last executing test programs:

12.737346687s ago: executing program 2 (id=773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)
syz_open_dev$MSR(&(0x7f00000002c0), 0x31, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
read(r4, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
syz_open_dev$MSR(&(0x7f0000000300), 0x4, 0x0)
mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)

12.377586566s ago: executing program 4 (id=778):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b})
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
personality(0xeafffffffeeffff4)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0)
read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000)
r7 = msgget$private(0x0, 0xfffffffffffffffd)
msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000280)=""/230)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3c)

10.740115934s ago: executing program 3 (id=783):
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
gettid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mq_notify(r4, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3})
openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil)

9.840030341s ago: executing program 4 (id=785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002bbd700180000000030000005800018044000400200001000a00000000000000fe7f0000000000000000000000000010f8000000200002000a00000000000005ff010000000000000000000000000001000000000d0001007564703a73797a30000000005bc744f718195fba42a5ce409df928a1691b80e7eee2bd5ef70a58480e694216465feac1c4"], 0x6c}}, 0x8000)

9.786439336s ago: executing program 3 (id=786):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000440)='./file1\x00', 0x1d)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0xe7)
getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078)

9.653709794s ago: executing program 2 (id=787):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0xb4, 0x0, [0xb, 0x5, 0x8, 0x9]})
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x7fffffff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203243, 0x3, [0x2], [0x80ffff], [0x5], [0x400000000000000, 0x0, 0x4]})
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
accept4(r2, &(0x7f0000000080)=@ethernet={0x0, @dev}, &(0x7f0000000180)=0x80, 0x80800)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, <r7=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000480)={0x28, 0x0, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10001})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x20000000101})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f00000001c0)={0x2, 0x4f, 0x7, 0xe})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000003c0)={0x10, 0x1, r7})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000791090000000000069000a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x15}, 0x94)
prlimit64(0x0, 0x7, &(0x7f00000026c0)={0x8, 0x8}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000002d00)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000340)={0x0, <r11=>0x0}, &(0x7f0000000440)=0xc)
ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201)
setresuid(0x0, r11, 0x0)
semget$private(0x0, 0x6, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
fsmount(r9, 0x0, 0xf1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="8540eeffb80008000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94)

9.617419953s ago: executing program 0 (id=788):
sync()
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20044015)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7})
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x4040040)
r3 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)=0x21)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xf0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982301813042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)

9.616626617s ago: executing program 4 (id=789):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x3, 0x1, 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r3)
dup(0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000003c0)={0x3a3240580, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
syz_usb_connect(0x2, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001ebbd7081aeb01287a210102030109021d0001050000000904bb0801103f8d040905800c40000705010205"], 0x0)

8.921700887s ago: executing program 1 (id=790):
socket$nl_generic(0x10, 0x3, 0x10)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e)
socket$kcm(0x10, 0x7, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000040))
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x109000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000300))

8.921223088s ago: executing program 2 (id=791):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000280)=0xfffffffd, 0x4)
ioctl$TCFLSH(r0, 0x4b63, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000000c0)={0x7, 0x8, 0x3, 0xffff, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x2, "39a2"}, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

8.704908149s ago: executing program 3 (id=792):
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x73, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

8.059874748s ago: executing program 1 (id=793):
socket$nl_netfilter(0x10, 0x3, 0xc)
fanotify_init(0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=','])
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x29, 0x2120, 0x0)
r5 = syz_io_uring_setup(0x998, &(0x7f0000000640)={0x0, 0x4078, 0x20000, 0x3, 0x140}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r8, 0x541b, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000280)=""/97, 0x61}], 0x2})
io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0)

7.136788276s ago: executing program 3 (id=794):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000", @ANYRESDEC], 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0xfffffffe}]}, &(0x7f0000000180)=0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = syz_io_uring_setup(0xcd9, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x0, 0x234}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={0x0})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000feffffff000000000400000495000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, 0x0}}], 0x1, 0x145)

6.958254652s ago: executing program 1 (id=795):
mkdir(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xd6741, 0x2fb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000000000200100000d0000050000000c0100000000005f000094aa88b482b3cf0d01d4c27da3e40ac405ba619dc549097f0026ea9e17fc4a01a04c423b13b6d1d8bf97800314b169faa5af00"/111], 0x0, 0x3d, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x18000000, 0x8b}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3450, &(0x7f0000000300)={0x0, 0xce41, 0x0, 0x0, 0x322})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x10001, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x6, @mcast1, 0x3}}}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000380))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x49}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004854}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
fcntl$setlease(r7, 0x400, 0x2)
epoll_create1(0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

6.533813563s ago: executing program 0 (id=796):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b})
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
personality(0xeafffffffeeffff4)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0)
read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000)
r7 = msgget$private(0x0, 0xfffffffffffffffd)
msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000280)=""/230)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3c)

6.438967458s ago: executing program 1 (id=797):
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
gettid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mq_notify(r4, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3})
openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil)

5.898736019s ago: executing program 1 (id=798):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)
syz_open_dev$MSR(&(0x7f00000002c0), 0x31, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
read(r4, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r5}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00'}, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
syz_open_dev$MSR(&(0x7f0000000300), 0x4, 0x0)
mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)

5.354016588s ago: executing program 2 (id=799):
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x66c3, &(0x7f0000000040)={0x0, 0x3a46, 0x20, 0xe, 0x20002fb})
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b090581030002000000090401"], 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pipe(0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
mlockall(0x5)
getsockopt$sock_int(r4, 0x1, 0x2, 0x0, &(0x7f0000000300))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x80)
ioperm(0x7f, 0x8, 0x5)

5.223711769s ago: executing program 0 (id=800):
socket(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="ac10000003000000080029000b0b0000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r0 = syz_io_uring_setup(0x282e, &(0x7f0000000300)={0x0, 0xcd1d, 0x4}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r7, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
r8 = socket(0x10, 0x803, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r8, 0x0, 0x4000)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000014110000180012800b000100697036746e0100000000000000001300"], 0x38}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setresuid(0x0, 0xee00, 0x0)
setpriority(0x1, 0x0, 0x4af)
socket$nl_rdma(0x10, 0x3, 0x14)

4.283953233s ago: executing program 0 (id=801):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fsopen(&(0x7f00000001c0)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x308c0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000002c0))
ptrace(0x10, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002dc0)=[{{&(0x7f0000000040)={0xa, 0x0, 0xfffffff5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000004c0)="bc", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xbed}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000200)='c', 0x1}], 0x1}}], 0x2, 0x20004005)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.16617847s ago: executing program 3 (id=802):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x69808538a7565a17}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
getsockopt(r7, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000))
syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0xfffff000, 0xa, 0x0, &(0x7f0000000180)="61df7100c80400d572e1", 0x0, 0x38000000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x4000804)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
munlockall()
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', 0x0})

2.539977882s ago: executing program 4 (id=803):
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r2, @ANYBLOB="ce2cb59827c9cbf50cb81f73e871d9a454cb8e4a9fd7d2179b5b50f6826d8a3ea8a54e73321a5d2139061411649026df4f929716026db110f26f13950f00a0a03179089fdccf81e502175c186b470d80ae0ab2d2e6916088af16f6d1baf71eab28487a5676fade2a942a8b4396d6e86e70ed59420ca54652749094fd8c1ab6910357861edcaae29263e0498c2ae2f49b3982e09cb708a7330db59da78d4a1737edc3"], 0x20}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$TCFLSH(r6, 0x400455c8, 0x2)

1.201769285s ago: executing program 3 (id=804):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x2, 0x6, 0x5})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x446000, 0x0)
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000001300)={0x4, 0x7, 0x0, 0xa3, &(0x7f00000001c0)=""/163, 0x6b, &(0x7f0000000280)=""/107, 0x1000, &(0x7f0000000300)=""/4096})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001340)={0x0, <r4=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001380)={r4, 0x80000})
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x28180, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000001400))
r6 = open(&(0x7f0000001440)='./file0\x00', 0x30442, 0x0)
ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000001480))
ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000014c0)=<r7=>0x0)
setpgid(0x0, r7)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001500)={0x5, 0x0, [{0xa17, 0x0, 0x1}, {0xb34, 0x0, 0x10}, {0x585, 0x0, 0x3538}, {0xa2c}, {0xb3d, 0x0, 0x7}]})
rseq(&(0x7f0000001580), 0x20, 0x1, 0x0)
syz_usb_connect(0x0, 0x141, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0xe4, 0xcd, 0x9a, 0x8, 0x2040, 0x826d, 0xa6fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12f, 0x2, 0x7, 0x24, 0x20, 0x9, [{{0x9, 0x4, 0xf8, 0x5, 0x3, 0xf6, 0xf5, 0x9c, 0x3, [], [{{0x9, 0x5, 0x2, 0x2, 0x0, 0x2}}, {{0x9, 0x5, 0x2, 0x2, 0x220, 0xd3, 0xf9, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x5, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0x10, 0x37, 0x0, 0xff, 0xff, 0xff, 0xfc, [@generic={0xf2, 0xa, "fc0e73cb44bea0822b8966988c899b315f8e252c728d39a78e549b1b3d69faf0ef991588ac049c424184258f1a68444ef14eabbdabf30c3184d25ba6b3282fd07769074c41c2b9a9afc1fa0e955a82357e1cd85545f7d430eb53efe6e711c6a754b0fce06734a941c16ee364161fb4b21eb844454559da79f78cb76f0d7547155440cf73fc5eb2de49fd33736cf34ca9c692637c5573e38817bbd4bedf82710cc21785ba3701de7745325603d99c38d30a6a4ce8acca0bf28ccf4127f1d7c52e6387386c3634515e62507d2290ed786e93401826b03b85569d0382631be73ef7286807d1f6fbe3adf2410185d3767cbd"}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x300, 0x0, 0xf9, 0x10, 0x20, 0xb}, 0x1f, &(0x7f0000001780)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4f3715e620060fb4c09e4b770c7aa1f9"}]}, 0x3, [{0x51, &(0x7f00000017c0)=@string={0x51, 0x3, "797ba1b8d72b93cbaff1be9c1e2fd8f9fdd60a03d9e9dd0e4aa65d4a7428565754d8011c16e5eadfc76a429463b5ba207632e2a4a65bc7b5254a817ebcda63d5f06e545e6a9e609a88e80b8ec0f228"}}, {0xa7, &(0x7f0000001840)=@string={0xa7, 0x3, "f55a465dd731097e2704e83d0280dc63c6f6e435f2d1358ae5f0861042db41ea0d53bed353a9895f370131cadf99636bb8d66118ae6032f486ec340d4a22a8dee0ba7a00eca3db0982fafc872553439d4ad45ab56b09fa29ca2f24430a07e9dc4306f79ca5be8fdaf5dc70353b81b3b0d3683a7ad5c8642ac3c8f4a8ead3276d0f70805f5f39fe5409bea71010a5268e82f9c5aad640ba833f5c4fce4d82c57bf7d316d426"}}, {0x70, &(0x7f0000001900)=@string={0x70, 0x3, "a097f2809fb3a25e2f842bbafdac1188e34cee59442431703351eaabe17a6d512be76dc91bc8a35b156674e233e6e6a588e47d804a8e56be743f7be3a8ac8e53a45335ffdee641e89d4bdbb564e9c20acbb180ad19486a9c2232f52e9b34be906a912e5715d8f49f090757e5c764"}}]})
r8 = socket$alg(0x26, 0x5, 0x0)
ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f00000019c0)=""/35)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a00), 0x240400, 0x0)
bind$alg(r5, &(0x7f0000001a40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001ac0)={'veth0_macvtap\x00', 0x2000})
r9 = signalfd(r0, &(0x7f0000001b00)={[0x7fffffffffffffff]}, 0x8)
recvfrom$netrom(r9, &(0x7f0000001b40)=""/60, 0x3c, 0x40, &(0x7f0000001b80)={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001c00)={<r10=>0x0, 0x401}, &(0x7f0000001c40)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000001c80)={r10, @in6={{0xa, 0x4e24, 0x5, @remote, 0x7}}}, 0x84)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r8, 0xcb977000)
clock_gettime(0x0, &(0x7f0000001dc0)={<r11=>0x0, <r12=>0x0})
mq_timedreceive(r6, &(0x7f0000001d40)=""/104, 0x68, 0x6, &(0x7f0000001e00)={r11, r12+10000000})
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000001e40)={0x1, 0x0, [{}]})

1.17439686s ago: executing program 2 (id=805):
brk(0x400000ffc020)

1.11952992s ago: executing program 1 (id=806):
sync()
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20044015)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7})
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x4040040)
r3 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)=0x21)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xf0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982301813042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)

1.114452575s ago: executing program 2 (id=807):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x1000000000000000, 0x0)
r1 = fanotify_init(0x10, 0x101000)
fanotify_mark(r1, 0x7e, 0x40000018, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d530495c)
write$binfmt_elf32(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x258)
close(r3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x58, &(0x7f0000000500)}, 0x67)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

1.056114339s ago: executing program 4 (id=808):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000740), 0x0, 0x401, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/15], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10)
syz_emit_ethernet(0xe73, &(0x7f0000001180)=ANY=[], 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_extract_tcp_res(0x0, 0x10000, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0)
sendto$packet(r5, 0x0, 0x0, 0x1, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x4, 0x6)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
fchdir(r6)
sendmsg$kcm(r6, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
eventfd2(0x6, 0x80800)
socket$inet6_udp(0xa, 0x2, 0x0)

733.274893ms ago: executing program 0 (id=809):
socket(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4)
recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
gettid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mq_notify(r4, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3})
openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil)

56.716943ms ago: executing program 0 (id=810):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000004c0)={0xe, {0x2, 0x8d, 0x3, 0xb9, "2301a445d057ce317b1aa506e35f4a3a7c6ccb66ed4f66a5e21d90e5310ad008eee515212a45e0d1a0cd47c13fd4f10245853deba10c98405710893c3eaf81bcb64bd34d734c3c1a2d8076162220a6f4230d73124908824e76e868333cc39a011ef19d49e09e623f29ed1f3ae0b10b5a3101a41a997f72a7555b0b4900e87473437530fd931f85af217b508551b2e97b6a7765a701fc30d683d0f9ee3b47831c239decd3128015631a71749f83a6b94ae807e15d0487614f83"}}, 0xc5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
read$snddsp(r3, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000009c0)="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", 0x2000, &(0x7f0000003900)={&(0x7f00000005c0)={0x50, 0xfffffffffffffff5, 0x5, {0x7, 0x2b, 0x7, 0x200831, 0x1, 0x751, 0x1, 0x12, 0x0, 0x0, 0x80, 0x5}}, &(0x7f0000000640)={0x18, 0xffffffffffffffda, 0xcbf, {0x4}}, &(0x7f0000000680)={0x18, 0x0, 0x8, {0x8}}, &(0x7f00000006c0)={0x18, 0x0, 0xfffffffffffffffc, {0x1}}, &(0x7f0000000700)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000740)={0x28, 0x0, 0x7a1b, {{0xfff, 0x7f, 0x1}}}, &(0x7f0000000900)={0x60, 0x0, 0x8000000000000001, {{0xfffffffffffffff7, 0x2a, 0x1, 0x8, 0x0, 0xce0, 0x5, 0x2}}}, &(0x7f0000000780)={0x18, 0x0, 0x3bd, {0x6}}, &(0x7f00000029c0)={0x11, 0xfffffffffffffffe, 0x40, {'\x00'}}, &(0x7f0000002a00)={0x20, 0x0, 0x7fffffff, {0x0, 0x1a}}, &(0x7f0000002b80)={0x78, 0x0, 0x7, {0xb, 0xa9, 0x0, {0x0, 0x5, 0x7, 0x9, 0x8d2, 0x8, 0x4, 0x24000, 0x4, 0x8000, 0x6, 0x0, 0x0, 0xff2, 0x2}}}, &(0x7f0000002c40)={0x90, 0xfffffffffffffff5, 0x400, {0x2, 0x2, 0x9, 0x0, 0x290, 0xf, {0x1, 0x0, 0x2, 0x80, 0xf, 0xbe45, 0x5, 0xff, 0x3bf, 0xa000, 0x6, 0x0, 0x0, 0x11b3, 0x10}}}, &(0x7f0000002d00)={0x28, 0x0, 0x1, [{0x3, 0xb, 0x0, 0x1da6}]}, &(0x7f00000039c0)=ANY=[@ANYBLOB="8804000000000000001000000000000006000000000000000200000000000000000000000000000010000000000000000d000000050000000300000000000000a8d0000000000000ff0300000000000008000000000000000700000000000000010000000000000003000000470000002cbc000000a0000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000009e00000000000000000000000000000008000000000000000a000000070000002f6465762f766269230000000000000001000000000000000300000000000000ad010000000000000018000000000000070000000300000004000000000000000044000000000000020000000000000000020000000000000100000000000000ae3800000000000001000080a60400000200000000200000ff7f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f00000001000000000000000000000000000000040000000000000018000000040000002f73656c696e75782f6176632f686173685f7374617473000500000000000000020000000000000001000000000000000100000000000000090000000500000003000000000000000000000000000000080000000000000005000000000000000002000000000000080000000000000008000000010000000500000000d0000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000ffffff7f000000000100000000000000010000000000000018000000040000002f73656c696e75782f6176632f686173685f73746174730004000000000000000200000000000000cc0a000000000000090000000000000003000000040000000600000000000000010100000000000003000000000000000700000000000000ff07000000000000000000000000000080e00000080000000800000000200000ffff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000080000000000000001000000000000000b000000000000000000000000080000040000000000000003000000000000000300000000000000000000000000008001000000030000000600000000000000000000ff010000000600000000000000d300000000000000040000000000000001000000000000000700000006000000252300000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f1f7fffffaffffff00000000020000000000000007000000000000000000000002000000060000000000000002000000000000000700000000000000cbcc000000000000008000000e00000003000000000000000000000001000000000000000000000005000000000000000400000000000000050000000000000002000000060000000002000000c00000e9040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000090000000000000004000000000000000300000000000000080000000200000073797a746e6c300002000000000000000000000000000000000000000000000004000000000000000b05000005000000010000000000000001000000000000000100000000000080970c00000000000001010000000000000300000000000000ffffff7f600900000000000000c00000330d0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000d000000000000000400000000180a00000000000100000005000000070000002b212e2a24000000eef21deb45df4e933edca2ddb041e57e4f3461f90778810bded338b6fca350b856debf0d4b990b44f52f4afe78da6a1d104d8030c3d039c7783ae663b2056553a53fddab76"], &(0x7f00000036c0)={0xa0, 0xfffffffffffffff5, 0x8, {{0x1, 0x3, 0x5, 0x2, 0x8, 0x8, {0x0, 0x3, 0x10001, 0x3, 0xe, 0x10001, 0x3, 0x200, 0x0, 0xc000, 0x0, 0x0, 0xee00, 0x1c5, 0x7}}, {0x0, 0x1}}}, &(0x7f0000003780)={0x20, 0x0, 0x7, {0x0, 0x0, 0x3, 0x6}}, &(0x7f00000037c0)={0x130, 0x0, 0x5, {0x8, 0x97, 0x0, '\x00', {0x20, 0xe13, 0x4, 0xd59b, 0x0, 0x0, 0xa000, '\x00', 0x5, 0x6, 0x857, 0x6, {0x0, 0x10001}, {0xd4b3, 0x7fffffff}, {0x1000, 0x1}, {0x9, 0xcb}, 0x6, 0x1, 0x0, 0xc}}}})

0s ago: executing program 4 (id=811):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00'})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0xba01, 0x0, 0x400c014}, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
creat(0x0, 0x19f)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0xd4, 0x8}, 'port1\x00', 0x81, 0x60000, 0x400, 0x7, 0x1, 0x0, 0x5, 0x0, 0x4, 0x3})
io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES32=r1], 0x0)

kernel console output (not intermixed with test programs):

scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  152.248696][ T6887] netlink: 'syz.4.234': attribute type 10 has an invalid length.
[  152.446738][ T6887] batman_adv: batadv0: Adding interface: wlan0
[  152.458965][ T6887] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.494643][ T6887] batman_adv: batadv0: Interface activated: wlan0
[  153.128417][   T30] audit: type=1400 audit(1759405090.310:351): avc:  denied  { bind } for  pid=6882 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  153.196358][   T10] usb 4-1: USB disconnect, device number 7
[  153.214381][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[  153.316991][   T30] audit: type=1326 audit(1759405090.510:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bdaf8eec9 code=0x0
[  154.299720][ T5885] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  154.312410][ T6886] dummy0 (unregistering): left allmulticast mode
[  154.536457][ T5942] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  154.544648][ T5885] usb 2-1: device descriptor read/64, error -71
[  154.615406][ T6912] netlink: 284 bytes leftover after parsing attributes in process `syz.0.242'.
[  154.716220][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64
[  154.727127][ T5942] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  154.737425][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.749525][ T5942] usb 5-1: config 0 descriptor??
[  154.794119][ T5885] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  154.923989][ T5885] usb 2-1: device descriptor read/64, error -71
[  154.960727][ T5942] ath6kl: Failed to submit usb control message: -71
[  154.967554][ T5942] ath6kl: unable to send the bmi data to the device: -71
[  154.974655][ T5942] ath6kl: Unable to send get target info: -71
[  154.985674][ T5942] ath6kl: Failed to init ath6kl core: -71
[  154.996096][ T5942] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  155.010097][ T5942] usb 5-1: USB disconnect, device number 10
[  155.034967][ T5885] usb usb2-port1: attempt power cycle
[  155.412567][ T5885] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  155.621723][ T5885] usb 2-1: device descriptor read/8, error -71
[  155.680166][   T30] audit: type=1400 audit(1759405092.870:353): avc:  denied  { name_connect } for  pid=6919 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  155.762279][   T30] audit: type=1400 audit(1759405092.950:354): avc:  denied  { watch watch_reads } for  pid=6921 comm="syz.0.245" path="/50" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  155.951337][   T30] audit: type=1400 audit(1759405092.950:355): avc:  denied  { ioctl } for  pid=6919 comm="syz.2.244" path="socket:[13325]" dev="sockfs" ino=13325 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  156.249992][ T6926] SELinux:  policydb version -1073462477 does not match my version range 15-35
[  156.251890][   T30] audit: type=1400 audit(1759405093.440:356): avc:  denied  { load_policy } for  pid=6924 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  156.259322][ T6926] SELinux: failed to load policy
[  156.279292][ T5885] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  156.319412][   T30] audit: type=1400 audit(1759405093.490:357): avc:  denied  { create } for  pid=6924 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  156.351635][ T5885] usb 2-1: device descriptor read/8, error -71
[  156.356630][   T30] audit: type=1400 audit(1759405093.490:358): avc:  denied  { ioctl } for  pid=6924 comm="syz.4.246" path="socket:[13333]" dev="sockfs" ino=13333 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  156.382312][    C1] vkms_vblank_simulate: vblank timer overrun
[  156.403759][   T30] audit: type=1400 audit(1759405093.490:359): avc:  denied  { bind } for  pid=6924 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  156.464442][ T5885] usb usb2-port1: unable to enumerate USB device
[  156.774975][   T43] hid-generic 8136:6586FB74:5CCC296E.0008: unexpected long global item
[  156.783710][   T43] hid-generic 8136:6586FB74:5CCC296E.0008: probe with driver hid-generic failed with error -22
[  156.981537][   T30] audit: type=1400 audit(1759405094.170:360): avc:  denied  { ioctl } for  pid=6951 comm="syz.2.255" path="socket:[12769]" dev="sockfs" ino=12769 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  157.020164][ T5885] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  157.724227][ T5942] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  157.734898][ T5885] usb 2-1: Using ep0 maxpacket: 16
[  157.751449][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  157.782394][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.832659][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  157.859043][ T5885] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  157.871109][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.885554][ T5885] usb 2-1: config 0 descriptor??
[  157.893992][ T5942] usb 1-1: Using ep0 maxpacket: 8
[  157.908103][ T5942] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  157.921930][ T5942] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.935556][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0
[  157.943088][ T5942] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  157.990214][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.030234][ T5942] usb 1-1: config 0 descriptor??
[  158.070073][ T6968] netlink: 830 bytes leftover after parsing attributes in process `syz.2.260'.
[  158.110764][ T6968] SQUASHFS error: Failed to read block 0x0: -5
[  158.117223][ T6968] unable to read squashfs_super_block
[  158.122521][   T30] audit: type=1400 audit(1759405095.300:361): avc:  denied  { bind } for  pid=6963 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.973978][   T30] audit: type=1400 audit(1759405096.140:362): avc:  denied  { read } for  pid=6940 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  159.156345][ T6988] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  159.180288][ T5942] IPVS: starting estimator thread 0...
[  159.286511][ T6990] IPVS: using max 42 ests per chain, 100800 per kthread
[  159.353477][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'.
[  159.815987][ T7001] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.169396][  T974] usb 1-1: USB disconnect, device number 9
[  160.391831][ T7008] loop2: detected capacity change from 0 to 7
[  160.425172][ T5831] Dev loop2: unable to read RDB block 7
[  160.432018][ T5831]  loop2: unable to read partition table
[  160.438408][ T5831] loop2: partition table beyond EOD, truncated
[  160.544596][ T7002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7002 comm=syz.3.266
[  160.565436][ T7008] Dev loop2: unable to read RDB block 7
[  160.571026][ T7008]  loop2: unable to read partition table
[  161.006198][ T7008] loop2: partition table beyond EOD, truncated
[  161.024032][ T7008] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  161.356601][ T7021] loop8: detected capacity change from 0 to 7
[  161.369229][ T7021] Dev loop8: unable to read RDB block 7
[  161.376206][ T7021]  loop8: unable to read partition table
[  161.382490][ T7021] loop8: partition table beyond EOD, truncated
[  161.394050][ T7021] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  161.410557][ T5871] usb 2-1: USB disconnect, device number 11
[  161.434542][   T43] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  161.489319][   T24] hid-generic 8136:6586FB74:5CCC296E.000A: unexpected long global item
[  161.498602][   T24] hid-generic 8136:6586FB74:5CCC296E.000A: probe with driver hid-generic failed with error -22
[  161.723893][   T43] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  161.739471][   T43] usb 4-1: config 0 has no interface number 0
[  161.776647][   T43] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  162.231493][   T43] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  162.289614][   T43] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  162.311941][   T43] usb 4-1: Product: syz
[  162.334194][   T43] usb 4-1: SerialNumber: syz
[  162.349926][   T43] usb 4-1: config 0 descriptor??
[  162.461521][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'.
[  162.467943][   T43] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  163.012426][   T43] usb 4-1: USB disconnect, device number 8
[  163.172614][ T7049] capability: warning: `syz.0.277' uses 32-bit capabilities (legacy support in use)
[  163.355732][   T30] audit: type=1400 audit(1759405100.520:363): avc:  denied  { ioctl } for  pid=7048 comm="syz.3.282" path="mnt:[4026532788]" dev="nsfs" ino=4026532788 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  163.387904][ T5885] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  163.555686][   T30] audit: type=1400 audit(1759405100.520:364): avc:  denied  { setattr } for  pid=7048 comm="syz.3.282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  164.055078][ T7057] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  164.118951][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  164.129804][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.154587][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  164.176157][ T5885] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  164.455259][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  164.469550][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  164.497553][ T7052] bridge_slave_0: left allmulticast mode
[  164.527887][ T5885] usb 2-1: Product: syz
[  164.532475][ T7052] bridge_slave_0: left promiscuous mode
[  164.539119][ T5885] usb 2-1: Manufacturer: syz
[  164.551587][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.564931][ T5885] cdc_wdm 2-1:1.0: skipping garbage
[  164.571071][ T7052] bridge_slave_1: left allmulticast mode
[  164.577239][ T5885] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  164.586466][ T7052] bridge_slave_1: left promiscuous mode
[  164.596841][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.622350][ T7052] bond0: (slave bond_slave_0): Releasing backup interface
[  164.636942][ T7052] bond0: (slave bond_slave_1): Releasing backup interface
[  164.669793][ T7052] team0: Port device team_slave_0 removed
[  164.687759][ T7052] team0: Port device team_slave_1 removed
[  164.695903][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.703343][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.720951][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.730441][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.751231][ T7052] batman_adv: batadv0: Interface deactivated: wlan0
[  164.757987][ T7052] batman_adv: batadv0: Removing interface: wlan0
[  165.187806][ T7076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=7076 comm=syz.3.286
[  165.242878][  T973] usb 2-1: USB disconnect, device number 12
[  165.401598][ T7081] netlink: 'syz.0.288': attribute type 4 has an invalid length.
[  165.433789][ T7081] netlink: 'syz.0.288': attribute type 4 has an invalid length.
[  165.463556][   T30] audit: type=1400 audit(1759405102.650:365): avc:  denied  { mounton } for  pid=7079 comm="syz.0.288" path="/56/file0" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  165.486496][ T7081] 9pnet_fd: Insufficient options for proto=fd
[  165.930761][   T30] audit: type=1400 audit(1759405103.120:366): avc:  denied  { kexec_image_load } for  pid=7085 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  166.984159][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  167.148136][ T5871] usb 2-1: config 0 has no interfaces?
[  167.231850][   T30] audit: type=1400 audit(1759405104.320:367): avc:  denied  { write } for  pid=7100 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  167.289747][ T5871] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  167.301860][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.311139][ T5871] usb 2-1: Product: syz
[  167.392861][ T5871] usb 2-1: Manufacturer: syz
[  167.413896][ T5871] usb 2-1: SerialNumber: syz
[  167.475748][   T30] audit: type=1400 audit(1759405104.450:368): avc:  denied  { bind } for  pid=7101 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  167.521123][ T5871] usb 2-1: config 0 descriptor??
[  167.595655][   T30] audit: type=1400 audit(1759405104.450:369): avc:  denied  { setopt } for  pid=7101 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.105650][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'.
[  168.201100][   T30] audit: type=1400 audit(1759405105.390:370): avc:  denied  { mount } for  pid=7125 comm="syz.3.300" name="/" dev="autofs" ino=13780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  168.292502][   T30] audit: type=1400 audit(1759405105.480:371): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  168.584091][ T5885] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  168.767259][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.782596][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.801467][ T5885] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  168.812535][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.886507][ T5885] usb 4-1: config 0 descriptor??
[  169.193601][  T974] usb 2-1: USB disconnect, device number 13
[  169.520979][ T5885] hid-led 0003:04D8:F372.000B: unknown main item tag 0x0
[  169.533088][ T5885] hid-led 0003:04D8:F372.000B: unknown main item tag 0x0
[  169.560775][ T5885] hid-led 0003:04D8:F372.000B: unknown main item tag 0x0
[  169.607176][ T7143] ALSA: mixer_oss: invalid OSS volume ''
[  169.655359][ T5885] hid-led 0003:04D8:F372.000B: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0
[  169.716439][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'.
[  169.825053][   T30] audit: type=1400 audit(1759405107.020:372): avc:  denied  { bind } for  pid=7149 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  169.855266][ T7150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.306'.
[  169.907909][   T30] audit: type=1400 audit(1759405107.090:373): avc:  denied  { bind } for  pid=7149 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  169.983145][ T5885] hid-led 0003:04D8:F372.000B: Greynut Luxafor initialized
[  170.011535][ T5885] usb 4-1: USB disconnect, device number 9
[  170.041023][ T6320] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  170.069340][ T6320] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  170.084598][ T1155] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  170.102886][ T6320] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  170.130312][ T6320] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  170.155393][ T6320] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  170.176376][ T6320] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  170.190074][ T6320] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  170.204274][ T6320] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  170.223187][ T6320] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  170.236637][   T36] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  170.258070][ T6320] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  170.267538][   T61] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  170.316320][ T1107] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  170.346057][ T1107] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  170.367711][   T36] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  170.383597][   T36] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  170.392795][ T5871] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.405587][   T36] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  170.544075][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  170.590195][ T5871] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[  170.600575][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  170.613823][ T5871] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  170.623873][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.643617][ T5871] usb 3-1: config 0 descriptor??
[  170.664034][ T5871] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  170.732065][   T30] audit: type=1400 audit(1759405107.920:374): avc:  denied  { append } for  pid=7171 comm="syz.1.312" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  170.766275][ T7174] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  170.782085][ T7174] cramfs: wrong magic
[  171.086513][   T30] audit: type=1400 audit(1759405108.280:375): avc:  denied  { mount } for  pid=7171 comm="syz.1.312" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  171.124088][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  171.437949][ T5885] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  171.456218][ T5885] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping
[  171.521285][ T7178] syzkaller1: entered promiscuous mode
[  171.526951][ T7178] syzkaller1: entered allmulticast mode
[  171.558077][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.579787][   T30] audit: type=1400 audit(1759405108.760:376): avc:  denied  { append } for  pid=7162 comm="syz.2.310" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  171.772077][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.831429][   T30] audit: type=1326 audit(1759405109.020:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  171.854635][    C1] vkms_vblank_simulate: vblank timer overrun
[  171.878368][   T30] audit: type=1326 audit(1759405109.020:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  171.920606][ T5885] usb 4-1: Dual-Role OTG device on HNP port
[  171.979269][   T30] audit: type=1326 audit(1759405109.020:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  172.003301][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.043061][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.056614][ T5885] usb 4-1: Product: syz
[  172.060773][ T5885] usb 4-1: Manufacturer: syz
[  172.065501][ T5885] usb 4-1: SerialNumber: syz
[  172.101904][   T30] audit: type=1326 audit(1759405109.020:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  172.125133][    C1] vkms_vblank_simulate: vblank timer overrun
[  172.131591][   T30] audit: type=1326 audit(1759405109.020:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7181 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  172.154795][    C1] vkms_vblank_simulate: vblank timer overrun
[  173.138315][ T5942] usb 3-1: USB disconnect, device number 7
[  173.169760][ T7198] evm: overlay not supported
[  173.451648][ T5885] usb 4-1: 0:2 : does not exist
[  173.483550][ T5885] usb 4-1: USB disconnect, device number 10
[  173.964940][ T5144] Bluetooth: hci5: command 0x1003 tx timeout
[  173.995252][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  174.314035][ T7212] netlink: 92 bytes leftover after parsing attributes in process `syz.4.322'.
[  174.784079][   T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  176.082620][ T7226] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  176.095229][   T43] usb 4-1: config 160 has an invalid interface number: 200 but max is 0
[  176.103581][   T43] usb 4-1: config 160 has no interface number 0
[  176.155540][   T43] usb 4-1: config 160 interface 200 has no altsetting 0
[  176.178201][   T43] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  176.239201][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.273042][   T43] usb 4-1: Product: syz
[  176.283079][   T43] usb 4-1: Manufacturer: syz
[  176.294158][   T43] usb 4-1: SerialNumber: syz
[  177.387493][   T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  177.464026][   T43] usb 4-1: MIDIStreaming interface descriptor not found
[  177.617069][   T43] usb 4-1: USB disconnect, device number 11
[  177.977639][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.978006][ T7276] netlink: 830 bytes leftover after parsing attributes in process `syz.2.341'.
[  180.004117][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  180.004133][   T30] audit: type=1400 audit(1759405117.120:400): avc:  denied  { ioctl } for  pid=7250 comm="syz.4.336" path="socket:[14000]" dev="sockfs" ino=14000 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  180.008539][ T7276] SQUASHFS error: Failed to read block 0x0: -5
[  180.080921][ T7276] unable to read squashfs_super_block
[  180.090872][ T7279] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  180.347333][ T7277] syz_tun: entered allmulticast mode
[  180.403662][ T7282] overlayfs: missing 'lowerdir'
[  180.473729][ T7282] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.342'.
[  180.528737][   T30] audit: type=1400 audit(1759405117.720:401): avc:  denied  { write } for  pid=7278 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  180.548129][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.737537][   T30] audit: type=1400 audit(1759405117.720:402): avc:  denied  { append } for  pid=7278 comm="syz.1.342" name="video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  180.772509][ T7274] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  180.779114][ T7274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  180.804561][ T7274] vhci_hcd vhci_hcd.0: Device attached
[  180.814063][ T7281] vhci_hcd: connection closed
[  180.821566][ T1107] vhci_hcd: stop threads
[  180.834176][ T1107] vhci_hcd: release socket
[  180.861107][ T1107] vhci_hcd: disconnect device
[  180.882286][   T30] audit: type=1326 audit(1759405118.000:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7265 comm="syz.3.340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bdaf8eec9 code=0x0
[  181.560652][ T7296] [U] ���1WT`8�����H$�0�����9\
[  181.565828][ T7296] [U] ;2}u��gV�ĥ��#�O9��ե>-�����S�ݢ��p
[  181.572339][ T7296] [U] 4��XZ^Y����)��ഴ�m�c��.�o���p�O��W
[  181.579703][ T7296] [U] ��%�Z
[  181.843794][ T7301] sctp: [Deprecated]: syz.2.348 (pid 7301) Use of int in maxseg socket option.
[  181.843794][ T7301] Use struct sctp_assoc_value instead
[  181.850151][   T30] audit: type=1400 audit(1759405119.030:404): avc:  denied  { append } for  pid=7291 comm="syz.4.346" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.881821][    C1] vkms_vblank_simulate: vblank timer overrun
[  181.963982][   T43] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  182.114252][   T43] usb 1-1: device descriptor read/64, error -71
[  182.153775][ T7292] [U] �8`�}�[T�
[  182.291231][   T30] audit: type=1400 audit(1759405119.460:405): avc:  denied  { setopt } for  pid=7305 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  182.365386][   T43] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  182.515520][   T43] usb 1-1: device descriptor read/64, error -71
[  182.722320][   T43] usb usb1-port1: attempt power cycle
[  184.078772][   T30] audit: type=1400 audit(1759405121.270:406): avc:  denied  { getopt } for  pid=7320 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  184.211268][   T43] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  184.234478][   T43] usb 1-1: device descriptor read/8, error -71
[  184.374007][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  184.471399][ T7342] netlink: 348 bytes leftover after parsing attributes in process `syz.2.361'.
[  184.567101][   T43] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  184.594971][   T43] usb 1-1: device descriptor read/8, error -71
[  185.056911][   T43] usb usb1-port1: unable to enumerate USB device
[  185.057295][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  185.074660][   T10] usb 2-1: config 160 has an invalid interface number: 186 but max is 0
[  185.083044][   T10] usb 2-1: config 160 has no interface number 0
[  185.091028][   T10] usb 2-1: config 160 interface 186 has no altsetting 0
[  185.108208][   T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=ce42, bcdDevice= f.80
[  185.117373][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.130276][   T10] usb 2-1: Product: syz
[  185.146530][   T10] usb 2-1: Manufacturer: syz
[  185.152032][   T10] usb 2-1: SerialNumber: syz
[  185.415662][   T10] qmi_wwan 2-1:160.186: bogus CDC Union: master=0, slave=0
[  185.423597][   T10] qmi_wwan 2-1:160.186: probe with driver qmi_wwan failed with error -22
[  185.446476][   T10] usb 2-1: USB disconnect, device number 14
[  185.575502][   T30] audit: type=1400 audit(1759405122.740:407): avc:  denied  { read } for  pid=7353 comm="syz.3.364" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  186.207994][   T30] audit: type=1400 audit(1759405122.740:408): avc:  denied  { open } for  pid=7353 comm="syz.3.364" path="/73/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  186.230893][   T30] audit: type=1400 audit(1759405122.740:409): avc:  denied  { ioctl } for  pid=7353 comm="syz.3.364" path="/73/file0/file0" dev="fuse" ino=64 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  186.256204][   T30] audit: type=1400 audit(1759405122.900:410): avc:  denied  { mount } for  pid=7350 comm="syz.0.363" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  186.307486][   T30] audit: type=1326 audit(1759405123.040:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.0.363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c7398eec9 code=0x0
[  186.761003][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'.
[  187.544116][   T30] audit: type=1400 audit(1759405124.620:412): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  188.423703][   T43] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  188.449214][   T30] audit: type=1400 audit(1759405125.620:413): avc:  denied  { listen } for  pid=7375 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  188.508917][   T30] audit: type=1400 audit(1759405125.620:414): avc:  denied  { accept } for  pid=7375 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  188.834450][   T43] usb 5-1: config index 0 descriptor too short (expected 19492, got 36)
[  188.875254][   T43] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  188.896458][   T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36
[  188.917088][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  188.948929][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.998767][   T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.115237][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  189.160965][ T7390] misc userio: The device must be registered before sending interrupts
[  189.337430][   T30] audit: type=1400 audit(1759405126.390:415): avc:  denied  { bind } for  pid=7386 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  189.357749][   T30] audit: type=1400 audit(1759405126.390:416): avc:  denied  { listen } for  pid=7386 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  189.369881][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.435074][ T5871] IPVS: starting estimator thread 0...
[  189.482674][   T43] usb 5-1: config 0 descriptor??
[  189.523977][ T7396] IPVS: using max 38 ests per chain, 91200 per kthread
[  189.721906][ T7372] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  190.338777][   T43] lg-g15 0003:046D:C225.000C: unbalanced delimiter at end of report description
[  190.424758][   T43] lg-g15 0003:046D:C225.000C: probe with driver lg-g15 failed with error -22
[  190.495641][ T7407] syz.1.376 (7407) used greatest stack depth: 19240 bytes left
[  190.652556][ T7413] netlink: 830 bytes leftover after parsing attributes in process `syz.2.378'.
[  190.680974][ T7413] SQUASHFS error: Failed to read block 0x0: -5
[  190.687978][ T7413] unable to read squashfs_super_block
[  190.712529][ T7413] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  191.072716][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  191.072731][   T30] audit: type=1400 audit(1759405128.260:422): avc:  denied  { read } for  pid=7419 comm="syz.0.382" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  191.129251][   T30] audit: type=1400 audit(1759405128.300:423): avc:  denied  { open } for  pid=7419 comm="syz.0.382" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  191.169389][   T30] audit: type=1400 audit(1759405128.360:424): avc:  denied  { bind } for  pid=7427 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  191.231642][   T30] audit: type=1400 audit(1759405128.380:425): avc:  denied  { write } for  pid=7427 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  191.649118][ T5942] usb 5-1: USB disconnect, device number 11
[  192.594294][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  192.835288][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.882945][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.905757][ T7463] netlink: 830 bytes leftover after parsing attributes in process `syz.1.388'.
[  192.919343][ T7463] SQUASHFS error: Failed to read block 0x0: -5
[  192.926627][ T7463] unable to read squashfs_super_block
[  192.967219][   T43] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  193.021606][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.041927][ T7468] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  193.066305][   T43] usb 4-1: config 0 descriptor??
[  193.263992][ T5942] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  193.417652][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.431360][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.448880][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.462731][ T5942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.472140][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.489020][ T5942] usb 1-1: config 0 descriptor??
[  193.517984][   T43] waltop 0003:172F:0501.000D: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0
[  193.702098][   T10] usb 4-1: USB disconnect, device number 12
[  193.742767][ T7472] fido_id[7472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  193.783020][ T7475] netlink: 'syz.2.393': attribute type 2 has an invalid length.
[  193.790826][ T7475] netlink: 68 bytes leftover after parsing attributes in process `syz.2.393'.
[  193.812946][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  193.819611][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  193.953079][ T5942] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  193.983007][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.396'.
[  194.025581][ T7482] netlink: 'syz.4.396': attribute type 1 has an invalid length.
[  194.034229][   T30] audit: type=1400 audit(1759405131.210:426): avc:  denied  { getopt } for  pid=7480 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  194.270875][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'.
[  195.127783][   T30] audit: type=1400 audit(1759405132.320:427): avc:  denied  { bind } for  pid=7465 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  195.180280][   T30] audit: type=1400 audit(1759405132.320:428): avc:  denied  { connect } for  pid=7465 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  195.222528][   T10] libceph: connect (1)[c::]:6789 error -101
[  195.306511][ T7502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=7502 comm=syz.2.399
[  195.327570][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  195.339727][ T7503] syzkaller1: entered promiscuous mode
[  195.369999][ T7503] syzkaller1: entered allmulticast mode
[  195.470976][   T10] libceph: connect (1)[c::]:6789 error -101
[  195.673204][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  195.747446][ T7499] ceph: No mds server is up or the cluster is laggy
[  195.975610][   T10] libceph: connect (1)[c::]:6789 error -101
[  195.984103][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  196.431232][ T7497] delete_channel: no stack
[  196.493432][ T5942] usb 1-1: USB disconnect, device number 14
[  197.544312][ T7535] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  198.803985][   T30] audit: type=1400 audit(1759405135.960:429): avc:  denied  { listen } for  pid=7539 comm="syz.2.410" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  199.136141][ T7551] fuse: Bad value for 'fd'
[  199.145999][   T30] audit: type=1400 audit(1759405136.340:430): avc:  denied  { read } for  pid=7547 comm="syz.0.411" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  199.254111][   T30] audit: type=1400 audit(1759405136.380:431): avc:  denied  { open } for  pid=7547 comm="syz.0.411" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  199.713242][   T30] audit: type=1400 audit(1759405136.380:432): avc:  denied  { ioctl } for  pid=7547 comm="syz.0.411" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  199.954532][ T7560] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.969394][ T7564] overlayfs: workdir and upperdir must be separate subtrees
[  200.344099][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'.
[  200.382768][   T54] Bluetooth: (null): Invalid header checksum
[  200.474339][   T54] Bluetooth: (null): Invalid header checksum
[  200.489772][   T54] Bluetooth: (null): Invalid header checksum
[  200.585606][   T13] Bluetooth: (null): Invalid header checksum
[  202.399548][ T7597] netlink: 'syz.2.424': attribute type 4 has an invalid length.
[  202.422024][ T7599] sctp: [Deprecated]: syz.3.425 (pid 7599) Use of int in maxseg socket option.
[  202.422024][ T7599] Use struct sctp_assoc_value instead
[  202.452956][ T7599] warning: `syz.3.425' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  202.537928][ T7603] netlink: 165 bytes leftover after parsing attributes in process `syz.1.427'.
[  202.758962][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  202.791295][ T7609] block device autoloading is deprecated and will be removed.
[  202.817843][ T5942] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  203.018764][   T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  203.117287][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.127913][   T10] usb 3-1: config 0 has no interface number 0
[  203.134060][   T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  203.163228][   T10] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  203.181596][   T10] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  203.207403][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.218820][ T5942] usb 4-1: too many configurations: 109, using maximum allowed: 8
[  203.229634][   T10] usb 3-1: Product: syz
[  203.233800][   T10] usb 3-1: Manufacturer: syz
[  203.238924][   T10] usb 3-1: SerialNumber: syz
[  203.255179][ T5942] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  203.259101][ T7621] netlink: 64 bytes leftover after parsing attributes in process `syz.1.432'.
[  203.273356][   T10] usb 3-1: config 0 descriptor??
[  203.280852][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.289633][ T5942] usb 4-1: Product: syz
[  203.295620][ T5942] usb 4-1: Manufacturer: syz
[  203.306197][ T5942] usb 4-1: SerialNumber: syz
[  203.418970][   T30] audit: type=1400 audit(1759405140.610:433): avc:  denied  { getopt } for  pid=7625 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  203.434000][ T5871] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  203.593965][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  203.600927][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  203.609059][ T5871] usb 1-1: config 0 has no interface number 0
[  203.617081][ T5871] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  203.626271][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.634612][ T5871] usb 1-1: Product: syz
[  203.639047][ T5871] usb 1-1: Manufacturer: syz
[  203.643655][ T5871] usb 1-1: SerialNumber: syz
[  203.650215][ T5871] usb 1-1: config 0 descriptor??
[  203.657760][ T5871] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  203.667232][ T5871] usb 1-1: selecting invalid altsetting 1
[  203.672960][ T5871] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  203.686944][ T5871] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  203.700298][ T5871] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  203.710651][ T5871] usb 1-1: media controller created
[  203.739625][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  203.958132][  T973] usb 3-1: USB disconnect, device number 8
[  204.654136][ T5942] (unnamed net_device) (uninitialized): Assigned a random MAC address: 72:05:a1:8e:26:13
[  204.729927][ T5942] rtl8150 4-1:1.0: eth1: rtl8150 is detected
[  204.774327][ T5942] usb 4-1: USB disconnect, device number 13
[  204.919292][ T5871] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  204.927933][ T5871] zl10353_read_register: readreg error (reg=127, ret==-110)
[  206.453782][ T5942] usb 1-1: USB disconnect, device number 15
[  206.571776][ T7665] netlink: 165 bytes leftover after parsing attributes in process `syz.3.442'.
[  207.126043][ T7678] IPVS: length: 22 != 8
[  207.234405][   T30] audit: type=1400 audit(1759405144.420:434): avc:  denied  { create } for  pid=7675 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  207.463516][   T30] audit: type=1400 audit(1759405144.430:435): avc:  denied  { connect } for  pid=7675 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  207.580909][   T30] audit: type=1400 audit(1759405144.530:436): avc:  denied  { read } for  pid=7675 comm="syz.2.444" path="socket:[15276]" dev="sockfs" ino=15276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  208.315108][   T30] audit: type=1400 audit(1759405145.500:437): avc:  denied  { connect } for  pid=7694 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  208.554139][ T5942] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  208.796044][ T5942] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  208.967822][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0
[  209.013996][ T5942] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  209.051669][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.239490][ T5942] usb 3-1: config 0 descriptor??
[  209.245867][ T7693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  209.647603][ T7721] batadv_slave_0: entered promiscuous mode
[  209.654542][ T7725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.450'.
[  209.803508][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'.
[  209.953956][   T30] audit: type=1400 audit(1759405147.140:438): avc:  denied  { map } for  pid=7691 comm="syz.2.447" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  210.040410][ T5942] waltop 0003:172F:0500.000F: collection stack underflow
[  210.093199][ T5942] waltop 0003:172F:0500.000F: item 0 2 0 12 parsing failed
[  210.100854][   T30] audit: type=1400 audit(1759405147.140:439): avc:  denied  { execute } for  pid=7691 comm="syz.2.447" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  210.135754][ T5942] waltop 0003:172F:0500.000F: probe with driver waltop failed with error -22
[  210.205601][ T6320] Bluetooth: (null): Invalid header checksum
[  210.236493][ T6320] Bluetooth: (null): Invalid header checksum
[  210.387715][ T5942] usb 3-1: USB disconnect, device number 9
[  211.684365][ T5885] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  211.878871][ T5885] usb 5-1: Using ep0 maxpacket: 32
[  212.023752][ T5885] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  212.046329][ T5885] usb 5-1: config 0 has no interface number 0
[  212.053428][ T7758] netlink: 830 bytes leftover after parsing attributes in process `syz.2.465'.
[  212.074305][ T5885] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  212.083696][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.106389][ T5885] usb 5-1: Product: syz
[  212.110549][ T5885] usb 5-1: Manufacturer: syz
[  212.163617][ T7758] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  212.190651][ T5885] usb 5-1: SerialNumber: syz
[  212.311339][ T7760] netlink: 830 bytes leftover after parsing attributes in process `syz.0.464'.
[  212.324861][ T5885] usb 5-1: config 0 descriptor??
[  212.336291][ T5885] smsc95xx v2.0.0
[  212.343799][ T5885] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  212.394346][ T5885] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22
[  212.604466][ T7760] syz!: rxe_newlink: already configured on team_slave_0
[  213.067713][   T30] audit: type=1400 audit(1759405150.230:440): avc:  denied  { read } for  pid=7771 comm="syz.3.468" name="usbmon4" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  213.116710][   T30] audit: type=1400 audit(1759405150.230:441): avc:  denied  { open } for  pid=7771 comm="syz.3.468" path="/dev/usbmon4" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  213.256225][ T7779] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.438267][ T7785] tipc: Started in network mode
[  213.463578][ T7785] tipc: Node identity fe7f000000000000000000000000001, cluster identity 4711
[  213.483103][ T7785] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.617505][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  213.693961][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  214.205371][   T10] usb 5-1: USB disconnect, device number 12
[  214.211349][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  214.266633][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  214.276611][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.292756][ T5885] usb 3-1: config 0 descriptor??
[  214.304605][ T5885] smsusb:smsusb_probe: board id=8, interface number 0
[  214.315628][ T5885] smsusb:smsusb_probe: Device initialized with return code -19
[  214.434268][ T5871] usb 2-1: Using ep0 maxpacket: 32
[  214.441385][ T5871] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  214.459647][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.504025][ T5871] usb 2-1: config 0 has no interface number 0
[  214.535076][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.545312][ T5871] usb 2-1: config 0 has no interface number 0
[  214.553417][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.563371][ T5871] usb 2-1: config 0 has no interface number 0
[  214.575194][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.592590][ T5871] usb 2-1: config 0 has no interface number 0
[  214.602856][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.613185][ T5871] usb 2-1: config 0 has no interface number 0
[  214.620296][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.635358][ T5871] usb 2-1: config 0 has no interface number 0
[  214.642805][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.652491][ T5871] usb 2-1: config 0 has no interface number 0
[  214.660545][ T5871] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  214.669670][ T5871] usb 2-1: config 0 has no interface number 0
[  214.677747][ T5871] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  214.687390][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.696485][ T5871] usb 2-1: Product: syz
[  214.700786][ T5871] usb 2-1: Manufacturer: syz
[  214.705605][ T5871] usb 2-1: SerialNumber: syz
[  214.717727][ T5871] usb 2-1: config 0 descriptor??
[  214.730060][ T5871] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  214.744087][   T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  214.905538][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.915840][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  214.924906][   T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  214.934053][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.944588][   T10] usb 5-1: config 0 descriptor??
[  214.954757][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  214.966890][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  214.978763][ T5871] etas_es58x 2-1:0.2: could not retrieve the product info string
[  214.985471][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  214.999653][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  215.011537][   T10] usb 5-1: media controller created
[  215.029871][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  215.040746][ T5871] usb 2-1: USB disconnect, device number 15
[  215.047037][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  215.056516][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  215.064529][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  215.086166][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  215.103799][ T5871] etas_es58x 2-1:0.2: Disconnecting syz syz
[  215.120156][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  215.146855][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  215.156938][ T7792] dvb-usb: bulk message failed: -22 (2/0)
[  215.233667][   T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  215.244577][   T10] usb 5-1: USB disconnect, device number 13
[  215.251852][   T24] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  215.285355][   T24] usb 4-1: Product: syz
[  215.290396][   T24] usb 4-1: Manufacturer: syz
[  215.298839][   T24] usb 4-1: SerialNumber: syz
[  215.313176][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  215.332223][   T24] usb 4-1: config 0 descriptor??
[  215.352722][   T24] ch341 4-1:0.0: ch341-uart converter detected
[  215.788243][ T7820] binder: 7814:7820 unknown command 1074553621
[  215.796918][ T7820] binder: 7814:7820 ioctl c0306201 2000000001c0 returned -22
[  216.319986][   T30] audit: type=1800 audit(1759405153.460:442): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.469" name="/" dev="fuse" ino=5 res=0 errno=0
[  216.369494][    T9] usb 3-1: USB disconnect, device number 10
[  216.392985][ T7832] tipc: Can't bind to reserved service type 2
[  216.473153][   T30] audit: type=1400 audit(1759405153.660:443): avc:  denied  { ioctl } for  pid=7833 comm="syz.1.479" path="socket:[16519]" dev="sockfs" ino=16519 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  216.816721][   T24] usb 4-1: failed to send control message: -110
[  216.823359][   T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  216.886394][ T7847] Invalid source name
[  216.887415][   T30] audit: type=1400 audit(1759405154.070:444): avc:  denied  { mounton } for  pid=7845 comm="syz.1.482" path="/97/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  216.890400][ T7847] UBIFS error (pid: 7847): cannot open "./file0", error -22
[  217.295622][ T7851] vivid-004: disconnect
[  217.318585][ T7851] vivid-004: reconnect
[  218.050449][ T5885] usb 4-1: USB disconnect, device number 14
[  218.072763][ T5885] ch341 4-1:0.0: device disconnected
[  218.165020][ T7864] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[  218.308665][ T7864] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.527567][ T7872] bond1: (slave veth3): Enslaving as an active interface with a down link
[  219.559595][ T7864] vlan2: entered allmulticast mode
[  219.615453][ T7864] veth1: entered allmulticast mode
[  219.623056][ T7864] veth1: entered promiscuous mode
[  219.629236][ T7864] veth1: left promiscuous mode
[  219.641351][ T7864] bond1: (slave vlan2): making interface the new active one
[  219.649571][ T7864] veth1: entered promiscuous mode
[  219.671071][ T7886] SQUASHFS error: Failed to read block 0x0: -5
[  219.677613][ T7886] unable to read squashfs_super_block
[  219.696584][ T7886] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  219.743579][ T7864] vlan2: entered promiscuous mode
[  219.802443][ T7864] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  219.817058][ T7883] netlink: 830 bytes leftover after parsing attributes in process `syz.2.494'.
[  220.705177][  T973] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  220.886276][  T973] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  220.923138][  T973] usb 4-1: config 0 has no interface number 0
[  220.931986][  T973] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  220.945350][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.502'.
[  220.966385][   T30] audit: type=1400 audit(1759405158.130:445): avc:  denied  { ioctl } for  pid=7908 comm="syz.1.502" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  221.005094][  T973] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  221.025433][  T973] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  221.040571][  T973] usb 4-1: Product: syz
[  221.045030][  T973] usb 4-1: SerialNumber: syz
[  221.894643][  T973] usb 4-1: config 0 descriptor??
[  222.527694][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  222.583550][  T973] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  222.800486][ T5885] usb 2-1: Using ep0 maxpacket: 8
[  222.815371][ T5885] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  222.844221][ T5885] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  222.854211][ T5885] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  222.863110][ T5885] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  222.880927][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  223.123982][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  223.144171][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  223.157111][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  223.172661][ T5885] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  223.187407][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.197168][ T5885] usb 2-1: Product: syz
[  223.201378][ T5885] usb 2-1: Manufacturer: syz
[  223.216873][ T5885] usb 2-1: SerialNumber: syz
[  223.223665][ T5885] usb 2-1: config 0 descriptor??
[  223.231648][ T7927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  223.236295][ T7938] tipc: Started in network mode
[  223.258845][ T7938] tipc: Node identity fe7f000000000000000000000000001, cluster identity 4711
[  223.280675][ T5885] hub 2-1:0.0: bad descriptor, ignoring hub
[  223.290554][ T7938] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  223.312364][ T5885] hub 2-1:0.0: probe with driver hub failed with error -5
[  223.339957][ T5885] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  223.426738][   T30] audit: type=1400 audit(1759405160.620:446): avc:  denied  { read } for  pid=7939 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  224.020911][    C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1
[  224.088147][   T30] audit: type=1400 audit(1759405161.270:447): avc:  denied  { ioctl } for  pid=7926 comm="syz.1.505" path="socket:[17413]" dev="sockfs" ino=17413 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  224.088471][   T10] usb 4-1: USB disconnect, device number 15
[  224.198784][    T9] usb 2-1: USB disconnect, device number 16
[  224.254792][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  224.633975][ T5885] usb 5-1: device descriptor read/64, error -71
[  224.694443][   T30] audit: type=1400 audit(1759405161.890:448): avc:  denied  { getopt } for  pid=7956 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  225.349076][ T5885] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  225.974836][   T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  226.116209][ T5885] usb 5-1: device descriptor read/64, error -71
[  226.157095][ T7954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7954 comm=syz.3.512
[  226.235138][ T5885] usb usb5-port1: attempt power cycle
[  226.284211][   T43] usb 2-1: Using ep0 maxpacket: 32
[  226.293197][   T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  226.305817][   T43] usb 2-1: config 0 has no interface number 0
[  226.320453][   T43] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  226.332321][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.395917][   T43] usb 2-1: Product: syz
[  226.400090][   T43] usb 2-1: Manufacturer: syz
[  226.404867][   T43] usb 2-1: SerialNumber: syz
[  226.413957][   T43] usb 2-1: config 0 descriptor??
[  226.421286][   T43] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  226.433836][   T43] usb 2-1: selecting invalid altsetting 1
[  226.443720][   T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  226.485173][   T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  226.506395][   T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  226.530244][   T43] usb 2-1: media controller created
[  226.536227][   T24] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  226.573154][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  226.719699][   T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  226.842828][   T24] usb 4-1: config 0 has no interface number 0
[  227.017126][   T43] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  227.024721][   T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  227.056401][   T43] zl10353_read_register: readreg error (reg=127, ret==-71)
[  227.117278][   T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  227.141300][   T43] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  227.159760][   T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  227.184095][   T24] usb 4-1: Product: syz
[  227.188284][   T24] usb 4-1: SerialNumber: syz
[  227.221866][   T24] usb 4-1: config 0 descriptor??
[  227.230203][   T24] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  227.280759][   T43] usb 2-1: USB disconnect, device number 17
[  227.398324][   T10] usb 4-1: USB disconnect, device number 16
[  227.415202][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'.
[  228.966785][ T8005] trusted_key: syz.3.524 sent an empty control message without MSG_MORE.
[  229.182708][ T8007] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=8007 comm=syz.2.527
[  229.854027][   T43] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  230.025528][   T43] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  230.043710][   T43] usb 2-1: config 0 has no interface number 0
[  230.079670][   T43] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  230.109397][   T43] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  230.344065][   T43] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  230.383993][   T43] usb 2-1: Product: syz
[  230.388490][   T43] usb 2-1: SerialNumber: syz
[  230.402668][   T43] usb 2-1: config 0 descriptor??
[  230.416522][   T43] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  230.538769][   T43] usb 2-1: USB disconnect, device number 18
[  230.993135][ T8026] comedi comedi1: pcmmio: I/O port conflict (0x4f27,32)
[  231.012616][ T8026] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.532'.
[  233.113957][   T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  233.274091][   T43] usb 3-1: Using ep0 maxpacket: 8
[  233.282971][   T43] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  234.451154][   T43] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  234.461662][   T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  234.471922][   T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  234.483225][   T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.494865][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  234.506200][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  234.518992][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  234.555935][   T43] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  234.568174][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.579571][   T43] usb 3-1: Product: syz
[  234.584120][   T43] usb 3-1: Manufacturer: syz
[  234.588840][   T43] usb 3-1: SerialNumber: syz
[  234.861673][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'.
[  234.989771][   T43] usb 3-1: config 0 descriptor??
[  235.312494][   T30] audit: type=1400 audit(1759405172.060:449): avc:  denied  { module_request } for  pid=8058 comm="syz.4.541" kmod=72746E6C2D6C696E6B2D697036746E01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  235.655643][   T43] usb 3-1: can't set config #0, error -71
[  235.665481][   T43] usb 3-1: USB disconnect, device number 11
[  236.088145][ T8083] Bluetooth: MGMT ver 1.23
[  236.101862][   T30] audit: type=1400 audit(1759405173.280:450): avc:  denied  { mount } for  pid=8082 comm="syz.0.546" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  236.943987][   T10] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  237.103972][   T10] usb 5-1: device descriptor read/64, error -71
[  237.161347][ T8099] geneve2: entered promiscuous mode
[  237.166692][   T30] audit: type=1400 audit(1759405174.350:451): avc:  denied  { ioctl } for  pid=8095 comm="syz.2.551" path="/dev/fb0" dev="devtmpfs" ino=628 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  237.204847][ T8099] geneve2: entered allmulticast mode
[  237.262459][ T8107] [U] ���1WT`8�����H$�0�����9\
[  237.267541][ T8107] [U] ;2}u��gV�ĥ��#�O9��ե>-�����S�ݢ��p
[  237.274072][ T8107] [U] 4��XZ^Y����)��ഴ�m�c��.�o���p�O��W
[  237.283405][ T8107] [U] ��%�Z
[  237.306260][   T30] audit: type=1400 audit(1759405174.500:452): avc:  denied  { bind } for  pid=8106 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  237.376332][   T10] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  237.513964][   T10] usb 5-1: device descriptor read/64, error -71
[  237.628976][   T10] usb usb5-port1: attempt power cycle
[  237.935343][   T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  237.946373][ T8097] [U] �8`�}�[T��j#Z�~��3µݥI~�
[  237.974206][   T10] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  237.997145][   T10] usb 5-1: device descriptor read/8, error -71
[  238.024144][   T13] vlan2: left promiscuous mode
[  238.071612][ T8123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8123 comm=syz.1.560
[  238.107085][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.124706][   T43] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  238.143934][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.154578][   T43] usb 1-1: config 0 descriptor??
[  238.181359][ T8131] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[  238.244199][   T10] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  238.277208][   T10] usb 5-1: device descriptor read/8, error -71
[  238.384422][   T10] usb usb5-port1: unable to enumerate USB device
[  238.441928][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'.
[  238.539255][ T8137] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  238.552128][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.559684][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.573490][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.583452][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.601793][   T43] usbhid 1-1:0.0: can't add hid device: -71
[  238.616937][   T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  238.628272][   T43] usb 1-1: USB disconnect, device number 16
[  239.337143][   T30] audit: type=1400 audit(1759405176.510:453): avc:  denied  { read } for  pid=8150 comm="syz.1.567" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  239.660436][   T30] audit: type=1400 audit(1759405176.510:454): avc:  denied  { open } for  pid=8150 comm="syz.1.567" path="/115/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  239.706835][   T30] audit: type=1400 audit(1759405176.520:455): avc:  denied  { ioctl } for  pid=8150 comm="syz.1.567" path="/115/file0/file0" dev="fuse" ino=64 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  240.061728][ T8166] [U] ���1WT`8�����H$�0�����9\
[  240.066939][ T8166] [U] ;2}u��gV�ĥ��#�O9��ե>-�����S�ݢ��p
[  240.073459][ T8166] [U] 4��XZ^Y����)��ഴ�m�c��.�o���p�O��W
[  240.080018][ T8166] [U] ��%�Z
[  241.525342][ T8162] [U] �8`�}�[T��j#Z�~��3µݥI~�
[  241.780874][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'.
[  242.975902][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[  243.972592][   T30] audit: type=1400 audit(1759405181.160:456): avc:  denied  { open } for  pid=8206 comm="syz.4.581" path="/dev/ptyqc" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  244.511032][ T8215] sctp: [Deprecated]: syz.4.585 (pid 8215) Use of int in max_burst socket option.
[  244.511032][ T8215] Use struct sctp_assoc_value instead
[  244.543654][   T30] audit: type=1400 audit(1759405181.730:457): avc:  denied  { name_bind } for  pid=8213 comm="syz.3.583" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  246.592882][ T8232] geneve2: entered promiscuous mode
[  246.598948][ T8232] geneve2: entered allmulticast mode
[  247.273684][   T30] audit: type=1400 audit(1759405184.460:458): avc:  denied  { write } for  pid=8242 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  247.498025][ T8234] vlan1: entered promiscuous mode
[  247.503255][ T8234] vlan1: entered allmulticast mode
[  247.606916][ T8234] veth0_vlan: entered allmulticast mode
[  247.704034][ T5885] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  247.829487][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'.
[  247.856979][ T8256] netlink: 'syz.3.594': attribute type 30 has an invalid length.
[  247.948238][ T8249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.957172][ T8249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.040238][ T8003] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.060883][ T5885] usb 2-1: unable to read config index 0 descriptor/start: -71
[  248.079561][ T8003] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.081137][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.595'.
[  248.118791][   T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  248.132582][ T5885] usb 2-1: can't read configurations, error -71
[  248.246610][ T8003] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.292126][ T8003] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.436493][   T24] usb 5-1: no configurations
[  248.442058][   T24] usb 5-1: can't read configurations, error -22
[  248.588696][   T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  248.829887][   T24] usb 5-1: no configurations
[  248.834575][   T24] usb 5-1: can't read configurations, error -22
[  249.158619][   T24] usb usb5-port1: attempt power cycle
[  249.524384][   T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  249.549255][   T24] usb 5-1: no configurations
[  249.555149][   T24] usb 5-1: can't read configurations, error -22
[  249.901914][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  249.919147][ T8279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.975453][   T24] usb 5-1: no configurations
[  249.980893][   T24] usb 5-1: can't read configurations, error -22
[  249.989105][   T24] usb usb5-port1: unable to enumerate USB device
[  250.032493][ T8282] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  250.314004][   T30] audit: type=1400 audit(1759405187.490:459): avc:  denied  { read } for  pid=8280 comm="syz.2.601" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  250.336971][   T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  250.734464][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.740459][   T13] Bluetooth: (null): Invalid header checksum
[  250.768409][   T13] Bluetooth: (null): Invalid header checksum
[  250.770605][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.779439][   T13] Bluetooth: (null): Invalid header checksum
[  250.815728][   T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  250.826340][   T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  250.834619][   T24] usb 4-1: Manufacturer: syz
[  250.895348][   T24] usb 4-1: config 0 descriptor??
[  251.052084][   T30] audit: type=1400 audit(1759405188.230:460): avc:  denied  { write } for  pid=8295 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  251.943965][   T30] audit: type=1400 audit(1759405189.080:461): avc:  denied  { unmount } for  pid=8308 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  252.015226][ T8306] netlink: 48 bytes leftover after parsing attributes in process `syz.0.608'.
[  252.227796][   T30] audit: type=1400 audit(1759405189.420:462): avc:  denied  { listen } for  pid=8313 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  252.288020][   T30] audit: type=1400 audit(1759405189.450:463): avc:  denied  { accept } for  pid=8313 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  252.318779][ T8317] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.612'.
[  253.303397][ T8328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37136 sclass=netlink_route_socket pid=8328 comm=syz.1.615
[  253.359295][ T8328] fuse: Unknown parameter 'root0000000000000'
[  253.455787][   T24] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71
[  253.562259][   T24] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71
[  253.651915][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.616'.
[  253.665687][   T24] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71
[  253.757330][   T24] uclogic 0003:256C:006D.0010: failed probing parameters: -71
[  253.857839][   T24] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71
[  254.048483][   T24] usb 4-1: USB disconnect, device number 17
[  254.054090][ T5885] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  254.161390][ T8337] netlink: 830 bytes leftover after parsing attributes in process `syz.4.618'.
[  254.184813][ T8337] SQUASHFS error: Failed to read block 0x0: -5
[  254.191199][ T8337] unable to read squashfs_super_block
[  254.265436][ T8342] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=8342 comm=syz.1.619
[  254.279721][ T5885] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  254.306428][ T5885] usb 1-1: config 0 interface 0 has no altsetting 0
[  254.310821][ T8337] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  254.442747][ T5885] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  254.452166][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.481092][ T5885] usb 1-1: config 0 descriptor??
[  254.487319][ T8331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  255.094762][ T5885] waltop 0003:172F:0500.0011: collection stack underflow
[  255.110469][ T5885] waltop 0003:172F:0500.0011: item 0 2 0 12 parsing failed
[  255.149042][ T5885] waltop 0003:172F:0500.0011: probe with driver waltop failed with error -22
[  255.247637][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.254176][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  255.446557][ T8354] ip6tnl1: entered promiscuous mode
[  255.451814][ T8354] ip6tnl1: entered allmulticast mode
[  255.465082][   T24] usb 1-1: USB disconnect, device number 17
[  257.637807][ T8368] netlink: 'syz.1.626': attribute type 29 has an invalid length.
[  258.054780][ T8368] netlink: 'syz.1.626': attribute type 3 has an invalid length.
[  258.071268][ T8368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.626'.
[  258.080456][ T8387] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  258.554993][ T8389] netlink: 240 bytes leftover after parsing attributes in process `syz.4.630'.
[  258.563981][ T8389] openvswitch: netlink: Unknown key attributes 1
[  260.044956][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'.
[  260.053844][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.068937][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.181462][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.230317][ T8410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.991815][ T8427] program syz.3.643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.963967][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  262.084418][ T8433] SELinux: failed to load policy
[  262.146677][   T10] usb 4-1: config 2 interface 0 has no altsetting 0
[  262.176198][   T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  262.193958][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.201951][   T10] usb 4-1: Product: syz
[  262.206569][   T10] usb 4-1: Manufacturer: syz
[  262.213940][   T10] usb 4-1: SerialNumber: syz
[  262.437394][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'.
[  262.508050][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'.
[  262.634017][ T5885] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  263.610144][ T5885] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  263.618872][ T5885] usb 2-1: config 0 has no interface number 0
[  263.627485][ T5885] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  263.636632][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.645102][ T5885] usb 2-1: Product: syz
[  263.652622][ T5885] usb 2-1: Manufacturer: syz
[  263.661144][ T5885] usb 2-1: SerialNumber: syz
[  263.679169][ T5885] usb 2-1: config 0 descriptor??
[  265.028895][   T10] ims_pcu 4-1:2.0: Zero length descriptor
[  265.054201][   T10] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22
[  265.103000][ T8476] syzkaller1: entered promiscuous mode
[  265.108565][ T8476] syzkaller1: entered allmulticast mode
[  265.141583][   T10] usb 4-1: USB disconnect, device number 18
[  265.332474][ T8480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.372071][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'.
[  265.469228][   T43] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  265.668273][ T8483] FAULT_INJECTION: forcing a failure.
[  265.668273][ T8483] name failslab, interval 1, probability 0, space 0, times 0
[  265.682366][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.4.658 Not tainted syzkaller #0 PREEMPT(full) 
[  265.682387][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  265.682397][ T8483] Call Trace:
[  265.682402][ T8483]  <TASK>
[  265.682409][ T8483]  dump_stack_lvl+0x16c/0x1f0
[  265.682430][ T8483]  should_fail_ex+0x512/0x640
[  265.682445][ T8483]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  265.682462][ T8483]  should_failslab+0xc2/0x120
[  265.682473][ T8483]  __kmalloc_cache_noprof+0x6a/0x3e0
[  265.682493][ T8483]  ? find_held_lock+0x2b/0x80
[  265.682515][ T8483]  ? audit_log_d_path+0xed/0x200
[  265.682537][ T8483]  audit_log_d_path+0xed/0x200
[  265.682557][ T8483]  audit_log_d_path_exe+0x46/0x70
[  265.682570][ T8483]  audit_log_task+0x31d/0x3f0
[  265.682586][ T8483]  ? __pfx_audit_log_task+0x10/0x10
[  265.682603][ T8483]  ? ksys_write+0x190/0x250
[  265.682622][ T8483]  audit_seccomp+0x79/0x290
[  265.682641][ T8483]  __seccomp_filter+0xa74/0x11c0
[  265.682661][ T8483]  ? __pfx___seccomp_filter+0x10/0x10
[  265.682681][ T8483]  ? fput+0x9b/0xd0
[  265.682698][ T8483]  ? ksys_write+0x1ac/0x250
[  265.682717][ T8483]  __secure_computing+0x287/0x3b0
[  265.682729][ T8483]  syscall_trace_enter+0x89/0x240
[  265.682744][ T8483]  do_syscall_64+0x36d/0x4e0
[  265.682761][ T8483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.682776][ T8483] RIP: 0033:0x7fa14578eec9
[  265.682790][ T8483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.682806][ T8483] RSP: 002b:00007fa14656b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8
[  265.682823][ T8483] RAX: ffffffffffffffda RBX: 00007fa1459e5fa0 RCX: 00007fa14578eec9
[  265.682833][ T8483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  265.682843][ T8483] RBP: 00007fa14656b090 R08: 0000000000000000 R09: 0000000000000000
[  265.682851][ T8483] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  265.682857][ T8483] R13: 00007fa1459e6038 R14: 00007fa1459e5fa0 R15: 00007fff67171f08
[  265.682871][ T8483]  </TASK>
[  265.885694][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.897959][   T30] audit: type=1326 audit(1759405202.860:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  265.921243][   T30] audit: type=1326 audit(1759405202.860:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  265.944479][   T30] audit: type=1326 audit(1759405202.860:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  265.967635][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.974378][   T30] audit: type=1326 audit(1759405202.860:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  265.997539][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.003635][   T30] audit: type=1326 audit(1759405202.860:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  266.026824][   T30] audit: type=1326 audit(1759405202.860:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  266.049976][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.056624][   T30] audit: type=1326 audit(1759405202.860:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  266.079780][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.085838][   T30] audit: type=1326 audit(1759405202.860:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa145785d67 code=0x7ffc0000
[  266.109324][   T30] audit: type=1326 audit(1759405202.860:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa14572af79 code=0x7ffc0000
[  266.132416][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.139598][   T30] audit: type=1326 audit(1759405202.860:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa145785d67 code=0x7ffc0000
[  266.162730][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.172698][   T43] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  266.184132][   T43] usb 1-1: config 0 has no interface number 0
[  266.190243][   T43] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  266.208340][   T43] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  266.231510][   T43] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  266.231893][ T5885] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  266.250060][   T43] usb 1-1: Product: syz
[  266.254266][   T43] usb 1-1: SerialNumber: syz
[  266.262358][   T43] usb 1-1: config 0 descriptor??
[  266.274199][   T43] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  266.408461][ T5885] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  266.447440][ T5885] asix 2-1:0.251: probe with driver asix failed with error -5
[  266.543846][ T5885] usb 2-1: USB disconnect, device number 21
[  267.663256][   T43] usb 1-1: USB disconnect, device number 18
[  268.405450][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'.
[  268.694027][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  269.015228][ T5885] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  269.025017][   T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  269.066853][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.095840][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  269.105836][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.115957][   T10] usb 1-1: Product: syz
[  269.120239][   T10] usb 1-1: Manufacturer: syz
[  269.124981][   T10] usb 1-1: SerialNumber: syz
[  269.169711][   T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  269.193992][ T5885] usb 2-1: device descriptor read/64, error -71
[  269.476531][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[  269.706410][ T5885] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  270.054128][ T5885] usb 2-1: device descriptor read/64, error -71
[  270.164254][ T5885] usb usb2-port1: attempt power cycle
[  270.504002][ T5885] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  272.649579][   T10] usb 1-1: USB disconnect, device number 19
[  272.668963][ T5885] usb 2-1: device descriptor read/8, error -71
[  272.706736][ T8535] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  272.757581][ T8536] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  272.769136][ T8536] netlink: 184 bytes leftover after parsing attributes in process `syz.3.669'.
[  272.797834][ T8536] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  272.811212][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  272.811226][   T30] audit: type=1326 audit(1759405210.000:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  272.864730][ T8535] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  272.944874][ T8536] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.669'.
[  273.335593][   T30] audit: type=1326 audit(1759405210.030:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  273.373609][ T8545] SQUASHFS error: Failed to read block 0x0: -5
[  273.380053][ T8545] unable to read squashfs_super_block
[  273.461353][   T30] audit: type=1326 audit(1759405210.030:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  273.510123][ T8545] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  273.537556][   T30] audit: type=1326 audit(1759405210.030:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  273.587218][   T30] audit: type=1326 audit(1759405210.030:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  273.611737][   T30] audit: type=1326 audit(1759405210.030:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  273.674224][   T43] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  273.911412][   T43] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  273.960749][   T30] audit: type=1326 audit(1759405210.030:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  273.989978][   T43] usb 5-1: config 0 has no interface number 0
[  274.002113][   T43] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  274.012500][   T30] audit: type=1326 audit(1759405210.030:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  274.037396][   T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  274.051801][   T43] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  274.060140][   T43] usb 5-1: Product: syz
[  274.064401][   T43] usb 5-1: SerialNumber: syz
[  274.118932][   T30] audit: type=1326 audit(1759405210.030:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  274.144236][   T43] usb 5-1: config 0 descriptor??
[  274.155516][   T30] audit: type=1326 audit(1759405210.030:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.4.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14578eec9 code=0x7ffc0000
[  274.167654][   T43] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  274.753225][ T8575] tipc: Started in network mode
[  274.760261][ T8575] tipc: Node identity 080211, cluster identity 4711
[  274.767809][ T8575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.829732][ T8575] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  274.837376][ T8575] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  274.928126][ T8574] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  275.888536][   T10] tipc: Node number set to 134353152
[  276.038423][   T10] usb 5-1: USB disconnect, device number 25
[  276.283958][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  276.628105][   T24] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  276.644014][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  276.668925][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.737690][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.746948][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.774049][   T24] usb 3-1: Product: syz
[  276.778234][   T24] usb 3-1: Manufacturer: syz
[  276.794080][   T10] usb 5-1: Using ep0 maxpacket: 32
[  276.797612][   T24] usb 3-1: SerialNumber: syz
[  276.823797][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  276.839268][   T10] usb 5-1: config 12 has an invalid interface number: 184 but max is 0
[  276.854033][   T10] usb 5-1: config 12 has no interface number 0
[  276.868385][   T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  276.905373][   T10] usb 5-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  276.930325][   T10] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  276.941418][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.951431][   T10] usb 5-1: Product: syz
[  276.960094][   T10] usb 5-1: Manufacturer: syz
[  276.965404][   T10] usb 5-1: SerialNumber: syz
[  277.515639][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.551772][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.584038][   T24] usb 3-1: USB disconnect, device number 12
[  277.681942][ T8619] tipc: Started in network mode
[  277.699357][ T8619] tipc: Node identity fe7f000000000000000000000000001, cluster identity 4711
[  277.740414][ T8619] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  277.879773][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  277.972440][ T8623] SQUASHFS error: Failed to read block 0x0: -5
[  277.979666][ T8623] unable to read squashfs_super_block
[  277.997541][ T8623] syz!: rxe_newlink: already configured on team_slave_0
[  278.143612][   T10] usb 5-1: USB disconnect, device number 26
[  279.166304][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  279.166554][   T30] audit: type=1400 audit(1759405216.220:522): avc:  denied  { map } for  pid=8626 comm="syz.3.695" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  279.854246][   T30] audit: type=1400 audit(1759405217.040:523): avc:  denied  { name_bind } for  pid=8638 comm="syz.3.698" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  279.918351][   T30] audit: type=1400 audit(1759405217.110:524): avc:  denied  { read write } for  pid=8642 comm="syz.1.699" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  280.029502][   T30] audit: type=1400 audit(1759405217.110:525): avc:  denied  { open } for  pid=8642 comm="syz.1.699" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  281.118748][ T8662] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  281.314009][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  281.464661][   T10] usb 4-1: Using ep0 maxpacket: 16
[  281.504083][   T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  281.536002][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  281.695090][   T24] usb 2-1: Using ep0 maxpacket: 16
[  281.705681][   T10] usb 4-1: descriptor type invalid, skip
[  281.721390][   T10] usb 4-1: descriptor type invalid, skip
[  281.787675][   T10] usb 4-1: descriptor type invalid, skip
[  281.794435][    T9] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  281.811109][   T10] usb 4-1: descriptor type invalid, skip
[  281.816817][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.825545][   T24] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.854363][   T10] usb 4-1: config 192 has an invalid interface number: 253 but max is 0
[  281.862715][   T10] usb 4-1: config 192 has no interface number 0
[  281.871116][   T24] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  281.874148][ T8672] SQUASHFS error: Failed to read block 0x0: -5
[  281.886889][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  281.890301][ T8672] unable to read squashfs_super_block
[  281.916560][   T24] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40
[  281.927050][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.939349][ T8676] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  281.947812][   T24] usb 2-1: Product: syz
[  281.952341][   T10] usb 4-1: config 192 interface 253 has no altsetting 0
[  281.959555][   T24] usb 2-1: Manufacturer: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋
[  281.978964][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  281.989643][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.000603][   T10] usb 4-1: string descriptor 0 read error: -22
[  282.009609][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=00f5, bcdDevice=b8.4b
[  282.022742][   T24] usb 2-1: SerialNumber: syz
[  282.022761][    T9] usb 3-1: Product: syz
[  282.032218][    T9] usb 3-1: Manufacturer: syz
[  282.036936][    T9] usb 3-1: SerialNumber: syz
[  282.042207][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.058094][    T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  282.067625][ T8678] overlay: Unknown parameter 'dont_hash'
[  282.073004][   T10] gspca_main: sonixj-2.14.0 probing 045e:00f5
[  282.140723][ T8679] IPVS: set_ctl: invalid protocol: 60 172.20.20.19:20000
[  282.359066][   T24] usbhid 2-1:1.0: can't add hid device: -71
[  282.365369][   T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  282.380618][   T24] usb 2-1: USB disconnect, device number 26
[  282.707575][   T10] gspca_sonixj: reg_w1 err -110
[  282.755230][   T10] sonixj 4-1:192.253: probe with driver sonixj failed with error -110
[  282.774969][    T9] usb 3-1: USB disconnect, device number 13
[  282.792488][   T10] usb 4-1: USB disconnect, device number 19
[  283.936596][ T8705] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  284.095301][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.158179][   T43] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  284.281689][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.402024][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  284.504542][   T43] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  284.517421][   T43] usb 1-1: config 0 has no interface number 0
[  284.530356][   T43] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  284.555652][   T43] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  284.638415][   T43] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  284.663980][    T9] usb 3-1: Using ep0 maxpacket: 32
[  284.671053][    T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  284.680891][    T9] usb 3-1: config 0 has no interface number 0
[  284.689629][    T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  284.707074][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.719641][    T9] usb 3-1: Product: syz
[  284.723827][    T9] usb 3-1: Manufacturer: syz
[  284.730352][    T9] usb 3-1: SerialNumber: syz
[  284.740681][    T9] usb 3-1: config 0 descriptor??
[  284.752251][   T43] usb 1-1: Product: syz
[  284.758207][   T43] usb 1-1: SerialNumber: syz
[  284.793953][   T24] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  284.804091][    T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  284.818465][   T43] usb 1-1: config 0 descriptor??
[  284.839816][   T43] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  284.957672][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  284.958347][    T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  285.004032][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  285.048148][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.058621][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  285.070891][    T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  285.072853][   T24] usb 2-1: string descriptor 0 read error: -22
[  285.134417][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.156024][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.221059][   T24] usb 2-1: 0:2 : does not exist
[  285.240422][ T5193] udevd[5193]: worker [6655] terminated by signal 33 (Unknown signal 33)
[  285.313680][ T5193] udevd[5193]: worker [6655] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.51/ttyUSB0/tty/ttyUSB0'
[  285.335372][ T5193] udevd[5193]: worker [5831] terminated by signal 33 (Unknown signal 33)
[  285.344108][ T5193] udevd[5193]: worker [5831] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.51/ttyUSB1/tty/ttyUSB1'
[  285.358262][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.367235][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.434920][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  285.442794][  T974] usb 3-1: USB disconnect, device number 14
[  285.455066][  T974] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  285.481699][  T974] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  285.499390][  T974] quatech2 3-1:0.51: device disconnected
[  285.569879][ T8726] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  285.585410][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'.
[  285.595358][ T8726] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  285.602566][ T8726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.838092][ T8732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.856440][   T30] audit: type=1400 audit(1759405223.050:526): avc:  denied  { ioctl } for  pid=8730 comm="syz.3.727" path="socket:[20632]" dev="sockfs" ino=20632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  285.888685][ T8734] netlink: 360 bytes leftover after parsing attributes in process `syz.4.726'.
[  286.416796][    T9] usb 1-1: USB disconnect, device number 21
[  286.823905][  T974] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  287.274039][  T974] usb 3-1: device descriptor read/64, error -71
[  287.484538][ T5885] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  287.768912][ T8752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.834028][  T974] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  288.003430][ T5885] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  288.009170][   T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  288.036892][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.051258][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  288.063532][  T974] usb 3-1: device descriptor read/64, error -71
[  288.072982][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.082949][ T8752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.094849][ T5885] usb 5-1: Product: syz
[  288.100204][ T5885] usb 5-1: Manufacturer: syz
[  288.106114][ T5885] usb 5-1: SerialNumber: syz
[  288.108296][   T24] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  288.116700][ T5885] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[  288.241660][  T974] usb usb3-port1: attempt power cycle
[  288.318098][ T8752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.579349][   T30] audit: type=1400 audit(1759405225.610:527): avc:  denied  { write } for  pid=8764 comm="syz.1.737" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  288.671410][  T974] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  288.914632][  T974] usb 3-1: device descriptor read/8, error -71
[  288.964789][   T24] usb 2-1: USB disconnect, device number 27
[  289.054500][ T8770] SQUASHFS error: Failed to read block 0x0: -5
[  289.061051][ T8770] unable to read squashfs_super_block
[  289.102790][ T8770] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  289.499061][ T5885] usb 5-1: USB disconnect, device number 27
[  289.601907][ T8752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.764905][ T8782] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=8782 comm=syz.1.741
[  289.884576][ T7545] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.892800][ T7545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.911329][ T7545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.921430][ T7545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.124059][  T974] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  290.145417][  T974] usb 3-1: device descriptor read/8, error -71
[  290.290711][  T974] usb usb3-port1: unable to enumerate USB device
[  290.682455][ T8790] capability: warning: `syz.1.744' uses deprecated v2 capabilities in a way that may be insecure
[  291.619440][   T30] audit: type=1400 audit(1759405228.810:528): avc:  denied  { connect } for  pid=8810 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  291.874508][   T30] audit: type=1400 audit(1759405229.070:529): avc:  denied  { ioctl } for  pid=8816 comm="syz.4.752" path="socket:[21643]" dev="sockfs" ino=21643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  291.906205][   T30] audit: type=1400 audit(1759405229.090:530): avc:  denied  { write } for  pid=8816 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  292.014069][ T5885] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  293.951294][ T5885] usb 2-1: not running at top speed; connect to a high speed hub
[  294.015543][  T973] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  294.015633][ T5885] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 149, changing to 4
[  294.196892][  T973] usb 1-1: too many configurations: 67, using maximum allowed: 8
[  294.260904][  T973] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  294.345619][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.386201][  T973] usb 1-1: Product: syz
[  294.404074][  T973] usb 1-1: Manufacturer: syz
[  294.408695][  T973] usb 1-1: SerialNumber: syz
[  294.410725][ T5885] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  294.458003][  T973] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  294.470037][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.492297][ T5885] usb 2-1: Product: syz
[  294.505752][ T8839] block nbd1: NBD_DISCONNECT
[  294.508087][   T30] audit: type=1400 audit(1759405231.700:531): avc:  denied  { create } for  pid=8836 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  294.515574][ T5885] usb 2-1: Manufacturer: syz
[  294.565577][ T8839] block nbd1: Disconnected due to user request.
[  294.572217][ T8839] block nbd1: shutting down sockets
[  294.577654][ T5871] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  294.743231][ T5885] usb 2-1: can't set config #1, error -71
[  294.922816][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[  295.009729][ T5885] usb 2-1: USB disconnect, device number 28
[  295.444040][ T5885] usb 1-1: USB disconnect, device number 22
[  295.449016][   T30] audit: type=1400 audit(1759405232.630:532): avc:  denied  { getopt } for  pid=8830 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  295.964009][ T5942] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  296.052151][ T5871] usb 1-1: Service connection timeout for: 256
[  296.075696][ T5871] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  296.094215][ T5942] usb 2-1: device descriptor read/64, error -71
[  296.118094][ T5871] ath9k_htc: Failed to initialize the device
[  296.139611][ T5885] usb 1-1: ath9k_htc: USB layer deinitialized
[  296.940393][ T5942] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  297.122897][ T5942] usb 2-1: device descriptor read/64, error -71
[  297.421774][ T5942] usb usb2-port1: attempt power cycle
[  299.652784][ T5942] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  299.662538][ T8872] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  299.683395][ T5885] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  299.952837][ T5942] usb 2-1: device descriptor read/8, error -71
[  300.148786][ T8888] netlink: 830 bytes leftover after parsing attributes in process `syz.2.773'.
[  300.195203][ T5942] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  300.209597][ T8888] SQUASHFS error: Failed to read block 0x0: -5
[  300.219570][ T8888] unable to read squashfs_super_block
[  300.220811][ T8890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.262937][ T8892] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  300.273076][ T5942] usb 2-1: device descriptor read/8, error -71
[  300.384289][ T5942] usb usb2-port1: unable to enumerate USB device
[  301.325395][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.955126][ T8912] syz_tun: entered allmulticast mode
[  301.991605][ T8914] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  302.346254][ T8918] dvmrp8: entered allmulticast mode
[  303.148097][ T8927] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  303.455801][ T8935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  303.467275][ T8935] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  304.184153][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  304.244061][   T30] audit: type=1400 audit(1759405241.380:533): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  304.654777][    T9] usb 1-1: device descriptor read/64, error -71
[  304.713933][   T30] audit: type=1400 audit(1759405241.760:534): avc:  denied  { read } for  pid=8939 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  304.756456][ T8951] fuse: Unknown parameter 'acerPid:	0
[  304.756456][ T8951] Uid:	0	0	0	0
[  304.756456][ T8951] Gid:	0	0	0	0
[  304.756456][ T8951] FDSize:	256
[  304.756456][ T8951] Groups:	0 10 
[  304.756456][ T8951] NStgid:	577
[  304.756456][ T8951] NSpid:	578
[  304.756456][ T8951] NSpgid:	577
[  304.756456][ T8951] NSsid:	0
[  304.756456][ T8951] Kthread:	0
[  304.756456][ T8951] VmPeak:	  102020 kB
[  304.756456][ T8951] VmSize:	  102020 kB
[  304.756456][ T8951] VmLck:	       0 kB
[  304.756456][ T8951] VmPin:	       0 kB
[  304.756456][ T8951] VmHWM:	   24156 kB
[  304.756456][ T8951] VmRSS:	   24156 kB
[  304.756456][ T8951] RssAnon:	    1332 kB
[  304.756456][ T8951] RssFile:	   22824 kB
[  304.756456][ T8951] RssShmem:	       0 kB
[  304.756456][ T8951] VmData:	   36588 kB
[  304.756456][ T8951] VmStk:	     132 kB
[  304.756456][ T8951] VmExe:	    1676 kB
[  304.756456][ T8951] VmLib:	       8 kB
[  304.756456][ T8951] VmPTE:	     136 kB
[  304.756456][ T8951] VmSwap:	       0 kB
[  304.756456][ T8951] HugetlbPages:	       0 kB
[  304.756456][ T8951] CoreDumping:	0
[  304.756456][ T8951] THP_enabled:	1
[  304.756456][ T8951] untag_mask:	0xffffffffffffffff
[  304.756456][ T8951] Threads:	2
[  304.756456][ T8951] SigQ:	0/12977
[  304.756456][ T8951] SigPnd:	0000000000000000
[  304.756456][ T8951] ShdPnd:	0000000000000000
[  304.756456][ T8951] SigBlk:	0000000000000000
[  304.756456][ T8951] SigIgn:	fffffffefffaba35
[  304.756456][ T8951] SigCgt:	0000000100010440
[  304.756456][ T8951] CapInh:	0000000000000000
[  304.756456][ T8951] CapPrm:	000001ffff77ffff
[  304.756456][ T8951] CapEff:	000001ffff77ffff
[  304.756456][ T8951] CapBnd:	000001ffffffffff
[  304.756456][ T8951] CapAmb:	0000000000000000
[  304.756456][ T8951] NoNewPrivs:	0
[  304.756456][ T8951] Seccomp:	0
[  304.756456][ T8951] Seccomp_filters:	0
[  304.756456][ T8951] Speculation_Store_Bypass:	thread vulnerable
[  304.756456][ T8951] SpeculationIndirectBranch:	conditional enabled
[  304.756456][ T8951] Cpus_allowed:	3
[  305.064101][ T5885] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  305.072573][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  305.231809][    T9] usb 1-1: device descriptor read/64, error -71
[  305.256395][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short
[  305.264686][ T5885] usb 3-1: not running at top speed; connect to a high speed hub
[  305.290081][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.300270][ T5942] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  305.324735][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  305.338326][ T5885] usb 3-1: string descriptor 0 read error: -22
[  305.345383][    T9] usb usb1-port1: attempt power cycle
[  305.367068][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  305.396554][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.426649][ T5885] usb 3-1: 0:2 : does not exist
[  305.467813][ T5942] usb 5-1: config 5 has an invalid interface number: 187 but max is 0
[  305.477019][ T5942] usb 5-1: config 5 has no interface number 0
[  305.491043][ T5942] usb 5-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  305.502081][ T5942] usb 5-1: config 5 interface 187 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  305.515230][ T5942] usb 5-1: config 5 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  305.538945][ T5942] usb 5-1: config 5 interface 187 has no altsetting 0
[  305.558120][ T5942] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[  305.589027][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.614843][ T5942] usb 5-1: Product: syz
[  305.633023][ T5942] usb 5-1: Manufacturer: syz
[  305.642138][ T5942] usb 5-1: SerialNumber: syz
[  305.686286][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  305.716933][    T9] usb 1-1: device descriptor read/8, error -71
[  305.964240][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  305.984018][   T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  305.994495][    T9] usb 1-1: device descriptor read/8, error -71
[  306.115818][    T9] usb usb1-port1: unable to enumerate USB device
[  306.145459][   T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  306.154265][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.174157][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  306.254104][   T30] audit: type=1400 audit(1759405243.430:535): avc:  denied  { mount } for  pid=8939 comm="syz.2.791" name="/" dev="rpc_pipefs" ino=21958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  306.294473][ T5885] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  306.294605][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  306.340073][ T5885] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  306.342511][   T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  306.359624][   T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  306.381206][   T24] usb 4-1: Product: syz
[  306.388941][   T24] usb 4-1: Manufacturer: syz
[  306.408814][   T24] cdc_wdm 4-1:1.0: skipping garbage
[  306.415903][   T24] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  306.846738][ T5885] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  307.185270][ T5885] usb 3-1: USB disconnect, device number 19
[  307.378577][ T8973] netlink: 830 bytes leftover after parsing attributes in process `syz.1.798'.
[  307.395360][ T8973] SQUASHFS error: Failed to read block 0x0: -5
[  307.402191][ T8973] unable to read squashfs_super_block
[  307.432747][   T24] usb 4-1: USB disconnect, device number 20
[  307.491336][ T8973] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  307.743987][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  307.789713][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'.
[  307.908165][ T5872] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  308.221773][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.237416][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  308.249640][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.258966][ T5872] usb 3-1: Product: syz
[  308.263337][ T5872] usb 3-1: Manufacturer: syz
[  308.299027][ T5872] usb 3-1: SerialNumber: syz
[  308.336564][ T5872] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  308.381524][ T5942] usb 5-1: USB disconnect, device number 28
[  308.899873][ T8987] netlink: 'syz.3.802': attribute type 2 has an invalid length.
[  308.910818][ T8987] netlink: 'syz.3.802': attribute type 1 has an invalid length.
[  308.911612][ T8985] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[8985]
[  308.939051][ T5872] usb 3-1: USB disconnect, device number 20
[  309.262185][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'.
[  309.314098][   T30] audit: type=1400 audit(1759405246.450:536): avc:  denied  { getopt } for  pid=8986 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  311.120134][ T8991] befs: (nbd0): No write support. Marking filesystem read-only
[  311.152664][ T8991] befs: (nbd0): unable to read superblock
[  311.555041][   T30] audit: type=1326 audit(1759405248.740:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.0.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7398eec9 code=0x7fc00000
[  312.055851][ T5942] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  312.236700][ T5942] usb 4-1: Using ep0 maxpacket: 8
[  312.404276][ T5942] usb 4-1: config 7 has an invalid interface number: 248 but max is 1
[  312.412455][ T5942] usb 4-1: config 7 has an invalid interface number: 16 but max is 1
[  312.733979][ T5942] usb 4-1: config 7 has no interface number 0
[  312.740069][ T5942] usb 4-1: config 7 has no interface number 1
[  312.746591][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  312.769142][ T5942] usb 4-1: config 7 interface 248 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[  312.797903][ T5942] usb 4-1: config 7 interface 248 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 0
[  312.817372][ T5942] usb 4-1: config 7 interface 248 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  312.824598][ T9015] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=9015 comm=syz.0.810
[  312.850920][ T5942] usb 4-1: config 7 interface 248 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  312.895554][    T9] usb 2-1: device descriptor read/64, error -71
[  313.172420][ T5942] usb 4-1: config 7 interface 248 has no altsetting 0
[  313.179377][ T5942] usb 4-1: config 7 interface 16 has no altsetting 0
[  313.194204][ T5942] usb 4-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=a6.fd
[  313.203513][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.220034][ T5942] usb 4-1: Product: 鞠胲뎟庢萯먫곽蠑䳣姮⑄瀱儳ꯪ竡六쥭젛宣昕ꗦ聽蹊빖㽴겨厎厤Ｕ䮝뗛ૂ뇋궀䠙鱪㈢⻵㒛邾酪圮鿴܉擇
[  313.293974][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  313.308804][ T5942] usb 4-1: Manufacturer: 嫵嵆㇗縉Ч㷨耂揜㗤퇲訵ႆ匍펾꥓徉ķ쨱駟正횸ᡡ悮ഴ≊뫠zꏬ৛廒蟼匥鵃푊땚५⧺⿊䌤܊ك鳷뺥򳳵㕰脻낳棓稺죕⩤죃ꣴ폪洧瀏往㥟哾븉Ⴇꔐ踦廬꫅䃖莺尿칏艍篅폷퐖
[  313.355946][ T5942] usb 4-1: SerialNumber: syz
[  313.368880][ T8998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  313.424009][    T9] usb 2-1: device descriptor read/64, error -71
[  313.607265][   T30] audit: type=1400 audit(1759405250.800:538): avc:  denied  { map } for  pid=8995 comm="syz.3.804" path="socket:[22644]" dev="sockfs" ino=22644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  313.648908][ T5942] usb 4-1: USB disconnect, device number 21
[  313.744093][    T9] usb usb2-port1: attempt power cycle
[  313.798529][ T5872] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  314.195401][    T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  314.197941][ T5872] usb 5-1: device descriptor read/all, error -71
[  314.364540][ T7284] syz_tun: left allmulticast mode
[  314.507308][ T8003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.569789][ T9005] syz_tun (unregistering): left allmulticast mode
[  314.595080][ T5820] syz_tun (unregistering): left allmulticast mode
[  314.626962][ T8003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.735445][ T8003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.747149][    T9] usb 2-1: device descriptor read/8, error -71
[  314.839800][ T8003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.179663][ T8003] bond0 (unregistering): Released all slaves
[  315.238953][ T8003] tipc: Left network mode
[  315.468009][ T8003] hsr_slave_0: left promiscuous mode
[  315.474417][ T8003] hsr_slave_1: left promiscuous mode
[  315.491694][ T8003] veth1_macvtap: left promiscuous mode
[  315.497802][ T8003] veth0_macvtap: left promiscuous mode
[  315.503799][ T8003] veth1_vlan: left promiscuous mode
[  315.510356][ T8003] veth0_vlan: left promiscuous mode
[  315.557085][ T8003] ------------[ cut here ]------------
[  315.562541][ T8003] ida_free called for id=950 which is not allocated.
[  315.570470][ T8003] WARNING: CPU: 0 PID: 8003 at lib/idr.c:592 ida_free+0x1f9/0x2e0
[  315.578297][ T8003] Modules linked in:
[  315.582490][ T8003] CPU: 0 UID: 0 PID: 8003 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  315.592039][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  315.603558][ T8003] Workqueue: netns cleanup_net
[  315.608416][ T8003] RIP: 0010:ida_free+0x1f9/0x2e0
[  315.613353][ T8003] Code: 75 f6 41 83 fe 3e 76 72 e8 34 5b 75 f6 48 8b 7c 24 28 4c 89 ee e8 47 39 0d 00 90 48 c7 c7 00 ae cf 8c 89 ee e8 38 e6 33 f6 90 <0f> 0b 90 90 e8 0e 5b 75 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3
[  315.633262][ T8003] RSP: 0018:ffffc900030d7460 EFLAGS: 00010286
[  315.639565][ T8003] RAX: 0000000000000000 RBX: 1ffff9200061ae8d RCX: ffffffff8179a5b8
[  315.647564][ T8003] RDX: ffff88802c284900 RSI: ffffffff8179a5c5 RDI: 0000000000000001
[  315.655535][ T8003] RBP: 00000000000003b6 R08: 0000000000000001 R09: 0000000000000000
[  315.663483][ T8003] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801eedd000
[  315.671449][ T8003] R13: 0000000000000293 R14: 00000000000003b6 R15: ffff88801eedd070
[  315.679429][ T8003] FS:  0000000000000000(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000
[  315.688378][ T8003] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  315.694971][ T8003] CR2: 00007ffdefb1d298 CR3: 0000000022ef0000 CR4: 00000000003526f0
[  315.702918][ T8003] Call Trace:
[  315.706220][ T8003]  <TASK>
[  315.709148][ T8003]  ? __pfx_ida_free+0x10/0x10
[  315.713805][ T8003]  ? __pfx_proc_entry_rundown+0x10/0x10
[  315.719768][ T8003]  ? xen_error_entry+0x30/0x60
[  315.724939][ T8003]  ? remove_proc_subtree+0x331/0x5e0
[  315.730227][ T8003]  pde_put+0xa9/0x1d0
[  315.734212][ T8003]  remove_proc_subtree+0x487/0x5e0
[  315.739301][ T8003]  ? __pfx_remove_proc_subtree+0x10/0x10
[  315.744970][ T8003]  ? __pfx_rt6_disable_ip+0x10/0x10
[  315.750169][ T8003]  proc_remove+0x6a/0x90
[  315.754496][ T8003]  snmp6_unregister_dev+0xc4/0x140
[  315.759598][ T8003]  addrconf_ifdown.isra.0+0x44d/0x1aa0
[  315.765069][ T8003]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  315.770696][ T8003]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  315.776584][ T8003]  ? tls_dev_event+0xfd/0x10b0
[  315.781329][ T8003]  addrconf_notify+0x220/0x19e0
[  315.786178][ T8003]  ? ip6mr_device_event+0x1bc/0x230
[  315.791356][ T8003]  notifier_call_chain+0xbc/0x410
[  315.796365][ T8003]  ? __pfx_addrconf_notify+0x10/0x10
[  315.801627][ T8003]  call_netdevice_notifiers_info+0xbe/0x140
[  315.807549][ T8003]  unregister_netdevice_many_notify+0xf76/0x24c0
[  315.813928][ T8003]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  315.821024][ T8003]  ? unregister_netdevice_queue+0x22e/0x3f0
[  315.827216][ T8003]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  315.833463][ T8003]  ? batadv_meshif_destroy_vlan+0xdf/0x160
[  315.839292][ T8003]  ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10
[  315.845792][ T8003]  default_device_exit_batch+0x853/0xaf0
[  315.851406][ T8003]  ? __pfx_default_device_exit_batch+0x10/0x10
[  315.857556][ T8003]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  315.863005][ T8003]  ? __pfx___might_resched+0x10/0x10
[  315.868285][ T8003]  ? __pfx_default_device_exit_batch+0x10/0x10
[  315.874444][ T8003]  ops_undo_list+0x360/0xab0
[  315.879014][ T8003]  ? __pfx_ops_undo_list+0x10/0x10
[  315.884126][ T8003]  ? cleanup_net+0x347/0x8b0
[  315.888708][ T8003]  ? idr_destroy+0x62/0x2e0
[  315.893186][ T8003]  cleanup_net+0x41b/0x8b0
[  315.897616][ T8003]  ? __pfx_cleanup_net+0x10/0x10
[  315.902535][ T8003]  ? rcu_is_watching+0x12/0xc0
[  315.907297][ T8003]  process_one_work+0x9cf/0x1b70
[  315.912216][ T8003]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  315.918114][ T8003]  ? __pfx_process_one_work+0x10/0x10
[  315.923676][ T8003]  ? assign_work+0x1a0/0x250
[  315.928471][ T8003]  worker_thread+0x6c8/0xf10
[  315.933060][ T8003]  ? __kthread_parkme+0x19e/0x250
[  315.938120][ T8003]  ? __pfx_worker_thread+0x10/0x10
[  315.943225][ T8003]  kthread+0x3c5/0x780
[  315.947329][ T8003]  ? __pfx_kthread+0x10/0x10
[  315.951906][ T8003]  ? rcu_is_watching+0x12/0xc0
[  315.956672][ T8003]  ? __pfx_kthread+0x10/0x10
[  315.961236][ T8003]  ret_from_fork+0x56a/0x730
[  315.965809][ T8003]  ? __pfx_kthread+0x10/0x10
[  315.970371][ T8003]  ret_from_fork_asm+0x1a/0x30
[  315.975148][ T8003]  </TASK>
[  315.978152][ T8003] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  315.985415][ T8003] CPU: 0 UID: 0 PID: 8003 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  315.994939][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  316.004970][ T8003] Workqueue: netns cleanup_net
[  316.009730][ T8003] Call Trace:
[  316.012980][ T8003]  <TASK>
[  316.015882][ T8003]  dump_stack_lvl+0x3d/0x1f0
[  316.020461][ T8003]  vpanic+0x6e8/0x7a0
[  316.024418][ T8003]  ? __pfx_vpanic+0x10/0x10
[  316.028910][ T8003]  ? ida_free+0x1f9/0x2e0
[  316.033214][ T8003]  panic+0xca/0xd0
[  316.036904][ T8003]  ? __pfx_panic+0x10/0x10
[  316.041293][ T8003]  ? check_panic_on_warn+0x1f/0xb0
[  316.046380][ T8003]  check_panic_on_warn+0xab/0xb0
[  316.051304][ T8003]  __warn+0xf6/0x3c0
[  316.055175][ T8003]  ? __pfx_vprintk_emit+0x10/0x10
[  316.060184][ T8003]  ? ida_free+0x1f9/0x2e0
[  316.064500][ T8003]  report_bug+0x3c3/0x580
[  316.068813][ T8003]  ? ida_free+0x1f9/0x2e0
[  316.073123][ T8003]  handle_bug+0x184/0x210
[  316.077439][ T8003]  exc_invalid_op+0x17/0x50
[  316.081926][ T8003]  asm_exc_invalid_op+0x1a/0x20
[  316.086757][ T8003] RIP: 0010:ida_free+0x1f9/0x2e0
[  316.091679][ T8003] Code: 75 f6 41 83 fe 3e 76 72 e8 34 5b 75 f6 48 8b 7c 24 28 4c 89 ee e8 47 39 0d 00 90 48 c7 c7 00 ae cf 8c 89 ee e8 38 e6 33 f6 90 <0f> 0b 90 90 e8 0e 5b 75 f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3
[  316.111266][ T8003] RSP: 0018:ffffc900030d7460 EFLAGS: 00010286
[  316.117314][ T8003] RAX: 0000000000000000 RBX: 1ffff9200061ae8d RCX: ffffffff8179a5b8
[  316.125264][ T8003] RDX: ffff88802c284900 RSI: ffffffff8179a5c5 RDI: 0000000000000001
[  316.133213][ T8003] RBP: 00000000000003b6 R08: 0000000000000001 R09: 0000000000000000
[  316.141161][ T8003] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801eedd000
[  316.149109][ T8003] R13: 0000000000000293 R14: 00000000000003b6 R15: ffff88801eedd070
[  316.157064][ T8003]  ? __warn_printk+0x198/0x350
[  316.161806][ T8003]  ? __warn_printk+0x1a5/0x350
[  316.166553][ T8003]  ? __pfx_ida_free+0x10/0x10
[  316.171209][ T8003]  ? __pfx_proc_entry_rundown+0x10/0x10
[  316.176740][ T8003]  ? xen_error_entry+0x30/0x60
[  316.181483][ T8003]  ? remove_proc_subtree+0x331/0x5e0
[  316.186758][ T8003]  pde_put+0xa9/0x1d0
[  316.190725][ T8003]  remove_proc_subtree+0x487/0x5e0
[  316.195823][ T8003]  ? __pfx_remove_proc_subtree+0x10/0x10
[  316.201448][ T8003]  ? __pfx_rt6_disable_ip+0x10/0x10
[  316.206633][ T8003]  proc_remove+0x6a/0x90
[  316.210858][ T8003]  snmp6_unregister_dev+0xc4/0x140
[  316.215950][ T8003]  addrconf_ifdown.isra.0+0x44d/0x1aa0
[  316.221396][ T8003]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  316.227015][ T8003]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  316.232888][ T8003]  ? tls_dev_event+0xfd/0x10b0
[  316.237638][ T8003]  addrconf_notify+0x220/0x19e0
[  316.242470][ T8003]  ? ip6mr_device_event+0x1bc/0x230
[  316.248091][ T8003]  notifier_call_chain+0xbc/0x410
[  316.253092][ T8003]  ? __pfx_addrconf_notify+0x10/0x10
[  316.258363][ T8003]  call_netdevice_notifiers_info+0xbe/0x140
[  316.264245][ T8003]  unregister_netdevice_many_notify+0xf76/0x24c0
[  316.270562][ T8003]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  316.277312][ T8003]  ? unregister_netdevice_queue+0x22e/0x3f0
[  316.283711][ T8003]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  316.289936][ T8003]  ? batadv_meshif_destroy_vlan+0xdf/0x160
[  316.295732][ T8003]  ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10
[  316.302221][ T8003]  default_device_exit_batch+0x853/0xaf0
[  316.307842][ T8003]  ? __pfx_default_device_exit_batch+0x10/0x10
[  316.313979][ T8003]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  316.319424][ T8003]  ? __pfx___might_resched+0x10/0x10
[  316.324693][ T8003]  ? __pfx_default_device_exit_batch+0x10/0x10
[  316.330834][ T8003]  ops_undo_list+0x360/0xab0
[  316.335411][ T8003]  ? __pfx_ops_undo_list+0x10/0x10
[  316.340509][ T8003]  ? cleanup_net+0x347/0x8b0
[  316.345081][ T8003]  ? idr_destroy+0x62/0x2e0
[  316.349567][ T8003]  cleanup_net+0x41b/0x8b0
[  316.353973][ T8003]  ? __pfx_cleanup_net+0x10/0x10
[  316.358897][ T8003]  ? rcu_is_watching+0x12/0xc0
[  316.363647][ T8003]  process_one_work+0x9cf/0x1b70
[  316.368580][ T8003]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  316.374471][ T8003]  ? __pfx_process_one_work+0x10/0x10
[  316.379840][ T8003]  ? assign_work+0x1a0/0x250
[  316.384422][ T8003]  worker_thread+0x6c8/0xf10
[  316.389012][ T8003]  ? __kthread_parkme+0x19e/0x250
[  316.394032][ T8003]  ? __pfx_worker_thread+0x10/0x10
[  316.399129][ T8003]  kthread+0x3c5/0x780
[  316.403183][ T8003]  ? __pfx_kthread+0x10/0x10
[  316.407753][ T8003]  ? rcu_is_watching+0x12/0xc0
[  316.412499][ T8003]  ? __pfx_kthread+0x10/0x10
[  316.417069][ T8003]  ret_from_fork+0x56a/0x730
[  316.421639][ T8003]  ? __pfx_kthread+0x10/0x10
[  316.426207][ T8003]  ret_from_fork_asm+0x1a/0x30
[  316.430978][ T8003]  </TASK>
[  316.434174][ T8003] Kernel Offset: disabled
[  316.438475][ T8003] Rebooting in 86400 seconds..