last executing test programs:

15.893359085s ago: executing program 4 (id=2023):
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0xffffffff, 0x4)

14.03020012s ago: executing program 4 (id=2027):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x60, r5, 0x1, 0x26, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0xfffffffffffffff5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2402180000ff0000080000000008000100ac14140006aa15afca29c8b8e91c2f8c39424c98d09bbdc88158118bef8d"], 0x24}}, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000480))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xf7e) (async)
read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) (async)
write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x60, r5, 0x1, 0x26, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0xfffffffffffffff5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2402180000ff0000080000000008000100ac14140006aa15afca29c8b8e91c2f8c39424c98d09bbdc88158118bef8d"], 0x24}}, 0x0) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000480)) (async)

12.288630603s ago: executing program 2 (id=2034):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20c)
close(r0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0xbc041)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='f2fs_lookup_start\x00', r0, 0x0, 0x9}, 0x18)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = dup(r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r3], 0x14}}, 0xc000)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRES16=r7, @ANYBLOB="70d56065e955d449df250fe4ffff170007800c000300030002021e000000080002004800001d4788fe863a60fd75e987da307fb9517ba9e69ecdc91d5a17be248417a8db0be234b07d7e6870a0f9b940c0a6127b75b12ab1505333958d0947a297bbd60b1fa7bc053ede57a48107f22b34ae0c395e2badb16de0729f7f3146863238e20492f7c35d1d06a39d049fb5f73dabfc9dee2b19507f114c31ea3e8b0fa87989fce37f6bee69580e89f2cd957a85b7215452f656ecad8fd15f8b0eb208cf20"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x80)
sendmsg$netlink(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRESDEC=r9, @ANYRES32=r2, @ANYRES16=r8, @ANYBLOB="9fda6e3d05b7628a65d8051b937169e4b6d12fe543e96628640ecfd7a76fddec077cc03f355a5b70ea779111e45d", @ANYRESOCT=r9, @ANYRESDEC=r6, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x8050)
prlimit64(0x0, 0x5, &(0x7f0000000000)={0x6, 0x10088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0xfffffffffffffffe)
fstatfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl(r11, 0x8b1a, &(0x7f0000000040))
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000580)="ad4090592b3972eef9b6a3d77cf9e9fb33b70c209b5ff3acb34fbdab9fe47bcd922c0aceb0ef2c8079ada91c94e1e1e5d2d0d5a523a01fbbc961621366b92937a9c5fdd7b7b9974072fd23e2a59b050c703b2bf52a92eea7faf6c41b731bbd169e213b71e111c47ce32dd048c9b754dbae33db9b038a40d6b9fe9dce28554fc1ea0deca3d5c70e143c44af0f7f764a73b6844dd7e3dd0120008235d52cfda33abe27132895c736017b95774014d70eeaf5e2cf066f29e9f24150cdd8a0ecfa3b457bdf662ebf38c1a782c145e90b253d161ea8dffa6a1117116e0f1d2a6521adb303362af25894f4cabecdc6269150d2e8", 0xf1)

11.052972761s ago: executing program 2 (id=2040):
syz_usb_connect(0x3, 0x1b, &(0x7f0000000300)=ANY=[@ANYBLOB="12050002ad81eb08f30c09838e81010203010902090000df022033"], 0x0)

9.523676114s ago: executing program 4 (id=2044):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000015000100fdffffff00000000021f0000", @ANYRES32, @ANYBLOB="14000300766574683000000000f75e465a3cba75"], 0x2c}}, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x201000c, &(0x7f0000000480)='\xba\x94\x82\xe7e\x926\xe6\xab\xe63$\xd4Y-\x1b\xdc\xcah\xf6e\xa3 \x01\x94\x83$\x89,\xed\xba\x01\x80\xec\xe85\x95-\xe4r0$:\xfe\xd5\xc1\xd8\r\xa3\x90\xceml\x9a\xf4\xae\x17q\x81\xb8\xf8kE\xef\xaf\x97J\x9a\x11\x1e\x96c|&j\x93,\xbd\x00-R\xb8\x11\xde\x9b$\x84\xf7\xad/\xb0\x15\\\xfa\x8b\xf5\xb6\xb7\x9f\xa0\xac\xe2\xa5\x9e2E\xcc;\xa9\x12\v\xc0\xa9\xcf\xb3!\xb2\x85\xd22\xbd\xfa\xc8\xc6e\xf1\xda\xa7\xda[{\xa6\x83\xd2O\xc8\xc2G/\xd1\xed3\x87\xf3p\x8bt\x9a\x8dd#\xce\xbb=\xb0X\xd4\xa4\xec\xf6H|g8\xbc\x06j2\xb2')
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000000)='./file0/file1\x00', r3, &(0x7f0000000080)='./file0\x00')
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000000c0)=0x5)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r7, 0x2000009)
sendfile(r6, r7, 0x0, 0x100007ffff000)
socket$nl_generic(0x10, 0x3, 0x10)

7.692502964s ago: executing program 2 (id=2052):
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x0) (rerun: 32)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x43, 0x0, &(0x7f0000001680)) (async)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x6, 0x7, 0x2, 0x14}) (async)
recvfrom$unix(r1, &(0x7f0000000600)=""/4096, 0x1000, 0x3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
syz_usb_connect(0x1, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d1edc81000905f7ffffff00000009"], 0x0)

6.99111566s ago: executing program 2 (id=2054):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2980, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000340)={0x7, &(0x7f0000000200)=[{0x53, 0x2, 0x6, 0x4}, {0x7, 0xa6, 0x7f, 0xae9d}, {0x10, 0x80, 0x4, 0x2}, {0xffff, 0x8, 0x9, 0xeb4}, {0x0, 0x7, 0x2, 0x80000000}, {0x7e5, 0x2, 0x2, 0x3}, {0x2, 0x1, 0x2, 0x4}]})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0xa, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040))
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x9, r4, 0x1, 0xfffffffd, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)

6.379472307s ago: executing program 4 (id=2056):
personality(0x410000e)
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}}, 0x4044080)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15842313260608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}, 0x20000091)
syz_usb_disconnect(r0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)

5.749523564s ago: executing program 2 (id=2058):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x80, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x0, 0x10, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x4}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x0, 0xd000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8080000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd2(0x2, 0x801)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r3, 0xb})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r6 = fanotify_init(0x81, 0x40000)
syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x19, 0x0})
fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000002300)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r7 = fsmount(0xffffffffffffffff, 0x1, 0x6)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x1)

5.742634075s ago: executing program 1 (id=2059):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="66b80a0000000f23d00f21f86635100000020f23f866b8010000000f01c1ba420066edbad004ecf2f0f65001ba430066ed0f229e0f01c366b9710b00000f3266b8010000000f01c1", 0x48}], 0x1, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000080)="0f32360fae0b66b9630001c066b87900000066ba000000000f30f1f30f8300680f01ca673e0f01c50f01c28ee00f78a90a0066b8a4d3000066ba000000000f30", 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

5.686985985s ago: executing program 1 (id=2061):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3328e0ad802f7d03df250100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)

5.628903271s ago: executing program 1 (id=2063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0xc4800, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x4d, 0x0, 0x0, {{0xb}, {0x4}, {0x1a, 0x6, "50043a564c5c443e75b53d2d068bc9babbb12d6d2591"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}}, 0x8000)

5.480676148s ago: executing program 1 (id=2064):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000140)="234b825fea4c4656c779250787d88c787ede3aec0ceb001d6499825267c35e759a139f9037a9cd3f83b92a80fe9093ddd67ca93f900cca89e4356ec16c50f390eb59f741e024", 0x46}, {&(0x7f0000000200)="ef86c969ca75da8a87711a7c8d7cdd74de6bcd869d2449df85", 0x19}, {&(0x7f00000004c0)="71121a451ca8488f34c835d82c67dabd5114c85cd0ab863380b196ecf1b7024ac342eed9c63ef8e000a70b6c37877d59d9c142ffb3c1431444532c23ba6fefd30208a0e3f710cf75a2d06f6139cfc67d10803b73137242a22b328da68042477a515dd6256c13e375d6f6a895fbbcd4d2b47e0d02271993b01a5957f96eaf3ae2951c7a7459aed6ba9f93c0d6802d35", 0x8f}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000580)="2289dd7b7c20b1a1702913ca100dfba7720c0acbab30c09d7342c171e1d4a3e88137ea472972fad4d3002def65d640396e30b57aa8e636af0ff8ea0c0611af95b4a88ab35c397bd15b3105c14bfc06827bdf82f1a79512bf30ac8422d8a76e638d4e5216c08146f87e8f534467667e652493c578cddac6b1658b4fd6191fe0ab8c06ee3b133e70b712ed1d9da05893422514f52d", 0x94}, {&(0x7f0000000640)="6c0e0296d58b980089e199112fedb56021583699ed5125912264119658e93332f6f63168d76af4ef7c2908cf7a438eb78f9f889ab3f9e8c1193ba09f77af8cd5883c49486486ed662ebeffe01e9f5a2b39403836e50f1151f8e070b5c9a07fc0560be75650588f77dc8f9ce7888ad6f1f95e53052c83584ab3777b3457b578c23c6060dd", 0x84}, {&(0x7f0000000700)="4100486603880352d17646f64b558ab3a274ed3242e5c5ba6b07936f7eaadeadf213f3822c63abd7ba24fea6cb5dfa20f7e02154f497cdcfaddd7912f37c41764eead4ffff547a38fb07d891d180ac7301b2758f5737927f031ff172706910ef92c29f2068b618920a15d6653744ee7a2337f59cc026226bcf82d92527a6637a5bf1d96b0c366822d2eaee9c51235a916b21e0331fd4c76a626e7bc42c1bacc2f7be098adcddcb1e10c952bd703779114ae8c908defe94a92b02086ffec3da0fbcc5e351", 0xc4}, {&(0x7f0000000300)="91389e07cc61363a1c08f442698b116b35113243bd60a7b2226d8310a8c96802b8d2cffede3965f4efdbbe7aec5de2df9ed0de0594906e698fa1346d83fca2bbcd7cd6d72517", 0x46}, {&(0x7f0000000240)="e782dfd4053dd4e4faef9d876cf1683e97e0580a1595c1dcdd93633c00107697b5de38a9266a987eb5301c9743de4288b41969fed070b77f701d078cdc03893d", 0x40}, {&(0x7f0000001880)="dfcaaa843ad56f4a9a03b255505b82e960d780aa8c53d6201f61d640502901f2559b119c4f42190dc1723d569e10d8e0804f1c609e3d2ab3dfe772a369fdd7d15c5db4cc7be2039673be2acac8f5f96f324ae0560d62e1fdce0893812b271c52cf02aab891cf7554a193895659bcd6eeb844f13d05613eef260c9f1b6e51e2d9d97e235bcafd47a19da2edcf3ba6ea8e539978c7cb576a68ddabb2cc4444d194a701b39b34afc80067b5a45ae36c04c64a66a171962e6f66a04789562ba8ddd50dfbac2e9155b81f1f899e67206fa681bff2a498001e3a28d36d7c03b93778500dd4b6148233e87ab98d58a0ee73447a2031b1418977", 0xf6}], 0xa, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000373cb2f7454ea3d28658ccfed71d53cac1077918a9f72346af40d738119cc5aa8951c49d8790d903b861f51267e72ffc45cf9c5c2a83431aaae56507b24ab1a17b3412c237cd55971b48bbf94e63ca60471468b330", @ANYRES32=0x0, @ANYBLOB="e0000002e000000200000000740000000000000000000000070000008612ffffffff050ca6da8ce682047a91b27201940401008614000000030505f2c1fc020960e32939d22f94070be264010101ac1e0101832b9dac141436ac1414bbac141417ac1414bbe0000002e0000001ac1e0101e0000001e00000027f000001000000000000001c0000000000000000000000070000009404000000860450110000000000000014000000000000000000000002000000ff03000000000000110000000000000000000000010000003100000000000000"], 0xe8}, 0x8000)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r3 = syz_io_uring_setup(0x493, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000400))
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="11032bbd7000fbdbdf2500020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

4.973135165s ago: executing program 0 (id=2066):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RTC_ALM_SET(r7, 0x40247007, 0x0)
accept$alg(r6, 0x0, 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000034d000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
read$FUSE(r10, &(0x7f0000000280)={0x2020}, 0x2020)

4.971764302s ago: executing program 4 (id=2067):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x153}, 0x18)
fchmodat(r5, &(0x7f0000000100)='./file0\x00', 0x3c)

4.200178841s ago: executing program 3 (id=2070):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5e}, &(0x7f0000000040)=0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6c7673696d30000000000c0016800800018004000c800000000000000000000000000000000033247fd21e43a561a90191b46bf830d696f15bef3e17cdb763d12c46d6515393a16da9a5d9a426a07a4c7f6874c6c9dd022f381c3035a04ccae3"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40)

4.1593979s ago: executing program 1 (id=2071):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x5fb4, 0x10100}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) (async)
io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a)
close_range(r3, r4, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="c410000000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) (async)
getrlimit(0x9, &(0x7f0000000000)) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
syz_open_dev$vbi(0x0, 0x0, 0x2) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0) (async)
capset(0x0, 0x0)
io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000380), 0x0, 0xf8, 0x0, 0x1}, &(0x7f0000000400))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000bd1000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f8460f01c80f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x54}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
mkdir(&(0x7f0000000040)='./bus\x00', 0x49)

3.928872139s ago: executing program 1 (id=2072):
creat(&(0x7f0000001c40)='./file0\x00', 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000ba04000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x9, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x2, 0x3, 0xffffffffffffffff, 0xf4243, 0xfffffffffffffff9, 0x6, 0x5, 0x1000000081, 0x5, 0x0, 0x5, 0x8, 0x9220000000000000, 0x3, 0x0, 0x7fffffff, 0x9, 0x8, 0x18f8})
socket$nl_route(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80282, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x3a)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000280)={0x0, 0x400000b4, 0x0, 0x0})
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0x1, 0x4, 0x0, 0x71e, 0x4a}, 0x0, &(0x7f0000000000)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8, 0xfffffffffffffffe}, 0x0, 0x0)

3.925268697s ago: executing program 3 (id=2073):
syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mkdir(0x0, 0xc0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
chdir(0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r1, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400))
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffee5)
r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[<r8=>0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, r8, r7})

3.622877404s ago: executing program 0 (id=2074):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xa000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.304775653s ago: executing program 4 (id=2075):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff00000000, 0x5})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000340)={0x1, 0x1, "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"})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000680)={0x2, 0x7, 0x233, 0x100000, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}]}) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x6}, 0x20)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000280)=[0x0, 0x0], 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x50) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0xfffffffd}}, 0x10) (async)
r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
ioctl$int_in(r7, 0x5452, &(0x7f0000001840)=0x5d4) (async)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=<r8=>0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000200)={0x4aeacd9b})
write$P9_RLOPEN(r7, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x0, 0x3, 0x7}, 0xc}}, 0x18) (async)
bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x3}}, 0x10) (async)
socket$unix(0x1, 0x1, 0x0)
pipe2$watch_queue(&(0x7f0000000240), 0x80) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0), 0x4)

2.2996549s ago: executing program 0 (id=2076):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$netrom(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x6a918f8f45b69a96, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0/file0'}, 0x11)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x14)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r4=>0xffffffffffffffff})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6, <r7=>0xffffffffffffffff})
ppoll(&(0x7f0000000000)=[{r7}], 0x1, 0x0, 0x0, 0x0)
close_range(r2, r7, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

2.117985648s ago: executing program 3 (id=2077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'pim6reg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TCFLSH(r3, 0x540b, 0x2)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)

1.58837921s ago: executing program 3 (id=2078):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file1/../file0', [{}], 0xa, "b5"}, 0x16)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket(0x80000000000000a, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, <r7=>0x0], &(0x7f0000000200), 0x3, r6})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r8, 0xffffffffffffffff, 0x7}, 0x10)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[r7], &(0x7f0000000040)})

1.587863119s ago: executing program 0 (id=2079):
fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001380)={0x0, ""/256, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{r2}, r4, 0x10, @inherit={0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000060000000000000007000000000000000ddf6837f9892e832e0081fd000000000000002000000000000000ed00000000000000040000000000000003000000000000000f00000000000000060000000000000006000000000000000000000000000000da6900005f9c00000000000000"]}, @name="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"})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
close_range(r2, 0xffffffffffffffff, 0x0)

1.274702497s ago: executing program 2 (id=2080):
lsetxattr$security_evm(&(0x7f0000004d40)='.\x00', &(0x7f0000004d80), &(0x7f0000004dc0)=@ng={0x4, 0xb}, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
brk(0x689d80000000)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x6a, 0x2f, 0xf6}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x2, 0xf0, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x80, 0xe8, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xbc}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0x3, 0x1000, 0x1, 0x80}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x5, "965997"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0xff, "8438"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x6, 0x10, 0x4, 0x4, 0x2}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0xff, 0x81, "0fdfbcbc4e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x370, 0xa, "61df62d4"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xcf, 0x9, "35c97e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6a, 0x56, {0x7, 0x25, 0x1, 0x82, 0x5, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8c, 0x4f, 0x9a, "817ea86c60d6cdd2c3"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x4, 0x1, 0x8, "93b168", "a8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x1, "d33f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe6, 0x2, 0xff, 0x31, "", 'l'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa5, 0xa4, 0x5, {0x7, 0x25, 0x1, 0x3, 0x56, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x25, 0x40, 0x20, 0x5}, 0xc9, &(0x7f0000000140)={0x5, 0xf, 0xc9, 0x5, [@ptm_cap={0x3}, @generic={0xad, 0x10, 0xa, "6e3bd0973e9f7142f233bf94e75a6e98063c32a39386439e9295198f4a1e080755624836e3cf3ec2a52d4cb61ac49fbf95a4a80fda0901b55dc5cca5a8dbadfda000882d8bad51ec3f887188e4d2d147a41316d1424b1e6e8194087b16d7170db9637ae2c86696ad13283bf06c9b4b7a494d9bd9a094a02eea6edd4dbba9ded11f35e4d39e604b3a4dcafe6001e9125a33cfdf7dfa3b01f883416b76dc659f6aaaa0852f4d68b4b3fcdb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x1, 0x5}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}]})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000000)={0x4}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getrule={0x14, 0x22, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4020000}, 0x4000800)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.171963015s ago: executing program 0 (id=2081):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0)
socket$inet(0x10, 0x3, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
socket$kcm(0x2, 0x200000000000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
capget(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x56a, 0x20, 0x8, 0x0, 0x2, 0x4})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x26e1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801, 0x931b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

837.170946ms ago: executing program 3 (id=2082):
personality(0x410000e)
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}}, 0x4044080)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r1, &(0x7f0000000800)="410350041116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}, 0x20000091)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)

335.26721ms ago: executing program 0 (id=2083):
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
chown(&(0x7f0000000300)='./file0\x00', 0x0, 0xee01)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc")
ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080))
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @local}}, 0x24)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1, &(0x7f0000000480)=""/111, 0x6f}, 0xff}, {{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000880)=""/246, 0xf6}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000800)=""/24, 0x18}, {&(0x7f0000000b00)=""/202, 0xca}], 0x8, &(0x7f0000000c00)=""/208, 0xd0}, 0x3}, {{&(0x7f0000000d00)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000000a80)=""/30, 0x1e}], 0x2}, 0x100}], 0x3, 0x10002, 0x0)

0s ago: executing program 3 (id=2084):
personality(0x410000e)
r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}}, 0x4044080)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r2, &(0x7f0000000800)="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", 0x124, 0x880, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}, 0x20000091)
syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=<r7=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
inotify_init()
memfd_create(&(0x7f0000000400)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\x02\x00\x10r\x9b~n`m:]#\x989\xc3psjO\x80n\\\xb9\x9b\xeami\xd1\x9cSL\xb6\x87\t\x9bg\xd3\xcf\xc0F\x8c\x9b\x12O\xac`\xb4\x94IH\xb0\xcd\xe9eC\xb1\x8d{\x19\xde\x19\x8e\xb5l\xa6\x1e\r)j\xec\x02\x19SM\xa6\xcf\xb9b)\xe7\xa8\x03~{\xc5\x9b\xa8I\x19j\xa5g\x877Xa\x91\x144\x064w\xc1\xe7J)\xean\xfd\xc6\xa5Y\x84\x82U\xdc\x1bQ\xd54\x01\x98\x88\xc8\xce\x94\xf8d\x9c\xba\x1e\xf3o\x87\xbc\xbaL\x87\b<\xb8o\xc8nd\xe0\xea-5P\xa0\xc7\x18\xdb\\O\xb8xT\xa1', 0x0)
unshare(0x24020400)
timerfd_create(0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10)

kernel console output (not intermixed with test programs):

face activated: gretap1
[  477.638744][ T5902] usb 3-1: USB disconnect, device number 42
[  478.021762][   T24] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  478.172690][   T30] audit: type=1400 audit(1754917475.378:1206): avc:  denied  { create } for  pid=11987 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  478.225651][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  478.395261][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1527'.
[  478.404702][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'.
[  478.413919][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1527'.
[  478.598321][   T24] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25
[  478.614679][   T30] audit: type=1400 audit(1754917475.818:1207): avc:  denied  { map } for  pid=11992 comm="syz.2.1530" path="socket:[32825]" dev="sockfs" ino=32825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  478.650521][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.658802][   T24] usb 5-1: Product: syz
[  478.663159][   T24] usb 5-1: Manufacturer: syz
[  478.667724][   T24] usb 5-1: SerialNumber: syz
[  478.688444][   T24] usb 5-1: config 0 descriptor??
[  478.698934][   T24] gspca_main: spca501-2.14.0 probing 0000:0000
[  478.768145][   T30] audit: type=1400 audit(1754917475.968:1208): avc:  denied  { create } for  pid=11995 comm="syz.0.1531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  478.815679][   T30] audit: type=1400 audit(1754917476.008:1209): avc:  denied  { append } for  pid=11995 comm="syz.0.1531" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  478.846470][T11996] block device autoloading is deprecated and will be removed.
[  478.884169][T11996] syz.0.1531: attempt to access beyond end of device
[  478.884169][T11996] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  478.979031][   T30] audit: type=1400 audit(1754917476.008:1210): avc:  denied  { mounton } for  pid=11995 comm="syz.0.1531" path="/311/file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  479.002656][   T30] audit: type=1400 audit(1754917476.078:1211): avc:  denied  { ioctl } for  pid=5848 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=3939 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  479.038526][T11996] FAT-fs (loop1): unable to read boot sector
[  479.226701][   T30] audit: type=1400 audit(1754917476.418:1212): avc:  denied  { unlink } for  pid=5841 comm="syz-executor" name="file0" dev="tmpfs" ino=1680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  479.241927][   T24] gspca_spca501: reg write: error -110
[  479.436084][T12002] fuse: Unknown parameter 'syz$'
[  479.702820][   T24] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  479.702951][   T24] spca501 5-1:0.0: probe with driver spca501 failed with error -22
[  479.719326][   T24] usb 5-1: Found UVC 0.00 device syz (0000:0000)
[  479.729871][   T24] usb 5-1: No valid video chain found.
[  479.744598][T12008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  479.744639][ T5853] lo speed is unknown, defaulting to 1000
[  479.744677][ T5853] syz0: Port: 1 Link DOWN
[  479.746320][ T5853] lo speed is unknown, defaulting to 1000
[  479.798218][T12012] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1536'.
[  479.798268][T12012] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1536'.
[  480.237763][   T30] audit: type=1400 audit(1754917477.358:1213): avc:  denied  { write } for  pid=12015 comm="syz.3.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  480.356314][T12018] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1539'.
[  480.367559][   T30] audit: type=1400 audit(1754917477.378:1214): avc:  denied  { getopt } for  pid=12015 comm="syz.3.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  480.468001][T12021] tmpfs: Bad value for 'mpol'
[  480.596074][ T5853] usb 5-1: USB disconnect, device number 57
[  480.912863][T12027] fuse: Bad value for 'group_id'
[  480.964230][T12030] support for the xor transformation has been removed.
[  481.044532][T12031] fuse: Bad value for 'group_id'
[  481.123947][T12027] fuse: Bad value for 'group_id'
[  481.217262][T12031] fuse: Bad value for 'group_id'
[  481.684802][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  481.684822][   T30] audit: type=1400 audit(1754917478.748:1220): avc:  denied  { create } for  pid=12020 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  481.862600][   T30] audit: type=1400 audit(1754917479.008:1221): avc:  denied  { sys_admin } for  pid=12020 comm="syz.3.1541" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  482.150028][   T30] audit: type=1400 audit(1754917479.248:1222): avc:  denied  { name_bind } for  pid=12042 comm="syz.4.1547" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  482.217153][T12021] uprobe: syz.3.1541:12021 failed to unregister, leaking uprobe
[  482.746037][   T30] audit: type=1400 audit(1754917479.478:1223): avc:  denied  { read write } for  pid=12042 comm="syz.4.1547" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  482.770961][T12053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12053 comm=syz.2.1548
[  482.771283][   T30] audit: type=1400 audit(1754917479.478:1224): avc:  denied  { open } for  pid=12042 comm="syz.4.1547" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  482.807911][T12052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12052 comm=syz.2.1548
[  482.819335][   T30] audit: type=1400 audit(1754917479.488:1225): avc:  denied  { ioctl } for  pid=12042 comm="syz.4.1547" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  482.925382][   T30] audit: type=1400 audit(1754917480.078:1226): avc:  denied  { read write } for  pid=12046 comm="syz.1.1549" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  482.974137][   T30] audit: type=1400 audit(1754917480.128:1227): avc:  denied  { open } for  pid=12046 comm="syz.1.1549" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  483.010968][   T30] audit: type=1400 audit(1754917480.168:1228): avc:  denied  { ioctl } for  pid=12046 comm="syz.1.1549" path="socket:[32936]" dev="sockfs" ino=32936 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  483.061178][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'.
[  483.083983][T12060] fuse: Unknown parameter 'group_C�v��pq9~��u�3id'
[  483.182620][T12060] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  483.261992][T12060] overlayfs: missing 'lowerdir'
[  483.552894][ T5853] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  483.797067][ T5853] usb 1-1: Using ep0 maxpacket: 16
[  483.878916][ T5853] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  483.954726][ T5853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.097657][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'.
[  484.100308][ T5853] usb 1-1: config 0 has no interface number 0
[  484.145746][   T30] audit: type=1400 audit(1754917481.338:1229): avc:  denied  { write } for  pid=12075 comm="syz.1.1558" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  484.183484][ T5853] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  484.192920][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.264499][T12080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.272583][T12080] batadv_slave_0: entered promiscuous mode
[  484.309021][ T5853] usb 1-1: Product: syz
[  484.324206][ T5853] usb 1-1: Manufacturer: syz
[  484.419660][ T5853] usb 1-1: SerialNumber: syz
[  484.439175][ T5853] usb 1-1: config 0 descriptor??
[  484.449705][ T5853] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  484.515430][ T5853] usb 1-1: No valid video chain found.
[  484.647463][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.657354][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.658705][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.735947][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.758556][ T5929] usb 1-1: USB disconnect, device number 53
[  486.141767][T12105] tipc: Enabling of bearer <et:m> rejected, media not registered
[  486.181735][ T5929] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  486.256945][T12115] binder: 12114:12115 ioctl c0306201 200000000280 returned -14
[  486.333304][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  486.432651][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  486.450450][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  486.460829][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  486.493205][ T5929] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  486.509597][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.518553][ T5929] usb 1-1: Product: syz
[  486.528080][ T5929] usb 1-1: Manufacturer: syz
[  486.535667][ T5929] usb 1-1: SerialNumber: syz
[  486.542781][ T5929] usb 1-1: config 0 descriptor??
[  486.550242][ T5929] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  486.568087][ T5929] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card
[  486.711781][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  486.711804][   T30] audit: type=1400 audit(1754917483.788:1268): avc:  denied  { mount } for  pid=12119 comm="syz.2.1571" name="/" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  486.721226][ T5929] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90
[  487.088036][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.098535][   T30] audit: type=1326 audit(1754917483.798:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bf98ebe9 code=0x7ffc0000
[  487.125551][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.158826][   T30] audit: type=1326 audit(1754917483.888:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bf98ebe9 code=0x7ffc0000
[  487.189164][ T5902] usb 1-1: USB disconnect, device number 54
[  487.206030][   T30] audit: type=1400 audit(1754917484.398:1271): avc:  denied  { unmount } for  pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  488.880504][T12150] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1580'.
[  489.690397][   T30] audit: type=1400 audit(1754917486.518:1272): avc:  denied  { create } for  pid=12148 comm="syz.3.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  489.798726][T12161] sock: sock_timestamping_bind_phc: sock not bind to device
[  490.112766][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'.
[  490.471688][   T30] audit: type=1400 audit(1754917487.638:1273): avc:  denied  { name_connect } for  pid=12180 comm="syz.0.1585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  490.537622][   T30] audit: type=1400 audit(1754917487.638:1274): avc:  denied  { write } for  pid=12180 comm="syz.0.1585" lport=60398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  491.457583][   T30] audit: type=1400 audit(1754917487.638:1275): avc:  denied  { setopt } for  pid=12180 comm="syz.0.1585" lport=60398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  491.600905][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.612536][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.620027][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.628618][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.639864][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.667568][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.687792][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.703723][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.711210][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.729297][ T5929] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  491.753014][ T5929] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  491.779189][T12194] binder: 12192:12194 ioctl 4018620d 0 returned -22
[  491.801711][   T30] audit: type=1400 audit(1754917488.978:1276): avc:  denied  { write } for  pid=12192 comm="syz.2.1588" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  491.839351][T12194] binder: 12192:12194 ioctl c0306201 200000000540 returned -22
[  491.857041][ T6020] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  491.957577][T12194] sp0: Synchronizing with TNC
[  492.041828][ T6020] usb 1-1: Using ep0 maxpacket: 32
[  492.074435][ T6020] usb 1-1: unable to get BOS descriptor or descriptor too short
[  492.087499][ T6020] usb 1-1: config 1 has an invalid interface number: 4 but max is 2
[  492.100737][ T6020] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  492.146466][   T30] audit: type=1400 audit(1754917489.328:1277): avc:  denied  { create } for  pid=12203 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  492.166220][ T6020] usb 1-1: config 1 has no interface number 1
[  492.190229][ T6020] usb 1-1: config 1 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  492.228843][ T6020] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  492.392872][ T6020] usb 1-1: config 1 interface 4 has no altsetting 0
[  492.399607][ T6020] usb 1-1: config 1 interface 2 has no altsetting 0
[  492.411304][ T6020] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  492.457815][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.517950][ T6020] usb 1-1: Product: syz
[  492.536967][ T6020] usb 1-1: Manufacturer: syz
[  492.542835][ T6020] usb 1-1: SerialNumber: syz
[  492.575066][T12224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12224 comm=syz.2.1595
[  492.804345][   T30] audit: type=1400 audit(1754917490.008:1278): avc:  denied  { load_policy } for  pid=12189 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  492.894632][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.927650][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.252741][T12191] SELinux: failed to load policy
[  493.292905][ T6020] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  493.318576][ T6020] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  493.337257][ T6020] usb 1-1: selecting invalid altsetting 0
[  493.395075][ T6020] usb 1-1: USB disconnect, device number 55
[  493.515047][ T9809] udevd[9809]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  493.638451][   T30] audit: type=1400 audit(1754917490.828:1279): avc:  denied  { mount } for  pid=12236 comm="syz.3.1599" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  493.981378][ T5929] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  494.267948][   T30] audit: type=1400 audit(1754917491.468:1280): avc:  denied  { write } for  pid=12243 comm="syz.4.1600" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  494.295663][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.685571][ T5929] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  494.689845][   T30] audit: type=1400 audit(1754917491.468:1281): avc:  denied  { open } for  pid=12243 comm="syz.4.1600" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  494.734966][   T30] audit: type=1400 audit(1754917491.468:1282): avc:  denied  { ioctl } for  pid=12243 comm="syz.4.1600" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  494.806236][   T30] audit: type=1400 audit(1754917491.938:1283): avc:  denied  { unmount } for  pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  494.828736][ T5929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  494.842622][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.843691][ T5909] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  494.850620][ T5929] usb 3-1: Product: syz
[  494.850641][ T5929] usb 3-1: Manufacturer: syz
[  494.850655][ T5929] usb 3-1: SerialNumber: syz
[  494.854593][ T5929] cdc_mbim 3-1:1.0: skipping garbage
[  494.882584][   T30] audit: type=1400 audit(1754917492.088:1284): avc:  denied  { read } for  pid=12255 comm="syz.4.1604" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  494.903677][   T30] audit: type=1400 audit(1754917492.088:1285): avc:  denied  { open } for  pid=12255 comm="syz.4.1604" path="/305/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  495.022844][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.035424][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  495.053957][T12237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  495.069054][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  495.082313][ T5909] usb 1-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[  495.091346][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.105677][ T5909] usb 1-1: config 0 descriptor??
[  495.114485][ T5909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  495.137215][ T5909] usb 1-1: MIDIStreaming interface descriptor not found
[  495.313324][ T5902] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  495.366801][T12265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1607'.
[  495.491869][ T5902] usb 2-1: Using ep0 maxpacket: 8
[  495.630471][ T5902] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  495.647224][ T5902] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  495.687600][ T5902] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  495.697919][ T5902] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  495.717817][ T5902] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  495.733074][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.750403][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.763931][T12237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  495.777019][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.793967][ T5929] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  495.801453][ T5929] cdc_mbim 3-1:1.0: setting rx_max = 2048
[  495.806362][ T5902] usbtmc 2-1:16.0: bulk endpoints not found
[  495.856111][ T5902] usb 1-1: USB disconnect, device number 56
[  495.912610][ T5894] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  496.064747][ T5894] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  496.116607][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.133058][ T5894] usb 4-1: USB disconnect, device number 33
[  496.230951][ T5929] cdc_mbim 3-1:1.0: setting tx_max = 184
[  496.256093][ T5929] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  496.258375][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.297257][ T5929] wwan wwan0: port wwan0mbim0 attached
[  496.297679][T12278] dvmrp0: left allmulticast mode
[  496.359812][ T5929] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 16:ec:2f:26:23:12
[  496.384588][ T5929] usb 3-1: USB disconnect, device number 43
[  496.407051][ T5909] usb 2-1: USB disconnect, device number 34
[  496.409680][ T5929] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  496.468424][ T5929] wwan wwan0: port wwan0mbim0 disconnected
[  496.542176][ T5894] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  496.714456][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.731819][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.743079][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  496.759862][ T5894] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  496.776697][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.787029][ T5894] usb 4-1: config 0 descriptor??
[  496.822723][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  496.822732][   T30] audit: type=1400 audit(1754917494.028:1294): avc:  denied  { write } for  pid=12288 comm="syz.0.1612" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  496.855618][T12289] random: crng reseeded on system resumption
[  496.902719][   T30] audit: type=1400 audit(1754917494.058:1295): avc:  denied  { open } for  pid=12288 comm="syz.0.1612" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  496.928496][   T30] audit: type=1400 audit(1754917494.068:1296): avc:  denied  { firmware_load } for  pid=52 comm="kworker/u8:3" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  497.226427][ T5894] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  498.031787][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.225387][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.373267][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  498.447812][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.472758][T12318] FAULT_INJECTION: forcing a failure.
[  498.472758][T12318] name failslab, interval 1, probability 0, space 0, times 0
[  498.873818][T12318] CPU: 0 UID: 0 PID: 12318 Comm: syz.0.1618 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  498.873843][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  498.873851][T12318] Call Trace:
[  498.873857][T12318]  <TASK>
[  498.873864][T12318]  dump_stack_lvl+0x16c/0x1f0
[  498.873884][T12318]  should_fail_ex+0x512/0x640
[  498.873900][T12318]  ? fs_reclaim_acquire+0xae/0x150
[  498.873922][T12318]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  498.873944][T12318]  should_failslab+0xc2/0x120
[  498.873963][T12318]  __kmalloc_noprof+0xd2/0x510
[  498.873985][T12318]  tomoyo_realpath_from_path+0xc2/0x6e0
[  498.874009][T12318]  ? tomoyo_profile+0x47/0x60
[  498.874025][T12318]  tomoyo_path_number_perm+0x245/0x580
[  498.874040][T12318]  ? tomoyo_path_number_perm+0x237/0x580
[  498.874057][T12318]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  498.874074][T12318]  ? find_held_lock+0x2b/0x80
[  498.874110][T12318]  ? find_held_lock+0x2b/0x80
[  498.874125][T12318]  ? hook_file_ioctl_common+0x145/0x410
[  498.874143][T12318]  ? __fget_files+0x20e/0x3c0
[  498.874161][T12318]  security_file_ioctl+0x9b/0x240
[  498.874181][T12318]  __x64_sys_ioctl+0xb7/0x210
[  498.874202][T12318]  do_syscall_64+0xcd/0x4c0
[  498.874218][T12318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.874232][T12318] RIP: 0033:0x7f82e118ebe9
[  498.874244][T12318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.874256][T12318] RSP: 002b:00007f82e1f14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  498.874270][T12318] RAX: ffffffffffffffda RBX: 00007f82e13b6090 RCX: 00007f82e118ebe9
[  498.874278][T12318] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000007
[  498.874286][T12318] RBP: 00007f82e1f14090 R08: 0000000000000000 R09: 0000000000000000
[  498.874294][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.874301][T12318] R13: 00007f82e13b6128 R14: 00007f82e13b6090 R15: 00007ffcbeb6a448
[  498.874320][T12318]  </TASK>
[  498.875530][T12318] ERROR: Out of memory at tomoyo_realpath_from_path.
[  499.367588][    T9] usb 4-1: reset high-speed USB device number 34 using dummy_hcd
[  499.376951][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.443873][   T30] audit: type=1400 audit(1754917752.653:1297): avc:  denied  { listen } for  pid=12322 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  499.517346][   T30] audit: type=1400 audit(1754917752.653:1298): avc:  denied  { accept } for  pid=12322 comm="syz.4.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  500.328918][ T5929] usb 4-1: USB disconnect, device number 34
[  500.351796][   T30] audit: type=1400 audit(1754917752.773:1299): avc:  denied  { accept } for  pid=12326 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  500.467777][T12331] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1623'.
[  500.794727][   T30] audit: type=1400 audit(1754917753.973:1300): avc:  denied  { setopt } for  pid=12330 comm="syz.3.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  500.932600][T12343] input: syz0 as /devices/virtual/input/input48
[  501.626294][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  501.681820][   T30] audit: type=1400 audit(1754917754.853:1301): avc:  denied  { read } for  pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=3986 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  501.777624][   T30] audit: type=1400 audit(1754917754.853:1302): avc:  denied  { open } for  pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3986 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  501.904668][   T30] audit: type=1400 audit(1754917754.853:1303): avc:  denied  { ioctl } for  pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3986 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  501.995822][T12353] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1627'.
[  502.026792][   T30] audit: type=1400 audit(1754917754.923:1304): avc:  denied  { ioctl } for  pid=12330 comm="syz.3.1623" path="socket:[34364]" dev="sockfs" ino=34364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  502.062418][ T5929] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  502.312739][ T5929] usb 4-1: Using ep0 maxpacket: 8
[  502.923197][ T5929] usb 4-1: device descriptor read/all, error -71
[  503.161773][ T5853] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  503.402696][ T5902] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  503.625615][ T5902] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.683699][ T5902] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.746571][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0
[  503.780732][ T5902] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  503.821807][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.829867][   T30] audit: type=1400 audit(1754917757.013:1305): avc:  denied  { block_suspend } for  pid=12376 comm="syz.4.1635" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  503.857141][T12377] 9pnet_fd: Insufficient options for proto=fd
[  503.870858][ T5902] usb 3-1: config 0 descriptor??
[  503.871763][ T5929] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  503.962033][ T5853] usb 2-1: Using ep0 maxpacket: 8
[  503.968325][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  503.981383][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  504.001675][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  504.011589][ T5853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  504.045758][ T5853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  504.054867][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.062905][ T5929] usb 4-1: Using ep0 maxpacket: 32
[  504.112448][ T5929] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  504.121523][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.130484][ T5929] usb 4-1: Product: syz
[  504.136474][ T5929] usb 4-1: Manufacturer: syz
[  504.141083][ T5929] usb 4-1: SerialNumber: syz
[  504.168981][ T5929] usb 4-1: config 0 descriptor??
[  504.352845][ T5853] usb 2-1: GET_CAPABILITIES returned 0
[  504.358631][ T5853] usbtmc 2-1:16.0: can't read capabilities
[  504.539109][ T5902] usb 3-1: string descriptor 0 read error: -22
[  504.581824][   T30] audit: type=1326 audit(1754917757.763:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  504.650178][   T30] audit: type=1326 audit(1754917757.763:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  504.650344][ T5929] airspy 4-1:0.0: Board ID: d3
[  504.826008][ T5929] airspy 4-1:0.0: Firmware version: �
[  504.849064][ T5902] uclogic 0003:256C:006D.0010: interface is invalid, ignoring
[  504.879890][   T30] audit: type=1326 audit(1754917757.763:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  504.924898][T12394] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90
[  504.936609][   T30] audit: type=1326 audit(1754917757.763:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f786258d550 code=0x7ffc0000
[  505.208872][   T30] audit: type=1400 audit(1754917757.773:1310): avc:  denied  { write } for  pid=12362 comm="syz.1.1631" name="usbtmc0" dev="devtmpfs" ino=3992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  505.320461][ T5929] airspy 4-1:0.0: usb_control_msg() failed -71 request 12
[  505.631978][   T30] audit: type=1326 audit(1754917757.773:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  505.658169][ T5929] airspy 4-1:0.0: Registered as swradio24
[  505.700656][ T5929] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  505.811137][ T5929] usb 4-1: USB disconnect, device number 36
[  505.833630][   T30] audit: type=1326 audit(1754917757.773:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f786258e7eb code=0x7ffc0000
[  505.994948][ T5902] usb 3-1: USB disconnect, device number 44
[  506.145452][T12400] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1641'.
[  506.160423][    T9] usb 2-1: USB disconnect, device number 35
[  506.403881][T12408] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0)
[  507.482786][T12417] sp0: Synchronizing with TNC
[  507.541379][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  507.541397][   T30] audit: type=1400 audit(1754917760.743:1317): avc:  denied  { setattr } for  pid=12416 comm="syz.2.1647" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  507.631896][ T5929] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  507.644036][T12417] [U] �
[  507.871793][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  507.968662][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  508.007312][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -71
[  508.046073][ T5929] usb 2-1: can't read configurations, error -71
[  508.603126][   T30] audit: type=1400 audit(1754917761.813:1318): avc:  denied  { bind } for  pid=12426 comm="syz.0.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  508.701559][T12434] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1651'.
[  510.462903][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1654'.
[  510.472638][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'.
[  510.481809][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1654'.
[  510.492711][ T5929] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  510.841753][ T5929] usb 3-1: Using ep0 maxpacket: 8
[  510.850230][ T5929] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  510.860626][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.882023][ T5929] usb 3-1: Product: syz
[  510.886174][ T5929] usb 3-1: Manufacturer: syz
[  510.900918][ T5929] usb 3-1: SerialNumber: syz
[  510.943768][ T5929] usb 3-1: config 0 descriptor??
[  511.373532][ T5929] usb write operation failed. (-71)
[  511.383310][ T5929] usb write operation failed. (-71)
[  511.414237][ T5929] usb write operation failed. (-71)
[  511.419456][ T5929] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  511.434335][ T5929] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  511.493337][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'.
[  511.502434][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'.
[  511.511287][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'.
[  511.524472][   T30] audit: type=1400 audit(1754917764.733:1319): avc:  denied  { firmware_load } for  pid=5929 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  511.551551][ T5929] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  511.625767][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'.
[  512.760757][T12477] binder: BINDER_SET_CONTEXT_MGR already set
[  512.767635][T12477] binder: 12475:12477 ioctl 4018620d 200000000040 returned -16
[  512.989699][T12480] vlan0: entered allmulticast mode
[  515.111718][ T5853] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  515.149704][   T30] audit: type=1400 audit(1754917768.346:1320): avc:  denied  { setopt } for  pid=12497 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  515.345727][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.384350][ T5853] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25
[  515.401189][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.450439][ T5853] usb 2-1: Product: syz
[  515.475935][ T5853] usb 2-1: Manufacturer: syz
[  515.492206][ T5853] usb 2-1: SerialNumber: syz
[  515.503672][ T5853] usb 2-1: config 0 descriptor??
[  515.517069][ T5853] gspca_main: spca501-2.14.0 probing 0000:0000
[  516.096227][ T5853] gspca_spca501: reg write: error -110
[  516.101808][   T30] audit: type=1400 audit(1754917769.256:1321): avc:  denied  { bind } for  pid=12508 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  516.106310][ T5853] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  516.140636][ T5853] spca501 2-1:0.0: probe with driver spca501 failed with error -22
[  516.454952][ T5853] usb 2-1: Found UVC 0.00 device syz (0000:0000)
[  516.462161][ T5853] usb 2-1: No valid video chain found.
[  516.501398][   T30] audit: type=1400 audit(1754917769.256:1322): avc:  denied  { node_bind } for  pid=12508 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  516.720416][T12516] lo speed is unknown, defaulting to 1000
[  516.862793][T12519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  517.460653][ T6020] usb 2-1: USB disconnect, device number 38
[  517.489583][T12516] netlink: 'syz.4.1673': attribute type 17 has an invalid length.
[  517.535319][T12516] bridge0: left promiscuous mode
[  517.721738][T12516] bridge0: left allmulticast mode
[  517.889086][T12516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  518.687937][T12441] Set syz1 is full, maxelem 65536 reached
[  519.087007][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'.
[  519.169746][   T30] audit: type=1400 audit(1754917772.326:1323): avc:  denied  { name_bind } for  pid=12541 comm="syz.3.1680" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  519.208488][   T30] audit: type=1400 audit(1754917772.406:1324): avc:  denied  { read } for  pid=12548 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  519.327632][   T30] audit: type=1400 audit(1754917772.526:1325): avc:  denied  { name_bind } for  pid=12552 comm="syz.1.1684" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  520.095993][T12558] bridge0: left promiscuous mode
[  520.101053][T12558] bridge0: left allmulticast mode
[  520.117940][T12558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  520.347854][   T30] audit: type=1400 audit(1754917773.546:1326): avc:  denied  { unlink } for  pid=12560 comm="syz.4.1685" name="#19" dev="tmpfs" ino=1743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  520.420647][   T30] audit: type=1400 audit(1754917773.546:1327): avc:  denied  { mount } for  pid=12560 comm="syz.4.1685" name="/" dev="overlay" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  520.444849][   T30] audit: type=1400 audit(1754917773.616:1328): avc:  denied  { read } for  pid=12562 comm="syz.1.1686" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  520.500324][   T30] audit: type=1400 audit(1754917773.616:1329): avc:  denied  { open } for  pid=12562 comm="syz.1.1686" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  520.530589][   T30] audit: type=1400 audit(1754917773.616:1330): avc:  denied  { ioctl } for  pid=12562 comm="syz.1.1686" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  520.773346][ T6020] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  520.931669][ T6020] usb 2-1: Using ep0 maxpacket: 16
[  520.938082][   T30] audit: type=1400 audit(1754917774.136:1331): avc:  denied  { unmount } for  pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  520.962183][ T6020] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  520.977025][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  521.021766][ T6020] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  521.030832][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.125366][ T6020] usb 2-1: Product: syz
[  521.129562][ T6020] usb 2-1: Manufacturer: syz
[  521.134569][ T6020] usb 2-1: SerialNumber: syz
[  521.152182][ T6020] usb 2-1: config 0 descriptor??
[  521.779525][ T6020] appledisplay 2-1:0.0: Error while getting initial brightness: -71
[  521.818179][ T6020] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71
[  521.940494][ T6020] usb 2-1: USB disconnect, device number 39
[  522.300599][T12591] netlink: 'syz.2.1691': attribute type 5 has an invalid length.
[  522.417032][   T30] audit: type=1400 audit(1754917775.616:1332): avc:  denied  { ioctl } for  pid=12590 comm="syz.4.1694" path="socket:[33770]" dev="sockfs" ino=33770 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  522.795889][T12612] netlink: 'syz.1.1699': attribute type 10 has an invalid length.
[  523.127329][ T5909] usb 1-1: new low-speed USB device number 57 using dummy_hcd
[  523.365756][ T5909] usb 1-1: device descriptor read/64, error -71
[  523.546665][ T5853] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  523.650775][T12630] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  523.664275][T12630] Error validating options; rc = [-22]
[  523.979128][ T5909] usb 1-1: new low-speed USB device number 58 using dummy_hcd
[  524.231907][ T5853] usb 2-1: Using ep0 maxpacket: 8
[  524.243839][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  524.341827][ T5909] usb 1-1: device descriptor read/64, error -71
[  524.381055][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  524.809587][ T5909] usb usb1-port1: attempt power cycle
[  524.833569][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  524.856592][ T5853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  524.870058][ T5853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  524.880024][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.135765][ T5853] usb 2-1: GET_CAPABILITIES returned 0
[  525.155950][ T5853] usbtmc 2-1:16.0: can't read capabilities
[  525.282025][ T5909] usb 1-1: new low-speed USB device number 59 using dummy_hcd
[  525.365021][   T30] audit: type=1326 audit(1754917778.556:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.714557][   T30] audit: type=1326 audit(1754917778.596:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.738660][   T30] audit: type=1326 audit(1754917778.596:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.771716][ T5909] usb 1-1: device descriptor read/8, error -71
[  525.781651][   T30] audit: type=1326 audit(1754917778.606:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.805602][   T30] audit: type=1326 audit(1754917778.606:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.812367][T12662] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90
[  525.834657][   T30] audit: type=1326 audit(1754917778.606:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f786258d550 code=0x7ffc0000
[  525.873737][   T30] audit: type=1326 audit(1754917778.636:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.898688][   T30] audit: type=1326 audit(1754917778.636:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  525.923753][   T30] audit: type=1326 audit(1754917778.636:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.1.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f786258e7eb code=0x7ffc0000
[  525.949222][   T30] audit: type=1400 audit(1754917779.136:1342): avc:  denied  { bind } for  pid=12669 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  526.021740][ T6020] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  526.241824][ T6020] usb 5-1: Using ep0 maxpacket: 32
[  526.248910][ T6020] usb 5-1: config 0 interface 0 has no altsetting 0
[  526.258288][ T6020] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  526.267547][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.281036][ T6020] usb 5-1: Product: syz
[  526.290873][ T6020] usb 5-1: Manufacturer: syz
[  526.298822][ T6020] usb 5-1: SerialNumber: syz
[  526.322645][ T6020] usb 5-1: config 0 descriptor??
[  526.716445][T12661] sch_fq: defrate 4294967295 ignored.
[  527.408359][ T6020] gs_usb 5-1:0.0: Couldn't get device config: (err=-121)
[  527.420800][ T5902] usb 2-1: USB disconnect, device number 40
[  527.434120][ T6020] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121
[  528.162400][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'.
[  528.318697][T12738] netlink: 'syz.2.1723': attribute type 20 has an invalid length.
[  528.336983][T12741] dvmrp17: entered allmulticast mode
[  528.350400][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'.
[  528.424783][T12750] FAULT_INJECTION: forcing a failure.
[  528.424783][T12750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.438502][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.3.1725 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  528.438523][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  528.438529][T12750] Call Trace:
[  528.438533][T12750]  <TASK>
[  528.438537][T12750]  dump_stack_lvl+0x16c/0x1f0
[  528.438552][T12750]  should_fail_ex+0x512/0x640
[  528.438565][T12750]  _copy_to_user+0x32/0xd0
[  528.438580][T12750]  simple_read_from_buffer+0xcb/0x170
[  528.438593][T12750]  proc_fail_nth_read+0x197/0x240
[  528.438606][T12750]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  528.438619][T12750]  ? rw_verify_area+0xcf/0x6c0
[  528.438635][T12750]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  528.438647][T12750]  vfs_read+0x1e1/0xcf0
[  528.438659][T12750]  ? __pfx___mutex_lock+0x10/0x10
[  528.438671][T12750]  ? __pfx_vfs_read+0x10/0x10
[  528.438685][T12750]  ? __fget_files+0x20e/0x3c0
[  528.438701][T12750]  ksys_read+0x12a/0x250
[  528.438711][T12750]  ? __pfx_ksys_read+0x10/0x10
[  528.438725][T12750]  do_syscall_64+0xcd/0x4c0
[  528.438737][T12750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.438748][T12750] RIP: 0033:0x7f21dfb8d5fc
[  528.438757][T12750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  528.438768][T12750] RSP: 002b:00007f21e0a5b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  528.438778][T12750] RAX: ffffffffffffffda RBX: 00007f21dfdb5fa0 RCX: 00007f21dfb8d5fc
[  528.438784][T12750] RDX: 000000000000000f RSI: 00007f21e0a5b0a0 RDI: 0000000000000005
[  528.438790][T12750] RBP: 00007f21e0a5b090 R08: 0000000000000000 R09: 0000000000000000
[  528.438796][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.438802][T12750] R13: 00007f21dfdb6038 R14: 00007f21dfdb5fa0 R15: 00007ffce2399fe8
[  528.438815][T12750]  </TASK>
[  528.620547][    C1] vkms_vblank_simulate: vblank timer overrun
[  528.840955][    T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  528.914642][ T5909] usb 5-1: USB disconnect, device number 58
[  528.983985][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.059877][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.071540][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.081769][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  529.090899][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.122190][    T9] usb 1-1: config 0 descriptor??
[  529.219697][T12766] syz.3.1729 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  529.628207][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  529.691414][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  529.752797][    T9] usb 1-1: USB disconnect, device number 61
[  530.198418][T12785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1731'.
[  531.076674][    T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  531.190569][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1732'.
[  531.202701][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1732'.
[  531.231733][    T9] usb 5-1: Using ep0 maxpacket: 8
[  531.244343][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  531.244392][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  531.244413][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  531.244427][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  531.244439][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  531.244460][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  531.244472][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.489335][    T9] usb 5-1: usb_control_msg returned -32
[  531.489378][    T9] usbtmc 5-1:16.0: can't read capabilities
[  531.843708][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  531.843723][   T30] audit: type=1400 audit(1754917785.046:1354): avc:  denied  { write } for  pid=12824 comm="syz.2.1739" path="socket:[36072]" dev="sockfs" ino=36072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  532.005956][   T30] audit: type=1400 audit(1754917785.206:1355): avc:  denied  { bind } for  pid=12829 comm="syz.1.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  532.032110][ T5909] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  532.069984][   T30] audit: type=1400 audit(1754917785.206:1356): avc:  denied  { setopt } for  pid=12829 comm="syz.1.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  532.170178][T12831] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  532.184602][T12831] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  532.216126][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  532.224951][ T5909] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  532.234581][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.261008][ T5909] usb 1-1: config 0 descriptor??
[  532.277303][ T5909] gspca_main: nw80x-2.14.0 probing 055f:d001
[  532.598761][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.009646][ T5909] gspca_nw80x: reg_w err -110
[  533.024636][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.035282][ T5909] nw80x 1-1:0.0: probe with driver nw80x failed with error -110
[  533.501117][    T9] usb 5-1: USB disconnect, device number 59
[  533.973801][   T30] audit: type=1400 audit(1754917787.166:1357): avc:  denied  { mounton } for  pid=12854 comm="syz.3.1745" path="/354/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  534.053911][   T30] audit: type=1400 audit(1754917787.246:1358): avc:  denied  { mount } for  pid=12875 comm="syz.4.1748" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  534.083694][   T30] audit: type=1400 audit(1754917787.266:1359): avc:  denied  { ioctl } for  pid=12875 comm="syz.4.1748" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  534.608083][T12890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  534.678780][ T5853] usb 1-1: USB disconnect, device number 62
[  534.811746][ T6020] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  534.838277][T12904] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1752'.
[  535.022160][   T30] audit: type=1400 audit(1754917788.186:1360): avc:  denied  { unmount } for  pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  535.110625][ T6020] usb 4-1: Using ep0 maxpacket: 16
[  535.234672][ T6020] usb 4-1: config index 0 descriptor too short (expected 65517, got 18)
[  535.251825][ T6020] usb 4-1: config 0 has too many interfaces: 231, using maximum allowed: 32
[  535.260804][   T30] audit: type=1400 audit(1754917788.246:1361): avc:  denied  { lock } for  pid=12903 comm="syz.0.1752" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  535.296387][ T6020] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 231
[  535.324094][ T6020] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.13
[  535.346114][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.516595][T12913] netlink: 'syz.4.1754': attribute type 10 has an invalid length.
[  535.524130][ T6020] usb 4-1: config 0 descriptor??
[  535.534991][ T6020] gspca_main: sonixj-2.14.0 probing 0471:0327
[  535.633232][T12913] bridge0: port 3(dummy0) entered disabled state
[  535.642857][T12913] dummy0: left allmulticast mode
[  535.647985][T12913] dummy0: left promiscuous mode
[  535.661271][T12913] bridge0: port 3(dummy0) entered disabled state
[  535.688942][T12913] team0: Port device dummy0 added
[  535.987528][T12929] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  536.000981][T12929] overlayfs: missing 'lowerdir'
[  536.002120][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  536.162254][    T9] usb 1-1: Using ep0 maxpacket: 8
[  536.177276][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  536.199628][    T9] usb 1-1: can't read configurations, error -61
[  536.221885][ T5853] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  536.312664][   T30] audit: type=1400 audit(1754917789.516:1362): avc:  denied  { connect } for  pid=12951 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  536.354082][    T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  536.381423][ T6020] gspca_sonixj: reg_r err -32
[  536.387363][ T5853] usb 2-1: Using ep0 maxpacket: 8
[  536.399591][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  536.411884][ T6020] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[  536.422293][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  536.436453][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  536.446628][ T5853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  536.459975][ T5853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  536.469739][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.506128][T12970] tun0: tun_chr_ioctl cmd 1074025675
[  536.780952][ T5853] usb 2-1: GET_CAPABILITIES returned 0
[  536.786522][    T9] usb 1-1: Using ep0 maxpacket: 8
[  536.801835][ T5853] usbtmc 2-1:16.0: can't read capabilities
[  536.811210][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  536.820378][    T9] usb 1-1: can't read configurations, error -61
[  536.831499][    T9] usb usb1-port1: attempt power cycle
[  536.841506][ T5853] usb 4-1: USB disconnect, device number 37
[  536.862881][T12970] tun0: persist disabled
[  536.985707][   T30] audit: type=1326 audit(1754917790.186:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  537.031145][   T30] audit: type=1326 audit(1754917790.186:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  537.055123][   T30] audit: type=1326 audit(1754917790.186:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  537.117108][   T30] audit: type=1326 audit(1754917790.186:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f786258d550 code=0x7ffc0000
[  537.171732][    T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  537.179634][   T30] audit: type=1326 audit(1754917790.186:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  537.220343][   T30] audit: type=1326 audit(1754917790.206:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f786258e7eb code=0x7ffc0000
[  537.245217][    T9] usb 1-1: Using ep0 maxpacket: 8
[  537.263487][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  537.281783][    T9] usb 1-1: can't read configurations, error -61
[  537.361137][T12993] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90
[  537.434055][   T30] audit: type=1400 audit(1754917790.626:1369): avc:  denied  { connect } for  pid=12994 comm="syz.3.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  537.453782][    T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  537.493085][    T9] usb 1-1: Using ep0 maxpacket: 8
[  537.500511][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  537.508571][    T9] usb 1-1: can't read configurations, error -61
[  537.518972][    T9] usb usb1-port1: unable to enumerate USB device
[  537.639052][   T30] audit: type=1400 audit(1754917790.836:1370): avc:  denied  { getopt } for  pid=12994 comm="syz.3.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  538.221857][   T30] audit: type=1400 audit(1754917791.416:1371): avc:  denied  { bind } for  pid=13013 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  538.251797][   T30] audit: type=1400 audit(1754917791.416:1372): avc:  denied  { write } for  pid=13013 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  538.839863][T13034] SELinux:  Context Z;� is not valid (left unmapped).
[  539.081456][    T9] usb 2-1: USB disconnect, device number 41
[  539.209631][T13039] /dev/nullb0: Can't open blockdev
[  539.460189][T13059] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004
[  541.584615][T13104] sg_write: process 1265 (syz.2.1787) changed security contexts after opening file descriptor, this is not allowed.
[  542.438219][T13132] overlayfs: overlapping lowerdir path
[  542.443006][T13134] FAULT_INJECTION: forcing a failure.
[  542.443006][T13134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.459200][T13134] CPU: 1 UID: 0 PID: 13134 Comm: syz.0.1792 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  542.459234][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  542.459244][T13134] Call Trace:
[  542.459249][T13134]  <TASK>
[  542.459254][T13134]  dump_stack_lvl+0x16c/0x1f0
[  542.459276][T13134]  should_fail_ex+0x512/0x640
[  542.459296][T13134]  _copy_from_user+0x2e/0xd0
[  542.459318][T13134]  copy_msghdr_from_user+0x98/0x160
[  542.459335][T13134]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  542.459363][T13134]  ___sys_sendmsg+0xfe/0x1d0
[  542.459379][T13134]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.459415][T13134]  ? __mutex_unlock_slowpath+0x100/0x800
[  542.459440][T13134]  __sys_sendmsg+0x16d/0x220
[  542.459457][T13134]  ? __pfx___sys_sendmsg+0x10/0x10
[  542.459489][T13134]  do_syscall_64+0xcd/0x4c0
[  542.459507][T13134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.459524][T13134] RIP: 0033:0x7f82e118ebe9
[  542.459537][T13134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.459554][T13134] RSP: 002b:00007f82e1f35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.459570][T13134] RAX: ffffffffffffffda RBX: 00007f82e13b5fa0 RCX: 00007f82e118ebe9
[  542.459581][T13134] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  542.459592][T13134] RBP: 00007f82e1f35090 R08: 0000000000000000 R09: 0000000000000000
[  542.459602][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.459611][T13134] R13: 00007f82e13b6038 R14: 00007f82e13b5fa0 R15: 00007ffcbeb6a448
[  542.459635][T13134]  </TASK>
[  542.462771][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  542.462782][   T30] audit: type=1400 audit(1754917795.666:1390): avc:  denied  { mount } for  pid=13129 comm="syz.3.1793" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  543.243676][   T30] audit: type=1400 audit(1754917796.446:1391): avc:  denied  { unmount } for  pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  543.263397][    C1] vkms_vblank_simulate: vblank timer overrun
[  544.099601][   T30] audit: type=1400 audit(1754917797.296:1392): avc:  denied  { setopt } for  pid=13153 comm="syz.1.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  544.356269][T13165] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1801'.
[  544.826272][T13178] nvme_fabrics: unknown parameter or missing value '
" �' in ctrl creation request
[  545.384640][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'.
[  546.021750][ T6020] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  546.178689][T13226] kvm: user requested TSC rate below hardware speed
[  546.185448][ T6020] usb 1-1: Using ep0 maxpacket: 8
[  546.205489][ T6020] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  546.263750][ T6020] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  546.298958][ T6020] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  546.329657][ T6020] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  546.372086][ T6020] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  546.383940][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.088866][ T6020] usb 1-1: GET_CAPABILITIES returned 0
[  547.164899][ T6020] usbtmc 1-1:16.0: can't read capabilities
[  547.297394][   T30] audit: type=1326 audit(1754917800.496:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e118ebe9 code=0x7ffc0000
[  547.495592][   T30] audit: type=1326 audit(1754917800.496:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e118ebe9 code=0x7ffc0000
[  547.567984][   T30] audit: type=1326 audit(1754917800.496:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f82e118ebe9 code=0x7ffc0000
[  547.651986][T13256] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90
[  547.742261][ T5909] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  547.951700][   T30] audit: type=1326 audit(1754917800.496:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e118ebe9 code=0x7ffc0000
[  548.033319][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.057678][   T30] audit: type=1326 audit(1754917800.496:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82e118d550 code=0x7ffc0000
[  548.095916][ T5909] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  548.131723][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.185805][   T30] audit: type=1326 audit(1754917800.496:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e118ebe9 code=0x7ffc0000
[  548.186641][ T5909] usb 5-1: config 0 descriptor??
[  548.231485][ T5909] smsusb:smsusb_probe: board id=8, interface number 0
[  548.241989][ T5909] smsusb:smsusb_probe: Device initialized with return code -19
[  548.322965][   T30] audit: type=1326 audit(1754917800.496:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82e118e7eb code=0x7ffc0000
[  548.358448][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'.
[  548.456041][T13249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.467441][T13249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.497893][    T9] usb 5-1: USB disconnect, device number 60
[  548.704511][ T5909] usb 1-1: USB disconnect, device number 67
[  550.103709][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'.
[  550.171718][   T30] audit: type=1400 audit(1754917803.366:1400): avc:  denied  { lock } for  pid=13336 comm="syz.0.1825" path="socket:[38044]" dev="sockfs" ino=38044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  550.509885][   T30] audit: type=1400 audit(1754917803.706:1401): avc:  denied  { remount } for  pid=13345 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  550.794131][   T30] audit: type=1400 audit(1754917803.866:1402): avc:  denied  { read } for  pid=13345 comm="syz.0.1826" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  552.188782][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1830'.
[  552.692306][T13371] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1832'.
[  552.852036][T13346] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  552.858479][ T5169] Bluetooth: hci1: command 0x0406 tx timeout
[  553.007355][   T30] audit: type=1400 audit(1754917806.206:1403): avc:  denied  { getopt } for  pid=13376 comm="syz.3.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  553.499895][T13346] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  553.506407][T13346] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  553.512398][T13346] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  553.595992][T13396] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  553.602509][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  553.615564][T13396] vhci_hcd vhci_hcd.0: Device attached
[  553.669676][   T30] audit: type=1400 audit(1754917806.866:1404): avc:  denied  { map } for  pid=13394 comm="syz.3.1838" path="socket:[37178]" dev="sockfs" ino=37178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  553.724918][T13397] vhci_hcd: connection closed
[  553.733987][T11217] vhci_hcd: stop threads
[  553.763158][T11217] vhci_hcd: release socket
[  553.784137][T11217] vhci_hcd: disconnect device
[  554.238454][ T6020] vhci_hcd: vhci_device speed not set
[  554.263769][   T30] audit: type=1400 audit(1754917807.466:1405): avc:  denied  { ioctl } for  pid=13393 comm="syz.0.1837" path="socket:[37186]" dev="sockfs" ino=37186 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  554.301708][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  554.347334][   T30] audit: type=1400 audit(1754917807.546:1406): avc:  denied  { read } for  pid=13411 comm="syz.3.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  554.374539][T13415] netlink: 'syz.0.1837': attribute type 10 has an invalid length.
[  554.524618][    T9] usb 2-1: Using ep0 maxpacket: 8
[  554.541252][    T9] usb 2-1: config 0 has an invalid interface number: 24 but max is 0
[  554.550887][    T9] usb 2-1: config 0 has no interface number 0
[  554.603130][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice= 1.60
[  554.612410][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.620368][    T9] usb 2-1: Product: syz
[  554.626394][    T9] usb 2-1: Manufacturer: syz
[  554.630968][    T9] usb 2-1: SerialNumber: syz
[  554.646093][    T9] usb 2-1: config 0 descriptor??
[  554.894482][   T30] audit: type=1400 audit(1754917808.086:1407): avc:  denied  { read } for  pid=13369 comm="syz.1.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  554.932258][ T5169] Bluetooth: hci2: command 0x0406 tx timeout
[  555.225748][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  555.308869][T13438] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  555.318478][T13438] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  555.328535][T13438] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  555.374155][   T30] audit: type=1400 audit(1754917808.576:1408): avc:  denied  { connect } for  pid=13437 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  555.410402][   T30] audit: type=1400 audit(1754917808.606:1409): avc:  denied  { ioctl } for  pid=13437 comm="syz.3.1844" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  555.571886][ T5169] Bluetooth: hci3: command 0x0406 tx timeout
[  555.577938][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  556.096844][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'.
[  556.115811][   T30] audit: type=1400 audit(1754917809.306:1410): avc:  denied  { read append } for  pid=13449 comm="syz.4.1846" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  556.152466][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  556.202797][   T30] audit: type=1400 audit(1754917809.306:1411): avc:  denied  { open } for  pid=13449 comm="syz.4.1846" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  556.226379][    C0] vkms_vblank_simulate: vblank timer overrun
[  556.275310][    T9] snd-usb-audio 2-1:0.24: probe with driver snd-usb-audio failed with error -2
[  556.290880][    T9] usb 2-1: USB disconnect, device number 42
[  556.328863][ T9809] udevd[9809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.24/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  556.401712][ T5909] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  556.403116][   T30] audit: type=1326 audit(1754917809.596:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13484 comm="syz.1.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786258ebe9 code=0x7ffc0000
[  556.432718][    C0] vkms_vblank_simulate: vblank timer overrun
[  556.568811][ T5909] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  556.731740][ T5909] usb 5-1: config 0 has no interface number 0
[  556.731924][ T5909] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  556.732369][ T5909] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  556.732761][ T5909] usb 5-1: config 0 interface 113 has no altsetting 0
[  556.734457][ T5853] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  556.764644][ T5909] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  556.764669][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.764685][ T5909] usb 5-1: Product: syz
[  556.764697][ T5909] usb 5-1: Manufacturer: syz
[  556.764709][ T5909] usb 5-1: SerialNumber: syz
[  556.800261][ T5909] usb 5-1: config 0 descriptor??
[  557.089965][    C1] usb 5-1: NFC: Urb failure (status -71)
[  557.383535][ T5909] usb 5-1: NFC: Unable to get FW version
[  557.392288][ T5909] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90
[  557.420045][ T5909] usb 5-1: USB disconnect, device number 61
[  557.459754][ T9809] udevd[9809]: setting mode of /dev/bus/usb/005/061 to 020664 failed: No such file or directory
[  557.492144][ T5853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  557.515649][ T9809] udevd[9809]: setting owner of /dev/bus/usb/005/061 to uid=0, gid=0 failed: No such file or directory
[  557.540191][ T5853] usb 4-1: config 0 has no interfaces?
[  557.642369][T13515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'.
[  557.656921][ T5853] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  557.722468][ T5853] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  557.744948][ T5853] usb 4-1: Manufacturer: syz
[  557.762649][ T5853] usb 4-1: config 0 descriptor??
[  557.988580][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.998542][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.019281][ T5853] usb 4-1: USB disconnect, device number 38
[  558.260382][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  558.260432][   T30] audit: type=1400 audit(1754917811.456:1472): avc:  denied  { mount } for  pid=13525 comm="syz.1.1854" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  558.267981][T13538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1854'.
[  558.339417][T13521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1853'.
[  559.549921][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'.
[  561.439750][T13590] SELinux:  Context system_u:object_r:locale_t:s0 is not valid (left unmapped).
[  561.454038][   T30] audit: type=1400 audit(1754917814.646:1473): avc:  denied  { relabelto } for  pid=13589 comm="syz.3.1867" name="file0" dev="tmpfs" ino=2013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:locale_t:s0"
[  561.480256][    C0] vkms_vblank_simulate: vblank timer overrun
[  561.570628][   T30] audit: type=1400 audit(1754917814.646:1474): avc:  denied  { associate } for  pid=13589 comm="syz.3.1867" name="file0" dev="tmpfs" ino=2013 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:locale_t:s0"
[  561.597674][    C0] vkms_vblank_simulate: vblank timer overrun
[  561.637033][T13598] ALSA: mixer_oss: invalid OSS volume ''
[  561.885684][   T30] audit: type=1400 audit(1754917815.036:1475): avc:  denied  { getopt } for  pid=13601 comm="syz.3.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  562.456156][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  563.357024][   T30] audit: type=1400 audit(1754917816.556:1476): avc:  denied  { map } for  pid=13614 comm="syz.0.1873" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  563.381165][    C0] vkms_vblank_simulate: vblank timer overrun
[  563.463199][T13625] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  563.479225][T13617] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  563.760003][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1876'.
[  563.769065][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'.
[  563.777978][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1876'.
[  563.891798][ T5853] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  564.070084][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  564.100291][ T5853] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  564.112985][ T5853] usb 5-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config
[  564.136602][ T5853] usb 5-1: config 0 has no interface number 0
[  564.281697][ T5853] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  564.306076][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.324943][ T5853] usb 5-1: Product: syz
[  564.329234][ T5853] usb 5-1: Manufacturer: syz
[  564.354050][ T5853] usb 5-1: SerialNumber: syz
[  564.519071][ T5853] usb 5-1: config 0 descriptor??
[  565.064376][ T5853] ipheth 5-1:0.196: Unable to find alternate settings interface
[  565.313421][ T5853] usb 5-1: USB disconnect, device number 62
[  565.637433][   T30] audit: type=1400 audit(1754917818.836:1477): avc:  denied  { mounton } for  pid=13694 comm="syz.3.1886" path="/proc/1338/task" dev="proc" ino=37588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  565.660264][    C0] vkms_vblank_simulate: vblank timer overrun
[  566.521707][   T30] audit: type=1400 audit(1754917819.716:1478): avc:  denied  { ioctl } for  pid=13712 comm="syz.4.1890" path="socket:[38386]" dev="sockfs" ino=38386 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  567.735886][T13757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1897'.
[  567.744979][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1897'.
[  568.054673][T13766] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  568.115082][   T30] audit: type=1400 audit(1754917821.286:1479): avc:  denied  { write } for  pid=13746 comm="syz.0.1897" dev="sockfs" ino=38404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  569.241835][ T5909] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  569.260461][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1906'.
[  569.269979][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1906'.
[  569.279140][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1906'.
[  569.411839][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  569.499048][ T5909] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  569.533697][ T5909] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  569.561075][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.581278][ T5909] usb 1-1: Product: syz
[  569.588423][ T5909] usb 1-1: Manufacturer: syz
[  569.598528][ T5909] usb 1-1: SerialNumber: syz
[  569.611236][ T5909] usb 1-1: config 0 descriptor??
[  570.151676][    T9] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  570.557887][    T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  570.566297][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  570.622493][    T9] usb 5-1: config 0 has no interface number 0
[  570.643524][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  570.661890][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.670779][    T9] usb 5-1: Product: syz
[  570.679136][    T9] usb 5-1: Manufacturer: syz
[  570.684342][    T9] usb 5-1: SerialNumber: syz
[  570.691481][    T9] usb 5-1: config 0 descriptor??
[  570.699439][    T9] hub 5-1:0.31: bad descriptor, ignoring hub
[  570.706519][    T9] hub 5-1:0.31: probe with driver hub failed with error -5
[  570.775578][    T9] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  570.831078][    T9] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[  570.851880][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  571.109902][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'.
[  571.119346][ T5169] Bluetooth: hci2: Malformed Event: 0x02
[  571.192361][    T9] usb 5-1: Failed to create links for entity 6
[  571.201999][    T9] usb 5-1: Failed to register entities (-22).
[  571.212785][   T24] usb 4-1: Using ep0 maxpacket: 32
[  571.246086][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.275345][    T9] usb 5-1: USB disconnect, device number 63
[  571.466688][   T30] audit: type=1400 audit(1754917824.596:1480): avc:  denied  { append } for  pid=13840 comm="syz.2.1915" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  571.495835][   T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  571.507087][   T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  571.543208][   T30] audit: type=1400 audit(1754917824.606:1481): avc:  denied  { open } for  pid=13840 comm="syz.2.1915" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  571.577024][   T24] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  571.597159][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  571.622277][   T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  571.631446][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.664230][   T24] usb 4-1: config 0 descriptor??
[  572.080204][   T24] hid_parser_main: 73 callbacks suppressed
[  572.080218][   T24] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0
[  572.205670][   T24] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0
[  572.277521][   T24] corsair-cpro 0003:1B1C:0C10.0011: item fetching failed at offset 2/5
[  572.330167][   T24] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -22
[  572.391964][   T24] usb 4-1: USB disconnect, device number 39
[  572.728765][ T5929] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  572.757667][ T5929] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  572.778086][ T5929] usb 3-1: USB disconnect, device number 45
[  573.442576][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'.
[  573.698448][   T30] audit: type=1400 audit(1754917826.876:1482): avc:  denied  { read } for  pid=13922 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  573.730509][ T5902] usb 1-1: USB disconnect, device number 68
[  573.756362][   T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  573.921708][   T24] usb 5-1: Using ep0 maxpacket: 8
[  574.291362][   T24] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16
[  574.315727][   T24] usb 5-1: config 1 interface 0 has no altsetting 0
[  574.358144][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  574.378665][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.495736][   T24] usb 5-1: Product: syz
[  574.515793][   T24] usb 5-1: Manufacturer: syz
[  574.546055][   T24] usb 5-1: SerialNumber: syz
[  574.791747][T13916] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  574.938933][   T30] audit: type=1400 audit(1754917828.126:1483): avc:  denied  { ioctl } for  pid=13955 comm="syz.3.1931" path="socket:[38629]" dev="sockfs" ino=38629 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  575.025065][T13962] netlink: zone id is out of range
[  575.030711][T13962] netlink: zone id is out of range
[  575.036282][T13962] netlink: zone id is out of range
[  575.042622][   T30] audit: type=1400 audit(1754917828.196:1484): avc:  denied  { mount } for  pid=13949 comm="syz.0.1929" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  575.044732][T13962] netlink: zone id is out of range
[  575.092241][T13962] netlink: zone id is out of range
[  575.104307][T13962] netlink: zone id is out of range
[  575.119352][T13962] netlink: zone id is out of range
[  575.126004][T13962] netlink: zone id is out of range
[  575.132605][T13962] netlink: zone id is out of range
[  575.139077][T13962] netlink: zone id is out of range
[  575.586546][   T30] audit: type=1400 audit(1754917828.216:1485): avc:  denied  { search } for  pid=13949 comm="syz.0.1929" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  575.689274][   T30] audit: type=1400 audit(1754917828.216:1486): avc:  denied  { setattr } for  pid=13949 comm="syz.0.1929" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  576.048706][T13975] ALSA: mixer_oss: invalid OSS volume 'ؤ��nh�{%��OB��eb'
[  576.071705][   T30] audit: type=1400 audit(1754917828.626:1487): avc:  denied  { write } for  pid=13942 comm="syz.2.1928" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  576.159649][T13979] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1934'.
[  577.114225][   T43] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  577.281686][   T43] usb 2-1: Using ep0 maxpacket: 8
[  577.583900][   T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  577.609520][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.619905][   T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8
[  577.681232][   T43] usb 2-1: Product: syz
[  577.685520][   T30] audit: type=1400 audit(1754917830.866:1488): avc:  denied  { append } for  pid=14002 comm="syz.4.1939" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  577.710041][   T43] usb 2-1: Manufacturer: syz
[  577.725656][   T24] usb 5-1: USB disconnect, device number 64
[  577.731703][   T43] usb 2-1: SerialNumber: syz
[  577.760369][   T43] usb 2-1: config 0 descriptor??
[  577.775985][   T24] usblp0: removed
[  578.029480][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1942'.
[  578.051835][   T43] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  578.086318][T14031] netlink: 'syz.0.1942': attribute type 7 has an invalid length.
[  578.094491][T14031] netlink: 'syz.0.1942': attribute type 8 has an invalid length.
[  578.102818][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'.
[  578.400914][T14043] 9pnet: Could not find request transport: Ud
[  578.501871][   T43] usb write operation failed. (-71)
[  578.554713][   T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  578.582478][   T43] dvbdev: DVB: registering new adapter (Terratec H7)
[  578.634664][   T43] usb 2-1: media controller created
[  578.656413][   T43] usb read operation failed. (-71)
[  578.669559][   T43] usb write operation failed. (-71)
[  578.811802][   T30] audit: type=1400 audit(1754917831.996:1489): avc:  denied  { append } for  pid=14048 comm="syz.3.1944" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  579.098550][   T43] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  579.140247][   T43] usb 2-1: USB disconnect, device number 43
[  579.579564][   T30] audit: type=1400 audit(1754917832.776:1490): avc:  denied  { setopt } for  pid=14075 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  580.002447][ T6020] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  580.018912][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1948'.
[  580.141654][ T6020] usb 4-1: device descriptor read/64, error -71
[  580.418788][ T6020] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  580.601766][ T6020] usb 4-1: device descriptor read/64, error -71
[  580.651695][   T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  580.721874][ T6020] usb usb4-port1: attempt power cycle
[  580.791703][   T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  580.804338][   T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  580.813990][   T24] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[  580.825263][   T24] usb 2-1: config 220 has no interface number 2
[  580.831555][   T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  580.847693][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[  580.855240][   T24] usb 2-1: config 220 interface 76 has no altsetting 0
[  580.863020][   T24] usb 2-1: config 220 interface 1 has no altsetting 0
[  580.874112][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  580.883720][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.893313][   T24] usb 2-1: Product: syz
[  580.897791][   T24] usb 2-1: Manufacturer: syz
[  580.902588][   T24] usb 2-1: SerialNumber: syz
[  580.942253][   T43] usb 3-1: Using ep0 maxpacket: 16
[  580.949135][   T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  580.961384][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  580.976283][   T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  580.985818][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.994157][   T43] usb 3-1: Product: syz
[  580.999331][   T43] usb 3-1: Manufacturer: syz
[  581.021695][   T43] usb 3-1: SerialNumber: syz
[  581.039739][   T43] usb 3-1: config 0 descriptor??
[  581.059841][   T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  581.084717][ T6020] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  581.085836][   T43] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  581.122215][ T6020] usb 4-1: device descriptor read/8, error -71
[  581.135818][   T24] usb 2-1: selecting invalid altsetting 0
[  581.144042][   T24] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  581.150434][   T24] usb 2-1: No valid video chain found.
[  581.162966][   T24] usb 2-1: selecting invalid altsetting 0
[  581.168733][   T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  581.192962][   T24] usb 2-1: USB disconnect, device number 44
[  581.533233][ T6020] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  581.572266][ T6020] usb 4-1: device descriptor read/8, error -71
[  581.795604][   T43] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  581.850992][   T43] em28xx 3-1:0.0: Config register raw data: 0xfe
[  581.903091][   T43] em28xx 3-1:0.0: I2S Audio (3 sample rate(s))
[  582.061786][   T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  582.304024][   T43] em28xx 3-1:0.0: No AC97 audio processor
[  582.382034][ T6020] usb usb4-port1: unable to enumerate USB device
[  582.435173][T14144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.461831][T14144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.539644][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1956'.
[  582.576319][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.592340][   T43] usb 3-1: USB disconnect, device number 46
[  582.610093][T14148] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1957'.
[  582.648886][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.667754][   T24] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  582.744343][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.950036][   T24] usb 1-1: config 0 descriptor??
[  583.397769][   T24] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0
[  583.891361][T14119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.422358][   T30] audit: type=1400 audit(1754917837.566:1491): avc:  denied  { read } for  pid=14179 comm="syz.4.1962" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  584.451948][T14168] trusted_key: encrypted_key: master key parameter 'li�' is invalid
[  584.643766][   T30] audit: type=1400 audit(1754917837.566:1492): avc:  denied  { ioctl } for  pid=14179 comm="syz.4.1962" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  585.256885][   T24] hid-led 0003:0FC5:B080.0012: probe with driver hid-led failed with error -71
[  585.308646][   T24] usb 1-1: USB disconnect, device number 69
[  585.826522][T14232] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1969'.
[  585.901673][ T6020] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  586.021755][ T5929] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  586.367437][ T6020] usb 1-1: device descriptor read/64, error -71
[  586.651057][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  586.708784][ T5929] usb 2-1: config 0 has no interface number 0
[  586.740714][T14240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  586.785100][   T30] audit: type=1400 audit(1754917839.926:1493): avc:  denied  { mounton } for  pid=14239 comm="syz.2.1972" path="/385/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  587.596051][ T5929] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.607010][ T5929] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.752003][ T6020] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  587.875281][ T5929] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  587.884929][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.951232][T14252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  587.979567][ T5929] usb 2-1: config 0 descriptor??
[  588.034930][ T6020] usb 1-1: device descriptor read/64, error -71
[  588.635116][ T6020] usb usb1-port1: attempt power cycle
[  588.832638][ T5929] usbhid 2-1:0.1: can't add hid device: -71
[  588.844534][ T5929] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  588.874236][ T5929] usb 2-1: USB disconnect, device number 45
[  589.805983][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'.
[  589.961779][   T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  590.172178][   T43] usb 4-1: device descriptor read/64, error -71
[  590.441684][   T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  590.474704][   T30] audit: type=1400 audit(1754917843.666:1494): avc:  denied  { shutdown } for  pid=14314 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  590.583127][   T43] usb 4-1: device descriptor read/64, error -71
[  590.702584][   T43] usb usb4-port1: attempt power cycle
[  591.041995][   T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  591.363511][   T43] usb 4-1: device descriptor read/8, error -71
[  591.691932][   T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  591.737878][   T43] usb 4-1: device descriptor read/8, error -71
[  591.917230][   T43] usb usb4-port1: unable to enumerate USB device
[  592.967493][T14352] misc userio: Invalid payload size
[  593.091861][T14367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.101052][T14367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.136447][T14372] netlink: 'syz.2.1993': attribute type 1 has an invalid length.
[  593.375920][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'.
[  593.782830][T14372] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  593.864028][T14381] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1996'.
[  593.911695][ T6020] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  594.156318][ T6020] usb 4-1: device descriptor read/64, error -71
[  594.471647][ T6020] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  595.086671][    T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  595.143717][ T6020] usb 4-1: device descriptor read/64, error -71
[  595.316846][    T9] usb 3-1: device descriptor read/64, error -71
[  595.378357][ T6020] usb usb4-port1: attempt power cycle
[  595.782041][T14414] input: syz0 as /devices/virtual/input/input49
[  595.801773][    T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  595.942038][    T9] usb 3-1: device descriptor read/64, error -71
[  596.061987][    T9] usb usb3-port1: attempt power cycle
[  596.118017][   T30] audit: type=1800 audit(1754917849.306:1495): pid=14439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2002" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  596.139287][    C0] vkms_vblank_simulate: vblank timer overrun
[  596.290063][T14457] rpc_pipefs: Unknown parameter '����e�6��3$�Y-��h�e� 
��$�'
[  596.632764][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  596.662007][    T9] usb 3-1: device descriptor read/8, error -71
[  596.701742][   T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  596.901828][ T5894] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  596.913945][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  596.942260][    T9] usb 3-1: device descriptor read/8, error -71
[  596.950673][   T43] usb 5-1: Using ep0 maxpacket: 8
[  597.052019][    T9] usb usb3-port1: unable to enumerate USB device
[  597.064411][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.084554][   T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  597.561725][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  597.570819][   T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  597.583460][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.591828][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  597.604270][ T5894] usb 1-1: config 0 descriptor??
[  597.609459][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  597.625257][ T5894] pwc: Askey VC010 type 2 USB webcam detected.
[  597.648807][   T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  597.672590][   T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  597.695402][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.739801][T14487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2010'.
[  597.802495][    T9] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  597.966887][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.003089][    T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25
[  598.038094][   T43] usb 5-1: GET_CAPABILITIES returned 0
[  598.041496][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.044396][   T43] usbtmc 5-1:16.0: can't read capabilities
[  598.059353][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00
[  598.085426][ T5894] pwc: recv_control_msg error -32 req 02 val 2700
[  598.096183][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00
[  598.103926][ T5894] pwc: recv_control_msg error -32 req 04 val 1000
[  598.106493][    T9] usb 4-1: Product: syz
[  598.115293][ T5894] pwc: recv_control_msg error -32 req 04 val 1300
[  598.122863][ T5894] pwc: recv_control_msg error -32 req 04 val 1400
[  598.131137][ T5894] pwc: recv_control_msg error -32 req 02 val 2000
[  598.137274][    T9] usb 4-1: Manufacturer: syz
[  598.140830][ T5894] pwc: recv_control_msg error -32 req 02 val 2100
[  598.146503][    T9] usb 4-1: SerialNumber: syz
[  598.155592][ T5894] pwc: recv_control_msg error -32 req 04 val 1500
[  598.198122][    T9] usb 4-1: config 0 descriptor??
[  598.209869][ T5894] pwc: recv_control_msg error -32 req 02 val 2500
[  598.222025][ T5894] pwc: recv_control_msg error -32 req 02 val 2400
[  598.229709][ T5894] pwc: recv_control_msg error -32 req 02 val 2600
[  598.247447][    T9] gspca_main: spca501-2.14.0 probing 0000:0000
[  598.748990][T14460] usbtmc 5-1:16.0: usb_control_msg returned -71
[  598.756569][ T5902] usb 5-1: USB disconnect, device number 65
[  599.431346][    T9] gspca_spca501: reg write: error -110
[  599.439051][    T9] spca501 4-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  599.461816][    T9] spca501 4-1:0.0: probe with driver spca501 failed with error -22
[  599.470205][    T9] usb 4-1: Found UVC 0.00 device syz (0000:0000)
[  599.476716][    T9] usb 4-1: No valid video chain found.
[  599.752469][ T5169] block nbd0: Receive control failed (result -107)
[  599.915985][T14521] nbd0: detected capacity change from 0 to 63
[  599.958166][ T5894] pwc: recv_control_msg error -71 req 02 val 2800
[  600.007659][ T5853] usb 4-1: USB disconnect, device number 51
[  600.032741][ T5894] pwc: recv_control_msg error -71 req 04 val 1100
[  600.039365][ T9809] block nbd0: Dead connection, failed to find a fallback
[  600.048408][ T9809] block nbd0: shutting down sockets
[  600.054102][ T5894] pwc: recv_control_msg error -71 req 04 val 1200
[  600.054823][ T9809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.072660][ T9809] Buffer I/O error on dev nbd0, logical block 0, async page read
[  600.083712][ T9809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.117178][ T9809] Buffer I/O error on dev nbd0, logical block 1, async page read
[  600.122402][ T5894] pwc: Registered as video103.
[  600.152407][ T9809] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.167189][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50
[  600.249128][ T9809] Buffer I/O error on dev nbd0, logical block 2, async page read
[  600.267345][ T5894] usb 1-1: USB disconnect, device number 73
[  600.307292][T14554] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[  600.353251][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  600.394105][ T9809] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.446011][   T30] audit: type=1400 audit(1754917853.646:1496): avc:  denied  { getopt } for  pid=14553 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  600.472375][ T9809] Buffer I/O error on dev nbd0, logical block 3, async page read
[  600.521811][    T9] usb 2-1: Using ep0 maxpacket: 16
[  600.545441][ T9809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.578042][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.601875][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  600.611132][ T9809] Buffer I/O error on dev nbd0, logical block 0, async page read
[  600.621688][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.630088][ T9809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.659994][    T9] usb 2-1: config 0 descriptor??
[  600.665132][ T9809] Buffer I/O error on dev nbd0, logical block 1, async page read
[  600.694100][ T9809] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.729078][ T9809] Buffer I/O error on dev nbd0, logical block 2, async page read
[  600.787659][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2020'.
[  600.860852][ T9809] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.886888][ T9809] Buffer I/O error on dev nbd0, logical block 3, async page read
[  600.896546][ T9809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.905914][ T9809] Buffer I/O error on dev nbd0, logical block 0, async page read
[  600.916432][ T9809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  600.925769][ T9809] Buffer I/O error on dev nbd0, logical block 1, async page read
[  600.945941][ T9809] ldm_validate_partition_table(): Disk read failed.
[  601.003224][ T9809] Dev nbd0: unable to read RDB block 0
[  601.014306][ T9809]  nbd0: unable to read partition table
[  601.039749][ T9809] ldm_validate_partition_table(): Disk read failed.
[  601.050746][ T9809] Dev nbd0: unable to read RDB block 0
[  601.062840][ T9809]  nbd0: unable to read partition table
[  601.165989][   T30] audit: type=1400 audit(1754917854.366:1497): avc:  denied  { setopt } for  pid=14580 comm="syz.0.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  601.303254][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  601.309951][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  601.324988][    T9] usb 2-1: USB disconnect, device number 46
[  601.904794][T14595] rpc_pipefs: Unknown parameter '����e�6��3$�Y-��h�e� 
��$�'
[  602.562080][T14599] ceph: No mds server is up or the cluster is laggy
[  603.783565][ T5902] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  603.861770][ T5894] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  603.951658][ T5902] usb 1-1: Using ep0 maxpacket: 32
[  603.958205][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.969716][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  603.979564][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  603.993699][ T5902] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  604.003002][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.013778][ T5894] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.024989][ T5894] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 50660, setting to 1024
[  604.036610][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[  604.043542][ T5894] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  604.055173][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'.
[  604.126301][ T5902] usb 1-1: config 0 descriptor??
[  604.135093][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.156618][ T5894] usb 2-1: config 0 descriptor??
[  604.431660][ T5929] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  604.562023][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0013/input/input51
[  604.582014][ T5929] usb 4-1: Using ep0 maxpacket: 8
[  604.597279][ T5929] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  604.624556][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  604.643715][ T5894] nintendo 0003:057E:200E.0014: unknown main item tag 0x0
[  604.651266][ T5894] nintendo 0003:057E:200E.0014: unknown main item tag 0x0
[  604.663543][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0013/input/input52
[  604.680138][ T5894] nintendo 0003:057E:200E.0014: item fetching failed at offset 2/5
[  604.690754][ T5894] nintendo 0003:057E:200E.0014: HID parse failed
[  604.714464][ T5894] nintendo 0003:057E:200E.0014: probe - fail = -22
[  604.729563][ T5894] nintendo 0003:057E:200E.0014: probe with driver nintendo failed with error -22
[  604.749173][T14628] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2030'.
[  604.749612][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  604.773601][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  604.787747][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  604.804048][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  604.826214][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.853784][T14669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.979277][T14669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.025080][ T5853] usb 2-1: USB disconnect, device number 47
[  605.045930][ T5902] kye 0003:0458:5011.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  605.230434][ T5929] usb 4-1: usb_control_msg returned -32
[  605.236127][ T5929] usbtmc 4-1:16.0: can't read capabilities
[  605.267091][ T5902] usb 1-1: USB disconnect, device number 74
[  605.349137][T14695] fido_id[14695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  606.200174][   T30] audit: type=1400 audit(1754917859.396:1498): avc:  denied  { bind } for  pid=14728 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  606.441828][ T5929] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  606.451733][ T5902] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  606.571789][ T5929] usb 3-1: device descriptor read/64, error -71
[  606.623056][ T5902] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  606.631375][ T5902] usb 2-1: config 0 has no interface number 0
[  606.637545][ T5902] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30
[  606.648791][ T5902] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102
[  606.664707][ T5902] usb 2-1: config 0 interface 48 has no altsetting 0
[  606.671421][ T5902] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  606.681988][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.693607][ T5902] usb 2-1: config 0 descriptor??
[  607.108749][ T5929] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  607.595804][ T5902] usb 2-1: string descriptor 0 read error: -71
[  607.624214][ T5894] usb 4-1: USB disconnect, device number 52
[  607.639383][ T5902] cp210x 2-1:0.48: cp210x converter detected
[  607.670855][ T5902] cp210x 2-1:0.48: failed to get vendor val 0x370b size 1: -71
[  607.684679][ T5902] cp210x 2-1:0.48: querying part number failed
[  607.716538][ T5929] usb 3-1: device descriptor read/64, error -71
[  607.719885][ T5902] usb 2-1: cp210x converter now attached to ttyUSB0
[  607.746495][T14768] rpc_pipefs: Unknown parameter '����e�6��3$�Y-��h�e� 
��$�'
[  607.846111][ T5929] usb usb3-port1: attempt power cycle
[  607.906729][ T5902] usb 2-1: USB disconnect, device number 48
[  608.157348][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  608.171185][ T5902] cp210x 2-1:0.48: device disconnected
[  608.751916][ T5929] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  608.782599][ T5929] usb 3-1: device descriptor read/8, error -71
[  609.224290][ T5929] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  609.366688][ T5929] usb 3-1: device descriptor read/8, error -71
[  609.392429][T14813] lo speed is unknown, defaulting to 1000
[  609.635727][T14816] binder: 14811:14816 ioctl ae41 2 returned -22
[  609.844426][ T5929] usb usb3-port1: unable to enumerate USB device
[  610.189083][   T30] audit: type=1400 audit(1754917863.386:1499): avc:  denied  { execute } for  pid=14811 comm="syz.0.2050" path="/selinux/enforce" dev="selinuxfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[  610.344386][   T30] audit: type=1400 audit(1754917863.546:1500): avc:  denied  { read } for  pid=14835 comm="syz.2.2054" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  610.449443][   T30] audit: type=1400 audit(1754917863.546:1501): avc:  denied  { open } for  pid=14835 comm="syz.2.2054" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  610.472743][    C0] vkms_vblank_simulate: vblank timer overrun
[  610.533478][   T30] audit: type=1400 audit(1754917863.576:1502): avc:  denied  { ioctl } for  pid=14835 comm="syz.2.2054" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  610.558195][    C0] vkms_vblank_simulate: vblank timer overrun
[  611.014408][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'.
[  611.640203][   T30] audit: type=1400 audit(1754917864.836:1503): avc:  denied  { read } for  pid=14901 comm="syz.1.2063" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  611.734818][   T30] audit: type=1400 audit(1754917864.836:1504): avc:  denied  { open } for  pid=14901 comm="syz.1.2063" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  611.781654][ T5916] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  612.311717][ T5916] usb 3-1: Using ep0 maxpacket: 32
[  612.319806][ T5916] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  612.333435][ T5916] usb 3-1: config 0 has no interface number 0
[  612.441857][ T5916] usb 3-1: config 0 interface 89 has no altsetting 0
[  612.545667][    T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  612.584332][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  612.593395][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.605590][ T5916] usb 3-1: Product: syz
[  612.609759][ T5916] usb 3-1: Manufacturer: syz
[  612.673386][ T5916] usb 3-1: SerialNumber: syz
[  612.690888][ T5916] usb 3-1: config 0 descriptor??
[  612.697900][T14937] syz.3.2068: attempt to access beyond end of device
[  612.697900][T14937] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  612.715741][ T5916] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  612.725841][T14937] exFAT-fs (loop3): unable to read boot sector
[  612.764836][    T9] usb 5-1: Using ep0 maxpacket: 16
[  612.773789][T14919] pim6reg: entered allmulticast mode
[  612.779311][ T5916] em28xx 3-1:0.89: Video interface 89 found: bulk
[  612.789288][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.790861][T14937] exFAT-fs (loop3): failed to read boot sector
[  612.811014][T14937] exFAT-fs (loop3): failed to recognize exfat type
[  612.821771][T14931] pim6reg: left allmulticast mode
[  612.841664][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.862645][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  612.938596][    T9] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  612.963746][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.965976][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'.
[  612.983756][    T9] usb 5-1: config 0 descriptor??
[  613.215489][   T30] audit: type=1400 audit(1754917866.396:1505): avc:  denied  { connect } for  pid=14953 comm="syz.1.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  613.244775][T14957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2070'.
[  613.394547][    T9] hid (null): bogus close delimiter
[  613.409125][ T5916] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  613.428211][    T9] cougar 0003:060B:500A.0015: unexpected long global item
[  613.611550][    T9] cougar 0003:060B:500A.0015: parse failed
[  613.755747][    T9] cougar 0003:060B:500A.0015: probe with driver cougar failed with error -22
[  614.508732][    T9] usb 5-1: USB disconnect, device number 66
[  616.201309][ T5916] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  616.208530][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.210507][ T5916] em28xx 3-1:0.89: board has no eeprom
[  616.297671][ T5916] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  616.364772][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2081'.
[  616.374678][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'.
[  616.383928][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2081'.
[  616.531535][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.611227][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'.
[  616.626417][ T5916] em28xx 3-1:0.89: analog set to bulk mode.
[  616.674602][ T5894] em28xx 3-1:0.89: Registering V4L2 extension
[  616.678015][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.697636][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.768576][   T30] audit: type=1400 audit(1754917869.966:1506): avc:  denied  { read } for  pid=15016 comm="syz.2.2080" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  616.813328][ T5894] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  616.855049][ T5894] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  616.915150][ T5894] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  616.965710][ T5894] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  617.009405][ T5894] em28xx 3-1:0.89: Config register raw data: 0xfffffffb
[  617.076511][ T5894] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  617.083642][ T5894] em28xx 3-1:0.89: No AC97 audio processor
[  617.115896][ T5894] usb 3-1: Decoder not found
[  617.139723][ T5894] em28xx 3-1:0.89: failed to create media graph
[  617.215414][ T5894] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  617.396705][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'.
[  617.408411][ T5894] em28xx 3-1:0.89: Registering snapshot button...
[  617.435476][T15047] ==================================================================
[  617.440518][ T5894] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input54
[  617.443540][T15047] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[  617.443564][T15047] Read of size 8 at addr ffff888036290740 by task v4l_id/15047
[  617.443578][T15047] 
[  617.471275][T15047] CPU: 0 UID: 0 PID: 15047 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  617.471291][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  617.471298][T15047] Call Trace:
[  617.471303][T15047]  <TASK>
[  617.471307][T15047]  dump_stack_lvl+0x116/0x1f0
[  617.471321][T15047]  print_report+0xcd/0x630
[  617.471334][T15047]  ? __virt_addr_valid+0x81/0x610
[  617.471348][T15047]  ? __phys_addr+0xe8/0x180
[  617.471362][T15047]  ? v4l2_fh_init+0x27d/0x2c0
[  617.471373][T15047]  kasan_report+0xe0/0x110
[  617.471384][T15047]  ? v4l2_fh_init+0x27d/0x2c0
[  617.471396][T15047]  v4l2_fh_init+0x27d/0x2c0
[  617.471407][T15047]  v4l2_fh_open+0x83/0xc0
[  617.471417][T15047]  em28xx_v4l2_open+0x24e/0x7e0
[  617.471430][T15047]  v4l2_open+0x222/0x490
[  617.471447][T15047]  ? __pfx_v4l2_open+0x10/0x10
[  617.471463][T15047]  chrdev_open+0x231/0x6a0
[  617.471476][T15047]  ? __pfx_chrdev_open+0x10/0x10
[  617.471488][T15047]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  617.471502][T15047]  do_dentry_open+0x982/0x1530
[  617.471514][T15047]  ? __pfx_chrdev_open+0x10/0x10
[  617.471527][T15047]  vfs_open+0x82/0x3f0
[  617.471541][T15047]  path_openat+0x1de4/0x2cb0
[  617.471554][T15047]  ? __pfx_path_openat+0x10/0x10
[  617.471569][T15047]  do_filp_open+0x20b/0x470
[  617.471586][T15047]  ? __pfx_do_filp_open+0x10/0x10
[  617.471608][T15047]  ? alloc_fd+0x471/0x7d0
[  617.471621][T15047]  do_sys_openat2+0x11b/0x1d0
[  617.471635][T15047]  ? __pfx_do_sys_openat2+0x10/0x10
[  617.471649][T15047]  ? find_held_lock+0x2b/0x80
[  617.471663][T15047]  ? handle_mm_fault+0x2ab/0xd10
[  617.471680][T15047]  __x64_sys_openat+0x174/0x210
[  617.471695][T15047]  ? __pfx___x64_sys_openat+0x10/0x10
[  617.471710][T15047]  ? do_user_addr_fault+0x843/0x1370
[  617.471722][T15047]  do_syscall_64+0xcd/0x4c0
[  617.471733][T15047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.471744][T15047] RIP: 0033:0x7f0f68ea7407
[  617.471753][T15047] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  617.471764][T15047] RSP: 002b:00007ffef95b5740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  617.471774][T15047] RAX: ffffffffffffffda RBX: 00007f0f69578880 RCX: 00007f0f68ea7407
[  617.471781][T15047] RDX: 0000000000000000 RSI: 00007ffef95b6f1c RDI: ffffffffffffff9c
[  617.471788][T15047] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  617.471794][T15047] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  617.471800][T15047] R13: 00007ffef95b5990 R14: 00007f0f6967d000 R15: 0000557b102324d8
[  617.471810][T15047]  </TASK>
[  617.471814][T15047] 
[  617.539276][ T5894] em28xx 3-1:0.89: Remote control support is not available for this card.
[  617.543680][T15047] Allocated by task 5894:
[  617.543691][T15047]  kasan_save_stack+0x33/0x60
[  617.543712][T15047]  kasan_save_track+0x14/0x30
[  617.543726][T15047]  __kasan_kmalloc+0xaa/0xb0
[  617.543740][T15047]  em28xx_v4l2_init+0x114/0x4080
[  617.543756][T15047]  em28xx_init_extension+0x137/0x200
[  617.543776][T15047]  request_module_async+0x61/0x70
[  617.543798][T15047]  process_one_work+0x9cc/0x1b70
[  617.543816][T15047]  worker_thread+0x6c8/0xf10
[  617.543832][T15047]  kthread+0x3c5/0x780
[  617.543845][T15047]  ret_from_fork+0x5d7/0x6f0
[  617.543859][T15047]  ret_from_fork_asm+0x1a/0x30
[  617.543878][T15047] 
[  617.543883][T15047] Freed by task 5894:
[  617.543891][T15047]  kasan_save_stack+0x33/0x60
[  617.543906][T15047]  kasan_save_track+0x14/0x30
[  617.543920][T15047]  kasan_save_free_info+0x3b/0x60
[  617.543941][T15047]  __kasan_slab_free+0x60/0x70
[  617.543957][T15047]  kfree+0x2b4/0x4d0
[  617.543976][T15047]  em28xx_v4l2_init+0x22b5/0x4080
[  617.826483][T15047]  em28xx_init_extension+0x137/0x200
[  617.831757][T15047]  request_module_async+0x61/0x70
[  617.836766][T15047]  process_one_work+0x9cc/0x1b70
[  617.841681][T15047]  worker_thread+0x6c8/0xf10
[  617.846248][T15047]  kthread+0x3c5/0x780
[  617.850290][T15047]  ret_from_fork+0x5d7/0x6f0
[  617.854854][T15047]  ret_from_fork_asm+0x1a/0x30
[  617.859594][T15047] 
[  617.861899][T15047] The buggy address belongs to the object at ffff888036290000
[  617.861899][T15047]  which belongs to the cache kmalloc-8k of size 8192
[  617.875926][T15047] The buggy address is located 1856 bytes inside of
[  617.875926][T15047]  freed 8192-byte region [ffff888036290000, ffff888036292000)
[  617.889870][T15047] 
[  617.892171][T15047] The buggy address belongs to the physical page:
[  617.898555][T15047] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36290
[  617.907288][T15047] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  617.915761][T15047] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  617.923712][T15047] page_type: f5(slab)
[  617.927669][T15047] raw: 00fff00000000040 ffff88801b842280 ffffea0000a11c00 0000000000000005
[  617.936228][T15047] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  617.944785][T15047] head: 00fff00000000040 ffff88801b842280 ffffea0000a11c00 0000000000000005
[  617.953429][T15047] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  617.962076][T15047] head: 00fff00000000003 ffffea0000d8a401 00000000ffffffff 00000000ffffffff
[  617.970719][T15047] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  617.979360][T15047] page dumped because: kasan: bad access detected
[  617.985746][T15047] page_owner tracks the page as allocated
[  617.991434][T15047] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13487, tgid 13484 (syz.1.1850), ts 556498571192, free_ts 552597644453
[  618.012940][T15047]  post_alloc_hook+0x1c0/0x230
[  618.017688][T15047]  get_page_from_freelist+0x132b/0x38e0
[  618.023209][T15047]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  618.029077][T15047]  alloc_pages_mpol+0x1fb/0x550
[  618.033905][T15047]  new_slab+0x247/0x330
[  618.038043][T15047]  ___slab_alloc+0xcf2/0x1740
[  618.042702][T15047]  __slab_alloc.constprop.0+0x56/0xb0
[  618.048063][T15047]  __kmalloc_cache_noprof+0xfb/0x3e0
[  618.053327][T15047]  audit_log_d_path+0xe7/0x200
[  618.058064][T15047]  audit_log_d_path_exe+0x46/0x70
[  618.063064][T15047]  audit_log_task+0x31d/0x3f0
[  618.067717][T15047]  audit_seccomp+0x79/0x290
[  618.072203][T15047]  __seccomp_filter+0x7b6/0xea0
[  618.077034][T15047]  __secure_computing+0x287/0x3b0
[  618.082036][T15047]  syscall_trace_enter+0x89/0x240
[  618.087036][T15047]  do_syscall_64+0x347/0x4c0
[  618.091605][T15047] page last free pid 13369 tgid 13369 stack trace:
[  618.098098][T15047]  __free_frozen_pages+0x7d5/0x10f0
[  618.103278][T15047]  __put_partials+0x165/0x1c0
[  618.107935][T15047]  qlist_free_all+0x4d/0x120
[  618.112497][T15047]  kasan_quarantine_reduce+0x195/0x1e0
[  618.117928][T15047]  __kasan_slab_alloc+0x69/0x90
[  618.122759][T15047]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  618.128191][T15047]  ptlock_alloc+0x1f/0x70
[  618.132501][T15047]  pte_alloc_one+0x82/0x3a0
[  618.136982][T15047]  __do_fault+0x320/0x490
[  618.141286][T15047]  do_pte_missing+0x1a6/0x3ba0
[  618.146028][T15047]  __handle_mm_fault+0x152a/0x2a50
[  618.151119][T15047]  handle_mm_fault+0x589/0xd10
[  618.155860][T15047]  do_user_addr_fault+0x60c/0x1370
[  618.160944][T15047]  exc_page_fault+0x5c/0xb0
[  618.165420][T15047]  asm_exc_page_fault+0x26/0x30
[  618.170248][T15047] 
[  618.172546][T15047] Memory state around the buggy address:
[  618.178147][T15047]  ffff888036290600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  618.186184][T15047]  ffff888036290680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  618.194221][T15047] >ffff888036290700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  618.202252][T15047]                                            ^
[  618.208377][T15047]  ffff888036290780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  618.216412][T15047]  ffff888036290800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  618.224447][T15047] ==================================================================
[  618.291656][   T30] audit: type=1400 audit(1754917871.446:1507): avc:  denied  { read } for  pid=5200 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  618.322071][   T30] audit: type=1400 audit(1754917871.446:1508): avc:  denied  { search } for  pid=5200 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  618.367039][   T30] audit: type=1400 audit(1754917871.446:1509): avc:  denied  { append } for  pid=5200 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  618.395006][   T30] audit: type=1400 audit(1754917871.446:1510): avc:  denied  { open } for  pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  618.447280][   T30] audit: type=1400 audit(1754917871.446:1511): avc:  denied  { getattr } for  pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  618.538933][T15047] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  618.546134][T15047] CPU: 0 UID: 0 PID: 15047 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  618.556079][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  618.566105][T15047] Call Trace:
[  618.569355][T15047]  <TASK>
[  618.572263][T15047]  dump_stack_lvl+0x3d/0x1f0
[  618.576841][T15047]  vpanic+0x6e8/0x7a0
[  618.580802][T15047]  ? __pfx_vpanic+0x10/0x10
[  618.585282][T15047]  ? v4l2_fh_init+0x27d/0x2c0
[  618.589941][T15047]  panic+0xca/0xd0
[  618.593651][T15047]  ? __pfx_panic+0x10/0x10
[  618.598042][T15047]  ? v4l2_fh_init+0x27d/0x2c0
[  618.602690][T15047]  ? preempt_schedule_common+0x44/0xc0
[  618.608124][T15047]  ? preempt_schedule_thunk+0x16/0x30
[  618.613479][T15047]  ? check_panic_on_warn+0x1f/0xb0
[  618.618566][T15047]  check_panic_on_warn+0xab/0xb0
[  618.623481][T15047]  end_report+0x107/0x170
[  618.627781][T15047]  kasan_report+0xee/0x110
[  618.632167][T15047]  ? v4l2_fh_init+0x27d/0x2c0
[  618.636821][T15047]  v4l2_fh_init+0x27d/0x2c0
[  618.641306][T15047]  v4l2_fh_open+0x83/0xc0
[  618.645617][T15047]  em28xx_v4l2_open+0x24e/0x7e0
[  618.650442][T15047]  v4l2_open+0x222/0x490
[  618.654663][T15047]  ? __pfx_v4l2_open+0x10/0x10
[  618.659405][T15047]  chrdev_open+0x231/0x6a0
[  618.663796][T15047]  ? __pfx_chrdev_open+0x10/0x10
[  618.668710][T15047]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  618.675012][T15047]  do_dentry_open+0x982/0x1530
[  618.679753][T15047]  ? __pfx_chrdev_open+0x10/0x10
[  618.684665][T15047]  vfs_open+0x82/0x3f0
[  618.688708][T15047]  path_openat+0x1de4/0x2cb0
[  618.693270][T15047]  ? __pfx_path_openat+0x10/0x10
[  618.698179][T15047]  do_filp_open+0x20b/0x470
[  618.702654][T15047]  ? __pfx_do_filp_open+0x10/0x10
[  618.707664][T15047]  ? alloc_fd+0x471/0x7d0
[  618.711967][T15047]  do_sys_openat2+0x11b/0x1d0
[  618.716620][T15047]  ? __pfx_do_sys_openat2+0x10/0x10
[  618.721791][T15047]  ? find_held_lock+0x2b/0x80
[  618.726439][T15047]  ? handle_mm_fault+0x2ab/0xd10
[  618.731352][T15047]  __x64_sys_openat+0x174/0x210
[  618.736175][T15047]  ? __pfx___x64_sys_openat+0x10/0x10
[  618.741519][T15047]  ? do_user_addr_fault+0x843/0x1370
[  618.746778][T15047]  do_syscall_64+0xcd/0x4c0
[  618.751257][T15047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.757119][T15047] RIP: 0033:0x7f0f68ea7407
[  618.761504][T15047] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  618.781082][T15047] RSP: 002b:00007ffef95b5740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  618.789466][T15047] RAX: ffffffffffffffda RBX: 00007f0f69578880 RCX: 00007f0f68ea7407
[  618.797406][T15047] RDX: 0000000000000000 RSI: 00007ffef95b6f1c RDI: ffffffffffffff9c
[  618.805346][T15047] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  618.813286][T15047] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  618.821227][T15047] R13: 00007ffef95b5990 R14: 00007f0f6967d000 R15: 0000557b102324d8
[  618.829170][T15047]  </TASK>
[  618.832362][T15047] Kernel Offset: disabled
[  618.836666][T15047] Rebooting in 86400 seconds..