last executing test programs:

5m37.377872848s ago: executing program 4 (id=367):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00')
write$P9_RSYMLINK(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @broadcast}, 0x218, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='batadv_slave_0\x00', 0xda, 0x4, 0x2})
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmo'])
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
poll(&(0x7f0000000040)=[{r3, 0x300}], 0x1, 0xffffffff)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x205, 0x0, 0x3, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x3, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffb, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x7, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x8000000000000000, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x541ec3ed, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x6, 0x100000004]})

5m35.934453855s ago: executing program 4 (id=370):
timerfd_create(0x7, 0x800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xf5, 0x81, 0x89, 0x2c}}]}}]}}, 0x0)

5m32.270281714s ago: executing program 4 (id=378):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m30.009340703s ago: executing program 4 (id=383):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
keyctl$search(0xa, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x3f, 0x28, 0x66, 0x0, 0x80, 0x1, 0x0, @private=0xa010100, @empty=0x54000}, @timestamp_reply={0xe, 0x0, 0x0, 0x8, 0xdd0, 0x10000, 0xd4, 0x23}}}}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x10)
r6 = dup(r0)
write$UHID_INPUT(r6, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006)

5m28.93382132s ago: executing program 4 (id=384):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xb2ad, 0x2, 0x7, 0x5, 0x1})
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)

5m24.19824172s ago: executing program 4 (id=392):
userfaultfd(0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000004c0)={0x2})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c)

5m9.042147108s ago: executing program 32 (id=392):
userfaultfd(0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000004c0)={0x2})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c)

2m45.252575378s ago: executing program 2 (id=739):
mkdirat(0xffffffffffffff9c, 0x0, 0x168)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x2000000, 0x0)
lseek(r1, 0xfffffffffffffffb, 0x1)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r3, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fce9ffff00000000000000008500000041000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r7, 0xffffffffffffffff, 0x9, 0x1008, 0x0, @void, @value=r9, @void, @void, r6}, 0x20)

2m41.596099578s ago: executing program 2 (id=754):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r4, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

2m35.402291137s ago: executing program 2 (id=769):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)

2m31.833132726s ago: executing program 2 (id=775):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000ffff25bd6100fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a050023080000500012800b000100697036746e6c00004000028008000100", @ANYRES32=r0], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000)

2m31.57042665s ago: executing program 2 (id=780):
userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000004c0)={0x2})
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c)

2m29.401339278s ago: executing program 2 (id=786):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f00000002c0)=""/4095}, 0x20)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xbd)
syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_open_dev$vcsa(&(0x7f0000000280), 0x4, 0x0)

2m13.538820965s ago: executing program 33 (id=786):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="16000000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f00000002c0)=""/4095}, 0x20)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xbd)
syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_open_dev$vcsa(&(0x7f0000000280), 0x4, 0x0)

15.335973349s ago: executing program 5 (id=1248):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r4, 0x0)

10.854244303s ago: executing program 5 (id=1259):
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2507000000080004006401010108000300ffffffff14000200ff020000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044014)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200080c0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r4, 0x4, 0x123, 0x234}, 0x14}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc801}, 0x80)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=@newtclass={0xa0, 0x28, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0x3, 0x1}, {0x7, 0x10}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8c2a}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7fffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xb}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0xac, 0x2}}]}, 0xa0}}, 0x0)

9.829248592s ago: executing program 3 (id=1267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1f4, 0x0)

8.456149312s ago: executing program 3 (id=1270):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x2, 0x0, 0xfe})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x800})

7.895623501s ago: executing program 0 (id=1271):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0})
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x18c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x4000}]}]}, 0x13c}}, 0x4040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNGETFEATURES(r4, 0xff09, 0x0)
sendmsg$nl_route(r3, 0x0, 0x4000850)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

7.654900957s ago: executing program 5 (id=1273):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = userfaultfd(0x80801)
close(r3)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})

7.318379359s ago: executing program 0 (id=1274):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)

6.981648761s ago: executing program 0 (id=1275):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xa85a})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031})

6.491911859s ago: executing program 6 (id=1277):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x2, 0xffff, 0x7ff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800})
dup3(r2, r4, 0x80000)
close_range(r0, 0xffffffffffffffff, 0x0)

6.341934751s ago: executing program 5 (id=1278):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x102)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

6.294676165s ago: executing program 6 (id=1279):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28)
syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1)

5.181289552s ago: executing program 6 (id=1281):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x400000003e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000680)=""/229, 0xe5, 0x1, 0x26}, @fda={0x66646185, 0x8, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

5.062379379s ago: executing program 6 (id=1283):
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2507000000080004006401010108000300ffffffff14000200ff020000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044014)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200080c0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r4, 0x4, 0x123, 0x234}, 0x14}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc801}, 0x80)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=@newtclass={0xa0, 0x28, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0x3, 0x1}, {0x7, 0x10}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8c2a}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7fffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xb}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0xac, 0x2}}]}, 0xa0}}, 0x0)

4.823381696s ago: executing program 0 (id=1285):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.423932071s ago: executing program 3 (id=1288):
r0 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

4.254869179s ago: executing program 3 (id=1289):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = userfaultfd(0x80801)
close(r3)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})

3.986112347s ago: executing program 6 (id=1290):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
read$eventfd(r5, &(0x7f0000000040), 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r6 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@int={0xffffff98, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x2e, 0x6}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x401}]}]}}, &(0x7f0000000640)=""/4096, 0x56, 0x1000, 0x0, 0x4, 0x10000}, 0x28)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x4, 0x0, 0x5, 0x7, 0x0, 0x80000000, 0x0, [@sadb_address={0x5, 0x5, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e23, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}]}, 0x38}, 0x1, 0x7}, 0x0)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40186f40, &(0x7f0000000440)=0x20000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x5d, &(0x7f0000000540)=""/93, 0x40f00, 0x37, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1555a}, 0x94)

2.639014003s ago: executing program 3 (id=1291):
mkdirat(0xffffffffffffff9c, 0x0, 0x168)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x2000000, 0x0)
lseek(r1, 0xfffffffffffffffb, 0x1)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r3, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fce9ffff00000000000000008500000041000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r7, 0xffffffffffffffff, 0x9, 0x1008, 0x0, @void, @value=r9, @void, @void, r6}, 0x20)

2.513519338s ago: executing program 6 (id=1292):
r0 = socket$pptp(0x18, 0x1, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1000001c, 0x27, 0x2, 0x372, 0x0, r6}, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0)
ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0)

2.513083256s ago: executing program 1 (id=1293):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x400000003e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000680)=""/229, 0xe5, 0x1, 0x26}, @fda={0x66646185, 0x8, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

2.418594853s ago: executing program 5 (id=1294):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x300, 0x6040000})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0xffffffffffffffc5, 0x2, r7})

1.39847609s ago: executing program 3 (id=1295):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x1000, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0xfffffffd, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
read$hiddev(r2, 0x0, 0x0)

1.280059261s ago: executing program 1 (id=1296):
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8c", 0x60}], 0x1, 0x0, 0x0, 0x22004800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef", 0x5a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e145755626689", 0x14}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000700000000000000000000080200000000000000000000030000dcb20100000002000000000000000c0000000000060000000d0000000000000a05000000000030615f30"], &(0x7f0000000600)=""/208, 0x67, 0xd0, 0x1, 0x4}, 0x28)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000980)={@multicast1, @rand_addr, <r4=>0x0}, &(0x7f0000000500)=0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r3, {0x10}}, '\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r3}, 0x20)
r7 = socket(0x1e, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = dup3(r7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="b708000000000000fb8af8ff00000000b7080800aa0010007b8af0ff00000000bfa1000000003b41c85025c6720f000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082"], &(0x7f0000000000)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x11, '\x00', r4, 0x0, r8}, 0x94)
r9 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

579.226746ms ago: executing program 0 (id=1297):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x80, 0x10001, 0x6})

494.090049ms ago: executing program 1 (id=1298):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x5, &(0x7f00000002c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800)
setfsuid(0xee00)
syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x1608e2)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x1, 0x73, 0xffe00003}, {0x6, 0x83, 0x6}]}, 0x10)
sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40044000)

413.65015ms ago: executing program 0 (id=1299):
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040))
syz_open_dev$vim2m(&(0x7f0000000540), 0x4, 0x2)
syz_usb_connect(0x5, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0x5, 0x3c, 0xea, 0x40, 0x421, 0x4d8, 0xeb28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xa, 0x80, 0x3, "", [{{0x9, 0x4, 0xcd, 0x81, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

355.95415ms ago: executing program 5 (id=1300):
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2507000000080004006401010108000300ffffffff14000200ff020000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044014)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200080c0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r4, 0x4, 0x123, 0x234}, 0x14}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc801}, 0x80)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=@newtclass={0xa0, 0x28, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0x3, 0x1}, {0x7, 0x10}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8c2a}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xa}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7fffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xb}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0xac, 0x2}}]}, 0xa0}}, 0x0)

349.205245ms ago: executing program 1 (id=1301):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10)
bind$tipc(r1, 0x0, 0x0)

157.944629ms ago: executing program 1 (id=1302):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x80000027)
fcntl$setown(r2, 0x8, r0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

0s ago: executing program 1 (id=1303):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
poll(0x0, 0x0, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x6000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x29, 0x0, 0x0}, 0x108)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000025c0)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xf0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="a8b939a75e6faba36b7b6597e7e7", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000)

kernel console output (not intermixed with test programs):

13.983403][ T6078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  114.342333][   T30] audit: type=1400 audit(1784858577.990:270): avc:  denied  { name_bind } for  pid=6093 comm="syz.2.95" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  114.578174][   T30] audit: type=1400 audit(1784858577.990:271): avc:  denied  { connect } for  pid=6093 comm="syz.2.95" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  114.768852][   T30] audit: type=1400 audit(1784858578.000:272): avc:  denied  { name_connect } for  pid=6093 comm="syz.2.95" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  116.142278][ T5343] usb 1-1: probing VID:PID(0424:012C)   
[  116.157382][ T5343] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0C
[  116.164382][ T5343] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  116.190811][ T5343] vub300 1-1:127.138: probe with driver vub300 failed with error -22
[  117.203552][ T5343] usb 1-1: USB disconnect, device number 6
[  117.255660][   T30] audit: type=1400 audit(1784858580.940:273): avc:  denied  { create } for  pid=6109 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.801018][   T30] audit: type=1400 audit(1784858580.960:274): avc:  denied  { setopt } for  pid=6109 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.868085][   T30] audit: type=1400 audit(1784858580.960:275): avc:  denied  { write } for  pid=6109 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  117.924846][   T30] audit: type=1400 audit(1784858580.960:276): avc:  denied  { read } for  pid=6109 comm="syz.1.106" lport=59210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  120.064768][   T30] audit: type=1400 audit(1784858583.210:277): avc:  denied  { connect } for  pid=6122 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  120.859214][   T30] audit: type=1400 audit(1784858584.550:278): avc:  denied  { bind } for  pid=6130 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  120.892287][ T6131] Bluetooth: MGMT ver 1.23
[  120.929094][ T6131] Bluetooth: hci0: invalid length 0, exp 2 for type 4
[  120.940281][   T30] audit: type=1400 audit(1784858584.580:279): avc:  denied  { write } for  pid=6130 comm="syz.2.116" path="socket:[9772]" dev="sockfs" ino=9772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  121.168931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  122.129856][   T30] audit: type=1400 audit(1784858585.820:280): avc:  denied  { setopt } for  pid=6136 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  122.170289][   T30] audit: type=1400 audit(1784858585.820:281): avc:  denied  { write } for  pid=6136 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  123.150679][   T30] audit: type=1400 audit(1784858586.840:282): avc:  denied  { read } for  pid=6148 comm="syz.4.121" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  123.319421][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  123.675348][   T30] audit: type=1400 audit(1784858586.840:283): avc:  denied  { open } for  pid=6148 comm="syz.4.121" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  123.708798][   T30] audit: type=1400 audit(1784858586.840:284): avc:  denied  { ioctl } for  pid=6148 comm="syz.4.121" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  125.774506][   T30] audit: type=1400 audit(1784858589.450:285): avc:  denied  { shutdown } for  pid=6164 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  126.448896][   T30] audit: type=1400 audit(1784858590.110:286): avc:  denied  { write } for  pid=6170 comm="syz.1.130" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  126.705430][   T30] audit: type=1400 audit(1784858590.110:287): avc:  denied  { open } for  pid=6170 comm="syz.1.130" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  126.849799][   T30] audit: type=1400 audit(1784858590.130:288): avc:  denied  { ioctl } for  pid=6170 comm="syz.1.130" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  127.198882][   T30] audit: type=1400 audit(1784858590.880:289): avc:  denied  { name_bind } for  pid=6184 comm="syz.0.132" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  129.692528][   T30] audit: type=1400 audit(1784858593.370:290): avc:  denied  { write } for  pid=6208 comm="syz.3.140" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  130.040946][   T30] audit: type=1400 audit(1784858593.720:291): avc:  denied  { ioctl } for  pid=6210 comm="syz.1.141" path="socket:[9977]" dev="sockfs" ino=9977 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  130.628053][ T6219] futex_wake_op: syz.3.143 tries to shift op by 144; fix this program
[  130.670886][   T30] audit: type=1400 audit(1784858594.330:292): avc:  denied  { write } for  pid=6216 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  131.256598][   T30] audit: type=1400 audit(1784858594.940:293): avc:  denied  { append } for  pid=6222 comm="syz.4.144" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  131.500705][   T30] audit: type=1400 audit(1784858595.180:294): avc:  denied  { sqpoll } for  pid=6225 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  131.894896][   T30] audit: type=1400 audit(1784858595.580:295): avc:  denied  { map } for  pid=6225 comm="syz.1.146" path="socket:[9213]" dev="sockfs" ino=9213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  131.957471][   T30] audit: type=1400 audit(1784858595.640:296): avc:  denied  { read write } for  pid=6231 comm="syz.0.138" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  131.985332][   T30] audit: type=1400 audit(1784858595.640:297): avc:  denied  { open } for  pid=6231 comm="syz.0.138" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  132.018534][   T30] audit: type=1400 audit(1784858595.650:298): avc:  denied  { append } for  pid=6232 comm="syz.3.148" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  132.226544][   T30] audit: type=1400 audit(1784858595.910:299): avc:  denied  { write } for  pid=6232 comm="syz.3.148" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.385772][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  133.393258][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  133.810648][ T5749] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  133.960867][ T6260] can0: slcan on ttyS3.
[  134.381303][ T6260] can0 (unregistered): slcan off ttyS3.
[  134.433175][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.481694][ T5749] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  134.504802][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.600985][ T5749] usb 2-1: config 0 descriptor??
[  135.327266][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 30 seconds
[  135.341940][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 30 seconds
[  135.353066][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 30 seconds
[  135.365205][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 30 seconds
[  135.392687][ T5749] usbhid 2-1:0.0: can't add hid device: -71
[  135.417941][ T5749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  135.472892][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  135.472908][   T30] audit: type=1400 audit(1784858599.160:306): avc:  denied  { ioctl } for  pid=6273 comm="syz.3.164" path="socket:[10135]" dev="sockfs" ino=10135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  136.011243][ T6275] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6276] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6275]
[  136.098567][ T6275] Zero length message leads to an empty skb
[  136.531879][ T5749] usb 2-1: USB disconnect, device number 4
[  137.764183][   T30] audit: type=1400 audit(1784858601.450:307): avc:  denied  { create } for  pid=6281 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  138.103167][ T6289] Bluetooth: MGMT ver 1.23
[  138.433244][   T30] audit: type=1400 audit(1784858602.120:308): avc:  denied  { append } for  pid=6290 comm="syz.4.169" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  138.906096][ T6303] netlink: 'syz.1.173': attribute type 1 has an invalid length.
[  139.443503][ T6313] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  139.459199][ T6313] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  139.476363][ T6313] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  139.499816][ T6313] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  139.551933][ T6313] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  139.918481][   T30] audit: type=1400 audit(1784858603.100:309): avc:  denied  { create } for  pid=6310 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  140.031623][   T30] audit: type=1400 audit(1784858603.110:310): avc:  denied  { write } for  pid=6310 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  140.173451][   T30] audit: type=1400 audit(1784858603.750:311): avc:  denied  { mounton } for  pid=6315 comm="syz.4.178" path="/42/bus" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  140.295271][   T30] audit: type=1400 audit(1784858603.790:312): avc:  denied  { read write } for  pid=6319 comm="syz.0.168" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  140.393791][   T30] audit: type=1400 audit(1784858603.790:313): avc:  denied  { open } for  pid=6319 comm="syz.0.168" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  140.482312][   T30] audit: type=1400 audit(1784858603.850:314): avc:  denied  { map } for  pid=6319 comm="syz.0.168" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  140.585184][   T30] audit: type=1400 audit(1784858603.850:315): avc:  denied  { execute } for  pid=6319 comm="syz.0.168" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  140.638635][   T30] audit: type=1400 audit(1784858603.900:316): avc:  denied  { unlink } for  pid=6315 comm="syz.4.178" name="#1" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  140.943599][   T30] audit: type=1400 audit(1784858603.950:317): avc:  denied  { ioctl } for  pid=6319 comm="syz.0.168" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  141.295932][   T30] audit: type=1400 audit(1784858604.070:318): avc:  denied  { mount } for  pid=6315 comm="syz.4.178" name="/" dev="overlay" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  141.318421][   T30] audit: type=1400 audit(1784858604.140:319): avc:  denied  { execute } for  pid=6322 comm="syz.3.180" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  141.386215][   T30] audit: type=1400 audit(1784858604.200:320): avc:  denied  { unmount } for  pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  141.476505][   T30] audit: type=1400 audit(1784858604.310:321): avc:  denied  { mount } for  pid=6331 comm="syz.1.184" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  141.779495][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'.
[  141.838004][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[  141.879008][ T6351] bridge_slave_1: left allmulticast mode
[  141.885858][ T6351] bridge_slave_1: left promiscuous mode
[  141.909918][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.997133][ T6351] bridge_slave_0: left allmulticast mode
[  142.089369][ T6351] bridge_slave_0: left promiscuous mode
[  142.146368][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.246569][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'.
[  142.276222][   T30] audit: type=1400 audit(1784858605.930:322): avc:  denied  { bind } for  pid=6354 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  142.623985][   T30] audit: type=1400 audit(1784858605.930:323): avc:  denied  { setopt } for  pid=6354 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  142.918616][ T5732] Process accounting resumed
[  144.155228][ T6363] Process accounting resumed
[  146.142265][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  146.142320][   T30] audit: type=1400 audit(1784858609.810:329): avc:  denied  { setopt } for  pid=6392 comm="syz.0.201" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  146.532149][   T30] audit: type=1400 audit(1784858609.820:330): avc:  denied  { bind } for  pid=6392 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  146.561101][   T30] audit: type=1400 audit(1784858609.820:331): avc:  denied  { connect } for  pid=6392 comm="syz.0.201" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  146.803584][ T6406] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  148.219121][   T30] audit: type=1400 audit(1784858611.910:332): avc:  denied  { create } for  pid=6423 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  148.709904][ T5749] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  148.927003][ T5749] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  148.945327][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  148.982162][ T5749] usb 3-1: Product: syz
[  148.995793][ T5749] usb 3-1: SerialNumber: syz
[  149.065366][ T5749] usb 3-1: config 0 descriptor??
[  149.300851][ T5749] hso 3-1:0.0: Failed to find BULK eps
[  149.470494][ T6427] xt_CT: No such helper "pptp"
[  149.488852][ T5749] usb 3-1: USB disconnect, device number 2
[  150.996365][ T6456] input: syz0 as /devices/virtual/input/input6
[  151.020006][ T5807] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  151.478809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  152.145269][ T5807] usb 5-1: Using ep0 maxpacket: 16
[  152.169684][ T5807] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  152.207308][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.233618][ T5807] usb 5-1: Product: syz
[  153.228876][ T5807] usb 5-1: Manufacturer: syz
[  153.254312][ T5807] usb 5-1: SerialNumber: syz
[  153.285892][ T5807] usb 5-1: config 0 descriptor??
[  153.337582][ T5807] gspca_main: spca508-2.14.0 probing 041e:4018
[  153.378615][ T5807] gspca_spca508: reg_read err -71
[  153.414972][ T5807] gspca_spca508: reg_read err -71
[  153.446632][ T5807] gspca_spca508: reg_read err -71
[  153.480597][ T5807] gspca_spca508: reg_read err -71
[  153.502575][ T5807] gspca_spca508: reg_read err -71
[  153.519390][ T5807] gspca_spca508: reg write: error -71
[  153.538826][ T5807] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  153.593187][ T5807] usb 5-1: USB disconnect, device number 2
[  154.748917][   T30] audit: type=1400 audit(1784858618.430:333): avc:  denied  { setopt } for  pid=6484 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  157.518080][ T6496] xt_CT: No such helper "pptp"
[  157.825924][   T30] audit: type=1400 audit(1784858621.510:334): avc:  denied  { read write } for  pid=6515 comm="syz.2.237" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  157.939802][   T30] audit: type=1400 audit(1784858621.510:335): avc:  denied  { open } for  pid=6515 comm="syz.2.237" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  158.158814][ T5749] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.456308][ T5749] usb 1-1: Using ep0 maxpacket: 16
[  158.635554][ T5749] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  158.669593][ T5749] usb 1-1: config 0 has no interface number 0
[  158.696119][ T5749] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  158.744126][ T5749] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  158.861508][ T5749] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  158.876605][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  158.927368][ T5749] usb 1-1: Manufacturer: syz
[  159.913227][   T30] audit: type=1400 audit(1784858623.080:336): avc:  denied  { read } for  pid=6525 comm="syz.4.239" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  160.007610][ T5749] usb 1-1: SerialNumber: syz
[  160.055672][ T5749] usb 1-1: config 0 descriptor??
[  160.306710][ T5807] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  160.345899][ T6518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.439152][ T5749] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71
[  160.474014][ T5749] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  160.545115][ T5807] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  160.568994][ T5749] usb 1-1: USB disconnect, device number 7
[  160.618504][ T5807] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  160.678496][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.765161][ T5807] gspca_main: stv0680-2.14.0 probing 041e:4007
[  161.871678][ T5807] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  161.992231][ T6546] Illegal XDP return value 4294967274 on prog  (id 7) dev syz_tun, expect packet loss!
[  162.085357][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  162.115840][ T5807] stv0680 2-1:4.0: last error: 86,  command = 0x0
[  162.150323][ T5807] usb 2-1: USB disconnect, device number 5
[  164.600026][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'.
[  165.392804][ T6582] kAFS: unable to lookup cell '�'
[  165.460812][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 60 seconds
[  165.471642][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 60 seconds
[  165.483258][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 60 seconds
[  165.494354][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 60 seconds
[  166.838748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  167.022575][   T30] audit: type=1400 audit(1784858630.250:337): avc:  denied  { setopt } for  pid=6592 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  167.894204][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.668200][   T30] audit: type=1400 audit(1784858633.340:338): avc:  denied  { create } for  pid=6610 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  169.734443][   T30] audit: type=1400 audit(1784858633.400:339): avc:  denied  { getopt } for  pid=6610 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  175.469343][   T30] audit: type=1400 audit(1784858638.800:340): avc:  denied  { execute } for  pid=6652 comm="syz.4.276" path="/58/memory.current" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  179.832137][   T30] audit: type=1400 audit(1784858642.900:341): avc:  denied  { write } for  pid=6688 comm="syz.2.284" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  180.839541][ T5708] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  181.040798][ T5708] usb 4-1: Using ep0 maxpacket: 32
[  181.097810][ T5708] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  181.148422][ T5708] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  181.182950][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.224031][ T5708] usb 4-1: Product: syz
[  181.246652][ T5708] usb 4-1: Manufacturer: syz
[  181.263562][ T5708] usb 4-1: SerialNumber: syz
[  181.321958][ T5708] snd-ua101 4-1:1.1: sample format descriptor not found
[  181.362602][ T5708] snd-ua101 4-1:1.0: invalid num_altsetting
[  181.610532][ T5708] usb 4-1: USB disconnect, device number 4
[  181.645103][   T30] audit: type=1326 audit(1784858645.330:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  181.756900][   T30] audit: type=1326 audit(1784858645.330:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  181.863538][   T30] audit: type=1326 audit(1784858645.400:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  182.035673][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'.
[  182.045239][ T6731] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  182.133973][ T6728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6728 comm=syz.0.291
[  182.937881][   T30] audit: type=1326 audit(1784858645.400:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  183.060361][   T30] audit: type=1326 audit(1784858645.410:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cdf75e6ce code=0x7ffc0000
[  183.684783][   T30] audit: type=1326 audit(1784858645.410:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9cdf79f197 code=0x7ffc0000
[  183.787381][   T30] audit: type=1326 audit(1784858645.410:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  183.861523][   T30] audit: type=1326 audit(1784858645.410:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9cdf79f197 code=0x7ffc0000
[  184.085733][   T30] audit: type=1326 audit(1784858645.410:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9cdf75e6ce code=0x7ffc0000
[  184.138824][   T30] audit: type=1326 audit(1784858645.410:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  185.952687][ T6768] netlink: 92 bytes leftover after parsing attributes in process `syz.4.309'.
[  188.548903][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  188.702737][ T6789] binder: 6788:6789 ioctl c0046209 100000000000000 returned -22
[  194.337290][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.344503][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  194.578934][ T6835] binder: 6833:6835 ioctl c0046209 100000000000000 returned -22
[  195.409007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  195.745216][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 90 seconds
[  195.756812][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 90 seconds
[  195.767787][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 90 seconds
[  195.779115][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 90 seconds
[  197.766942][ T5807] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  197.955390][ T5807] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  197.976015][ T5807] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  198.004662][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.055011][ T5807] gspca_main: stv0680-2.14.0 probing 041e:4007
[  198.332064][ T6867] netlink: 'syz.3.346': attribute type 3 has an invalid length.
[  198.340358][ T6867] netlink: 3 bytes leftover after parsing attributes in process `syz.3.346'.
[  198.398797][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  198.398835][   T30] audit: type=1400 audit(1784858662.040:370): avc:  denied  { write } for  pid=6864 comm="syz.3.346" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  199.274221][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  199.295130][ T5807] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  199.311876][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  199.322620][ T5807] stv0680 5-1:4.0: last error: 0,  command = 0x0
[  199.545227][ T5807] usb 5-1: USB disconnect, device number 3
[  200.754964][ T6877] binder: 6876:6877 ioctl c0046209 100000000000000 returned -22
[  201.459174][ T6883] binder: 6871:6883 ioctl c018620c 2000000004c0 returned -22
[  201.542592][ T4926] Bluetooth: hci2: command 0x0406 tx timeout
[  201.552626][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  201.553297][ T5617] Bluetooth: hci1: command 0x0406 tx timeout
[  201.565738][ T5626] Bluetooth: hci0: command 0x0401 tx timeout
[  202.124329][ T6889] sg_write: data in/out 491676/136 bytes for SCSI command 0x0-- guessing data in;
[  202.124329][ T6889]    program syz.2.352 not setting count and/or reply_len properly
[  205.180628][ T5708] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  205.370536][ T5708] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  205.406705][ T5708] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  205.443817][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.501917][ T5708] gspca_main: stv0680-2.14.0 probing 041e:4007
[  206.109174][ T6918] binder: 6916:6918 ioctl c0046209 100000000000000 returned -22
[  206.590016][ T5708] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  206.608986][ T5708] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  206.645875][ T5708] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  206.678961][ T5708] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  206.706004][ T5708] usb 3-1: USB disconnect, device number 3
[  208.573254][ T6940] serio: Serial port ptm0
[  208.637865][ T6940] netlink: 64 bytes leftover after parsing attributes in process `syz.2.371'.
[  209.458880][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  211.075878][ T6958] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  211.311980][    T9] usb 5-1: device descriptor read/all, error -71
[  212.109172][ T6968] binder: 6967:6968 ioctl c0046209 100000000000000 returned -22
[  213.261821][ T6974] bridge1: entered promiscuous mode
[  213.315906][   T30] audit: type=1400 audit(1784858676.940:371): avc:  denied  { read } for  pid=6972 comm="syz.3.377" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  213.328927][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  213.494040][   T30] audit: type=1400 audit(1784858676.940:372): avc:  denied  { ioctl } for  pid=6972 comm="syz.3.377" path="socket:[12457]" dev="sockfs" ino=12457 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  214.248837][   T30] audit: type=1400 audit(1784858677.660:373): avc:  denied  { bind } for  pid=6983 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  214.626598][   T30] audit: type=1400 audit(1784858677.660:374): avc:  denied  { read } for  pid=6983 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  215.187574][   T30] audit: type=1400 audit(1784858678.870:375): avc:  denied  { ioctl } for  pid=6988 comm="syz.2.386" path="cgroup:[4026532804]" dev="nsfs" ino=4026532804 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  215.224630][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'.
[  215.271214][ T6990] macvtap1: entered promiscuous mode
[  215.279402][ T6990] dummy0: entered promiscuous mode
[  215.305948][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'.
[  215.345148][ T6990] macvtap1: entered allmulticast mode
[  215.362799][ T6990] dummy0: entered allmulticast mode
[  215.436458][ T6991] dummy0: left allmulticast mode
[  215.473138][ T6991] macvtap1: left promiscuous mode
[  215.488529][ T6991] macvtap1: left allmulticast mode
[  215.549183][ T5732] dummy0: left promiscuous mode
[  220.058987][ T7028] cifs: Unknown parameter '�ۛ�Q��
[  220.058987][ T7028] @�"2a�ch}#��
[  220.058987][ T7028] �[���b����IT�&��:���"����
/��嶎4,�Zz-#F�<��]%gC��
[  220.058987][ T7028] S�Ș��7��@$8���!YJ���9Tw8���}���|'
[  220.592536][   T30] audit: type=1800 audit(1784858684.150:376): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.393" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  222.268133][   T30] audit: type=1400 audit(1784858684.320:377): avc:  denied  { map } for  pid=7027 comm="syz.3.393" path="/proc/184/task/186/oom_adj" dev="proc" ino=13326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  222.467823][   T30] audit: type=1400 audit(1784858684.320:378): avc:  denied  { execute } for  pid=7027 comm="syz.3.393" path="/proc/184/task/186/oom_adj" dev="proc" ino=13326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  226.645702][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 120 seconds
[  226.656979][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 120 seconds
[  226.668564][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 120 seconds
[  226.681984][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 120 seconds
[  226.772602][   T30] audit: type=1400 audit(1784858690.460:379): avc:  denied  { create } for  pid=7061 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  226.886072][   T30] audit: type=1400 audit(1784858690.460:380): avc:  denied  { write } for  pid=7061 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  230.350238][ T7079] binder: 7070:7079 ioctl c018620c 2000000004c0 returned -22
[  232.986785][ T7105] binder: 7104:7105 ioctl c018620c 2000000004c0 returned -22
[  234.556027][ T7092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.940374][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  234.950334][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  234.958602][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  234.970911][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  234.978418][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.092354][ T7121] capability: warning: `syz.2.419' uses 32-bit capabilities (legacy support in use)
[  235.282435][   T30] audit: type=1400 audit(1784858698.970:381): avc:  denied  { connect } for  pid=7120 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  235.831603][ T7131] bridge2: entered promiscuous mode
[  235.959432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  236.369009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  237.068988][ T5621] Bluetooth: hci5: command tx timeout
[  237.623871][ T7143] binder: 7142:7143 ioctl c018620c 2000000004c0 returned -22
[  238.437116][   T73] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.460409][ T7152] binder: 7151:7152 ioctl c018620c 2000000004c0 returned -22
[  239.547836][ T5621] Bluetooth: hci5: command tx timeout
[  239.579870][   T73] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.088439][   T73] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.511276][   T73] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.619277][ T5621] Bluetooth: hci5: command tx timeout
[  241.668963][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.709259][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.735696][ T7117] bridge_slave_0: entered allmulticast mode
[  241.767713][ T7117] bridge_slave_0: entered promiscuous mode
[  241.822472][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.863002][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.894941][ T7117] bridge_slave_1: entered allmulticast mode
[  241.950182][ T7117] bridge_slave_1: entered promiscuous mode
[  242.266875][ T7198] binder: 7197:7198 ioctl c018620c 2000000004c0 returned -22
[  242.848489][ T7117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.940425][ T7117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.338616][ T7117] team0: Port device team_slave_0 added
[  243.392323][ T7117] team0: Port device team_slave_1 added
[  243.514903][ T7205] binder: 7204:7205 ioctl c018620c 2000000004c0 returned -22
[  243.663526][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.699142][ T5621] Bluetooth: hci5: command tx timeout
[  243.716958][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.766776][ T7117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.857864][   T30] audit: type=1400 audit(1784858707.540:382): avc:  denied  { search } for  pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  243.971408][ T7117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.994505][ T7217] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  244.004742][ T7117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.005554][   T30] audit: type=1400 audit(1784858707.540:383): avc:  denied  { search } for  pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  244.293152][ T7218] sg_write: data in/out 491676/136 bytes for SCSI command 0x0-- guessing data in;
[  244.293152][ T7218]    program syz.2.439 not setting count and/or reply_len properly
[  244.323619][ T7117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.340294][   T30] audit: type=1400 audit(1784858707.540:384): avc:  denied  { search } for  pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  244.465787][   T30] audit: type=1400 audit(1784858707.540:385): avc:  denied  { read } for  pid=5272 comm="dhcpcd" name="n31" dev="tmpfs" ino=3301 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  244.538546][   T30] audit: type=1400 audit(1784858707.540:386): avc:  denied  { open } for  pid=5272 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3301 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  244.620321][   T30] audit: type=1400 audit(1784858707.540:387): avc:  denied  { getattr } for  pid=5272 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=3301 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  244.650880][   T73] bridge_slave_1: left allmulticast mode
[  244.685369][   T73] bridge_slave_1: left promiscuous mode
[  244.721313][   T73] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.862285][   T73] bridge_slave_0: left allmulticast mode
[  244.904442][   T73] bridge_slave_0: left promiscuous mode
[  245.054178][   T73] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.626419][   T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.684488][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'.
[  248.739803][   T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.802017][   T73] bond0 (unregistering): Released all slaves
[  249.595804][ T7117] hsr_slave_0: entered promiscuous mode
[  249.630266][   T30] audit: type=1400 audit(1784858713.310:388): avc:  denied  { read } for  pid=7267 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.656112][ T7117] hsr_slave_1: entered promiscuous mode
[  249.708519][   T30] audit: type=1400 audit(1784858713.310:389): avc:  denied  { read open } for  pid=7267 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  249.767115][ T7117] debugfs: 'hsr0' already exists in 'hsr'
[  249.809902][ T7117] Cannot create hsr debugfs directory
[  249.845459][   T30] audit: type=1400 audit(1784858713.310:390): avc:  denied  { getattr } for  pid=7267 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  251.246114][   T30] audit: type=1326 audit(1784858714.580:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  251.484740][   T30] audit: type=1326 audit(1784858714.580:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  251.589729][   T30] audit: type=1326 audit(1784858714.590:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  251.661727][   T30] audit: type=1326 audit(1784858714.610:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  251.754453][   T30] audit: type=1326 audit(1784858714.610:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  251.872349][   T30] audit: type=1326 audit(1784858714.590:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  251.982261][   T30] audit: type=1326 audit(1784858714.760:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.1.450" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9cdf79de99 code=0x7ffc0000
[  253.004508][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  253.316560][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  253.727312][   T73] hsr_slave_0: left promiscuous mode
[  253.802579][   T73] hsr_slave_1: left promiscuous mode
[  253.821644][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.864558][   T73] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.899317][   T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.908434][   T73] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.953142][   T73] veth1_macvtap: left promiscuous mode
[  253.961092][   T73] veth0_macvtap: left promiscuous mode
[  253.969188][   T73] veth1_vlan: left promiscuous mode
[  253.975171][   T73] veth0_vlan: left promiscuous mode
[  255.699980][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.708729][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.820954][   T73] team0 (unregistering): Port device team_slave_1 removed
[  255.871720][ T7314] binder: 7306:7314 ioctl c018620c 2000000004c0 returned -22
[  255.944650][   T73] team0 (unregistering): Port device team_slave_0 removed
[  256.990056][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 150 seconds
[  257.001168][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 150 seconds
[  257.012155][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 150 seconds
[  257.023119][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 150 seconds
[  257.862899][ T7117] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  258.697760][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  258.727584][ T7117] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  258.845796][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  259.496434][ T7117] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  260.141323][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  260.223677][ T7117] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  260.727221][ T7117] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  261.373902][ T7117] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.454222][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  261.454237][   T30] audit: type=1400 audit(1784858725.140:445): avc:  denied  { write } for  pid=7341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  261.489759][ T7117] 8021q: adding VLAN 0 to HW filter on device team0
[  261.524757][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.531902][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.606231][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.613400][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.947894][   T30] audit: type=1400 audit(1784858725.620:446): avc:  denied  { write } for  pid=7380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  262.176008][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  262.195727][ T7381] binder: 7369:7381 ioctl c018620c 2000000004c0 returned -22
[  263.723100][   T30] audit: type=1400 audit(1784858727.400:447): avc:  denied  { write } for  pid=7391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  263.837665][ T7117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.550031][   T30] audit: type=1400 audit(1784858728.240:448): avc:  denied  { write } for  pid=7419 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  265.416653][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[  266.829918][ T7117] veth0_vlan: entered promiscuous mode
[  266.911550][ T7117] veth1_vlan: entered promiscuous mode
[  267.040109][ T7117] veth0_macvtap: entered promiscuous mode
[  267.079645][ T7117] veth1_macvtap: entered promiscuous mode
[  267.174941][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.254872][ T7117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.385587][  T766] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.433162][  T766] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.489823][  T766] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.571110][   T30] audit: type=1400 audit(1784858731.250:449): avc:  denied  { write } for  pid=7440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.410232][  T766] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.572495][   T30] audit: type=1400 audit(1784858732.260:450): avc:  denied  { write } for  pid=7462 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  268.842660][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.880575][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.924445][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[  269.021677][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.043161][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.152410][   T30] audit: type=1400 audit(1784858732.840:451): avc:  denied  { mounton } for  pid=7117 comm="syz-executor" path="/root/syzkaller.SPVGAj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  273.577036][ T7491] binder: 7487:7491 ioctl c018620c 2000000004c0 returned -22
[  283.883749][   T30] audit: type=1400 audit(1784858747.560:452): avc:  denied  { write } for  pid=7549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.192153][   T30] audit: type=1400 audit(1784858747.880:453): avc:  denied  { write } for  pid=7589 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  284.788822][ T7595] binder: 7591:7595 ioctl c018620c 2000000004c0 returned -22
[  287.079200][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 180 seconds
[  287.090137][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 180 seconds
[  287.128074][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 180 seconds
[  287.184016][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 180 seconds
[  288.501605][   T30] audit: type=1400 audit(1784858752.170:454): avc:  denied  { write } for  pid=7599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  288.982351][   T30] audit: type=1400 audit(1784858752.660:455): avc:  denied  { write } for  pid=7634 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.210898][   T30] audit: type=1400 audit(1784858755.900:456): avc:  denied  { write } for  pid=7645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.392112][ T7663] binder: 7661:7663 ioctl c018620c 2000000004c0 returned -22
[  293.479086][   T30] audit: type=1400 audit(1784858757.160:457): avc:  denied  { write } for  pid=7674 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  295.648365][   T30] audit: type=1400 audit(1784858759.330:458): avc:  denied  { create } for  pid=7696 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  295.890124][ T7699] netlink: 'syz.3.539': attribute type 10 has an invalid length.
[  295.897923][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.539'.
[  295.908822][ T7699] bridge0: port 3(dummy0) entered blocking state
[  295.915659][ T7699] bridge0: port 3(dummy0) entered disabled state
[  295.923769][ T7699] dummy0: entered allmulticast mode
[  295.937703][ T7699] dummy0: entered promiscuous mode
[  295.946339][ T7699] bridge0: port 3(dummy0) entered blocking state
[  295.952854][ T7699] bridge0: port 3(dummy0) entered forwarding state
[  296.275878][   T30] audit: type=1400 audit(1784858759.910:459): avc:  denied  { write } for  pid=7679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  296.485470][   T30] audit: type=1400 audit(1784858760.170:460): avc:  denied  { write } for  pid=7702 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  296.939516][ T5732] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  297.113959][ T5732] usb 4-1: Using ep0 maxpacket: 8
[  297.136552][ T5732] usb 4-1: unable to get BOS descriptor or descriptor too short
[  297.173577][ T5732] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  297.202811][ T5732] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  297.226312][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.260059][ T5732] usb 4-1: Product: syz
[  297.293373][ T5732] usb 4-1: Manufacturer: syz
[  297.315795][ T5732] usb 4-1: SerialNumber: syz
[  297.635515][ T5732] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  297.882201][ T5732] usb 4-1: USB disconnect, device number 5
[  298.060093][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.640562][ T7743] netlink: 'syz.5.551': attribute type 3 has an invalid length.
[  303.648774][ T7743] netlink: 3 bytes leftover after parsing attributes in process `syz.5.551'.
[  308.509441][ T7777] binder: 7756:7777 ioctl c018620c 2000000004c0 returned -22
[  309.907776][ T7787] binder: 7786:7787 ioctl c018620c 0 returned -14
[  314.665629][ T7813] netlink: 'syz.1.564': attribute type 3 has an invalid length.
[  314.673379][ T7813] netlink: 3 bytes leftover after parsing attributes in process `syz.1.564'.
[  314.779397][   T30] audit: type=1400 audit(1784858778.460:461): avc:  denied  { setopt } for  pid=7809 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  317.308461][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  317.317267][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  317.397413][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 210 seconds
[  317.410553][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 210 seconds
[  317.422879][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 210 seconds
[  318.580178][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 210 seconds
[  318.773257][ T7856] Bluetooth: hci0: unsupported parameter 255
[  318.783969][ T7856] Bluetooth: hci0: unsupported parameter 255
[  319.098729][ T7863] netlink: 'syz.5.588': attribute type 3 has an invalid length.
[  319.106427][ T7863] netlink: 3 bytes leftover after parsing attributes in process `syz.5.588'.
[  320.750309][   T30] audit: type=1400 audit(1784858784.420:462): avc:  denied  { create } for  pid=7871 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  320.811488][   T30] audit: type=1400 audit(1784858784.420:463): avc:  denied  { bind } for  pid=7871 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  320.877949][   T30] audit: type=1400 audit(1784858784.420:464): avc:  denied  { listen } for  pid=7871 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  320.962961][   T30] audit: type=1400 audit(1784858784.420:465): avc:  denied  { accept } for  pid=7871 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  321.203269][ T7876] sg_write: data in/out 306688/136 bytes for SCSI command 0x0-- guessing data in;
[  321.203269][ T7876]    program syz.0.593 not setting count and/or reply_len properly
[  321.534851][ T5621] Bluetooth: hci2: Dropping invalid advertising data
[  321.543595][ T5621] Bluetooth: hci2: Malformed LE Event: 0x02
[  324.855757][   T30] audit: type=1400 audit(1784858788.540:466): avc:  denied  { create } for  pid=7911 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  325.226898][ T7913] binder: 7906:7913 ioctl c018620c 2000000004c0 returned -22
[  328.987538][ T5621] Bluetooth: hci2: Dropping invalid advertising data
[  328.994798][ T5621] Bluetooth: hci2: Malformed LE Event: 0x02
[  336.139056][   T30] audit: type=1400 audit(1784858799.310:467): avc:  denied  { kexec_image_load } for  pid=7986 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  337.579327][ T8000] mmap: syz.3.633 (8000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  339.442679][ T8008] netlink: 88 bytes leftover after parsing attributes in process `syz.3.636'.
[  339.463824][   T30] audit: type=1400 audit(1784858803.120:468): avc:  denied  { bind } for  pid=8005 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  339.948768][   T30] audit: type=1400 audit(1784858803.120:469): avc:  denied  { setopt } for  pid=8005 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  340.109247][ T5732] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  340.289214][ T5732] usb 4-1: Using ep0 maxpacket: 8
[  340.314570][ T5732] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  340.352873][ T5732] usb 4-1: config 0 has no interface number 0
[  340.377517][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  340.479580][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  340.491493][ T5732] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  340.503470][ T5732] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  340.517511][   T30] audit: type=1400 audit(1784858804.190:470): avc:  denied  { mounton } for  pid=8013 comm="syz.1.638" path="/147/file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  340.555705][ T5732] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  340.588111][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.624067][ T5732] usb 4-1: config 0 descriptor??
[  340.715046][ T5732] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  342.544887][ T5708] usb 4-1: USB disconnect, device number 6
[  342.559682][ T5708] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  345.668826][ T5749] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  346.888741][ T5749] usb 2-1: Using ep0 maxpacket: 8
[  346.908536][ T5749] usb 2-1: unable to get BOS descriptor or descriptor too short
[  346.956684][ T5749] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  347.508138][ T5749] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  347.543635][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.579178][ T5749] usb 2-1: Product: syz
[  347.605009][ T5749] usb 2-1: Manufacturer: syz
[  347.630013][ T5749] usb 2-1: SerialNumber: syz
[  347.868021][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 240 seconds
[  347.881189][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 240 seconds
[  347.892535][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 240 seconds
[  347.940079][ T5749] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  349.495843][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 240 seconds
[  350.601282][ T5749] usb 2-1: USB disconnect, device number 6
[  350.707131][ T8082] netlink: 'syz.5.658': attribute type 3 has an invalid length.
[  350.715215][ T8082] netlink: 3 bytes leftover after parsing attributes in process `syz.5.658'.
[  351.532250][   T30] audit: type=1400 audit(1784858815.220:471): avc:  denied  { append } for  pid=8083 comm="syz.0.659" name="video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  353.059633][ T8085] syz.0.659 (8085): drop_caches: 2
[  353.597091][ T8093] bridge1: entered promiscuous mode
[  353.829928][ T5343] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  354.009158][ T5343] usb 3-1: Using ep0 maxpacket: 8
[  354.052770][ T5343] usb 3-1: unable to get BOS descriptor or descriptor too short
[  354.081343][ T5343] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  354.116937][ T5343] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  354.146563][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.171721][ T5343] usb 3-1: Product: syz
[  354.190789][ T5343] usb 3-1: Manufacturer: syz
[  354.211466][ T5343] usb 3-1: SerialNumber: syz
[  354.459253][ T5343] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  354.599125][ T5343] usb 3-1: USB disconnect, device number 4
[  354.652947][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.025573][   T30] audit: type=1400 audit(1784858819.710:472): avc:  denied  { write } for  pid=8125 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  356.574886][ T8134] cifs: Unknown parameter '�ۛ�Q��
[  356.574886][ T8134] @�"2a�ch}#��
[  356.574886][ T8134] �[���b����IT�&��:���"����
/��嶎4,�Zz-#F�<��]%gC��
[  356.574886][ T8134] S�Ș��7��@$8���!YJ���9Tw8���}���|'
[  356.749900][   T30] audit: type=1800 audit(1784858820.400:473): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.679" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  356.758748][ T5708] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  356.923396][   T30] audit: type=1400 audit(1784858820.420:474): avc:  denied  { map } for  pid=8133 comm="syz.3.679" path="/proc/354/task/356/oom_adj" dev="proc" ino=15873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  357.313293][   T30] audit: type=1400 audit(1784858820.420:475): avc:  denied  { execute } for  pid=8133 comm="syz.3.679" path="/proc/354/task/356/oom_adj" dev="proc" ino=15873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  357.630848][ T5708] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  357.649177][ T5708] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  357.671285][ T5708] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  357.706427][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.954699][ T5749] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  358.135351][ T5749] usb 4-1: unable to get BOS descriptor or descriptor too short
[  358.158602][ T5749] usb 4-1: not running at top speed; connect to a high speed hub
[  358.180966][ T5749] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  358.213359][ T5749] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  358.245764][ T5749] usb 4-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40
[  358.272314][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.295181][ T5749] usb 4-1: Product: syz
[  358.311112][ T5749] usb 4-1: Manufacturer: ᭲殺鉵｡ꅻ䝊骠輌䄕ଢ଼穒㑲졹
[  358.336942][ T5749] usb 4-1: SerialNumber: syz
[  358.382834][ T5749] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  358.427904][ T5749] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  358.475491][ T5749] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  358.514093][ T5749] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  358.583854][ T5749] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  358.785014][ T5749] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  358.827259][ T5749] usb 4-1: USB disconnect, device number 7
[  358.923495][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  360.093139][ T5749] usb 3-1: USB disconnect, device number 5
[  361.020974][   T30] audit: type=1400 audit(1784858824.640:476): avc:  denied  { getopt } for  pid=8167 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  363.420835][ T8184] =======================================================
[  363.420835][ T8184] WARNING: The mand mount option has been deprecated and
[  363.420835][ T8184]          and is ignored by this kernel. Remove the mand
[  363.420835][ T8184]          option from the mount to silence this warning.
[  363.420835][ T8184] =======================================================
[  363.513916][   T30] audit: type=1400 audit(1784858827.150:477): avc:  denied  { mount } for  pid=8181 comm="syz.5.696" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  365.470322][   T30] audit: type=1400 audit(1784858829.150:478): avc:  denied  { listen } for  pid=8189 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  365.521056][ T5621] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  365.529930][   T30] audit: type=1400 audit(1784858829.160:479): avc:  denied  { accept } for  pid=8189 comm="syz.2.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  365.530975][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  365.531004][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  365.531024][ T5621] Workqueue: hci4 hci_rx_work
[  365.531080][ T5621] Call Trace:
[  365.531089][ T5621]  <TASK>
[  365.531098][ T5621]  dump_stack_lvl+0x100/0x190
[  365.531131][ T5621]  sysfs_warn_dup.cold+0x1c/0x28
[  365.531165][ T5621]  sysfs_create_dir_ns+0x24b/0x2b0
[  365.531201][ T5621]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  365.531234][ T5621]  ? find_held_lock+0x2b/0x80
[  365.531267][ T5621]  ? kobject_add_internal+0x25f/0x930
[  365.531296][ T5621]  ? kobject_add_internal+0x25f/0x930
[  365.531326][ T5621]  ? do_raw_spin_unlock+0x145/0x1e0
[  365.531358][ T5621]  kobject_add_internal+0x2c8/0x930
[  365.531392][ T5621]  kobject_add+0x16a/0x1e0
[  365.531419][ T5621]  ? __pfx_kobject_add+0x10/0x10
[  365.531446][ T5621]  ? class_to_subsys+0x10f/0x150
[  365.531481][ T5621]  ? kobject_put+0xb9/0x640
[  365.531504][ T5621]  ? _raw_spin_unlock+0x28/0x50
[  365.531546][ T5621]  device_add+0x294/0x1970
[  365.531576][ T5621]  ? __pfx_dev_set_name+0x10/0x10
[  365.531608][ T5621]  ? __pfx_device_add+0x10/0x10
[  365.531637][ T5621]  ? mgmt_send_event_skb+0x2fb/0x460
[  365.531681][ T5621]  hci_conn_add_sysfs+0x1a3/0x260
[  365.531708][ T5621]  le_conn_complete_evt+0x11eb/0x1f60
[  365.531751][ T5621]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  365.531783][ T5621]  ? hci_event_packet+0x186/0xcd0
[  365.531824][ T5621]  hci_le_conn_complete_evt+0x23c/0x3a0
[  365.531860][ T5621]  ? skb_pull_data+0x15f/0x1e0
[  365.531894][ T5621]  hci_le_meta_evt+0x34a/0x5f0
[  365.531916][ T5621]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  365.531955][ T5621]  hci_event_packet+0x51c/0xcd0
[  365.531990][ T5621]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  365.532013][ T5621]  ? __pfx_hci_event_packet+0x10/0x10
[  365.532050][ T5621]  ? kcov_remote_start+0x384/0x670
[  365.532084][ T5621]  ? lockdep_hardirqs_on+0x78/0x100
[  365.532114][ T5621]  hci_rx_work+0x451/0xfc0
[  365.532156][ T5621]  process_one_work+0xa23/0x1940
[  365.532193][ T5621]  ? __pfx_process_one_work+0x10/0x10
[  365.532223][ T5621]  ? __pfx_hci_rx_work+0x10/0x10
[  365.532260][ T5621]  worker_thread+0x5ef/0xe50
[  365.532292][ T5621]  ? kthread+0x13a/0x450
[  365.532324][ T5621]  ? __pfx_worker_thread+0x10/0x10
[  365.532347][ T5621]  kthread+0x370/0x450
[  365.532379][ T5621]  ? __pfx_kthread+0x10/0x10
[  365.532414][ T5621]  ret_from_fork+0x72b/0xd50
[  365.532444][ T5621]  ? __pfx_ret_from_fork+0x10/0x10
[  365.532475][ T5621]  ? __switch_to+0x800/0x10f0
[  365.532496][ T5621]  ? __pfx_kthread+0x10/0x10
[  365.532530][ T5621]  ret_from_fork_asm+0x1a/0x30
[  365.532577][ T5621]  </TASK>
[  365.532639][ T5621] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  365.826374][ T5621] Bluetooth: hci4: failed to register connection device
[  365.981596][ T8194] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  366.042745][ T8194] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  366.071095][   T30] audit: type=1400 audit(1784858829.750:480): avc:  denied  { firmware_load } for  pid=8191 comm="syz.3.697" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  366.084951][ T8194] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  366.670503][ T8192] netlink: 'syz.3.697': attribute type 1 has an invalid length.
[  369.955374][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'.
[  370.262575][   T30] audit: type=1400 audit(1784858833.850:481): avc:  denied  { connect } for  pid=8243 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  371.309743][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'.
[  371.419865][ T8254] macvtap2: entered promiscuous mode
[  371.444424][ T8254] team0: entered promiscuous mode
[  371.476918][ T8254] team_slave_0: entered promiscuous mode
[  371.505075][ T8254] team_slave_1: entered promiscuous mode
[  371.523991][ T8254] macvtap2: entered allmulticast mode
[  371.547030][ T8254] team0: entered allmulticast mode
[  371.571734][ T8254] team_slave_0: entered allmulticast mode
[  371.595818][ T8254] team_slave_1: entered allmulticast mode
[  371.631366][ T8254] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  371.938766][ T5621] Bluetooth: hci4: command 0x0406 tx timeout
[  371.965598][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'.
[  372.039616][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'.
[  372.053657][ T8260] macvtap3: entered promiscuous mode
[  372.087419][ T8260] macvtap3: entered allmulticast mode
[  372.117374][ T8260] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  372.183737][ T8261] macvtap3: left promiscuous mode
[  372.206136][ T8261] macvtap3: left allmulticast mode
[  372.354052][ T8267] process 'syz.1.721' launched './file1' with NULL argv: empty string added
[  372.487944][   T30] audit: type=1400 audit(1784858836.160:482): avc:  denied  { execute_no_trans } for  pid=8262 comm="syz.1.721" path="/161/file1" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  373.255180][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  373.420065][    T9] usb 4-1: Using ep0 maxpacket: 8
[  373.444453][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  373.483466][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  373.610013][    T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  373.644295][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.115830][    T9] usb 4-1: Product: syz
[  374.128450][    T9] usb 4-1: Manufacturer: syz
[  374.140522][    T9] usb 4-1: SerialNumber: syz
[  374.420873][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  375.472930][    T9] usb 4-1: USB disconnect, device number 8
[  375.868108][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'.
[  375.951892][ T8295] macvtap1: entered promiscuous mode
[  375.978235][ T8295] team0: entered promiscuous mode
[  375.999157][ T8295] team_slave_0: entered promiscuous mode
[  376.018168][ T8295] team_slave_1: entered promiscuous mode
[  376.036337][ T8295] macvtap1: entered allmulticast mode
[  376.054598][ T8295] team0: entered allmulticast mode
[  376.068731][ T8295] team_slave_0: entered allmulticast mode
[  376.084102][ T8295] team_slave_1: entered allmulticast mode
[  376.106446][ T8295] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  376.534689][ T8311] binder: 8300:8311 ioctl c0306201 0 returned -14
[  377.049351][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.056679][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.227677][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.239963][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.491486][ T8309] team0: left allmulticast mode
[  377.496433][ T8309] team_slave_0: left allmulticast mode
[  377.502110][ T8309] team_slave_1: left allmulticast mode
[  377.507571][ T8309] team0: left promiscuous mode
[  377.512394][ T8309] team_slave_0: left promiscuous mode
[  377.519021][ T8309] team_slave_1: left promiscuous mode
[  377.668339][  T766] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.679339][  T766] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.698001][  T766] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.737539][ T8326] netlink: 'syz.0.737': attribute type 3 has an invalid length.
[  377.745745][ T8326] netlink: 3 bytes leftover after parsing attributes in process `syz.0.737'.
[  377.949713][  T766] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.594374][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  378.603040][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  378.628549][   T25] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 270 seconds
[  378.640770][   T25] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 270 seconds
[  378.659641][   T25] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 270 seconds
[  379.800025][   T25] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 270 seconds
[  379.892576][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'.
[  379.922723][ T8346] macvtap1: entered promiscuous mode
[  379.933391][ T8346] team0: entered promiscuous mode
[  379.945888][ T8346] team_slave_0: entered promiscuous mode
[  379.964705][ T8346] team_slave_1: entered promiscuous mode
[  380.108515][ T8346] macvtap1: entered allmulticast mode
[  380.114707][ T8346] team0: entered allmulticast mode
[  380.119996][ T8346] team_slave_0: entered allmulticast mode
[  380.125918][ T8346] team_slave_1: entered allmulticast mode
[  380.148868][ T8346] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  385.249538][ T8393] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  385.260283][ T8393] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  385.269860][ T8393] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  388.638870][ T8413] netlink: 'syz.3.770': attribute type 2 has an invalid length.
[  388.646644][ T8413] netlink: 'syz.3.770': attribute type 1 has an invalid length.
[  391.612092][  T187] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  391.771457][  T187] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  391.841602][  T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.899043][  T187] usb 1-1: config 0 descriptor??
[  391.921426][  T187] cp210x 1-1:0.0: cp210x converter detected
[  391.928549][ T8437] netlink: 52 bytes leftover after parsing attributes in process `syz.2.775'.
[  392.072930][   T30] audit: type=1400 audit(1784858855.760:483): avc:  denied  { setopt } for  pid=8434 comm="syz.5.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  392.212490][ T8445] cifs: Unknown parameter '�ۛ�Q��
[  392.212490][ T8445] @�"2a�ch}#��
[  392.212490][ T8445] �[���b����IT�&��:���"����
/��嶎4,�Zz-#F�<��]%gC��
[  392.212490][ T8445] S�Ș��7��@$8���!YJ���9Tw8���}���|'
[  392.807400][  T187] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  392.910453][   T30] audit: type=1800 audit(1784858856.600:484): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.778" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  392.932229][  T187] usb 1-1: cp210x converter now attached to ttyUSB0
[  393.138514][  T187] usb 1-1: USB disconnect, device number 8
[  393.979769][  T187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  394.011813][  T187] cp210x 1-1:0.0: device disconnected
[  395.151072][ T8478] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  395.161079][ T8478] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  395.170146][ T8478] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  398.395904][   T30] audit: type=1400 audit(1784858862.080:485): avc:  denied  { bind } for  pid=8504 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  398.468517][   T30] audit: type=1400 audit(1784858862.100:486): avc:  denied  { setopt } for  pid=8504 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  400.751822][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'.
[  401.285562][ T8526] macvtap1: entered promiscuous mode
[  401.312629][ T8526] team0: entered promiscuous mode
[  401.343909][ T8526] team_slave_0: entered promiscuous mode
[  401.358958][ T8526] team_slave_1: entered promiscuous mode
[  401.369882][ T8526] macvtap1: entered allmulticast mode
[  401.382036][ T8526] team0: entered allmulticast mode
[  401.390840][ T8526] team_slave_0: entered allmulticast mode
[  401.403411][ T8526] team_slave_1: entered allmulticast mode
[  401.419629][ T8526] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  409.267558][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 300 seconds
[  409.278889][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 300 seconds
[  409.317926][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 300 seconds
[  410.066279][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 300 seconds
[  410.761335][   T30] audit: type=1400 audit(1784858874.450:487): avc:  denied  { read write } for  pid=8611 comm="syz.1.833" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  410.843798][   T30] audit: type=1400 audit(1784858874.470:488): avc:  denied  { open } for  pid=8611 comm="syz.1.833" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  410.986918][   T30] audit: type=1400 audit(1784858874.500:489): avc:  denied  { ioctl } for  pid=8611 comm="syz.1.833" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  411.033430][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  411.066634][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  411.076172][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  411.742423][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  411.753868][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  412.211068][ T8628] bridge0: port 3(ipvlan1) entered blocking state
[  412.230584][ T8628] bridge0: port 3(ipvlan1) entered disabled state
[  412.249156][ T8628] ipvlan1: entered allmulticast mode
[  412.274012][ T8628] veth0_vlan: entered allmulticast mode
[  412.330455][ T8628] ipvlan1: left allmulticast mode
[  412.348743][ T8628] veth0_vlan: left allmulticast mode
[  412.513072][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.840'.
[  413.791987][ T5621] Bluetooth: hci3: command tx timeout
[  414.312556][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.319916][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.320095][ T8613] bridge_slave_0: entered allmulticast mode
[  414.335246][ T8613] bridge_slave_0: entered promiscuous mode
[  414.346349][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.353620][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.361466][ T8613] bridge_slave_1: entered allmulticast mode
[  414.372453][ T8613] bridge_slave_1: entered promiscuous mode
[  414.426841][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.441236][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.904675][ T8613] team0: Port device team_slave_0 added
[  414.917806][ T8613] team0: Port device team_slave_1 added
[  414.965594][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.973100][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.012494][ T8657] syz.1.844 uses obsolete (PF_INET,SOCK_PACKET)
[  415.024795][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.060737][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.075932][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.141998][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.583207][ T8613] hsr_slave_0: entered promiscuous mode
[  415.599147][ T8613] hsr_slave_1: entered promiscuous mode
[  415.898606][ T5621] Bluetooth: hci3: command tx timeout
[  416.941283][   T30] audit: type=1400 audit(1784858880.630:490): avc:  denied  { write } for  pid=8672 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  417.809125][ T8613] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  417.837367][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  417.852517][ T8613] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  417.865829][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  417.874450][ T8613] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  417.894450][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  417.921741][ T8613] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  417.938914][ T5621] Bluetooth: hci3: command tx timeout
[  417.987158][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  419.016545][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.172022][   T30] audit: type=1400 audit(1784858882.860:491): avc:  denied  { map } for  pid=8710 comm="syz.1.861" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  419.294568][   T30] audit: type=1400 audit(1784858882.970:492): avc:  denied  { call } for  pid=8710 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  419.296936][ T8711] binder_alloc: 8710: binder_alloc_buf, no vma
[  419.316869][ T8613] 8021q: adding VLAN 0 to HW filter on device team0
[  419.837125][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.844597][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.907010][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.914207][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.019333][ T5621] Bluetooth: hci3: command tx timeout
[  420.530199][ T8721] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  421.519476][   T30] audit: type=1400 audit(1784858885.200:493): avc:  denied  { read } for  pid=8728 comm="syz.0.868" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  421.599905][   T30] audit: type=1400 audit(1784858885.200:494): avc:  denied  { open } for  pid=8728 comm="syz.0.868" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  421.668157][   T30] audit: type=1400 audit(1784858885.240:495): avc:  denied  { ioctl } for  pid=8728 comm="syz.0.868" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  422.026928][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.798816][ T5807] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  422.970180][ T5807] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  423.002227][ T5807] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  423.036417][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.108554][ T5807] gspca_main: stv0680-2.14.0 probing 041e:4007
[  423.513171][ T8613] veth0_vlan: entered promiscuous mode
[  423.560904][ T8613] veth1_vlan: entered promiscuous mode
[  423.642558][ T8613] veth0_macvtap: entered promiscuous mode
[  423.655204][ T8613] veth1_macvtap: entered promiscuous mode
[  423.708105][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.753111][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.781997][ T2993] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.812539][ T2993] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.846759][ T2993] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.878099][ T2993] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.180966][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  424.183778][  T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.227573][ T5807] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  424.230996][  T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.263910][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  424.298317][ T5807] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  424.328779][ T5807] usb 4-1: USB disconnect, device number 9
[  424.372993][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.395404][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.825043][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  431.340686][   T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  431.394220][   T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  431.450001][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.554223][   T10] gspca_main: stv0680-2.14.0 probing 041e:4007
[  433.017805][   T10] stv0680 1-1:4.0: STV(e): camera ping failed!!
[  433.925964][   T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110
[  433.938284][   T10] stv0680 1-1:4.0: last error: 0,  command = 0x0
[  433.956681][   T10] usb 1-1: USB disconnect, device number 9
[  435.003191][ T8846] can0: slcan on ttyS3.
[  435.321099][ T8843] can0 (unregistered): slcan off ttyS3.
[  436.622853][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.900'.
[  436.656449][ T8868] team0: entered promiscuous mode
[  436.678386][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.900'.
[  436.746921][ T8868] team_slave_0: entered promiscuous mode
[  436.775366][ T8868] team_slave_1: entered promiscuous mode
[  436.785872][   T30] audit: type=1400 audit(1784858900.460:496): avc:  denied  { write } for  pid=8852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.811612][ T8868] team0: entered allmulticast mode
[  437.400362][ T8868] team_slave_0: entered allmulticast mode
[  437.537679][ T8868] team_slave_1: entered allmulticast mode
[  437.556877][ T8870] team0: left promiscuous mode
[  437.565021][ T8870] team_slave_0: left promiscuous mode
[  437.587541][ T8870] team_slave_1: left promiscuous mode
[  438.802679][ T8870] team0: left allmulticast mode
[  438.809730][   T30] audit: type=1400 audit(1784858901.920:497): avc:  denied  { name_bind } for  pid=8875 comm="syz.5.902" src=20262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  438.865992][ T8870] team_slave_0: left allmulticast mode
[  438.893080][ T8870] team_slave_1: left allmulticast mode
[  439.093753][   T30] audit: type=1400 audit(1784858902.780:498): avc:  denied  { write } for  pid=8883 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  439.920236][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 330 seconds
[  439.931071][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 330 seconds
[  439.942808][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 330 seconds
[  440.049239][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  440.096742][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 330 seconds
[  440.100085][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  440.208448][ T8896] netlink: 'syz.1.909': attribute type 3 has an invalid length.
[  440.216744][ T8896] netlink: 3 bytes leftover after parsing attributes in process `syz.1.909'.
[  443.406790][   T30] audit: type=1400 audit(1784858907.050:499): avc:  denied  { write } for  pid=8898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.303335][   T30] audit: type=1400 audit(1784858907.990:500): avc:  denied  { write } for  pid=8924 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.631634][ T8934] binder: 8925:8934 ioctl c0306201 0 returned -14
[  444.971920][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.979574][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.060277][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.070673][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.221498][ T6388] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.276402][ T6388] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.321943][ T6388] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.362066][ T6388] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  445.601076][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'.
[  445.691281][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'.
[  445.731281][ T8940] macvtap2: entered promiscuous mode
[  445.761073][ T8940] macvtap2: entered allmulticast mode
[  445.795102][ T8940] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  445.958196][ T8941] macvtap2: left promiscuous mode
[  445.968997][ T8948] syz.0.910 (8948): /proc/8948/oom_adj is deprecated, please use /proc/8948/oom_score_adj instead.
[  446.001855][ T8941] macvtap2: left allmulticast mode
[  446.981345][   T30] audit: type=1400 audit(1784858910.660:501): avc:  denied  { bind } for  pid=8959 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.326085][   T30] audit: type=1400 audit(1784858910.680:502): avc:  denied  { setopt } for  pid=8959 comm="syz.3.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  454.155153][ T9063] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  454.164005][ T9063] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  454.172613][ T9063] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  454.338575][ T9068] netlink: 'syz.5.953': attribute type 1 has an invalid length.
[  454.449063][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  454.696770][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.936755][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3
[  455.076315][    T9] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  455.086945][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.224565][    T9] usb 7-1: config 0 descriptor??
[  455.674409][    T9] Bluetooth: Can't get version to change to load ram patch err
[  455.691653][    T9] Bluetooth: Loading patch file failed
[  455.712301][    T9] ath3k 7-1:0.0: probe with driver ath3k failed with error -71
[  455.743467][    T9] usb 7-1: USB disconnect, device number 2
[  457.097473][   T30] audit: type=1400 audit(1784858920.780:503): avc:  denied  { getopt } for  pid=9101 comm="syz.5.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  458.202765][   T30] audit: type=1400 audit(1784858921.880:504): avc:  denied  { connect } for  pid=9118 comm="syz.5.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  458.414519][   T30] audit: type=1400 audit(1784858921.890:505): avc:  denied  { ioctl } for  pid=9118 comm="syz.5.974" path="socket:[20027]" dev="sockfs" ino=20027 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  459.603621][   T30] audit: type=1400 audit(1784858923.290:506): avc:  denied  { write } for  pid=9130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  460.152722][ T9184] netlink: 'syz.3.992': attribute type 3 has an invalid length.
[  460.160496][ T9184] netlink: 3 bytes leftover after parsing attributes in process `syz.3.992'.
[  460.913846][   T30] audit: type=1400 audit(1784858924.600:507): avc:  denied  { write } for  pid=9181 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.276030][ T3348] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.601459][ T3348] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.657329][ T3348] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.691849][ T5954] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  462.437637][   T30] audit: type=1400 audit(1784858926.080:508): avc:  denied  { write } for  pid=9213 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  463.857853][   T30] audit: type=1400 audit(1784858927.540:509): avc:  denied  { write } for  pid=9207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  465.019343][   T30] audit: type=1400 audit(1784858928.710:510): avc:  denied  { write } for  pid=9240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  467.024888][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[  467.260666][   T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  467.425052][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  467.435499][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  467.455148][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  467.485812][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  467.497021][ T5774] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  467.518490][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40
[  467.538089][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.557436][   T10] usb 1-1: Product: syz
[  467.562051][   T10] usb 1-1: Manufacturer: syz
[  467.572015][   T10] usb 1-1: SerialNumber: syz
[  467.599936][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  467.617608][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  467.647223][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  467.663622][ T5774] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  467.673338][   T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2
[  467.699186][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.713829][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  467.722414][ T5774] usb 2-1: Product: syz
[  467.731046][ T5774] usb 2-1: Manufacturer: syz
[  467.749811][ T5774] usb 2-1: SerialNumber: syz
[  467.858259][   T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2
[  467.890900][   T30] audit: type=1400 audit(1784858931.570:511): avc:  denied  { append } for  pid=9269 comm="syz.6.1015" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  467.897752][   T10] usb 1-1: USB disconnect, device number 10
[  468.167001][ T5774] usb 2-1: USB disconnect, device number 7
[  468.201113][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  469.453408][ T5621] Bluetooth: hci0: Dropping invalid advertising data
[  469.460586][ T5621] Bluetooth: hci0: Malformed LE Event: 0x02
[  469.589161][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  470.099983][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 360 seconds
[  470.110893][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 360 seconds
[  470.121969][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 360 seconds
[  470.138883][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 360 seconds
[  470.248720][   T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  470.441339][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  470.465959][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  470.490395][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  470.522442][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  470.559445][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40
[  470.578062][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.603385][   T10] usb 2-1: Product: syz
[  470.617130][   T10] usb 2-1: Manufacturer: syz
[  470.632331][   T10] usb 2-1: SerialNumber: syz
[  470.667189][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  470.695046][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  470.740864][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  470.762988][   T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  470.804031][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  470.937521][   T10] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  470.986607][   T10] usb 2-1: USB disconnect, device number 8
[  471.138887][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  472.580766][ T9307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  473.500244][ T9325] syz.6.1035 (9325): drop_caches: 2
[  473.735247][ T9366] lo speed is unknown, defaulting to 1000
[  473.741541][ T9366] lo speed is unknown, defaulting to 1000
[  473.748895][ T9366] lo speed is unknown, defaulting to 1000
[  473.755163][ T9366] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  473.769870][ T9366] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  473.786828][ T9366] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  473.801366][ T9366] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  473.820871][ T9366] lo speed is unknown, defaulting to 1000
[  473.827635][ T9366] lo speed is unknown, defaulting to 1000
[  473.834461][ T9366] lo speed is unknown, defaulting to 1000
[  473.839665][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'.
[  473.842208][ T9366] lo speed is unknown, defaulting to 1000
[  473.857501][ T9366] lo speed is unknown, defaulting to 1000
[  473.864151][ T9366] lo speed is unknown, defaulting to 1000
[  474.400283][ T9368] smbdirect: ib_dev[syz1] removed
[  475.762948][ T9395] Invalid ELF header type: 3 != 1
[  475.928530][   T30] audit: type=1400 audit(1784858939.450:512): avc:  denied  { module_load } for  pid=9389 comm="syz.5.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  476.340186][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  476.381483][   T30] audit: type=1400 audit(1784858940.060:513): avc:  denied  { write } for  pid=9396 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  476.702499][ T5807] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  477.060826][ T5807] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  477.100581][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.512510][ T5807] gspca_main: stv0680-2.14.0 probing 041e:4007
[  478.579603][ T5807] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  478.685698][   T30] audit: type=1400 audit(1784858942.370:514): avc:  denied  { write } for  pid=9407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  478.781469][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  478.803289][ T5807] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  478.825070][ T5807] usb 4-1: USB disconnect, device number 10
[  479.080231][ T9439] netlink: 'syz.6.1068': attribute type 3 has an invalid length.
[  479.088074][ T9439] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1068'.
[  479.154677][   T30] audit: type=1400 audit(1784858942.840:515): avc:  denied  { write } for  pid=9440 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  480.193565][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1073'.
[  480.335555][   T30] audit: type=1400 audit(1784858944.020:516): avc:  denied  { bind } for  pid=9456 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  480.414208][ T9454] macvtap1: entered promiscuous mode
[  480.443004][ T9454] team0: entered promiscuous mode
[  480.454367][   T30] audit: type=1400 audit(1784858944.050:517): avc:  denied  { node_bind } for  pid=9456 comm="syz.6.1072" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  480.458954][ T9454] team_slave_0: entered promiscuous mode
[  480.568184][ T9454] team_slave_1: entered promiscuous mode
[  480.682822][ T9454] macvtap1: entered allmulticast mode
[  480.731482][ T9454] team0: entered allmulticast mode
[  480.768348][ T9454] team_slave_0: entered allmulticast mode
[  480.787798][ T9454] team_slave_1: entered allmulticast mode
[  480.816609][ T9454] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  482.555800][ T9488] netlink: 'syz.1.1083': attribute type 29 has an invalid length.
[  482.878140][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  483.385111][   T30] audit: type=1400 audit(1784858947.070:518): avc:  denied  { write } for  pid=9455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  483.385610][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1085'.
[  483.480562][ T5774] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  483.554993][ T9505] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1085'.
[  483.587157][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1085'.
[  483.649023][ T5774] usb 2-1: Using ep0 maxpacket: 16
[  483.670184][ T5774] usb 2-1: unable to read config index 0 descriptor/start: -61
[  483.683101][ T5774] usb 2-1: can't read configurations, error -61
[  483.711467][   T30] audit: type=1400 audit(1784858947.400:519): avc:  denied  { mount } for  pid=9513 comm="syz.0.1089" name="/" dev="ramfs" ino=21464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  483.827431][   T30] audit: type=1400 audit(1784858947.510:520): avc:  denied  { write } for  pid=9512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.045328][   T30] audit: type=1400 audit(1784858947.730:521): avc:  denied  { create } for  pid=9524 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  484.084813][ T5774] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  484.097276][   T30] audit: type=1400 audit(1784858947.740:522): avc:  denied  { setopt } for  pid=9524 comm="syz.3.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  484.215509][   T30] audit: type=1400 audit(1784858947.740:523): avc:  denied  { write } for  pid=9524 comm="syz.3.1092" path="socket:[21635]" dev="sockfs" ino=21635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  484.269182][ T5774] usb 2-1: Using ep0 maxpacket: 16
[  484.289486][ T5774] usb 2-1: unable to read config index 0 descriptor/start: -61
[  484.358497][ T9534] overlayfs: failed to resolve './file2': -2
[  484.751995][ T5774] usb 2-1: can't read configurations, error -61
[  484.846250][ T5774] usb usb2-port1: attempt power cycle
[  484.853511][  T187] Process accounting resumed
[  485.288795][ T5774] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  485.304732][ T9532] Process accounting resumed
[  485.333513][ T5774] usb 2-1: Using ep0 maxpacket: 16
[  485.351532][   T30] audit: type=1400 audit(1784858949.040:524): avc:  denied  { ioctl } for  pid=9539 comm="syz.3.1096" path="socket:[21652]" dev="sockfs" ino=21652 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  485.356157][ T5774] usb 2-1: unable to read config index 0 descriptor/start: -61
[  485.626985][ T5774] usb 2-1: can't read configurations, error -61
[  489.476507][ T9602] overlayfs: failed to resolve './file2': -2
[  490.167562][ T9611] overlayfs: failed to resolve './file1': -2
[  491.342454][   T30] audit: type=1400 audit(1784858955.030:525): avc:  denied  { setopt } for  pid=9626 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  493.749357][ T9654] overlayfs: failed to resolve './file1': -2
[  496.228969][ T5732] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  496.462568][ T5732] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  496.487282][ T9678] overlayfs: failed to resolve './file2': -2
[  496.525825][ T5732] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.719735][ T5732] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  496.860055][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.926320][ T5732] hub 6-1:4.0: USB hub found
[  497.123691][ T5732] hub 6-1:4.0: 2 ports detected
[  497.130380][ T5732] usb 6-1: selecting invalid altsetting 1
[  497.137303][ T5732] hub 6-1:4.0: Using single TT (err -22)
[  497.326920][ T5732] hub 6-1:4.0: hub_hub_status failed (err = -71)
[  497.339734][ T5732] hub 6-1:4.0: config failed, can't get hub status (err -71)
[  497.382893][ T5732] usb 6-1: USB disconnect, device number 2
[  497.389500][ T5807] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  497.451243][ T9698] overlayfs: failed to resolve './file1': -2
[  497.671650][ T5807] usb 2-1: Using ep0 maxpacket: 16
[  497.827579][ T5807] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  497.851345][ T5807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.871060][ T5807] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  497.884729][ T5807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  497.896265][ T5807] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  497.909340][ T5807] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  497.928217][ T5807] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  497.942069][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  497.983967][ T5807] usb 2-1: SerialNumber: syz
[  498.055658][ T9702] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  498.064833][ T9702] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  498.073432][ T9702] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  498.139990][ T9691] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  498.149066][ T9704] netlink: 'syz.6.1147': attribute type 1 has an invalid length.
[  498.596331][ T5807] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  498.763403][ T5807] usb 2-1: USB disconnect, device number 13
[  499.154620][ T9712] netlink: 'syz.5.1150': attribute type 3 has an invalid length.
[  499.162809][ T9712] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1150'.
[  500.773500][ T9721] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  500.780272][ T9721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  500.789235][ T9721] vhci_hcd vhci_hcd.0: Device attached
[  500.796704][ T9725] vhci_hcd: connection closed
[  500.797639][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 390 seconds
[  500.813786][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 390 seconds
[  500.825191][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 390 seconds
[  500.836570][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 390 seconds
[  500.881127][ T2993] vhci_hcd vhci_hcd.1: stop threads
[  500.921750][ T2993] vhci_hcd vhci_hcd.1: release socket
[  500.958234][ T2993] vhci_hcd vhci_hcd.1: disconnect device
[  502.198990][ T9742] overlayfs: failed to resolve './file0': -2
[  503.229948][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  503.237295][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  504.343998][ T4977] udevd[4977]: worker [5622] /devices/virtual/block/nbd2 timeout; kill it
[  504.404362][ T4977] udevd[4977]: seq 10733 '/devices/virtual/block/nbd2' killed
[  507.037203][ T9776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1161'.
[  507.444693][   T30] audit: type=1400 audit(1784858971.130:526): avc:  denied  { write } for  pid=9775 comm="syz.6.1169" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  508.261159][   T30] audit: type=1400 audit(1784858971.940:527): avc:  denied  { write } for  pid=9796 comm="syz.5.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  510.533408][ T9812] netlink: 'syz.1.1179': attribute type 3 has an invalid length.
[  510.541254][ T9812] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1179'.
[  511.155025][   T30] audit: type=1400 audit(1784858974.840:528): avc:  denied  { relabelfrom } for  pid=9813 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  511.229470][ T9816] binder: 9815:9816 ioctl c0306201 200000000080 returned -14
[  511.259954][ T9816] binder: 9815:9816 ioctl c0306201 2000000003c0 returned -14
[  511.305992][   T30] audit: type=1400 audit(1784858974.840:529): avc:  denied  { relabelto } for  pid=9813 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  511.465616][ T5621] Bluetooth: hci1: unexpected event for opcode 0x1003
[  512.983294][ T9834] loop5: detected capacity change from 0 to 7
[  513.044387][ T9834] Dev loop5: unable to read RDB block 7
[  513.073613][ T9834]  loop5: unable to read partition table
[  513.094350][ T9834] loop5: partition table beyond EOD, truncated
[  513.131326][ T9834] loop_reread_partitions: partition scan of loop5 (x�k
�%���� ) failed (rc=-5)
[  515.980251][ T5621] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  515.991033][ T5621] Bluetooth: hci1: Injecting HCI hardware error event
[  516.000870][ T5621] Bluetooth: hci1: hardware error 0x00
[  517.945355][   T30] audit: type=1400 audit(1784858981.600:530): avc:  denied  { rename } for  pid=9895 comm="syz.6.1211" name="file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  518.670637][ T5621] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  519.818895][ T9926] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.163465][ T9929] kvm: Disabled LAPIC found during irq injection
[  522.578785][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  523.253052][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  523.270100][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  523.285326][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  523.379819][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  523.389374][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  523.397962][   T10] usb 4-1: Product: syz
[  523.403273][   T10] usb 4-1: Manufacturer: syz
[  523.407958][   T10] usb 4-1: SerialNumber: syz
[  523.658174][   T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  523.804751][ T9964] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  523.819592][ T9964] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  523.836791][ T9964] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  523.897075][ T9964] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  524.492213][ T5708] usb 4-1: USB disconnect, device number 11
[  524.602089][ T5708] usblp0: removed
[  524.758991][ T9978] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1236'.
[  527.411230][ T9998] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  527.428451][ T9998] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  527.450105][ T9998] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  527.512011][ T9996] netlink: 'syz.0.1241': attribute type 1 has an invalid length.
[  528.689762][T10016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.869282][ T9877] Bluetooth: hci3: command 0x0406 tx timeout
[  530.907097][ T6095] block nbd2: Possible stuck request ffff8880283c0000: control (read@0,1024B). Runtime 420 seconds
[  530.917924][ T6095] block nbd2: Possible stuck request ffff8880283c01c0: control (read@1024,1024B). Runtime 420 seconds
[  530.929281][ T6095] block nbd2: Possible stuck request ffff8880283c0380: control (read@2048,1024B). Runtime 420 seconds
[  530.940269][ T6095] block nbd2: Possible stuck request ffff8880283c0540: control (read@3072,1024B). Runtime 420 seconds
[  533.668761][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  534.004381][T10073] binder: BINDER_SET_CONTEXT_MGR already set
[  534.051222][    T9] usb 2-1: Using ep0 maxpacket: 16
[  534.059033][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  535.124731][    T9] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  535.124988][ T5621] Bluetooth: hci5: command 0x0406 tx timeout
[  535.137138][    T9] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f
[  535.150607][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.165254][    T9] usb 2-1: Product: syz
[  535.300433][    T9] usb 2-1: Manufacturer: syz
[  535.364735][    T9] usb 2-1: SerialNumber: syz
[  535.385520][T10073] binder: 10068:10073 ioctl 4018620d 200000000040 returned -16
[  535.806196][   T30] audit: type=1400 audit(1784858999.490:531): avc:  denied  { create } for  pid=10081 comm="syz.0.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  535.904295][   T30] audit: type=1400 audit(1784858999.520:532): avc:  denied  { ioctl } for  pid=10081 comm="syz.0.1271" path="socket:[24632]" dev="sockfs" ino=24632 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  536.022170][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.156382][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.271502][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.300982][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.326280][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.499393][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.891076][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.933933][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.098086][    T9] usb 2-1: USB disconnect, device number 14
[  538.467747][T10114] binder: BINDER_SET_CONTEXT_MGR already set
[  538.476686][T10114] binder: 10113:10114 ioctl 4018620d 200000000040 returned -16
[  538.975226][   T30] audit: type=1400 audit(1784859002.660:533): avc:  denied  { connect } for  pid=10123 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  539.139283][ T5732] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  539.273052][   T30] audit: type=1400 audit(1784859002.960:534): avc:  denied  { mount } for  pid=10136 comm="syz.3.1288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  539.296540][   T30] audit: type=1400 audit(1784859002.960:535): avc:  denied  { search } for  pid=10136 comm="syz.3.1288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  539.300255][ T5732] usb 1-1: Using ep0 maxpacket: 16
[  539.327332][   T30] audit: type=1400 audit(1784859002.960:536): avc:  denied  { search } for  pid=10136 comm="syz.3.1288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  539.351023][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.363047][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.373537][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  539.378539][   T30] audit: type=1400 audit(1784859002.960:537): avc:  denied  { search } for  pid=10136 comm="syz.3.1288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  539.387687][ T5732] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  539.419694][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.441016][ T5732] usb 1-1: config 0 descriptor??
[  539.573230][   T30] audit: type=1400 audit(1784859002.960:538): avc:  denied  { write search } for  pid=10136 comm="syz.3.1288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  540.954741][   T30] audit: type=1326 audit(1784859004.640:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.6.1290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956599de99 code=0x7ffc0000
[  541.098143][T10147] binder: BINDER_SET_CONTEXT_MGR already set
[  541.107880][   T30] audit: type=1326 audit(1784859004.640:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.6.1290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956599de99 code=0x7ffc0000
[  541.141782][T10147] binder: 10146:10147 ioctl 4018620d 200000000040 returned -16
[  541.196000][ T5732] usbhid 1-1:0.0: can't add hid device: -71
[  542.192244][   T30] audit: type=1326 audit(1784859004.670:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.6.1290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f956599de99 code=0x7ffc0000
[  542.223309][ T5732] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  542.261536][ T5732] usb 1-1: USB disconnect, device number 11
[  543.550221][ T5771] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  543.730821][ T5771] usb 1-1: config 1 has an invalid interface number: 205 but max is 0
[  543.745997][ T5771] usb 1-1: config 1 has no interface number 0
[  543.791247][ T5771] usb 1-1: config 1 interface 205 has no altsetting 0
[  543.921608][ T5771] usb 1-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=eb.28
[  544.861468][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.909222][ T5771] usb 1-1: Product: syz
[  544.930544][ T5771] usb 1-1: Manufacturer: syz
[  544.936345][ T5771] usb 1-1: SerialNumber: syz
[  544.942110][T10187] input: syz0 as /devices/virtual/input/input10
[  544.981858][   T31] INFO: task syz.2.786:8476 blocked for more than 144 seconds.
[  544.981891][   T31]       Tainted: G             L      syzkaller #0
[  544.981905][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  544.981914][   T31] task:syz.2.786       state:D stack:27944 pid:8476  tgid:8467  ppid:5619   task_flags:0x400040 flags:0x00080002
[  544.981987][   T31] Call Trace:
[  544.981995][   T31]  <TASK>
[  544.982009][   T31]  __schedule+0x125c/0x6730
[  544.982067][   T31]  ? __pfx___schedule+0x10/0x10
[  544.982097][   T31]  ? find_held_lock+0x2b/0x80
[  544.982130][   T31]  ? schedule+0x225/0x2c0
[  544.982165][   T31]  schedule+0xdd/0x2c0
[  544.982196][   T31]  schedule_preempt_disabled+0x13/0x30
[  544.982228][   T31]  __mutex_lock+0xccc/0x1bd0
[  544.982251][   T31]  ? bdev_open+0xa2/0xe40
[  544.982285][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  544.982308][   T31]  ? bd_prepare_to_claim+0x1e0/0x280
[  544.982333][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  544.982357][   T31]  ? irqentry_exit+0x24d/0xa00
[  544.982385][   T31]  ? bdev_open+0xa2/0xe40
[  544.982408][   T31]  bdev_open+0xa2/0xe40
[  544.982437][   T31]  ? blkdev_open+0x152/0x4f0
[  544.982470][   T31]  blkdev_open+0x34e/0x4f0
[  544.982502][   T31]  do_dentry_open+0x6ab/0x14d0
[  544.982536][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  544.982572][   T31]  vfs_open+0x82/0x3f0
[  544.982602][   T31]  path_openat+0x2873/0x4280
[  544.982633][   T31]  ? trace_sched_exit_tp+0x120/0x160
[  544.982665][   T31]  ? __schedule+0x126e/0x6730
[  544.982696][   T31]  ? __pfx_path_openat+0x10/0x10
[  544.982728][   T31]  do_file_open+0x20e/0x430
[  544.982753][   T31]  ? __pfx_do_file_open+0x10/0x10
[  544.982775][   T31]  ? __pfx___schedule+0x10/0x10
[  544.982834][   T31]  ? alloc_fd+0x471/0x7a0
[  544.982872][   T31]  ? do_getname+0x191/0x390
[  544.982901][   T31]  do_sys_openat2+0x10f/0x1e0
[  544.982928][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  544.982965][   T31]  __x64_sys_openat+0x12d/0x210
[  544.982993][   T31]  ? __pfx___x64_sys_openat+0x10/0x10
[  544.983031][   T31]  do_syscall_64+0x115/0x870
[  544.983053][   T31]  ? clear_bhb_loop+0x40/0x90
[  544.983082][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.983105][   T31] RIP: 0033:0x7f109695e6ce
[  544.983140][   T31] RSP: 002b:00007f10977b2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  544.983167][   T31] RAX: ffffffffffffffda RBX: 00007f10977b36c0 RCX: 00007f109695e6ce
[  544.983205][   T31] RDX: 0000000000008180 RSI: 00007f10977b2c00 RDI: ffffffffffffff9c
[  544.983221][   T31] RBP: 00007f10977b2c00 R08: 0000000000000000 R09: 0000000000000000
[  544.983236][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  544.983251][   T31] R13: 00007f1096c26218 R14: 00007f1096c26180 R15: 00007ffcf9fbe5e8
[  544.983283][   T31]  </TASK>
[  544.983310][   T31] 
[  544.983310][   T31] Showing all locks held in the system:
[  544.983321][   T31] 1 lock held by pool_workqueue_/3:
[  544.983332][   T31]  #0: ffffffff8ebf1c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  544.983392][   T31] 4 locks held by kworker/0:1/10:
[  544.983405][   T31]  #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  544.983461][   T31]  #1: ffffc900000f7d08 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  544.983517][   T31]  #2: ffff888024301270 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x170/0xab0
[  544.983576][   T31]  #3: ffff888026fcc128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x21/0x80
[  544.983637][   T31] 1 lock held by khungtaskd/31:
[  544.983650][   T31]  #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  544.983746][   T31] 2 locks held by getty/5365:
[  544.983758][   T31]  #0: ffff8880384b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  544.983830][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  544.983892][   T31] 3 locks held by udevd/5611:
[  544.983905][   T31] 1 lock held by udevd/5622:
[  544.983918][   T31]  #0: ffff888028275350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  544.983977][   T31] 4 locks held by udevd/5635:
[  544.983990][   T31]  #0: ffff888036e4b2d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[  544.984053][   T31]  #1: ffff888055806080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0
[  544.984119][   T31]  #2: ffff888037269d28 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0
[  544.984183][   T31]  #3: ffff8880358551d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  544.984246][   T31] 4 locks held by kworker/0:6/5771:
[  544.984259][   T31]  #0: ffff8880236f1d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  544.984315][   T31]  #1: ffffc900042dfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  544.984371][   T31]  #2: ffff88802b21a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60
[  544.984426][   T31]  #3: ffff8880358551d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[  544.984488][   T31] 1 lock held by syz.2.786/8476:
[  544.984501][   T31]  #0: ffff888028275350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  544.984658][   T31] 2 locks held by syz.5.1300/10166:
[  544.984672][   T31] 2 locks held by syz.1.1303/10173:
[  544.984685][   T31] 3 locks held by syz.6.1292/10175:
[  544.984697][   T31]  #0: ffff888075144d00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  544.984762][   T31]  #1: ffff88807f573260 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pptp_release+0x53/0x2a0
[  544.984835][   T31]  #2: ffffffff8ebf1c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  544.984892][   T31] 5 locks held by syz.3.1295/10187:
[  544.984906][   T31] 
[  544.984912][   T31] =============================================
[  544.984912][   T31] 
[  544.984931][   T31] NMI backtrace for cpu 1
[  544.984949][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  544.984978][   T31] Tainted: [L]=SOFTLOCKUP
[  544.984985][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  544.984996][   T31] Call Trace:
[  544.985004][   T31]  <TASK>
[  544.985012][   T31]  dump_stack_lvl+0x100/0x190
[  544.985039][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  544.985068][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  544.985096][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  544.985129][   T31]  sys_info+0x141/0x190
[  544.985154][   T31]  watchdog+0xcb1/0x1030
[  544.985183][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  544.985214][   T31]  ? __pfx_watchdog+0x10/0x10
[  544.985238][   T31]  ? __kthread_parkme+0x18c/0x230
[  544.985269][   T31]  ? kthread+0x13a/0x450
[  544.985298][   T31]  ? __pfx_watchdog+0x10/0x10
[  544.985318][   T31]  kthread+0x370/0x450
[  544.985347][   T31]  ? __pfx_kthread+0x10/0x10
[  544.985380][   T31]  ret_from_fork+0x72b/0xd50
[  544.985408][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  544.985436][   T31]  ? __switch_to+0x800/0x10f0
[  544.985457][   T31]  ? __pfx_kthread+0x10/0x10
[  544.985489][   T31]  ret_from_fork_asm+0x1a/0x30
[  544.985534][   T31]  </TASK>
[  544.985541][   T31] Sending NMI from CPU 1 to CPUs 0:
[  544.985572][    C0] NMI backtrace for cpu 0
[  544.985586][    C0] CPU: 0 UID: 0 PID: 10166 Comm: syz.5.1300 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  544.985610][    C0] Tainted: [L]=SOFTLOCKUP
[  544.985616][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  544.985626][    C0] RIP: 0010:kasan_check_range+0x71/0x1e0
[  544.985653][    C0] Code: 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 89 da <48> 29 ea 48 83 fa 10 0f 8e db 00 00 00 41 89 eb 41 83 e3 07 0f 85
[  544.985672][    C0] RSP: 0018:ffffc900069cf690 EFLAGS: 00000282
[  544.985685][    C0] RAX: fffffbfff2244952 RBX: fffffbfff2244953 RCX: ffffffff81e46061
[  544.985697][    C0] RDX: fffffbfff2244953 RSI: 0000000000000008 RDI: ffffffff91224a90
[  544.985709][    C0] RBP: fffffbfff2244952 R08: 0000000000000000 R09: fffffbfff2244952
[  544.985720][    C0] R10: ffffffff91224a97 R11: 0000000000000000 R12: 0000000000000000
[  544.985731][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  544.985742][    C0] FS:  00007fbd1b8776c0(0000) GS:ffff888123de4000(0000) knlGS:0000000000000000
[  544.985760][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  544.985771][    C0] CR2: 000000110c3d6954 CR3: 0000000077749000 CR4: 00000000003526f0
[  544.985783][    C0] Call Trace:
[  544.985788][    C0]  <TASK>
[  544.985795][    C0]  trace_contention_begin+0x31/0x160
[  544.985819][    C0]  __mutex_lock+0x1b1/0x1bd0
[  544.985836][    C0]  ? __unix_dgram_recvmsg+0x255/0xc30
[  544.985856][    C0]  ? __unix_dgram_recvmsg+0x255/0xc30
[  544.985873][    C0]  ? __scm_recv_common.isra.0+0x12e/0x520
[  544.985891][    C0]  ? find_held_lock+0x2b/0x80
[  544.985915][    C0]  ? __unix_dgram_recvmsg+0x75c/0xc30
[  544.985933][    C0]  ? __unix_dgram_recvmsg+0x75c/0xc30
[  544.985951][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  544.985969][    C0]  ? __mutex_unlock_slowpath+0x35d/0x930
[  544.985994][    C0]  ? __unix_dgram_recvmsg+0x255/0xc30
[  544.986013][    C0]  __unix_dgram_recvmsg+0x255/0xc30
[  544.986034][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  544.986059][    C0]  ? iovec_from_user+0xda/0x140
[  544.986083][    C0]  unix_dgram_recvmsg+0xcd/0x100
[  544.986101][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  544.986119][    C0]  ____sys_recvmsg+0x5eb/0x670
[  544.986146][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  544.986173][    C0]  ? rcu_is_watching+0x12/0xc0
[  544.986197][    C0]  ? ___sys_recvmsg+0x177/0x1a0
[  544.986220][    C0]  ? kfree+0x1e5/0x6c0
[  544.986247][    C0]  ___sys_recvmsg+0x16a/0x1a0
[  544.986272][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  544.986297][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  544.986325][    C0]  ? __pfx___might_resched+0x10/0x10
[  544.986348][    C0]  do_recvmmsg+0x2f3/0x740
[  544.986374][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  544.986401][    C0]  ? do_futex+0x190/0x440
[  544.986429][    C0]  ? __x64_sys_futex+0x34f/0x4d0
[  544.986454][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[  544.986475][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  544.986499][    C0]  do_syscall_64+0x115/0x870
[  544.986515][    C0]  ? clear_bhb_loop+0x40/0x90
[  544.986534][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.986552][    C0] RIP: 0033:0x7fbd1a99de99
[  544.986565][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.986582][    C0] RSP: 002b:00007fbd1b877028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  544.986598][    C0] RAX: ffffffffffffffda RBX: 00007fbd1ac25fa0 RCX: 00007fbd1a99de99
[  544.986610][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  544.986621][    C0] RBP: 00007fbd1aa33eaf R08: 0000000000000000 R09: 0000000000000000
[  544.986632][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  544.986642][    C0] R13: 00007fbd1ac26038 R14: 00007fbd1ac25fa0 R15: 00007fff53b98828
[  544.986661][    C0]  </TASK>
[  544.987626][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  544.987642][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  544.987672][   T31] Tainted: [L]=SOFTLOCKUP
[  544.987680][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  544.987692][   T31] Call Trace:
[  544.987700][   T31]  <TASK>
[  544.987708][   T31]  dump_stack_lvl+0x100/0x190
[  544.987735][   T31]  vpanic+0x552/0x970
[  544.987756][   T31]  ? __pfx_vpanic+0x10/0x10
[  544.987779][   T31]  ? rcu_is_watching+0x12/0xc0
[  544.987819][   T31]  panic+0xd1/0xe0
[  544.987840][   T31]  ? __pfx_panic+0x10/0x10
[  544.987864][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  544.987893][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  544.987923][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  544.987951][   T31]  ? watchdog.cold+0x1ec/0x234
[  544.987976][   T31]  ? watchdog+0xcc1/0x1030
[  544.988000][   T31]  watchdog.cold+0x1fd/0x234
[  544.988030][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  544.988062][   T31]  ? __pfx_watchdog+0x10/0x10
[  544.988087][   T31]  ? __kthread_parkme+0x18c/0x230
[  544.988118][   T31]  ? kthread+0x13a/0x450
[  544.988148][   T31]  ? __pfx_watchdog+0x10/0x10
[  544.988169][   T31]  kthread+0x370/0x450
[  544.988199][   T31]  ? __pfx_kthread+0x10/0x10
[  544.988232][   T31]  ret_from_fork+0x72b/0xd50
[  544.988261][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  544.988290][   T31]  ? __switch_to+0x800/0x10f0
[  544.988310][   T31]  ? __pfx_kthread+0x10/0x10
[  544.988343][   T31]  ret_from_fork_asm+0x1a/0x30
[  544.988388][   T31]  </TASK>
[  544.988644][   T31] Kernel Offset: disabled