last executing test programs:

1m47.335041912s ago: executing program 4 (id=520):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$inet6(r0, &(0x7f0000000000)=""/184, 0xb8, 0x160, &(0x7f00000000c0)={0xa, 0x4e20, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)

1m47.069830937s ago: executing program 4 (id=524):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25)
dup(0xffffffffffffffff)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0)

1m45.828482186s ago: executing program 4 (id=528):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xe, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc, 0xe4, 0x2, 0x7c, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

1m45.736649754s ago: executing program 4 (id=530):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00')
pread64(r4, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080)
syz_usb_connect(0x3, 0x4a, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf251ffff700", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="08001f0005000000"], 0x48}}, 0x440088c4)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

1m42.313156999s ago: executing program 4 (id=542):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x4}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020)
write(r0, &(0x7f0000000100)="4a00ffff11003ee0b4", 0x9)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x1d, 0x6, 0x5fec)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
ptrace(0x10, r2)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x4, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r2, 0x1, 0x0)
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0})
prctl$PR_SET_PTRACER(0x59616d61, r2)

1m41.801468862s ago: executing program 4 (id=551):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040801)
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

1m26.433153668s ago: executing program 32 (id=551):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040801)
ioctl$KVM_RUN(r2, 0xae80, 0x6000000)

7.877273226s ago: executing program 0 (id=958):
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
timer_getoverrun(r0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
writev(r2, &(0x7f0000000680)=[{&(0x7f00000001c0)="8bb003ab2a70c8d91e39d45d0add062573dc6fe849ec9984b1a075762d3e20ec9053bb8c62b339598cfabdc09523f3173e69441512f84a5faa2a7c620486b5e58ecdfe6d09c624ed0c7e25d2d1ed1fa76971e86741813bb8c4b5d599448e7811f21befd7521fa6d41a526f35d8f4658cfb0aea7898e099034acca792441d63f88e66e15b8458bdfe3b9f70ab3b303a0de87b529391fb00ea6ec18290d8955a8e8cbf8cbbb9cb318c25552f8f0a9edb4ec1ba9c9bfcadf91d1d645eb09adaeeeef87c11fc2e01b401adab926f45a1e8e1c4aa96601f9a218a4c5a97c6818d32aaeb180d8cfd4f14607e41d072620bf00384c604fe", 0xf4}, {&(0x7f0000000340)="7b106a764a0ee87c1e0edc1de640a7c8b8689c363322a8c91bde39b5bc9fee7360c51fc7e6838f6f5a0f15084346f8a7c55adf1a7430c180093586156bdbe7078ab8832962fae6a474cefb3efbe6fbd2f6c1a58b8f56a8b68047fc7a45ba3e249ce90c65fff165d80ee1ded3508dc82bfefe635748995ec37c58b0b23456079a868b5f64b3f0bb1e13c308da9f1cdd7104edffa05be428f074700302305c24f8ef48403cd1e7a4d36df339", 0xab}, {&(0x7f0000000400)="dde03c0251466a594aca77923549ba7c28318f9d52aeb358e0736f003e7b1dbaaf", 0x21}, {&(0x7f0000000440)="0dcb6d137326039c7591a292c5d54466d05dea8dc5d61cd1fa050f377c7c1abf3e88c585a7e2ebd89244192e9eb7d8571dec9f7f7ff158ce3832e92afff5b9c710965905ca7f0390a587a50029cd8d5a10b47802965265", 0x57}, {&(0x7f00000005c0)="4ccf8039022b40229f0bccbcf196f6d611653dbdcce12c53c4f7f3a318647ef4041595b0b5f7cae72775b56228a86b893add3e64948b1ca89eac849d42314ba8a4b5821742d6bd6a6fddf78a4beb50c71d3d264cdd9e73d98486b94b", 0x5c}], 0x5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000000)='/\x00', 0x800, 0x80, &(0x7f0000000080)={0x7fffffff, 0x5, 0x3, 0x4})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, <r5=>0x0})
mq_notify(r4, &(0x7f0000000180)={0x0, 0x15, 0x4, @tid=r5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
readv(r6, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/242, 0xf2}], 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @random="cd6023509fad"})
ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f00000002c0)={&(0x7f00001df000/0x1000)=nil, 0x1000})

7.090210965s ago: executing program 0 (id=961):
r0 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = dup(r4)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40c04}, 0x1)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}})
ioctl$UBLK_U_CMD_GET_DEV_INFO(r5, 0x80207502, &(0x7f0000000240)={0x0, 0xffff, 0x40, &(0x7f0000000080)})
read$FUSE(r5, &(0x7f0000001e80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000001e00)=@IORING_OP_URING_CMD128=@ublk_cmd_sqes=@ublk_add_dev_sqe={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0xbff, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x12}}})
io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0x0)

6.813035077s ago: executing program 0 (id=964):
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4008094)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(0x0)
socket$rds(0x15, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='mtd0\x00', &(0x7f0000000600), &(0x7f0000000640)='mtd0\x00', 0x5, 0x0)
mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x20)

4.486829572s ago: executing program 0 (id=973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000301010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)

3.852902157s ago: executing program 0 (id=975):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40082, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x6000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x20000)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r5 = open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x4}])
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
sendfile(r8, r7, 0x0, 0x7ffffffd) (async)
sendfile(r8, r7, 0x0, 0x7ffffffd)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9})

3.324955616s ago: executing program 5 (id=979):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async)
setns(0xc9, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000200)="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", 0x1b3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='/dev/loop0,6553', 0xf) (async, rerun: 32)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 32)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x141)
inotify_rm_watch(r2, r3)
r4 = socket(0x8, 0x2, 0x0)
setsockopt(r4, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc05000000000500000000000000000000000000000000000000dc050000000000000000000000000000000000000500"/84, 0x54) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r5 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000300)=""/90, &(0x7f0000000380)=0x5a)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x80, 0x2, 0x158})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

3.220515883s ago: executing program 0 (id=981):
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xa})
syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0)
r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x2b1b1983)

2.792473734s ago: executing program 5 (id=984):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0xd00}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x101}, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503)
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x4000, 0x3, {0x0, 0x0, 0x3}, {0x1, 0xff}, 0xfd}], 0x20)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
msgget$private(0x0, 0x4d2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000019c0)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000001a00)={0x28, 0x4, 0x0, r3, 0x6, 0x1, 0x8})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000040002, 0x0)
ptrace(0x8, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001980)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')

2.632432071s ago: executing program 3 (id=986):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x20, r1, 0xe29, 0x70bd2c, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2.360068648s ago: executing program 3 (id=987):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x4, 0x1}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x154, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x154}}, 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x90d200, 0x8)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0)
statx(r4, &(0x7f0000000100)='./file0\x00', 0x800, 0x7ff, &(0x7f00000002c0))
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x20, r5, 0xe29, 0x70bd2c, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2.247052008s ago: executing program 1 (id=989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0xe067, 0x80, 0x0, 0x77}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeba7, 0x2, 0x1, 0x161}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ca2, 0x20, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb868, 0x40, 0x0, 0x30d}, <r9=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc621, 0x2, 0x3, 0x109}}], 0x4, &(0x7f00000016c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3, 0x2a, 0x0, &(0x7f00000006c0)=@buf_1k="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"}}, &(0x7f0000001740))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200000000a900", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001840), 0x4)
io_uring_register$IORING_UNREGISTER_NAPI(r9, 0x1c, &(0x7f0000001780), 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{r9}, &(0x7f00000002c0), &(0x7f0000000340)='%pB    \x00'}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB="4400000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r11, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)

2.164946116s ago: executing program 3 (id=990):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x890, 0x6, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x30, 0x2, 0x0, 0x0, "ed123b3e9d19472738566ae7b93330fbba371b4d9ee6d5e062e7c412578f7825acea5cfd3b8a153e3ca2be105f7cd4190be1d3813630d3964cad9b502c74cf6f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80)
r0 = socket(0x2b, 0x1, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0xc700, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a)

2.154801614s ago: executing program 2 (id=991):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x254, 0xec000000, 0xca}, {0x277, 0x0, 0xe}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYBLOB="03726f6f746d6f64653d3030303030303030303030304aee3ecb8537f1ff3030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB="2c6713cbaacd726f7570", @ANYRESDEC, @ANYBLOB=',\x00'])
syz_open_procfs(0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)

1.913036815s ago: executing program 5 (id=992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

1.789487159s ago: executing program 2 (id=993):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000002240)={0xb0, 0xfffffff5, 0x3, [{{0x1, 0x1, 0xfffffffffffffff7, 0x6, 0x0, 0x6, {0x5, 0x6, 0x80000000, 0xd, 0x9, 0x100, 0x1, 0xffffff01, 0x200, 0x4000, 0x3, r1, r2, 0x4, 0x1f500}}, {0x2, 0x40, 0x1, 0x0, ':'}}]}, 0xb0)

1.732851266s ago: executing program 5 (id=994):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, {0x6, @broadcast}, 0x16, {0x2, 0x4e22, @multicast1}, 'veth0_macvtap\x00'})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
r2 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0xa, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
userfaultfd(0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085)
r6 = dup2(r5, r5)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0)
read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020)
getpid()
sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="1a000000"], 0x18}, 0x8841)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277})
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x7f, 0x4)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004)

1.661471639s ago: executing program 3 (id=995):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x1ff, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x14)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680))
listxattr(0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4)

1.552879227s ago: executing program 2 (id=996):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0xff0f, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.552507548s ago: executing program 3 (id=997):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x400000, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}})

1.505097161s ago: executing program 3 (id=998):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000002c0)={0x0, 0x80000001, 0x0, 0x5, '\x00', '\x00', '\x00', 0x4, 0x5, 0x5, 0x6, "4ee763cdafe4101b23c5311c62559862"})
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000007c0)={&(0x7f00000000c0), 0x9, &(0x7f0000000600)=[{}, {}], &(0x7f0000000780)})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x4, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@hyper, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r8, 0x7aa, &(0x7f0000000280)={{@host, 0x9}, 0xffffffff, 0x10000})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000180)=0xfffffffd)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r10, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="0036fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

581.552275ms ago: executing program 1 (id=999):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000001002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0)

580.336424ms ago: executing program 2 (id=1000):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefefffffeffffff017c0000040042800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

412.481368ms ago: executing program 1 (id=1001):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x6, @broadcast, 0x4e20, 0x1, 'ovf\x00', 0x8, 0xffffffff, 0x66}, {@rand_addr=0x64010100, 0x4e20, 0x3, 0xd, 0x2, 0x895b}}, 0x44)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80002, 0x0, 0x1}, 0x18)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r1=>0x0)
sched_setscheduler(r1, 0x7, &(0x7f0000000140)=0x9)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'syz_tun\x00', 0x3})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000001c0)=0x3)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000280)={0x80002004})
ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000002c0)={0x3, 0xaf, "68a77f14496ad3416368633ad490fd412a3079f149bc69ee97c0b9759fba7fef4bfb77377490f5a2de72ca0e2e1220e9aaf123b5478e30d00eac44b40dfa59f81e9e593ca9366db5f0a375082ef5e4317abf074e882e136d61d06f878b1d5d62d87fcce64ac476755c0697821603e6589312e9829484e46d97253dfd19879ff6ad39c088e53435f3e04aa88a5c8cf3188228caae57c1e167f0b39cec0c0aabb60ffce910fd82bdddbff4e6e2b99b6a"})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000380)={0x1f, 0x1}, 0x6)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000003c0)={0x1, 0xff, 0x2, 0xc, 0x1, "a02c69cc165f86b589b586749f36b3b4211ec6"})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x10040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000440)={{0x1, 0x2, 0x9, 0x2, 0x5}, 0x6, 0x9e, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffff0dd, 0x81, 0x7f, 0x4a6d})
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000540)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r6, 0x3ba0, &(0x7f00000005c0)={0x48, 0x8, r6, 0x0, 0x9, 0x302031, 0x22, &(0x7f0000000580)="8657163218bebf0ae74021def412621bab60c9c673861b52bfaeaaea674baddf1495", 0x3})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000640))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8001}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x66}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44}, 0x4004000)
sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=@gettaction={0x18c, 0x32, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5689ac3f}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff61de}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x885)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000e80)=@broute={'broute\x00', 0x20, 0x3, 0x3b2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000ac0], 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x45, 0x22f0, 'team0\x00', 'veth0_vlan\x00', 'dummy0\x00', 'vcan0\x00', @link_local, [0xff, 0xff, 0xff, 0xff, 0x0, 0x6f31d23bb13152f8], @random="217b7e7258cd", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0x136, [], [@common=@log={'log\x00', 0x28, {{0x5, "c7f22040bf0313017104e510f62d98c1ccf47130d0f486d461e34757b6a9", 0xc}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x4, 0xfff9, 0x0, 0x0, "55d88be99aefc622a6cb53471a0e5c59110bedd9ff648d6ec82901b491388665835490ea9edc9d8321829b70101a26d18493da31f163977e784e1d8d80fb7211"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x1c, 0x809b, 'macvtap0\x00', 'ip_vti0\x00', 'bond0\x00', 'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff], @local, [0x7f, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0x10}}}}, {0x9, 0x28, 0x88e7, 'veth1\x00', 'pimreg\x00', 'geneve0\x00', 'syzkaller1\x00', @random="647eddb4a363", [0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0xff], 0xce, 0xce, 0x146, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x8, 0x2}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xfc, 0x4, 0x1, 0x2}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x101, 0xb, 0x800, 0x0, "384a18009adfad038deb6a6c21048015cba6eb0006fdd6aca635aecd6a778e67c725090f5213474d657f981131d4c2de931fed4e13b7541c8e8f94d4b9de5739"}}}}]}]}, 0x42a)
r8 = socket$unix(0x1, 0x5, 0x0)
pwritev2(r8, &(0x7f00000010c0)=[{&(0x7f0000000f00)="0539e8e38be29150a9f8a74487463e6c7ed2212ea88bd53f70c9d40b9895e379cc6da4251e84ce5600e01b7242ee080180c655072c1faba55a1338413418f675bd4aaf48331865a417925a88346bd24880b0e7a12e252ed1a2406ab17d9a8c2684ff32352fd16d005409f69ea7681c5c877c104d02e0ced881415d4378a2b07320b56030b262a92bcaf0a917930660db5fcec629d0e74986577c2620d3e516a27fc0e3dce21ce51f32a74d4178f5728c09cfed4906733b", 0xb7}, {&(0x7f0000000fc0)="b896640970d17d83ef6f97a16a88ed8ea49ff026e5ccbd8599d8079d09cc2c46b9951be7c2971bb2b3ac6dda99ec5d3b21cf269433e2b8078a5e3b7a496eced36ecc485e2d5718e34066ad2813e471c0e87f47f89943c971d4c3181b98b60876785f425975a31c50f134b943f5190d794a153483b17cd4f41670ae5c7193b9f0fca0791cbfb5a8aa1ce282f52b761538a88ca766be69ca6f9f064dc514b5548b3c666380771ac4b1ca3bb778ceb4b33bd251171bdc4960cb359e81934f4bb5f76cd9215fb14103736c6e512fb304ef47f703e1206f70dda27949f05410", 0xdd}], 0x2, 0x4, 0x2, 0x11)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000001100)={0xdb, 0x0, 0xb})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r6, <r9=>0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)=r6}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0xb, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x9}, @generic={0x7, 0xe, 0xb, 0x7, 0x1}]}, &(0x7f00000012c0)='GPL\x00', 0x3ff, 0x9a, &(0x7f0000001300)=""/154, 0x40f00, 0x2, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000013c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x2, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480)=[0xffffffffffffffff, r7, r6, 0xffffffffffffffff, r6], &(0x7f00000014c0)=[{0x3, 0x2, 0x7}, {0x1, 0x3, 0x8, 0xb}, {0x5, 0x1, 0x9, 0x1}], 0x10, 0x1}, 0x94)

394.96536ms ago: executing program 2 (id=1002):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0xd00}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x101}, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503)
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x4000, 0x3, {0x0, 0x0, 0x3}, {0x1, 0xff}, 0xfd}], 0x20)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
msgget$private(0x0, 0x4d2)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000019c0)={0xc, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000001a00)={0x28, 0x4, 0x0, r4, 0x6, 0x1, 0x8})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000040002, 0x0)
ptrace(0x8, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001980)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')

359.331036ms ago: executing program 1 (id=1003):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r1, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x254, 0xec000000, 0xca}, {0x277, 0x0, 0xe}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYBLOB="03726f6f746d6f64653d3030303030303030303030304aee3ecb8537f1ff3030302c757365725f69643d", @ANYRESDEC=r0, @ANYBLOB="2c6713cbaacd726f7570", @ANYRESDEC, @ANYBLOB=',\x00'])
syz_open_procfs(0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)

135.58666ms ago: executing program 5 (id=1004):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

133.955351ms ago: executing program 1 (id=1005):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x7ffe}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r3 = dup(r2)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000005)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0xc010)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000001c0), 0x4000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

110.950181ms ago: executing program 2 (id=1006):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0xffff0000, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c)

38.686363ms ago: executing program 1 (id=1007):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async)
r0 = getpid() (async)
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = fsopen(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x578, 0x0, 0xf8, 0xf8, 0x1f0, 0x2c0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x90, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async)
unshare(0x64000600) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) (async)
dup(0xffffffffffffffff) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) (async)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x18}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x31, 0x20, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x3de7ea73aeb2140b, @void}}}}}}}}, 0x32) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r6 = fsmount(r3, 0x0, 0x80)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000001c00)=r0, 0x12)

0s ago: executing program 5 (id=1008):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={0x88, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a, 0x0, 0x9eff}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x69, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2mb:\x8e_\xaa\x9b\xc7\x80\xc3\x91\xe7\xfe\xf3S\xa6\xffg\xbe\x1d\xc1!q\x8a\xbb\xa1\xc6\xb3r#W\x98\xe7:\xf2\x92!\xc8\xfdi\xd2}\xf2\x88\x87\x11M\x1e\b\xf2\xa6\x14\xcf\x9d\xbeX\x9a&?\x98\xe4o\xec\xb2\x1fA.CX\x8f-\x88\xcf\x05\x14\xa1n\x9e\xc3F\xf1\x9ft\f\xe4]'}]}, 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

 dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  176.019212][   T29] audit: type=1400 audit(1786024155.228:716): avc:  denied  { mount } for  pid=7326 comm="syz.0.407" name="/" dev="rpc_pipefs" ino=16783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  176.034290][  T804] usb 4-1: Using ep0 maxpacket: 8
[  176.498394][   T29] audit: type=1400 audit(1786024155.408:717): avc:  denied  { module_request } for  pid=7333 comm="syz.2.411" kmod="crypto-drbg_pr_hmac_sha512-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  176.521841][   T29] audit: type=1400 audit(1786024155.818:718): avc:  denied  { ioctl } for  pid=7324 comm="syz.3.406" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  176.599965][  T804] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  176.844167][  T804] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 152, changing to 7
[  176.866568][  T804] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice= 0.40
[  176.880937][  T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.889937][  T804] usb 4-1: Product: syz
[  176.894477][  T804] usb 4-1: SerialNumber: syz
[  176.918531][   T29] audit: type=1400 audit(1786024155.828:719): avc:  denied  { read write } for  pid=5605 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  177.024168][   T29] audit: type=1400 audit(1786024155.828:720): avc:  denied  { open } for  pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  177.091556][   T29] audit: type=1400 audit(1786024155.828:721): avc:  denied  { ioctl } for  pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  177.140946][   T29] audit: type=1400 audit(1786024155.858:722): avc:  denied  { execmem } for  pid=7348 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  177.150753][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.171685][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.219479][   T29] audit: type=1400 audit(1786024156.008:723): avc:  denied  { mounton } for  pid=7351 comm="syz.2.413" path="/75/trace" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  177.231959][  T804] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  177.368539][  T804] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  177.451478][  T804] usb 4-1: USB disconnect, device number 9
[  177.655459][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.845978][ T4927] Bluetooth: hci2: unexpected event for opcode 0x1408
[  179.362993][ T7428] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 2, id = 0
[  179.377875][ T7427] netlink: 76 bytes leftover after parsing attributes in process `syz.2.437'.
[  179.391728][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'.
[  179.414324][ T5799] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  179.442301][ T7427] hsr_slave_1 (unregistering): left promiscuous mode
[  179.596538][ T5799] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  179.614247][ T5799] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.628561][ T5799] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  179.637904][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  179.645982][ T5799] usb 1-1: SerialNumber: syz
[  179.659291][ T5799] cdc_ether 1-1:1.0: skipping garbage
[  179.666502][ T5799] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  179.675161][ T5799] usb-storage 1-1:1.0: USB Mass Storage device detected
[  179.698571][ T5799] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  179.866311][ T5799] usb 1-1: USB disconnect, device number 13
[  180.032768][   T29] kauditd_printk_skb: 109 callbacks suppressed
[  180.032786][   T29] audit: type=1400 audit(1786024159.998:833): avc:  denied  { shutdown } for  pid=7442 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  180.077182][   T29] audit: type=1400 audit(1786024159.998:834): avc:  denied  { listen } for  pid=7442 comm="syz.1.443" lport=41814 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  180.411191][   T29] audit: type=1400 audit(1786024160.008:835): avc:  denied  { sqpoll } for  pid=7442 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  180.440109][   T29] audit: type=1400 audit(1786024160.148:836): avc:  denied  { connect } for  pid=7440 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  180.459817][   T29] audit: type=1400 audit(1786024160.148:837): avc:  denied  { write } for  pid=7440 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  181.094792][   T29] audit: type=1400 audit(1786024161.078:838): avc:  denied  { ioctl } for  pid=7449 comm="syz.2.444" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17110 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  181.250154][   T29] audit: type=1400 audit(1786024161.228:839): avc:  denied  { create } for  pid=7457 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  181.301937][   T29] audit: type=1400 audit(1786024161.278:840): avc:  denied  { read } for  pid=7463 comm="syz.1.450" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  181.334711][   T29] audit: type=1400 audit(1786024161.278:841): avc:  denied  { open } for  pid=7463 comm="syz.1.450" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  181.361059][   T29] audit: type=1400 audit(1786024161.278:842): avc:  denied  { read append } for  pid=7463 comm="syz.1.450" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  181.524412][ T5799] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  181.637923][ T7480] Invalid ELF header magic: != ELF
[  181.678047][ T5799] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  181.691700][ T5799] usb 4-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  181.706669][ T5799] usb 4-1: Product: syz
[  181.714577][ T5799] usb 4-1: Manufacturer: syz
[  181.717214][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2112 instead
[  181.735342][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xadaa instead
[  181.747901][ T5799] usb 4-1: config 0 descriptor??
[  181.755292][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xeeff instead
[  181.778897][ T5799] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  181.800195][ T5799] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  181.807277][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x269e instead
[  181.809211][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.454'.
[  181.894001][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xdacb instead
[  181.979196][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9f81 instead
[  182.003988][ T7495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7495 comm=syz.2.455
[  182.032963][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xfc67 instead
[  182.073824][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xdad9 instead
[  182.109415][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9724 instead
[  182.143368][ T7484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6df6 instead
[  182.175973][ T7484] jffs2: Further such events for this erase block will not be printed
[  182.206151][ T7484] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  182.225493][ T7484] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  182.617954][ T6174] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  182.777679][ T6174] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  182.793628][ T6174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.821845][ T6174] usb 5-1: Product: syz
[  182.835674][ T6174] usb 5-1: Manufacturer: syz
[  182.847580][ T6174] usb 5-1: SerialNumber: syz
[  182.879012][ T6174] usb 5-1: config 0 descriptor??
[  182.991520][ T6174] usb 5-1: selecting invalid altsetting 3
[  183.016904][ T6174] comedi comedi5: could not set alternate setting 3 in high speed
[  183.051336][ T6174] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  183.093467][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'.
[  183.124630][ T6174] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[  183.192608][ T6174] usb 5-1: USB disconnect, device number 10
[  184.386646][ T5724] usb 4-1: USB disconnect, device number 10
[  184.394508][ T5724] ftdi_sio 4-1:0.0: device disconnected
[  184.731044][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'.
[  184.878204][ T7555] netlink: 'syz.2.469': attribute type 1 has an invalid length.
[  185.233465][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  185.233481][   T29] audit: type=1400 audit(1786024165.208:893): avc:  denied  { execute } for  pid=7571 comm="syz.2.474" name="file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  185.405218][   T29] audit: type=1400 audit(1786024165.388:894): avc:  denied  { ioctl } for  pid=7569 comm="syz.3.473" path="socket:[17378]" dev="sockfs" ino=17378 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  185.490104][   T29] audit: type=1400 audit(1786024165.428:895): avc:  denied  { create } for  pid=7580 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  185.543215][ T4927] Bluetooth: hci3: Malformed Event: 0x02
[  185.553302][   T29] audit: type=1400 audit(1786024165.448:896): avc:  denied  { create } for  pid=7580 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  185.573274][   T29] audit: type=1400 audit(1786024165.508:897): avc:  denied  { connect } for  pid=7580 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  185.608892][   T29] audit: type=1400 audit(1786024165.528:898): avc:  denied  { getopt } for  pid=7571 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  185.680737][   T29] audit: type=1400 audit(1786024165.638:899): avc:  denied  { watch } for  pid=7587 comm="syz.4.478" path="/94/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  185.910945][ T7594] ipt_ECN: cannot use operation on non-tcp rule
[  185.923659][   T29] audit: type=1400 audit(1786024165.708:900): avc:  denied  { write } for  pid=7587 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  186.094342][   T29] audit: type=1400 audit(1786024165.738:901): avc:  denied  { open } for  pid=7586 comm="syz.0.476" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  186.393941][ T7615] openvswitch: netlink: IP tunnel dst address not specified
[  186.544399][ T5724] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  186.862198][   T29] audit: type=1400 audit(1786024166.838:902): avc:  denied  { getopt } for  pid=7621 comm="syz.4.483" lport=39059 faddr=::ffff:10.1.1.0 fport=20130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  186.864481][ T5724] usb 2-1: device descriptor read/64, error -71
[  187.437781][ T5724] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  187.585493][ T5724] usb 2-1: device descriptor read/64, error -71
[  187.707100][ T5724] usb usb2-port1: attempt power cycle
[  187.931213][ T7637] capability: warning: `syz.2.486' uses deprecated v2 capabilities in a way that may be insecure
[  188.075612][ T5724] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  188.150816][ T5724] usb 2-1: device descriptor read/8, error -71
[  188.414683][ T5724] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  188.456833][ T5724] usb 2-1: device descriptor read/8, error -71
[  188.474099][ T7660] fuse: Bad value for 'fd'
[  188.575382][ T5724] usb usb2-port1: unable to enumerate USB device
[  189.864301][ T7681] rdma_op ffff8880272399f0 conn xmit_rdma 0000000000000000
[  190.186430][ T6174] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  190.379761][ T6174] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  190.399866][ T6174] usb 2-1: config 0 has no interface number 0
[  190.419268][ T6174] usb 2-1: config 0 interface 41 has no altsetting 0
[  190.449690][ T6174] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  190.476687][ T6174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.534317][ T6174] usb 2-1: Product: syz
[  190.551882][ T6174] usb 2-1: Manufacturer: syz
[  190.578649][ T6174] usb 2-1: SerialNumber: syz
[  190.623144][ T6174] usb 2-1: config 0 descriptor??
[  190.730710][   T29] kauditd_printk_skb: 82 callbacks suppressed
[  190.730725][   T29] audit: type=1400 audit(1786024170.708:985): avc:  denied  { prog_load } for  pid=7687 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  190.785708][   T29] audit: type=1400 audit(1786024170.748:986): avc:  denied  { perfmon } for  pid=7687 comm="syz.3.503" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  190.879216][   T29] audit: type=1400 audit(1786024170.748:987): avc:  denied  { prog_run } for  pid=7687 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  190.933045][ T7691] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  190.949498][   T29] audit: type=1400 audit(1786024170.928:988): avc:  denied  { map_read map_write } for  pid=7694 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  191.028130][   T29] audit: type=1400 audit(1786024170.948:989): avc:  denied  { read } for  pid=7694 comm="syz.4.505" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  191.100593][   T29] audit: type=1400 audit(1786024170.948:990): avc:  denied  { open } for  pid=7694 comm="syz.4.505" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  191.170902][   T29] audit: type=1400 audit(1786024170.958:991): avc:  denied  { ioctl } for  pid=7694 comm="syz.4.505" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  191.196895][ T7705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7705 comm=syz.3.509
[  191.258596][   T29] audit: type=1400 audit(1786024170.998:992): avc:  denied  { map } for  pid=7696 comm="syz.3.506" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  191.325898][   T29] audit: type=1400 audit(1786024171.048:993): avc:  denied  { ioctl } for  pid=7696 comm="syz.3.506" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  191.393526][   T29] audit: type=1400 audit(1786024171.268:994): avc:  denied  { mounton } for  pid=7708 comm="syz.4.510" path="/105/file0" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  191.596566][ T6174] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  192.890724][ T7742] comedi comedi3: pcl711: I/O base address or length out of range
[  192.996031][ T6174] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  193.031459][ T6174] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  193.070963][ T6174] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  193.113607][ T5739] IPVS: starting estimator thread 0...
[  193.119721][ T6174] usb 2-1: USB disconnect, device number 10
[  193.224310][ T7755] IPVS: using max 38 ests per chain, 91200 per kthread
[  194.236377][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  194.242985][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  194.534343][  T804] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  194.884963][  T804] usb 4-1: Using ep0 maxpacket: 8
[  194.962287][  T804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  195.053958][  T804] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  195.119744][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'.
[  196.479951][  T804] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  196.488188][  T804] usb 4-1: Product: syz
[  196.495375][  T804] usb 4-1: Manufacturer: syz
[  196.508163][  T804] usb 4-1: SerialNumber: syz
[  196.532734][  T804] usb 4-1: can't set config #1, error -71
[  196.543180][  T804] usb 4-1: USB disconnect, device number 11
[  197.131247][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  197.131263][   T29] audit: type=1400 audit(1786024177.108:1017): avc:  denied  { create } for  pid=7808 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  197.161497][   T29] audit: type=1400 audit(1786024177.118:1018): avc:  denied  { write } for  pid=7808 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  197.182620][   T29] audit: type=1400 audit(1786024177.148:1019): avc:  denied  { create } for  pid=7805 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  197.203620][   T29] audit: type=1400 audit(1786024177.158:1020): avc:  denied  { setopt } for  pid=7805 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  197.235987][   T29] audit: type=1400 audit(1786024177.198:1021): avc:  denied  { read } for  pid=7805 comm="syz.0.535" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  197.540948][   T29] audit: type=1400 audit(1786024177.198:1022): avc:  denied  { open } for  pid=7805 comm="syz.0.535" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  197.618680][ T7816] Invalid ELF header type: 3 != 1
[  197.636551][   T29] audit: type=1400 audit(1786024177.288:1023): avc:  denied  { read write } for  pid=7805 comm="syz.0.535" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  197.697351][   T29] audit: type=1400 audit(1786024177.288:1024): avc:  denied  { open } for  pid=7805 comm="syz.0.535" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  197.738363][   T29] audit: type=1400 audit(1786024177.308:1025): avc:  denied  { mounton } for  pid=7805 comm="syz.0.535" path="/106/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  197.763398][   T29] audit: type=1400 audit(1786024177.308:1026): avc:  denied  { mount } for  pid=7805 comm="syz.0.535" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  197.833626][ T7822] netlink: 'syz.3.540': attribute type 28 has an invalid length.
[  197.841558][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.147226][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'.
[  198.327542][ T7846] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  198.406389][ T5739] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  198.570177][ T5739] usb 4-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config
[  198.585407][ T5739] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  198.595651][ T5739] usb 4-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00
[  198.605313][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.831361][ T5739] usb 4-1: string descriptor 0 read error: -71
[  198.856434][ T5739] cdc_phonet 4-1:1.0: probe with driver cdc_phonet failed with error -22
[  198.885855][ T5739] usb 4-1: USB disconnect, device number 12
[  199.884571][ T4927] Bluetooth: hci2: unexpected event for opcode 0x042c
[  200.334306][ T5709] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  200.521889][ T5709] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  200.535383][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.544093][ T5709] usb 2-1: Product: syz
[  200.549083][ T5709] usb 2-1: Manufacturer: syz
[  200.553716][ T5709] usb 2-1: SerialNumber: syz
[  200.645134][ T5724] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  200.889306][ T5724] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  200.926558][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.971469][ T5724] usb 1-1: Product: syz
[  200.993311][ T5724] usb 1-1: Manufacturer: syz
[  201.014889][ T5724] usb 1-1: SerialNumber: syz
[  201.527957][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[  201.537297][ T7880] ifb1: entered promiscuous mode
[  201.689445][ T7900] xt_TPROXY: Can be used only with -p tcp or -p udp
[  201.852565][ T7880] vlan0: entered promiscuous mode
[  201.889408][ T5724] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  201.908199][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.918955][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.976090][ T5724] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  202.553397][   T29] kauditd_printk_skb: 113 callbacks suppressed
[  202.553414][   T29] audit: type=1400 audit(1786024182.518:1140): avc:  denied  { mount } for  pid=7902 comm="syz.2.567" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  202.623458][   T29] audit: type=1400 audit(1786024182.518:1141): avc:  denied  { create } for  pid=7902 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  202.676272][ T7906] team0: entered allmulticast mode
[  202.681691][   T29] audit: type=1400 audit(1786024182.518:1142): avc:  denied  { write } for  pid=7902 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  202.693343][ T7906] team_slave_0: entered allmulticast mode
[  202.709725][ T5709] usb 2-1: USB disconnect, device number 11
[  202.747378][   T29] audit: type=1400 audit(1786024182.598:1143): avc:  denied  { ioctl } for  pid=7878 comm="syz.0.560" path="socket:[18303]" dev="sockfs" ino=18303 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  202.754584][ T7906] team_slave_1: entered allmulticast mode
[  202.789127][ T7909] Option 'dnserror' to dns_resolver key: bad/missing value
[  202.799961][   T29] audit: type=1400 audit(1786024182.638:1144): avc:  denied  { map_create } for  pid=7905 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  202.805347][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.825328][   T29] audit: type=1400 audit(1786024182.638:1145): avc:  denied  { map_read map_write } for  pid=7905 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  202.922537][ T5724] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  202.935302][ T5724] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  202.946853][ T5724] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  202.956336][   T29] audit: type=1400 audit(1786024182.648:1146): avc:  denied  { create } for  pid=7905 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  202.993348][ T5724] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  203.018195][   T29] audit: type=1400 audit(1786024182.648:1147): avc:  denied  { bind } for  pid=7905 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  203.046225][ T5724] usb 1-1: USB disconnect, device number 14
[  203.065373][   T29] audit: type=1400 audit(1786024182.648:1148): avc:  denied  { write } for  pid=7905 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  203.093339][   T29] audit: type=1400 audit(1786024182.648:1149): avc:  denied  { create } for  pid=7905 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  204.424155][ T7947] team0 (unregistering): Port device team_slave_0 removed
[  204.512125][ T7947] team0 (unregistering): Port device team_slave_1 removed
[  204.794608][ T6174] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  205.006733][ T6174] usb 4-1: unable to get BOS descriptor or descriptor too short
[  205.021120][ T6174] usb 4-1: not running at top speed; connect to a high speed hub
[  205.063963][ T6174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.075395][ T6174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.274309][ T6174] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  205.287902][ T6174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.494637][ T6174] usb 4-1: Product: syz
[  205.500642][ T6174] usb 4-1: Manufacturer: syz
[  205.512042][ T6174] usb 4-1: SerialNumber: syz
[  205.793892][ T7958] random: crng reseeded on system resumption
[  206.512816][ T7947] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.160752][ T6174] usb 4-1: 3:0: failed to get current value for ch 1 (-71)
[  207.200653][ T6174] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3)
[  207.476215][ T6174] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3)
[  207.650350][ T7959] Restarting kernel threads ...
[  207.655850][ T7959] Done restarting kernel threads.
[  207.664832][ T6174] usb 4-1: USB disconnect, device number 13
[  207.725198][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  207.725215][   T29] audit: type=1400 audit(1786024187.698:1257): avc:  denied  { unmount } for  pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  207.892281][   T29] audit: type=1400 audit(1786024187.858:1258): avc:  denied  { create } for  pid=7982 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.072670][   T29] audit: type=1400 audit(1786024187.858:1259): avc:  denied  { getopt } for  pid=7982 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.187847][   T29] audit: type=1400 audit(1786024187.858:1260): avc:  denied  { connect } for  pid=7982 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.309139][   T29] audit: type=1400 audit(1786024187.858:1261): avc:  denied  { name_connect } for  pid=7982 comm="syz.1.589" dest=20130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  208.525177][   T29] audit: type=1400 audit(1786024188.028:1262): avc:  denied  { setopt } for  pid=7982 comm="syz.1.589" lport=43209 faddr=::ffff:10.1.1.0 fport=20130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  208.950563][   T29] audit: type=1400 audit(1786024188.028:1263): avc:  denied  { create } for  pid=7971 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  209.185564][   T29] audit: type=1400 audit(1786024188.028:1264): avc:  denied  { read write } for  pid=7971 comm="syz.0.587" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  209.211820][   T29] audit: type=1400 audit(1786024188.028:1265): avc:  denied  { open } for  pid=7971 comm="syz.0.587" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  209.240574][   T29] audit: type=1400 audit(1786024188.038:1266): avc:  denied  { write } for  pid=7971 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  209.900065][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  210.724629][ T5724] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  210.964385][ T5724] usb 2-1: device descriptor read/64, error -71
[  211.264483][ T5724] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  211.464275][ T5724] usb 2-1: device descriptor read/64, error -71
[  211.654961][ T5724] usb usb2-port1: attempt power cycle
[  212.064721][ T5724] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  212.110773][ T8033] xt_TPROXY: Can be used only with -p tcp or -p udp
[  212.164803][ T5724] usb 2-1: device descriptor read/8, error -71
[  212.446031][ T5724] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  212.485069][ T5724] usb 2-1: device descriptor read/8, error -71
[  212.614695][ T5724] usb usb2-port1: unable to enumerate USB device
[  213.037650][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  213.037668][   T29] audit: type=1400 audit(1786024193.018:1299): avc:  denied  { read } for  pid=8050 comm="syz.1.607" name="usbmon6" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  213.216445][   T29] audit: type=1400 audit(1786024193.018:1300): avc:  denied  { open } for  pid=8050 comm="syz.1.607" path="/dev/usbmon6" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  213.314335][ T8052] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  213.356235][   T29] audit: type=1400 audit(1786024193.188:1301): avc:  denied  { ioctl } for  pid=8050 comm="syz.1.607" path="/dev/usbmon6" dev="devtmpfs" ino=740 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  213.479157][   T29] audit: type=1400 audit(1786024193.458:1302): avc:  denied  { create } for  pid=8050 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  213.499906][   T29] audit: type=1400 audit(1786024193.458:1303): avc:  denied  { write } for  pid=8050 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  213.523289][   T29] audit: type=1400 audit(1786024193.458:1304): avc:  denied  { read } for  pid=8050 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  213.599210][   T29] audit: type=1400 audit(1786024193.578:1305): avc:  denied  { read } for  pid=8045 comm="syz.3.606" dev="nsfs" ino=4026533209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  213.738051][   T29] audit: type=1400 audit(1786024193.618:1306): avc:  denied  { open } for  pid=8045 comm="syz.3.606" path="net:[4026533209]" dev="nsfs" ino=4026533209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  213.792536][   T29] audit: type=1400 audit(1786024193.618:1307): avc:  denied  { create } for  pid=8045 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  213.823007][   T29] audit: type=1400 audit(1786024193.748:1308): avc:  denied  { create } for  pid=8057 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  214.244854][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  214.262282][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  214.272682][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  214.290611][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  214.305368][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.527599][   T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.702983][ T8089] netlink: 277 bytes leftover after parsing attributes in process `syz.0.615'.
[  215.833830][   T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.418811][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[  216.430888][ T5615] Bluetooth: hci5: command tx timeout
[  216.458440][ T8114] fuse: Bad value for 'fd'
[  216.466422][   T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.522504][ T5694] IPVS: starting estimator thread 0...
[  216.634288][ T8117] IPVS: using max 42 ests per chain, 100800 per kthread
[  216.722401][   T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.028500][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[  217.260636][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  217.469826][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[  217.483404][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.491646][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.500303][ T8064] bridge_slave_0: entered allmulticast mode
[  217.507876][ T8064] bridge_slave_0: entered promiscuous mode
[  217.540355][ T8149] FAULT_INJECTION: forcing a failure.
[  217.540355][ T8149] name failslab, interval 1, probability 0, space 0, times 0
[  217.557506][ T8149] CPU: 0 UID: 0 PID: 8149 Comm: syz.0.627 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.557536][ T8149] Tainted: [L]=SOFTLOCKUP
[  217.557542][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  217.557552][ T8149] Call Trace:
[  217.557558][ T8149]  <TASK>
[  217.557570][ T8149]  dump_stack_lvl+0x100/0x190
[  217.557596][ T8149]  should_fail_ex.cold+0x5/0xa
[  217.557618][ T8149]  should_failslab+0xc2/0x120
[  217.557640][ T8149]  __kvmalloc_node_noprof+0x116/0x970
[  217.557663][ T8149]  ? seq_read_iter+0x819/0x1270
[  217.557685][ T8149]  seq_read_iter+0x819/0x1270
[  217.557711][ T8149]  seq_read+0x344/0x4d0
[  217.557736][ T8149]  ? __pfx_seq_read+0x10/0x10
[  217.557753][ T8149]  ? lock_acquire+0x1b9/0x370
[  217.557777][ T8149]  ? avc_policy_seqno+0x9/0x20
[  217.557795][ T8149]  ? selinux_file_permission+0x8f/0x6d0
[  217.557828][ T8149]  ? rw_verify_area+0xce/0x6d0
[  217.557851][ T8149]  ? __pfx_seq_read+0x10/0x10
[  217.557868][ T8149]  vfs_read+0x1e4/0xb40
[  217.557897][ T8149]  ? __pfx_vfs_read+0x10/0x10
[  217.557921][ T8149]  ? __fget_files+0x215/0x3d0
[  217.557943][ T8149]  ? __fget_files+0x21f/0x3d0
[  217.557967][ T8149]  ksys_read+0x12a/0x250
[  217.557991][ T8149]  ? __pfx_ksys_read+0x10/0x10
[  217.558025][ T8149]  do_syscall_64+0x115/0x870
[  217.558046][ T8149]  ? clear_bhb_loop+0x40/0x90
[  217.558066][ T8149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.558082][ T8149] RIP: 0033:0x7fa44379e0d9
[  217.558096][ T8149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.558111][ T8149] RSP: 002b:00007fa4445eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  217.558128][ T8149] RAX: ffffffffffffffda RBX: 00007fa443a26090 RCX: 00007fa44379e0d9
[  217.558137][ T8149] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 000000000000000b
[  217.558147][ T8149] RBP: 00007fa4445eb090 R08: 0000000000000000 R09: 0000000000000000
[  217.558160][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.558170][ T8149] R13: 00007fa443a26128 R14: 00007fa443a26090 R15: 00007fff5fd63868
[  217.558195][ T8149]  </TASK>
[  217.569690][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.787159][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.794607][ T8064] bridge_slave_1: entered allmulticast mode
[  217.801926][ T8064] bridge_slave_1: entered promiscuous mode
[  217.915291][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.937048][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.949142][ T8154] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  218.047263][   T29] kauditd_printk_skb: 115 callbacks suppressed
[  218.047279][   T29] audit: type=1400 audit(1786024198.028:1424): avc:  denied  { write } for  pid=8153 comm="syz.1.630" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  218.108100][   T29] audit: type=1400 audit(1786024198.068:1425): avc:  denied  { write } for  pid=8158 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  218.135416][   T29] audit: type=1400 audit(1786024198.068:1426): avc:  denied  { read } for  pid=8158 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  218.167893][   T29] audit: type=1400 audit(1786024198.068:1427): avc:  denied  { ioctl } for  pid=8158 comm="syz.3.632" path="socket:[20903]" dev="sockfs" ino=20903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  218.194426][   T29] audit: type=1400 audit(1786024198.138:1428): avc:  denied  { read } for  pid=8162 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  218.249987][   T29] audit: type=1400 audit(1786024198.138:1429): avc:  denied  { read open } for  pid=8162 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  218.276784][   T46] bridge_slave_1: left allmulticast mode
[  218.304486][   T46] bridge_slave_1: left promiscuous mode
[  218.325131][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.334005][   T29] audit: type=1400 audit(1786024198.138:1430): avc:  denied  { getattr } for  pid=8162 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  218.375117][   T29] audit: type=1400 audit(1786024198.248:1431): avc:  denied  { connect } for  pid=8165 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.428978][   T29] audit: type=1400 audit(1786024198.248:1432): avc:  denied  { write } for  pid=8165 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  218.455947][ T5615] Bluetooth: hci5: command tx timeout
[  218.476951][   T29] audit: type=1400 audit(1786024198.408:1433): avc:  denied  { create } for  pid=8169 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  218.654417][   T46] bridge_slave_0: left allmulticast mode
[  218.674290][   T46] bridge_slave_0: left promiscuous mode
[  218.692594][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.955527][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.972132][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.983186][   T46] bond0 (unregistering): Released all slaves
[  219.002708][   T46] bond1 (unregistering): Released all slaves
[  219.027079][ T8064] team0: Port device team_slave_0 added
[  219.034072][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1
[  219.046145][ T8064] team0: Port device team_slave_1 added
[  219.168846][   T46] : left promiscuous mode
[  219.208948][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.216924][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.244136][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.295599][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.317504][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.357222][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.536627][ T8064] hsr_slave_0: entered promiscuous mode
[  219.559156][ T8064] hsr_slave_1: entered promiscuous mode
[  219.596600][ T8064] debugfs: 'hsr0' already exists in 'hsr'
[  219.615607][ T8064] Cannot create hsr debugfs directory
[  220.535695][ T5615] Bluetooth: hci5: command tx timeout
[  220.653822][ T8236] echo interval is out of bounds
[  220.653822][ T8236] 
[  220.661821][ T8236] CIFS: VFS: echo interval is out of bounds
[  220.804300][ T5709] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  220.850452][ T8241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.651'.
[  220.885106][ T8241] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  220.976745][ T5709] usb 4-1: device descriptor read/64, error -71
[  220.990159][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2
[  221.169299][   T46] hsr_slave_0: left promiscuous mode
[  221.189988][   T46] hsr_slave_1: left promiscuous mode
[  221.206134][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.231655][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.241193][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.250515][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.284323][ T5709] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  221.321176][   T46] veth1_macvtap: left promiscuous mode
[  221.329544][   T46] veth0_macvtap: left promiscuous mode
[  221.342100][   T46] veth1_vlan: left promiscuous mode
[  221.360450][   T46] veth0_vlan: left promiscuous mode
[  221.427544][ T5709] usb 4-1: device descriptor read/64, error -71
[  221.546786][ T5709] usb usb4-port1: attempt power cycle
[  221.754296][ T5694] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  221.885826][   T46] team0 (unregistering): Port device team_slave_1 removed
[  221.907316][   T46] team0 (unregistering): Port device team_slave_0 removed
[  221.918157][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.938126][ T5694] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  221.952039][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.966549][ T5709] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  221.975762][ T5694] usb 2-1: config 0 descriptor??
[  222.004942][ T5709] usb 4-1: device descriptor read/8, error -71
[  222.108695][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3
[  222.240352][ T5694] usbhid 2-1:0.0: can't add hid device: -71
[  222.254796][ T5709] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  222.274599][ T5694] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  222.312142][ T5694] usb 2-1: USB disconnect, device number 16
[  222.324014][ T5709] usb 4-1: device descriptor read/8, error -71
[  222.520077][ T8064] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.533158][ T5709] usb usb4-port1: unable to enumerate USB device
[  222.588235][ T8064] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  222.597620][ T8064] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.616444][ T5615] Bluetooth: hci5: command tx timeout
[  222.647257][ T8064] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  222.729015][ T8064] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.844995][ T5694] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  223.074811][ T5694] usb 2-1: Using ep0 maxpacket: 8
[  223.116277][ T5694] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  223.128953][ T8064] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  223.141996][ T5694] usb 2-1: config 0 has no interface number 0
[  223.151450][ T8064] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  223.152703][   T46] IPVS: stop unused estimator thread 0...
[  223.162169][ T5694] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.220521][ T5694] usb 2-1: config 0 interface 52 has no altsetting 0
[  223.237149][ T8064] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  223.246863][ T5694] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  223.258255][   T29] kauditd_printk_skb: 120 callbacks suppressed
[  223.258817][   T29] audit: type=1400 audit(1786024203.238:1554): avc:  denied  { read } for  pid=8292 comm="syz.0.661" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  223.265013][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.300418][   T29] audit: type=1400 audit(1786024203.238:1555): avc:  denied  { create } for  pid=8064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  223.326071][   T29] audit: type=1400 audit(1786024203.238:1556): avc:  denied  { write } for  pid=8064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  223.393275][ T5694] usb 2-1: config 0 descriptor??
[  223.401287][   T29] audit: type=1400 audit(1786024203.248:1557): avc:  denied  { read } for  pid=8064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  223.529883][   T29] audit: type=1400 audit(1786024203.268:1558): avc:  denied  { open } for  pid=8292 comm="syz.0.661" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  223.637666][   T29] audit: type=1400 audit(1786024203.268:1559): avc:  denied  { create } for  pid=8292 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  223.705644][ T5694] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input12
[  223.844237][ T8315] Invalid ELF header type: 3 != 1
[  224.092869][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.197120][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.515256][   T29] audit: type=1400 audit(1786024203.338:1560): avc:  denied  { execmem } for  pid=8283 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  224.538319][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.539883][   T29] audit: type=1400 audit(1786024203.338:1561): avc:  denied  { mmap_zero } for  pid=8283 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  224.576586][   T29] audit: type=1400 audit(1786024203.368:1562): avc:  denied  { allowed } for  pid=8283 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  224.596472][   T29] audit: type=1400 audit(1786024203.368:1563): avc:  denied  { create } for  pid=8283 comm="syz.2.660" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  224.686466][ T5694] usb 2-1: USB disconnect, device number 17
[  224.789102][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4
[  224.823861][ T8323] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  224.825519][ T8064] 8021q: adding VLAN 0 to HW filter on device team0
[  224.887189][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.894429][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.932591][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.939839][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.020613][ T5615] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  226.273334][ T8064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.509400][ T8384] syzkaller0: entered promiscuous mode
[  226.518470][ T8384] syzkaller0: entered allmulticast mode
[  226.550013][ T8384] netlink: 'syz.3.678': attribute type 1 has an invalid length.
[  226.558526][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  226.627260][ T8388] tc_dump_action: action bad kind
[  226.645070][ T8064] veth0_vlan: entered promiscuous mode
[  226.671738][ T8064] veth1_vlan: entered promiscuous mode
[  226.681569][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'.
[  226.713932][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.679'.
[  226.737842][    T9] usb 1-1: Using ep0 maxpacket: 32
[  226.750830][    T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  226.767835][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.777179][ T8064] veth0_macvtap: entered promiscuous mode
[  226.803872][    T9] usb 1-1: config 0 descriptor??
[  226.819304][ T8064] veth1_macvtap: entered promiscuous mode
[  226.837395][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  226.847686][ T8394] tipc: Started in network mode
[  226.860880][ T8394] tipc: Node identity 12c57b341714, cluster identity 4711
[  226.873132][ T8394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.897803][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.935782][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.955624][ T8400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'.
[  226.995909][ T8392] syzkaller0: mtu less than device minimum
[  227.024370][ T6175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.065758][ T5615] Bluetooth: hci1: Malformed LE Event: 0x0d
[  227.105197][ T6175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.154392][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.195169][ T6175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.396950][    T9] gspca_vc032x: reg_r err -71
[  227.415880][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.430279][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.470338][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.490517][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.513816][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.533558][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.542187][ T6175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.580704][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.611431][ T6175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.621947][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.641400][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.670488][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.687879][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.701745][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.716463][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.739195][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.745611][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.769448][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.780399][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.800719][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.833674][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.853773][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  227.887843][    T9] gspca_vc032x: Unknown sensor...
[  227.909304][    T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  227.945803][    T9] usb 1-1: USB disconnect, device number 15
[  227.989710][ T5709] tipc: Node number set to 97614644
[  228.309557][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  228.309575][   T29] audit: type=1400 audit(1786024208.288:1699): avc:  denied  { map_create } for  pid=8422 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  228.520994][   T29] audit: type=1400 audit(1786024208.498:1700): avc:  denied  { create } for  pid=8428 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  228.698470][   T29] audit: type=1400 audit(1786024208.528:1701): avc:  denied  { bind } for  pid=8428 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  228.719064][   T29] audit: type=1400 audit(1786024208.528:1702): avc:  denied  { write } for  pid=8428 comm="syz.5.691" path="socket:[22728]" dev="sockfs" ino=22728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  228.828259][ T8435] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  229.761678][   T29] audit: type=1400 audit(1786024209.718:1703): avc:  denied  { bind } for  pid=8430 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  229.902032][   T29] audit: type=1400 audit(1786024209.718:1704): avc:  denied  { name_bind } for  pid=8430 comm="syz.2.692" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  229.984337][   T29] audit: type=1400 audit(1786024209.718:1705): avc:  denied  { node_bind } for  pid=8430 comm="syz.2.692" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  230.040157][   T29] audit: type=1400 audit(1786024209.728:1706): avc:  denied  { write } for  pid=8430 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  230.228310][   T29] audit: type=1400 audit(1786024210.058:1707): avc:  denied  { ioctl } for  pid=8438 comm="syz.0.693" path="socket:[22732]" dev="sockfs" ino=22732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  230.726555][   T29] audit: type=1400 audit(1786024210.068:1708): avc:  denied  { execmem } for  pid=8438 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  230.841163][ T8432] netlink: 256 bytes leftover after parsing attributes in process `syz.2.692'.
[  232.053119][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  232.097761][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.197362][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.616699][ T5694] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  233.172849][ T8478] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8482] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8478]
[  233.276499][ T5694] usb 4-1: not running at top speed; connect to a high speed hub
[  233.286504][ T5694] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 164, changing to 4
[  233.310313][ T5694] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  233.340496][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  233.340516][   T29] audit: type=1400 audit(1786024213.318:1726): avc:  denied  { read } for  pid=8477 comm="syz.1.704" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  233.345427][ T5694] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.436970][   T29] audit: type=1400 audit(1786024213.318:1727): avc:  denied  { open } for  pid=8477 comm="syz.1.704" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  233.437321][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.506017][   T29] audit: type=1400 audit(1786024213.408:1728): avc:  denied  { map } for  pid=8477 comm="syz.1.704" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  233.584852][   T29] audit: type=1400 audit(1786024213.448:1729): avc:  denied  { name_bind } for  pid=8483 comm="syz.5.705" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  233.608581][ T5694] usb 4-1: Product: syz
[  233.638257][ T5694] usb 4-1: Manufacturer: syz
[  233.668331][   T29] audit: type=1400 audit(1786024213.448:1730): avc:  denied  { node_bind } for  pid=8483 comm="syz.5.705" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  233.695513][ T5694] usb 4-1: SerialNumber: syz
[  233.728467][   T29] audit: type=1400 audit(1786024213.688:1731): avc:  denied  { ioctl } for  pid=8489 comm="syz.2.706" path="socket:[22865]" dev="sockfs" ino=22865 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  233.919927][ T5694] usb 4-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  233.955616][ T5694] usb 4-1: found format II with max.bitrate = 5, frame size=65535
[  233.968031][   T29] audit: type=1326 audit(1786024213.948:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae3bb9e0d9 code=0x0
[  233.973888][ T5694] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  234.127029][ T5694] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  234.151165][ T5694] usb 4-1: unit 1 not found!
[  234.247365][ T5694] usb 4-1: USB disconnect, device number 18
[  234.315086][ T8511] netlink: 'syz.1.713': attribute type 4 has an invalid length.
[  234.393581][   T29] audit: type=1400 audit(1786024214.368:1733): avc:  denied  { listen } for  pid=8506 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  234.487992][   T29] audit: type=1400 audit(1786024214.398:1734): avc:  denied  { accept } for  pid=8506 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  234.750670][   T29] audit: type=1400 audit(1786024214.728:1735): avc:  denied  { setopt } for  pid=8522 comm="syz.2.716" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  234.779959][ T8523] xt_hashlimit: size too large, truncated to 1048576
[  234.886066][ T8528] bond1: option mode: unable to set because the bond device has slaves
[  234.938821][ T8528] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  234.960846][ T8528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  235.048317][ T8528] tmpfs: User quota block hardlimit too large.
[  235.068060][ T8529] tmpfs: User quota block hardlimit too large.
[  235.104779][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.720'.
[  237.110867][ T5799] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  237.135463][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  237.464870][ T8581] __vm_enough_memory: pid: 8581, comm: syz.2.731, bytes: 4503599627366400 not enough memory for the allocation
[  237.514435][ T5799] usb 6-1: Using ep0 maxpacket: 8
[  237.523161][   T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  237.542162][ T5799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.564571][   T10] usb 2-1: config 0 has no interface number 0
[  237.589464][   T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  237.601069][ T5799] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  237.623592][ T5799] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  237.623622][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.623642][ T5799] usb 6-1: Product: syz
[  237.623657][ T5799] usb 6-1: Manufacturer: syz
[  237.623673][ T5799] usb 6-1: SerialNumber: syz
[  237.628817][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  237.668796][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.679186][   T10] usb 2-1: Product: syz
[  237.683515][   T10] usb 2-1: Manufacturer: syz
[  237.689025][   T10] usb 2-1: SerialNumber: syz
[  237.720272][   T10] usb 2-1: config 0 descriptor??
[  237.741428][   T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  237.838402][ T8581] 9p: Bad value for 'rfdno'
[  238.422504][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  238.422541][   T29] audit: type=1400 audit(1786024218.398:1834): avc:  denied  { create } for  pid=8598 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  238.934703][   T29] audit: type=1400 audit(1786024218.478:1835): avc:  denied  { read write } for  pid=5607 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  239.298991][   T29] audit: type=1400 audit(1786024218.478:1836): avc:  denied  { open } for  pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  239.722571][   T29] audit: type=1400 audit(1786024218.478:1837): avc:  denied  { ioctl } for  pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  239.750007][   T29] audit: type=1400 audit(1786024218.558:1838): avc:  denied  { write } for  pid=8598 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  239.853166][   T29] audit: type=1400 audit(1786024219.728:1839): avc:  denied  { create } for  pid=8611 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  240.146959][   T29] audit: type=1400 audit(1786024219.728:1840): avc:  denied  { search } for  pid=8606 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  240.306441][   T29] audit: type=1400 audit(1786024219.728:1841): avc:  denied  { read } for  pid=8606 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  240.364306][   T29] audit: type=1400 audit(1786024219.728:1842): avc:  denied  { open } for  pid=8606 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  240.461742][   T29] audit: type=1400 audit(1786024219.728:1843): avc:  denied  { getattr } for  pid=8606 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  240.515988][ T5709] usb 2-1: USB disconnect, device number 18
[  240.542866][ T5709] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  240.810752][ T5799] usb 6-1: unit 6 not found!
[  240.864025][ T5799] usb 6-1: USB disconnect, device number 2
[  240.986777][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.882618][ T8645] bridge_slave_0: left allmulticast mode
[  241.909461][ T8645] bridge_slave_0: left promiscuous mode
[  241.921089][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.989956][ T8645] bridge_slave_1: left allmulticast mode
[  241.995780][ T8645] bridge_slave_1: left promiscuous mode
[  242.002515][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.172084][ T8645] bond0: (slave bond_slave_0): Releasing backup interface
[  242.309143][ T8645] bond0: (slave bond_slave_1): Releasing backup interface
[  242.408346][ T8645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  243.452432][   T29] kauditd_printk_skb: 63 callbacks suppressed
[  243.452449][   T29] audit: type=1400 audit(1786024223.428:1907): avc:  denied  { write } for  pid=8634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  243.639883][   T29] audit: type=1400 audit(1786024223.538:1908): avc:  denied  { create } for  pid=8652 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  243.759963][   T29] audit: type=1400 audit(1786024223.578:1909): avc:  denied  { write } for  pid=8671 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  243.849283][   T29] audit: type=1400 audit(1786024223.788:1910): avc:  denied  { perfmon } for  pid=8679 comm="syz.3.747" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  243.940130][   T29] audit: type=1400 audit(1786024223.788:1911): avc:  denied  { prog_run } for  pid=8679 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  244.027287][   T29] audit: type=1400 audit(1786024223.818:1912): avc:  denied  { map_read map_write } for  pid=8678 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  244.111877][   T29] audit: type=1400 audit(1786024224.078:1913): avc:  denied  { create } for  pid=8679 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  244.254268][   T29] audit: type=1400 audit(1786024224.228:1914): avc:  denied  { write } for  pid=8679 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  244.360254][   T29] audit: type=1400 audit(1786024224.278:1915): avc:  denied  { read } for  pid=8679 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  244.608002][   T29] audit: type=1400 audit(1786024224.488:1916): avc:  denied  { read write } for  pid=8691 comm="syz.1.748" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  244.803146][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'.
[  244.863209][ T8700] gtp0: entered allmulticast mode
[  246.019075][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'.
[  246.332103][ T8729] syzkaller0: entered promiscuous mode
[  246.340427][ T8729] syzkaller0: entered allmulticast mode
[  246.420802][ T8733] binder: 8732:8733 ioctl 8010661b 200000000380 returned -22
[  246.434386][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  246.562217][ T8740] 9p: Bad value for 'rfdno'
[  246.596163][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  246.624374][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[  246.630316][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  246.652124][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.667085][   T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  246.679895][   T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  246.693932][   T10] usb 6-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40
[  246.703470][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.715473][   T10] usb 6-1: Product: syz
[  246.719737][   T10] usb 6-1: Manufacturer: syz
[  246.735519][   T10] usb 6-1: SerialNumber: syz
[  246.746060][ T5724] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  246.914285][ T5724] usb 1-1: Using ep0 maxpacket: 8
[  246.933046][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.944558][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.963243][ T5724] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  247.006054][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  247.032708][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  247.650856][ T5724] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.668608][ T5724] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  247.679558][   T10] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor
[  247.679796][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.724120][   T10] usb 6-1: 1:1 : format type 50 is not supported yet
[  247.744317][   T10] usb 6-1: 0:2 : does not exist
[  247.769256][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  247.813305][   T10] usb 6-1: USB disconnect, device number 3
[  247.918916][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.966663][ T5724] usb 1-1: GET_CAPABILITIES returned 0
[  247.984375][ T5724] usbtmc 1-1:16.0: can't read capabilities
[  248.540846][ T5615] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  248.541478][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.770'.
[  248.572716][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  248.572733][   T29] audit: type=1400 audit(1786024228.548:2020): avc:  denied  { write } for  pid=8766 comm="syz.3.771" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  248.676518][   T29] audit: type=1400 audit(1786024228.578:2021): avc:  denied  { write } for  pid=8737 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  248.717801][ T8765] Driver unsupported XDP return value 0 on prog  (id 62) dev N/A, expect packet loss!
[  248.740815][   T29] audit: type=1400 audit(1786024228.608:2022): avc:  denied  { watch } for  pid=8754 comm="syz.1.766" path="/146" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  248.780800][ T5615] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  248.790406][ T5615] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  248.828844][   T29] audit: type=1400 audit(1786024228.638:2023): avc:  denied  { map_read map_write } for  pid=8764 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  248.849411][ T8772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.772'.
[  248.986342][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2112 instead
[  249.017295][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'.
[  249.035215][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xadaa instead
[  249.064611][   T29] audit: type=1400 audit(1786024228.968:2024): avc:  denied  { ioctl } for  pid=8773 comm="syz.1.773" path="socket:[23387]" dev="sockfs" ino=23387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  249.095942][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xeeff instead
[  249.175436][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x269e instead
[  249.175812][   T29] audit: type=1400 audit(1786024229.038:2025): avc:  denied  { getopt } for  pid=8737 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  249.693370][   T29] audit: type=1400 audit(1786024229.038:2026): avc:  denied  { connect } for  pid=8737 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  249.734088][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xdacb instead
[  249.757918][   T29] audit: type=1400 audit(1786024229.118:2027): avc:  denied  { setopt } for  pid=8777 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  249.790395][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9f81 instead
[  249.803841][   T29] audit: type=1400 audit(1786024229.118:2028): avc:  denied  { append } for  pid=8780 comm="syz.3.774" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  249.826775][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xfc67 instead
[  249.826803][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xdad9 instead
[  249.826820][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9724 instead
[  249.826837][ T8768] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6df6 instead
[  249.826854][ T8768] jffs2: Further such events for this erase block will not be printed
[  249.827160][ T8768] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  249.838160][   T29] audit: type=1400 audit(1786024229.628:2029): avc:  denied  { read } for  pid=8773 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  249.918687][ T8768] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  251.032917][ T5694] usb 1-1: USB disconnect, device number 16
[  251.184727][ T5724] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  251.429699][ T5724] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  251.547762][ T5724] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  251.581955][ T5724] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  251.623256][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.761644][ T8821] xt_hashlimit: max too large, truncated to 1048576
[  251.801849][ T8809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  251.846466][ T5724] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  252.123787][ T5694] usb 4-1: USB disconnect, device number 19
[  253.515430][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  253.649771][   T29] kauditd_printk_skb: 116 callbacks suppressed
[  253.649790][   T29] audit: type=1400 audit(1786024233.628:2146): avc:  denied  { map_read map_write } for  pid=8863 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  253.684661][   T10] usb 1-1: Using ep0 maxpacket: 32
[  253.696884][   T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  253.712270][   T29] audit: type=1400 audit(1786024233.628:2147): avc:  denied  { create } for  pid=8866 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  253.716663][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.783579][   T10] usb 1-1: Product: syz
[  253.793758][   T10] usb 1-1: Manufacturer: syz
[  253.807500][   T10] usb 1-1: SerialNumber: syz
[  253.813969][   T29] audit: type=1400 audit(1786024233.788:2148): avc:  denied  { create } for  pid=8868 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  253.837185][   T29] audit: type=1400 audit(1786024233.788:2149): avc:  denied  { setopt } for  pid=8868 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  253.838971][   T10] usb 1-1: config 0 descriptor??
[  253.891979][   T29] audit: type=1400 audit(1786024233.868:2150): avc:  denied  { read write } for  pid=8870 comm="syz.3.803" name="video2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  253.975780][   T29] audit: type=1400 audit(1786024233.918:2151): avc:  denied  { open } for  pid=8870 comm="syz.3.803" path="/dev/video2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  254.008055][   T29] audit: type=1400 audit(1786024233.948:2152): avc:  denied  { ioctl } for  pid=8870 comm="syz.3.803" path="/dev/video2" dev="devtmpfs" ino=935 ioctlcmd=0x5659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  254.050239][ T8876] netlink: 'syz.2.805': attribute type 4 has an invalid length.
[  254.211207][   T10] airspy 1-1:0.0: usb_control_msg() failed -71 request 09
[  254.243272][   T29] audit: type=1400 audit(1786024234.088:2153): avc:  denied  { mmap_zero } for  pid=8866 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  254.265966][   T29] audit: type=1400 audit(1786024234.148:2154): avc:  denied  { map } for  pid=8866 comm="syz.1.800" path="socket:[24759]" dev="sockfs" ino=24759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  254.296867][   T10] airspy 1-1:0.0: Could not detect board
[  254.305787][   T10] airspy 1-1:0.0: probe with driver airspy failed with error -71
[  254.337726][   T10] usb 1-1: USB disconnect, device number 17
[  254.447591][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'.
[  254.460307][   T29] audit: type=1400 audit(1786024234.438:2155): avc:  denied  { mount } for  pid=8880 comm="syz.2.806" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  254.810032][ T8888] No such timeout policy " "
[  254.825074][ T8888] netlink: Failed to associated timeout policy ' '
[  255.244875][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  255.326171][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2112 instead
[  255.352373][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xadaa instead
[  255.393731][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xeeff instead
[  255.485298][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x269e instead
[  255.539666][    T9] usb 2-1: Using ep0 maxpacket: 32
[  255.587125][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xdacb instead
[  255.634277][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9f81 instead
[  255.637680][    T9] usb 2-1: config 16 interface 0 has no altsetting 0
[  255.659500][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xfc67 instead
[  255.795840][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xdad9 instead
[  255.811247][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  255.817777][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  255.944013][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9724 instead
[  255.974250][ T8892] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6df6 instead
[  256.124384][ T8892] jffs2: Further such events for this erase block will not be printed
[  256.164500][ T8892] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  256.322630][ T8892] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  256.354081][    T9] usb 2-1: New USB device found, idVendor=07ca, idProduct=a805, bcdDevice=2d.9e
[  256.419601][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.471388][    T9] usb 2-1: Product: syz
[  256.521493][    T9] usb 2-1: Manufacturer: syz
[  256.546695][    T9] usb 2-1: SerialNumber: syz
[  257.943215][ T8925] serio: Serial port ptm0
[  257.956502][ T8927] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  258.422963][ T8930] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  258.432596][ T8930] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  258.441176][ T8930] overlayfs: missing 'lowerdir'
[  259.115300][    T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  259.125183][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  259.125201][   T29] audit: type=1400 audit(1786024239.088:2184): avc:  denied  { write } for  pid=8938 comm="syz.2.823" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  259.632571][ T5615] Bluetooth: hci4: unexpected event for opcode 0x2002
[  259.652328][    T9] dvb_usb_af9015 2-1:16.0: probe with driver dvb_usb_af9015 failed with error -22
[  259.668896][    T9] usb 2-1: USB disconnect, device number 19
[  259.671109][   T29] audit: type=1400 audit(1786024239.138:2185): avc:  denied  { setopt } for  pid=8931 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  259.671156][   T29] audit: type=1400 audit(1786024239.138:2186): avc:  denied  { bind } for  pid=8931 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  259.671192][   T29] audit: type=1400 audit(1786024239.138:2187): avc:  denied  { name_bind } for  pid=8931 comm="syz.3.821" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  259.671229][   T29] audit: type=1400 audit(1786024239.138:2188): avc:  denied  { node_bind } for  pid=8931 comm="syz.3.821" saddr=fc02:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  259.671267][   T29] audit: type=1400 audit(1786024239.138:2189): avc:  denied  { write } for  pid=8931 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  259.671302][   T29] audit: type=1400 audit(1786024239.138:2190): avc:  denied  { connect } for  pid=8931 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  259.671339][   T29] audit: type=1400 audit(1786024239.138:2191): avc:  denied  { name_connect } for  pid=8931 comm="syz.3.821" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  259.676936][   T29] audit: type=1400 audit(1786024239.658:2192): avc:  denied  { read } for  pid=8944 comm="syz.5.826" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  259.677260][   T29] audit: type=1400 audit(1786024239.658:2193): avc:  denied  { open } for  pid=8944 comm="syz.5.826" path="/24/dev/mapper/control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  259.679124][ T8945] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  260.011610][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'.
[  261.661865][ T8976] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  261.670661][ T8976] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  261.679428][ T8976] overlayfs: missing 'lowerdir'
[  263.376914][ T9019] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  263.693360][ T9019] 8021q: adding VLAN 0 to HW filter on device bond2
[  264.185396][   T29] kauditd_printk_skb: 130 callbacks suppressed
[  264.185416][   T29] audit: type=1400 audit(1786024244.078:2321): avc:  denied  { read } for  pid=9015 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.491520][   T29] audit: type=1400 audit(1786024244.198:2325): avc:  denied  { ioctl } for  pid=9035 comm="syz.0.853" path="socket:[24501]" dev="sockfs" ino=24501 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.530214][   T29] audit: type=1400 audit(1786024244.318:2326): avc:  denied  { read write } for  pid=9035 comm="syz.0.853" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  264.593518][ T9027] bond2: (slave veth0_to_bond): making interface the new active one
[  264.641188][   T29] audit: type=1400 audit(1786024244.348:2327): avc:  denied  { mounton } for  pid=9029 comm="syz.5.852" path="/28/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  264.685186][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  264.751221][   T29] audit: type=1400 audit(1786024244.368:2328): avc:  denied  { mount } for  pid=9029 comm="syz.5.852" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  264.817066][   T29] audit: type=1400 audit(1786024244.418:2329): avc:  denied  { open } for  pid=9035 comm="syz.0.853" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  264.861264][   T29] audit: type=1400 audit(1786024244.418:2330): avc:  denied  { ioctl } for  pid=9035 comm="syz.0.853" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  264.874816][    T9] usb 1-1: Using ep0 maxpacket: 16
[  264.887366][   T29] audit: type=1400 audit(1786024244.538:2331): avc:  denied  { ioctl } for  pid=9035 comm="syz.0.853" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  264.927719][   T29] audit: type=1400 audit(1786024244.558:2332): avc:  denied  { module_request } for  pid=9029 comm="syz.5.852" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  264.949431][ T9027] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  264.952710][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  264.993013][    T9] usb 1-1: config 1 has an invalid interface number: 237 but max is 0
[  264.998509][ T9016] syz.1.848 (9016): drop_caches: 2
[  265.019708][   T29] audit: type=1400 audit(1786024244.708:2333): avc:  denied  { read } for  pid=9029 comm="syz.5.852" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  265.092494][    T9] usb 1-1: config 1 has no interface number 0
[  265.118749][    T9] usb 1-1: config 1 interface 237 has no altsetting 0
[  265.160953][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  265.198763][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.213055][    T9] usb 1-1: Product: syz
[  265.218724][    T9] usb 1-1: Manufacturer: syz
[  265.228789][    T9] usb 1-1: SerialNumber: syz
[  265.435851][   T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  265.550216][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.625693][ T5724] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  265.663454][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.694455][   T24] usb 4-1: device descriptor read/64, error -71
[  265.799650][    T9] usb 1-1: USB disconnect, device number 18
[  265.861212][ T5724] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  265.891357][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.920613][ T5724] usb 2-1: Product: syz
[  265.935422][ T5724] usb 2-1: Manufacturer: syz
[  265.947132][ T9068] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5611] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9068]
[  265.967761][ T5724] usb 2-1: SerialNumber: syz
[  265.984812][ T5724] usb 2-1: config 0 descriptor??
[  266.008060][ T5724] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 020
[  266.019549][   T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  266.174417][   T24] usb 4-1: device descriptor read/64, error -71
[  266.295775][   T24] usb usb4-port1: attempt power cycle
[  266.441012][ T9071] netlink: 'syz.0.864': attribute type 10 has an invalid length.
[  266.449695][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.864'.
[  266.494725][ T9059] netlink: 148 bytes leftover after parsing attributes in process `syz.1.862'.
[  266.644403][   T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  266.681030][   T24] usb 4-1: device descriptor read/8, error -71
[  267.083581][ T9082] Invalid argument reading file caps for ./file0
[  267.219473][ T9082] gadgetfs: bound to dummy_udc driver
[  267.330124][ T5724]  (null): failure reading functionality
[  267.350115][ T5724] i2c i2c-1: failure reading functionality
[  267.370215][ T5724] i2c i2c-1: connected i2c-tiny-usb device
[  267.381777][ T5724] usb 2-1: USB disconnect, device number 20
[  267.427307][   T24] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  267.474819][   T24] usb 4-1: device descriptor read/8, error -71
[  267.520945][ T9076] gadgetfs: suspended from state 2
[  267.588942][ T5739] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  267.608629][   T24] usb usb4-port1: unable to enumerate USB device
[  267.690980][ T9084] wireguard0: entered promiscuous mode
[  267.705763][ T9084] wireguard0: entered allmulticast mode
[  268.573962][ T9100] ip_tables: iptables: counters copy to user failed while replacing table
[  269.202320][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  269.202337][   T29] audit: type=1400 audit(1786024249.178:2462): avc:  denied  { read write } for  pid=9101 comm="syz.1.873" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  269.234437][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'.
[  269.290217][   T29] audit: type=1400 audit(1786024249.178:2463): avc:  denied  { open } for  pid=9101 comm="syz.1.873" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  269.416059][   T29] audit: type=1400 audit(1786024249.228:2464): avc:  denied  { prog_load } for  pid=9104 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  269.650501][   T29] audit: type=1400 audit(1786024249.228:2465): avc:  denied  { bpf } for  pid=9104 comm="syz.5.874" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  269.840523][   T29] audit: type=1400 audit(1786024249.298:2466): avc:  denied  { module_request } for  pid=9101 comm="syz.1.873" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  270.552401][ T5739] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  270.868429][   T29] audit: type=1400 audit(1786024249.348:2467): avc:  denied  { allowed } for  pid=9104 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  271.338136][ T5739] usb 4-1: device descriptor read/64, error -71
[  272.178698][   T29] audit: type=1400 audit(1786024249.378:2468): avc:  denied  { read } for  pid=9104 comm="syz.5.874" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  272.292494][ T9116] Bluetooth: hci0: Frame reassembly failed (-90)
[  272.302800][ T5739] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  272.363343][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  272.396508][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  272.403790][   T29] audit: type=1400 audit(1786024249.378:2469): avc:  denied  { open } for  pid=9104 comm="syz.5.874" path="net:[4026532783]" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  272.444509][   T29] audit: type=1400 audit(1786024249.588:2470): avc:  denied  { create } for  pid=9101 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  272.468099][   T29] audit: type=1400 audit(1786024249.798:2471): avc:  denied  { create } for  pid=9111 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  272.497673][ T5739] usb 4-1: device descriptor read/64, error -71
[  272.616519][ T5739] usb usb4-port1: attempt power cycle
[  272.968776][ T5739] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  273.091747][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'.
[  273.160747][ T5739] usb 4-1: device descriptor read/8, error -71
[  273.213320][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'.
[  274.088787][ T9199] No such timeout policy "syz1"
[  274.383589][ T5615] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  274.584503][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  274.584520][   T29] audit: type=1400 audit(1786024254.568:2525): avc:  denied  { ioctl } for  pid=9198 comm="syz.1.891" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26738 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  274.617711][ T9203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.627556][ T9203] IPv6: NLM_F_CREATE should be set when creating new route
[  274.634836][ T9203] IPv6: NLM_F_CREATE should be set when creating new route
[  274.737345][   T29] audit: type=1400 audit(1786024254.678:2526): avc:  denied  { read } for  pid=9202 comm="syz.5.893" name="event1" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  274.768989][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  274.819355][   T29] audit: type=1400 audit(1786024254.678:2527): avc:  denied  { open } for  pid=9202 comm="syz.5.893" path="/dev/input/event1" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  274.876308][   T29] audit: type=1400 audit(1786024254.678:2528): avc:  denied  { ioctl } for  pid=9202 comm="syz.5.893" path="/dev/input/event1" dev="devtmpfs" ino=920 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  274.927272][   T29] audit: type=1400 audit(1786024254.678:2529): avc:  denied  { read write } for  pid=9202 comm="syz.5.893" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  274.952638][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  274.983795][   T29] audit: type=1400 audit(1786024254.678:2530): avc:  denied  { open } for  pid=9202 comm="syz.5.893" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  275.044137][   T29] audit: type=1400 audit(1786024254.678:2532): avc:  denied  { ioctl } for  pid=9202 comm="syz.5.893" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  275.070219][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  275.240404][   T29] audit: type=1400 audit(1786024254.678:2531): avc:  denied  { map } for  pid=9191 comm="syz.3.890" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  275.264286][   T29] audit: type=1400 audit(1786024254.748:2533): avc:  denied  { perfmon } for  pid=9205 comm="syz.0.894" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  275.296967][   T29] audit: type=1400 audit(1786024254.768:2534): avc:  denied  { prog_run } for  pid=9205 comm="syz.0.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  275.331868][   T24] usb 6-1: config 7 has an invalid interface number: 223 but max is 0
[  275.380598][   T24] usb 6-1: config 7 has no interface number 0
[  275.473923][   T24] usb 6-1: too many endpoints for config 7 interface 223 altsetting 7: 36, using maximum allowed: 30
[  276.112156][   T24] usb 6-1: config 7 interface 223 altsetting 7 has an endpoint descriptor with address 0x52, changing to 0x2
[  276.164275][   T24] usb 6-1: config 7 interface 223 altsetting 7 endpoint 0x2 has invalid maxpacket 60846, setting to 64
[  276.190386][   T24] usb 6-1: config 7 interface 223 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  276.218776][   T24] usb 6-1: config 7 interface 223 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 36
[  276.264254][   T24] usb 6-1: config 7 interface 223 has no altsetting 0
[  276.289566][   T24] usb 6-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16
[  276.469963][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.971418][   T24] usb 6-1: Product: syz
[  276.975728][   T24] usb 6-1: Manufacturer: syz
[  276.980373][   T24] usb 6-1: SerialNumber: syz
[  277.831968][   T24] usb 6-1: can't set config #7, error -71
[  277.888063][   T24] usb 6-1: USB disconnect, device number 4
[  277.927750][ T9242] binfmt_misc: register: failed to install interpreter file ./file0
[  279.625448][ T9269] netlink: 'syz.1.910': attribute type 2 has an invalid length.
[  279.767382][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  279.767435][   T29] audit: type=1400 audit(1786024259.698:2588): avc:  denied  { write } for  pid=9265 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  279.906674][ T9271] ima: policy update completed
[  280.046072][ T9269] : entered promiscuous mode
[  280.180358][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.911'.
[  280.250983][   T29] audit: type=1400 audit(1786024259.778:2589): avc:  denied  { mounton } for  pid=9265 comm="syz.1.910" path="/174/security" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  280.528041][   T29] audit: type=1400 audit(1786024259.788:2590): avc:  denied  { mount } for  pid=9265 comm="syz.1.910" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  280.584823][ T9270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.911'.
[  280.882200][   T29] audit: type=1807 audit(1786024259.878:2591): action=measure res=1
[  280.990631][   T29] audit: type=1802 audit(1786024259.888:2592): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.1.910" res=1 errno=0
[  281.086027][   T29] audit: type=1400 audit(1786024260.398:2593): avc:  denied  { create } for  pid=9267 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  281.188880][   T29] audit: type=1400 audit(1786024261.138:2594): avc:  denied  { shutdown } for  pid=9274 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  281.210741][   T29] audit: type=1400 audit(1786024261.178:2595): avc:  denied  { read } for  pid=9274 comm="syz.3.912" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  281.294856][ T9276] UBIFS error (pid: 9276): cannot open "ubi0_0", error -19
[  281.341273][   T29] audit: type=1400 audit(1786024261.178:2596): avc:  denied  { open } for  pid=9274 comm="syz.3.912" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  281.432424][   T29] audit: type=1400 audit(1786024261.198:2597): avc:  denied  { ioctl } for  pid=9274 comm="syz.3.912" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  281.913803][ T9289] netlink: 64 bytes leftover after parsing attributes in process `syz.2.918'.
[  283.064323][ T9299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  283.137701][ T9303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.923'.
[  283.546718][ T9315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.923'.
[  284.314428][ T5710] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  284.855775][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.903096][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  284.903114][   T29] audit: type=1400 audit(1786024264.878:2648): avc:  denied  { mount } for  pid=9320 comm="syz.2.926" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  284.934515][ T5710] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  284.953101][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.987727][ T5710] usb 2-1: config 0 descriptor??
[  284.998650][   T29] audit: type=1400 audit(1786024264.958:2649): avc:  denied  { create } for  pid=9320 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  285.044393][   T29] audit: type=1400 audit(1786024264.958:2650): avc:  denied  { setopt } for  pid=9320 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  285.096178][   T29] audit: type=1800 audit(1786024264.998:2651): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143490 res=0 errno=0
[  285.167564][   T29] audit: type=1800 audit(1786024264.998:2652): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=143519 res=0 errno=0
[  285.237636][   T29] audit: type=1800 audit(1786024264.998:2653): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=143497 res=0 errno=0
[  285.276452][ T5710] usbhid 2-1:0.0: can't add hid device: -71
[  285.290033][ T5710] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  285.339345][   T29] audit: type=1800 audit(1786024265.008:2654): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=143498 res=0 errno=0
[  285.361442][ T5710] usb 2-1: USB disconnect, device number 21
[  285.442919][   T29] audit: type=1800 audit(1786024265.008:2655): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=143499 res=0 errno=0
[  285.532844][   T29] audit: type=1400 audit(1786024265.128:2656): avc:  denied  { read } for  pid=9332 comm="syz.0.929" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  285.627777][   T29] audit: type=1400 audit(1786024265.128:2657): avc:  denied  { open } for  pid=9332 comm="syz.0.929" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  285.824362][ T5710] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  285.987161][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.005912][ T5710] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  286.036317][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.074527][ T5710] usb 2-1: config 0 descriptor??
[  286.552203][ T9366] netlink: 'syz.0.936': attribute type 3 has an invalid length.
[  286.644058][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.665222][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.972349][ T9371] FAT-fs (mtdblock0): invalid media value (0x9f)
[  287.001280][ T9371] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[  287.305210][ T5710] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  287.337195][ T5710] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  287.361678][ T9376] raw_sendmsg: syz.0.939 forgot to set AF_INET. Fix it!
[  287.747569][ T5710] usb 2-1: USB disconnect, device number 22
[  287.747656][    C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  288.555592][ T9390] comedi comedi3: No hardware detected at I/O base 0x3c4
[  288.590388][ T5710] lg-g15 0003:046D:C21C.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  288.620496][ T5710] lg-g15 0003:046D:C21C.0002: Error getting backlight brightness: -5
[  288.671942][ T5710] lg-g15 0003:046D:C21C.0002: probe with driver lg-g15 failed with error -5
[  288.871639][ T9391] fido_id[9391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  288.872316][ T9396] binder: 9395:9396 ioctl c0306201 0 returned -14
[  288.912556][ T9398] Invalid option length (1047478) for dns_resolver key
[  289.908130][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  289.908163][   T29] audit: type=1400 audit(1786024269.878:2746): avc:  denied  { map_create } for  pid=9412 comm="syz.3.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  290.340677][   T29] audit: type=1400 audit(1786024269.878:2747): avc:  denied  { read } for  pid=9412 comm="syz.3.950" name="sda1" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  290.559793][   T29] audit: type=1400 audit(1786024269.888:2748): avc:  denied  { open } for  pid=9412 comm="syz.3.950" path="/dev/sda1" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  290.586047][   T29] audit: type=1400 audit(1786024269.888:2749): avc:  denied  { ioctl } for  pid=9412 comm="syz.3.950" path="/dev/sda1" dev="devtmpfs" ino=722 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.341953][   T29] audit: type=1400 audit(1786024269.988:2750): avc:  denied  { read } for  pid=9414 comm="syz.1.951" dev="nsfs" ino=4026532787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  291.795090][   T29] audit: type=1400 audit(1786024269.998:2751): avc:  denied  { open } for  pid=9414 comm="syz.1.951" path="ipc:[4026532787]" dev="nsfs" ino=4026532787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  291.895129][   T29] audit: type=1400 audit(1786024270.278:2752): avc:  denied  { write } for  pid=8064 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.945792][   T29] audit: type=1400 audit(1786024270.358:2753): avc:  denied  { create } for  pid=9420 comm="syz.5.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  292.047947][   T29] audit: type=1400 audit(1786024270.368:2754): avc:  denied  { read } for  pid=9420 comm="syz.5.953" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  292.152282][   T29] audit: type=1400 audit(1786024270.368:2755): avc:  denied  { open } for  pid=9420 comm="syz.5.953" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  292.275138][ T9442] comedi comedi0: comedi_config --init_data is deprecated
[  293.102376][ T9453] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  293.244272][ T5709] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  293.484447][ T5709] usb 4-1: Using ep0 maxpacket: 32
[  293.626004][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.666608][ T5709] usb 4-1: config 0 has no interfaces?
[  294.038970][ T5709] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  294.063184][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.099268][ T5709] usb 4-1: config 0 descriptor??
[  294.197091][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'.
[  294.443134][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2112 instead
[  294.647604][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xadaa instead
[  294.661554][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xeeff instead
[  294.708314][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x269e instead
[  294.722343][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xdacb instead
[  294.739494][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9f81 instead
[  294.753911][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'.
[  294.764061][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xfc67 instead
[  294.777466][ T9476] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  294.799292][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xdad9 instead
[  294.847530][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9724 instead
[  294.860755][ T9466] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6df6 instead
[  294.909786][ T9466] jffs2: Further such events for this erase block will not be printed
[  294.932989][ T9476] bond2 (unregistering): Released all slaves
[  294.989065][ T9466] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  295.009593][ T9466] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  295.097811][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  295.097843][   T29] audit: type=1400 audit(1786024275.078:2870): avc:  denied  { create } for  pid=9483 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  295.125668][ T5739] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  295.156908][   T29] audit: type=1400 audit(1786024275.118:2871): avc:  denied  { setopt } for  pid=9483 comm="syz.1.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  295.232483][   T29] audit: type=1400 audit(1786024275.118:2872): avc:  denied  { ioctl } for  pid=9479 comm="syz.5.968" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  295.317268][ T5739] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  295.330414][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.344916][   T29] audit: type=1400 audit(1786024275.128:2873): avc:  denied  { read write } for  pid=9483 comm="syz.1.970" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  295.377165][   T29] audit: type=1400 audit(1786024275.128:2874): avc:  denied  { open } for  pid=9483 comm="syz.1.970" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  295.408529][ T5739] usb 6-1: NFC: intf ffff88802d424000 id ffffffff8fc68da0
[  295.417382][   T29] audit: type=1400 audit(1786024275.128:2875): avc:  denied  { mounton } for  pid=9483 comm="syz.1.970" path="/185/file0" dev="tmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  295.444332][   T29] audit: type=1400 audit(1786024275.128:2876): avc:  denied  { mount } for  pid=9483 comm="syz.1.970" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  295.597269][ T5739] nfcmrvl 6-1:1.0: NFC: registered with nci successfully
[  295.608093][   T29] audit: type=1400 audit(1786024275.128:2877): avc:  denied  { module_request } for  pid=9483 comm="syz.1.970" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  295.641520][   T29] audit: type=1400 audit(1786024275.258:2878): avc:  denied  { read } for  pid=9483 comm="syz.1.970" dev="nsfs" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  295.687853][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.968'.
[  295.724239][   T29] audit: type=1400 audit(1786024275.268:2879): avc:  denied  { open } for  pid=9483 comm="syz.1.970" path="net:[4026533074]" dev="nsfs" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  295.931351][ T9500] No such timeout policy " "
[  295.936955][ T9500] netlink: Failed to associated timeout policy ' '
[  296.215257][   T24] usb 6-1: USB disconnect, device number 5
[  296.333288][   T24] usb 6-1: NFC: intf ffff88802d424000
[  296.480996][ T5710] usb 4-1: USB disconnect, device number 28
[  297.068385][ T9519] block2mtd: error: cannot open device /dev/loop0
[  297.203091][ T9531] FAULT_INJECTION: forcing a failure.
[  297.203091][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.218004][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.3.983 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  297.218033][ T9531] Tainted: [L]=SOFTLOCKUP
[  297.218038][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  297.218046][ T9531] Call Trace:
[  297.218051][ T9531]  <TASK>
[  297.218057][ T9531]  dump_stack_lvl+0x100/0x190
[  297.218082][ T9531]  should_fail_ex.cold+0x5/0xa
[  297.218105][ T9531]  _copy_from_user+0x2e/0xd0
[  297.218126][ T9531]  memdup_user+0x6b/0xe0
[  297.218144][ T9531]  strndup_user+0x78/0xe0
[  297.218161][ T9531]  keyctl_pkey_params_get+0xd5/0x4b0
[  297.218182][ T9531]  ? __pfx_keyctl_pkey_params_get+0x10/0x10
[  297.218201][ T9531]  ? find_held_lock+0x2b/0x80
[  297.218214][ T9531]  ? __might_fault+0xc5/0x140
[  297.218229][ T9531]  ? __might_fault+0xc5/0x140
[  297.218251][ T9531]  keyctl_pkey_params_get_2+0x12f/0x3f0
[  297.218269][ T9531]  ? __pfx_keyctl_pkey_params_get_2+0x10/0x10
[  297.218285][ T9531]  ? ksys_write+0x190/0x250
[  297.218303][ T9531]  ? __mutex_unlock_slowpath+0x35d/0x930
[  297.218328][ T9531]  keyctl_pkey_verify+0xac/0x2c0
[  297.218345][ T9531]  ? __pfx_keyctl_pkey_verify+0x10/0x10
[  297.218366][ T9531]  ? ksys_write+0x1ac/0x250
[  297.218385][ T9531]  ? __pfx_ksys_write+0x10/0x10
[  297.218401][ T9531]  __do_sys_keyctl+0x40f/0x5a0
[  297.218423][ T9531]  do_syscall_64+0x115/0x870
[  297.218441][ T9531]  ? clear_bhb_loop+0x40/0x90
[  297.218459][ T9531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.218473][ T9531] RIP: 0033:0x7f71aa59e0d9
[  297.218488][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.218501][ T9531] RSP: 002b:00007f71ab452028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  297.218517][ T9531] RAX: ffffffffffffffda RBX: 00007f71aa825fa0 RCX: 00007f71aa59e0d9
[  297.218526][ T9531] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 000000000000001c
[  297.218535][ T9531] RBP: 00007f71ab452090 R08: 0000000000000000 R09: 0000000000000000
[  297.218543][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.218551][ T9531] R13: 00007f71aa826038 R14: 00007f71aa825fa0 R15: 00007ffcd8f474f8
[  297.218571][ T9531]  </TASK>
[  297.734285][ T5710] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  297.804438][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'.
[  297.897759][ T5710] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  297.913216][ T5710] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  297.937836][ T5710] usb 1-1: config 0 interface 0 has no altsetting 0
[  297.952330][ T5710] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  297.963406][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  297.972548][ T5710] usb 1-1: Product: syz
[  297.977107][ T5710] usb 1-1: Manufacturer: syz
[  297.981985][ T5710] usb 1-1: SerialNumber: syz
[  297.992129][ T5710] usb 1-1: config 0 descriptor??
[  298.009854][ T9528] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  298.030943][ T5710] usb 1-1: selecting invalid altsetting 0
[  298.080775][ T9551] tipc: Started in network mode
[  298.112561][ T9551] tipc: Node identity 9a16f09bb4f4, cluster identity 4711
[  298.154380][ T9551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.192771][ T9552] syzkaller0: entered promiscuous mode
[  298.222661][ T9552] syzkaller0: entered allmulticast mode
[  298.286480][ T9528] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  298.311001][ T9528] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  298.416059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.425539][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.442345][ T9559] tipc: Resetting bearer <eth:syzkaller0>
[  298.457482][ T9559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.467572][ T9559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.507034][ T9551] bond3: (slave bond_slave_1): Device is not our slave
[  298.516250][ T9551] bond3: option active_slave: invalid value (bond_slave_1)
[  298.526603][ T9551] bond3 (unregistering): Released all slaves
[  298.604364][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.637973][ T9550] tipc: Resetting bearer <eth:syzkaller0>
[  298.639515][ T9570] Invalid logical block size (4194304)
[  298.696280][ T9550] tipc: Disabling bearer <eth:syzkaller0>
[  299.000132][   T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  299.174632][   T24] usb 4-1: Using ep0 maxpacket: 8
[  299.191580][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  299.212511][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  299.273756][   T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  299.298824][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.327439][   T24] usb 4-1: Product: syz
[  299.349095][   T24] usb 4-1: Manufacturer: syz
[  299.366625][   T24] usb 4-1: SerialNumber: syz
[  299.439433][   T24] usb 4-1: config 0 descriptor??
[  299.687487][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1000'.
[  299.722397][ T9582] openvswitch: netlink: Flow actions attr not present in new flow.
[  299.818236][ T9585] syz_tun: mtu less than device minimum
[  299.963982][   T24] usb 4-1: USB disconnect, device number 29
[  300.059612][ T9527] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  300.127425][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  300.127454][   T29] audit: type=1400 audit(1786024280.108:3031): avc:  denied  { read write } for  pid=9593 comm="syz.1.1005" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  300.175437][   T29] audit: type=1400 audit(1786024280.108:3032): avc:  denied  { open } for  pid=9593 comm="syz.1.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  300.201795][   T29] audit: type=1400 audit(1786024280.108:3033): avc:  denied  { ioctl } for  pid=9593 comm="syz.1.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  300.230294][   T29] audit: type=1400 audit(1786024280.108:3034): avc:  denied  { mount } for  pid=9593 comm="syz.1.1005" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  300.255102][   T29] audit: type=1400 audit(1786024280.108:3035): avc:  denied  { unmount } for  pid=9593 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  300.276821][   T29] audit: type=1400 audit(1786024280.118:3036): avc:  denied  { mount } for  pid=9593 comm="syz.1.1005" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  300.279938][ T6292] ==================================================================
[  300.302476][   T29] audit: type=1400 audit(1786024280.208:3037): avc:  denied  { name_bind } for  pid=9596 comm="syz.2.1006" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  300.306601][ T6292] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40
[  300.306627][ T6292] Read of size 1 at addr ffff88801c3f75a0 by task syz.1.125/6292
[  300.306641][ T6292] 
[  300.306652][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.1.125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  300.306677][ T6292] Tainted: [L]=SOFTLOCKUP
[  300.306683][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  300.306693][ T6292] Call Trace:
[  300.306700][ T6292]  <TASK>
[  300.306707][ T6292]  dump_stack_lvl+0x100/0x190
[  300.306728][ T6292]  print_report+0x13d/0x4b0
[  300.306753][ T6292]  ? __virt_addr_valid+0x239/0x430
[  300.306776][ T6292]  ? _raw_spin_lock_bh+0x33/0x40
[  300.306792][ T6292]  kasan_report+0xdf/0x1c0
[  300.306815][ T6292]  ? _raw_spin_lock_bh+0x33/0x40
[  300.306834][ T6292]  ? _raw_spin_lock_bh+0x33/0x40
[  300.306851][ T6292]  __kasan_check_byte+0x36/0x50
[  300.306873][ T6292]  lock_acquire+0x132/0x370
[  300.306893][ T6292]  ? do_raw_spin_lock+0x128/0x260
[  300.306916][ T6292]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  300.306941][ T6292]  _raw_spin_lock_bh+0x33/0x40
[  300.306957][ T6292]  ? bt_accept_unlink+0x64/0x370
[  300.306974][ T6292]  bt_accept_unlink+0x64/0x370
[  300.306989][ T6292]  ? __local_bh_enable_ip+0x9e/0x120
[  300.307009][ T6292]  l2cap_sock_teardown_cb+0x1a3/0x3f0
[  300.307032][ T6292]  l2cap_chan_del+0xa6/0x920
[  300.307048][ T6292]  l2cap_conn_del+0x34f/0x6b0
[  300.307064][ T6292]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  300.307079][ T6292]  l2cap_disconn_cfm+0x9f/0x100
[  300.307093][ T6292]  hci_conn_hash_flush+0x10e/0x280
[  300.307116][ T6292]  hci_dev_close_sync+0x5cf/0x13c0
[  300.307138][ T6292]  ? find_held_lock+0x2b/0x80
[  300.307152][ T6292]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  300.307176][ T6292]  hci_dev_do_close+0x2e/0xb0
[  300.307195][ T6292]  hci_unregister_dev+0x23f/0x690
[  300.307215][ T6292]  vhci_release+0x17d/0x230
[  300.307233][ T6292]  ? __pfx_vhci_release+0x10/0x10
[  300.307248][ T6292]  __fput+0x3ff/0xb50
[  300.307267][ T6292]  task_work_run+0x150/0x240
[  300.307284][ T6292]  ? __pfx_task_work_run+0x10/0x10
[  300.307302][ T6292]  do_exit+0x951/0x2ae0
[  300.307325][ T6292]  ? __pfx_do_exit+0x10/0x10
[  300.307346][ T6292]  ? cgroup_update_frozen_flag+0x125/0x240
[  300.307370][ T6292]  ? find_held_lock+0x2b/0x80
[  300.307383][ T6292]  ? get_signal+0x184f/0x21e0
[  300.307404][ T6292]  do_group_exit+0xd5/0x2a0
[  300.307419][ T6292]  get_signal+0x1ec7/0x21e0
[  300.307442][ T6292]  ? __pfx_get_signal+0x10/0x10
[  300.307467][ T6292]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  300.307485][ T6292]  arch_do_signal_or_restart+0x91/0x7e0
[  300.307502][ T6292]  ? get_timespec64+0x147/0x240
[  300.307519][ T6292]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  300.307538][ T6292]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  300.307558][ T6292]  exit_to_user_mode_loop+0x139/0x6f0
[  300.307578][ T6292]  ? rcu_is_watching+0x12/0xc0
[  300.307601][ T6292]  do_syscall_64+0x666/0x870
[  300.307619][ T6292]  ? clear_bhb_loop+0x40/0x90
[  300.307635][ T6292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.307651][ T6292] RIP: 0033:0x7ff61855e90e
[  300.307663][ T6292] Code: Unable to access opcode bytes at 0x7ff61855e8e4.
[  300.307670][ T6292] RSP: 002b:00007ff6194eaf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  300.307686][ T6292] RAX: fffffffffffffdfc RBX: 00007ff6194eb6c0 RCX: 00007ff61855e90e
[  300.307697][ T6292] RDX: 00007ff6194eafb0 RSI: 0000000000000000 RDI: 0000000000000000
[  300.307707][ T6292] RBP: 00007ff618635024 R08: 0000000000000000 R09: 0000000000000000
[  300.307716][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.307726][ T6292] R13: 00007ff618826038 R14: 00007ff618825fa0 R15: 00007ffc7d059ca8
[  300.307741][ T6292]  </TASK>
[  300.307746][ T6292] 
[  300.330667][   T29] audit: type=1400 audit(1786024280.208:3038): avc:  denied  { node_bind } for  pid=9596 comm="syz.2.1006" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  300.336348][ T6292] Allocated by task 4965:
[  300.336359][ T6292]  kasan_save_stack+0x30/0x50
[  300.336382][ T6292]  kasan_save_track+0x14/0x30
[  300.336400][ T6292]  __kasan_kmalloc+0xaa/0xb0
[  300.336418][ T6292]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  300.336444][ T6292]  syslog_print+0xf8/0x620
[  300.336469][ T6292]  do_syslog+0x5bd/0x6d0
[  300.336490][ T6292]  __x64_sys_syslog+0x74/0xb0
[  300.336513][ T6292]  do_syscall_64+0x115/0x870
[  300.336533][ T6292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.336550][ T6292] 
[  300.336554][ T6292] Freed by task 4965:
[  300.336562][ T6292]  kasan_save_stack+0x30/0x50
[  300.336579][ T6292]  kasan_save_track+0x14/0x30
[  300.336597][ T6292]  kasan_save_free_info+0x3b/0x70
[  300.336622][ T6292]  __kasan_slab_free+0x5f/0x80
[  300.336642][ T6292]  kfree+0x22b/0x6c0
[  300.336665][ T6292]  syslog_print+0x548/0x620
[  300.336684][ T6292]  do_syslog+0x5bd/0x6d0
[  300.336706][ T6292]  __x64_sys_syslog+0x74/0xb0
[  300.336728][ T6292]  do_syscall_64+0x115/0x870
[  300.336747][ T6292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.336764][ T6292] 
[  300.336768][ T6292] The buggy address belongs to the object at ffff88801c3f7000
[  300.336768][ T6292]  which belongs to the cache kmalloc-2k of size 2048
[  300.336781][ T6292] The buggy address is located 1440 bytes inside of
[  300.336781][ T6292]  freed 2048-byte region [ffff88801c3f7000, ffff88801c3f7800)
[  300.336796][ T6292] 
[  300.336800][ T6292] The buggy address belongs to the physical page:
[  300.336808][ T6292] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801c3f1000 pfn:0x1c3f0
[  300.336823][ T6292] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  300.862400][ T6292] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  300.870893][ T6292] page_type: f5(slab)
[  300.874879][ T6292] raw: 00fff00000000240 ffff88813fe28000 ffffea0000d85610 ffffea0001f99010
[  300.883508][ T6292] raw: ffff88801c3f1000 0000000800080004 00000000f5000000 0000000000000000
[  300.892163][ T6292] head: 00fff00000000240 ffff88813fe28000 ffffea0000d85610 ffffea0001f99010
[  300.900818][ T6292] head: ffff88801c3f1000 0000000800080004 00000000f5000000 0000000000000000
[  300.909498][ T6292] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  300.918154][ T6292] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  300.926893][ T6292] page dumped because: kasan: bad access detected
[  300.933297][ T6292] page_owner tracks the page as allocated
[  300.939121][ T6292] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3380569449, free_ts 0
[  300.958727][ T6292]  post_alloc_hook+0xfd/0x120
[  300.963399][ T6292]  get_page_from_freelist+0xf48/0x3530
[  300.968855][ T6292]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  300.974732][ T6292]  new_slab+0xa2/0x640
[  300.978781][ T6292]  refill_objects+0xe3/0x410
[  300.983350][ T6292]  __pcs_replace_empty_main+0x376/0x680
[  300.988883][ T6292]  __kmalloc_cache_noprof+0x479/0x6c0
[  300.994244][ T6292]  pnp_alloc_dev+0x55/0x3f0
[  300.998733][ T6292]  pnpacpi_add_device_handler+0x1ee/0x7f0
[  301.004459][ T6292]  acpi_ns_get_device_callback+0x2bd/0x500
[  301.010274][ T6292]  acpi_ns_walk_namespace+0x4cc/0x760
[  301.015636][ T6292]  acpi_get_devices+0x119/0x1f0
[  301.020479][ T6292]  pnpacpi_init+0x99/0x100
[  301.024876][ T6292]  do_one_initcall+0x11d/0x700
[  301.029639][ T6292]  kernel_init_freeable+0x6ea/0x7b0
[  301.034845][ T6292]  kernel_init+0x1f/0x1e0
[  301.039189][ T6292] page_owner free stack trace missing
[  301.044539][ T6292] 
[  301.046848][ T6292] Memory state around the buggy address:
[  301.052459][ T6292]  ffff88801c3f7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  301.060504][ T6292]  ffff88801c3f7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  301.068545][ T6292] >ffff88801c3f7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  301.076595][ T6292]                                ^
[  301.081691][ T6292]  ffff88801c3f7600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  301.089731][ T6292]  ffff88801c3f7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  301.097771][ T6292] ==================================================================
[  301.105922][ T6292] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  301.113126][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.1.125 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  301.123890][ T6292] Tainted: [L]=SOFTLOCKUP
[  301.128210][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  301.138262][ T6292] Call Trace:
[  301.141546][ T6292]  <TASK>
[  301.144483][ T6292]  dump_stack_lvl+0x100/0x190
[  301.149177][ T6292]  vpanic+0x552/0x970
[  301.153164][ T6292]  ? __pfx_vpanic+0x10/0x10
[  301.157705][ T6292]  ? mark_held_locks+0x40/0x70
[  301.162491][ T6292]  ? irqentry_exit+0x24d/0xa00
[  301.167272][ T6292]  ? _raw_spin_lock_bh+0x33/0x40
[  301.172243][ T6292]  panic+0xd1/0xe0
[  301.175968][ T6292]  ? __pfx_panic+0x10/0x10
[  301.180425][ T6292]  ? check_panic_on_warn+0x1f/0x90
[  301.185551][ T6292]  check_panic_on_warn.cold+0x19/0x34
[  301.190943][ T6292]  end_report.part.0+0x3a/0x90
[  301.195724][ T6292]  kasan_report.cold+0xe/0x18
[  301.200419][ T6292]  ? _raw_spin_lock_bh+0x33/0x40
[  301.205360][ T6292]  ? _raw_spin_lock_bh+0x33/0x40
[  301.210298][ T6292]  __kasan_check_byte+0x36/0x50
[  301.215145][ T6292]  lock_acquire+0x132/0x370
[  301.219640][ T6292]  ? do_raw_spin_lock+0x128/0x260
[  301.224656][ T6292]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  301.230024][ T6292]  _raw_spin_lock_bh+0x33/0x40
[  301.234771][ T6292]  ? bt_accept_unlink+0x64/0x370
[  301.239694][ T6292]  bt_accept_unlink+0x64/0x370
[  301.244442][ T6292]  ? __local_bh_enable_ip+0x9e/0x120
[  301.249718][ T6292]  l2cap_sock_teardown_cb+0x1a3/0x3f0
[  301.255083][ T6292]  l2cap_chan_del+0xa6/0x920
[  301.259659][ T6292]  l2cap_conn_del+0x34f/0x6b0
[  301.264331][ T6292]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  301.269946][ T6292]  l2cap_disconn_cfm+0x9f/0x100
[  301.274781][ T6292]  hci_conn_hash_flush+0x10e/0x280
[  301.279969][ T6292]  hci_dev_close_sync+0x5cf/0x13c0
[  301.285070][ T6292]  ? find_held_lock+0x2b/0x80
[  301.289737][ T6292]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  301.295275][ T6292]  hci_dev_do_close+0x2e/0xb0
[  301.299939][ T6292]  hci_unregister_dev+0x23f/0x690
[  301.304970][ T6292]  vhci_release+0x17d/0x230
[  301.309467][ T6292]  ? __pfx_vhci_release+0x10/0x10
[  301.314489][ T6292]  __fput+0x3ff/0xb50
[  301.318474][ T6292]  task_work_run+0x150/0x240
[  301.323050][ T6292]  ? __pfx_task_work_run+0x10/0x10
[  301.328148][ T6292]  do_exit+0x951/0x2ae0
[  301.332309][ T6292]  ? __pfx_do_exit+0x10/0x10
[  301.336889][ T6292]  ? cgroup_update_frozen_flag+0x125/0x240
[  301.342696][ T6292]  ? find_held_lock+0x2b/0x80
[  301.347364][ T6292]  ? get_signal+0x184f/0x21e0
[  301.352038][ T6292]  do_group_exit+0xd5/0x2a0
[  301.356529][ T6292]  get_signal+0x1ec7/0x21e0
[  301.361024][ T6292]  ? __pfx_get_signal+0x10/0x10
[  301.365863][ T6292]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  301.371397][ T6292]  arch_do_signal_or_restart+0x91/0x7e0
[  301.376941][ T6292]  ? get_timespec64+0x147/0x240
[  301.381776][ T6292]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  301.387917][ T6292]  ? __x64_sys_clock_nanosleep+0x347/0x480
[  301.393711][ T6292]  exit_to_user_mode_loop+0x139/0x6f0
[  301.399075][ T6292]  ? rcu_is_watching+0x12/0xc0
[  301.403833][ T6292]  do_syscall_64+0x666/0x870
[  301.408429][ T6292]  ? clear_bhb_loop+0x40/0x90
[  301.413110][ T6292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.418987][ T6292] RIP: 0033:0x7ff61855e90e
[  301.423385][ T6292] Code: Unable to access opcode bytes at 0x7ff61855e8e4.
[  301.430390][ T6292] RSP: 002b:00007ff6194eaf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  301.438788][ T6292] RAX: fffffffffffffdfc RBX: 00007ff6194eb6c0 RCX: 00007ff61855e90e
[  301.446744][ T6292] RDX: 00007ff6194eafb0 RSI: 0000000000000000 RDI: 0000000000000000
[  301.454698][ T6292] RBP: 00007ff618635024 R08: 0000000000000000 R09: 0000000000000000
[  301.462652][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.470605][ T6292] R13: 00007ff618826038 R14: 00007ff618825fa0 R15: 00007ffc7d059ca8
[  301.478564][ T6292]  </TASK>
[  301.481791][ T6292] Kernel Offset: disabled
[  301.486092][ T6292] Rebooting in 86400 seconds..