: executing program 5 (id=4015):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e628}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write$tun(r0, &(0x7f0000000a40)=ANY=[], 0x9e)

4.561936764s ago: executing program 1 (id=4016):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

4.412543011s ago: executing program 1 (id=4017):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000c00), 0x88200, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0))
openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24004045)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='oom_score\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000c40))

4.31330082s ago: executing program 5 (id=4018):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x22020600)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x40)
r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x4, 0x641, 0x0, 0x0, 0x1000, 0x7f, 0xffffffffffffffff, 0x0, 0x44}}}, &(0x7f0000000600))
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r3=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x347, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
unshare(0x60000600)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000240)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f00000002c0)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r3, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
recvmmsg(r0, &(0x7f0000004ec0), 0x0, 0x22, 0x0)

3.978345601s ago: executing program 2 (id=4019):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x8)
write(r0, &(0x7f0000000400)='address_group grp1 0.0,0.0-255.255.255.255\naddress_groux grp1!::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\nacl_group stream bind @grp1 0-655;', 0x8b)

3.840428257s ago: executing program 1 (id=4020):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0)
write(r4, &(0x7f00000061c0)='dir', 0x3)

3.770362073s ago: executing program 2 (id=4021):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

3.703309733s ago: executing program 7 (id=4022):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)

2.793372975s ago: executing program 2 (id=4023):
r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}})
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0xd)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={<r6=>0x0})
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x3, r7, 0x3, 0x80000})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2.588466483s ago: executing program 5 (id=4024):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000480)={0x2, 0x16f, 0x2, 0x5, 0x3, 0x7})
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3dde, 0x100, 0x1, 0x227}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9206, 0x40, 0x2, 0x307}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a86, 0x100, 0x0, 0xa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe72, 0x1, 0x2, 0x8000304}}], 0x4, &(0x7f00000020c0)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x0, 0x736, 0x0, &(0x7f00000010c0)=@buf_4k="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"}}, 0x0)
pipe(0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0, 0x48)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101000, 0x63)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r3, r3, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000500)={0xf0f028, 0xffff})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0)

2.51292859s ago: executing program 7 (id=4025):
r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000015c0)={0x44, &(0x7f0000001640)=ANY=[@ANYBLOB="000c0100000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001780)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xff, 0xff000000], [0xff000000, 0x0, 0xff, 0xff000000], 'ipvlan1\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2, 0x2e, 0x4, 0x30}, 0x0, 0xa8, 0xd0, 0x700}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x5}, {0x2, 0x1, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffff00, 0xff, 0xff], [0x0, 0x808000ff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0xbd, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001680)={0x84, &(0x7f0000001740)=ANY=[@ANYBLOB='@\x00\x00\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.69526609s ago: executing program 3 (id=4026):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fanotify_init(0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x8001, 0xd0, 0x7c, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x4, 0x9, 0x0, 0xa, 0x9ff, 0x400}, 0x0, 0x0)

1.513398002s ago: executing program 1 (id=4027):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

1.197881425s ago: executing program 1 (id=4028):
setns(0xc9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r2, &(0x7f00000006c0)='loop', 0x4)
close(r2)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r3, &(0x7f00000007c0)='transport=loop,nqn=testsubsys', 0x1d)
close(r3)
mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)

1.054989712s ago: executing program 5 (id=4029):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000019200)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000019240)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
syz_emit_vhci(&(0x7f0000019280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf)
nanosleep(&(0x7f00000192c0)={0x0, 0x5f5e100}, 0x0)
setns(0xc9, 0x0)
r7 = socket(0x1f, 0x5, 0x8)
setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000019300)={0x0, 0x3e8}, 0x10)
bind(r7, 0x0, 0x0)
connect(r7, &(0x7f00000193c0)=@generic={0x1f, "0102030405060100"}, 0x80)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

983.896807ms ago: executing program 7 (id=4030):
mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000680)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000a00)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

216.285472ms ago: executing program 3 (id=4031):
dup(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs, 0x6e)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x98})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000800)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000080), 0x4)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)=0x9, 0x4)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x8, 0x400, 0x7, 0x9, 0xc, "ab9a7e342db846e3"})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x101301)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffbfe, 0x0})

110.483794ms ago: executing program 3 (id=4032):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'})

50.804013ms ago: executing program 7 (id=4033):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

0s ago: executing program 2 (id=4034):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount(&(0x7f000000b8c0)=@filename='mtd0\x00', &(0x7f000000b900)='./file0\x00', &(0x7f000000b940)='jffs2\x00', 0x800000, 0x0)

kernel console output (not intermixed with test programs):

ing ep0 maxpacket: 16
[  972.944181][    T9] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  972.945275][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  972.945303][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  972.945325][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  972.945354][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.001372][    T9] usb 8-1: config 0 descriptor??
[  973.039030][   T30] audit: type=1326 audit(1792662348.148:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17041 comm="syz.5.3106" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f019f559 code=0x0
[  973.087186][ T1169] . (unregistering): (slave bond_slave_0): Releasing backup interface
[  973.109977][ T1169] . (unregistering): (slave bond_slave_1): Releasing backup interface
[  973.114431][ T1169] . (unregistering): Released all slaves
[  973.150317][ T1169] bond0 (unregistering): Released all slaves
[  973.501797][    T9] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max
[  973.511599][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511628][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511650][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511671][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511693][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511714][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511735][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511756][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511784][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.511804][    T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  973.562009][T12060] Bluetooth: hci2: command tx timeout
[  973.655043][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.001F/input/input40
[  973.719828][    T9] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  973.773467][    T9] usb 8-1: USB disconnect, device number 2
[  973.955886][T17059] fido_id[17059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  974.033597][   T30] audit: type=1400 audit(1792662349.148:854): avc:  denied  { write } for  pid=17048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  974.072380][   T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  974.144226][   T30] audit: type=1400 audit(1792662349.258:855): avc:  denied  { write } for  pid=17063 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  974.221901][   T24] usb 2-1: Using ep0 maxpacket: 16
[  974.222433][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  974.225661][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13
[  974.227825][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  974.227865][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.242362][   T24] usb 2-1: config 0 descriptor??
[  974.407199][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41
[  974.459116][ T4951] bcm5974 2-1:0.0: could not read from device
[  974.633033][ T4951] bcm5974 2-1:0.0: could not read from device
[  974.816339][   T24] usb 2-1: USB disconnect, device number 64
[  974.844163][ T4951] bcm5974 2-1:0.0: could not read from device
[  974.999495][ T4951] bcm5974 2-1:0.0: could not read from device
[  975.409306][T17088] CIFS mount error: No usable UNC path provided in device string!
[  975.409306][T17088] 
[  975.409534][T17088] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  975.696030][T12060] Bluetooth: hci2: command tx timeout
[  976.550267][T16974] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.552022][T16974] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.552140][T16974] bridge_slave_0: entered allmulticast mode
[  976.578978][T16974] bridge_slave_0: entered promiscuous mode
[  976.598774][   T30] audit: type=1400 audit(1792662351.708:856): avc:  denied  { write } for  pid=17075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  976.599898][T16974] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.599975][T16974] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.600087][T16974] bridge_slave_1: entered allmulticast mode
[  976.619389][T16974] bridge_slave_1: entered promiscuous mode
[  976.711898][    T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  976.761281][ T1169] hsr_slave_0: left promiscuous mode
[  976.769001][ T1169] hsr_slave_1: left promiscuous mode
[  976.769644][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  976.769660][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  976.774265][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  976.774282][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1
[  976.815415][ T1169] veth0_macvtap: left promiscuous mode
[  976.815499][ T1169] veth1_vlan: left promiscuous mode
[  976.815553][ T1169] veth0_vlan: left promiscuous mode
[  976.849872][   T30] audit: type=1400 audit(1792662351.958:857): avc:  denied  { write } for  pid=17118 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  976.891873][    T9] usb 2-1: Using ep0 maxpacket: 32
[  976.895444][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  976.897718][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  976.897755][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.899966][    T9] usb 2-1: config 0 descriptor??
[  976.948441][T17121] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  977.145195][T17130] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  977.159812][T10931] smc: removing ib device syz1
[  977.202359][T17131] No such timeout policy "syz1"
[  977.684530][   T30] audit: type=1400 audit(1792662352.798:858): avc:  denied  { map } for  pid=17132 comm="syz.3.3124" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  977.732109][T12060] Bluetooth: hci2: command tx timeout
[  977.745109][ T1169] team0 (unregistering): Port device team_slave_1 removed
[  977.755566][ T1169] team0 (unregistering): Port device team_slave_0 removed
[  977.884213][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.886603][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.887219][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15
[  978.026629][T10931] smbdirect: ib_dev[syz1] removed
[  978.085878][T16974] team0: Port device team_slave_0 added
[  978.092610][T16974] team0: Port device team_slave_1 added
[  978.936047][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.936076][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.936097][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.939022][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.939035][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.939057][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.091250][T17148] kAFS: No cell specified
[  979.462453][T16974] hsr_slave_0: entered promiscuous mode
[  979.471121][T16974] hsr_slave_1: entered promiscuous mode
[  979.485437][ T5332] usb 2-1: USB disconnect, device number 65
[  979.731486][T12060] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  980.069053][   T30] audit: type=1400 audit(1792662355.178:859): avc:  denied  { write } for  pid=17165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  980.201648][   T30] audit: type=1400 audit(1792662355.318:860): avc:  denied  { write } for  pid=17183 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  980.213939][   T30] audit: type=1400 audit(1792662355.328:861): avc:  denied  { bind } for  pid=17180 comm="syz.5.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  980.327899][   T30] audit: type=1400 audit(1792662355.438:862): avc:  denied  { setopt } for  pid=17180 comm="syz.5.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  980.341200][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3136'.
[  980.380219][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14
[  981.043870][T17196] No such timeout policy "syz1"
[  981.506160][T17198] kAFS: No cell specified
[  981.937909][   T30] audit: type=1400 audit(1792662357.048:863): avc:  denied  { write } for  pid=17213 comm="syz.5.3145" name="auth.unix.ip" dev="proc" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1
[  982.645513][T17224] jffs2: notice: (17224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  983.457897][T17248] No such timeout policy "syz1"
[  983.496482][T12060] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  983.499311][T12060] Bluetooth: hci5: Injecting HCI hardware error event
[  983.503889][T15731] Bluetooth: hci5: hardware error 0x00
[  983.829260][   T30] audit: type=1400 audit(1792662358.918:864): avc:  denied  { write } for  pid=17210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  983.929346][ T1169] IPVS: stop unused estimator thread 0...
[  983.983465][T17254] device-mapper: table: 248:3: crypt: Device lookup failed (-ENOENT)
[  983.983490][T17254] device-mapper: ioctl: error adding target to table
[  984.108942][   T30] audit: type=1400 audit(1792662359.218:865): avc:  denied  { cmd } for  pid=17259 comm="iou-wrk-17260" path="socket:[74063]" dev="sockfs" ino=74063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  984.136440][   T30] audit: type=1400 audit(1792662359.228:866): avc:  denied  { write } for  pid=17258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  984.189825][   T30] audit: type=1400 audit(1792662359.298:867): avc:  denied  { write } for  pid=17266 comm="syz.5.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  984.289009][T16974] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  984.296695][T16974] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  984.298653][T16974] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  984.322349][T16974] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  984.324800][T16974] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  984.337228][T16974] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  984.340202][T16974] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  984.381059][T16974] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  984.569047][T16974] 8021q: adding VLAN 0 to HW filter on device bond0
[  984.593303][T16974] 8021q: adding VLAN 0 to HW filter on device team0
[  984.611485][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[  984.611574][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  984.625655][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[  984.625743][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  984.759833][T17294] syz_tun: entered allmulticast mode
[  984.799842][   T30] audit: type=1400 audit(1792662359.908:868): avc:  denied  { write } for  pid=17268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  985.575523][T17313] netlink: 'syz.7.3166': attribute type 21 has an invalid length.
[  985.621027][   T30] audit: type=1400 audit(1792662360.728:869): avc:  denied  { write } for  pid=17303 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  985.882200][T15731] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  986.219972][T16974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  986.300734][T16974] veth0_vlan: entered promiscuous mode
[  986.318457][T16974] veth1_vlan: entered promiscuous mode
[  986.366732][T16974] veth0_macvtap: entered promiscuous mode
[  986.377352][T16974] veth1_macvtap: entered promiscuous mode
[  986.400689][T16974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  986.427411][T16974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  986.481515][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  986.487565][T10931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  986.487924][T10931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  986.503778][T10933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  986.592162][   T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  986.594459][T10933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  986.594478][T10933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  986.630007][   T30] audit: type=1400 audit(1792662361.738:870): avc:  denied  { write } for  pid=17327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  986.649850][T10933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  986.649869][T10933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  986.804206][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  986.804648][   T24] usb 8-1: not running at top speed; connect to a high speed hub
[  986.804674][   T24] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  986.807819][   T24] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  986.809544][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.809568][   T24] usb 8-1: Product: syz
[  986.809581][   T24] usb 8-1: Manufacturer: syz
[  986.809595][   T24] usb 8-1: SerialNumber: syz
[  986.884318][   T30] audit: type=1400 audit(1792662361.998:871): avc:  denied  { write } for  pid=17354 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  987.031447][   T24] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  987.118609][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  987.118651][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[  987.118664][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  987.118711][ T4966]  loop0:
[  987.229213][   T24] usb 8-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  987.229308][   T24] usb 8-1: found format II with max.bitrate = 4, frame size=7372
[  987.752480][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  988.513863][   T30] audit: type=1400 audit(1792662363.618:872): avc:  denied  { write } for  pid=17368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.586037][   T24] usb 8-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  988.586065][   T24] usb 8-1: found format II with max.bitrate = 4, frame size=7372
[  988.754409][   T30] audit: type=1400 audit(1792662363.868:873): avc:  denied  { write } for  pid=17400 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.786474][   T24] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  988.920607][   T24] usb 8-1: USB disconnect, device number 3
[  988.984506][T17403] FAULT_INJECTION: forcing a failure.
[  988.984506][T17403] name failslab, interval 1, probability 0, space 0, times 0
[  988.984537][T17403] CPU: 1 UID: 0 PID: 17403 Comm: syz.5.3187 Not tainted syzkaller #0 PREEMPT(full) 
[  988.984561][T17403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  988.984575][T17403] Call Trace:
[  988.984583][T17403]  <TASK>
[  988.984592][T17403]  dump_stack_lvl+0x100/0x190
[  988.984627][T17403]  should_fail_ex.cold+0x5/0xa
[  988.984659][T17403]  should_failslab+0xc2/0x120
[  988.984688][T17403]  __kvmalloc_node_noprof+0x113/0x9b0
[  988.984713][T17403]  ? __kmalloc_noprof+0x350/0x840
[  988.984734][T17403]  ? __kasan_kmalloc+0xaa/0xb0
[  988.984757][T17403]  ? do_replace_table+0x1c5/0x750
[  988.984793][T17403]  do_replace_table+0x1c5/0x750
[  988.984827][T17403]  xt_register_table+0x384/0x9a0
[  988.984858][T17403]  ? __pfx_xt_register_table+0x10/0x10
[  988.984880][T17403]  ? xt_alloc_table_info+0x44/0xa0
[  988.984907][T17403]  ? __asan_memset+0x23/0x50
[  988.984929][T17403]  ipt_register_table+0x137/0x2b0
[  988.984951][T17403]  ? __pfx_ipt_register_table+0x10/0x10
[  988.984968][T17403]  ? __kmalloc_noprof+0x350/0x840
[  988.984998][T17403]  ? ipt_alloc_initial_table+0x5b8/0x700
[  988.985036][T17403]  iptable_nat_table_init+0x4b/0x270
[  988.985061][T17403]  xt_find_table_lock+0x2db/0x520
[  988.985092][T17403]  xt_request_find_table_lock+0x28/0xf0
[  988.985121][T17403]  get_info+0x1a7/0x790
[  988.985138][T17403]  ? avc_has_perm_noaudit+0x145/0x470
[  988.985158][T17403]  ? __pfx_get_info+0x10/0x10
[  988.985177][T17403]  ? cred_has_capability.isra.0+0x186/0x300
[  988.985199][T17403]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  988.985235][T17403]  ? rcu_is_watching+0x13/0xc0
[  988.985260][T17403]  ? cap_capable+0x107/0x430
[  988.985285][T17403]  ? bpf_lsm_capable+0x9/0x10
[  988.985314][T17403]  ? security_capable+0x80/0x260
[  988.985341][T17403]  do_ipt_get_ctl+0x231/0xbf0
[  988.985360][T17403]  ? __mutex_unlock_slowpath+0x35d/0x930
[  988.985393][T17403]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  988.985411][T17403]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  988.985443][T17403]  ? lock_acquire+0x1d1/0x380
[  988.985467][T17403]  ? nf_sockopt_find.isra.0+0x222/0x290
[  988.985494][T17403]  nf_getsockopt+0x7c/0xe0
[  988.985518][T17403]  ip_getsockopt+0x192/0x1e0
[  988.985538][T17403]  ? __pfx_ip_getsockopt+0x10/0x10
[  988.985557][T17403]  ? trace_sched_exit_tp+0x120/0x160
[  988.985586][T17403]  sctp_getsockopt+0x19b/0x7160
[  988.985612][T17403]  ? avc_has_perm_noaudit+0x56/0x470
[  988.985632][T17403]  ? find_held_lock+0x2b/0x80
[  988.985656][T17403]  ? avc_has_perm_noaudit+0x11e/0x470
[  988.985676][T17403]  ? avc_has_perm_noaudit+0x11e/0x470
[  988.985697][T17403]  ? __pfx_sctp_getsockopt+0x10/0x10
[  988.985725][T17403]  ? __lock_acquire+0x5c0/0x1f40
[  988.985743][T17403]  ? avc_has_perm+0x135/0x1e0
[  988.985763][T17403]  ? __pfx_avc_has_perm+0x10/0x10
[  988.985787][T17403]  ? lock_acquire+0x1d1/0x380
[  988.985805][T17403]  ? __might_fault+0xc5/0x140
[  988.985834][T17403]  ? find_held_lock+0x2b/0x80
[  988.985858][T17403]  ? __might_fault+0xc5/0x140
[  988.985885][T17403]  ? __might_fault+0xc5/0x140
[  988.985919][T17403]  ? _copy_from_user+0x59/0xd0
[  988.985945][T17403]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  988.985974][T17403]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  988.986008][T17403]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  988.986039][T17403]  do_sock_getsockopt+0x50a/0x6e0
[  988.986072][T17403]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  988.986106][T17403]  ? __fget_files+0x34/0x3d0
[  988.986133][T17403]  ? find_held_lock+0x2b/0x80
[  988.986167][T17403]  ? __fget_files+0x21f/0x3d0
[  988.986199][T17403]  __sys_getsockopt+0x148/0x260
[  988.986238][T17403]  ? __x64_sys_getsockopt+0xbd/0x160
[  988.986262][T17403]  __x64_sys_getsockopt+0xbd/0x160
[  988.986285][T17403]  ? do_syscall_64+0xae/0x790
[  988.986316][T17403]  ? lockdep_hardirqs_on+0x7d/0x110
[  988.986347][T17403]  do_syscall_64+0x123/0x790
[  988.986380][T17403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.986401][T17403] RIP: 0033:0x7f93f019f559
[  988.986419][T17403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  988.986437][T17403] RSP: 002b:00007f93f113c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  988.986458][T17403] RAX: ffffffffffffffda RBX: 00007f93f0425fa0 RCX: 00007f93f019f559
[  988.986471][T17403] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005
[  988.986483][T17403] RBP: 00007f93f0236b20 R08: 00002000000000c0 R09: 0000000000000000
[  988.986496][T17403] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  988.986508][T17403] R13: 00007f93f0426038 R14: 00007f93f0425fa0 R15: 00007ffef3d4cd38
[  988.986537][T17403]  </TASK>
[  989.054202][T17033] udevd[17033]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  989.333048][T10931] IPVS: starting estimator thread 0...
[  989.426182][T17414] IPVS: using max 44 ests per chain, 105600 per kthread
[  989.593144][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  989.593161][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[  989.593169][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  989.593195][ T4966]  loop0:
[  990.683991][   T30] audit: type=1400 audit(1792662365.788:874): avc:  denied  { write } for  pid=17405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  990.942607][   T30] audit: type=1400 audit(1792662366.038:875): avc:  denied  { write } for  pid=17436 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  991.485161][T17463] jffs2: notice: (17463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[  991.491394][   T30] audit: type=1400 audit(1792662366.598:876): avc:  denied  { write } for  pid=17462 comm="syz.5.3202" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  991.532090][    T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  991.683334][    T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  991.684256][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.684284][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  991.685158][    T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  991.685179][    T9] usb 2-1: Manufacturer: syz
[  991.689253][    T9] usb 2-1: config 0 descriptor??
[  991.722886][   T30] audit: type=1400 audit(1792662366.828:877): avc:  denied  { write } for  pid=17448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  991.857203][   T30] audit: type=1400 audit(1792662366.968:878): avc:  denied  { write } for  pid=17477 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  992.241641][   T30] audit: type=1400 audit(1792662367.348:879): avc:  denied  { write } for  pid=17484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  992.335255][    T9] uclogic 0003:256C:006D.0020: failed retrieving Huion firmware version: -71
[  992.335311][    T9] uclogic 0003:256C:006D.0020: failed probing parameters: -71
[  992.335405][    T9] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71
[  992.343300][    T9] usb 2-1: USB disconnect, device number 66
[  992.401607][   T30] audit: type=1400 audit(1792662367.508:880): avc:  denied  { write } for  pid=17506 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  993.396582][ T1169] IPVS: starting estimator thread 0...
[  993.420832][   T30] audit: type=1400 audit(1792662368.528:881): avc:  denied  { write } for  pid=17517 comm="syz.2.3214" name="dlm" dev="configfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  993.496999][T17519] MTD: Couldn't look up './dev/mtdblock0': -2
[  993.514032][T17515] IPVS: using max 43 ests per chain, 103200 per kthread
[  993.793219][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  993.793236][   T30] audit: type=1400 audit(1792662368.908:883): avc:  denied  { write } for  pid=17512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  993.925573][   T30] audit: type=1400 audit(1792662369.038:884): avc:  denied  { write } for  pid=17549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  993.993752][   T30] audit: type=1326 audit(1792662369.108:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17551 comm="syz.1.3222" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5c241992d7 code=0x0
[  996.207753][T17570] MTD: Couldn't look up './dev/mtdblock0': -2
[  996.251924][    T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  996.404165][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  996.404605][    T9] usb 8-1: not running at top speed; connect to a high speed hub
[  996.404621][    T9] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  996.405347][    T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  996.406743][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.406755][    T9] usb 8-1: Product: syz
[  996.406764][    T9] usb 8-1: Manufacturer: syz
[  996.406772][    T9] usb 8-1: SerialNumber: syz
[  996.561913][   T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  996.612280][   T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  996.615112][    T9] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  996.712362][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  996.713214][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  996.713241][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  996.713261][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  996.713329][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.714842][   T10] usb 3-1: config 0 descriptor??
[  996.792506][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  996.793310][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  996.793327][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  996.793346][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  996.793380][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.795996][   T24] usb 2-1: config 0 descriptor??
[  996.832935][    T9] usb 8-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  996.832986][    T9] usb 8-1: found format II with max.bitrate = 4, frame size=7372
[  997.263307][    T9] usb 8-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  997.263391][    T9] usb 8-1: found format II with max.bitrate = 4, frame size=7372
[  997.448179][   T10] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  997.469118][    T9] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  997.598699][   T10] usb 3-1: USB disconnect, device number 50
[  998.168639][   T24] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  998.171632][   T24] usb 2-1: USB disconnect, device number 67
[  998.263292][    T9] usb 8-1: USB disconnect, device number 4
[  998.286620][T17597] fido_id[17597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  998.366184][T17033] udevd[17033]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  998.377590][T17603] MTD: Couldn't look up './dev/mtdblock0': -2
[  998.523358][T17606] fido_id[17606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  999.020912][T17625] Invalid ELF header magic: != ELF
[  999.022870][T17625] overlay: Unknown parameter '/'
[  999.041591][   T30] audit: type=1400 audit(1792662374.158:886): avc:  denied  { write } for  pid=17617 comm="syz.7.3245" name="subsystems" dev="configfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  999.041640][   T30] audit: type=1400 audit(1792662374.158:887): avc:  denied  { write } for  pid=17617 comm="syz.7.3245" name="subsystems" dev="configfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  999.041676][   T30] audit: type=1400 audit(1792662374.158:888): avc:  denied  { remove_name } for  pid=17617 comm="syz.7.3245" name="testnqn" dev="configfs" ino=74696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  999.041712][   T30] audit: type=1400 audit(1792662374.158:889): avc:  denied  { rmdir } for  pid=17617 comm="syz.7.3245" name="testnqn" dev="configfs" ino=74696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  999.187587][    T9] libceph: connect (1)[c::]:6789 error -101
[  999.187754][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  999.284532][T17635] ceph: No mds server is up or the cluster is laggy
[  999.360309][   T30] audit: type=1326 audit(1792662374.468:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17640 comm="syz.5.3253" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f019f559 code=0x0
[ 1000.058058][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1000.058213][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1000.060134][   T30] audit: type=1326 audit(1792662375.168:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.3264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6f59f559 code=0x7ffc0000
[ 1000.116858][   T30] audit: type=1326 audit(1792662375.238:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.3264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6f59f559 code=0x7ffc0000
[ 1000.117278][   T30] audit: type=1326 audit(1792662375.238:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.3264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6f59f559 code=0x7ffc0000
[ 1000.117714][   T30] audit: type=1326 audit(1792662375.238:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.3264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6f59f559 code=0x7ffc0000
[ 1000.117757][   T30] audit: type=1326 audit(1792662375.238:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.3264" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0e6f59f559 code=0x7ffc0000
[ 1000.164588][T17664] ceph: No mds server is up or the cluster is laggy
[ 1002.509384][T17699] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1004.027874][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1004.028047][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1004.636021][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1004.636263][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1004.683914][T17715] ceph: No mds server is up or the cluster is laggy
[ 1004.796387][T17731] syzkaller0: entered promiscuous mode
[ 1004.796402][T17731] syzkaller0: entered allmulticast mode
[ 1004.798128][T17731] tipc: Started in network mode
[ 1004.798143][T17731] tipc: Node identity 5ac5f802541, cluster identity 4711
[ 1004.798297][T17731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1004.799010][T17730] tipc: Resetting bearer <eth:syzkaller0>
[ 1004.814726][T17730] tipc: Disabling bearer <eth:syzkaller0>
[ 1005.041899][T15986] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1006.051882][T15986] usb 2-1: device descriptor read/64, error -71
[ 1007.012187][T17751] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1007.232331][T15986] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1008.156100][T15986] usb 2-1: device descriptor read/64, error -71
[ 1008.263455][T15986] usb usb2-port1: attempt power cycle
[ 1008.307583][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1008.307682][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1008.403437][T17762] ceph: No mds server is up or the cluster is laggy
[ 1011.701535][T15986] libceph: connect (1)[c::]:6789 error -101
[ 1011.701709][T15986] libceph: mon0 (1)[c::]:6789 connect error
[ 1011.781384][T17817] ceph: No mds server is up or the cluster is laggy
[ 1011.839171][    T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1011.984891][   T30] kauditd_printk_skb: 1016 callbacks suppressed
[ 1011.984909][   T30] audit: type=1400 audit(1792662387.098:1912): avc:  denied  { setopt } for  pid=17824 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1012.019434][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 1012.029796][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1012.029826][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1012.031377][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1012.031399][    T9] usb 2-1: Product: syz
[ 1012.031415][    T9] usb 2-1: Manufacturer: syz
[ 1012.115876][    T9] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 1013.421029][T17855] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1014.263627][    T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[ 1014.265604][    T9] usb 2-1: USB disconnect, device number 71
[ 1014.267483][    T9] mos7840 2-1:1.0: device disconnected
[ 1014.847216][   T30] audit: type=1400 audit(1792662389.958:1913): avc:  denied  { associate } for  pid=17864 comm="syz.3.3321" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1015.049011][   T30] audit: type=1326 audit(1792662390.158:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17868 comm="syz.5.3323" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f93f01992d7 code=0x0
[ 1015.828866][   T30] audit: type=1400 audit(1792662390.938:1915): avc:  denied  { listen } for  pid=17879 comm="syz.3.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1015.958805][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1015.958913][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1016.055317][T17888] ceph: No mds server is up or the cluster is laggy
[ 1016.292323][T17907] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1016.852435][   T30] audit: type=1400 audit(1792662391.968:1916): avc:  denied  { connect } for  pid=17903 comm="syz.5.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1018.862266][   T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1018.886506][T15986] libceph: connect (1)[c::]:6789 error -101
[ 1018.886667][T15986] libceph: mon0 (1)[c::]:6789 connect error
[ 1018.947081][T17944] ceph: No mds server is up or the cluster is laggy
[ 1019.022432][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1019.023209][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1019.023227][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1019.023241][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1019.023263][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.028770][   T24] usb 2-1: config 0 descriptor??
[ 1019.315483][T17965] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1019.469291][   T24] hid_parser_main: 5 callbacks suppressed
[ 1019.469313][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469337][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469364][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469385][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469406][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469426][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469446][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469464][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469476][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.469489][   T24] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0
[ 1019.680557][   T24] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1020.139297][   T10] usb 2-1: USB disconnect, device number 72
[ 1020.186038][T17971] fido_id[17971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1020.471909][T15986] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1020.601899][T15986] usb 6-1: device descriptor read/64, error -71
[ 1020.632367][   T24] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 1020.638720][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3357'.
[ 1020.875570][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1020.877022][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.878746][T15986] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1020.916788][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1020.917495][   T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.40
[ 1020.918222][   T24] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1020.918253][   T24] usb 4-1: can't read configurations, error -71
[ 1021.012111][T15986] usb 6-1: device descriptor read/64, error -71
[ 1021.484947][T15986] usb usb6-port1: attempt power cycle
[ 1021.610086][   T29] libceph: connect (1)[c::]:6789 error -101
[ 1021.610229][   T29] libceph: mon0 (1)[c::]:6789 connect error
[ 1021.698226][T17992] ceph: No mds server is up or the cluster is laggy
[ 1022.441966][T15986] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1022.462670][T15986] usb 6-1: device descriptor read/8, error -71
[ 1022.706583][T18012] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1023.254611][T15986] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1023.323653][T15986] usb 6-1: device descriptor read/8, error -71
[ 1023.405085][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3369'.
[ 1023.432115][T15986] usb usb6-port1: unable to enumerate USB device
[ 1023.598126][T18022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.729632][T18022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.730960][T18021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.381892][T15986] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1024.391723][ T5789] libceph: connect (1)[c::]:6789 error -101
[ 1024.391943][ T5789] libceph: mon0 (1)[c::]:6789 connect error
[ 1024.541994][T15986] usb 6-1: Using ep0 maxpacket: 16
[ 1024.545663][T15986] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1024.548274][T15986] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1024.548315][T15986] usb 6-1: can't read configurations, error -61
[ 1024.600464][T18028] ceph: No mds server is up or the cluster is laggy
[ 1024.721496][T15986] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1024.876549][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1024.876657][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1025.081909][T15986] usb 6-1: Using ep0 maxpacket: 16
[ 1025.084510][T15986] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1025.197401][T15986] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1025.197437][T15986] usb 6-1: can't read configurations, error -61
[ 1025.251281][T15986] usb usb6-port1: attempt power cycle
[ 1025.801878][T15986] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1026.397934][T15986] usb 6-1: Using ep0 maxpacket: 16
[ 1026.407111][T15986] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1026.418821][T15986] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1026.418861][T15986] usb 6-1: can't read configurations, error -61
[ 1026.561874][T15986] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1026.740970][T18062] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1026.772774][ T5789] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1026.772914][T15986] usb 6-1: device not accepting address 18, error -71
[ 1026.773660][T15986] usb usb6-port1: unable to enumerate USB device
[ 1027.492833][ T5789] usb 2-1: device descriptor read/64, error -71
[ 1027.734533][ T5789] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1027.861920][ T5789] usb 2-1: device descriptor read/64, error -71
[ 1027.992681][ T5789] usb usb2-port1: attempt power cycle
[ 1028.253343][ T5603] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1028.403918][ T5603] usb 6-1: Using ep0 maxpacket: 16
[ 1028.404481][ T5603] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1028.407854][ T5603] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1028.407874][ T5603] usb 6-1: can't read configurations, error -61
[ 1028.531900][ T5726] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1028.532157][ T5603] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1028.541936][ T5789] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1028.572607][ T5789] usb 2-1: device descriptor read/8, error -71
[ 1028.681995][ T5603] usb 6-1: Using ep0 maxpacket: 16
[ 1028.682393][ T5603] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1028.682588][ T5726] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 1028.683751][ T5726] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1028.683772][ T5726] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1028.683890][ T5603] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1028.683906][ T5603] usb 6-1: can't read configurations, error -61
[ 1028.685526][ T5603] usb usb6-port1: attempt power cycle
[ 1028.686524][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1028.686546][ T5726] usb 8-1: Product: syz
[ 1028.686560][ T5726] usb 8-1: Manufacturer: syz
[ 1028.690927][ T5726] mos7840 8-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 1028.822042][ T5789] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1028.844131][ T5789] usb 2-1: device descriptor read/8, error -71
[ 1028.871892][T15986] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1028.955174][ T5789] usb usb2-port1: unable to enumerate USB device
[ 1029.021849][T15986] usb 3-1: Using ep0 maxpacket: 32
[ 1029.021977][ T5603] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1029.022494][T15986] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1029.023394][T15986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1029.023421][T15986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1029.023453][T15986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.025221][T15986] usb 3-1: config 0 descriptor??
[ 1029.043289][ T5603] usb 6-1: Using ep0 maxpacket: 16
[ 1029.043746][ T5603] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1029.048163][ T5603] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1029.048199][ T5603] usb 6-1: can't read configurations, error -61
[ 1029.172090][ T5603] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1029.193576][ T5603] usb 6-1: Using ep0 maxpacket: 16
[ 1029.207311][ T5603] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1029.209072][ T5603] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1029.209125][ T5603] usb 6-1: can't read configurations, error -61
[ 1029.209449][ T5603] usb usb6-port1: unable to enumerate USB device
[ 1029.878863][T15986] hid_parser_main: 5 callbacks suppressed
[ 1029.878885][T15986] ft260 0003:0403:6030.0024: unknown main item tag 0x0
[ 1029.878908][T15986] ft260 0003:0403:6030.0024: unknown main item tag 0x0
[ 1030.093230][T15986] ft260 0003:0403:6030.0024: chip code: 0000 0000
[ 1030.412764][T15986] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[ 1030.493816][ T5726] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[ 1030.519676][ T5726] usb 8-1: USB disconnect, device number 5
[ 1030.529708][ T5726] mos7840 8-1:1.0: device disconnected
[ 1030.601253][T15986] ft260 0003:0403:6030.0024: failed to retrieve status: -32, no wakeup
[ 1031.346594][T18092] ft260 0003:0403:6030.0024: ft260_hid_output_report_check_status: failed to start transfer, ret -38
[ 1031.348234][T18092] ft260 0003:0403:6030.0024: failed to reset I2C controller: -71
[ 1031.348257][T18092] ft260 0003:0403:6030.0024: ft260_i2c_write: failed with -38
[ 1031.407049][   T30] audit: type=1400 audit(1792662406.518:1917): avc:  denied  { bind } for  pid=18116 comm="syz.5.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1031.410616][   T30] audit: type=1400 audit(1792662406.518:1918): avc:  denied  { setopt } for  pid=18116 comm="syz.5.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1031.630144][   T30] audit: type=1400 audit(1792662406.738:1919): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.630434][   T30] audit: type=1400 audit(1792662406.738:1920): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.630561][   T30] audit: type=1400 audit(1792662406.738:1921): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="dlm" dev="configfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.630880][   T30] audit: type=1400 audit(1792662406.738:1922): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.630989][   T30] audit: type=1400 audit(1792662406.738:1923): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="dlm" dev="configfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.631114][   T30] audit: type=1400 audit(1792662406.738:1924): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="cluster" dev="configfs" ino=73582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.631229][   T30] audit: type=1400 audit(1792662406.738:1925): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="comms" dev="configfs" ino=73584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1031.642380][   T30] audit: type=1400 audit(1792662406.748:1926): avc:  denied  { search } for  pid=18123 comm="syz.7.3406" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1032.600369][ T5789] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1033.001509][   T10] usb 3-1: USB disconnect, device number 51
[ 1033.072530][ T5789] usb 8-1: Using ep0 maxpacket: 16
[ 1033.076100][ T5789] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1033.087791][ T5789] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1033.087821][ T5789] usb 8-1: can't read configurations, error -61
[ 1034.121915][ T5789] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1034.284165][ T5789] usb 8-1: Using ep0 maxpacket: 16
[ 1034.287960][ T5789] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1034.290647][ T5789] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1034.290679][ T5789] usb 8-1: can't read configurations, error -61
[ 1034.291065][ T5789] usb usb8-port1: attempt power cycle
[ 1034.684673][T18171] FAULT_INJECTION: forcing a failure.
[ 1034.684673][T18171] name failslab, interval 1, probability 0, space 0, times 0
[ 1034.684694][T18171] CPU: 1 UID: 0 PID: 18171 Comm: syz.2.3421 Not tainted syzkaller #0 PREEMPT(full) 
[ 1034.684708][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1034.684716][T18171] Call Trace:
[ 1034.684720][T18171]  <TASK>
[ 1034.684725][T18171]  dump_stack_lvl+0x100/0x190
[ 1034.684749][T18171]  should_fail_ex.cold+0x5/0xa
[ 1034.684767][T18171]  should_failslab+0xc2/0x120
[ 1034.684786][T18171]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1034.684800][T18171]  ? lock_acquire+0x1d1/0x380
[ 1034.684813][T18171]  ? dst_alloc+0x99/0x1a0
[ 1034.684828][T18171]  dst_alloc+0x99/0x1a0
[ 1034.684842][T18171]  rt_dst_alloc+0x35/0x3a0
[ 1034.684861][T18171]  ip_route_input_slow+0x15b8/0x3fa0
[ 1034.684877][T18171]  ? __pfx_ip_route_input_slow+0x10/0x10
[ 1034.684892][T18171]  ? __lock_acquire+0x5c0/0x1f40
[ 1034.684920][T18171]  ip_route_input_noref+0x122/0x2e0
[ 1034.684934][T18171]  ? __pfx_ip_route_input_noref+0x10/0x10
[ 1034.684949][T18171]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1034.684964][T18171]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[ 1034.684980][T18171]  ip_rcv_finish_core+0x459/0x2c30
[ 1034.684998][T18171]  ip_rcv+0x1c0/0x3c0
[ 1034.685012][T18171]  ? __pfx_ip_rcv+0x10/0x10
[ 1034.685025][T18171]  __netif_receive_skb_one_core+0x197/0x1e0
[ 1034.685037][T18171]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[ 1034.685051][T18171]  ? lock_acquire+0x1d1/0x380
[ 1034.685066][T18171]  __netif_receive_skb+0x1f/0x120
[ 1034.685078][T18171]  netif_receive_skb+0x139/0x7d0
[ 1034.685091][T18171]  ? __pfx_netif_receive_skb+0x10/0x10
[ 1034.685107][T18171]  tun_rx_batched.isra.0+0x3f6/0x750
[ 1034.685129][T18171]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[ 1034.685151][T18171]  ? tun_get_user+0x1dc9/0x3da0
[ 1034.685166][T18171]  tun_get_user+0x1f05/0x3da0
[ 1034.685196][T18171]  ? __lock_acquire+0x5c0/0x1f40
[ 1034.685215][T18171]  ? __pfx_tun_get_user+0x10/0x10
[ 1034.685237][T18171]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1034.685261][T18171]  ? find_held_lock+0x2b/0x80
[ 1034.685282][T18171]  ? tun_get+0x191/0x370
[ 1034.685294][T18171]  ? tun_get+0x191/0x370
[ 1034.685309][T18171]  tun_chr_write_iter+0xdc/0x200
[ 1034.685323][T18171]  vfs_write+0x6af/0x1050
[ 1034.685338][T18171]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1034.685353][T18171]  ? __pfx_vfs_write+0x10/0x10
[ 1034.685366][T18171]  ? find_held_lock+0x2b/0x80
[ 1034.685392][T18171]  ksys_write+0x12a/0x250
[ 1034.685405][T18171]  ? __pfx_ksys_write+0x10/0x10
[ 1034.685424][T18171]  do_syscall_64+0x123/0x790
[ 1034.685445][T18171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.685457][T18171] RIP: 0033:0x7f0e6f55fd8e
[ 1034.685468][T18171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1034.685480][T18171] RSP: 002b:00007f0e70475fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1034.685493][T18171] RAX: ffffffffffffffda RBX: 00007f0e704766c0 RCX: 00007f0e6f55fd8e
[ 1034.685502][T18171] RDX: 000000000000002a RSI: 0000200000000600 RDI: 00000000000000c8
[ 1034.685510][T18171] RBP: 00007f0e6f636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1034.685517][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1034.685525][T18171] R13: 00007f0e6f826038 R14: 00007f0e6f825fa0 R15: 00007ffed431c8a8
[ 1034.685540][T18171]  </TASK>
[ 1034.953070][ T5789] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1035.137762][ T5789] usb 8-1: Using ep0 maxpacket: 16
[ 1035.154154][ T5789] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1035.188762][ T5789] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1035.188797][ T5789] usb 8-1: can't read configurations, error -61
[ 1035.312301][ T5789] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1035.560232][ T5789] usb 8-1: device not accepting address 9, error -71
[ 1035.560468][ T5789] usb usb8-port1: unable to enumerate USB device
[ 1037.160652][T18192] CIFS: Attempting to mount //127.0.0.1/share
[ 1037.881661][T18205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3432'.
[ 1037.931160][T18192] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1038.151146][T18218] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1038.572167][ T5789] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1038.615664][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1038.615691][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1038.615703][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1038.615800][ T4966]  loop0:
[ 1038.988618][T18233] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint
[ 1039.214767][ T5789] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1039.214809][ T5789] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1039.220556][ T5789] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1039.220902][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3443'.
[ 1039.229422][ T5789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.229445][ T5789] usb 8-1: Product: syz
[ 1039.229458][ T5789] usb 8-1: Manufacturer: syz
[ 1039.229471][ T5789] usb 8-1: SerialNumber: syz
[ 1039.465930][ T5789] usb 8-1: Audio class v2/v3 interfaces need an interface association
[ 1039.465960][ T5789] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22
[ 1039.468435][ T5789] usb 8-1: cannot find UAC_HEADER
[ 1039.527100][ T5789] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22
[ 1039.530976][ T5789] usb 8-1: USB disconnect, device number 10
[ 1040.106716][T17815] udevd[17815]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1040.390782][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'.
[ 1040.765026][T12060] Bluetooth: hci3: command 0x0406 tx timeout
[ 1041.249904][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1041.249930][   T30] audit: type=1400 audit(1792662416.348:1931): avc:  denied  { accept } for  pid=18264 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1041.250035][   T30] audit: type=1400 audit(1792662416.368:1932): avc:  denied  { write } for  pid=18264 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1041.692249][T18279] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1041.868293][   T30] audit: type=1400 audit(1792662416.978:1933): avc:  denied  { ioctl } for  pid=18281 comm="syz.7.3460" path="socket:[76858]" dev="sockfs" ino=76858 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1042.166114][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1042.166132][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1042.166139][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1042.166165][ T4966]  loop0:
[ 1042.494435][   T29] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1042.645589][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1042.646036][   T29] usb 4-1: not running at top speed; connect to a high speed hub
[ 1042.646104][   T29] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1042.647217][   T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[ 1042.649260][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.649283][   T29] usb 4-1: Product: syz
[ 1042.649297][   T29] usb 4-1: Manufacturer: syz
[ 1042.649350][   T29] usb 4-1: SerialNumber: syz
[ 1043.903745][   T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1043.910593][   T29] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1043.910621][   T29] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[ 1043.911111][   T29] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1044.019383][   T29] usb 4-1: USB disconnect, device number 52
[ 1044.066328][T17815] udevd[17815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1044.767454][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1044.767852][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1044.768083][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1044.769319][ T4966]  loop0:
[ 1045.072352][T18327] jffs2: notice: (18327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1045.246762][T18335] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1045.331932][T15731] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 1045.435827][T18337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3471'.
[ 1045.548193][T18343] CIFS: Attempting to mount //127.0.0.1/share
[ 1046.412390][T18343] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1046.608597][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1046.608622][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1046.608633][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1046.608683][ T4966]  loop0:
[ 1046.709306][T18361] jffs2: notice: (18361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1046.814346][   T10] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 1046.970730][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1046.971219][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[ 1046.971246][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1046.982940][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[ 1047.012723][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.012752][   T10] usb 3-1: Product: syz
[ 1047.012767][   T10] usb 3-1: Manufacturer: syz
[ 1047.012782][   T10] usb 3-1: SerialNumber: syz
[ 1047.095624][T18378] FAULT_INJECTION: forcing a failure.
[ 1047.095624][T18378] name failslab, interval 1, probability 0, space 0, times 0
[ 1047.095657][T18378] CPU: 1 UID: 0 PID: 18378 Comm: syz.3.3500 Not tainted syzkaller #0 PREEMPT(full) 
[ 1047.095689][T18378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1047.095702][T18378] Call Trace:
[ 1047.095709][T18378]  <TASK>
[ 1047.095718][T18378]  dump_stack_lvl+0x100/0x190
[ 1047.095755][T18378]  should_fail_ex.cold+0x5/0xa
[ 1047.095786][T18378]  should_failslab+0xc2/0x120
[ 1047.095816][T18378]  __kmalloc_noprof+0xfc/0x840
[ 1047.095838][T18378]  ? lockdep_init_map_type+0x5c/0x250
[ 1047.095859][T18378]  ? nft_trans_alloc+0x1d/0x2d0
[ 1047.095886][T18378]  nft_trans_alloc+0x1d/0x2d0
[ 1047.095907][T18378]  nf_tables_newtable+0x1363/0x1a90
[ 1047.095935][T18378]  ? __pfx_nf_tables_newtable+0x10/0x10
[ 1047.095955][T18378]  ? net_generic+0x25/0x2a0
[ 1047.095989][T18378]  ? __nla_parse+0x40/0x60
[ 1047.096019][T18378]  nfnetlink_rcv_batch+0x1410/0x2880
[ 1047.096054][T18378]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1047.096080][T18378]  ? lock_acquire+0x1d1/0x380
[ 1047.096095][T18378]  ? avc_has_perm_noaudit+0x56/0x470
[ 1047.096121][T18378]  ? avc_has_perm_noaudit+0x145/0x470
[ 1047.096162][T18378]  ? __nla_parse+0x40/0x60
[ 1047.096186][T18378]  nfnetlink_rcv+0x3bd/0x440
[ 1047.096206][T18378]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1047.096233][T18378]  netlink_unicast+0x65f/0x950
[ 1047.096253][T18378]  ? __pfx_netlink_unicast+0x10/0x10
[ 1047.096279][T18378]  netlink_sendmsg+0x9ac/0x10c0
[ 1047.096300][T18378]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1047.096325][T18378]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1047.096347][T18378]  ? ____sys_sendmsg+0xa4d/0xbe0
[ 1047.096368][T18378]  ____sys_sendmsg+0xa4d/0xbe0
[ 1047.096388][T18378]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1047.096409][T18378]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1047.096443][T18378]  ___sys_sendmsg+0x190/0x1e0
[ 1047.096468][T18378]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1047.096490][T18378]  ? futex_wait+0x11e/0x370
[ 1047.096513][T18378]  ? find_held_lock+0x2b/0x80
[ 1047.096550][T18378]  __sys_sendmsg+0x160/0x210
[ 1047.096569][T18378]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1047.096599][T18378]  do_syscall_64+0x123/0x790
[ 1047.096626][T18378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.096642][T18378] RIP: 0033:0x7f59a4b9f559
[ 1047.096656][T18378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1047.096675][T18378] RSP: 002b:00007f59a2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1047.096695][T18378] RAX: ffffffffffffffda RBX: 00007f59a4e25fa0 RCX: 00007f59a4b9f559
[ 1047.096706][T18378] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004
[ 1047.096718][T18378] RBP: 00007f59a4c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1047.096728][T18378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1047.096738][T18378] R13: 00007f59a4e26038 R14: 00007f59a4e25fa0 R15: 00007ffc9386ecf8
[ 1047.096761][T18378]  </TASK>
[ 1047.280940][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1047.281374][   T10] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1047.281393][   T10] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[ 1047.281858][   T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1047.318865][   T10] usb 3-1: USB disconnect, device number 52
[ 1047.413778][T17815] udevd[17815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1048.221318][T18389] CIFS: Attempting to mount //127.0.0.1/share
[ 1048.234264][T18389] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1048.234305][T18389] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1048.245429][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1048.245451][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1048.245460][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1048.245501][ T4966]  loop0:
[ 1048.304693][T18392] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1048.857052][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1048.932530][   T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1049.122118][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1049.123032][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1049.124007][   T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1049.124029][   T10] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.124060][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1049.124092][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.130673][   T10] usbtmc 3-1:16.0: bulk endpoints not found
[ 1050.297261][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1050.297276][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1050.297283][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1050.297321][ T4966]  loop0:
[ 1050.893796][T18432] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer.
[ 1050.968285][T18434] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1050.969696][T15731] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 1051.186713][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3524'.
[ 1051.337076][   T30] audit: type=1400 audit(1792662426.448:1934): avc:  denied  { node_bind } for  pid=18453 comm="syz.7.3528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1051.424995][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3530'.
[ 1051.607231][   T29] usb 3-1: USB disconnect, device number 53
[ 1051.721159][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3536'.
[ 1051.789147][   T30] audit: type=1400 audit(1792662426.898:1935): avc:  denied  { ioctl } for  pid=18467 comm="syz.5.3535" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0xc0481273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1051.926797][T18480] /dev/nullb0: Can't open blockdev
[ 1052.193240][ T5789] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1052.659739][ T5789] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 1052.673703][ T5789] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1052.673733][ T5789] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1052.680854][ T5789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1052.680880][ T5789] usb 8-1: Product: syz
[ 1052.680894][ T5789] usb 8-1: Manufacturer: syz
[ 1052.784980][ T5789] mos7840 8-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 1053.260684][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3547'.
[ 1053.351906][   T29] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1053.981879][   T29] usb 3-1: Using ep0 maxpacket: 8
[ 1053.982404][   T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1053.983253][   T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1053.983276][   T29] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.983311][   T29] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1053.983393][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.989646][   T29] usbtmc 3-1:16.0: bulk endpoints not found
[ 1054.350760][ T5789] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[ 1054.365752][ T5789] usb 8-1: USB disconnect, device number 11
[ 1054.369460][ T5789] mos7840 8-1:1.0: device disconnected
[ 1055.014257][T18517] /dev/nullb0: Can't open blockdev
[ 1056.044660][T15731] Bluetooth: hci1: command 0x0406 tx timeout
[ 1056.178041][   T29] usb 3-1: USB disconnect, device number 54
[ 1056.268592][   T30] audit: type=1400 audit(1792662431.378:1936): avc:  denied  { read } for  pid=18532 comm="syz.1.3558" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1056.269254][   T30] audit: type=1400 audit(1792662431.378:1937): avc:  denied  { read open } for  pid=18532 comm="syz.1.3558" path="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1056.349584][T18537] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1056.376068][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3563'.
[ 1057.144614][   T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1057.383842][   T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 1057.384733][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1057.384762][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1057.386118][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1057.386140][   T10] usb 2-1: Product: syz
[ 1057.386154][   T10] usb 2-1: Manufacturer: syz
[ 1057.395067][   T10] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 1057.701947][ T5789] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1057.844583][T18579] Bluetooth: MGMT ver 1.23
[ 1057.854010][ T5789] usb 3-1: Using ep0 maxpacket: 16
[ 1057.854533][ T5789] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1057.855375][ T5789] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[ 1057.855395][ T5789] usb 3-1: config 0 has no interface number 0
[ 1057.855443][ T5789] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1057.855464][ T5789] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1057.858081][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.858103][ T5789] usb 3-1: Product: syz
[ 1057.858116][ T5789] usb 3-1: Manufacturer: syz
[ 1057.858129][ T5789] usb 3-1: SerialNumber: syz
[ 1057.864530][ T5789] usb 3-1: config 0 descriptor??
[ 1057.865193][T18560] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1057.865303][T18560] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1058.104142][T18560] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1058.104230][T18560] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1058.212657][T18586] netlink: 'syz.3.3579': attribute type 27 has an invalid length.
[ 1058.212704][T18586] netlink: 'syz.3.3579': attribute type 3 has an invalid length.
[ 1058.354532][ T5789] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1058.675666][   T10] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[ 1058.694922][   T10] usb 2-1: USB disconnect, device number 77
[ 1058.711771][   T10] mos7840 2-1:1.0: device disconnected
[ 1058.789678][T18593] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1059.409636][ T5789] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1059.409670][ T5789] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1059.410106][ T5789] asix 3-1:0.34: probe with driver asix failed with error -71
[ 1059.456332][ T5789] usb 3-1: USB disconnect, device number 55
[ 1059.616498][   T30] audit: type=1400 audit(1792662434.728:1938): avc:  denied  { read } for  pid=18605 comm="syz.5.3586" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1059.616677][   T30] audit: type=1400 audit(1792662434.728:1939): avc:  denied  { open } for  pid=18605 comm="syz.5.3586" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1060.366400][T18619] syzkaller1: entered promiscuous mode
[ 1060.366415][T18619] syzkaller1: entered allmulticast mode
[ 1061.688277][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1061.688302][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1061.688312][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1061.688358][ T4966]  loop0:
[ 1061.919409][T18625] rxe_eth0 speed is unknown, defaulting to 1000
[ 1062.451334][   T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1062.601966][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 1062.602664][   T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1062.603748][   T24] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[ 1062.603771][   T24] usb 4-1: config 0 has no interface number 0
[ 1062.603804][   T24] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1062.603830][   T24] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1062.607188][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.607212][   T24] usb 4-1: Product: syz
[ 1062.607226][   T24] usb 4-1: Manufacturer: syz
[ 1062.607241][   T24] usb 4-1: SerialNumber: syz
[ 1062.628360][   T24] usb 4-1: config 0 descriptor??
[ 1062.629178][T18642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1062.629276][T18642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1062.885209][T18642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1062.885307][T18642] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1063.337292][   T24] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1063.906728][T18667] syzkaller1: entered promiscuous mode
[ 1063.906782][T18667] syzkaller1: entered allmulticast mode
[ 1064.373732][T18665] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3604'.
[ 1064.508092][   T24] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1064.508123][   T24] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1064.508293][   T24] asix 4-1:0.34: probe with driver asix failed with error -71
[ 1064.551507][   T24] usb 4-1: USB disconnect, device number 53
[ 1064.776814][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1064.776841][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1064.776852][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1064.776900][ T4966]  loop0:
[ 1064.897061][   T30] audit: type=1400 audit(1792662440.008:1940): avc:  denied  { lock } for  pid=18679 comm="syz.7.3609" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1065.119992][T18686] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1065.210275][T18690] CIFS: Attempting to mount //127.0.0.1/share
[ 1065.210543][T18690] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1065.210563][T18690] CIFS: VFS: cifs_mount failed w/return code = -101
[ 1065.448046][T18699] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[ 1065.448099][T18699] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1065.450019][T18699] overlayfs: failed to set uuid (161/file2, err=-13); falling back to uuid=null.
[ 1066.371877][T12060] Bluetooth: hci0: command 0x0406 tx timeout
[ 1067.068719][T18718] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1067.978154][T18742] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1067.979646][T15731] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1068.079446][T18746] CIFS: Attempting to mount //127.0.0.1/share
[ 1068.079703][T18746] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1068.079721][T18746] CIFS: VFS: cifs_mount failed w/return code = -101
[ 1068.147695][T18751] fuse: Bad value for 'user_id'
[ 1068.147707][T18751] fuse: Bad value for 'user_id'
[ 1068.622076][   T30] audit: type=1400 audit(1792662443.708:1941): avc:  denied  { ioctl } for  pid=18763 comm="syz.3.3640" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1070.173445][T18784] fuse: Bad value for 'user_id'
[ 1070.173466][T18784] fuse: Bad value for 'user_id'
[ 1070.591856][T15986] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1070.746390][T15986] usb 8-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb
[ 1070.750502][T15986] usb 8-1: config 2 has an invalid interface number: 79 but max is 0
[ 1070.750540][T15986] usb 8-1: config 2 has no interface number 0
[ 1070.750607][T15986] usb 8-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[ 1070.750641][T15986] usb 8-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1070.750675][T15986] usb 8-1: config 2 interface 79 has no altsetting 0
[ 1070.753459][T18799] jffs2: notice: (18799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1070.761004][   T30] audit: type=1400 audit(1792662445.868:1942): avc:  denied  { write } for  pid=18797 comm="syz.2.3652" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1070.761053][   T30] audit: type=1400 audit(1792662445.868:1943): avc:  denied  { create } for  pid=18797 comm="syz.2.3652" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 1070.881344][T15986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.881395][T15986] usb 8-1: Product: syz
[ 1070.881421][T15986] usb 8-1: Manufacturer: syz
[ 1070.881445][T15986] usb 8-1: SerialNumber: syz
[ 1070.923523][T18793] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1070.926972][T18793] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1071.198983][T15986] esd_usb 8-1:2.79: sending version message failed
[ 1071.199072][T15986] esd_usb 8-1:2.79: probe with driver esd_usb failed with error -71
[ 1071.239191][T15986] usb 8-1: USB disconnect, device number 12
[ 1072.419836][T18818] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1072.423393][T15731] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1072.484543][T18819] No such timeout policy "syz1"
[ 1072.979625][T18821] fuse: Bad value for 'user_id'
[ 1072.979646][T18821] fuse: Bad value for 'user_id'
[ 1073.138529][T18827] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1074.531340][T18838] loop9: detected capacity change from 0 to 16384
[ 1074.871094][T18844] xfrm0: entered allmulticast mode
[ 1074.873409][T18844] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 1074.897732][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3665'.
[ 1074.998333][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'.
[ 1075.000571][    C1] I/O error, dev loop9, sector 872 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1075.041665][T18839] loop9: detected capacity change from 16384 to 0
[ 1075.614010][T10931] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1075.615079][ T5957] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1075.615316][ T5957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1075.615412][ T5957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1076.454840][T18856] fuse: Bad value for 'fd'
[ 1076.790224][   T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1076.970485][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 1076.974345][   T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1076.987885][   T24] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[ 1076.987939][   T24] usb 6-1: config 0 has no interface number 0
[ 1076.988072][   T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1076.988104][   T24] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1077.097169][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.097235][   T24] usb 6-1: Product: syz
[ 1077.097276][   T24] usb 6-1: Manufacturer: syz
[ 1077.097332][   T24] usb 6-1: SerialNumber: syz
[ 1077.189672][   T24] usb 6-1: config 0 descriptor??
[ 1077.192443][T18858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1077.192847][T18858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1077.537182][T18858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1077.537280][T18858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1077.800948][   T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1077.856115][   T30] audit: type=1400 audit(1792662452.968:1944): avc:  denied  { block_suspend } for  pid=18872 comm="syz.1.3675" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1077.934723][   T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1078.102663][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1078.103761][   T10] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61
[ 1078.103787][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1078.106251][   T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1078.106273][   T10] usb 4-1: Product: syz
[ 1078.106287][   T10] usb 4-1: Manufacturer: syz
[ 1078.106302][   T10] usb 4-1: SerialNumber: syz
[ 1078.109976][   T10] usb 4-1: config 0 descriptor??
[ 1078.111198][T18867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1079.118521][   T10] usb 4-1: selecting invalid altsetting 0
[ 1080.549621][   T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1080.549651][   T24] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1080.549820][   T24] asix 6-1:0.34: probe with driver asix failed with error -71
[ 1080.629252][   T24] usb 6-1: USB disconnect, device number 23
[ 1080.707456][T18867] usb 4-1: BOGUS urb xfer, pipe 0 != type 3
[ 1080.743096][T18864] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow!
[ 1080.744937][   T10] usb 4-1: USB disconnect, device number 54
[ 1080.777406][T18903] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1080.779462][T15731] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1080.805188][T18904] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1080.831406][T18906] No such timeout policy "syz1"
[ 1083.146182][T18925] fuse: Bad value for 'fd'
[ 1084.721470][T18941] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1084.783359][T18942] No such timeout policy "syz1"
[ 1086.997421][T18950] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1087.001213][T15731] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1087.052725][T18952] No such timeout policy "syz1"
[ 1087.777549][T18967] fuse: Bad value for 'fd'
[ 1088.008632][T18976] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1088.061939][T15731] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1088.167080][T18979] CIFS: Attempting to mount //127.0.0.1/share
[ 1088.432994][T18985] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1088.489798][T18986] No such timeout policy "syz1"
[ 1089.115850][T18979] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1089.908904][   T30] audit: type=1400 audit(1792662465.018:1945): avc:  denied  { read } for  pid=18998 comm="syz.5.3710" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1089.908950][   T30] audit: type=1400 audit(1792662465.018:1946): avc:  denied  { open } for  pid=18998 comm="syz.5.3710" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1089.909736][T19000] FAULT_INJECTION: forcing a failure.
[ 1089.909736][T19000] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1089.909786][T19000] CPU: 1 UID: 0 PID: 19000 Comm: syz.5.3710 Not tainted syzkaller #0 PREEMPT(full) 
[ 1089.909810][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1089.909821][T19000] Call Trace:
[ 1089.909829][T19000]  <TASK>
[ 1089.909837][T19000]  dump_stack_lvl+0x100/0x190
[ 1089.909865][T19000]  should_fail_ex.cold+0x5/0xa
[ 1089.909888][T19000]  get_futex_key+0x1c9/0x13e0
[ 1089.909912][T19000]  ? __pfx_get_futex_key+0x10/0x10
[ 1089.909931][T19000]  ? futex_wake+0x4ea/0x5e0
[ 1089.909961][T19000]  futex_wake+0xf4/0x5e0
[ 1089.909982][T19000]  ? futex_wait+0x11e/0x370
[ 1089.909999][T19000]  ? __pfx_futex_wake+0x10/0x10
[ 1089.910025][T19000]  ? putname+0xb1/0x110
[ 1089.910046][T19000]  ? kmem_cache_free+0x127/0x6c0
[ 1089.910066][T19000]  do_futex+0x2b2/0x440
[ 1089.910088][T19000]  ? __pfx_do_futex+0x10/0x10
[ 1089.910107][T19000]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1089.910135][T19000]  __x64_sys_futex+0x34f/0x4d0
[ 1089.910156][T19000]  ? __x64_sys_openat+0x12d/0x210
[ 1089.910178][T19000]  ? __x64_sys_openat2+0x24c/0x380
[ 1089.910201][T19000]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1089.910230][T19000]  do_syscall_64+0x123/0x790
[ 1089.910256][T19000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.910273][T19000] RIP: 0033:0x7f93f019f559
[ 1089.910287][T19000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1089.910301][T19000] RSP: 002b:00007f93f113c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1089.910318][T19000] RAX: ffffffffffffffda RBX: 00007f93f0425fa8 RCX: 00007f93f019f559
[ 1089.910328][T19000] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f93f0425fac
[ 1089.910338][T19000] RBP: 00007f93f0425fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1089.910347][T19000] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1089.910357][T19000] R13: 00007f93f0426038 R14: 00007ffef3d4cc50 R15: 00007ffef3d4cd38
[ 1089.910379][T19000]  </TASK>
[ 1089.954163][   T30] audit: type=1400 audit(1792662465.068:1947): avc:  denied  { read } for  pid=16427 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1089.954206][   T30] audit: type=1400 audit(1792662465.068:1948): avc:  denied  { open } for  pid=16427 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1089.954239][   T30] audit: type=1400 audit(1792662465.068:1949): avc:  denied  { ioctl } for  pid=16427 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1089.995711][   T30] audit: type=1400 audit(1792662465.098:1950): avc:  denied  { ioctl } for  pid=18998 comm="syz.5.3710" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1090.088472][T19006] fuse: Bad value for 'fd'
[ 1090.506329][   T30] audit: type=1400 audit(1792662465.618:1951): avc:  denied  { read write } for  pid=19013 comm="syz.2.3717" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1090.506367][   T30] audit: type=1400 audit(1792662465.618:1952): avc:  denied  { open } for  pid=19013 comm="syz.2.3717" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1090.508378][   T30] audit: type=1400 audit(1792662465.618:1953): avc:  denied  { ioctl } for  pid=19013 comm="syz.2.3717" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1091.028834][T19028] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1092.030718][T15731] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1092.030787][T15731] Bluetooth: hci2: command 0x0406 tx timeout
[ 1092.386221][T19026] No such timeout policy "syz1"
[ 1092.689242][T19032] cfg80211: Invalid regulatory domain detected: BB
[ 1092.848161][T19039] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1093.431244][   T30] audit: type=1400 audit(1792662468.538:1954): avc:  denied  { audit_write } for  pid=19043 comm="syz.1.3727" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1094.655662][T19069] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1094.709166][T19073] No such timeout policy "syz1"
[ 1094.792387][T19077] 9p: Bad value for 'rfdno'
[ 1095.558900][T19093] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1095.561314][T12060] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1096.050911][   T30] audit: type=1400 audit(1792662471.158:1955): avc:  denied  { mount } for  pid=19098 comm="syz.2.3749" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1096.076647][T19099] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1096.312049][T16820] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1096.462618][T16820] usb 4-1: Using ep0 maxpacket: 8
[ 1096.481247][T16820] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1096.535634][T16820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1096.538235][T16820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1096.609438][T16820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.609469][T16820] usb 4-1: Product: syz
[ 1096.609484][T16820] usb 4-1: Manufacturer: syz
[ 1096.609497][T16820] usb 4-1: SerialNumber: syz
[ 1096.906571][   T30] audit: type=1400 audit(1792662472.008:1956): avc:  denied  { unmount } for  pid=16974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 1096.977613][T16820] usb 4-1: 0:1 : does not exist
[ 1096.978038][T16820] usb 4-1: unit 1 not found!
[ 1096.988457][T16820] usb 4-1: unit 9 not found!
[ 1097.249017][T16820] usb 4-1: unit 0 not found!
[ 1097.464410][T16820] usb 4-1: USB disconnect, device number 55
[ 1097.481907][   T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1097.642766][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1097.643918][   T24] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[ 1097.646847][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.646869][   T24] usb 2-1: Product: syz
[ 1097.646883][   T24] usb 2-1: Manufacturer: syz
[ 1097.646896][   T24] usb 2-1: SerialNumber: syz
[ 1097.649849][   T24] usb 2-1: config 0 descriptor??
[ 1097.699283][   T24] usb 2-1: selecting invalid altsetting 1
[ 1097.699295][   T24] technisat-usb2: could not set alternate setting to 0
[ 1097.910949][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3756'.
[ 1098.373872][   T24] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[ 1098.375079][   T24] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2
[ 1098.375102][   T24] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw
[ 1099.099454][T19142] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1099.107945][T12060] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 1102.082092][T19173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3769'.
[ 1103.141280][   T30] audit: type=1400 audit(1792662478.248:1957): avc:  denied  { ioctl } for  pid=19181 comm="syz.5.3774" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1103.283419][T19190] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1103.285495][T12060] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 1103.831922][ T5733] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1103.982841][ T5733] usb 3-1: Using ep0 maxpacket: 8
[ 1104.000966][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1104.000993][ T5733] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1104.002534][ T5733] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1104.030595][ T5733] usb 3-1: string descriptor 0 read error: -22
[ 1104.030652][ T5733] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1104.069159][ T5733] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1104.089969][ T5733] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1104.090232][ T5733] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1104.090272][ T5733] usb 3-1: media controller created
[ 1104.169058][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1105.530079][ T5733] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1105.568702][T19188] usb 3-1: dvb_usb_au6610: wlen=4100, aborting
[ 1105.693612][ T5733] usb 3-1: USB disconnect, device number 56
[ 1106.145175][T16820] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1106.450047][T16820] usb 6-1: Using ep0 maxpacket: 8
[ 1106.778449][T16820] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1106.780278][T16820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.780301][T16820] usb 6-1: config 0 has no interfaces?
[ 1106.784240][T16820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.784262][T16820] usb 6-1: Product: syz
[ 1106.784275][T16820] usb 6-1: Manufacturer: syz
[ 1106.784288][T16820] usb 6-1: SerialNumber: syz
[ 1106.831493][T16820] usb 6-1: config 0 descriptor??
[ 1106.967947][   T30] audit: type=1400 audit(1792662482.078:1958): avc:  denied  { write } for  pid=19212 comm="syz.7.3782" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1107.507189][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1107.509995][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1107.542112][T19215] jffs2: notice: (19215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1108.044970][T16820] usb 6-1: USB disconnect, device number 24
[ 1109.071877][ T5726] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1109.261878][ T5726] usb 4-1: Using ep0 maxpacket: 16
[ 1109.335357][ T5726] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1109.337593][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.337616][ T5726] usb 4-1: Product: syz
[ 1109.337629][ T5726] usb 4-1: Manufacturer: syz
[ 1109.337644][ T5726] usb 4-1: SerialNumber: syz
[ 1109.377808][ T5726] usb 4-1: config 0 descriptor??
[ 1109.391085][ T5726] visor 4-1:0.0: Sony Clie 3.5 converter detected
[ 1109.589208][ T5726] usb 4-1: clie_3_5_startup: get config number failed: -71
[ 1109.590312][ T5726] visor 4-1:0.0: probe with driver visor failed with error -71
[ 1109.614610][ T5726] usb 4-1: USB disconnect, device number 56
[ 1109.872138][ T5733] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1110.024440][ T5733] usb 6-1: Using ep0 maxpacket: 16
[ 1110.026118][ T5733] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1110.027502][ T5733] usb 6-1: config 0 has no interfaces?
[ 1110.027520][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.031248][ T5733] usb 6-1: config 0 descriptor??
[ 1110.294809][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1110.317461][ T5733] usb 6-1: USB disconnect, device number 25
[ 1111.836158][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3802'.
[ 1111.878699][T19272] tc_dump_action: action bad kind
[ 1114.689507][   T30] audit: type=1400 audit(1792662489.798:1959): avc:  denied  { accept } for  pid=19284 comm="syz.1.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1115.244763][   T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1115.311165][T19308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3815'.
[ 1115.370688][T19310] Cannot find set identified by id 0 to match
[ 1115.393227][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1115.394702][   T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1115.395187][   T10] usb 8-1: config 0 has no interfaces?
[ 1115.395216][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.405215][   T10] usb 8-1: config 0 descriptor??
[ 1115.622056][ T5726] usb 8-1: USB disconnect, device number 13
[ 1116.998259][   T30] audit: type=1400 audit(1792662492.108:1960): avc:  denied  { write } for  pid=19332 comm="syz.1.3825" path="socket:[81096]" dev="sockfs" ino=81096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1116.998968][   T30] audit: type=1400 audit(1792662492.108:1961): avc:  denied  { accept } for  pid=19332 comm="syz.1.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1116.999312][   T30] audit: type=1400 audit(1792662492.108:1962): avc:  denied  { read } for  pid=19332 comm="syz.1.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1117.217389][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3829'.
[ 1117.323094][   T30] audit: type=1400 audit(1792662492.438:1963): avc:  denied  { create } for  pid=19346 comm="syz.3.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[ 1117.458417][T19347] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1117.458453][T19347] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1117.458495][T19347] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1117.511354][T19347] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1117.563117][T19347] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[ 1117.700297][T19353] smbdirect: ib_dev[rxe0] renamed to [sys]
[ 1117.801889][T15986] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1117.961942][T15986] usb 6-1: Using ep0 maxpacket: 16
[ 1117.963866][T15986] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1117.969791][T15986] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1117.969812][T15986] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1117.969828][T15986] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1117.969845][T15986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.032020][T15986] usb 6-1: config 0 descriptor??
[ 1118.032762][T19357] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1119.260217][T15986] usbhid 6-1:0.0: can't add hid device: -71
[ 1119.260310][T15986] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1119.294175][T15986] usb 6-1: USB disconnect, device number 26
[ 1119.481712][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'.
[ 1119.930619][T19388] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1120.094040][   T30] audit: type=1400 audit(1792662495.208:1964): avc:  denied  { sys_module } for  pid=19390 comm="syz.5.3848" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1120.183169][   T30] audit: type=1400 audit(1792662495.298:1965): avc:  denied  { append } for  pid=19395 comm="syz.7.3849" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1121.317407][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3854'.
[ 1122.377716][T19426] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1126.166619][T19466] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1126.226173][T19467] No such timeout policy "syz1"
[ 1128.301932][ T5726] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1128.451837][ T5726] usb 3-1: Using ep0 maxpacket: 32
[ 1128.452410][ T5726] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1128.499702][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1128.499736][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1128.499773][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.517913][ T5726] usb 3-1: config 0 descriptor??
[ 1128.862769][   T30] audit: type=1326 audit(1792662503.978:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.863019][   T30] audit: type=1326 audit(1792662503.978:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.933746][   T30] audit: type=1326 audit(1792662504.048:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.934049][   T30] audit: type=1326 audit(1792662504.048:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.936701][   T30] audit: type=1326 audit(1792662504.048:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.936983][   T30] audit: type=1326 audit(1792662504.048:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.937297][   T30] audit: type=1326 audit(1792662504.048:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.938649][   T30] audit: type=1326 audit(1792662504.048:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1128.942479][   T30] audit: type=1326 audit(1792662504.048:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19495 comm="syz.1.3879" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c2419f559 code=0x7ffc0000
[ 1129.142012][ T5726] ft260 0003:0403:6030.0025: unknown main item tag 0x0
[ 1129.142044][ T5726] ft260 0003:0403:6030.0025: unknown main item tag 0x0
[ 1129.319998][ T5726] ft260 0003:0403:6030.0025: chip code: 0000 0000
[ 1129.912777][ T5726] ft260 0003:0403:6030.0025: failed to retrieve system status
[ 1129.913078][ T5726] ft260 0003:0403:6030.0025: probe with driver ft260 failed with error -32
[ 1132.179183][   T29] usb 3-1: USB disconnect, device number 57
[ 1132.399661][T19517] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1132.401227][T12060] Bluetooth: hci2: unexpected event for opcode 0x2003
[ 1132.482161][T19519] No such timeout policy "syz1"
[ 1133.626690][T19531] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1133.666077][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1133.666096][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1133.666102][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1133.666129][ T4966]  loop0:
[ 1134.436267][   T30] audit: type=1400 audit(1792662509.548:1975): avc:  denied  { write } for  pid=19537 comm="syz.2.3894" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1
[ 1135.775019][T19556] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1135.780311][T12060] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1135.811864][ T5726] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1135.876596][T19557] No such timeout policy "syz1"
[ 1135.962342][ T5726] usb 3-1: Using ep0 maxpacket: 32
[ 1135.965172][ T5726] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1135.966356][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1135.966384][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1135.966416][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.977304][ T5726] usb 3-1: config 0 descriptor??
[ 1136.445804][ T5726] ft260 0003:0403:6030.0026: unknown main item tag 0x0
[ 1136.445825][ T5726] ft260 0003:0403:6030.0026: unknown main item tag 0x0
[ 1136.630548][ T5726] ft260 0003:0403:6030.0026: chip code: 0000 0000
[ 1136.832965][ T5726] ft260 0003:0403:6030.0026: failed to retrieve system status
[ 1136.833124][ T5726] ft260 0003:0403:6030.0026: probe with driver ft260 failed with error -32
[ 1137.149506][T19570] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1137.275439][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1137.275462][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1137.275473][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1137.275520][ T4966]  loop0:
[ 1137.313125][ T5726] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1137.530646][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3904'.
[ 1137.530710][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3904'.
[ 1138.086232][ T5726] usb 8-1: Using ep0 maxpacket: 32
[ 1138.131972][T12060] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 1138.149144][ T5726] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1138.163142][T19583] No such timeout policy "syz1"
[ 1138.217449][ T5726] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.217500][ T5726] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1138.217524][ T5726] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1138.217620][ T5726] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1138.246237][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.246261][ T5726] usb 8-1: Product: syz
[ 1138.246275][ T5726] usb 8-1: Manufacturer: syz
[ 1138.246288][ T5726] usb 8-1: SerialNumber: syz
[ 1138.341393][    C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1138.437955][ T5726] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input44
[ 1138.591897][ T5789] usb 3-1: USB disconnect, device number 58
[ 1138.604382][ T5726] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1138.604400][ T5726]  (id 0x00)
[ 1138.751885][ T5726] rc_core: IR keymap rc-imon-pad not found
[ 1138.751901][ T5726] Registered IR keymap rc-empty
[ 1138.752059][ T5726] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1138.752075][ T5726] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1138.820003][ T5726] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[ 1138.857519][ T5726] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input45
[ 1138.954529][ T5726] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:14> initialized
[ 1139.124257][ T5726] usb 8-1: USB disconnect, device number 14
[ 1140.042707][T19609] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1140.281339][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1140.281362][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1140.281373][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1140.281421][ T4966]  loop0:
[ 1141.412679][   T30] audit: type=1400 audit(1792662516.118:1976): avc:  denied  { create } for  pid=19621 comm="syz.3.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1141.412732][   T30] audit: type=1400 audit(1792662516.118:1977): avc:  denied  { write } for  pid=19621 comm="syz.3.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1141.471904][ T5726] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1141.531905][T19626] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1141.542796][T12060] Bluetooth: hci0: unexpected event for opcode 0x2003
[ 1141.633337][ T5726] usb 6-1: Using ep0 maxpacket: 32
[ 1141.635754][ T5726] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1141.639071][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1141.639115][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1141.639265][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.642959][ T5726] usb 6-1: config 0 descriptor??
[ 1141.710368][T19626] No such timeout policy "syz1"
[ 1143.223430][ T5726] ft260 0003:0403:6030.0027: unknown main item tag 0x0
[ 1143.223451][ T5726] ft260 0003:0403:6030.0027: unknown main item tag 0x0
[ 1143.396394][ T5726] ft260 0003:0403:6030.0027: chip code: 0000 0000
[ 1143.600085][ T5726] ft260 0003:0403:6030.0027: failed to retrieve system status
[ 1143.600384][ T5726] ft260 0003:0403:6030.0027: probe with driver ft260 failed with error -32
[ 1144.200792][T19649] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1144.202173][T12060] Bluetooth: hci3: unexpected event for opcode 0x2003
[ 1144.254886][T19650] No such timeout policy "syz1"
[ 1144.439627][T19652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3922'.
[ 1144.658191][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1144.658207][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1144.658214][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1144.658240][ T4966]  loop0:
[ 1145.076659][T19671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3933'.
[ 1145.076725][T19671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3933'.
[ 1145.921267][ T5726] usb 6-1: USB disconnect, device number 27
[ 1147.167965][T19690] device-mapper: table: 248:5: clone: Error opening metadata device (-ENOENT)
[ 1147.167985][T19690] device-mapper: ioctl: error adding target to table
[ 1147.187449][   T30] audit: type=1400 audit(1792662522.288:1978): avc:  denied  { setopt } for  pid=19686 comm="syz.5.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1147.317044][   T30] audit: type=1400 audit(1792662522.428:1979): avc:  denied  { append } for  pid=19673 comm="syz.2.3934" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1147.478263][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1147.478286][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1147.478298][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1147.478345][ T4966]  loop0:
[ 1147.652400][T19699] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1147.655705][T12060] Bluetooth: hci1: unexpected event for opcode 0x2003
[ 1147.767451][T19703] Illegal XDP return value 4294967294 on prog  (id 101) dev N/A, expect packet loss!
[ 1147.786449][T19698] No such timeout policy "syz1"
[ 1148.100408][T19708] jffs2: notice: (19708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1148.139798][   T30] audit: type=1400 audit(1792662523.248:1980): avc:  denied  { write } for  pid=19707 comm="syz.5.3944" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1149.052967][ T5726] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1149.380068][ T5726] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1149.380984][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1149.381022][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.381055][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.386823][ T5726] usb 4-1: config 0 descriptor??
[ 1150.173960][ T5726] hid-steam 0003:28DE:1142.0028: unknown main item tag 0x0
[ 1150.178712][ T5726] hid-steam 0003:28DE:1142.0028: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[ 1150.232266][ T5726] hid-steam 0003:28DE:1142.0028: Steam wireless receiver connected
[ 1150.232601][ T5726] hid-steam 0003:28DE:1142.0028: steam_probe:steam_get_conn_status failed with error -22
[ 1150.296299][ T5726] hid-steam 0003:28DE:1142.0029: unknown main item tag 0x0
[ 1150.330374][ T5726] hid-steam 0003:28DE:1142.0029: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[ 1151.099150][   T10] usb 4-1: USB disconnect, device number 57
[ 1151.194461][T19732] fido_id[19732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 1151.235117][   T10] hid-steam 0003:28DE:1142.0028: Steam wireless receiver disconnected
[ 1151.273356][ T4966] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 1151.273373][ T4966] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size
[ 1151.273380][ T4966] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1151.273407][ T4966]  loop0:
[ 1151.946550][T19765] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1153.005551][T19766] jffs2: notice: (19766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1153.047789][T19765] No such timeout policy "syz1"
[ 1155.442082][ T5726] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1155.577648][T19799] snd_dummy snd_dummy.0: control 0:0:128:syz0:8200 is already present
[ 1155.642427][ T5726] usb 8-1: Using ep0 maxpacket: 16
[ 1155.643112][ T5726] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1155.644003][ T5726] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[ 1155.644027][ T5726] usb 8-1: config 0 has no interface number 0
[ 1155.644060][ T5726] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1155.644083][ T5726] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1155.647031][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.647053][ T5726] usb 8-1: Product: syz
[ 1155.647066][ T5726] usb 8-1: Manufacturer: syz
[ 1155.647079][ T5726] usb 8-1: SerialNumber: syz
[ 1155.650266][ T5726] usb 8-1: config 0 descriptor??
[ 1155.710923][T19786] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1155.711013][T19786] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1155.958908][T19786] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1155.958967][T19786] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1156.826138][ T5726] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1156.827968][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3984'.
[ 1156.841669][ T5726] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1156.841697][ T5726] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[ 1156.841884][ T5726] asix 8-1:0.34: probe with driver asix failed with error -61
[ 1157.058324][T19816] device-mapper: table: 248:5: thin-pool: Error opening metadata block device (-ENOENT)
[ 1157.058340][T19816] device-mapper: ioctl: error adding target to table
[ 1157.176923][T19818] device-mapper: ioctl: The device has no table.
[ 1157.644210][ T5726] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1157.989403][ T5726] usb 4-1: Using ep0 maxpacket: 16
[ 1158.115939][ T5726] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1158.178016][ T5726] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1158.178042][ T5726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1158.178054][ T5726] usb 4-1: config 0 has no interface number 0
[ 1158.183361][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1158.183382][ T5726] usb 4-1: Product: syz
[ 1158.183396][ T5726] usb 4-1: Manufacturer: syz
[ 1158.183409][ T5726] usb 4-1: SerialNumber: syz
[ 1158.185291][ T5726] usb 4-1: config 0 descriptor??
[ 1158.190319][ T5726] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 1158.190344][ T5726] uvcvideo 4-1:0.105: No valid video chain found.
[ 1158.593473][   T29] usb 8-1: USB disconnect, device number 15
[ 1158.619706][   T10] usb 4-1: USB disconnect, device number 58
[ 1160.854564][T19855] md: md3 stopped.
[ 1163.877163][   T24] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1163.906322][   T24] usb 2-1: USB disconnect, device number 78
[ 1165.184764][T19875] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1165.194375][T12060] Bluetooth: hci2: unexpected event for opcode 0x2003
[ 1165.212560][   T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1165.273767][T19880] No such timeout policy "syz1"
[ 1165.382813][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1165.383377][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1165.384323][   T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 1165.384343][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1165.384362][   T24] usb 2-1: config 0 has no interface number 0
[ 1165.386362][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1165.386383][   T24] usb 2-1: Product: syz
[ 1165.386397][   T24] usb 2-1: Manufacturer: syz
[ 1165.386412][   T24] usb 2-1: SerialNumber: syz
[ 1165.393180][   T24] usb 2-1: config 0 descriptor??
[ 1165.478039][   T24] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 1165.478071][   T24] uvcvideo 2-1:0.105: No valid video chain found.
[ 1165.625532][   T24] usb 2-1: USB disconnect, device number 79
[ 1167.986223][T19898] mmap: syz.3.4013 (19898) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1168.445553][T19914] fuse: Unknown parameter '0x0000000000000005'
[ 1170.069154][T16090] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[ 1170.333598][T16090] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1170.334242][T16090] usb 8-1: not running at top speed; connect to a high speed hub
[ 1170.334273][T16090] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1170.335258][T16090] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[ 1170.336923][T16090] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.336936][T16090] usb 8-1: Product: syz
[ 1170.336945][T16090] usb 8-1: Manufacturer: syz
[ 1170.336953][T16090] usb 8-1: SerialNumber: syz
[ 1170.611800][    C1] raw-gadget.0 gadget.7: ignoring, device is not running
[ 1170.633907][T16090] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1170.638713][T16090] usb 8-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1170.638745][T16090] usb 8-1: found format II with max.bitrate = 4, frame size=7372
[ 1170.641336][T16090] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1170.807806][T16090] usb 8-1: USB disconnect, device number 16
[ 1170.926676][T19928] udevd[19928]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1171.185806][   T30] audit: type=1400 audit(1792662546.298:1981): avc:  denied  { write } for  pid=19940 comm="syz.1.4028" name="subsystems" dev="configfs" ino=64978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1171.185927][   T30] audit: type=1400 audit(1792662546.298:1982): avc:  denied  { add_name } for  pid=19940 comm="syz.1.4028" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1171.188195][   T30] audit: type=1400 audit(1792662546.298:1983): avc:  denied  { write } for  pid=19940 comm="syz.1.4028" name="subsystems" dev="configfs" ino=64978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1171.725472][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1171.956367][T19953] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1172.068191][T19955] No such timeout policy "syz1"
[ 1172.103861][   T50] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e397e486-94ac-4817-87c9-96bbf018a801.
[ 1172.255399][T19941] nvme nvme0: creating 2 I/O queues.
[ 1172.263140][T19941] blk-mq: failed to allocate request map
[ 1172.263602][T19941] ------------[ cut here ]------------
[ 1172.263611][T19941] timer_delete_sync(&sdp->delay_work) && !rcu_segcblist_empty(&sdp->srcu_cblist)
[ 1172.263623][T19941] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#0: syz.1.4028/19941
[ 1172.294664][T19941] Modules linked in:
[ 1172.298536][T19941] CPU: 0 UID: 0 PID: 19941 Comm: syz.1.4028 Not tainted syzkaller #0 PREEMPT(full) 
[ 1172.308055][T19941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1172.318249][T19941] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30
[ 1172.324151][T19941] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 df 03 00 00 48 8b 83 80 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 9b fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89
[ 1172.343761][T19941] RSP: 0018:ffffc9000e96f9c8 EFLAGS: 00010286
[ 1172.349808][T19941] RAX: ffff8880588890f0 RBX: ffffe8ffffc590c0 RCX: ffffc900058f9000
[ 1172.357771][T19941] RDX: ffffe8ffffc59240 RSI: ffffffff81f711af RDI: ffffe8ffffc59140
[ 1172.366230][T19941] RBP: ffff8880798c3800 R08: 0000000000000005 R09: 00000000ffffffff
[ 1172.374339][T19941] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e574310
[ 1172.382326][T19941] R13: 0000000000000000 R14: ffffffff8e6b60b0 R15: ffff88807e574350
[ 1172.390302][T19941] FS:  00007f5c24f8b6c0(0000) GS:ffff888122930000(0000) knlGS:0000000000000000
[ 1172.399292][T19941] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1172.405914][T19941] CR2: 00007f4700add525 CR3: 0000000059fa1000 CR4: 00000000003526f0
[ 1172.414094][T19941] Call Trace:
[ 1172.417352][T19941]  <TASK>
[ 1172.420304][T19941]  blk_mq_alloc_tag_set+0xdd3/0x1330
[ 1172.425847][T19941]  nvme_alloc_io_tag_set+0x3bc/0x750
[ 1172.431153][T19941]  ? __pfx_nvme_alloc_io_tag_set+0x10/0x10
[ 1172.437057][T19941]  ? nvmet_sq_init+0x250/0x320
[ 1172.441861][T19941]  ? __pfx_nvmet_sq_init+0x10/0x10
[ 1172.446970][T19941]  ? __pfx_nvmf_connect_admin_queue+0x10/0x10
[ 1172.453058][T19941]  ? nvme_loop_init_io_queues+0x12a/0x190
[ 1172.458767][T19941]  ? __pfx_nvme_loop_init_io_queues+0x10/0x10
[ 1172.464868][T19941]  nvme_loop_create_ctrl+0x6bc/0xee0
[ 1172.470154][T19941]  nvmf_dev_write+0x4ee/0xb60
[ 1172.474831][T19941]  vfs_write+0x2aa/0x1050
[ 1172.479139][T19941]  ? __pfx_nvmf_dev_write+0x10/0x10
[ 1172.484333][T19941]  ? lock_acquire+0x1d1/0x380
[ 1172.488987][T19941]  ? __fget_files+0x34/0x3d0
[ 1172.493570][T19941]  ? __pfx_vfs_write+0x10/0x10
[ 1172.498325][T19941]  ? find_held_lock+0x2b/0x80
[ 1172.503010][T19941]  ? __fget_files+0x215/0x3d0
[ 1172.507665][T19941]  ? __fget_files+0x215/0x3d0
[ 1172.512545][T19941]  ? __fget_files+0x21f/0x3d0
[ 1172.517209][T19941]  ksys_write+0x12a/0x250
[ 1172.521521][T19941]  ? __pfx_ksys_write+0x10/0x10
[ 1172.526475][T19941]  do_syscall_64+0x123/0x790
[ 1172.531049][T19941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.536939][T19941] RIP: 0033:0x7f5c2419f559
[ 1172.541335][T19941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1172.560970][T19941] RSP: 002b:00007f5c24f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1172.569385][T19941] RAX: ffffffffffffffda RBX: 00007f5c24425fa0 RCX: 00007f5c2419f559
[ 1172.578127][T19941] RDX: 000000000000001d RSI: 00002000000007c0 RDI: 0000000000000007
[ 1172.586109][T19941] RBP: 00007f5c24236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1172.594073][T19941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1172.602038][T19941] R13: 00007f5c24426038 R14: 00007f5c24425fa0 R15: 00007fff083d7468
[ 1172.609990][T19941]  </TASK>
[ 1172.612998][T19941] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1172.620262][T19941] CPU: 0 UID: 0 PID: 19941 Comm: syz.1.4028 Not tainted syzkaller #0 PREEMPT(full) 
[ 1172.629601][T19941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1172.639627][T19941] Call Trace:
[ 1172.642884][T19941]  <TASK>
[ 1172.645790][T19941]  dump_stack_lvl+0x100/0x190
[ 1172.650450][T19941]  vpanic+0x553/0x970
[ 1172.654402][T19941]  ? __pfx_vpanic+0x10/0x10
[ 1172.658894][T19941]  panic+0xd1/0xe0
[ 1172.662587][T19941]  ? __pfx_panic+0x10/0x10
[ 1172.666982][T19941]  check_panic_on_warn.cold+0x19/0x34
[ 1172.672329][T19941]  ? cleanup_srcu_struct+0x6e4/0xb30
[ 1172.677595][T19941]  __warn.cold+0x191/0x318
[ 1172.682003][T19941]  __report_bug+0x30f/0x440
[ 1172.686487][T19941]  ? cleanup_srcu_struct+0x6e4/0xb30
[ 1172.691811][T19941]  ? __pfx___report_bug+0x10/0x10
[ 1172.696824][T19941]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1172.702438][T19941]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1172.708410][T19941]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1172.713762][T19941]  ? _raw_spin_lock_irqsave+0x52/0x60
[ 1172.719119][T19941]  ? cleanup_srcu_struct+0x6e4/0xb30
[ 1172.724381][T19941]  report_bug+0xb3/0x220
[ 1172.728598][T19941]  ? cleanup_srcu_struct+0x6e4/0xb30
[ 1172.733864][T19941]  handle_bug+0x16a/0x2a0
[ 1172.738175][T19941]  exc_invalid_op+0x17/0x50
[ 1172.742651][T19941]  asm_exc_invalid_op+0x1a/0x20
[ 1172.747481][T19941] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30
[ 1172.753348][T19941] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 df 03 00 00 48 8b 83 80 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 9b fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89
[ 1172.772943][T19941] RSP: 0018:ffffc9000e96f9c8 EFLAGS: 00010286
[ 1172.778998][T19941] RAX: ffff8880588890f0 RBX: ffffe8ffffc590c0 RCX: ffffc900058f9000
[ 1172.786953][T19941] RDX: ffffe8ffffc59240 RSI: ffffffff81f711af RDI: ffffe8ffffc59140
[ 1172.794907][T19941] RBP: ffff8880798c3800 R08: 0000000000000005 R09: 00000000ffffffff
[ 1172.802862][T19941] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807e574310
[ 1172.810826][T19941] R13: 0000000000000000 R14: ffffffff8e6b60b0 R15: ffff88807e574350
[ 1172.818797][T19941]  ? __timer_delete_sync+0x10f/0x1c0
[ 1172.824075][T19941]  ? cleanup_srcu_struct+0x36f/0xb30
[ 1172.829362][T19941]  blk_mq_alloc_tag_set+0xdd3/0x1330
[ 1172.834635][T19941]  nvme_alloc_io_tag_set+0x3bc/0x750
[ 1172.839906][T19941]  ? __pfx_nvme_alloc_io_tag_set+0x10/0x10
[ 1172.845694][T19941]  ? nvmet_sq_init+0x250/0x320
[ 1172.850434][T19941]  ? __pfx_nvmet_sq_init+0x10/0x10
[ 1172.855527][T19941]  ? __pfx_nvmf_connect_admin_queue+0x10/0x10
[ 1172.861575][T19941]  ? nvme_loop_init_io_queues+0x12a/0x190
[ 1172.867280][T19941]  ? __pfx_nvme_loop_init_io_queues+0x10/0x10
[ 1172.873351][T19941]  nvme_loop_create_ctrl+0x6bc/0xee0
[ 1172.878614][T19941]  nvmf_dev_write+0x4ee/0xb60
[ 1172.883267][T19941]  vfs_write+0x2aa/0x1050
[ 1172.887572][T19941]  ? __pfx_nvmf_dev_write+0x10/0x10
[ 1172.892748][T19941]  ? lock_acquire+0x1d1/0x380
[ 1172.897400][T19941]  ? __fget_files+0x34/0x3d0
[ 1172.901967][T19941]  ? __pfx_vfs_write+0x10/0x10
[ 1172.906703][T19941]  ? find_held_lock+0x2b/0x80
[ 1172.911357][T19941]  ? __fget_files+0x215/0x3d0
[ 1172.916018][T19941]  ? __fget_files+0x215/0x3d0
[ 1172.920674][T19941]  ? __fget_files+0x21f/0x3d0
[ 1172.925331][T19941]  ksys_write+0x12a/0x250
[ 1172.929725][T19941]  ? __pfx_ksys_write+0x10/0x10
[ 1172.934554][T19941]  do_syscall_64+0x123/0x790
[ 1172.939300][T19941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.945166][T19941] RIP: 0033:0x7f5c2419f559
[ 1172.949553][T19941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1172.969139][T19941] RSP: 002b:00007f5c24f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1172.977534][T19941] RAX: ffffffffffffffda RBX: 00007f5c24425fa0 RCX: 00007f5c2419f559
[ 1172.985497][T19941] RDX: 000000000000001d RSI: 00002000000007c0 RDI: 0000000000000007
[ 1172.993443][T19941] RBP: 00007f5c24236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1173.001395][T19941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1173.009344][T19941] R13: 00007f5c24426038 R14: 00007f5c24425fa0 R15: 00007fff083d7468
[ 1173.017297][T19941]  </TASK>
[ 1173.020477][T19941] Kernel Offset: disabled
[ 1173.024775][T19941] Rebooting in 86400 seconds..