last executing test programs:

2m4.680227222s ago: executing program 2 (id=316):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)

2m3.720525563s ago: executing program 2 (id=318):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x5, 0x10, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1bf, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x3, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x53, 0x3, 0x1ff, 0xf8, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x5, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x5, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000002, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0xeec3}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0xd, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x10, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x4, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x5, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x1, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x2, 0x2, 0x9, 0x1000, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x8007, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x8001, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000009}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x55d81519de704440}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

2m0.352893749s ago: executing program 2 (id=324):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m58.610325526s ago: executing program 2 (id=329):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

1m54.427360184s ago: executing program 2 (id=336):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=<r4=>r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7, @ANYBLOB="13aef6a411f6b42e"], 0x20}}, 0x0)
write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="fc06ce86768bb07088affbb312efc1c00217ae1549f6a324449486548f5a7fef4103afe8eff82e0f598b34c1edcbe679e619cece63d887be3bc7a62b5aad324b14311c5c15d0241bd9967811a8d4fbd2364affcef4779fadaf73e6265107d3c846aeaf8d4aaac4933e0222772dd4666af4782b02d7cd2c6262f656355d8a9c4138bce05315da046427aa31e5784a2e5e16437a9013f4b3ffe71201a34c566f487636f521eadc221e65bc555652279e2e96c33b2f2c708860488bd7de", @ANYRES64=r6, @ANYRES8, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYRESDEC], 0xbb)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x41c}}}, 0x7)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0x8000000000000001)

1m51.586989458s ago: executing program 2 (id=343):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r3})

1m36.349717852s ago: executing program 32 (id=343):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r3=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r3})

19.494088954s ago: executing program 4 (id=558):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r3, 0x30c1, 0x779f, 0x16, 0x0, 0x0)

13.763295981s ago: executing program 4 (id=573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_IO_FLUSHER(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)

12.729664587s ago: executing program 4 (id=575):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098f", 0xc1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

10.795272347s ago: executing program 0 (id=580):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.793731559s ago: executing program 4 (id=581):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/222)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.432763577s ago: executing program 1 (id=582):
userfaultfd(0x80001)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x40]}, 0x8, 0x80c00)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x200048c0)

9.734016229s ago: executing program 3 (id=584):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000019300)={0x0, @in6={{0xa, 0x4e23, 0x7, @private2}}, 0x0, 0xef, 0x7, 0x5, 0x8, 0x9, 0x41}, 0x9c)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>r1, 0x2})
r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4})
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
semop(0x0, &(0x7f0000000000), 0x1)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)

9.606620122s ago: executing program 1 (id=585):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, 0x0, 0x171)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/49, 0x31}, 0x202)
syz_usb_connect(0x3, 0x3d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x2200, 0x1}, 0x50)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0})

8.127889992s ago: executing program 0 (id=586):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579", 0x16}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8.125430028s ago: executing program 4 (id=596):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0)

7.935145109s ago: executing program 3 (id=588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc)
r1 = syz_open_dev$video(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004})
close(r1)

7.080592707s ago: executing program 0 (id=589):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.995002371s ago: executing program 5 (id=590):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c", 0x4d, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}], 0x4924924924925bb, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.851145028s ago: executing program 3 (id=591):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x8, 0x0, 0x0}}, 0x10)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x2fa77e8ce0582f97, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x400c814)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r11)

6.532186153s ago: executing program 5 (id=592):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.440652393s ago: executing program 0 (id=593):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0xe4}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.372505162s ago: executing program 5 (id=594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
r3 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x1ff)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {&(0x7f0000000280)=""/172, 0xac}, 0x0, 0x10}, 0xa0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)

5.936416898s ago: executing program 0 (id=595):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000440)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80000, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8104, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r11=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r11}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f})

5.683239763s ago: executing program 1 (id=597):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x5)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x700, 0x0, [@sadb_key={0x3, 0x9, 0x50, 0x0, "53bb467d04f14562c5f4"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$rds(0x15, 0x5, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x2, 0x400, 0x3, 0x253, 0x0, r4}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacd, 0x20000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfcee, 0x2, 0x1, 0x1aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

5.439261209s ago: executing program 5 (id=598):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fedbdf2500000000087fa4d2a0000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]})
request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$inet_mreqsrc(r10, 0x0, 0x26, &(0x7f0000000040)={@rand_addr, @loopback, @empty}, &(0x7f0000000280)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000240012800b0001006970766c616e0000140002800600020001000000060001000000"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)

4.404863131s ago: executing program 0 (id=599):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x2)
fchdir(r2)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x1d3)
ftruncate(r3, 0x2007ffb)
socket$inet6(0xa, 0x2, 0x0)
close(r3)
open(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

4.404495093s ago: executing program 5 (id=600):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd24, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x82004}, 0x80000)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000016800)={0x0, 0x0})

3.3941432s ago: executing program 5 (id=601):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.360017895s ago: executing program 1 (id=602):
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e674036", 0x91, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x60, 0x117, 0x2, 0x46, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x78, 0x40800}], 0x1, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.319042488s ago: executing program 3 (id=603):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c", 0x4d, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}], 0x4924924924925bb, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.121340129s ago: executing program 4 (id=604):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0)
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(0x0, &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(0x0, &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc)

1.079769949s ago: executing program 1 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000010280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4008010)

820.805376ms ago: executing program 3 (id=606):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, 0x0, 0x800)
sendmsg$nl_route(r0, 0x0, 0x20000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="4000308014000400503a05035bf73ce4ba00018008000000060001"], 0x5c}}, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r8)

130.940887ms ago: executing program 1 (id=607):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc0, 0x0)
syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x21, r3, 0x5, 0x4)

0s ago: executing program 3 (id=608):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020)
preadv2(r0, &(0x7f0000003480)=[{&(0x7f00000021c0)=""/157, 0x9d}], 0x1, 0x30b, 0x4000009, 0x1)

kernel console output (not intermixed with test programs):

 65.641943][ T5609] Cannot create hsr debugfs directory
[   65.650890][ T5620] hsr_slave_0: entered promiscuous mode
[   65.657088][ T5620] hsr_slave_1: entered promiscuous mode
[   65.662948][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   65.669153][ T5620] Cannot create hsr debugfs directory
[   65.683803][ T5610] hsr_slave_0: entered promiscuous mode
[   65.689890][ T5610] hsr_slave_1: entered promiscuous mode
[   65.695765][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   65.701517][ T5610] Cannot create hsr debugfs directory
[   65.733117][ T5622] hsr_slave_0: entered promiscuous mode
[   65.739162][ T5622] hsr_slave_1: entered promiscuous mode
[   65.744981][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   65.750819][ T5622] Cannot create hsr debugfs directory
[   65.799475][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[   65.806367][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[   66.092179][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.103795][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.112451][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.121309][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.129864][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.139056][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.147467][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.156227][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.213407][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.223003][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.230935][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.240111][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.248890][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.257123][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.264681][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.273556][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.343326][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.353296][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.364752][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.374033][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.381885][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.391327][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.399705][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.408200][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.494420][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.504430][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.512301][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.521741][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.529741][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.538552][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.551379][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.560157][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.588218][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.618489][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.652589][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.661684][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.669675][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.680280][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.689064][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.697403][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.705568][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.714371][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.738259][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   66.751834][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   66.782598][  T158] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.789905][  T158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.800015][  T158] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.807129][  T158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.831641][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.838721][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.858416][  T158] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.865506][  T158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.902031][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.953722][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   66.986634][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.993771][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.012124][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.037844][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.044987][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.090604][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   67.133576][  T158] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.140730][  T158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.156932][ T5616] Bluetooth: hci1: command tx timeout
[   67.158382][  T158] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.169422][  T158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.194870][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.236905][ T5616] Bluetooth: hci0: command tx timeout
[   67.242340][   T50] Bluetooth: hci4: command tx timeout
[   67.243277][ T5618] Bluetooth: hci2: command tx timeout
[   67.251395][   T50] Bluetooth: hci3: command tx timeout
[   67.275516][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   67.305183][ T5622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.323895][ T5622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.357166][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.364284][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.400109][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.407258][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.633188][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.741045][ T5614] veth0_vlan: entered promiscuous mode
[   67.766361][ T5614] veth1_vlan: entered promiscuous mode
[   67.853523][ T5614] veth0_macvtap: entered promiscuous mode
[   67.885782][ T5614] veth1_macvtap: entered promiscuous mode
[   67.964836][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.002395][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.033265][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.054866][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.066501][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.079242][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.103807][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.113515][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.161516][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.307908][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.331887][ T5620] veth0_vlan: entered promiscuous mode
[   68.341221][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.344728][ T5609] veth0_vlan: entered promiscuous mode
[   68.360411][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.383429][ T5620] veth1_vlan: entered promiscuous mode
[   68.427823][ T5609] veth1_vlan: entered promiscuous mode
[   68.454877][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.465522][ T5610] veth0_vlan: entered promiscuous mode
[   68.466565][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.496343][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   68.496358][   T30] audit: type=1400 audit(1785225158.194:152): avc:  denied  { mounton } for  pid=5614 comm="syz-executor" path="/root/syzkaller.vFfAdQ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   68.530804][ T5610] veth1_vlan: entered promiscuous mode
[   68.539612][   T30] audit: type=1400 audit(1785225158.204:153): avc:  denied  { mount } for  pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   68.568521][   T30] audit: type=1400 audit(1785225158.204:154): avc:  denied  { mounton } for  pid=5614 comm="syz-executor" path="/root/syzkaller.vFfAdQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   68.594970][   T30] audit: type=1400 audit(1785225158.204:155): avc:  denied  { mount } for  pid=5614 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   68.601519][ T5620] veth0_macvtap: entered promiscuous mode
[   68.617404][   T30] audit: type=1400 audit(1785225158.204:156): avc:  denied  { mounton } for  pid=5614 comm="syz-executor" path="/root/syzkaller.vFfAdQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   68.659472][ T5609] veth0_macvtap: entered promiscuous mode
[   68.660141][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.667438][   T30] audit: type=1400 audit(1785225158.204:157): avc:  denied  { mounton } for  pid=5614 comm="syz-executor" path="/root/syzkaller.vFfAdQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   68.695155][ T5610] veth0_macvtap: entered promiscuous mode
[   68.710132][   T30] audit: type=1400 audit(1785225158.214:158): avc:  denied  { unmount } for  pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   68.733910][   T30] audit: type=1400 audit(1785225158.244:159): avc:  denied  { mounton } for  pid=5614 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   68.738312][ T5620] veth1_macvtap: entered promiscuous mode
[   68.758513][   T30] audit: type=1400 audit(1785225158.254:160): avc:  denied  { mount } for  pid=5614 comm="syz-executor" name="/" dev="gadgetfs" ino=6911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   68.785782][   T30] audit: type=1400 audit(1785225158.264:161): avc:  denied  { mount } for  pid=5614 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   68.820603][ T5610] veth1_macvtap: entered promiscuous mode
[   68.841822][ T5609] veth1_macvtap: entered promiscuous mode
[   68.850400][ T5622] veth0_vlan: entered promiscuous mode
[   68.887162][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.912406][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.924946][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.028728][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.042096][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.052219][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.061968][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.072957][ T5622] veth1_vlan: entered promiscuous mode
[   69.082699][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.092019][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.099344][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.108924][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.170239][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.286707][   T50] Bluetooth: hci1: command tx timeout
[   69.318086][   T50] Bluetooth: hci3: command tx timeout
[   69.323912][   T50] Bluetooth: hci0: command tx timeout
[   69.330171][   T50] Bluetooth: hci2: command tx timeout
[   69.335956][   T50] Bluetooth: hci4: command tx timeout
[   69.468674][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.493155][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.516163][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.524986][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.542243][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.551628][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.567705][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.581925][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.617972][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.635665][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.660423][ T5622] veth0_macvtap: entered promiscuous mode
[   69.672690][ T5622] veth1_macvtap: entered promiscuous mode
[   69.788856][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.804952][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.813114][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.821007][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.825673][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.847259][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.860435][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.893474][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.073482][  T158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.082705][  T158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.096571][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.100123][  T158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.112832][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.115309][  T158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.171920][ T5818] hub 1-0:1.0: USB hub found
[   71.366877][ T5818] hub 1-0:1.0: 1 port detected
[   71.706730][ T5616] Bluetooth: hci1: command tx timeout
[   71.712274][ T5616] Bluetooth: hci4: command tx timeout
[   71.718721][   T50] Bluetooth: hci2: command tx timeout
[   71.724706][ T5618] Bluetooth: hci0: command tx timeout
[   71.730140][ T5615] Bluetooth: hci3: command tx timeout
[   71.791478][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.874067][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.376079][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.303968][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.140417][   T30] kauditd_printk_skb: 22 callbacks suppressed
[   74.140433][   T30] audit: type=1400 audit(1785225163.724:184): avc:  denied  { read write } for  pid=5842 comm="syz.3.11" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.782652][   T30] audit: type=1400 audit(1785225163.724:185): avc:  denied  { open } for  pid=5842 comm="syz.3.11" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.829031][ T5702] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   74.900916][   T30] audit: type=1400 audit(1785225163.724:186): avc:  denied  { ioctl } for  pid=5842 comm="syz.3.11" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   74.941796][   T30] audit: type=1400 audit(1785225163.974:187): avc:  denied  { perfmon } for  pid=5844 comm="syz.0.12" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   75.003143][   T30] audit: type=1400 audit(1785225163.984:188): avc:  denied  { prog_load } for  pid=5844 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   75.037476][   T30] audit: type=1400 audit(1785225164.444:189): avc:  denied  { prog_run } for  pid=5844 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   75.056216][ T5702] usb 4-1: Using ep0 maxpacket: 8
[   75.064193][ T5702] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   75.071110][   T30] audit: type=1400 audit(1785225164.554:190): avc:  denied  { create } for  pid=5848 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   75.098012][ T5702] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   75.126935][ T5702] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   75.132403][   T30] audit: type=1400 audit(1785225164.634:191): avc:  denied  { sys_admin } for  pid=5848 comm="syz.1.13" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   75.155551][ T5702] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   75.188974][ T5702] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   75.214651][   T30] audit: type=1400 audit(1785225164.794:192): avc:  denied  { read append } for  pid=5856 comm="syz.0.15" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   75.241524][ T5702] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   75.275820][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.308895][   T30] audit: type=1400 audit(1785225164.794:193): avc:  denied  { open } for  pid=5856 comm="syz.0.15" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   75.536769][   T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.568509][ T5702] usb 4-1: GET_CAPABILITIES returned 0
[   75.583728][ T5702] usbtmc 4-1:16.0: can't read capabilities
[   75.706643][   T29] usb 1-1: Using ep0 maxpacket: 32
[   75.726578][   T29] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.751603][   T29] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.783218][   T29] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   75.817962][   T29] usb 1-1: config 0 interface 0 has no altsetting 0
[   75.824602][   T29] usb 1-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00
[   75.825242][ T5870] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   75.833767][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.891213][   T29] usb 1-1: config 0 descriptor??
[   75.895651][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.907385][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.916469][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.934680][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.943791][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.952870][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.961949][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.971035][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.982878][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   75.991971][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   76.001053][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   76.010133][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   76.019214][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   76.030700][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   76.039792][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   76.048839][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[   76.058827][ T5702] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.085551][ T5790] usb 4-1: USB disconnect, device number 2
[   76.218492][ T5702] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01
[   76.229891][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.245347][ T5702] emi26 - firmware loader 5-1:1.0: emi26_probe start
[   76.269353][ T5702] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2
[   76.280127][ T5702] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw
[   76.528888][ T5702] usb 5-1: Firmware "emi26/loader.fw" not valid IHEX records
[   76.543383][ T5702] usb 5-1: emi26_load_firmware - request_firmware() failed
[   76.560518][   T29] usbhid 1-1:0.0: can't add hid device: -71
[   76.561453][ T5702] usb 5-1: emi26_load_firmware - error loading firmware: error = -22
[   76.579907][   T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   76.583766][ T5702] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5
[   76.620537][   T29] usb 1-1: USB disconnect, device number 2
[   77.013276][   T29] usb 5-1: USB disconnect, device number 2
[   77.438278][ T5738] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   77.647674][ T5738] usb 4-1: Using ep0 maxpacket: 32
[   77.742758][ T5738] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   77.874170][ T5738] usb 4-1: config 0 has no interface number 0
[   77.946747][ T5738] usb 4-1: config 0 interface 184 has no altsetting 0
[   77.956451][ T5738] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   77.978570][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.994409][ T5738] usb 4-1: Product: syz
[   78.001387][ T5738] usb 4-1: Manufacturer: syz
[   78.006095][ T5738] usb 4-1: SerialNumber: syz
[   78.014550][ T5738] usb 4-1: config 0 descriptor??
[   78.116184][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.156145][ T5790] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   78.237001][ T5910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.247538][ T5790] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   78.262536][   T12] wlan1: authenticated
[   78.297542][  T158] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[   78.499374][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.514728][   T36] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[   78.524010][   T36] wlan1: associated
[   79.257839][ T5918] binder: 5917:5918 unknown command 0
[   79.266488][   T30] kauditd_printk_skb: 30 callbacks suppressed
[   79.266505][   T30] audit: type=1400 audit(1785225168.954:224): avc:  denied  { call } for  pid=5917 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   79.289936][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   79.303681][   T30] audit: type=1400 audit(1785225168.964:225): avc:  denied  { transfer } for  pid=5917 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   79.328419][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   79.348238][ T5918] binder: 5917:5918 ioctl c0306201 2000000001c0 returned -22
[   79.364304][ T5925] fuse: fd is not a fuse device
[   79.383198][   T30] audit: type=1400 audit(1785225169.084:226): avc:  denied  { read } for  pid=5926 comm="syz.2.38" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   79.411872][   T30] audit: type=1400 audit(1785225169.084:227): avc:  denied  { open } for  pid=5926 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   79.474619][   T30] audit: type=1400 audit(1785225169.174:228): avc:  denied  { create } for  pid=5928 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   79.687802][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[   79.703436][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[   80.254641][   T30] audit: type=1400 audit(1785225169.944:229): avc:  denied  { unmount } for  pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   80.274909][ T5738] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   80.289648][ T5738] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[   80.695313][ T5738] usb 4-1: USB disconnect, device number 3
[   80.886702][   T30] audit: type=1400 audit(1785225170.574:230): avc:  denied  { mount } for  pid=5941 comm="syz.1.44" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   80.969115][   T30] audit: type=1400 audit(1785225170.614:231): avc:  denied  { create } for  pid=5948 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   80.996698][   T30] audit: type=1400 audit(1785225170.614:232): avc:  denied  { bind } for  pid=5948 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   81.016736][   T30] audit: type=1400 audit(1785225170.624:233): avc:  denied  { setopt } for  pid=5948 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   81.425211][  T805] cfg80211: failed to load regulatory.db
[   85.079633][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   85.079648][   T30] audit: type=1400 audit(1785225174.784:249): avc:  denied  { create } for  pid=5996 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   85.136169][   T30] audit: type=1400 audit(1785225174.804:250): avc:  denied  { setopt } for  pid=5996 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   85.294522][ T6004] capability: warning: `syz.2.62' uses deprecated v2 capabilities in a way that may be insecure
[   85.301603][ T6002] syzkaller0: entered promiscuous mode
[   85.320391][ T6002] syzkaller0: entered allmulticast mode
[   85.339928][   T30] audit: type=1400 audit(1785225175.044:251): avc:  denied  { bind } for  pid=5996 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   85.360698][   T30] audit: type=1400 audit(1785225175.054:252): avc:  denied  { setopt } for  pid=5999 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.380877][   T30] audit: type=1400 audit(1785225175.054:253): avc:  denied  { ioctl } for  pid=5999 comm="syz.4.61" path="socket:[9091]" dev="sockfs" ino=9091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.405780][   T30] audit: type=1400 audit(1785225175.054:254): avc:  denied  { write } for  pid=5999 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   86.306787][ T5702] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   86.606674][ T5702] usb 3-1: Using ep0 maxpacket: 8
[   86.615500][ T5702] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.626778][ T5702] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[   86.642727][ T5702] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.656335][ T5702] usb 3-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00
[   86.665738][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.778116][ T5702] usb 3-1: config 0 descriptor??
[   88.026618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   88.723719][   T30] audit: type=1400 audit(1785225178.384:255): avc:  denied  { unlink } for  pid=6011 comm="syz.2.65" name="#1" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   88.770991][ T6033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   88.777681][ T6033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   88.792458][ T6039] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   88.807242][ T6033] vhci_hcd vhci_hcd.0: Device attached
[   88.815408][ T6042] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   88.842032][ T6042] overlayfs: overlapping lowerdir path
[   88.899642][   T30] audit: type=1400 audit(1785225178.604:256): avc:  denied  { mount } for  pid=6011 comm="syz.2.65" name="/" dev="overlay" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   88.912875][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x3
[   89.006132][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.019900][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.039522][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.061877][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.080885][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   89.106230][   T30] audit: type=1400 audit(1785225178.744:257): avc:  denied  { name_bind } for  pid=6046 comm="syz.3.73" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   89.132854][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.146753][  T805] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[   89.152849][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.163387][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x2
[   89.171846][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x2
[   89.430442][   T24] usb 1-1: Using ep0 maxpacket: 16
[   89.642969][ T5702] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0
[   89.667498][ T5702] logitech-hidpp-device 0003:046D:C088.0001: hidraw0: USB HID v0.02 Device [HID 046d:c088] on usb-dummy_hcd.2-1/input0
[   89.702507][ T6040] vhci_hcd: connection closed
[   89.703811][ T3360] vhci_hcd vhci_hcd.0: stop threads
[   89.706927][ T5702] usb 3-1: USB disconnect, device number 2
[   89.709087][ T3360] vhci_hcd vhci_hcd.0: release socket
[   89.726238][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   89.750369][   T24] usb 1-1: no configurations
[   89.761274][ T3360] vhci_hcd vhci_hcd.0: disconnect device
[   89.988073][   T24] usb 1-1: can't read configurations, error -22
[   90.063687][ T6053] fido_id[6053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   90.963245][   T30] audit: type=1400 audit(1785225180.204:258): avc:  denied  { read } for  pid=6058 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.005794][   T30] audit: type=1400 audit(1785225180.274:259): avc:  denied  { write } for  pid=6058 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.136664][   T30] audit: type=1400 audit(1785225180.744:260): avc:  denied  { unmount } for  pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   91.224200][   T30] audit: type=1400 audit(1785225180.744:261): avc:  denied  { read } for  pid=6064 comm="syz.3.80" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   91.257603][   T30] audit: type=1400 audit(1785225180.744:262): avc:  denied  { open } for  pid=6064 comm="syz.3.80" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   91.389516][   T30] audit: type=1400 audit(1785225180.794:263): avc:  denied  { create } for  pid=6065 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   91.470462][   T30] audit: type=1400 audit(1785225181.144:264): avc:  denied  { write } for  pid=6065 comm="syz.1.79" path="socket:[9163]" dev="sockfs" ino=9163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   92.147398][   T30] audit: type=1400 audit(1785225181.854:265): avc:  denied  { create } for  pid=6076 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   92.198889][   T30] audit: type=1400 audit(1785225181.894:266): avc:  denied  { read write } for  pid=6076 comm="syz.4.82" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   92.258185][   T30] audit: type=1400 audit(1785225181.894:267): avc:  denied  { open } for  pid=6076 comm="syz.4.82" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   94.439438][ T6108] syzkaller0: entered promiscuous mode
[   94.466155][ T6108] syzkaller0: entered allmulticast mode
[   96.261835][   T30] kauditd_printk_skb: 16 callbacks suppressed
[   96.261879][   T30] audit: type=1400 audit(1785225185.954:284): avc:  denied  { mmap_zero } for  pid=6117 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   97.083275][   T30] audit: type=1400 audit(1785225186.604:285): avc:  denied  { connect } for  pid=6124 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.193719][   T30] audit: type=1400 audit(1785225186.604:286): avc:  denied  { write } for  pid=6124 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   97.388878][   T30] audit: type=1400 audit(1785225187.094:287): avc:  denied  { create } for  pid=6137 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   97.433766][   T30] audit: type=1400 audit(1785225187.094:288): avc:  denied  { setopt } for  pid=6137 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   97.721766][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'.
[   98.604044][ T6154] netlink: 'syz.1.101': attribute type 5 has an invalid length.
[   98.611782][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'.
[   99.695956][   T30] audit: type=1400 audit(1785225189.394:289): avc:  denied  { create } for  pid=6173 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   99.800895][   T30] audit: type=1400 audit(1785225189.484:290): avc:  denied  { setopt } for  pid=6173 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   99.844577][   T30] audit: type=1400 audit(1785225189.484:291): avc:  denied  { write } for  pid=6173 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   99.905724][ T6188] syzkaller0: entered promiscuous mode
[   99.922840][ T6188] syzkaller0: entered allmulticast mode
[   99.938182][   T30] audit: type=1400 audit(1785225189.634:292): avc:  denied  { block_suspend } for  pid=6183 comm="syz.2.106" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  100.131840][   T30] audit: type=1400 audit(1785225189.834:293): avc:  denied  { create } for  pid=6191 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  100.198925][ T6192] xt_hashlimit: size too large, truncated to 1048576
[  100.243518][ T6198] loop4: detected capacity change from 0 to 2640
[  100.253893][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.261965][ T5702] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  100.271662][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.282429][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.296859][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.312319][ T6200] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.321904][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.330519][ T6200] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.355970][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.387335][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.399285][ T6198] Buffer I/O error on dev loop4, logical block 0, async page read
[  100.407834][ T6198] ldm_validate_partition_table(): Disk read failed.
[  100.414637][ T6198] Dev loop4: unable to read RDB block 0
[  100.422935][ T6198]  loop4: unable to read partition table
[  100.428756][ T5702] usb 5-1: Using ep0 maxpacket: 8
[  100.434693][ T6198] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  100.445299][ T5702] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  100.453956][ T5702] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  100.468366][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  100.480213][ T5702] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  100.494122][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  100.517384][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  100.529394][ T5702] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  100.582527][ T5702] usb 5-1: config 168 interface 0 has no altsetting 0
[  100.610882][ T5702] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  100.748736][ T5702] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  100.772052][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  100.783540][ T5702] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  100.796084][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  100.812923][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  100.998678][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv1
[  101.372001][ T5702] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  101.409479][ T5702] usb 5-1: config 168 interface 0 has no altsetting 0
[  101.418674][ T5702] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  101.426141][ T5702] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  101.449770][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  101.471572][ T5702] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  101.493417][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  101.530001][ T5702] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  101.564458][ T5702] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  101.614089][ T5702] usb 5-1: config 168 interface 0 has no altsetting 0
[  101.733685][ T5702] usb 5-1: string descriptor 0 read error: -22
[  101.741286][ T5702] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  101.760076][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.801963][ T5702] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  101.842416][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  101.842432][   T30] audit: type=1400 audit(1785225191.544:301): avc:  denied  { mounton } for  pid=6216 comm="syz.3.115" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.885265][   T30] audit: type=1400 audit(1785225191.584:302): avc:  denied  { mount } for  pid=6216 comm="syz.3.115" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  102.269343][   T30] audit: type=1400 audit(1785225191.964:303): avc:  denied  { search } for  pid=6220 comm="syz.2.116" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.304495][   T30] audit: type=1400 audit(1785225191.994:304): avc:  denied  { search } for  pid=6220 comm="syz.2.116" name="usb_gadget" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.341656][   T30] audit: type=1400 audit(1785225191.994:305): avc:  denied  { write search } for  pid=6220 comm="syz.2.116" name="usb_gadget" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.383775][   T30] audit: type=1400 audit(1785225191.994:306): avc:  denied  { add_name } for  pid=6220 comm="syz.2.116" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.395296][ T6221] UDC core: g1: couldn't find an available UDC or it's busy
[  102.407050][   T30] audit: type=1400 audit(1785225191.994:307): avc:  denied  { create } for  pid=6220 comm="syz.2.116" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  102.453256][   T30] audit: type=1400 audit(1785225192.004:308): avc:  denied  { search } for  pid=6220 comm="syz.2.116" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.495377][   T30] audit: type=1400 audit(1785225192.004:309): avc:  denied  { search } for  pid=6220 comm="syz.2.116" name="usb_gadget" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.518426][   T30] audit: type=1400 audit(1785225192.004:310): avc:  denied  { search } for  pid=6220 comm="syz.2.116" name="g1" dev="configfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  102.562380][  T805] usb 5-1: USB disconnect, device number 3
[  102.598626][ T6238] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1
[  102.608346][ T6238] ref_ctr increment failed for inode: 0xc7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ceff2c0
[  102.620848][ T5345] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  102.628582][ T6238] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1
[  102.637891][ T6238] ref_ctr decrement failed for inode: 0xc7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ceff2c0
[  102.649110][ T6238] uprobe: syz.1.122:6238 failed to unregister, leaking uprobe
[  102.793879][ T5345] usb 1-1: Using ep0 maxpacket: 32
[  102.860596][ T5345] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.895952][ T5345] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7
[  102.916258][ T5345] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7
[  102.950239][ T5345] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  102.961857][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.972618][ T5345] usb 1-1: Product: syz
[  102.978383][ T5345] usb 1-1: Manufacturer: syz
[  102.983662][ T5345] usb 1-1: SerialNumber: syz
[  103.328082][ T5345] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  103.340273][ T5345] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  103.368525][ T6255] random: crng reseeded on system resumption
[  103.419779][ T5345] usb 1-1: USB disconnect, device number 5
[  103.449832][ T6259] fuse: fd is not a fuse device
[  104.056744][ T5717] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  104.229344][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.240256][ T5717] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  104.249416][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.262196][ T5717] usb 5-1: config 0 descriptor??
[  104.275387][ T5717] pwc: Askey VC010 type 2 USB webcam detected.
[  104.700209][ T5717] pwc: recv_control_msg error -32 req 02 val 2b00
[  104.709254][ T5717] pwc: recv_control_msg error -32 req 02 val 2700
[  104.716625][ T5717] pwc: recv_control_msg error -32 req 02 val 2c00
[  104.926928][ T5717] pwc: recv_control_msg error -32 req 04 val 1300
[  104.947782][ T5717] pwc: recv_control_msg error -32 req 04 val 1400
[  104.968399][ T5717] pwc: recv_control_msg error -32 req 02 val 2000
[  104.993651][ T5717] pwc: recv_control_msg error -32 req 02 val 2100
[  105.035247][ T5717] pwc: recv_control_msg error -71 req 04 val 1500
[  105.072216][ T5717] pwc: recv_control_msg error -71 req 02 val 2500
[  105.108451][ T5717] pwc: recv_control_msg error -71 req 02 val 2400
[  105.139416][ T5717] pwc: recv_control_msg error -71 req 02 val 2600
[  105.160195][ T6289] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  105.169629][ T5717] pwc: recv_control_msg error -71 req 02 val 2900
[  105.185021][ T5717] pwc: recv_control_msg error -71 req 02 val 2800
[  105.208702][ T5717] pwc: recv_control_msg error -71 req 04 val 1100
[  105.225190][ T5717] pwc: recv_control_msg error -71 req 04 val 1200
[  105.290209][ T5717] pwc: Registered as video103.
[  105.334248][ T5717] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  105.459773][ T5717] usb 5-1: USB disconnect, device number 4
[  105.516663][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.565310][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'.
[  105.691744][   T10] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  105.701053][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  105.709619][   T10] usb 1-1: Product: syz
[  105.715373][   T10] usb 1-1: Manufacturer: syz
[  105.835158][ T6301] smpboot: CPU 1 is now offline
[  105.893302][ T6302] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  106.648025][   T10] speedtch 1-1:1.0: speedtch_bind: setting interface to  1 failed (-71)!
[  106.667682][   T10] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -71!
[  106.681705][   T10] speedtch 1-1:1.0: probe with driver speedtch failed with error -71
[  106.711634][   T10] speedtch 1-1:1.1: speedtch_bind: setting interface to  1 failed (-71)!
[  106.721054][   T10] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -71!
[  106.854445][   T10] speedtch 1-1:1.1: probe with driver speedtch failed with error -71
[  107.438306][   T10] usb 1-1: USB disconnect, device number 6
[  107.504708][ T6318] nvme_fabrics: missing parameter 'transport=%s'
[  107.511410][ T6318] nvme_fabrics: missing parameter 'nqn=%s'
[  108.299033][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  108.299042][   T30] audit: type=1400 audit(1785225197.994:350): avc:  denied  { name_connect } for  pid=6328 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  108.830001][   T30] audit: type=1400 audit(1785225198.454:351): avc:  denied  { create } for  pid=6336 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  108.919748][ T6340] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[  109.082754][   T30] audit: type=1400 audit(1785225198.684:352): avc:  denied  { mount } for  pid=6336 comm="syz.4.151" name="/" dev="rpc_pipefs" ino=10631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  109.474935][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'.
[  109.783212][   T30] audit: type=1400 audit(1785225199.484:353): avc:  denied  { read } for  pid=6346 comm="syz.4.154" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  109.835610][ T6350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  109.852138][ T6347] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  109.865497][ T6350] block device autoloading is deprecated and will be removed.
[  109.874024][ T6347] block device autoloading is deprecated and will be removed.
[  109.946312][   T30] audit: type=1400 audit(1785225199.484:354): avc:  denied  { open } for  pid=6346 comm="syz.4.154" path="/27/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  110.038467][   T30] audit: type=1400 audit(1785225199.734:355): avc:  denied  { write } for  pid=6354 comm="syz.3.157" name="route" dev="proc" ino=4026533353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  110.868060][   T30] audit: type=1400 audit(1785225200.024:356): avc:  denied  { shutdown } for  pid=6353 comm="syz.4.156" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  111.586671][ T5345] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  111.739455][ T5345] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 136, changing to 7
[  111.751326][ T5345] usb 3-1: language id specifier not provided by device, defaulting to English
[  111.771020][ T5345] usb 3-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  111.787871][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.789194][ T6340] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  111.810701][ T5345] usb 3-1: Manufacturer: 먁똪틃⟛牢Ϲ쇱䧩⹕鱺坤卸믽컘ㅣ埅䞩陊滐招촞舚๽՘⸸呂녡
[  111.818859][ T6358] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  111.839649][ T5345] usb 3-1: SerialNumber: syz
[  111.868179][ T6325] Zero length message leads to an empty skb
[  112.027476][   T30] audit: type=1400 audit(1785225201.734:357): avc:  denied  { map } for  pid=6374 comm="syz.1.162" path="socket:[9860]" dev="sockfs" ino=9860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  112.068805][ T5717] IPVS: starting estimator thread 0...
[  112.089930][   T30] audit: type=1400 audit(1785225201.754:358): avc:  denied  { cmd } for  pid=6374 comm="syz.1.162" path="socket:[9858]" dev="sockfs" ino=9858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  112.113684][ T5345] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  112.190823][   T30] audit: type=1400 audit(1785225201.774:359): avc:  denied  { write } for  pid=6377 comm="syz.4.163" name="radio8" dev="devtmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  112.198028][ T6380] IPVS: using max 53 ests per chain, 127200 per kthread
[  112.291110][ T5345] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  113.756905][ T5345] usb 3-1: USB disconnect, device number 3
[  113.892040][   T30] audit: type=1400 audit(1785225203.564:360): avc:  denied  { mount } for  pid=6387 comm="syz.3.167" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  114.098013][ T6392] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  114.302996][ T6394] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  114.479602][ T6400] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[  114.534966][ T6400] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.540181][   T30] audit: type=1400 audit(1785225204.234:361): avc:  denied  { ioctl } for  pid=6404 comm="syz.0.172" path="socket:[9899]" dev="sockfs" ino=9899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  114.560687][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'.
[  114.570823][ T6406] process 'syz.4.171' launched './file0' with NULL argv: empty string added
[  114.625563][ T6405] netlink: 'syz.0.172': attribute type 10 has an invalid length.
[  114.650944][ T6400] bond1: entered allmulticast mode
[  114.686012][ T6407] bond1: (slave dummy0): making interface the new active one
[  114.708212][ T6407] dummy0: entered allmulticast mode
[  114.735231][ T6407] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  114.773209][ T6405] syz_tun: entered promiscuous mode
[  114.825024][ T6405] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  115.514760][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'.
[  115.671214][   T30] audit: type=1400 audit(1785225205.374:362): avc:  denied  { lock } for  pid=6425 comm="syz.0.177" path="socket:[9916]" dev="sockfs" ino=9916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  115.726767][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  115.902449][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  115.929568][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.955198][   T10] usb 3-1: Product: syz
[  115.968814][   T10] usb 3-1: Manufacturer: syz
[  115.982201][   T10] usb 3-1: SerialNumber: syz
[  116.041162][   T30] audit: type=1400 audit(1785225205.744:363): avc:  denied  { unlink } for  pid=6430 comm="syz.3.179" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  116.456681][   T30] audit: type=1400 audit(1785225206.114:364): avc:  denied  { bind } for  pid=6441 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.938357][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  116.972862][   T30] audit: type=1400 audit(1785225206.124:365): avc:  denied  { write } for  pid=6441 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.973922][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  118.281506][   T30] audit: type=1400 audit(1785225207.974:366): avc:  denied  { read write } for  pid=6470 comm="syz.3.187" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  118.320337][   T30] audit: type=1400 audit(1785225208.014:367): avc:  denied  { open } for  pid=6470 comm="syz.3.187" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  118.563646][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  118.678190][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  119.395559][   T30] audit: type=1400 audit(1785225208.164:368): avc:  denied  { append } for  pid=6470 comm="syz.3.187" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  119.420414][   T30] audit: type=1400 audit(1785225208.674:369): avc:  denied  { create } for  pid=6477 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.421078][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO
[  119.440122][   T30] audit: type=1400 audit(1785225209.104:370): avc:  denied  { read } for  pid=6479 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  119.579521][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  119.589851][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  119.616179][   T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  119.680986][   T10] usb 3-1: USB disconnect, device number 4
[  120.448549][   T30] audit: type=1400 audit(1785225209.904:371): avc:  denied  { name_connect } for  pid=6488 comm="syz.4.193" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  120.785433][ T6499] fuse: fd is not a fuse device
[  120.829218][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'.
[  120.871286][   T30] audit: type=1400 audit(1785225210.564:372): avc:  denied  { accept } for  pid=6496 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  121.992497][   T30] audit: type=1400 audit(1785225211.624:373): avc:  denied  { shutdown } for  pid=6508 comm="syz.0.198" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  122.221923][   T30] audit: type=1400 audit(1785225211.624:374): avc:  denied  { read } for  pid=6508 comm="syz.0.198" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  123.286405][   T30] audit: type=1400 audit(1785225212.944:375): avc:  denied  { connect } for  pid=6517 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  123.846174][ T6531] syzkaller0: entered promiscuous mode
[  123.858534][ T6531] syzkaller0: entered allmulticast mode
[  124.009779][   T30] audit: type=1400 audit(1785225213.664:376): avc:  denied  { connect } for  pid=6525 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  124.174568][   T30] audit: type=1400 audit(1785225213.664:377): avc:  denied  { write } for  pid=6525 comm="syz.0.203" laddr=fe80::40b7:cdff:feea:57fb lport=8308 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  126.752222][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.760829][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.872553][ T6572] binder_alloc: 6571: pid 6571 spamming oneway? 1 buffers allocated for a total size of 4096
[  126.915634][ T6572] binder_alloc: 6571: pid 6571 spamming oneway? 2 buffers allocated for a total size of 5120
[  126.950082][ T6575] syz.1.215 uses obsolete (PF_INET,SOCK_PACKET)
[  127.005417][ T5345] IPVS: starting estimator thread 0...
[  127.062800][   T30] audit: type=1400 audit(1785225216.764:378): avc:  denied  { mount } for  pid=6580 comm="syz.3.217" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  127.097311][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.146791][ T6577] IPVS: using max 76 ests per chain, 182400 per kthread
[  127.405326][   T30] audit: type=1400 audit(1785225216.794:379): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.428632][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  127.429287][   T30] audit: type=1400 audit(1785225216.794:380): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="usb_gadget" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.438470][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  127.490271][   T30] audit: type=1400 audit(1785225216.794:381): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.563627][   T30] audit: type=1400 audit(1785225216.794:382): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="usb_gadget" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.616654][   T24] usb 1-1: Using ep0 maxpacket: 32
[  127.617430][ T6589] syzkaller0: entered promiscuous mode
[  127.632125][   T30] audit: type=1400 audit(1785225216.794:383): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="g1" dev="configfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.646765][   T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  127.657208][ T6589] syzkaller0: entered allmulticast mode
[  127.685368][   T30] audit: type=1400 audit(1785225216.794:384): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="os_desc" dev="configfs" ino=10425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.708202][   T24] usb 1-1: config 0 has no interface number 0
[  127.710251][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  127.724141][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.749157][   T24] usb 1-1: Product: syz
[  127.753362][   T24] usb 1-1: Manufacturer: syz
[  127.765885][   T24] usb 1-1: SerialNumber: syz
[  127.773165][   T30] audit: type=1400 audit(1785225216.794:385): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.809176][   T24] usb 1-1: config 0 descriptor??
[  127.845281][   T30] audit: type=1400 audit(1785225216.794:386): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="usb_gadget" dev="configfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  127.966358][   T30] audit: type=1400 audit(1785225216.794:387): avc:  denied  { search } for  pid=6580 comm="syz.3.217" name="g1" dev="configfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  128.029428][ T6597] binder: 6596:6597 ioctl c0306201 2000000002c0 returned -14
[  128.276611][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  128.356615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  128.926608][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  129.016982][ T6604] orangefs_mount: mount request failed with -4
[  129.249924][   T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  129.260809][   T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  130.833545][   T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  131.062014][   T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  131.134108][   T24] usb 1-1: USB disconnect, device number 7
[  131.214942][ T6618] syzkaller0: entered promiscuous mode
[  131.338337][ T6618] syzkaller0: entered allmulticast mode
[  131.372602][ T6618] 0: reclassify loop, rule prio 0, protocol 800
[  132.536659][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  132.536673][   T30] audit: type=1400 audit(1785225222.234:407): avc:  denied  { create } for  pid=6628 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  132.629849][   T30] audit: type=1400 audit(1785225222.334:408): avc:  denied  { create } for  pid=6631 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  132.652130][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'.
[  132.679601][   T30] audit: type=1400 audit(1785225222.354:409): avc:  denied  { write } for  pid=6631 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  132.801191][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'.
[  132.812865][ T6632] bond2: entered promiscuous mode
[  132.828920][ T6632] bond2: entered allmulticast mode
[  133.826642][ T5345] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.339601][   T30] audit: type=1400 audit(1785225224.024:410): avc:  denied  { read } for  pid=6656 comm="syz.4.242" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  134.381799][ T6664] =======================================================
[  134.381799][ T6664] WARNING: The mand mount option has been deprecated and
[  134.381799][ T6664]          and is ignored by this kernel. Remove the mand
[  134.381799][ T6664]          option from the mount to silence this warning.
[  134.381799][ T6664] =======================================================
[  134.766712][   T30] audit: type=1400 audit(1785225224.124:411): avc:  denied  { mounton } for  pid=6656 comm="syz.4.242" path="/43/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  134.885444][ T5345] usb 4-1: Using ep0 maxpacket: 16
[  134.921998][ T5345] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  134.958409][ T5345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  135.019802][ T5345] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  135.029875][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.403620][ T5345] usb 4-1: Product: syz
[  135.409962][ T5345] usb 4-1: Manufacturer: syz
[  135.419463][ T5345] usb 4-1: SerialNumber: syz
[  135.442368][ T5345] usb 4-1: config 0 descriptor??
[  135.453123][ T5345] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  135.469806][ T5345] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  136.055032][ T5345] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  136.067168][ T5345] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  136.181554][ T6663] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  136.193976][ T6663] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  136.327355][ T6663] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  136.345951][ T6663] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  137.181544][ T5345] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  137.249056][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  137.259132][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  137.267803][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  137.279172][ T6663] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  137.287214][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  137.294115][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  137.346388][ T6663] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  137.362779][   T30] audit: type=1400 audit(1785225227.064:412): avc:  denied  { read } for  pid=6680 comm="syz.0.246" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  137.390869][   T30] audit: type=1400 audit(1785225227.064:413): avc:  denied  { open } for  pid=6680 comm="syz.0.246" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  137.502282][   T30] audit: type=1400 audit(1785225227.074:414): avc:  denied  { connect } for  pid=6683 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  137.550841][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  137.561806][ T6663] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  137.569204][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  137.575769][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  137.584034][ T6663] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  137.590641][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  138.090545][ T5345] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  138.098929][   T30] audit: type=1400 audit(1785225227.354:415): avc:  denied  { bind } for  pid=6681 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  138.101395][ T5345] usb 4-1: USB disconnect, device number 4
[  138.169147][ T6663] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  138.181819][ T6663] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  138.189808][ T6663] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  138.196781][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout
[  138.264736][ T6663] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  138.287853][ T6663] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  138.304461][ T6663] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  138.318658][ T6663] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  138.357318][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.277322][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  141.277599][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout
[  141.283490][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout
[  141.289970][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  141.295585][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.326706][   T30] audit: type=1400 audit(1785225230.584:416): avc:  denied  { map } for  pid=6701 comm="syz.3.253" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  141.546266][   T30] audit: type=1400 audit(1785225230.584:417): avc:  denied  { ioctl } for  pid=6701 comm="syz.3.253" path="socket:[11137]" dev="sockfs" ino=11137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  142.013573][   T30] audit: type=1400 audit(1785225231.714:418): avc:  denied  { mount } for  pid=6722 comm="syz.1.257" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  143.317267][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  143.317651][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout
[  143.323370][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  143.329470][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout
[  143.335457][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  143.747612][   T30] audit: type=1400 audit(1785225233.454:419): avc:  denied  { connect } for  pid=6733 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  144.253811][   T30] audit: type=1400 audit(1785225233.524:420): avc:  denied  { watch } for  pid=6740 comm="syz.0.262" path="/38" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  144.583537][   T30] audit: type=1400 audit(1785225234.284:421): avc:  denied  { mount } for  pid=6748 comm="syz.2.274" name="/" dev="autofs" ino=11202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  144.668589][   T30] audit: type=1400 audit(1785225234.374:422): avc:  denied  { bind } for  pid=6753 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  144.772074][   T30] audit: type=1400 audit(1785225234.384:423): avc:  denied  { map } for  pid=6753 comm="syz.1.266" path="socket:[11306]" dev="sockfs" ino=11306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  144.797172][   T30] audit: type=1400 audit(1785225234.384:424): avc:  denied  { read write } for  pid=6753 comm="syz.1.266" path="socket:[11306]" dev="sockfs" ino=11306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  145.396968][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout
[  145.404839][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.412350][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  146.249666][ T6766] syzkaller0: entered promiscuous mode
[  146.255252][ T6766] syzkaller0: entered allmulticast mode
[  146.290522][   T30] audit: type=1400 audit(1785225235.994:425): avc:  denied  { unmount } for  pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  149.206543][ T6810] l2tp_ppp: sess 2/0: no socket in recv
[  149.813296][ T5717] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.916063][   T30] audit: type=1400 audit(1785225240.614:426): avc:  denied  { append } for  pid=6819 comm="syz.3.286" name="comedi1" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  151.066715][ T5717] usb 5-1: Using ep0 maxpacket: 32
[  151.073161][ T5717] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  151.081346][ T5717] usb 5-1: config 0 has no interface number 0
[  151.094952][ T5717] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  151.592340][   T30] audit: type=1400 audit(1785225240.954:427): avc:  denied  { write } for  pid=6819 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  151.630610][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.639001][ T5717] usb 5-1: Product: syz
[  151.645007][ T5717] usb 5-1: Manufacturer: syz
[  151.665667][ T5717] usb 5-1: SerialNumber: syz
[  151.689131][ T5717] usb 5-1: config 0 descriptor??
[  152.203284][ T6838] hub 1-0:1.0: USB hub found
[  152.208867][ T6838] hub 1-0:1.0: 1 port detected
[  152.281947][ T5717] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  152.675566][ T5717] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  152.847907][   T30] audit: type=1400 audit(1785225242.524:428): avc:  denied  { connect } for  pid=6836 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  153.337044][   T30] audit: type=1400 audit(1785225242.604:429): avc:  denied  { write } for  pid=6836 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  153.563921][ T6849] warning: `syz.3.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  154.056147][ T5717] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  154.088427][   T30] audit: type=1400 audit(1785225243.784:430): avc:  denied  { ioctl } for  pid=6851 comm="syz.2.295" path="socket:[12395]" dev="sockfs" ino=12395 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  154.297683][ T5717] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  155.397751][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  155.424982][ T5717] usb 5-1: USB disconnect, device number 5
[  156.331278][ T6874] tipc: Started in network mode
[  156.389096][ T6874] tipc: Node identity 72234b4ec0c8, cluster identity 4711
[  156.415799][ T6874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.425015][ T6877] syzkaller0: entered promiscuous mode
[  156.468382][ T6877] syzkaller0: entered allmulticast mode
[  156.532248][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[  157.529053][ T6871] tipc: Resetting bearer <eth:syzkaller0>
[  157.720091][ T6871] tipc: Disabling bearer <eth:syzkaller0>
[  158.093097][   T30] audit: type=1400 audit(1785225247.514:431): avc:  denied  { bind } for  pid=6890 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  158.794106][   T30] audit: type=1400 audit(1785225247.514:432): avc:  denied  { node_bind } for  pid=6890 comm="syz.0.304" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  158.896090][ T5345] tipc: Node number set to 3001764686
[  159.576897][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  160.000750][   T30] audit: type=1400 audit(1785225249.704:433): avc:  denied  { ioctl } for  pid=6906 comm="syz.3.310" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.330244][   T30] audit: type=1400 audit(1785225250.034:434): avc:  denied  { write } for  pid=6906 comm="syz.3.310" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  161.617234][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'.
[  162.594849][   T30] audit: type=1400 audit(1785225252.274:435): avc:  denied  { setopt } for  pid=6923 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  163.617522][   T13] nci: nci_rx_work: unknown MT 0x7
[  165.419827][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[  166.455667][ T6929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  169.406897][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  169.427905][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  169.636890][   T24] usb 5-1: Using ep0 maxpacket: 32
[  170.486161][   T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  170.604916][   T24] usb 5-1: config 0 has no interface number 0
[  170.613796][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  170.623269][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.631863][   T24] usb 5-1: Product: syz
[  170.636135][   T24] usb 5-1: Manufacturer: syz
[  170.715634][   T24] usb 5-1: SerialNumber: syz
[  172.579626][   T24] usb 5-1: config 0 descriptor??
[  172.590772][   T24] usb 5-1: can't set config #0, error -71
[  172.597992][   T24] usb 5-1: USB disconnect, device number 6
[  172.836076][ T7009] netlink: 84 bytes leftover after parsing attributes in process `syz.1.333'.
[  173.954764][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'.
[  174.124828][ T7022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.303837][ T7027] netlink: 84 bytes leftover after parsing attributes in process `syz.1.337'.
[  174.318343][   T50] Bluetooth: hci3: unexpected event for opcode 0x041c
[  175.143399][   T30] audit: type=1400 audit(1785225264.844:436): avc:  denied  { create } for  pid=7015 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  175.147018][ T7022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.176723][ T5717] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  175.483729][ T7022] bond0 (unregistering): Released all slaves
[  175.797542][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  175.805094][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  175.813171][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  175.820443][ T5717] usb 5-1: device descriptor read/all, error -32
[  176.128096][   T30] audit: type=1400 audit(1785225265.084:437): avc:  denied  { mount } for  pid=7025 comm="syz.0.338" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  176.433391][   T30] audit: type=1400 audit(1785225266.124:438): avc:  denied  { unmount } for  pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  177.594724][ T7049] tipc: Started in network mode
[  177.627509][ T7049] tipc: Node identity d22aa6853868, cluster identity 4711
[  177.671098][ T7049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.702937][ T7054] syzkaller0: entered promiscuous mode
[  177.728314][ T7054] syzkaller0: entered allmulticast mode
[  177.800726][ T7049] tipc: Resetting bearer <eth:syzkaller0>
[  177.901863][ T7048] tipc: Resetting bearer <eth:syzkaller0>
[  177.921506][ T7048] tipc: Disabling bearer <eth:syzkaller0>
[  178.010885][ T7063] netlink: 84 bytes leftover after parsing attributes in process `syz.3.348'.
[  178.960413][   T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  178.972020][   T50] Bluetooth: hci3: Injecting HCI hardware error event
[  178.981448][ T5616] Bluetooth: hci3: hardware error 0x00
[  179.505723][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  179.520017][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'.
[  181.188752][ T7084] netlink: 84 bytes leftover after parsing attributes in process `syz.4.352'.
[  181.201097][ T5616] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  182.209690][ T7098] syzkaller0: entered promiscuous mode
[  182.259044][ T7098] syzkaller0: entered allmulticast mode
[  183.001028][   T30] audit: type=1400 audit(1785225272.554:439): avc:  denied  { setopt } for  pid=7102 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  184.370734][ T5616] Bluetooth: hci2: unexpected event for opcode 0x6b2f
[  185.033995][ T7130] netlink: 84 bytes leftover after parsing attributes in process `syz.0.366'.
[  185.611404][   T30] audit: type=1400 audit(1785225275.314:440): avc:  denied  { accept } for  pid=7135 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  185.699645][ T7139] netlink: 84 bytes leftover after parsing attributes in process `syz.3.367'.
[  188.686247][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  188.716609][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  189.280732][   T30] audit: type=1400 audit(1785225278.984:441): avc:  denied  { ioctl } for  pid=7157 comm="syz.0.374" path="socket:[12960]" dev="sockfs" ino=12960 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  191.793544][ T7178] comedi comedi3: pcl818: I/O port conflict (0x100,16)
[  191.882184][ T5703] IPVS: starting estimator thread 0...
[  192.002070][ T7182] IPVS: using max 42 ests per chain, 100800 per kthread
[  192.608749][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  192.619994][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  192.628279][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  192.636008][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  192.706649][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  192.774421][ T7190] syzkaller0: entered promiscuous mode
[  192.818288][ T7190] syzkaller0: entered allmulticast mode
[  194.694238][   T30] audit: type=1400 audit(1785225284.394:442): avc:  denied  { getopt } for  pid=7219 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  194.756839][ T5616] Bluetooth: hci5: command tx timeout
[  194.837121][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  194.961121][ T7224] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  195.085399][   T24] usb 1-1: Using ep0 maxpacket: 32
[  195.197957][   T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  195.274883][   T24] usb 1-1: config 0 has no interface number 0
[  195.350965][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  195.445031][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.532746][   T24] usb 1-1: Product: syz
[  195.581524][   T24] usb 1-1: Manufacturer: syz
[  195.632450][   T24] usb 1-1: SerialNumber: syz
[  195.707021][   T24] usb 1-1: config 0 descriptor??
[  196.021025][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.028634][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.040888][ T7191] bridge_slave_0: entered allmulticast mode
[  196.050068][ T7191] bridge_slave_0: entered promiscuous mode
[  196.060345][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.070367][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.078355][ T7191] bridge_slave_1: entered allmulticast mode
[  196.104549][ T7191] bridge_slave_1: entered promiscuous mode
[  196.134150][   T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  196.156649][   T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  196.166851][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.179709][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.212874][ T7191] team0: Port device team_slave_0 added
[  196.234042][ T7191] team0: Port device team_slave_1 added
[  197.106666][ T5616] Bluetooth: hci5: command tx timeout
[  197.240612][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.247696][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.034338][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.056348][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.074361][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.951074][ T5616] Bluetooth: hci5: command tx timeout
[  200.160496][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.316413][ T7191] hsr_slave_0: entered promiscuous mode
[  200.328715][ T7191] hsr_slave_1: entered promiscuous mode
[  200.850031][ T7191] debugfs: 'hsr0' already exists in 'hsr'
[  200.855856][ T7191] Cannot create hsr debugfs directory
[  200.948244][   T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  201.089107][ T7267] mmap: syz.4.398 (7267) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  201.243270][   T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  201.535271][   T24] usb 1-1: USB disconnect, device number 8
[  201.816832][ T7273] netlink: 84 bytes leftover after parsing attributes in process `syz.0.399'.
[  202.467351][ T5616] Bluetooth: hci5: command tx timeout
[  203.455202][   T30] audit: type=1400 audit(1785225292.674:443): avc:  denied  { read } for  pid=7278 comm="syz.3.404" name="sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  203.513326][ T7283] syzkaller0: entered promiscuous mode
[  203.521306][   T30] audit: type=1400 audit(1785225292.674:444): avc:  denied  { open } for  pid=7278 comm="syz.3.404" path="/dev/sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  203.548361][ T7283] syzkaller0: entered allmulticast mode
[  203.590152][   T30] audit: type=1400 audit(1785225292.684:445): avc:  denied  { ioctl } for  pid=7278 comm="syz.3.404" path="/dev/sg0" dev="devtmpfs" ino=745 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  204.241601][   T30] audit: type=1400 audit(1785225293.214:446): avc:  denied  { ioctl } for  pid=7282 comm="syz.4.401" path="socket:[13329]" dev="sockfs" ino=13329 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  204.393572][ T7191] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  204.535316][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  204.661578][ T7299] fuse: fd is not a fuse device
[  204.696328][ T7191] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  204.727921][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  204.752506][ T7191] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  204.795337][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  204.914266][ T7191] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  205.577744][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  206.873760][ T7309] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  206.892311][ T7292] SELinux:  Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped).
[  206.949781][ T7326] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  206.961151][   T30] audit: type=1400 audit(1785225296.664:447): avc:  denied  { relabelto } for  pid=7291 comm="syz.3.407" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0"
[  207.011246][   T30] audit: type=1400 audit(1785225296.704:448): avc:  denied  { associate } for  pid=7291 comm="syz.3.407" name="001" dev="devtmpfs" ino=737 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0"
[  207.045445][   T30] audit: type=1326 audit(1785225296.704:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.3.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38739de99 code=0x7ffc0000
[  207.072995][   T30] audit: type=1326 audit(1785225296.704:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.3.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38739de99 code=0x7ffc0000
[  207.112115][   T30] audit: type=1326 audit(1785225296.714:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.3.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38739de99 code=0x7ffc0000
[  207.267074][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.282949][ T7191] 8021q: adding VLAN 0 to HW filter on device team0
[  207.304498][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.311620][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.331648][   T30] audit: type=1326 audit(1785225296.714:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.3.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38739de99 code=0x7ffc0000
[  207.372669][ T7334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.414'.
[  207.822899][  T158] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.829996][  T158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.188147][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  211.188164][   T30] audit: type=1400 audit(1785225300.304:464): avc:  denied  { bind } for  pid=7371 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  211.314815][   T30] audit: type=1400 audit(1785225301.004:465): avc:  denied  { setcurrent } for  pid=7371 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  211.398785][   T30] audit: type=1400 audit(1785225301.014:466): avc:  denied  { read } for  pid=7378 comm="syz.0.423" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  211.516958][   T30] audit: type=1400 audit(1785225301.014:467): avc:  denied  { open } for  pid=7378 comm="syz.0.423" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  211.785929][ T7392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.426'.
[  212.695636][ T7401] hub 8-0:1.0: USB hub found
[  212.701129][ T7401] hub 8-0:1.0: 1 port detected
[  213.196819][   T30] audit: type=1400 audit(1785225302.424:468): avc:  denied  { kexec_image_load } for  pid=7398 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  215.092005][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.844324][   T30] audit: type=1400 audit(1785225305.544:469): avc:  denied  { append } for  pid=7430 comm="syz.0.434" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  215.973947][ T7432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  216.110782][ T7191] veth0_vlan: entered promiscuous mode
[  216.128596][ T7191] veth1_vlan: entered promiscuous mode
[  216.223292][ T7439] overlayfs: conflicting lowerdir path
[  216.229901][   T30] audit: type=1400 audit(1785225305.914:470): avc:  denied  { mounton } for  pid=7436 comm="syz.4.435" path="/81/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  216.563291][ T7191] veth0_macvtap: entered promiscuous mode
[  216.632340][ T7191] veth1_macvtap: entered promiscuous mode
[  216.648420][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.662524][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.682017][ T2910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.728646][ T2910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.744818][ T2910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.769780][ T2910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.855473][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.876457][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.899691][ T7454] netlink: 84 bytes leftover after parsing attributes in process `syz.3.433'.
[  217.946311][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.965515][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.983938][   T30] audit: type=1400 audit(1785225307.684:471): avc:  denied  { mounton } for  pid=7191 comm="syz-executor" path="/root/syzkaller.J29OVg/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  218.022741][   T30] audit: type=1400 audit(1785225307.724:472): avc:  denied  { mounton } for  pid=7191 comm="syz-executor" path="/root/syzkaller.J29OVg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  218.050671][   T30] audit: type=1400 audit(1785225307.724:473): avc:  denied  { mounton } for  pid=7191 comm="syz-executor" path="/root/syzkaller.J29OVg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  218.120134][   T30] audit: type=1400 audit(1785225307.794:474): avc:  denied  { mounton } for  pid=7191 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  218.372214][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.439'.
[  220.379653][ T7475] fuse: fd is not a fuse device
[  220.811982][   T30] audit: type=1400 audit(1785225310.514:475): avc:  denied  { getopt } for  pid=7479 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  222.955524][   T30] audit: type=1400 audit(1785225312.654:476): avc:  denied  { bind } for  pid=7498 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  223.006961][   T30] audit: type=1400 audit(1785225312.654:477): avc:  denied  { execute_no_trans } for  pid=7498 comm="syz.5.449" path="/1/file0" dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  223.064177][   T30] audit: type=1400 audit(1785225312.654:478): avc:  denied  { write } for  pid=7498 comm="syz.5.449" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  223.135966][   T30] audit: type=1400 audit(1785225312.654:479): avc:  denied  { open } for  pid=7498 comm="syz.5.449" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  223.281920][   T30] audit: type=1400 audit(1785225312.654:480): avc:  denied  { ioctl } for  pid=7498 comm="syz.5.449" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  223.426147][ T7509] netlink: 36 bytes leftover after parsing attributes in process `syz.5.450'.
[  226.613871][ T7535] loop7: detected capacity change from 0 to 7
[  226.782884][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  226.792525][    C0] buffer_io_error: 13 callbacks suppressed
[  226.792535][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  226.898573][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  226.908293][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  226.940892][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  226.950600][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.011240][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.020962][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.068560][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.078299][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.120970][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.130695][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.166007][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.176175][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.184073][ T7535] ldm_validate_partition_table(): Disk read failed.
[  227.210580][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.220292][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.231711][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.241364][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.252067][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  227.261707][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  227.273114][ T7535] Dev loop7: unable to read RDB block 0
[  227.290531][ T7535]  loop7: unable to read partition table
[  227.298535][ T7535] loop7: partition table beyond EOD, truncated
[  227.304878][ T7535] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  227.404442][   T30] audit: type=1400 audit(1785225316.994:481): avc:  denied  { append } for  pid=7536 comm="syz.0.458" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  227.481006][ T7540] syzkaller0: entered promiscuous mode
[  227.499640][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'.
[  227.512752][ T7540] syzkaller0: entered allmulticast mode
[  227.551059][ T7540] tipc: Started in network mode
[  227.573232][ T7540] tipc: Node identity d2f3f3dc26e3, cluster identity 4711
[  227.604926][ T7540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.637396][ T7542] tipc: Resetting bearer <eth:syzkaller0>
[  227.675252][ T7538] tipc: Resetting bearer <eth:syzkaller0>
[  227.813845][ T7538] tipc: Disabling bearer <eth:syzkaller0>
[  228.745537][ T5345] tipc: Node number set to 4094751708
[  231.541739][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.5.470'.
[  232.079836][   T30] audit: type=1400 audit(1785225321.784:482): avc:  denied  { mount } for  pid=7578 comm="syz.1.471" name="/" dev="ramfs" ino=14088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  232.140881][   T30] audit: type=1400 audit(1785225321.814:483): avc:  denied  { create } for  pid=7580 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  232.186668][   T30] audit: type=1400 audit(1785225321.824:484): avc:  denied  { listen } for  pid=7580 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  232.491416][   T30] audit: type=1400 audit(1785225321.834:485): avc:  denied  { connect } for  pid=7580 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  232.537015][ T7585] ucma_write: process 310 (syz.4.472) changed security contexts after opening file descriptor, this is not allowed.
[  232.588397][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'.
[  232.603277][   T30] audit: type=1400 audit(1785225321.874:486): avc:  denied  { read } for  pid=7580 comm="syz.4.472" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  232.700189][   T30] audit: type=1400 audit(1785225321.874:487): avc:  denied  { open } for  pid=7580 comm="syz.4.472" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  232.771990][   T30] audit: type=1400 audit(1785225322.394:488): avc:  denied  { ioctl } for  pid=7580 comm="syz.4.472" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  234.937893][   T30] audit: type=1400 audit(1785225324.374:489): avc:  denied  { lock } for  pid=7600 comm="syz.3.477" path="socket:[14114]" dev="sockfs" ino=14114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  234.979734][   T30] audit: type=1400 audit(1785225324.374:490): avc:  denied  { write } for  pid=7600 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  235.127993][ T7611] vlan2: entered promiscuous mode
[  235.128025][ T7611] hsr0: entered promiscuous mode
[  235.128395][ T7611] vlan2: entered allmulticast mode
[  235.128406][ T7611] hsr0: entered allmulticast mode
[  235.128414][ T7611] hsr_slave_0: entered allmulticast mode
[  235.128423][ T7611] hsr_slave_1: entered allmulticast mode
[  235.179657][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'.
[  235.180394][ T7611] hsr_slave_0: left promiscuous mode
[  235.636405][ T7611] hsr_slave_1: left promiscuous mode
[  236.581605][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.587887][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.595740][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.603446][ T7627] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  236.618776][ T7627] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  236.637784][ T7627] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  236.651080][ T7627] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  236.665366][ T7627] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  236.693204][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.701061][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.708352][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.716943][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.724288][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.733391][ T7627] wlan0 speed is unknown, defaulting to 1000
[  236.817705][   T30] audit: type=1400 audit(1785225326.514:491): avc:  denied  { shutdown } for  pid=7626 comm="syz.5.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  237.173634][ T7638] syz.1.485 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  237.195930][ T7638] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  237.589232][ T5703] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  237.730418][ T7637] kvm: kvm [7636]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50
[  237.749541][ T5703] usb 4-1: Using ep0 maxpacket: 16
[  237.929071][   T30] audit: type=1400 audit(1785225327.634:492): avc:  denied  { write } for  pid=7641 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  238.722628][ T5703] usb 4-1: config 3 has an invalid interface number: 88 but max is 0
[  238.732172][ T5703] usb 4-1: config 3 has no interface number 0
[  238.763270][ T5703] usb 4-1: config 3 interface 88 has no altsetting 0
[  238.870192][   T50] Bluetooth: hci5: command 0x0405 tx timeout
[  239.134833][ T5703] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8
[  239.146252][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.160942][ T5703] usb 4-1: Product: syz
[  239.171967][ T5703] usb 4-1: Manufacturer: syz
[  239.181088][ T5703] usb 4-1: SerialNumber: syz
[  239.392522][ T5616] Bluetooth: hci2: unexpected event for opcode 0x1001
[  239.426757][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.484'.
[  239.476749][ T7632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.484'.
[  239.518798][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.484'.
[  239.571991][ T7657] 9p: Bad value for 'rfdno'
[  239.577062][   T30] audit: type=1400 audit(1785225329.274:493): avc:  denied  { mounton } for  pid=7631 comm="syz.3.484" path="/92/file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  240.634432][ T5703] kl5kusb105 4-1:3.88: KL5KUSB105D / PalmConnect converter detected
[  240.654529][ T5703] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  240.690104][ T5703] usb 4-1: USB disconnect, device number 5
[  240.745136][ T5703] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  240.767839][ T5703] kl5kusb105 4-1:3.88: device disconnected
[  242.017535][   T30] audit: type=1400 audit(1785225331.714:494): avc:  denied  { bind } for  pid=7673 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  242.548918][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.557054][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.563830][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.570627][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.577402][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.584202][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.590993][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.597771][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.604544][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.611323][ T7679] tc action pedit offset must be on 32 bit boundaries
[  242.618122][ T7679] 0: reclassify loop, rule prio 0, protocol 800
[  244.865756][ T7710] syzkaller0: entered promiscuous mode
[  244.881349][ T7710] syzkaller0: entered allmulticast mode
[  245.341131][   T30] audit: type=1400 audit(1785225334.794:495): avc:  denied  { create } for  pid=7708 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  245.381903][   T30] audit: type=1400 audit(1785225334.794:496): avc:  denied  { connect } for  pid=7708 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  245.457188][   T30] audit: type=1400 audit(1785225334.794:497): avc:  denied  { write } for  pid=7708 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  245.516831][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  245.557511][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  245.656731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[  246.666025][   T30] audit: type=1400 audit(1785225335.934:498): avc:  denied  { map } for  pid=7715 comm="syz.5.509" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  246.821686][   T30] audit: type=1400 audit(1785225336.524:499): avc:  denied  { module_request } for  pid=7719 comm="syz.1.508" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  247.770729][   T30] audit: type=1400 audit(1785225337.064:500): avc:  denied  { append } for  pid=7724 comm="syz.0.512" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  247.855009][   T30] audit: type=1400 audit(1785225337.074:501): avc:  denied  { map } for  pid=7724 comm="syz.0.512" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  247.881647][   T30] audit: type=1400 audit(1785225337.074:502): avc:  denied  { write } for  pid=7724 comm="syz.0.512" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  248.183100][   T30] audit: type=1400 audit(1785225337.774:503): avc:  denied  { write } for  pid=7725 comm="syz.4.513" name="sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  248.669142][ T7747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  248.773332][ T7746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.517'.
[  249.679990][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  250.593361][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  250.604507][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  250.680189][ T7760] netlink: 'syz.4.521': attribute type 12 has an invalid length.
[  250.771551][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'.
[  253.966747][   T30] audit: type=1400 audit(1785225343.214:504): avc:  denied  { write } for  pid=7791 comm="syz.0.526" name="core" dev="configfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  254.113474][   T30] audit: type=1400 audit(1785225343.254:505): avc:  denied  { write } for  pid=7791 comm="syz.0.526" name="rd_mcp_0" dev="configfs" ino=16516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  254.467134][ T5345] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  255.833578][ T5345] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  255.873409][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.889530][ T5345] usb 6-1: Product: syz
[  255.903778][ T5345] usb 6-1: Manufacturer: syz
[  255.925788][ T5345] usb 6-1: SerialNumber: syz
[  255.954670][ T5345] usb 6-1: config 0 descriptor??
[  255.977554][ T5345] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 002
[  256.836837][   T30] audit: type=1400 audit(1785225345.974:506): avc:  denied  { create } for  pid=7809 comm="syz.4.523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  257.276397][ T7817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  257.734905][   T30] audit: type=1400 audit(1785225345.974:507): avc:  denied  { read write } for  pid=7809 comm="syz.4.523" name="file0" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  257.842056][   T30] audit: type=1400 audit(1785225345.984:508): avc:  denied  { open } for  pid=7809 comm="syz.4.523" path="/97/file0" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  257.963328][   T30] audit: type=1400 audit(1785225345.984:509): avc:  denied  { ioctl } for  pid=7809 comm="syz.4.523" path="/97/file0" dev="tmpfs" ino=530 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  258.122503][ T5345]  (null): error -EIO: failure setting delay to 10us
[  258.135896][ T5345] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  258.863083][   T30] audit: type=1400 audit(1785225348.144:510): avc:  denied  { create } for  pid=7824 comm="syz.3.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  259.051381][   T24] usb 6-1: USB disconnect, device number 2
[  259.397732][ T7839] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.838939][   T30] audit: type=1400 audit(1785225350.824:511): avc:  denied  { getopt } for  pid=7853 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  261.912608][   T30] audit: type=1400 audit(1785225350.824:512): avc:  denied  { read } for  pid=7853 comm="syz.0.529" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  261.956736][   T30] audit: type=1400 audit(1785225350.824:513): avc:  denied  { open } for  pid=7853 comm="syz.0.529" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  261.996769][ T7863] overlayfs: failed to clone lowerpath
[  262.011232][   T30] audit: type=1400 audit(1785225350.834:514): avc:  denied  { ioctl } for  pid=7853 comm="syz.0.529" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  262.050945][ T7864] overlayfs: failed to clone lowerpath
[  266.613270][   T30] audit: type=1400 audit(1785225356.314:515): avc:  denied  { getopt } for  pid=7900 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  269.757124][   T30] audit: type=1400 audit(1785225359.454:516): avc:  denied  { wake_alarm } for  pid=7929 comm="syz.1.561" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  270.351480][ T7930] usb usb7: usbfs: process 7930 (syz.4.558) did not claim interface 0 before use
[  272.257158][   T30] audit: type=1400 audit(1785225361.804:517): avc:  denied  { accept } for  pid=7940 comm="syz.3.554" lport=56094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  274.206662][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  274.406642][   T24] usb 6-1: Using ep0 maxpacket: 8
[  275.654522][   T30] audit: type=1400 audit(1785225365.354:518): avc:  denied  { bind } for  pid=7983 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  276.035590][   T30] audit: type=1400 audit(1785225365.734:519): avc:  denied  { setopt } for  pid=7986 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  276.409511][   T30] audit: type=1400 audit(1785225365.764:520): avc:  denied  { ioctl } for  pid=7986 comm="syz.1.576" path="socket:[16877]" dev="sockfs" ino=16877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  276.471131][ T7995] batadv_slave_1: entered promiscuous mode
[  276.481553][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.489362][   T30] audit: type=1400 audit(1785225366.084:521): avc:  denied  { bind } for  pid=7986 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  276.516235][   T30] audit: type=1400 audit(1785225366.174:522): avc:  denied  { connect } for  pid=7993 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  276.612068][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.118679][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  277.132147][   T24] usb 6-1: no configurations
[  277.175318][   T24] usb 6-1: can't read configurations, error -22
[  277.236345][ T7993] batadv_slave_1: left promiscuous mode
[  278.840225][   T30] audit: type=1400 audit(1785225368.534:523): avc:  denied  { write } for  pid=8010 comm="syz.3.584" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  280.057720][   T30] audit: type=1800 audit(1785225368.604:524): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.579" name="bus" dev="ramfs" ino=15957 res=0 errno=0
[  280.424856][   T30] audit: type=1400 audit(1785225370.124:525): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="functions" dev="configfs" ino=10422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.049944][   T30] audit: type=1400 audit(1785225370.754:526): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="header" dev="configfs" ino=16929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.116628][   T30] audit: type=1400 audit(1785225370.784:527): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="ss" dev="configfs" ino=16926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.217870][   T30] audit: type=1400 audit(1785225370.784:528): avc:  denied  { create } for  pid=8028 comm="syz.3.588" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  281.278233][   T30] audit: type=1400 audit(1785225370.864:529): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="hs" dev="configfs" ino=16937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.360474][   T30] audit: type=1400 audit(1785225370.864:530): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="hs" dev="configfs" ino=16937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.428900][   T30] audit: type=1400 audit(1785225370.914:531): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="ss" dev="configfs" ino=16938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.452689][   T30] audit: type=1400 audit(1785225370.914:532): avc:  denied  { write } for  pid=8028 comm="syz.3.588" name="ss" dev="configfs" ino=16938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  281.638159][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  281.797565][    T9] usb 4-1: Using ep0 maxpacket: 32
[  281.806427][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  281.817017][    T9] usb 4-1: config 0 has no interface number 0
[  281.826234][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  281.842707][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.851810][    T9] usb 4-1: Product: syz
[  281.856203][    T9] usb 4-1: Manufacturer: syz
[  281.864329][    T9] usb 4-1: SerialNumber: syz
[  281.970718][    T9] usb 4-1: config 0 descriptor??
[  282.423167][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  282.471100][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  282.693463][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  282.766851][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  284.249886][ T8088] netlink: 'syz.5.600': attribute type 12 has an invalid length.
[  284.787934][   T10] usb 4-1: USB disconnect, device number 6
[  287.088984][   T30] audit: type=1400 audit(1785225376.784:533): avc:  denied  { read } for  pid=8100 comm="syz.4.604" name="g1" dev="configfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.245094][   T30] audit: type=1400 audit(1785225376.784:534): avc:  denied  { read open } for  pid=8100 comm="syz.4.604" path="/109/my_configfs/usb_gadget/g1" dev="configfs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.278466][   T30] audit: type=1400 audit(1785225376.784:535): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="header" dev="configfs" ino=16144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.810475][   T30] audit: type=1400 audit(1785225376.784:536): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="uncompressed" dev="configfs" ino=16930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.837019][   T30] audit: type=1400 audit(1785225376.784:537): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="fs" dev="configfs" ino=16925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.861324][   T30] audit: type=1400 audit(1785225376.784:538): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="fs" dev="configfs" ino=16925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.920059][   T30] audit: type=1400 audit(1785225376.794:539): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="fs" dev="configfs" ino=16936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  287.972525][   T30] audit: type=1400 audit(1785225376.794:540): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="fs" dev="configfs" ino=16936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.048898][   T30] audit: type=1400 audit(1785225376.794:541): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="c.1" dev="configfs" ino=9582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.085716][   T30] audit: type=1400 audit(1785225376.794:542): avc:  denied  { write } for  pid=8100 comm="syz.4.604" name="c.1" dev="configfs" ino=9582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.247712][ T8101] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  288.265157][ T8101] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ec: 0000 [#1] SMP KASAN NOPTI
[  288.277255][ T8101] KASAN: null-ptr-deref in range [0x0000000000000760-0x0000000000000767]
[  288.285673][ T8101] CPU: 1 UID: 0 PID: 8101 Comm: syz.4.604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.296437][ T8101] Tainted: [L]=SOFTLOCKUP
[  288.300785][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  288.310839][ T8101] RIP: 0010:uvcg_video_init.cold+0x5f/0x135
[  288.316747][ T8101] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 6a bd 25 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00
[  288.336376][ T8101] RSP: 0000:ffffc9000d2d7878 EFLAGS: 00010202
[  288.342433][ T8101] RAX: dffffc0000000000 RBX: ffff888055368840 RCX: ffffc900065b2000
[  288.350384][ T8101] RDX: 00000000000000ec RSI: ffffffff81552b56 RDI: 0000000000000760
[  288.358336][ T8101] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000
[  288.366290][ T8101] R10: fffffffffffffffc R11: ffffffff8bba81c5 R12: ffff8880553688a0
[  288.374240][ T8101] R13: 0000000000000003 R14: ffff8880553686a0 R15: ffff88804c7c6528
[  288.382188][ T8101] FS:  00007f59706d16c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000
[  288.391110][ T8101] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.397677][ T8101] CR2: 000000110c379612 CR3: 0000000022a85000 CR4: 00000000003526f0
[  288.405632][ T8101] Call Trace:
[  288.408889][ T8101]  <TASK>
[  288.411804][ T8101]  uvc_function_bind+0x136e/0x1939
[  288.416907][ T8101]  ? __pfx_uvc_function_bind+0x10/0x10
[  288.422347][ T8101]  usb_add_function+0x219/0x890
[  288.427181][ T8101]  ? composite_dev_prepare+0x251/0x420
[  288.432623][ T8101]  configfs_composite_bind+0xd83/0x1960
[  288.438154][ T8101]  ? kernfs_create_link+0x1bd/0x240
[  288.443343][ T8101]  gadget_bind_driver+0x28c/0xbf0
[  288.448357][ T8101]  ? __pfx_gadget_bind_driver+0x10/0x10
[  288.453889][ T8101]  really_probe+0x241/0xa60
[  288.458375][ T8101]  __driver_probe_device+0x20e/0x450
[  288.463641][ T8101]  driver_probe_device+0x4a/0x140
[  288.468648][ T8101]  __driver_attach+0x21f/0x5b0
[  288.473393][ T8101]  ? __pfx___driver_attach+0x10/0x10
[  288.478659][ T8101]  bus_for_each_dev+0x13e/0x1d0
[  288.483487][ T8101]  ? __pfx_bus_for_each_dev+0x10/0x10
[  288.488847][ T8101]  ? bus_add_driver+0x2b5/0x5b0
[  288.493679][ T8101]  bus_add_driver+0x305/0x5b0
[  288.498336][ T8101]  driver_register+0x1e2/0x360
[  288.503085][ T8101]  usb_gadget_register_driver_owner+0x132/0x210
[  288.509314][ T8101]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  288.514931][ T8101]  configfs_write_iter+0x302/0x4e0
[  288.520025][ T8101]  vfs_write+0x6ac/0x1050
[  288.524343][ T8101]  ? __pfx_configfs_write_iter+0x10/0x10
[  288.529957][ T8101]  ? __pfx_vfs_write+0x10/0x10
[  288.534715][ T8101]  ksys_write+0x12a/0x250
[  288.539029][ T8101]  ? __pfx_ksys_write+0x10/0x10
[  288.543867][ T8101]  do_syscall_64+0x115/0x870
[  288.548439][ T8101]  ? clear_bhb_loop+0x40/0x90
[  288.553096][ T8101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.558968][ T8101] RIP: 0033:0x7f596f79de99
[  288.563364][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.582952][ T8101] RSP: 002b:00007f59706d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  288.591348][ T8101] RAX: ffffffffffffffda RBX: 00007f596fa25fa0 RCX: 00007f596f79de99
[  288.599298][ T8101] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004
[  288.607249][ T8101] RBP: 00007f596f833eaf R08: 0000000000000000 R09: 0000000000000000
[  288.615199][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.623147][ T8101] R13: 00007f596fa26038 R14: 00007f596fa25fa0 R15: 00007ffed2857f28
[  288.631102][ T8101]  </TASK>
[  288.634098][ T8101] Modules linked in:
[  288.638249][ T8101] ---[ end trace 0000000000000000 ]---
[  288.676652][ T8101] RIP: 0010:uvcg_video_init.cold+0x5f/0x135
[  288.682656][ T8101] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 6a bd 25 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00
[  289.212905][ T8101] RSP: 0000:ffffc9000d2d7878 EFLAGS: 00010202
[  289.219396][ T8101] RAX: dffffc0000000000 RBX: ffff888055368840 RCX: ffffc900065b2000
[  289.227633][ T8101] RDX: 00000000000000ec RSI: ffffffff81552b56 RDI: 0000000000000760
[  289.235670][ T8101] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000
[  289.243947][ T8101] R10: fffffffffffffffc R11: ffffffff8bba81c5 R12: ffff8880553688a0
[  289.252222][ T8101] R13: 0000000000000003 R14: ffff8880553686a0 R15: ffff88804c7c6528
[  290.284331][ T8101] FS:  00007f59706d16c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000
[  290.316579][ T8101] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.337792][ T8101] CR2: 000055558731aa48 CR3: 0000000022a85000 CR4: 00000000003526f0
[  290.349365][ T8101] Kernel panic - not syncing: Fatal exception
[  290.355638][ T8101] Kernel Offset: disabled
[  290.359945][ T8101] Rebooting in 86400 seconds..