last executing test programs:

7m10.371450818s ago: executing program 1 (id=76):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f00000004c0)="9266b789d2a1faff88f903c38e5f6d01068c4d1d4db86feb", 0x0, 0x18)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

7m9.0509043s ago: executing program 1 (id=79):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r1 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000540)=r1)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x0)
sched_setscheduler(r1, 0x3, &(0x7f0000000280)=0x8009)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$cec(0x0, 0x0, 0x40000)
ioctl$CEC_S_MODE(r4, 0x40046109, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r7, 0x0, 0x20)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0xfffffffffffffea0)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)

7m7.952212238s ago: executing program 1 (id=86):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x8)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000200)={0x7, 'vlan1\x00', {0x9}, 0x1})
openat$cgroup_int(r0, &(0x7f0000000280)='blkio.throttle.read_iops_device\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={0x0, 0xfffffffa}, 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r6)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={<r7=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000580)=0x7, r7, 0x0, 0x0, 0x1}}, 0x20)
pipe2$9p(&(0x7f0000000080)={<r8=>0xffffffffffffffff}, 0x84000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fo=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00'])
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x12, 0x2, 0x2, 0x9, 0x0, 0xc95]}, &(0x7f00000001c0)=0x78)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0)
socket$kcm(0xa, 0x5, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238)

6m59.959956164s ago: executing program 1 (id=97):
socket(0x2d, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc0002009})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r4=>0x0})
r5 = socket(0x2d, 0x2, 0x0)
bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0)

6m58.66279224s ago: executing program 1 (id=100):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES16=r0])
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0)
ioctl$FICLONE(r8, 0x40049409, r3)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b98605000066b80800000066ba000000000f30297d00650fd38800000f01cb0f070f07dae9f619f20f009200d0ce", 0x2f}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

6m56.706158455s ago: executing program 1 (id=106):
setns(0xc9, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000001700000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)

6m41.633387748s ago: executing program 32 (id=106):
setns(0xc9, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000001700000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)

13.167422682s ago: executing program 4 (id=999):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)

13.119949071s ago: executing program 4 (id=1000):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a0000000000006111690000000000850000008a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

12.984418959s ago: executing program 4 (id=1003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)

10.672931205s ago: executing program 5 (id=1007):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x40, 0x6, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0xd}, 0x50)

10.652339563s ago: executing program 4 (id=1008):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef})
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
timer_create(0x3, 0x0, &(0x7f0000000080)=<r5=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
timer_getoverrun(r5)

10.391903643s ago: executing program 5 (id=1010):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x5d, &(0x7f0000000300)=0xffffff7f, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
creat(0x0, 0x194)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xffeffffb, 0x0, 0xd}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009702caed68d399a24fb70700", @ANYRES16=r0], 0x2c}}, 0x40000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)="0e", 0x1}, {&(0x7f00000006c0)}], 0x2, 0x2)
pipe2(&(0x7f0000000040), 0x4000)

10.285756588s ago: executing program 0 (id=1011):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r2, 0x4)
r3 = gettid()
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r6=>0x0)
timer_settime(r6, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})
write$dsp(r5, &(0x7f0000002000)='`', 0x88020)
copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000)
read$FUSE(r0, 0x0, 0x4000)

9.492311954s ago: executing program 3 (id=1012):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x17e)
mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0)
syz_open_dev$video4linux(0x0, 0x205d, 0x0)
lsetxattr$security_evm(&(0x7f0000000140)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="f92c"], 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000000050005000200000005000400010000001200030068060000000000000016edc4823a311740db893d8db02c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = userfaultfd(0x1)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x2010, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
lseek(0xffffffffffffffff, 0x38, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

9.331448762s ago: executing program 5 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x17e)
mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0)
syz_open_dev$video4linux(0x0, 0x205d, 0x0)
lsetxattr$security_evm(&(0x7f0000000140)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="f92c"], 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000000050005000200000005000400010000001200030068060000000000000016edc4823a311740db893d8db02c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = userfaultfd(0x1)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x2010, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
lseek(0xffffffffffffffff, 0x38, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

9.182682921s ago: executing program 0 (id=1014):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))

9.027616541s ago: executing program 0 (id=1016):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES16=r0])
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844)
write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b98605000066b80800000066ba000000000f30297d00650fd38800000f01cb0f070f07dae9f619f20f009200d0ce", 0x2f}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280))

7.282976272s ago: executing program 3 (id=1018):
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$mice(0xffffff9c, 0x0, 0x8001)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000380)=""/198, &(0x7f0000000540)=0xc6)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newtfilter={0x40c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3c8, 0x2, [@TCA_MATCHALL_ACT={0x3bc, 0x2, [@m_vlan={0xd8, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbd4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x94, 0x6, "158e00ab0224dc70b8148e0e250cf59a56a0a057f2be28f72fa582a56fc48991148c979b0401618b8fd007a02f8926bb9791193c8ef466debda2672fd15723f9384dc1005f40e7deb95d9b12b0cb911f7f7fad8251e16381508e421fb6048b853be02454a9815708438fe77419ab8a5287d67833796839a0eca49b81780fe95277f1a90cefadac4464d8b8f6511580cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x78, 0xa, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x916}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x11c}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc21}]}, {0x24, 0x6, "c7d2bb1e242d459ea823b0c08f0f8dc3f6f6401c1ec80d4f8aca3153c67870af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x84, 0xc, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}]}, {0x36, 0x6, "6c2ed35299198d70e63b4f9ff904030da76088d037c48e22cf8203d4f1d4252ac09fb961279a3c84e29786ae9b958f4d3859"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xf8, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '!\'+{#:}-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'virt_wifi0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x3, 0x10000000, 0x5, 0x10b8}}, @TCA_DEF_DATA={0x14, 0x3, '/dev/sequencer2\x00'}, @TCA_DEF_DATA={0x12, 0x3, '/dev/ubi_ctrl\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x2, 0xffffffffdffffffc, 0xc82acf3, 0x984e}}]}, {0x4b, 0x6, "a01efc05e4f2a01a2f4f084c63fbb8a29ab1a68f9d2d70ef141a1b505b62f6558fe92b32caffdaa12d5c9c6c33defe84820885868e810f6ae28e4f7037da8c31d9e1a748bed5c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xec, 0xe, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x0, 0x4, 0x10000}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0x10000000, 0x5, 0x400}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0xffffffffffffffff, 0x0, 0x2}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x8, 0xcb59, 0x1}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6f91, 0x7, 0x7f1bf5c4, 0xcfa}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x68bcf971, 0x6, 0x9, 0x80000001}, 0x55}}]}, {0x17, 0x6, "c0215f01d1c99e1c3099405631682beeae90f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4050001}, 0x24048004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = socket$netlink(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
keyctl$read(0x2, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000600}}, 0x0)
ioctl$XFS_IOC_DIOINFO(r4, 0x800c581e, &(0x7f0000000040))

6.70749624s ago: executing program 5 (id=1020):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES16=r0])
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844)
write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
ioctl$FICLONE(r6, 0x40049409, r3)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b98605000066b80800000066ba000000000f30297d00650fd38800000f01cb0f070f07dae9f619f20f009200d0ce", 0x2f}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

5.295496783s ago: executing program 0 (id=1022):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0xc050)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

5.290186284s ago: executing program 3 (id=1023):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x32, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100))
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r3, 0x0, 0x200002, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf2503"], 0x1250}}, 0xc000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
listen(r1, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r5, &(0x7f0000007700)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRESHEX=0x0, @ANYRES16=r6, @ANYRES32=r7, @ANYRESDEC=r6], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

5.18369339s ago: executing program 2 (id=1024):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"})
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000003b00)={r4, 0x1, 0x1})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
socket$nl_route(0x10, 0x3, 0x0)

4.111730597s ago: executing program 3 (id=1025):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)

3.982514258s ago: executing program 5 (id=1026):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES16=r0])
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844)
write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

3.707715523s ago: executing program 0 (id=1027):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES16=r0])
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x10, 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844)
write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

3.649714379s ago: executing program 3 (id=1028):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x17e)
mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0)
syz_open_dev$video4linux(0x0, 0x205d, 0x0)
lsetxattr$security_evm(&(0x7f0000000140)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="f92c"], 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000000050005000200000005000400010000001200030068060000000000000016edc4823a311740db893d8db02c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = userfaultfd(0x1)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x2010, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800001, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
lseek(0xffffffffffffffff, 0x38, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

3.644684332s ago: executing program 2 (id=1029):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r2, 0x4)
r3 = gettid()
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r6=>0x0)
timer_settime(r6, 0x0, 0x0, 0x0)
r7 = socket(0x8000000010, 0x2, 0x0)
write(r7, &(0x7f00000002c0)="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", 0xfc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})
write$dsp(r5, &(0x7f0000002000)='`', 0x88020)
copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000)
read$FUSE(r0, 0x0, 0x4000)

2.687340802s ago: executing program 4 (id=1030):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x80)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00')
pread64(r7, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
syz_usb_connect(0x3, 0x4a, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4)

2.575552488s ago: executing program 0 (id=1031):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x88, 0x1, 0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
syz_emit_ethernet(0x46, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "3d76fe", 0x10, 0x21, 0xff, @mcast2, @mcast1, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, "45dd48", 0x3, 'M@D'}}}}}}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

2.275648155s ago: executing program 2 (id=1032):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0], 0xfc}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c040)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

1.2891143s ago: executing program 2 (id=1033):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x80000400, 0x7, 0xc, 0x3800000, 0x6, "ea717423cf0fc7011504005800", 0x802, 0x8007ef})
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
timer_create(0x3, 0x0, &(0x7f0000000080)=<r6=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
timer_getoverrun(r6)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)

1.195803213s ago: executing program 3 (id=1034):
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xa, &(0x7f00000000c0)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x24000054)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32=<r4=>0xffffffffffffffff], 0x48)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x8004080)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2cd823fa0b72000000130001fafeffff00000000", @ANYRES32=r6, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x200000, 0x53, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRESDEC, @ANYRES64, @ANYRESHEX=r3], 0x0)
syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[])
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

292.881353ms ago: executing program 2 (id=1035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000100)=0x8000000000000000, 0x12)
write$cgroup_int(r3, &(0x7f0000000000)=0x4, 0x12)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x1, 0x1000001}}}, 0x20}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
syz_open_dev$vcsa(&(0x7f0000000140), 0x9, 0x20000)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x40080)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000740)="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")

207.263287ms ago: executing program 5 (id=1036):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r5, 0x0, 0x80)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00')
pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
syz_usb_connect(0x3, 0x4a, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4)

151.16007ms ago: executing program 2 (id=1037):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xffc5}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x591000, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000003c0)=0x8, 0x8)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='./my_dbroot', 0xb)
close(r1)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
mkdir(0x0, 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000001000)='rd_pa', 0x5)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r5, &(0x7f0000001200)='1', 0x1)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffb, 0x6f, 0x5, @scatter={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f0000000440)=""/75, 0x4b}]}, &(0x7f0000000640)="50cac987636f9bc56030a98bb1ed12ffe4030a30fefbd0d559d320209330744f76abe25a9f899aae00a7e221d1a0868dfaaade5f316ba98150d01cafcb9618afff015ed999e61449e3079557d21733a5accad275242634d396cd6dfc1046bd2b1e90436a6098a98127ffbb767ea3e3", &(0x7f00000006c0)=""/163, 0x10001, 0x1, 0x1, &(0x7f0000000780)})
close(r5)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1fb)

0s ago: executing program 4 (id=1038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904"], 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x4000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r9 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)

kernel console output (not intermixed with test programs):

=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.275600][   T29] audit: type=1326 audit(1785292707.190:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.327618][   T29] audit: type=1326 audit(1785292707.200:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.355190][   T29] audit: type=1326 audit(1785292707.210:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.413156][   T29] audit: type=1326 audit(1785292707.210:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.453534][   T29] audit: type=1326 audit(1785292707.210:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.491522][ T5825] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  242.533813][   T29] audit: type=1326 audit(1785292707.220:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.0.346" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f415559de99 code=0x7ffc0000
[  242.569401][ T7335] ip6t_srh: unknown srh match flags  FF3F
[  242.574801][ T7336] netlink: 'syz.3.351': attribute type 10 has an invalid length.
[  242.664794][ T5825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  242.680126][ T7336] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  242.796128][ T7336] team0: Port device netdevsim1 added
[  243.188036][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout
[  243.510718][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout
[  243.510735][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  243.510765][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout
[  243.550869][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  244.089956][ T5825] usb 1-1: config 0 has no interfaces?
[  244.868030][ T5825] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  244.877319][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.898523][ T5825] usb 1-1: config 0 descriptor??
[  246.074049][  T805] usb 1-1: USB disconnect, device number 13
[  247.127164][ T7360] binder: BINDER_SET_CONTEXT_MGR already set
[  247.201973][ T7360] binder: 7357:7360 ioctl 4018620d 200000004a80 returned -16
[  247.335969][ T7362] binder: 7357:7362 ioctl 400c620e 200000003b00 returned -22
[  247.411406][  T805] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  248.035011][  T805] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  248.045434][  T805] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  248.061566][  T805] usb 1-1: Product: syz
[  248.130762][  T805] usb 1-1: config 0 descriptor??
[  248.150008][  T805] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  248.162511][  T805] usb 1-1: Detected FT232H
[  248.415658][  T805] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  248.443009][  T805] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  248.462550][  T805] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  248.463678][ T5825] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  248.700417][  T805] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  248.805620][  T805] usb 1-1: USB disconnect, device number 14
[  249.088088][  T805] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  249.216219][  T805] ftdi_sio 1-1:0.0: device disconnected
[  249.873661][ T7377] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  249.908166][ T7377] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  250.080273][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  250.533074][ T7377] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  250.556609][ T7377] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  250.634908][ T7377] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  250.891652][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  252.327310][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout
[  252.399096][ T5617] iguanair 5-1:0.0: failed to get version
[  252.686154][ T5617] iguanair 5-1:0.0: probe with driver iguanair failed with error -110
[  252.841425][ T5617] usb 5-1: USB disconnect, device number 19
[  252.871966][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  252.883925][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  252.897041][ T5825] usb 6-1: string descriptor 0 read error: -71
[  252.905321][ T5825] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  252.912894][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout
[  252.921221][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  252.921452][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout
[  253.012504][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.154863][ T5825] usb 6-1: config 0 descriptor??
[  253.160667][ T5825] usb 6-1: can't set config #0, error -71
[  253.168563][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  253.168577][   T29] audit: type=1400 audit(1785292718.320:493): avc:  denied  { write } for  pid=7407 comm="syz.5.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  253.170870][ T5825] usb 6-1: USB disconnect, device number 9
[  253.318230][ T7410] binder: 7406:7410 ioctl 400c620e 200000003b00 returned -22
[  254.610551][   T29] audit: type=1400 audit(1785292719.770:494): avc:  denied  { name_bind 0x1000000 } for  pid=7425 comm="syz.2.375" path="socket:[19477]" dev="sockfs" ino=19477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  255.038575][   T29] audit: type=1400 audit(1785292719.770:495): avc:  denied  { setattr } for  pid=7425 comm="syz.2.375" name="NETLINK" dev="sockfs" ino=19472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  255.315894][ T7434] trusted_key: encrypted_key: insufficient parameters specified
[  255.387372][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  255.882657][   T29] audit: type=1400 audit(1785292721.050:496): avc:  denied  { write } for  pid=7430 comm="syz.2.377" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  255.884880][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  255.929234][ T7434] syz.2.377 uses obsolete (PF_INET,SOCK_PACKET)
[  256.669255][ T7434] netlink: 'syz.2.377': attribute type 10 has an invalid length.
[  256.677029][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.377'.
[  256.690179][ T7434] team0: Port device geneve1 added
[  256.802597][ T5717] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  256.941607][ T5732] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  256.974355][ T5717] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  256.986937][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  256.998309][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  257.010789][ T5717] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  257.019187][ T7454] netlink: 100 bytes leftover after parsing attributes in process `syz.4.382'.
[  257.020482][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.030141][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'.
[  257.037701][ T5717] usb 6-1: Product: syz
[  257.050403][ T5717] usb 6-1: Manufacturer: syz
[  257.055258][ T5717] usb 6-1: SerialNumber: syz
[  257.061333][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  257.075447][   T29] audit: type=1400 audit(1785292722.240:497): avc:  denied  { append } for  pid=7452 comm="syz.4.382" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  257.099166][ T5717] usb 6-1: config 0 descriptor??
[  257.111764][ T5732] usb 1-1: Using ep0 maxpacket: 16
[  257.118440][ T5732] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  257.128873][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.137569][ T7454] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  257.146778][ T7454] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  257.157545][ T5732] usb 1-1: config 0 descriptor??
[  257.162892][ T7454] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  257.169393][ T7454] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  257.175892][ T7454] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  257.177686][ T5732] gspca_main: sonixj-2.14.0 probing 0471:0327
[  257.201410][   T24] usb 3-1: device descriptor read/64, error -71
[  257.441335][   T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  257.581339][   T24] usb 3-1: device descriptor read/64, error -71
[  257.732789][   T24] usb usb3-port1: attempt power cycle
[  258.944451][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  259.048196][   T24] usb 3-1: device descriptor read/8, error -71
[  259.211672][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  259.211748][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout
[  259.217727][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout
[  259.217760][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  259.236057][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout
[  259.268990][ T7478] tipc: Started in network mode
[  259.284978][ T7478] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  259.394833][   T29] audit: type=1400 audit(1785292724.560:498): avc:  denied  { create } for  pid=7475 comm="syz.5.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  259.560927][   T29] audit: type=1400 audit(1785292724.720:499): avc:  denied  { write } for  pid=7475 comm="syz.5.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  259.593462][ T7478] syz_tun: entered allmulticast mode
[  260.532044][   T24] usb 1-1: USB disconnect, device number 15
[  260.551790][ T7475] syz_tun: left allmulticast mode
[  261.293221][ T7508] binder: 7506:7508 ioctl 400c620e 200000003b00 returned -22
[  262.353069][   T29] audit: type=1400 audit(1785292727.490:500): avc:  denied  { write } for  pid=7495 comm="syz.0.394" path="socket:[20630]" dev="sockfs" ino=20630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  262.651380][  T188] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  262.834942][  T188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  262.846677][  T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  262.861853][  T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  262.931944][  T188] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  262.941537][  T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.949703][  T188] usb 3-1: Product: syz
[  262.956017][  T188] usb 3-1: Manufacturer: syz
[  262.961006][  T188] usb 3-1: SerialNumber: syz
[  263.025537][  T188] usb 3-1: config 0 descriptor??
[  264.577371][ T7535] tipc: Started in network mode
[  264.619669][ T7535] tipc: Node identity 7f000001, cluster identity 4711
[  264.724650][ T7535] tipc: Enabled bearer <udp:syz2>, priority 10
[  264.842122][ T7535] tipc: Disabling bearer <udp:syz2>
[  265.264741][   T29] audit: type=1400 audit(1785292730.430:501): avc:  denied  { mount } for  pid=7549 comm="syz.2.408" name="/" dev="ramfs" ino=20021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  266.133611][ T7558] binder: 7556:7558 ioctl 400c620e 200000003b00 returned -22
[  267.025807][ T7560] ip6t_srh: unknown srh match flags  FF3F
[  267.542064][ T5717] iguanair 6-1:0.0: failed to get version
[  267.606458][ T5717] iguanair 6-1:0.0: probe with driver iguanair failed with error -110
[  267.788147][   T29] audit: type=1400 audit(1785292732.820:502): avc:  denied  { execute } for  pid=7549 comm="syz.2.408" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  268.055035][ T5717] usb 6-1: USB disconnect, device number 10
[  268.465087][   T29] audit: type=1400 audit(1785292733.470:503): avc:  denied  { append } for  pid=7565 comm="syz.4.413" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  268.566218][ T7567] ip6t_srh: unknown srh match flags  FF3F
[  268.911668][ T5745] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  269.481289][   T29] audit: type=1400 audit(1785292733.690:504): avc:  denied  { unlink } for  pid=7565 comm="syz.4.413" name="#1" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  269.989963][   T29] audit: type=1400 audit(1785292733.690:505): avc:  denied  { mount } for  pid=7565 comm="syz.4.413" name="/" dev="overlay" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  270.609670][ T5745] usb 5-1: device descriptor read/64, error -71
[  271.181306][   T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  271.402716][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  271.497061][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  271.566252][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  271.643214][   T24] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  271.673630][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.702395][   T24] usb 6-1: Product: syz
[  271.724573][   T24] usb 6-1: Manufacturer: syz
[  271.763310][   T24] usb 6-1: SerialNumber: syz
[  271.787979][   T24] usb 6-1: config 0 descriptor??
[  271.919863][ T7584] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  271.928005][ T7584] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  271.941196][ T7584] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  271.949238][ T7584] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  272.441353][ T5717] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  272.611824][ T5717] usb 4-1: Using ep0 maxpacket: 8
[  272.623533][ T5717] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  272.641456][ T5717] usb 4-1: config 0 has no interface number 0
[  272.660598][ T5717] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  272.670033][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.681710][ T5717] usb 4-1: Product: syz
[  272.685940][ T5717] usb 4-1: Manufacturer: syz
[  272.690662][ T5717] usb 4-1: SerialNumber: syz
[  272.713638][ T5717] usb 4-1: config 0 descriptor??
[  272.753844][ T5717] usb 4-1: selecting invalid altsetting 1
[  272.776099][ T5717] dvb_ttusb_budget: ttusb_init_controller: error
[  272.801384][ T5717] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  274.633014][   T29] audit: type=1400 audit(1785292738.370:506): avc:  denied  { write } for  pid=7587 comm="syz.5.419" name="core" dev="configfs" ino=2939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  274.675114][  T188] iguanair 3-1:0.0: failed to get version
[  274.720696][  T188] iguanair 3-1:0.0: probe with driver iguanair failed with error -110
[  274.756632][  T188] usb 3-1: USB disconnect, device number 20
[  274.769623][   T29] audit: type=1400 audit(1785292738.390:507): avc:  denied  { write } for  pid=7587 comm="syz.5.419" name="rd_mcp_0" dev="configfs" ino=20737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  274.936269][ T5717] DVB: Unable to find symbol stv0299_attach()
[  274.995851][   T29] audit: type=1400 audit(1785292740.150:508): avc:  denied  { setopt } for  pid=7595 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  275.066850][ T5717] DVB: Unable to find symbol tda8083_attach()
[  275.088116][ T5717] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  275.124415][   T29] audit: type=1400 audit(1785292740.290:509): avc:  denied  { module_request } for  pid=7595 comm="syz.2.421" kmod="ipt_CLUSTERIP" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  275.150225][ T5717] usb 4-1: USB disconnect, device number 14
[  275.172756][ T7597] raw_sendmsg: syz.2.421 forgot to set AF_INET. Fix it!
[  277.035829][ T7611] warning: `syz.4.425' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  277.451406][ T5745] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  277.461640][  T805] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  277.625575][ T5745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.633556][ T7613] netlink: 'syz.3.426': attribute type 2 has an invalid length.
[  277.637093][   T29] audit: type=1400 audit(1785292742.800:510): avc:  denied  { listen } for  pid=7612 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  277.661332][ T7613] netlink: 'syz.3.426': attribute type 8 has an invalid length.
[  277.674789][ T5745] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  277.686010][ T5745] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  277.695108][ T7613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.426'.
[  277.708327][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.711442][ T5617] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  277.750374][ T5745] usb 1-1: config 0 descriptor??
[  277.759543][   T29] audit: type=1400 audit(1785292742.920:511): avc:  denied  { create } for  pid=7612 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  277.780266][  T805] usb 4-1: unable to get BOS descriptor or descriptor too short
[  277.788687][   T29] audit: type=1400 audit(1785292742.920:512): avc:  denied  { setopt } for  pid=7612 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  277.803285][  T805] usb 4-1: unable to read config index 0 descriptor/start: -71
[  277.809727][   T29] audit: type=1400 audit(1785292742.920:513): avc:  denied  { bind } for  pid=7612 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  277.837956][  T805] usb 4-1: can't read configurations, error -71
[  277.913067][ T5617] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  277.941463][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  277.961278][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  277.975332][ T5617] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  277.984756][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.993793][ T5617] usb 3-1: Product: syz
[  277.998004][ T5617] usb 3-1: Manufacturer: syz
[  278.002980][ T5617] usb 3-1: SerialNumber: syz
[  278.010847][ T5617] usb 3-1: config 0 descriptor??
[  278.047991][   T29] audit: type=1400 audit(1785292743.210:514): avc:  denied  { write } for  pid=7625 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  278.110702][ T7617] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  278.165420][ T5745] usb 1-1: string descriptor 0 read error: -71
[  278.175098][ T5745] usb 1-1: USB disconnect, device number 16
[  278.426763][   T29] audit: type=1400 audit(1785292743.590:515): avc:  denied  { mount } for  pid=7632 comm="syz.5.431" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  278.472822][ T7635] ntfs3(nullb0): Primary boot signature is not NTFS.
[  278.480267][ T7635] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  278.811482][ T5717] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  278.998497][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.098231][ T5717] usb 5-1: config 0 has no interfaces?
[  279.159041][ T5717] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  279.197156][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.224906][ T5717] usb 5-1: Product: syz
[  279.253980][ T5717] usb 5-1: Manufacturer: syz
[  279.281872][ T5717] usb 5-1: SerialNumber: syz
[  279.335321][ T5717] usb 5-1: config 0 descriptor??
[  280.107705][ T7638] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  280.268755][ T7658] xt_l2tp: v2 doesn't support IP mode
[  280.285041][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  280.285055][   T29] audit: type=1400 audit(1785292745.450:517): avc:  denied  { read write } for  pid=7657 comm="syz.0.439" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  280.381009][   T29] audit: type=1400 audit(1785292745.480:518): avc:  denied  { open } for  pid=7657 comm="syz.0.439" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  281.571340][ T5717] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  281.653122][   T29] audit: type=1400 audit(1785292746.810:519): avc:  denied  { unmount } for  pid=6341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  281.760443][ T5745] usb 5-1: USB disconnect, device number 22
[  281.766695][ T5717] usb 1-1: Using ep0 maxpacket: 8
[  281.788547][ T5717] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  281.822659][ T5717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.840596][ T7673] db_root: cannot be changed because it's in use
[  281.858358][ T5717] usb 1-1: config 0 has no interface number 0
[  281.887913][ T5717] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  282.050195][ T5717] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  282.059626][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.078711][ T5717] usb 1-1: config 0 descriptor??
[  282.095759][ T5717] iowarrior 1-1:0.1: no interrupt-in endpoint found
[  282.111596][   T29] audit: type=1400 audit(1785292747.270:520): avc:  denied  { write } for  pid=7672 comm="syz.5.444" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  282.202788][   T29] audit: type=1400 audit(1785292747.370:521): avc:  denied  { ioctl } for  pid=7672 comm="syz.5.444" path="/55/my_configfs/target/core/rd_mcp_0/dev0/enable" dev="configfs" ino=21047 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  282.248019][ T7679] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  282.255964][ T7679] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  282.264366][   T24] iguanair 6-1:0.0: failed to get version
[  282.270768][   T24] iguanair 6-1:0.0: probe with driver iguanair failed with error -110
[  282.296078][   T24] usb 6-1: USB disconnect, device number 11
[  282.302262][ T5717] usb 1-1: USB disconnect, device number 17
[  286.411441][ T7705] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  286.422255][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout
[  287.446465][ T7705] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  287.530518][ T7705] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  287.546619][ T7705] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  287.579149][ T7705] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  287.708213][   T29] audit: type=1400 audit(1785292752.860:522): avc:  denied  { connect } for  pid=7725 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  287.861786][   T29] audit: type=1400 audit(1785292752.910:523): avc:  denied  { mounton } for  pid=7725 comm="syz.3.459" path="/101/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  288.079890][   T29] audit: type=1400 audit(1785292753.240:524): avc:  granted  { setsecparam } for  pid=7725 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  288.491785][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout
[  288.653458][ T5617] iguanair 3-1:0.0: failed to get version
[  289.046073][    C1] iguanair 3-1:0.0: failed to resubmit urb: -1
[  289.056813][ T5617] iguanair 3-1:0.0: probe with driver iguanair failed with error -110
[  289.350581][ T5617] usb 3-1: USB disconnect, device number 21
[  290.247541][ T4931] Bluetooth: hci5: command 0x0c1a tx timeout
[  290.247570][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout
[  290.253699][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  291.233478][ T7764] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.468'.
[  291.336137][   T29] audit: type=1400 audit(1785292756.440:525): avc:  denied  { listen } for  pid=7759 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  291.490978][   T29] audit: type=1326 audit(1785292756.470:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.3.468" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd60339de99 code=0x0
[  292.092175][ T5617] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  292.334318][ T5617] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  292.507288][ T5617] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  292.532521][ T5617] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  292.542136][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.561045][ T5617] usb 3-1: Product: syz
[  292.567897][ T5617] usb 3-1: Manufacturer: syz
[  292.572952][ T5617] usb 3-1: SerialNumber: syz
[  292.841726][ T7767] trusted_key: encrypted_key: hex blob is missing
[  292.869489][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.885741][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.944000][ T5617] usb 3-1: Can't get UAC3 power state for id 10
[  292.976297][ T5617] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  293.007262][ T5617] usb 3-1: applying playback min mute quirk
[  293.022660][ T5617] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  293.030380][ T5617] usb 3-1: applying playback min mute quirk
[  293.043860][ T5617] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  293.057950][ T5617] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[  293.157358][   T29] audit: type=1400 audit(1785292758.320:527): avc:  denied  { mount } for  pid=7788 comm="syz.3.476" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  293.157795][ T5617] usb 3-1: USB disconnect, device number 22
[  293.239938][ T7789] FAULT_INJECTION: forcing a failure.
[  293.239938][ T7789] name failslab, interval 1, probability 0, space 0, times 0
[  293.264599][ T7789] CPU: 0 UID: 0 PID: 7789 Comm: syz.3.476 Not tainted syzkaller #0 PREEMPT(full) 
[  293.264628][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  293.264645][ T7789] Call Trace:
[  293.264653][ T7789]  <TASK>
[  293.264661][ T7789]  dump_stack_lvl+0x100/0x190
[  293.264694][ T7789]  should_fail_ex.cold+0x5/0xa
[  293.264722][ T7789]  should_failslab+0xc2/0x120
[  293.264752][ T7789]  __kmalloc_noprof+0xfc/0x820
[  293.264784][ T7789]  ? tomoyo_encode2+0xfb/0x3c0
[  293.264812][ T7789]  tomoyo_encode2+0xfb/0x3c0
[  293.264839][ T7789]  tomoyo_encode+0x29/0x50
[  293.264859][ T7789]  tomoyo_realpath_from_path+0x18c/0x690
[  293.264889][ T7789]  tomoyo_get_exe+0x63/0xa0
[  293.264916][ T7789]  tomoyo_write_control+0x69e/0x13a0
[  293.264952][ T7789]  ? lock_acquire+0x5e/0x370
[  293.264979][ T7789]  ? __pfx_tomoyo_write_control+0x10/0x10
[  293.265014][ T7789]  vfs_write+0x2aa/0x1050
[  293.265048][ T7789]  ? __pfx_tomoyo_write+0x10/0x10
[  293.265073][ T7789]  ? __pfx_vfs_write+0x10/0x10
[  293.265105][ T7789]  ? __fget_files+0x215/0x3d0
[  293.265134][ T7789]  ? __fget_files+0x21f/0x3d0
[  293.265164][ T7789]  ksys_write+0x12a/0x250
[  293.265196][ T7789]  ? __pfx_ksys_write+0x10/0x10
[  293.265238][ T7789]  do_syscall_64+0x115/0x870
[  293.265262][ T7789]  ? clear_bhb_loop+0x40/0x90
[  293.265290][ T7789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.265313][ T7789] RIP: 0033:0x7fd60339de99
[  293.265331][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.265352][ T7789] RSP: 002b:00007fd604321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  293.265377][ T7789] RAX: ffffffffffffffda RBX: 00007fd603625fa0 RCX: 00007fd60339de99
[  293.265393][ T7789] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  293.265407][ T7789] RBP: 00007fd604321090 R08: 0000000000000000 R09: 0000000000000000
[  293.265420][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.265434][ T7789] R13: 00007fd603626038 R14: 00007fd603625fa0 R15: 00007fffc376aa68
[  293.265464][ T7789]  </TASK>
[  293.269372][ T7789] ERROR: Out of memory at tomoyo_realpath_from_path.
[  293.424022][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  293.793734][   T29] audit: type=1400 audit(1785292758.960:528): avc:  denied  { unmount } for  pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  294.970292][ T5745] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  295.130416][ T7818] binder: 7813:7818 ioctl 400c620e 200000003b00 returned -22
[  295.220818][ T5745] usb 1-1: Using ep0 maxpacket: 32
[  295.341408][ T5825] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  295.357992][ T5745] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  295.404685][ T5745] usb 1-1: config 0 has no interface number 0
[  295.465981][ T5745] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  295.508129][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.541362][ T5825] usb 5-1: Using ep0 maxpacket: 32
[  295.555041][ T5745] usb 1-1: Product: syz
[  295.595988][ T5825] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  295.607841][ T5745] usb 1-1: Manufacturer: syz
[  295.632266][ T5745] usb 1-1: SerialNumber: syz
[  295.648046][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.690781][ T5745] usb 1-1: config 0 descriptor??
[  295.761495][ T5825] usb 5-1: Product: syz
[  295.833581][ T5825] usb 5-1: Manufacturer: syz
[  295.867202][ T5825] usb 5-1: SerialNumber: syz
[  295.882699][ T5745] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  295.929023][ T5745] usb 1-1: selecting invalid altsetting 1
[  295.944550][ T5825] usb 5-1: config 0 descriptor??
[  295.962290][ T5745] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  296.020445][ T5825] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  296.066206][ T5745] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  296.089070][ T5825] dvb-usb: bulk message failed: -22 (4/0)
[  296.110731][ T5825] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  296.125216][ T5745] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  296.150065][ T5745] usb 1-1: media controller created
[  296.158797][ T5825] dvb-usb: bulk message failed: -22 (5/0)
[  296.174461][ T5825] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  296.204162][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  296.233889][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  296.262794][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.274225][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.310496][ T5825] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  296.353201][   T29] audit: type=1400 audit(1785292761.500:529): avc:  denied  { create } for  pid=7816 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  296.430832][ T5745] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  296.447507][ T5825] usb 5-1: media controller created
[  296.475020][ T5745] zl10353_read_register: readreg error (reg=127, ret==-71)
[  296.539941][ T5745] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  296.553858][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  296.626953][ T7828] tipc: Started in network mode
[  296.632298][ T7828] tipc: Node identity 7f000001, cluster identity 4711
[  296.639675][ T7828] tipc: Enabled bearer <udp:syz2>, priority 10
[  296.678260][ T7828] tipc: Disabling bearer <udp:syz2>
[  296.690051][ T5825] usb 5-1: selecting invalid altsetting 3
[  296.722764][ T5745] usb 1-1: USB disconnect, device number 18
[  296.728775][ T5825] ttusb2: set interface to alts=3 failed
[  296.951841][ T5825] DVB: Unable to find symbol tda10086_attach()
[  296.968271][ T5825] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  297.061457][   T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  297.311530][   T24] usb 3-1: Using ep0 maxpacket: 8
[  297.411774][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  297.445698][ T5825] dvb-usb: bulk message failed: -22 (4/0)
[  297.456550][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.458767][ T5825] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  297.485656][   T24] usb 3-1: config 0 has no interface number 0
[  297.499425][ T5825] dvb-usb: bulk message failed: -22 (5/0)
[  297.509891][ T5825] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  297.522119][   T24] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  297.536085][ T5825] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  297.557079][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  297.565483][   T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  297.569560][ T5825] usb 5-1: USB disconnect, device number 23
[  297.588566][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.638400][   T24] usb 3-1: config 0 descriptor??
[  298.486172][ T5825] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  298.524518][   T24] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  298.585075][ T7853] FAULT_INJECTION: forcing a failure.
[  298.585075][ T7853] name failslab, interval 1, probability 0, space 0, times 0
[  298.611941][ T7853] CPU: 0 UID: 0 PID: 7853 Comm: syz.5.494 Not tainted syzkaller #0 PREEMPT(full) 
[  298.611969][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  298.611982][ T7853] Call Trace:
[  298.611989][ T7853]  <TASK>
[  298.611995][ T7853]  dump_stack_lvl+0x100/0x190
[  298.612024][ T7853]  should_fail_ex.cold+0x5/0xa
[  298.612050][ T7853]  should_failslab+0xc2/0x120
[  298.612078][ T7853]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  298.612105][ T7853]  ? __alloc_skb+0x5b7/0x710
[  298.612128][ T7853]  ? __alloc_skb+0x140/0x710
[  298.612157][ T7853]  __alloc_skb+0x140/0x710
[  298.612180][ T7853]  ? __alloc_skb+0x5b7/0x710
[  298.612205][ T7853]  ? __pfx___alloc_skb+0x10/0x10
[  298.612228][ T7853]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  298.612273][ T7853]  ? sock_has_perm+0x25a/0x2f0
[  298.612301][ T7853]  ? __pfx_sock_has_perm+0x10/0x10
[  298.612332][ T7853]  netlink_alloc_large_skb+0x69/0x150
[  298.612356][ T7853]  netlink_sendmsg+0x680/0xda0
[  298.612383][ T7853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.612408][ T7853]  ? selinux_socket_sendmsg+0x198/0x2f0
[  298.612441][ T7853]  ____sys_sendmsg+0xa4d/0xbe0
[  298.612470][ T7853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.612494][ T7853]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.612538][ T7853]  ___sys_sendmsg+0x190/0x1e0
[  298.612574][ T7853]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.612605][ T7853]  ? __lock_acquire+0x49f/0x1a40
[  298.612631][ T7853]  ? get_pid_task+0x106/0x250
[  298.612694][ T7853]  __sys_sendmsg+0x160/0x210
[  298.612722][ T7853]  ? __pfx___sys_sendmsg+0x10/0x10
[  298.612759][ T7853]  do_syscall_64+0x115/0x870
[  298.612784][ T7853]  ? clear_bhb_loop+0x40/0x90
[  298.612810][ T7853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.612833][ T7853] RIP: 0033:0x7fa92d99de99
[  298.612850][ T7853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.612871][ T7853] RSP: 002b:00007fa92e8a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.612892][ T7853] RAX: ffffffffffffffda RBX: 00007fa92dc25fa0 RCX: 00007fa92d99de99
[  298.612907][ T7853] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  298.612920][ T7853] RBP: 00007fa92e8a5090 R08: 0000000000000000 R09: 0000000000000000
[  298.612934][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.612946][ T7853] R13: 00007fa92dc26038 R14: 00007fa92dc25fa0 R15: 00007ffe25c1c5c8
[  298.612975][ T7853]  </TASK>
[  298.935458][ T5617] usb 3-1: USB disconnect, device number 23
[  302.635800][ T7873] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  302.762164][ T7873] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  302.838420][ T7873] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  302.893109][ T7873] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  302.978966][ T7873] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  302.990030][ T7876] macvtap1: entered promiscuous mode
[  303.034039][ T7876] vlan0: entered promiscuous mode
[  303.213159][ T7876] team0: Device macvtap1 failed to register rx_handler
[  303.742623][ T7876] vlan0: left promiscuous mode
[  303.789446][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'.
[  303.798452][ T7891] netlink: 'syz.0.503': attribute type 10 has an invalid length.
[  303.806232][ T7891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.503'.
[  303.838961][ T7891] geneve2: entered promiscuous mode
[  303.847175][ T7891] geneve2: entered allmulticast mode
[  304.518126][ T7894] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.502'.
[  304.681384][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  304.818583][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  304.844251][ T7898] ip6t_srh: unknown srh match flags  FF3F
[  304.891307][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  304.892263][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout
[  305.119066][ T4931] Bluetooth: hci5: command 0x0c1a tx timeout
[  306.164308][   T29] audit: type=1400 audit(1785292771.030:530): avc:  denied  { sqpoll } for  pid=7895 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  308.868726][ T7915] ip6t_srh: unknown srh match flags  FF3F
[  309.233300][ T7911] netlink: 'syz.3.507': attribute type 30 has an invalid length.
[  310.839181][ T7937] FAULT_INJECTION: forcing a failure.
[  310.839181][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.878469][   T29] audit: type=1400 audit(1785292776.040:531): avc:  denied  { getopt } for  pid=7932 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  310.915100][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.2.514 Not tainted syzkaller #0 PREEMPT(full) 
[  310.915128][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  310.915140][ T7937] Call Trace:
[  310.915147][ T7937]  <TASK>
[  310.915155][ T7937]  dump_stack_lvl+0x100/0x190
[  310.915185][ T7937]  should_fail_ex.cold+0x5/0xa
[  310.915212][ T7937]  _copy_from_user+0x2e/0xd0
[  310.915242][ T7937]  move_addr_to_kernel+0x65/0x170
[  310.915277][ T7937]  __sys_bind+0x11d/0x260
[  310.915299][ T7937]  ? __pfx___sys_bind+0x10/0x10
[  310.915322][ T7937]  ? __fget_files+0x21f/0x3d0
[  310.915355][ T7937]  ? __pfx_ksys_write+0x10/0x10
[  310.915394][ T7937]  __x64_sys_bind+0x72/0xb0
[  310.915415][ T7937]  ? lockdep_hardirqs_on+0x78/0x100
[  310.915439][ T7937]  do_syscall_64+0x115/0x870
[  310.915462][ T7937]  ? clear_bhb_loop+0x40/0x90
[  310.915490][ T7937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.915513][ T7937] RIP: 0033:0x7f14b1b9de99
[  310.915531][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.915552][ T7937] RSP: 002b:00007f14b2b02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  310.915574][ T7937] RAX: ffffffffffffffda RBX: 00007f14b1e25fa0 RCX: 00007f14b1b9de99
[  310.915589][ T7937] RDX: 0000000000000060 RSI: 0000200000000300 RDI: 0000000000000004
[  310.915609][ T7937] RBP: 00007f14b2b02090 R08: 0000000000000000 R09: 0000000000000000
[  310.915623][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.915637][ T7937] R13: 00007f14b1e26038 R14: 00007f14b1e25fa0 R15: 00007ffe4a8d3a78
[  310.915664][ T7937]  </TASK>
[  312.130755][ T7955] binder: 7952:7955 ioctl 400c620e 200000003b00 returned -22
[  312.507286][ T7959] netlink: 48 bytes leftover after parsing attributes in process `syz.5.518'.
[  312.973057][ T5617] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  313.029282][ T7965] binder: BINDER_SET_CONTEXT_MGR already set
[  313.035395][ T7965] binder: 7962:7965 ioctl 4018620d 200000004a80 returned -16
[  313.057855][ T7965] binder: 7962:7965 ioctl 400c620e 200000003b00 returned -22
[  313.301857][ T5617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.408764][ T5617] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  314.836634][ T7969] tipc: Enabled bearer <udp:syz2>, priority 10
[  315.010865][ T7969] tipc: Disabling bearer <udp:syz2>
[  316.154858][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.165273][ T5617] usb 4-1: config 0 descriptor??
[  316.254474][ T5617] usb 4-1: can't set config #0, error -71
[  316.266115][ T5617] usb 4-1: USB disconnect, device number 17
[  317.516969][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  317.540381][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  318.090827][ T7990] binder: 7985:7990 ioctl 400c620e 200000003b00 returned -22
[  318.748379][ T5617] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  318.952075][ T5617] usb 5-1: Using ep0 maxpacket: 8
[  318.960149][ T5617] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  318.968560][ T5617] usb 5-1: config 0 has no interface number 0
[  318.985988][ T5617] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  319.019782][ T5617] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  319.040780][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.064831][ T5617] usb 5-1: config 0 descriptor??
[  319.086402][ T5617] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  319.226091][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.532'.
[  319.769248][ T8002] netlink: 48 bytes leftover after parsing attributes in process `syz.5.532'.
[  319.842008][ T5617] usb 5-1: USB disconnect, device number 24
[  319.944312][ T8002] geneve2: entered promiscuous mode
[  319.949551][ T8002] geneve2: entered allmulticast mode
[  320.954706][ T8025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.537'.
[  324.391321][  T994] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  324.585181][  T994] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.747378][  T994] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  324.757546][  T994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.791299][   T10] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  324.820506][  T994] usb 6-1: config 0 descriptor??
[  325.344292][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.404806][   T10] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  325.404839][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.421425][   T10] usb 4-1: config 0 descriptor??
[  325.548487][ T8046] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  325.686013][  T994] usb 6-1: string descriptor 0 read error: -71
[  325.713842][  T994] cypress_m8 6-1:0.0: DeLorme Earthmate USB converter detected
[  325.735739][  T994] earthmate ttyUSB0: required endpoint is missing
[  325.748086][ T8053] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  325.770459][  T994] usb 6-1: USB disconnect, device number 12
[  325.777572][  T994] cypress_m8 6-1:0.0: device disconnected
[  326.008608][   T10] usb 4-1: string descriptor 0 read error: -71
[  326.023317][   T10] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  326.050358][   T10] earthmate ttyUSB0: required endpoint is missing
[  326.060478][   T10] usb 4-1: USB disconnect, device number 18
[  326.069391][   T10] cypress_m8 4-1:0.0: device disconnected
[  327.006495][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.552'.
[  327.027133][ T8071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.552'.
[  328.601292][   T10] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  328.788667][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.866648][   T10] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  328.930668][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.085574][   T10] usb 4-1: config 0 descriptor??
[  329.852881][   T10] usb 4-1: string descriptor 0 read error: -71
[  329.874478][   T10] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  329.895906][   T10] earthmate ttyUSB0: required endpoint is missing
[  329.922721][   T10] usb 4-1: USB disconnect, device number 19
[  329.947028][   T10] cypress_m8 4-1:0.0: device disconnected
[  333.372531][ T5718] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  333.543247][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.557774][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.575469][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  333.597618][ T5718] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  333.613195][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.637556][ T5718] usb 5-1: config 0 descriptor??
[  334.063859][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.081804][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.320410][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  336.329336][ T8147] netlink: 'syz.0.571': attribute type 10 has an invalid length.
[  336.337168][ T8147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.571'.
[  336.435099][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'.
[  336.443960][ T8149] netlink: 48 bytes leftover after parsing attributes in process `syz.5.572'.
[  337.948086][ T8142] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  338.016412][ T8154] netlink: 4664 bytes leftover after parsing attributes in process `syz.0.573'.
[  338.095249][ T8142] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  338.111882][ T8142] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  338.132241][ T8142] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  338.154134][ T8142] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  338.204590][ T5718] usbhid 5-1:0.0: can't add hid device: -71
[  338.245341][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  338.250165][ T8158] fuse: Bad value for 'group_id'
[  338.262529][ T8158] fuse: Bad value for 'group_id'
[  338.321017][ T5718] usb 5-1: USB disconnect, device number 25
[  339.167960][ T8177] ip6t_srh: unknown srh match flags  FF3F
[  339.617210][ T8178] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  339.651403][ T8178] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  339.688191][ T8178] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  339.709596][ T8178] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  339.753630][ T8178] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  340.855132][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout
[  341.271920][ T5814] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  341.639490][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  341.691448][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout
[  341.697723][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout
[  341.713803][ T5814] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  341.772922][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  341.779038][ T4931] Bluetooth: hci5: command 0x0c1a tx timeout
[  341.825532][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.202596][ T5814] usb 4-1: config 0 descriptor??
[  342.393685][ T8206] db_root: cannot be changed because it's in use
[  342.401777][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  342.433298][   T29] audit: type=1400 audit(1785292807.600:532): avc:  denied  { write } for  pid=8205 comm="syz.5.586" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  342.664444][   T24] usb 5-1: Using ep0 maxpacket: 8
[  342.676872][   T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  342.685556][   T24] usb 5-1: config 179 has no interface number 0
[  342.692368][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  342.703971][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  342.715886][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  342.716058][ T5814] usb 4-1: string descriptor 0 read error: -71
[  343.269526][   T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  343.281762][   T29] audit: type=1400 audit(1785292807.940:533): avc:  denied  { create } for  pid=8207 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  343.301339][   T29] audit: type=1400 audit(1785292807.940:534): avc:  denied  { bind } for  pid=8207 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  343.359316][ T5814] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  343.367490][   T24] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  343.385656][ T5814] earthmate ttyUSB0: required endpoint is missing
[  343.467769][   T24] usb 5-1: config 179 interface 65 has no altsetting 0
[  343.480328][   T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  343.493663][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.509880][ T5814] usb 4-1: USB disconnect, device number 20
[  343.640872][ T8218] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.590'.
[  343.676479][   T29] audit: type=1326 audit(1785292808.820:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.3.590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd60339de99 code=0x0
[  343.787512][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.799352][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.822319][ T5745] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  343.846077][ T5718] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  343.981424][ T5745] usb 6-1: Using ep0 maxpacket: 8
[  343.994162][ T5745] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  344.002846][ T5718] usb 3-1: Using ep0 maxpacket: 8
[  344.008738][ T5745] usb 6-1: config 0 has no interface number 0
[  344.019918][ T5718] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  344.031129][ T5745] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.043336][ T5718] usb 3-1: config 179 has no interface number 0
[  344.050883][ T5718] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  344.063720][ T5745] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  344.079626][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.087873][ T5718] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  344.110875][ T5718] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  344.127564][ T5745] usb 6-1: config 0 descriptor??
[  344.168719][ T5718] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  344.198414][ T5718] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  344.220380][ T5745] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  344.240115][ T5718] usb 3-1: config 179 interface 65 has no altsetting 0
[  344.249059][ T5718] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  344.258929][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.441806][   T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15
[  344.464894][ T5814] cypress_m8 4-1:0.0: device disconnected
[  344.503219][ T4966] input input15: unable to receive magic message: -71
[  344.521534][   T29] audit: type=1400 audit(1785292809.670:536): avc:  denied  { read } for  pid=4966 comm="acpid" name="js0" dev="devtmpfs" ino=3093 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  344.583480][ T5745] usb 6-1: USB disconnect, device number 13
[  344.593963][ T5718] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16
[  344.638177][ T4966] input input15: unable to receive magic message: -71
[  344.714250][   T29] audit: type=1400 audit(1785292809.670:537): avc:  denied  { open } for  pid=4966 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3093 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  344.745547][   T29] audit: type=1400 audit(1785292809.780:538): avc:  denied  { ioctl } for  pid=4966 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3093 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  344.788840][ T4966] input input15: unable to receive magic message: -71
[  344.854664][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1
[  344.928347][ T5718] usb 3-1: USB disconnect, device number 24
[  344.928410][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  344.970571][ T4966] input input15: unable to receive magic message: -71
[  345.027667][   T24] usb 5-1: USB disconnect, device number 26
[  345.027719][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  345.205271][ T8227] tipc: Started in network mode
[  345.233973][ T8227] tipc: Node identity 7f000001, cluster identity 4711
[  345.268907][ T8227] tipc: Enabled bearer <udp:syz2>, priority 10
[  345.297121][ T8228] tipc: Disabling bearer <udp:syz2>
[  346.037740][ T8247] fuse: Bad value for 'fd'
[  346.090741][ T8246] db_root: cannot be changed because it's in use
[  346.236316][   T29] audit: type=1400 audit(1785292811.330:539): avc:  denied  { write } for  pid=8244 comm="syz.2.597" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  346.926957][ T8240] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  346.934141][ T8240] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  346.940342][ T8240] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  346.946905][ T8240] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  346.954420][ T8240] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  347.034060][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  347.042878][ T8258] netlink: 'syz.4.601': attribute type 10 has an invalid length.
[  347.050683][ T8258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.601'.
[  347.847861][ T8265] ip6t_srh: unknown srh match flags  FF3F
[  348.320340][ T5814] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[  348.617532][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.745300][ T5814] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  348.853812][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.993982][ T4931] Bluetooth: hci5: command 0x0c1a tx timeout
[  349.015026][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout
[  349.034502][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  349.039681][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  349.040591][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  349.249403][ T5814] usb 3-1: config 0 descriptor??
[  351.152793][ T8264] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  352.623438][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  353.088346][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  353.101436][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  353.108884][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  353.124366][ T8280] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  353.141921][ T8280] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  353.200470][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.207571][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.337142][ T5814] usb 3-1: string descriptor 0 read error: -71
[  353.345019][ T5814] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected
[  353.382583][ T5814] earthmate ttyUSB0: required endpoint is missing
[  353.413743][ T5814] usb 3-1: USB disconnect, device number 25
[  353.452800][ T5814] cypress_m8 3-1:0.0: device disconnected
[  353.492167][ T8299] netlink: 996 bytes leftover after parsing attributes in process `syz.2.610'.
[  355.019606][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  355.028550][ T8314] netlink: 'syz.4.614': attribute type 10 has an invalid length.
[  355.036555][ T8314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.614'.
[  355.211757][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  355.217889][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout
[  355.224007][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout
[  355.230104][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  355.807653][ T8319] fuse: Bad value for 'group_id'
[  355.817495][ T8319] fuse: Bad value for 'group_id'
[  356.761845][ T8339] tipc: Enabled bearer <udp:syz2>, priority 10
[  356.769840][ T8339] tipc: Disabling bearer <udp:syz2>
[  356.948983][ T8343] ip6t_srh: unknown srh match flags  FF3F
[  357.806929][ T5745] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  358.112041][ T5745] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.186769][ T5745] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  358.320060][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.572222][ T5745] usb 6-1: config 0 descriptor??
[  358.825818][ T8351] netlink: 996 bytes leftover after parsing attributes in process `syz.3.623'.
[  359.797295][ T8345] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  359.839691][   T29] audit: type=1400 audit(1785292825.000:540): avc:  denied  { write } for  pid=8359 comm="syz.4.625" name="free_buffer" dev="tracefs" ino=4113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  359.887730][   T29] audit: type=1400 audit(1785292825.030:541): avc:  denied  { open } for  pid=8359 comm="syz.4.625" path="/130/tracefs_dir/free_buffer" dev="tracefs" ino=4113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  360.003843][ T5745] usb 6-1: string descriptor 0 read error: -71
[  360.014645][ T5745] cypress_m8 6-1:0.0: DeLorme Earthmate USB converter detected
[  360.023351][ T5745] earthmate ttyUSB0: required endpoint is missing
[  360.031765][ T5745] usb 6-1: USB disconnect, device number 14
[  360.040546][ T5745] cypress_m8 6-1:0.0: device disconnected
[  360.867839][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  360.876824][ T8374] netlink: 'syz.0.628': attribute type 10 has an invalid length.
[  360.884606][ T8374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'.
[  363.198151][ T8389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  363.437060][ T8389] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  363.461436][ T8389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  363.481500][ T8389] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  363.487635][ T8389] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  363.644230][ T8401] netlink: 996 bytes leftover after parsing attributes in process `syz.5.636'.
[  363.941481][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  365.387598][ T8419] ip6t_srh: unknown srh match flags  FF3F
[  365.464699][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  365.531763][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout
[  365.541693][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout
[  365.548956][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  368.191498][ T8443] netlink: 4664 bytes leftover after parsing attributes in process `syz.0.645'.
[  368.232879][   T29] audit: type=1326 audit(1785292833.380:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.0.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f415559de99 code=0x0
[  369.127927][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[  369.528270][ T8459] netlink: 4664 bytes leftover after parsing attributes in process `syz.0.650'.
[  369.685996][   T29] audit: type=1326 audit(1785292834.730:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.0.650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f415559de99 code=0x0
[  371.983632][ T8489] db_root: cannot be changed because it's in use
[  371.995159][ T8491] ip6t_srh: unknown srh match flags  FF3F
[  372.010167][   T29] audit: type=1400 audit(1785292837.170:544): avc:  denied  { write } for  pid=8487 comm="syz.3.658" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  373.171478][ T5814] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  373.392560][ T5814] usb 5-1: Using ep0 maxpacket: 8
[  373.460571][ T5814] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  373.539551][ T5814] usb 5-1: config 179 has no interface number 0
[  373.590821][ T5814] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  373.713699][ T5814] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  374.133513][ T5814] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  374.246973][ T5814] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  374.387094][ T5814] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  374.541134][ T5814] usb 5-1: config 179 interface 65 has no altsetting 0
[  374.585325][ T8505] ip6t_srh: unknown srh match flags  FF3F
[  374.594522][ T5814] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  374.632322][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.979350][ T8516] fuse: Bad value for 'group_id'
[  376.031618][  T994] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  376.084476][ T8516] fuse: Bad value for 'group_id'
[  376.225608][  T994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.315142][  T994] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  376.395184][  T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.562523][  T994] usb 1-1: config 0 descriptor??
[  376.765403][ T5814] usb 5-1: can't set config #179, error -71
[  376.930775][ T5814] usb 5-1: USB disconnect, device number 27
[  376.940088][ T5945] udevd[5945]: setting mode of /dev/bus/usb/005/027 to 020664 failed: No such file or directory
[  377.014194][ T5945] udevd[5945]: setting owner of /dev/bus/usb/005/027 to uid=0, gid=0 failed: No such file or directory
[  377.329909][ T8529] binder: 8521:8529 ioctl 400c620e 200000003b00 returned -22
[  377.995812][ T8513] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  378.257071][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  378.264142][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  378.271464][  T994] usb 1-1: string descriptor 0 read error: -71
[  378.294794][  T994] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected
[  378.318536][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  378.327326][ T8541] netlink: 'syz.3.672': attribute type 10 has an invalid length.
[  378.335075][ T8541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.672'.
[  378.476734][  T994] earthmate ttyUSB0: required endpoint is missing
[  379.345728][  T994] usb 1-1: USB disconnect, device number 19
[  379.353054][  T994] cypress_m8 1-1:0.0: device disconnected
[  379.557317][ T8552] ip6t_srh: unknown srh match flags  FF3F
[  380.604479][  T994] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  380.877901][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'.
[  380.996858][  T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.096784][  T994] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  381.207849][  T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.253270][   T10] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  381.341415][ T5745] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  381.373924][  T994] usb 5-1: config 0 descriptor??
[  381.480375][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.602511][   T10] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  381.664750][ T5745] usb 1-1: Using ep0 maxpacket: 8
[  381.722063][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.787507][ T5745] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  381.849108][ T5745] usb 1-1: config 179 has no interface number 0
[  381.970326][ T5745] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  381.996964][   T10] usb 6-1: config 0 descriptor??
[  382.109883][ T5745] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  382.141754][ T5745] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  382.177788][ T5745] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  382.180195][ T8572] ip6t_srh: unknown srh match flags  FF3F
[  382.206821][ T5745] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  382.228270][ T5745] usb 1-1: config 179 interface 65 has no altsetting 0
[  382.235392][ T5745] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  382.244528][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.289668][ T8562] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  382.304334][ T5745] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17
[  382.732667][ T4966] input input17: unable to receive magic message: -110
[  382.898887][ T4966] input input17: unable to receive magic message: -32
[  382.956048][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.998642][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.224429][ T4966] input input17: unable to receive magic message: -32
[  383.366991][ T4966] input input17: unable to receive magic message: -32
[  384.111816][ T5825] usb 1-1: USB disconnect, device number 20
[  384.117784][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  384.620086][   T10] usb 6-1: string descriptor 0 read error: -71
[  384.660957][  T994] usb 5-1: string descriptor 0 read error: -71
[  384.674557][   T10] cypress_m8 6-1:0.0: DeLorme Earthmate USB converter detected
[  384.699307][  T994] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected
[  384.715852][   T10] earthmate ttyUSB0: required endpoint is missing
[  384.733192][  T994] earthmate ttyUSB1: required endpoint is missing
[  384.746574][   T10] usb 6-1: USB disconnect, device number 15
[  384.764790][   T10] cypress_m8 6-1:0.0: device disconnected
[  384.772116][  T994] usb 5-1: USB disconnect, device number 28
[  384.778840][  T994] cypress_m8 5-1:0.0: device disconnected
[  386.625406][ T8595] binder: 8593:8595 ioctl 400c620e 200000003b00 returned -22
[  389.878180][ T8621] ip6t_srh: unknown srh match flags  FF3F
[  391.081340][  T805] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  391.276154][  T805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.292958][  T805] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  391.302496][  T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.370484][  T805] usb 1-1: config 0 descriptor??
[  391.493638][ T8637] ip6t_srh: unknown srh match flags  FF3F
[  392.544262][  T805] usb 1-1: string descriptor 0 read error: -71
[  393.727865][ T8651] binder: 8649:8651 ioctl 400c620e 200000003b00 returned -22
[  394.266899][  T805] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected
[  394.463224][  T805] earthmate ttyUSB0: required endpoint is missing
[  394.510277][  T805] usb 1-1: USB disconnect, device number 21
[  394.539647][  T805] cypress_m8 1-1:0.0: device disconnected
[  394.631008][ T8655] netlink: 4664 bytes leftover after parsing attributes in process `syz.0.699'.
[  394.660410][   T29] audit: type=1326 audit(1785292859.820:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8652 comm="syz.0.699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f415559de99 code=0x0
[  395.275757][ T8659] ip6t_srh: unknown srh match flags  FF3F
[  397.331396][ T8677] ip6t_srh: unknown srh match flags  FF3F
[  399.242015][ T5745] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  399.623495][ T5745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.734146][ T5745] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  399.837107][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.034019][ T5745] usb 3-1: config 0 descriptor??
[  400.831367][  T994] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  400.846329][ T5745] usb 3-1: string descriptor 0 read error: -71
[  400.858670][ T5745] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected
[  400.875317][ T5745] earthmate ttyUSB0: required endpoint is missing
[  400.893440][ T5745] usb 3-1: USB disconnect, device number 26
[  400.903798][ T5745] cypress_m8 3-1:0.0: device disconnected
[  401.005915][  T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.016347][  T994] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  401.025734][  T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.037162][  T994] usb 4-1: config 0 descriptor??
[  401.051589][ T5814] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  401.221778][ T5814] usb 1-1: Using ep0 maxpacket: 32
[  401.232231][ T5814] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  401.241028][ T5814] usb 1-1: config 0 has no interface number 0
[  401.247485][ T5814] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  401.262253][ T5814] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  401.272206][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.280307][ T5814] usb 1-1: Product: syz
[  401.285698][ T5814] usb 1-1: Manufacturer: syz
[  401.290452][ T5814] usb 1-1: SerialNumber: syz
[  401.300960][ T5814] usb 1-1: config 0 descriptor??
[  401.312308][ T8701] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  401.338413][  T994] usb 4-1: string descriptor 0 read error: -71
[  401.349095][  T994] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  401.364790][  T994] earthmate ttyUSB0: required endpoint is missing
[  401.387113][  T994] usb 4-1: USB disconnect, device number 21
[  401.405729][  T994] cypress_m8 4-1:0.0: device disconnected
[  401.624892][ T8710] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  401.705617][ T8701] ceph: No mds server is up or the cluster is laggy
[  401.717089][ T5617] libceph: connect (1)[c::]:6789 error -101
[  401.742466][ T5617] libceph: mon0 (1)[c::]:6789 connect error
[  401.802140][ T8713] netlink: 4664 bytes leftover after parsing attributes in process `syz.5.715'.
[  402.641299][ T5814] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  402.665835][ T5814] asix 1-1:0.188: probe with driver asix failed with error -61
[  403.539557][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.719'.
[  403.540158][ T8726] ip6t_srh: unknown srh match flags  FF3F
[  403.555110][ T8724] netlink: 48 bytes leftover after parsing attributes in process `syz.5.719'.
[  403.574112][ T8728] ip6t_srh: unknown srh match flags  FF3F
[  406.666613][ T8730] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  406.768818][ T5814] usb 1-1: USB disconnect, device number 22
[  407.160805][ T8747] netlink: 996 bytes leftover after parsing attributes in process `syz.2.722'.
[  407.268672][ T8746] ip6t_srh: unknown srh match flags  FF3F
[  409.298949][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  410.039761][ T8748] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  410.334502][ T8748] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  410.348237][ T8748] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  410.355121][ T8748] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  410.406484][ T8748] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  411.832683][ T8762] netlink: 4664 bytes leftover after parsing attributes in process `syz.2.727'.
[  411.845829][   T29] audit: type=1326 audit(1785292877.010:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.2.727" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14b1b9de99 code=0x0
[  412.001443][ T5745] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  412.168958][ T5745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.194211][ T5745] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  412.278766][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.419655][ T5745] usb 5-1: config 0 descriptor??
[  412.480684][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  412.489639][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  412.496077][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  412.502833][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout
[  412.519718][ T8771] ip6t_srh: unknown srh match flags  FF3F
[  412.608200][ T8775] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.729'.
[  414.726946][ T5814] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  415.021440][ T5814] usb 4-1: Using ep0 maxpacket: 32
[  415.187267][ T5814] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  415.483444][ T8791] netlink: 4664 bytes leftover after parsing attributes in process `syz.5.734'.
[  416.087666][   T29] audit: type=1326 audit(1785292880.690:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92d99de99 code=0x0
[  416.138208][ T5814] usb 4-1: config 0 has no interface number 0
[  416.140158][ T5745] usb 5-1: string descriptor 0 read error: -71
[  416.152067][ T5745] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected
[  416.163343][ T5745] earthmate ttyUSB0: required endpoint is missing
[  416.173077][ T5745] usb 5-1: USB disconnect, device number 29
[  416.185508][ T5814] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  416.199807][ T5814] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  416.210064][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.219851][ T5814] usb 4-1: Product: syz
[  416.229144][ T5814] usb 4-1: Manufacturer: syz
[  416.233868][ T5814] usb 4-1: SerialNumber: syz
[  416.237975][ T5745] cypress_m8 5-1:0.0: device disconnected
[  416.245386][ T5814] usb 4-1: config 0 descriptor??
[  416.251133][ T8788] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  416.590257][  T805] libceph: connect (1)[c::]:6789 error -101
[  416.621841][ T8788] ceph: No mds server is up or the cluster is laggy
[  416.622341][ T8807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  416.631416][  T805] libceph: mon0 (1)[c::]:6789 connect error
[  416.841757][ T8809] binder: 8799:8809 ioctl 400c620e 200000003b00 returned -22
[  417.407755][ T5732] libceph: connect (1)[c::]:6789 error -101
[  417.621881][ T5732] libceph: mon0 (1)[c::]:6789 connect error
[  417.959875][ T5814] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  417.972283][ T5814] asix 4-1:0.188: probe with driver asix failed with error -61
[  418.722472][ T8814] tipc: Enabled bearer <udp:syz2>, priority 10
[  418.785804][ T8814] tipc: Disabling bearer <udp:syz2>
[  419.831654][ T5617] usb 4-1: USB disconnect, device number 22
[  420.074509][ T8839] netlink: 996 bytes leftover after parsing attributes in process `syz.3.744'.
[  421.711274][   T10] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  422.031693][ T5745] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  422.044768][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.055271][   T10] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  422.064498][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.081357][   T10] usb 5-1: config 0 descriptor??
[  422.191377][ T5745] usb 3-1: Using ep0 maxpacket: 8
[  422.202616][ T5745] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  422.211352][ T5745] usb 3-1: config 179 has no interface number 0
[  422.221883][ T5745] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  422.234053][ T5745] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  422.286928][ T5745] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  422.334813][ T5745] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  422.347530][ T5745] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  422.361230][ T5745] usb 3-1: config 179 interface 65 has no altsetting 0
[  422.368147][ T5745] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  422.377734][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.393526][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  422.402515][ T8861] netlink: 48 bytes leftover after parsing attributes in process `syz.3.751'.
[  422.631605][ T5745] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18
[  423.301603][ T4966] input input18: unable to receive magic message: -110
[  423.320112][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.333057][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.349050][ T4966] input input18: unable to receive magic message: -32
[  423.404327][ T4966] input input18: unable to receive magic message: -32
[  423.611031][ T4966] input input18: unable to receive magic message: -32
[  424.422689][ T4966] input input18: unable to receive magic message: -32
[  424.478346][   T10] usb 5-1: string descriptor 0 read error: -71
[  424.510576][ T5825] usb 3-1: USB disconnect, device number 27
[  424.510615][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  424.532565][   T10] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected
[  424.559978][   T10] earthmate ttyUSB0: required endpoint is missing
[  424.588791][   T10] usb 5-1: USB disconnect, device number 30
[  424.598969][   T10] cypress_m8 5-1:0.0: device disconnected
[  424.877611][ T5617] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  425.144315][ T5617] usb 4-1: Using ep0 maxpacket: 8
[  425.202370][ T5617] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  425.624325][ T5617] usb 4-1: config 179 has no interface number 0
[  425.752399][ T5617] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  425.820862][ T5617] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  425.853557][ T5617] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  425.886034][ T5617] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  425.908360][ T5617] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  425.934334][ T5617] usb 4-1: config 179 interface 65 has no altsetting 0
[  425.954619][ T5617] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  426.079995][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.363650][ T8881] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  426.384474][ T8881] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  426.444705][ T5617] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19
[  426.542898][ T8901] netlink: 4664 bytes leftover after parsing attributes in process `syz.4.761'.
[  426.625294][ T8881] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  426.632693][   T29] audit: type=1326 audit(1785292891.800:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.4.761" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f550d99de99 code=0x0
[  426.663143][ T8902] binder: 8897:8902 ioctl 400c620e 200000003b00 returned -22
[  426.891398][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  427.288563][ T5617] usb 4-1: USB disconnect, device number 23
[  427.294537][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  427.294566][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  427.313978][ T4966] input input19: unable to receive magic message: -71
[  427.556693][ T8881] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  427.567455][ T8881] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  427.847045][ T8907] netlink: 996 bytes leftover after parsing attributes in process `syz.5.764'.
[  427.858330][ T8909] netlink: 996 bytes leftover after parsing attributes in process `syz.0.765'.
[  427.886110][ T8911] tipc: Enabled bearer <udp:syz2>, priority 10
[  427.898938][ T8911] tipc: Disabling bearer <udp:syz2>
[  428.411389][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  428.751407][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  429.611431][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout
[  429.617505][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  430.947018][ T8923] netlink: 996 bytes leftover after parsing attributes in process `syz.5.768'.
[  433.600845][ T8957] netlink: 4664 bytes leftover after parsing attributes in process `syz.2.775'.
[  433.623330][   T29] audit: type=1326 audit(1785292898.790:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8953 comm="syz.2.775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14b1b9de99 code=0x0
[  433.691083][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'.
[  433.794943][ T8956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.776'.
[  435.146173][ T8966] db_root: cannot be changed because it's in use
[  435.155281][   T29] audit: type=1400 audit(1785292900.320:550): avc:  denied  { write } for  pid=8965 comm="syz.5.778" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  435.312991][ T8972] ip6t_srh: unknown srh match flags  FF3F
[  435.949619][ T5617] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  437.859046][ T8984] ip6t_srh: unknown srh match flags  FF3F
[  437.936397][ T5617] usb 3-1: Using ep0 maxpacket: 8
[  437.936900][ T8985] netlink: 996 bytes leftover after parsing attributes in process `syz.4.783'.
[  437.959428][ T5617] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  437.967823][ T5617] usb 3-1: config 179 has no interface number 0
[  437.974206][ T5617] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  437.985548][ T5617] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  437.997003][ T5617] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  438.009103][ T5617] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  438.118195][ T5617] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  439.349642][ T5617] usb 3-1: config 179 interface 65 has no altsetting 0
[  439.731872][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  439.922474][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  441.267454][ T5617] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  441.279180][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.358279][ T5617] usb 3-1: can't set config #179, error -71
[  441.382762][ T5617] usb 3-1: USB disconnect, device number 28
[  445.061524][ T5745] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[  445.235206][ T5745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  445.267269][ T5745] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  445.311247][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.356315][ T9033] ip6t_srh: unknown srh match flags  FF3F
[  445.375621][ T5745] usb 3-1: config 0 descriptor??
[  445.612534][ T5731] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  445.794824][ T5731] usb 4-1: Using ep0 maxpacket: 8
[  445.809094][ T5731] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  445.831040][ T5731] usb 4-1: config 179 has no interface number 0
[  445.859756][ T5731] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  445.950380][ T5731] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  446.045910][ T5731] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  446.153261][ T5731] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  446.255284][ T5731] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  446.357395][ T5731] usb 4-1: config 179 interface 65 has no altsetting 0
[  446.428289][ T5731] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  446.517115][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.248300][ T5731] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input20
[  447.435234][ T9041] netlink: 996 bytes leftover after parsing attributes in process `syz.5.797'.
[  447.579247][ T4966] input input20: unable to receive magic message: -71
[  447.636307][ T5745] usb 3-1: string descriptor 0 read error: -71
[  447.764073][ T5745] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected
[  447.772644][ T5745] earthmate ttyUSB0: required endpoint is missing
[  447.781481][ T5745] usb 3-1: USB disconnect, device number 29
[  447.791555][ T5745] cypress_m8 3-1:0.0: device disconnected
[  447.842465][ T4966] input input20: unable to receive magic message: -71
[  447.852471][ T5731] usb 4-1: USB disconnect, device number 24
[  447.858430][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  447.858471][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  448.258773][ T9046] db_root: cannot be changed because it's in use
[  448.265440][ T9047] ip6t_srh: unknown srh match flags  FF3F
[  448.322559][   T29] audit: type=1400 audit(1785292913.480:551): avc:  denied  { write } for  pid=9044 comm="syz.0.791" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  451.118905][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'.
[  451.571351][ T5731] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  452.351270][ T5731] usb 3-1: Using ep0 maxpacket: 8
[  452.370709][ T5731] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  452.396959][ T5731] usb 3-1: config 179 has no interface number 0
[  452.411246][ T5731] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  452.431382][ T5731] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  452.457585][ T5731] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  452.606209][ T5731] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  452.637128][ T5731] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  452.672561][ T5731] usb 3-1: config 179 interface 65 has no altsetting 0
[  452.689197][ T5731] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  452.716752][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.785676][ T5731] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21
[  452.862197][ T4966] input input21: unable to receive magic message: -110
[  452.891466][ T4966] input input21: unable to receive magic message: -32
[  452.915255][ T4966] input input21: unable to receive magic message: -32
[  452.936171][ T4966] input input21: unable to receive magic message: -32
[  452.958545][ T4966] input input21: unable to receive magic message: -32
[  453.020975][ T4966] input input21: unable to receive magic message: -32
[  453.070910][ T4966] input input21: unable to receive magic message: -32
[  453.246435][ T5825] usb 3-1: USB disconnect, device number 30
[  453.246566][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  453.351368][ T5745] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  453.454813][ T9089] ip6t_srh: unknown srh match flags  FF3F
[  453.625134][   T10] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  453.873707][ T5745] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.469249][ T5745] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  456.486040][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.496944][ T5745] usb 4-1: config 0 descriptor??
[  456.502458][ T5745] usb 4-1: can't set config #0, error -71
[  456.520326][ T5745] usb 4-1: USB disconnect, device number 25
[  457.673085][ T9104] macvtap1: entered promiscuous mode
[  457.706387][ T9104] vlan0: entered promiscuous mode
[  457.717506][ T9113] netlink: 996 bytes leftover after parsing attributes in process `syz.0.816'.
[  457.731709][ T9104] team0: Device macvtap1 failed to register rx_handler
[  457.750888][ T9104] vlan0: left promiscuous mode
[  459.943659][ T9139] ip6t_srh: unknown srh match flags  FF3F
[  460.621322][ T5732] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  460.869655][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.964412][ T5732] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  461.074888][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.297865][ T5732] usb 4-1: config 0 descriptor??
[  462.463928][ T9151] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  462.556107][ T5732] usb 4-1: string descriptor 0 read error: -71
[  462.566594][ T5732] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  462.589442][ T5732] earthmate ttyUSB0: required endpoint is missing
[  462.615665][ T5732] usb 4-1: USB disconnect, device number 26
[  462.639233][ T5732] cypress_m8 4-1:0.0: device disconnected
[  463.119191][ T9163] ip6t_srh: unknown srh match flags  FF3F
[  463.241576][ T9165] ip6t_srh: unknown srh match flags  FF3F
[  467.094007][ T9173] fuse: Bad value for 'fd'
[  467.393605][ T9189] ip6t_srh: unknown srh match flags  FF3F
[  467.820484][   T87] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  468.083305][   T87] usb 1-1: Using ep0 maxpacket: 8
[  468.152783][   T87] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  468.240453][   T87] usb 1-1: config 179 has no interface number 0
[  468.327434][   T87] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  468.483999][   T87] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  468.553132][ T9201] fuse: Unknown parameter 'group_i00000000000000000000'
[  468.580466][   T87] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  468.666320][   T87] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  468.776446][   T87] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  468.909235][   T87] usb 1-1: config 179 interface 65 has no altsetting 0
[  469.127019][   T87] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  469.416017][   T87] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.484952][   T87] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input22
[  469.611677][ T4966] input input22: unable to receive magic message: -110
[  469.624499][ T4966] input input22: unable to receive magic message: -32
[  469.672945][ T4966] input input22: unable to receive magic message: -32
[  469.695667][ T4966] input input22: unable to receive magic message: -32
[  469.711896][ T4966] input input22: unable to receive magic message: -32
[  469.712861][ T4966] input input22: unable to receive magic message: -32
[  469.716010][ T4966] input input22: unable to receive magic message: -32
[  469.723624][ T4966] input input22: unable to receive magic message: -32
[  469.792363][ T4966] input input22: unable to receive magic message: -32
[  469.799760][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.801533][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.810342][ T4966] input input22: unable to receive magic message: -32
[  469.830475][   T87] usb 1-1: USB disconnect, device number 23
[  469.830506][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  470.704016][ T9228] fuse: Bad value for 'fd'
[  470.823497][ T5745] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  470.881579][   T10] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  470.970880][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'.
[  471.004762][ T5745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.116109][ T5745] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  471.339329][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.359077][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.371019][   T10] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  471.392587][ T5745] usb 5-1: config 0 descriptor??
[  471.400786][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.428978][   T10] usb 1-1: config 0 descriptor??
[  471.757214][ T9247] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.851'.
[  471.779759][   T29] audit: type=1326 audit(1785292936.940:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd60339de99 code=0x0
[  472.077220][ T9224] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  472.623009][   T10] usb 1-1: string descriptor 0 read error: -71
[  472.657405][   T10] cypress_m8 1-1:0.0: DeLorme Earthmate USB converter detected
[  472.697254][   T10] earthmate ttyUSB0: required endpoint is missing
[  472.748472][   T10] usb 1-1: USB disconnect, device number 24
[  472.782495][   T10] cypress_m8 1-1:0.0: device disconnected
[  472.796910][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'.
[  473.003543][ T5732] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  473.161605][ T5732] usb 6-1: Using ep0 maxpacket: 8
[  473.177766][ T5732] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  473.213154][ T5732] usb 6-1: config 179 has no interface number 0
[  473.238930][ T5732] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  473.277881][ T5732] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  473.348730][ T5732] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  473.362954][ T5732] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  473.375338][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[  473.384160][ T9260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.855'.
[  473.527115][ T5732] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  473.564204][ T5732] usb 6-1: config 179 interface 65 has no altsetting 0
[  474.341308][ T5732] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  474.368202][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.663181][ T5732] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input23
[  474.678763][ T5745] usb 5-1: string descriptor 0 read error: -71
[  474.718218][ T5745] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected
[  474.741486][ T4966] input input23: unable to receive magic message: -110
[  474.767997][ T5745] earthmate ttyUSB0: required endpoint is missing
[  474.797920][ T4966] input input23: unable to receive magic message: -32
[  474.815288][ T5745] usb 5-1: USB disconnect, device number 32
[  474.848917][ T4966] input input23: unable to receive magic message: -32
[  474.862438][ T5745] cypress_m8 5-1:0.0: device disconnected
[  474.923235][ T4966] input input23: unable to receive magic message: -32
[  474.958186][ T4966] input input23: unable to receive magic message: -32
[  474.982047][ T4966] input input23: unable to receive magic message: -32
[  475.229696][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  475.261254][ T5732] usb 6-1: USB disconnect, device number 16
[  475.284522][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  475.293460][ T9274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.859'.
[  476.017413][ T9278] fuse: Bad value for 'fd'
[  476.242944][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'.
[  476.251874][ T9286] netlink: 48 bytes leftover after parsing attributes in process `syz.2.862'.
[  477.250208][ T9294] netlink: 4664 bytes leftover after parsing attributes in process `syz.0.863'.
[  477.279043][   T29] audit: type=1326 audit(1785292942.440:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.0.863" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f415559de99 code=0x0
[  477.527345][ T9297] ip6t_srh: unknown srh match flags  FF3F
[  480.041504][ T5731] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  480.080329][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'.
[  480.264916][ T5731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.309768][ T5731] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  480.349563][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.407270][ T5731] usb 4-1: config 0 descriptor??
[  480.493222][ T9319] ip6t_srh: unknown srh match flags  FF3F
[  484.067358][ T5731] usb 4-1: string descriptor 0 read error: -71
[  484.077260][ T5731] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  484.162097][ T5731] earthmate ttyUSB0: required endpoint is missing
[  484.298947][ T5731] usb 4-1: USB disconnect, device number 27
[  484.900646][ T5731] cypress_m8 4-1:0.0: device disconnected
[  485.137878][ T9336] netlink: 996 bytes leftover after parsing attributes in process `syz.3.875'.
[  486.305321][ T9345] ip6t_srh: unknown srh match flags  FF3F
[  486.501243][ T5717] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[  486.957641][ T9353] ip6t_srh: unknown srh match flags  FF3F
[  487.312824][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.992962][ T5717] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  488.002116][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.021377][ T5717] usb 3-1: config 0 descriptor??
[  490.359743][ T5717] usb 3-1: string descriptor 0 read error: -71
[  490.426265][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.882'.
[  490.639931][ T5717] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected
[  490.977899][ T5717] earthmate ttyUSB0: required endpoint is missing
[  490.990647][ T9371] ip6t_srh: unknown srh match flags  FF3F
[  491.006721][   T29] audit: type=1400 audit(1785292956.170:554): avc:  denied  { write } for  pid=9368 comm="syz.4.883" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  491.036008][ T5717] usb 3-1: USB disconnect, device number 31
[  491.069470][ T5717] cypress_m8 3-1:0.0: device disconnected
[  492.095110][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[  492.584063][ T9383] fuse: Unknown parameter 'group_id00000000000000000000'
[  492.931660][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'.
[  493.042091][ T9397] ip6t_srh: unknown srh match flags  FF3F
[  496.669820][ T9421] ip6t_srh: unknown srh match flags  FF3F
[  497.023466][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  497.436874][ T9432] binder: 9430:9432 ioctl 400c620e 200000003b00 returned -22
[  499.382642][ T9437] ip6t_srh: unknown srh match flags  FF3F
[  499.479800][ T9438] netlink: 4664 bytes leftover after parsing attributes in process `syz.5.899'.
[  501.132546][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  501.148096][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  502.031477][   T87] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  504.252661][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  504.340001][ T9451] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  504.354419][ T9451] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  504.379470][ T9451] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  504.395585][ T9451] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  504.424497][ T9451] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  504.538657][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.907'.
[  504.891322][  T805] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  505.121225][  T805] usb 4-1: Using ep0 maxpacket: 8
[  505.141884][  T805] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  505.167386][  T805] usb 4-1: config 179 has no interface number 0
[  505.189454][  T805] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  505.213515][  T805] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  505.255383][  T805] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  505.293095][  T805] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  505.325662][  T805] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  505.370631][  T805] usb 4-1: config 179 interface 65 has no altsetting 0
[  505.379158][  T805] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  505.406156][  T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.440742][  T805] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input24
[  505.605699][ T4966] input input24: unable to receive magic message: -110
[  505.626271][ T4966] input input24: unable to receive magic message: -32
[  505.651236][   T10] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  505.664999][ T4966] input input24: unable to receive magic message: -32
[  505.682560][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.710974][ T4966] input input24: unable to receive magic message: -32
[  505.735692][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.740862][ T4966] input input24: unable to receive magic message: -32
[  505.765563][ T4966] input input24: unable to receive magic message: -32
[  505.824567][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.853848][   T10] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  505.874335][ T5825] usb 4-1: USB disconnect, device number 28
[  505.874353][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  505.897455][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.968811][   T10] usb 3-1: config 0 descriptor??
[  506.547234][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout
[  506.547231][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  506.547267][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  506.553319][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout
[  507.940787][ T9492] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  508.091840][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  508.135386][ T9489] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  508.598673][ T9489] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  508.694311][ T9489] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  508.807086][ T9499] ip6t_srh: unknown srh match flags  FF3F
[  508.819925][ T9489] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  508.890152][   T10] usb 3-1: string descriptor 0 read error: -71
[  508.927855][ T9489] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  510.210554][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout
[  510.741359][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout
[  510.904111][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  510.984791][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout
[  511.279772][   T10] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected
[  512.189866][   T10] earthmate ttyUSB0: required endpoint is missing
[  512.203306][   T10] usb 3-1: USB disconnect, device number 32
[  512.213564][   T10] cypress_m8 3-1:0.0: device disconnected
[  512.230765][ T9504] ip6t_srh: unknown srh match flags  FF3F
[  512.867151][ T9518] netlink: 996 bytes leftover after parsing attributes in process `syz.5.918'.
[  513.041396][ T5717] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  514.039870][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.635052][ T5717] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  515.698245][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.892561][ T5717] usb 4-1: config 0 descriptor??
[  516.006561][ T5717] usb 4-1: can't set config #0, error -71
[  516.061878][ T5717] usb 4-1: USB disconnect, device number 29
[  516.373857][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.921'.
[  516.382951][ T9529] netlink: 'syz.5.921': attribute type 10 has an invalid length.
[  516.390723][ T9529] netlink: 32 bytes leftover after parsing attributes in process `syz.5.921'.
[  518.393477][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'.
[  518.540604][ T9537] netlink: 48 bytes leftover after parsing attributes in process `syz.2.923'.
[  518.784900][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'.
[  518.793703][ T9541] netlink: 48 bytes leftover after parsing attributes in process `syz.5.925'.
[  519.419810][ T5717] usb 5-1: new low-speed USB device number 33 using dummy_hcd
[  519.877620][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.546580][ T5717] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  521.558307][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.586046][ T5717] usb 5-1: config 0 descriptor??
[  521.593957][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  521.601291][ T5717] usb 5-1: can't set config #0, error -32
[  521.622708][ T5717] usb 5-1: USB disconnect, device number 33
[  521.645091][ T9562] ip6t_srh: unknown srh match flags  FF3F
[  521.819644][ T9552] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  522.263689][ T9552] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  523.212495][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  523.351350][ T9552] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  523.381604][ T9552] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  523.401396][ T9552] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  523.560407][   T29] audit: type=1400 audit(1785292988.720:555): avc:  denied  { write } for  pid=9571 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  523.956878][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'.
[  524.433195][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout
[  524.444911][   T29] audit: type=1400 audit(1785292989.590:556): avc:  denied  { listen } for  pid=9590 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  524.697139][   T29] audit: type=1400 audit(1785292989.860:557): avc:  denied  { ioctl } for  pid=9599 comm="syz.2.942" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  524.914482][   T29] audit: type=1400 audit(1785292990.080:558): avc:  denied  { connect } for  pid=9601 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  524.964187][   T29] audit: type=1400 audit(1785292990.100:559): avc:  denied  { write } for  pid=9607 comm="syz.3.946" name="usb_gadget" dev="configfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  525.025104][   T29] audit: type=1400 audit(1785292990.100:560): avc:  denied  { write } for  pid=9607 comm="syz.3.946" name="configs" dev="configfs" ino=31855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  525.072869][   T29] audit: type=1400 audit(1785292990.110:561): avc:  denied  { write } for  pid=9607 comm="syz.3.946" name="functions" dev="configfs" ino=31854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  525.167705][   T29] audit: type=1400 audit(1785292990.110:562): avc:  denied  { bind } for  pid=9604 comm="syz.5.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  525.209394][   T29] audit: type=1400 audit(1785292990.110:563): avc:  denied  { write } for  pid=9607 comm="syz.3.946" name="header" dev="configfs" ino=31863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  525.293654][   T29] audit: type=1400 audit(1785292990.120:564): avc:  denied  { write } for  pid=9607 comm="syz.3.946" name="header" dev="configfs" ino=31876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  525.371305][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout
[  525.451346][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout
[  525.451371][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout
[  526.990281][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'.
[  527.429763][ T9661] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  527.454814][ T9661] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  527.515615][ T9661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  529.606826][ T9708] overlayfs: failed to resolve './bus': -2
[  529.646982][ T9708] overlayfs: missing 'lowerdir'
[  529.746906][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  529.746921][   T29] audit: type=1400 audit(1785292994.910:576): avc:  denied  { name_bind } for  pid=9706 comm="syz.5.969" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  529.927054][   T10] tipc: Node number set to 2130706433
[  530.182338][ T9708] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  530.499992][ T9715] netlink: 'syz.2.971': attribute type 3 has an invalid length.
[  531.727256][ T9741] netlink: 'syz.3.981': attribute type 4 has an invalid length.
[  531.763643][ T9741] netlink: 'syz.3.981': attribute type 4 has an invalid length.
[  532.272651][   T87] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  532.541209][   T87] usb 4-1: Using ep0 maxpacket: 16
[  532.554461][   T87] usb 4-1: unable to get BOS descriptor or descriptor too short
[  532.563335][   T87] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  532.579244][   T87] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  532.592523][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.626073][   T87] usb 4-1: Product: syz
[  532.770326][   T87] usb 4-1: Manufacturer: syz
[  532.813566][   T87] usb 4-1: SerialNumber: syz
[  533.323042][   T87] usb 4-1: selecting invalid altsetting 1
[  533.363027][   T87] cdc_ncm 4-1:1.0: bind() failure
[  533.383840][   T87] cdc_ncm 4-1:1.1: skipping garbage
[  533.395298][   T87] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  533.411227][   T87] cdc_ncm 4-1:1.1: bind() failure
[  533.576088][   T87] usb 4-1: USB disconnect, device number 30
[  534.625313][   T29] audit: type=1400 audit(1785292999.790:577): avc:  denied  { read } for  pid=9769 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  534.711225][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  534.861192][   T10] usb 1-1: Using ep0 maxpacket: 32
[  534.868812][   T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.880150][   T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.176875][   T29] audit: type=1400 audit(1785293000.310:578): avc:  denied  { read } for  pid=9771 comm="syz.3.991" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  535.585827][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  535.594987][   T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  535.603348][   T10] usb 1-1: Product: syz
[  535.607510][   T10] usb 1-1: Manufacturer: syz
[  535.622355][   T10] hub 1-1:4.0: USB hub found
[  535.679281][ T9778] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  535.833778][   T10] hub 1-1:4.0: 2 ports detected
[  537.070618][   T10] hub 1-1:4.0: set hub depth failed
[  537.089092][   T10] usb 1-1: USB disconnect, device number 25
[  537.357249][ T9802] syz.3.1001 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  540.264877][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'.
[  540.728322][ T9831] netlink: 'syz.4.1008': attribute type 10 has an invalid length.
[  540.806594][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1008'.
[  541.344718][ T9854] tipc: Enabled bearer <udp:syz2>, priority 10
[  543.021478][ T5617] tipc: Node number set to 2130706433
[  543.702521][ T9871] netlink: 996 bytes leftover after parsing attributes in process `syz.3.1018'.
[  545.292261][ T9889] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.1023'.
[  545.293343][ T9888] binder: BINDER_SET_CONTEXT_MGR already set
[  545.308810][ T9888] binder: 9885:9888 ioctl 4018620d 200000004a80 returned -16
[  545.415922][ T9891] binder: 9885:9891 ioctl 400c620e 200000003b00 returned -22
[  545.837261][   T29] audit: type=1326 audit(1785293010.500:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9882 comm="syz.3.1023" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd60339de99 code=0x0
[  547.905400][ T9914] ip6t_srh: unknown srh match flags  FF3F
[  548.151339][   T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  548.311415][ T9923] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1032'.
[  548.822878][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.860492][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  548.911725][   T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  548.975034][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.095496][   T10] usb 1-1: config 0 descriptor??
[  549.131002][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  549.150032][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  549.159109][ T9925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1033'.
[  550.128909][ T9933] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  550.145297][ T9933] tipc: Disabling bearer <udp:syz2>
[  550.201262][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  550.230771][ T9935] ip6t_srh: unknown srh match flags  FF3F
[  550.368941][ T9937] db_root: cannot be changed because it's in use
[  550.391855][   T10] usb 4-1: Using ep0 maxpacket: 8
[  550.446196][   T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  550.513461][   T29] audit: type=1400 audit(1785293015.660:580): avc:  denied  { write } for  pid=9936 comm="syz.2.1037" name="functions" dev="configfs" ino=31854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  550.563016][   T10] usb 4-1: config 179 has no interface number 0
[  550.623263][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  550.709035][   T29] audit: type=1400 audit(1785293015.870:581): avc:  denied  { write } for  pid=9936 comm="syz.2.1037" name="naa.1234567890abcdef" dev="configfs" ino=10287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  550.757070][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  550.842683][ T9941] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
[  550.854755][ T9941] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[  550.863163][ T9941] CPU: 0 UID: 0 PID: 9941 Comm: syz.2.1037 Not tainted syzkaller #0 PREEMPT(full) 
[  550.872450][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  550.882496][ T9941] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0
[  550.889266][ T9941] Code: 06 fd 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 4b 5f 49 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b
[  550.908869][ T9941] RSP: 0000:ffffc900036dfb28 EFLAGS: 00010206
[  550.914935][ T9941] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900073f9000
[  550.922902][ T9941] RDX: 000000000000000c RSI: ffffffff82c100f5 RDI: 0000000000000060
[  550.930865][ T9941] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  550.938828][ T9941] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  550.946789][ T9941] R13: ffff8880243ea400 R14: ffff8880243ea400 R15: ffff8880243ea4b8
[  550.954752][ T9941] FS:  00007f14b2ae16c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000
[  550.963678][ T9941] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  550.970259][ T9941] CR2: 000000110c3e09e4 CR3: 0000000055a98000 CR4: 00000000003526f0
[  550.978229][ T9941] Call Trace:
[  550.981501][ T9941]  <TASK>
[  550.984427][ T9941]  usbg_make_tpg+0x261/0x620
[  550.989026][ T9941]  ? __pfx_usbg_make_tpg+0x10/0x10
[  550.994144][ T9941]  ? find_held_lock+0x2b/0x80
[  550.998836][ T9941]  ? __pfx_usbg_make_tpg+0x10/0x10
[  551.003950][ T9941]  target_fabric_make_tpg+0xab/0x8c0
[  551.009250][ T9941]  configfs_mkdir+0x51e/0xb70
[  551.013936][ T9941]  ? __pfx_target_fabric_make_tpg+0x10/0x10
[  551.019843][ T9941]  ? __pfx_configfs_mkdir+0x10/0x10
[  551.025046][ T9941]  ? may_create+0x9/0x440
[  551.029395][ T9941]  vfs_mkdir+0x361/0x850
[  551.033647][ T9941]  filename_mkdirat+0x48b/0x5e0
[  551.038498][ T9941]  ? __pfx_filename_mkdirat+0x10/0x10
[  551.043872][ T9941]  ? strncpy_from_user+0x19d/0x2d0
[  551.048990][ T9941]  ? do_getname+0x191/0x390
[  551.053495][ T9941]  __x64_sys_mkdir+0x6b/0x90
[  551.058085][ T9941]  do_syscall_64+0x115/0x870
[  551.062673][ T9941]  ? clear_bhb_loop+0x40/0x90
[  551.067348][ T9941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.073234][ T9941] RIP: 0033:0x7f14b1b9de99
[  551.077639][ T9941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.097239][ T9941] RSP: 002b:00007f14b2ae1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  551.105647][ T9941] RAX: ffffffffffffffda RBX: 00007f14b1e26090 RCX: 00007f14b1b9de99
[  551.113611][ T9941] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00
[  551.121571][ T9941] RBP: 00007f14b1c33eaf R08: 0000000000000000 R09: 0000000000000000
[  551.129530][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.137490][ T9941] R13: 00007f14b1e26128 R14: 00007f14b1e26090 R15: 00007ffe4a8d3a78
[  551.145458][ T9941]  </TASK>
[  551.148474][ T9941] Modules linked in:
[  551.152891][ T9941] ---[ end trace 0000000000000000 ]---
[  551.171303][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  551.252452][   T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  551.319929][   T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  551.402170][   T10] usb 4-1: config 179 interface 65 has no altsetting 0
[  551.428315][   T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  551.458053][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.515509][   T29] audit: type=1400 audit(1785293016.640:582): avc:  denied  { read } for  pid=4963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  551.583333][ T5825] usb 1-1: USB disconnect, device number 26
[  551.626737][   T29] audit: type=1400 audit(1785293016.640:583): avc:  denied  { search } for  pid=4963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  551.777173][   T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input26
[  551.809187][   T29] audit: type=1400 audit(1785293016.640:584): avc:  denied  { write search } for  pid=4963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  551.812503][ T9941] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0
[  551.837961][ T9941] Code: 06 fd 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 4b 5f 49 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b
[  551.860718][ T9941] RSP: 0000:ffffc900036dfb28 EFLAGS: 00010206
[  551.866898][ T9941] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900073f9000
[  551.875629][ T9941] RDX: 000000000000000c RSI: ffffffff82c100f5 RDI: 0000000000000060
[  551.883825][ T9941] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  551.891851][ T9941] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  551.899828][ T9941] R13: ffff8880243ea400 R14: ffff8880243ea400 R15: ffff8880243ea4b8
[  551.907861][ T9941] FS:  00007f14b2ae16c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000
[  551.921369][ T4966] input input26: unable to receive magic message: -110
[  551.961313][  T994] usb 5-1: new low-speed USB device number 34 using dummy_hcd
[  551.969836][ T4966] input input26: unable to receive magic message: -32
[  551.973101][   T29] audit: type=1400 audit(1785293016.640:585): avc:  denied  { add_name } for  pid=4963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  552.044520][ T9941] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  552.055198][ T4966] input input26: unable to receive magic message: -32
[  552.057323][   T29] audit: type=1400 audit(1785293016.640:586): avc:  denied  { create } for  pid=4963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  552.091299][ T9941] CR2: 0000001b33908ff8 CR3: 0000000055a98000 CR4: 00000000003526f0
[  552.141444][ T9941] Kernel panic - not syncing: Fatal exception
[  552.147740][ T9941] Kernel Offset: disabled
[  552.152044][ T9941] Rebooting in 86400 seconds..