last executing test programs:

14.838052337s ago: executing program 1 (id=274):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x57)
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_expedited', 0x141a82, 0x12)
r7 = dup(r6)
sendfile(r7, r6, 0x0, 0x8000fffffffe)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x6, <r9=>r7, 0x1})
epoll_pwait(r9, &(0x7f00000000c0)=[{}, {}], 0x2, 0x9, &(0x7f0000000100)={[0x8]}, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x1, 0xb, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x1c, 0x1, {0x1}})
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1b0000001d00210027bd6f00000000000700"], 0x24}}, 0x0)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000000)="34c41dbf1d6aa3fc109129ef516402b9bf96a47cbf9ed81e6720ae016273a1ffab4a6f53bd8faa0b2ece0e3d3434d084b3e0a78d74e1ed38bcf40bdcb3fcf7d4b051e1e9e95c14aa01d635b46d5c9ed5abb06c4d1ed4e4e5736b1fd8de04704d6c8a930fd963e48d7e15f74fdaa45eba543c6e1adcd410ecfda76e501a6ef263a9487fefbf1891fab1435076c0141a0381b0a2da5a6c4a910cde88adf4d1ff682d0e38686db9b0a5641b072d8513e3b896a0fbc78b66b33eb2c15d5ed3ad476b6934b9cf4378775c9af1cc5c43e6da791b1ac8d11acfea9b4e3f", 0xda}, {&(0x7f0000002600)="59a2", 0x2}], 0x2)

14.837359341s ago: executing program 0 (id=275):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r2, r2, 0x0, 0x4800000009)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a)
mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

13.424865527s ago: executing program 1 (id=278):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffc, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "bd49b8cb"}]}}, 0x0}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7f, 0x40d, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
splice(r4, 0x0, r6, 0x0, 0x9, 0x0)
statx(r5, &(0x7f0000000bc0)='./file1\x00', 0x2400, 0x8, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getgid()
lchown(&(0x7f0000000b80)='./file1\x00', r7, r8)
write$cgroup_int(r5, &(0x7f0000000380)=0xfffffffffffff800, 0x12)
r9 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xda, 0x90, 0xd, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x2, 0xf9, {0x9, 0x21, 0x3800, 0x2, 0x1, {0x22, 0x872}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf, 0x69, 0x2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x7a, 0x2}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x6, 0x1, 0x8, 0x2}, 0x21, &(0x7f0000000240)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x4, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x1, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x21, 0x9, 0x4, 0x6, 0x7f}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44f}}, {0x83, &(0x7f00000004c0)=@string={0x83, 0x3, "b85997291dd090dea3e5ff6d0ce34208b4be02e206fe93a55926d9a774d67e11858cdc2fb8147b35236d4ec1cc1f5fe40e19ff95e9e2b4f34b199fa9d3cb14a2cf97c052fe075f42ac1259d251d2a4318a8ece9ea9e882b3da6a008a0a5f84bc15ff4fc5a3916e0d4fb50ef46769278aa9c6c832ee629f92f6437f6c88c5cf944a"}}, {0x4d, &(0x7f0000000580)=@string={0x4d, 0x3, "d8afd4b5a0c9dad59188fe52f597497e3c9ebe55bb2199febd01eec260c92a92aa4d6ac9b125f5490139319042a29e80ebf6b976af366d5e9978a7b8acb9f00658871a260f2a4bbee4a2e0"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1009}}, {0x67, &(0x7f0000000640)=@string={0x67, 0x3, "6db51b7678f2c521c52f01304908d53503486a4ebe64a8183a69fb3f8184a9ad5ea94e2635996e6899e52114305515ae655c180ec85fc33701e8b46f17f4949b660ff1ef6135f808380fb9e6afe33e2a9fc4b39d9a8bbb4f817dbb0bfe0bb04ffe1cd9b1af"}}]})
syz_usb_control_io$hid(r9, &(0x7f00000008c0)={0x24, &(0x7f0000000740)={0x20, 0x0, 0x85, {0x85, 0x7, "9d4ee9006ef81e4312d130ad396320d481611a4d0f75b976bf5f470d9b2944d60a6ee6763275496bab2fade47674b2e1e6268898d008cbc65a0d0a723e3bbf6c25785b685f5de0f809ce7d84fe0b6bca42532a12c135726201f942ba63a1a15aee2586b5b9e0dc4c444fed3e184311b066436912fc8f9fe335aca5ac3655f00be67f26"}}, &(0x7f0000000800)=ANY=[@ANYBLOB="787db2e99576ef00"], &(0x7f0000000840)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0xc, "dbe67928"}, @main=@item_4={0x3, 0x0, 0xc, 'Z&f/'}, @global=@item_4={0x3, 0x1, 0x3, "a2953ec2"}, @main=@item_4={0x3, 0x0, 0x8, "d1002bcd"}, @global=@item_012={0x2, 0x1, 0x2, "f9e4"}, @local=@item_4={0x3, 0x2, 0x5, "56e7912f"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x7, 0x1, {0x22, 0xd79}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x85, "60b93cb2d50a5f18da241e32aa97adb642a6f07077a5ec5bbe4955a781298cc9af21b5b7301a464763dc361f1c3016734d1c188621b50f00c2e790fac2a6eb89c5a0cf9dfca6429312c6f440872dbaeb80baa526aa1b1107d40ef50f1cba5d643f3ab6e1d65750de10fccce1f9b06a1df415db6442446e0125170424d67a5c714b5a9304fb"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x1, 0x81, "18be1abf9f30043b2861d4864b4c86ff8d6c7d50378bdcfadc592318e75ea7b7c28498737e15baef90c23609381f874d5eabaadbc7ce059035b588adb7e48fb33f5fc546cefcac27d9dc9fa91d1ff45e52458aaa9dfe24b18d5be4de5490495ad5a88b5ececdfa4ed5d4493461773f72b9c96336d3b725203edabf4709679a5c23"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x7}})
chdir(&(0x7f0000000280)='./file1\x00')
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a962, 0x2, 0x201, 0x7fff, 0x48cd, 0xfffffffffffffffc, 0x80000001})
r11 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
fchown(r11, 0xee01, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ae0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000012c36d1400"/28], 0x50)

12.052216443s ago: executing program 0 (id=281):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='erofs_fill_inode\x00', r1, 0x0, 0x40}, 0x18)
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={0x0}, 0x18)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0))
read$dsp(r7, &(0x7f0000000300)=""/79, 0x4f)

10.718865493s ago: executing program 2 (id=283):
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x10000000048)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a00010000000500", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket(0x10, 0x803, 0x2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="0100"], 0x3c}}, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000007c0)={0x2b34, 0x2, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x70def9af2fbb56e4, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r6, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

10.016043015s ago: executing program 3 (id=284):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x18)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}]}}]}, 0x40}}, 0x0)

9.831692663s ago: executing program 2 (id=286):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

9.669189904s ago: executing program 3 (id=287):
syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xaa, 0xa0, 0x61, 0x40, 0x5f9, 0xffff, 0x557a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0xcc, 0xde, 0xd}}]}}]}}, 0x0)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='='], 0x118)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000800)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r5 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
fcntl$addseals(r5, 0x409, 0x8)
mmap(&(0x7f00005a5000/0x12000)=nil, 0x12000, 0x8, 0x13, r5, 0xb44f2000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

8.766526063s ago: executing program 1 (id=289):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
read$nci(r0, &(0x7f0000000000)=""/84, 0x54)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01ff22010000bfa90d2c0826364f080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

8.597114476s ago: executing program 4 (id=290):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

8.499925876s ago: executing program 4 (id=291):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4800000009)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a)
mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

8.261849352s ago: executing program 2 (id=292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x100)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x4895}, 0x1)

7.373096189s ago: executing program 1 (id=293):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}}}, 0x24}}, 0x0)
r4 = socket$inet(0x2, 0x5, 0x0)
close(0x3)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f00000006c0)={0x0, "9e6c904a875010a2b08fd7b2e04040cd9fcc284ae9382d42a2ddceda995afbb9"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x200c437, 0x10000, 0x0, 0x3}, &(0x7f0000000340)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r4, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r12, 0x4b2f, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtclass={0x4c, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xa, 0x4}, {0x60ed62a995d62e79, 0x7}, {0xffff, 0xb}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x200}}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0)
unshare(0x80000)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000a8ecbabb721252af4223e385e549d90000cb618f0ad6d1be86d240eb1a8483ccf730a7307a5dc75f7b7225eb4b372b4f5b71f6ffebc1f1be1ff52dc42c0814a020fe7701efd029bf80f66b28116086a6368f0c7998c55f456f6e3f2bed880c0ade22d001f70e9e6fd8d7f72310789e2f1772486f192309b89b050300000000000000ae9cbd8529f0cb8454af5c1895ae1ab2e4e5c3cfe023d24490f2a6e952b2a617732b", @ANYRES16=r13, @ANYBLOB="01002dbd7000fddbdf254c0000000e00a90066697273746e616d650000000c00a60003000000000000000f00a8007365636f6e646e616d6500000800030002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x100)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.33602969s ago: executing program 2 (id=294):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat6\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket(0x1a, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
epoll_create1(0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000)='xfs\x00', 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0)
ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000080))
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000200)=0x2)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x1092fc, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x20, 0x3, 0x6c, "e4262770a630e8008f784507bf4b2bab3c09e4a1756920966e07733b46a3381b7b0cd2bfcd3fdceb113e4d5a3b3c7fe09415e0226071198401ecf8c7479e5e1373e020e18f213b4ca7bfc6d378042c4fb998a5954f2e9624e70a5dbb19732b33642ab145e5c01206a3fac73a"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x85, 0x4, 0xfffffff8}, 0x0, 0x0, 0x0})

7.302168075s ago: executing program 3 (id=295):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a)
mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)

7.25963938s ago: executing program 0 (id=296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='erofs_fill_inode\x00', r1, 0x0, 0x40}, 0x18)
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={0x0}, 0x18)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0))
read$dsp(r7, &(0x7f0000000300)=""/79, 0x4f)

6.404346025s ago: executing program 4 (id=297):
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x18)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}]}}]}, 0x40}}, 0x0)

6.312970324s ago: executing program 3 (id=298):
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d0", 0xe2}, {&(0x7f0000002880)="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", 0x11b}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e7", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a", 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="223565a864", 0x5}, {&(0x7f00000005c0)="4cc7006a494b6e24729f228d7957391e7c06c02a45c077a5474ce715aee6bbdeef14a2eb69032c4656e1aab31b9527d7315063b40033e7259d5159e8b2f16260f45f7b4420575a14ab5f751e8daa91730692c9030da3fcee09a0ceb2536d1197eb061605b2d453ee45a9e5a761e3ab91bc4d16a2593aa4d508bcb2b4861bd031c2a0bb230efc6c38d017af71ebd2f29db6bbf49607e1c49b6590eefa01f0c107384dbe6dc1544229320e5b942fa583c07dd009eacbf00f8de8701aee6850d4a99fd0473b322d64c93dc182ca35abf95d68787ce5941fcc", 0xd7}, {&(0x7f0000000000)="532bb0e5d488233abafd5be217a213e44df91b523354dcff29d7e9ef80ba997f0c846e02fb6a35c73b000048f7c284865e847fa2009a8cc23667f68f4736e3f2a90000000000000000000000000000f7ffffff0000000000", 0x58}, {&(0x7f00000029c0)="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", 0x535}], 0x4}}], 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)

6.03311653s ago: executing program 4 (id=299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='erofs_fill_inode\x00', r1, 0x0, 0x40}, 0x18)
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={0x0}, 0x18)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000000c0))
read$dsp(r7, &(0x7f0000000300)=""/79, 0x4f)

5.576099925s ago: executing program 0 (id=300):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet(0x2, 0x3, 0x4)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xe59}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc90d8b5559ec0195}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x1, 0xfff, 0x4, 0x7fffffff}, {0x7, 0x3, 0x3, 0xe, 0x4, 0x70000000}, 0x8, 0x1000, 0xe85}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040))
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r6, 0x1ad72f7)
accept4$netrom(r6, 0x0, 0x0, 0x80800)

5.259501049s ago: executing program 3 (id=301):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', r2, @tracing=0x19, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
close(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000d40), 0x2, 0x1}}, 0x20)
syz_io_uring_setup(0x7fc5, &(0x7f0000000080)={0x0, 0xfbfffffd, 0x8, 0x2}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)

5.000402766s ago: executing program 4 (id=302):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000100), 0x6)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

4.234708478s ago: executing program 0 (id=303):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r4 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r6, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
accept4$nfc_llcp(r6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x0, 0xefffffff, 0xffffffffffffffff, 0x0, 0x0})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r1, 0x4ee7000)
rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40)

3.534550807s ago: executing program 4 (id=304):
pipe2(&(0x7f0000000040), 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x48)
socketpair(0xa, 0x1, 0x100, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_fd={0x18, 0x7, 0x1, 0x0, r3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x81)
syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x7e, 0x2, 0xffffffffffffffff, 0x4, 0x0, 0x20000000000003, 0x200}, 0x0, &(0x7f0000000240)={0x1b, 0x8000000000, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000005c0)={{0xffffffff, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x20ff, 'syz0\x00', 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000c80)={0x2, 0x80})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x9f, &(0x7f00000003c0)={{0x12, 0x1, 0x341, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x8, 0x20, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '\\2'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x40, 0xfffa, 0xd}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfff0, 0x7, 0x800}, @mdlm_detail={0x27, 0x24, 0x13, 0x81, "05e9d9cd821b20f4df038289f3e11f3763c8e4df97d44934ed79dd4b07f2a0c360976b"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x3, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x1, 0x38}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x5, 0x8, 0x40, 0x1}, 0x88, &(0x7f0000000480)=ANY=[@ANYBLOB="050f880003071002f9d704005b10014b17c549aa45191e22f4a14b4856ba1e78f73a15ab1850ef830d06fbc8918aca3516aacba7c847a498fae23f7453c40f640d279b244d2dd9f245f50cd6322f004a19befc451cc1f158310f33bfeb88add641d096ee892c8bdfdb0ae74216dd1cc26f11e55679359f7764455757e6f1b06f76831867a7626fd3"], 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb2, &(0x7f0000000700)=@string={0xb2, 0x3, "a03a400498720d638e53ca9a668dea9059bbc6fc8e63d79eafdaa85383c58442d5a431f51fbe17df833db6c1725b07fa3693e3dc8f1750611b872144aef78bdf9fb0bf83c1e34f2e3ea795ff9a19830bab587cdec27d91c72f903519ba709c6eaf72427e4e7d9b290f029d08070af2a9b6a71c200fc8769269a64101a1aec53ed2fdaba32743d800b0ad791c25316b5e005ff8285dfd4f45b6b2a9c583180dea1d2d8d8ef0e9943c1ed6c257f2bebe9b"}}]})
symlink(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00')
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040))
poll(&(0x7f0000000000)=[{r6, 0x1104}], 0x1, 0x8)

3.09465277s ago: executing program 2 (id=305):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x100)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c030000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf25120000005c0004800c00078008000200080000000900010073797a3100000000340007800800020000000000080003000300000008000400020000000800040002000008000400f7ffffff08000100190000000c00078008000200000000000c0005800800010075647000a000058008000100756470000800010065746800080001006574680008000100756470000c000280080001000f0000000800010075647000540002800800020005000000080003000900000008000100150000000800020001000000080002008d04000008000100190000000800010004000000080004003db200000800020008000000080004000000000008000100756470000c000280080001001f0000005c0007800c000300030000000000000008000100090000000c000400b2000000000000000c00040002000000000000000c000400ffffffffffffffff08000200010000000c000400faffffffffffffff0c0004000000000000000000340004800900010073797a300000000024000780080001000400000008e486000400060000000800040008000000080001000c0000008800028008000100ce0000003400038008000200ffffff7f080001000400000008000200f8ffffff080001000800000008000100030000000800020086970d32040003801c0003800800020006000000080001008e00000008000200000000000c00038008000200ff0f000008000100080000000400040008000100210e00000800020020020000c00005802c000280080001000b00000008000200080000000800010100000000080001001c0000007ab840c60200000044000280080003000304000000080001000d000000080004000c000000080004000200000008000200200e0000080004000f00000008000300000000003c0002800800030010000000080001000e00000008000100130000000800030005000000080002000000000008000400060000000800010005000000080001006574680008000100657468009400018008000300020000002c0004001400010002004e246401010100000000000000001400020002004e24ac1414bb000000000000000014000280080003001e45cb0c080001000000000008000300050000001c000280080004000000000008000300000000000800030000a0570508000300090000001c000280080001001a000000080001001a000000080001001c00000004000180eb00529c74100818f0d00e4c73c94e3a8964da036bcbc5b50932fad56bfd7675dc6009838118"], 0x38c}, 0x1, 0x0, 0x0, 0x4895}, 0x1)

2.85508811s ago: executing program 0 (id=306):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall() (fail_nth: 1)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, 0x0, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, 0x0, 0x0)

2.730651441s ago: executing program 3 (id=307):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffd0c, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000"], 0x4c}}, 0x0)
connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
socket$inet6(0xa, 0x2, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.085459516s ago: executing program 1 (id=308):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a)
mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)

897.431757ms ago: executing program 2 (id=309):
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffc)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f00000001c0)="e47033447097ef00000000002000", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)=0x1000)
write$dsp(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 1 (id=310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x12)
writev(r3, &(0x7f0000001140)=[{&(0x7f00000010c0)='o', 0x1}], 0x1)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r4)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x9, 0x6, 0x5, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x4, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x2, 0x100, 0x9, 0xb, 0x1a7427c9, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x9, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0x5, 0xfff, 0x2, 0x10003, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x4, 0x9, 0x10, 0x2, 0xd1c, 0x80000001, 0x9, 0x8001, 0x0, 0x1, 0xfffffffffffff3a0, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe5, 0xfa0, 0x9, 0x1, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfffffffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x27ee, 0x0, 0x0, 0x0, 0x4, 0x6, 0x8, 0x6, 0x8000000000000001, 0x4, 0xd27, 0x0, 0x4, 0x3ff, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 exists on: batadv_slave_0
[   61.400435][   T30] audit: type=1400 audit(1745888181.533:119): avc:  denied  { unmount } for  pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   61.430875][   T30] audit: type=1400 audit(1745888181.563:120): avc:  denied  { mounton } for  pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   61.432523][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.457077][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.481347][   T30] audit: type=1400 audit(1745888181.563:121): avc:  denied  { mount } for  pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   61.488105][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.518359][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.529845][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.544047][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.554890][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.565565][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.583825][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.599970][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.609943][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.638093][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.694953][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.707189][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.719934][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.731409][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.731413][ T5902] FAULT_INJECTION: forcing a failure.
[   61.731413][ T5902] name failslab, interval 1, probability 0, space 0, times 1
[   61.741556][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.756294][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.3.4 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[   61.756313][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   61.756322][ T5902] Call Trace:
[   61.756327][ T5902]  <TASK>
[   61.756333][ T5902]  dump_stack_lvl+0x16c/0x1f0
[   61.756353][ T5902]  should_fail_ex+0x512/0x640
[   61.756372][ T5902]  ? __kmalloc_cache_noprof+0x57/0x3e0
[   61.756394][ T5902]  should_failslab+0xc2/0x120
[   61.756409][ T5902]  __kmalloc_cache_noprof+0x6a/0x3e0
[   61.756429][ T5902]  ? alloc_pipe_info+0x10e/0x590
[   61.756446][ T5902]  alloc_pipe_info+0x10e/0x590
[   61.756462][ T5902]  splice_direct_to_actor+0x77d/0xa30
[   61.756485][ T5902]  ? __pfx_direct_splice_actor+0x10/0x10
[   61.756504][ T5902]  ? inode_has_perm+0x16f/0x1d0
[   61.756521][ T5902]  ? file_has_perm+0x27d/0x350
[   61.756535][ T5902]  ? __pfx_splice_direct_to_actor+0x10/0x10
[   61.756555][ T5902]  ? __pfx_file_has_perm+0x10/0x10
[   61.756579][ T5902]  do_splice_direct+0x174/0x240
[   61.756599][ T5902]  ? __pfx_do_splice_direct+0x10/0x10
[   61.756620][ T5902]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   61.756641][ T5902]  ? bpf_lsm_file_permission+0x9/0x10
[   61.756660][ T5902]  ? security_file_permission+0x71/0x210
[   61.756680][ T5902]  ? rw_verify_area+0xcf/0x680
[   61.756700][ T5902]  do_sendfile+0xafd/0xe50
[   61.756723][ T5902]  ? __pfx_do_sendfile+0x10/0x10
[   61.756742][ T5902]  ? __fget_files+0x20e/0x3c0
[   61.756768][ T5902]  __x64_sys_sendfile64+0x1d8/0x220
[   61.756782][ T5902]  ? ksys_write+0x1b9/0x240
[   61.756801][ T5902]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[   61.756815][ T5902]  ? rcu_is_watching+0x12/0xc0
[   61.756837][ T5902]  do_syscall_64+0xcd/0x260
[   61.756855][ T5902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.756869][ T5902] RIP: 0033:0x7fa94558e969
[   61.756882][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.756895][ T5902] RSP: 002b:00007fa9433f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   61.756909][ T5902] RAX: ffffffffffffffda RBX: 00007fa9457b5fa0 RCX: 00007fa94558e969
[   61.756918][ T5902] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[   61.756926][ T5902] RBP: 00007fa9433f6090 R08: 0000000000000000 R09: 0000000000000000
[   61.756934][ T5902] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001
[   61.756943][ T5902] R13: 0000000000000000 R14: 00007fa9457b5fa0 R15: 00007ffeaaa001f8
[   61.756962][ T5902]  </TASK>
[   61.900711][ T5866] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   61.902922][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.033169][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.051917][ T5821] veth0_macvtap: entered promiscuous mode
[   62.067695][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   62.083426][ T5866] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   62.092035][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.102995][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.118421][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.122407][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.138511][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.155584][ T5866] usb 1-1: config 0 descriptor??
[   62.158717][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.180372][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.183057][ T5866] pwc: Askey VC010 type 2 USB webcam detected.
[   62.202251][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.226590][ T5821] veth1_macvtap: entered promiscuous mode
[   62.249571][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.263652][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.277449][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.300398][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.346454][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.361271][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.371764][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.393260][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.411495][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.429468][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.440869][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.451643][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.463523][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.508570][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.522947][ T5830] Bluetooth: hci1: command tx timeout
[   62.522954][ T5817] Bluetooth: hci2: command tx timeout
[   62.538877][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.550843][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.561420][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.574521][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.585108][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.596733][ T5830] Bluetooth: hci4: command tx timeout
[   62.603263][ T5830] Bluetooth: hci0: command tx timeout
[   62.604804][ T5817] Bluetooth: hci3: command tx timeout
[   62.610586][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.627263][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.651984][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.669824][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00
[   62.681734][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.692433][ T5866] pwc: recv_control_msg error -32 req 02 val 2700
[   62.699649][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00
[   62.716749][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.724552][ T5866] pwc: recv_control_msg error -32 req 04 val 1000
[   62.737299][ T5866] pwc: recv_control_msg error -32 req 04 val 1300
[   62.758988][ T5866] pwc: recv_control_msg error -32 req 04 val 1400
[   62.766784][ T5866] pwc: recv_control_msg error -32 req 02 val 2000
[   62.776206][ T5866] pwc: recv_control_msg error -32 req 02 val 2100
[   62.783644][ T5866] pwc: recv_control_msg error -32 req 04 val 1500
[   62.816083][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.825864][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.835164][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.844157][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.857788][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.871938][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.969472][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.983504][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.992910][ T5866] pwc: recv_control_msg error -71 req 02 val 2400
[   63.005513][ T5866] pwc: recv_control_msg error -71 req 02 val 2600
[   63.050826][ T5866] pwc: recv_control_msg error -71 req 02 val 2900
[   63.050895][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.068255][ T5866] pwc: recv_control_msg error -71 req 02 val 2800
[   63.087558][ T5866] pwc: recv_control_msg error -71 req 04 val 1100
[   63.089929][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.102931][ T5866] pwc: recv_control_msg error -71 req 04 val 1200
[   63.117745][ T5866] pwc: Registered as video103.
[   63.154989][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.171468][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[   63.176010][ T5915] process 'syz.3.8' launched './file0' with NULL argv: empty string added
[   63.190571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.199016][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.209634][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.398334][ T5866] usb 1-1: USB disconnect, device number 2
[   63.435919][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.455313][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.495901][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.542559][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.560714][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   63.898194][ T5927] FAULT_INJECTION: forcing a failure.
[   63.898194][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   63.898222][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz.0.9 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[   63.898246][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   63.898255][ T5927] Call Trace:
[   63.898260][ T5927]  <TASK>
[   63.898266][ T5927]  dump_stack_lvl+0x16c/0x1f0
[   63.898290][ T5927]  should_fail_ex+0x512/0x640
[   63.898315][ T5927]  _copy_from_user+0x2e/0xd0
[   63.898339][ T5927]  copy_msghdr_from_user+0x98/0x160
[   63.898365][ T5927]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   63.898400][ T5927]  ___sys_sendmsg+0xfe/0x1d0
[   63.898425][ T5927]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.898480][ T5927]  __sys_sendmsg+0x16d/0x220
[   63.898504][ T5927]  ? __pfx___sys_sendmsg+0x10/0x10
[   63.898535][ T5927]  ? rcu_is_watching+0x12/0xc0
[   63.898562][ T5927]  do_syscall_64+0xcd/0x260
[   63.898584][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.898600][ T5927] RIP: 0033:0x7f622cb8e969
[   63.898612][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.898627][ T5927] RSP: 002b:00007f622da33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.898643][ T5927] RAX: ffffffffffffffda RBX: 00007f622cdb5fa0 RCX: 00007f622cb8e969
[   63.898654][ T5927] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[   63.898663][ T5927] RBP: 00007f622da33090 R08: 0000000000000000 R09: 0000000000000000
[   63.898672][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.898681][ T5927] R13: 0000000000000000 R14: 00007f622cdb5fa0 R15: 00007ffdda6bc2e8
[   63.898703][ T5927]  </TASK>
[   64.590809][ T5828] Bluetooth: hci1: command tx timeout
[   64.590847][ T5828] Bluetooth: hci2: command tx timeout
[   64.731031][ T5817] Bluetooth: hci0: command tx timeout
[   64.748552][ T5817] Bluetooth: hci4: command tx timeout
[   64.752074][ T5817] Bluetooth: hci3: command tx timeout
[   65.087424][ T5864] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   65.152349][  T974] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.276118][   T30] kauditd_printk_skb: 64 callbacks suppressed
[   65.276133][   T30] audit: type=1400 audit(1745888185.553:186): avc:  denied  { read } for  pid=5938 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.320692][ T5864] usb 2-1: Using ep0 maxpacket: 8
[   65.327122][ T5864] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   65.327152][ T5864] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   65.327165][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   65.327177][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   65.327190][ T5864] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   65.327211][ T5864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   65.327223][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.365969][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.480849][  T974] usb 1-1: config 129 has an invalid interface number: 88 but max is 0
[   65.480875][  T974] usb 1-1: config 129 has no interface number 0
[   65.480898][  T974] usb 1-1: config 129 interface 88 has no altsetting 0
[   65.480923][  T974] usb 1-1: New USB device found, idVendor=c427, idProduct=aa39, bcdDevice=35.7f
[   65.480957][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.627633][   T30] audit: type=1400 audit(1745888185.903:187): avc:  denied  { read write } for  pid=5945 comm="syz.2.13" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   65.628036][   T30] audit: type=1400 audit(1745888185.903:188): avc:  denied  { open } for  pid=5945 comm="syz.2.13" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   65.628862][   T30] audit: type=1400 audit(1745888185.903:189): avc:  denied  { read } for  pid=5945 comm="syz.2.13" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   65.629088][   T30] audit: type=1400 audit(1745888185.903:190): avc:  denied  { open } for  pid=5945 comm="syz.2.13" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   65.699519][   T30] audit: type=1400 audit(1745888185.963:191): avc:  denied  { create } for  pid=5935 comm="syz.0.10" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   65.705899][   T30] audit: type=1400 audit(1745888185.963:192): avc:  denied  { read } for  pid=5935 comm="syz.0.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   65.705944][   T30] audit: type=1400 audit(1745888185.963:193): avc:  denied  { open } for  pid=5935 comm="syz.0.10" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   65.705975][   T30] audit: type=1400 audit(1745888185.963:194): avc:  denied  { ioctl } for  pid=5935 comm="syz.0.10" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   65.805426][ T5864] usb 2-1: GET_CAPABILITIES returned 0
[   65.848976][    C1] vkms_vblank_simulate: vblank timer overrun
[   65.920383][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   65.935384][ T5864] usbtmc 2-1:16.0: can't read capabilities
[   66.122146][   T30] audit: type=1400 audit(1745888186.403:195): avc:  denied  { ioctl } for  pid=5951 comm="syz.4.14" path="socket:[8212]" dev="sockfs" ino=8212 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.185021][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.230794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   66.290404][ T5816] usb 2-1: USB disconnect, device number 2
[   66.392372][  T974] usb 1-1: string descriptor 0 read error: -71
[   66.419493][  T974] usb 1-1: USB disconnect, device number 3
[   66.593608][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   66.920417][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.128248][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.163481][ T5864] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   67.226240][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.439040][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   68.197425][ T5864] usb 4-1: config 0 descriptor??
[   68.212784][ T5864] pwc: Askey VC010 type 2 USB webcam detected.
[   68.634294][ T5868] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[   68.655784][ T5868] usb 2-1: config 0 has no interface number 0
[   68.684375][ T5868] usb 2-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[   68.884402][ T5868] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[   68.947013][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.413623][ T5981] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22'.
[   69.735232][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.744651][ T5868] usb 2-1: config 0 descriptor??
[   69.805338][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.850766][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00
[   69.887601][ T5864] pwc: recv_control_msg error -32 req 02 val 2700
[   69.911723][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00
[   69.945741][ T5864] pwc: recv_control_msg error -32 req 04 val 1000
[   69.984562][ T5864] pwc: recv_control_msg error -32 req 04 val 1300
[   70.107254][ T5864] pwc: recv_control_msg error -32 req 04 val 1400
[   70.228164][ T5864] pwc: recv_control_msg error -32 req 02 val 2000
[   70.250341][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   70.266402][ T5868] usb 2-1: can't set config #0, error -71
[   70.280406][    T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!!
[   70.288093][ T5864] pwc: recv_control_msg error -32 req 02 val 2100
[   70.365735][ T5864] pwc: recv_control_msg error -32 req 04 val 1500
[   70.368583][ T5868] usb 2-1: USB disconnect, device number 3
[   70.391031][   T30] kauditd_printk_skb: 31 callbacks suppressed
[   70.391041][   T30] audit: type=1400 audit(1745888190.673:227): avc:  denied  { create } for  pid=5986 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.523156][   T30] audit: type=1400 audit(1745888190.713:228): avc:  denied  { bind } for  pid=5986 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.585085][   T30] audit: type=1400 audit(1745888190.713:229): avc:  denied  { write } for  pid=5986 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   70.652527][ T5864] pwc: recv_control_msg error -71 req 02 val 2400
[   70.692139][ T5864] pwc: recv_control_msg error -71 req 02 val 2600
[   70.716259][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.729914][ T5864] pwc: recv_control_msg error -71 req 02 val 2900
[   70.750127][   T30] audit: type=1400 audit(1745888190.713:230): avc:  denied  { setopt } for  pid=5986 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.757432][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   70.780773][ T5864] pwc: recv_control_msg error -71 req 02 val 2800
[   70.865257][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.934384][   T30] audit: type=1400 audit(1745888190.723:231): avc:  denied  { watch } for  pid=5986 comm="syz.0.24" path="/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   71.000426][   T30] audit: type=1400 audit(1745888190.723:232): avc:  denied  { watch_sb watch_reads } for  pid=5986 comm="syz.0.24" path="/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   71.049537][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[   71.056474][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[   71.068591][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.079476][   T30] audit: type=1400 audit(1745888190.723:233): avc:  denied  { execute } for  pid=5986 comm="syz.0.24" path="/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   71.150108][   T30] audit: type=1400 audit(1745888190.833:234): avc:  denied  { mounton } for  pid=5986 comm="syz.0.24" path="/5" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   71.175586][   T30] audit: type=1400 audit(1745888190.993:235): avc:  denied  { prog_load } for  pid=5991 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   71.400238][   T30] audit: type=1400 audit(1745888190.993:236): avc:  denied  { create } for  pid=5994 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   71.553632][ T5864] pwc: recv_control_msg error -71 req 04 val 1100
[   71.561804][ T5864] pwc: recv_control_msg error -71 req 04 val 1200
[   71.571292][ T5864] pwc: Registered as video103.
[   71.577936][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[   71.767714][ T5864] usb 4-1: USB disconnect, device number 2
[   75.413137][   T30] kauditd_printk_skb: 34 callbacks suppressed
[   75.413151][   T30] audit: type=1400 audit(1745888195.693:271): avc:  denied  { prog_load } for  pid=6033 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   75.488259][   T30] audit: type=1400 audit(1745888195.723:272): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   75.511388][   T30] audit: type=1400 audit(1745888195.723:273): avc:  denied  { search } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   75.589194][   T30] audit: type=1400 audit(1745888195.723:274): avc:  denied  { append } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.640848][   T30] audit: type=1400 audit(1745888195.723:275): avc:  denied  { open } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.758922][   T30] audit: type=1400 audit(1745888195.723:276): avc:  denied  { getattr } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.785562][   T30] audit: type=1400 audit(1745888195.723:277): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   75.788225][ T6049] lo speed is unknown, defaulting to 1000
[   75.812699][   T30] audit: type=1400 audit(1745888195.723:278): avc:  denied  { bpf } for  pid=6033 comm="syz.1.36" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   75.978546][ T6049] lo speed is unknown, defaulting to 1000
[   75.993152][ T6049] lo speed is unknown, defaulting to 1000
[   76.025252][ T6049] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.050937][ T6049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.170659][   T30] audit: type=1400 audit(1745888195.733:279): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   76.170845][   T30] audit: type=1400 audit(1745888195.733:280): avc:  denied  { open } for  pid=5812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   76.245086][   T10] cfg80211: failed to load regulatory.db
[   76.376709][ T6049] lo speed is unknown, defaulting to 1000
[   76.434833][ T6049] lo speed is unknown, defaulting to 1000
[   76.441974][ T6049] lo speed is unknown, defaulting to 1000
[   76.449594][ T6049] lo speed is unknown, defaulting to 1000
[   76.456877][ T6049] lo speed is unknown, defaulting to 1000
[   79.512153][ T6079] netlink: 'syz.0.48': attribute type 1 has an invalid length.
[   79.560810][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'.
[   80.720653][   T30] kauditd_printk_skb: 47 callbacks suppressed
[   80.720668][   T30] audit: type=1400 audit(1745888200.963:328): avc:  denied  { create } for  pid=6093 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   80.749945][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'.
[   81.098336][   T30] audit: type=1400 audit(1745888200.973:329): avc:  denied  { ioctl } for  pid=6093 comm="syz.2.52" path="socket:[8412]" dev="sockfs" ino=8412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   81.241247][   T30] audit: type=1400 audit(1745888201.063:330): avc:  denied  { allowed } for  pid=6095 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   81.260289][    C0] vkms_vblank_simulate: vblank timer overrun
[   81.531701][ T5893] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   81.559088][   T30] audit: type=1400 audit(1745888201.063:331): avc:  denied  { create } for  pid=6095 comm="syz.3.54" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   81.580013][    C0] vkms_vblank_simulate: vblank timer overrun
[   81.598721][   T30] audit: type=1400 audit(1745888201.063:332): avc:  denied  { map } for  pid=6095 comm="syz.3.54" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   81.688468][   T30] audit: type=1400 audit(1745888201.063:333): avc:  denied  { read write } for  pid=6095 comm="syz.3.54" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   81.712962][    C0] vkms_vblank_simulate: vblank timer overrun
[   81.740767][   T30] audit: type=1400 audit(1745888201.333:334): avc:  denied  { read write } for  pid=6093 comm="syz.2.52" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   81.764165][    C0] vkms_vblank_simulate: vblank timer overrun
[   81.832643][ T5893] usb 3-1: Using ep0 maxpacket: 16
[   81.840182][ T5893] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[   81.847993][   T30] audit: type=1400 audit(1745888201.333:335): avc:  denied  { open } for  pid=6093 comm="syz.2.52" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   81.885280][   T30] audit: type=1400 audit(1745888201.333:336): avc:  denied  { ioctl } for  pid=6093 comm="syz.2.52" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x5641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   81.910154][    C0] vkms_vblank_simulate: vblank timer overrun
[   82.042340][   T30] audit: type=1400 audit(1745888201.343:337): avc:  denied  { read } for  pid=6105 comm="syz.3.56" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   82.045492][ T5893] usb 3-1: config 0 has no interface number 0
[   82.064982][    C0] vkms_vblank_simulate: vblank timer overrun
[   82.580438][ T6123] loop7: detected capacity change from 0 to 2
[   82.593383][ T6123] Dev loop7: unable to read RDB block 2
[   82.617212][ T6123]  loop7: unable to read partition table
[   82.623350][ T6123] loop7: partition table beyond EOD, truncated
[   82.630264][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'.
[   82.640181][ T6129] SELinux:  Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped).
[   82.649919][ T6123] loop_reread_partitions: partition scan of loop7 (�被x������ڬ��dƤ����ݡ�����
[   82.649919][ T6123] 
) failed (rc=-5)
[   82.683188][  T962] Bluetooth: hci5: Frame reassembly failed (-84)
[   82.738978][  T962] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[   82.768631][ T5893] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   83.779679][ T5893] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   83.847804][ T5893] usb 3-1: string descriptor 0 read error: -71
[   83.881767][ T5893] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   83.922507][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   83.947815][ T5893] usb 3-1: config 0 descriptor??
[   83.954658][ T5893] usb 3-1: can't set config #0, error -71
[   83.971212][ T5893] usb 3-1: USB disconnect, device number 2
[   84.072512][ T5864] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.432419][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.442976][ T5864] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   84.461850][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.762679][ T5817] Bluetooth: hci5: command 0x1003 tx timeout
[   84.768946][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   84.890506][ T5864] usb 1-1: config 0 descriptor??
[   84.972841][ T5864] pwc: Askey VC010 type 2 USB webcam detected.
[   85.293778][ T6154] Zero length message leads to an empty skb
[   85.348184][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.364120][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.428016][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00
[   85.447210][ T5864] pwc: recv_control_msg error -32 req 02 val 2700
[   85.470608][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00
[   85.483653][ T5864] pwc: recv_control_msg error -32 req 04 val 1000
[   85.490767][ T5864] pwc: recv_control_msg error -32 req 04 val 1300
[   85.497730][ T5864] pwc: recv_control_msg error -32 req 04 val 1400
[   85.517213][ T5864] pwc: recv_control_msg error -32 req 02 val 2000
[   85.525840][ T5864] pwc: recv_control_msg error -32 req 02 val 2100
[   85.538911][ T5864] pwc: recv_control_msg error -32 req 04 val 1500
[   85.803873][ T6159] capability: warning: `syz.2.71' uses deprecated v2 capabilities in a way that may be insecure
[   85.814464][ T5864] pwc: recv_control_msg error -71 req 02 val 2400
[   85.824195][ T5864] pwc: recv_control_msg error -71 req 02 val 2600
[   85.832681][ T5864] pwc: recv_control_msg error -71 req 02 val 2900
[   85.839356][ T5864] pwc: recv_control_msg error -71 req 02 val 2800
[   86.336640][ T5864] pwc: recv_control_msg error -71 req 04 val 1100
[   86.346599][ T5864] pwc: recv_control_msg error -71 req 04 val 1200
[   86.377731][ T5864] pwc: Registered as video103.
[   86.435257][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[   86.474441][   T30] kauditd_printk_skb: 111 callbacks suppressed
[   86.474455][   T30] audit: type=1400 audit(1745888206.753:449): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=2759 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.612236][ T5864] usb 1-1: USB disconnect, device number 4
[   86.623080][   T30] audit: type=1400 audit(1745888206.753:450): avc:  denied  { open } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2759 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.647270][   T30] audit: type=1400 audit(1745888206.753:451): avc:  denied  { ioctl } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2759 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.738066][ T6164] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   86.843665][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'.
[   87.005573][   T30] audit: type=1400 audit(1745888207.283:452): avc:  denied  { create } for  pid=6167 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.011897][ T6166] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.184391][   T30] audit: type=1400 audit(1745888207.303:453): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   88.121396][   T30] audit: type=1400 audit(1745888208.403:454): avc:  denied  { read write } for  pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   88.166238][   T30] audit: type=1400 audit(1745888208.423:455): avc:  denied  { execmem } for  pid=6186 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   88.197169][   T30] audit: type=1400 audit(1745888208.423:456): avc:  denied  { open } for  pid=5812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   88.317893][   T30] audit: type=1400 audit(1745888208.423:457): avc:  denied  { ioctl } for  pid=5812 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   89.340593][   T30] audit: type=1400 audit(1745888208.463:458): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   89.640562][ T5816] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.850868][ T5816] usb 3-1: Using ep0 maxpacket: 8
[   89.862477][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   89.881094][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   89.902622][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.932838][ T5816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.950407][ T5865] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   89.977916][ T5816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   89.992389][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.040629][ T5868] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.151474][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.651135][ T5865] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   90.661030][ T5868] usb 4-1: Using ep0 maxpacket: 32
[   90.680954][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short
[   90.697071][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.714858][ T5868] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   90.734629][ T5865] usb 2-1: config 0 descriptor??
[   90.744657][ T5865] pwc: Askey VC010 type 2 USB webcam detected.
[   90.754496][ T5868] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[   90.773187][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.777945][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.784229][ T5868] usb 4-1: Product: syz
[   90.793914][ T5868] usb 4-1: Manufacturer: syz
[   90.798513][ T5868] usb 4-1: SerialNumber: syz
[   90.804889][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.066363][ T5868] usb 4-1: Limiting number of CPorts to U8_MAX
[   91.076753][ T5868] usb 4-1: Not enough endpoints found in device, aborting!
[   91.165563][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.178660][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.191157][ T5865] pwc: recv_control_msg error -32 req 02 val 2b00
[   91.198561][ T5865] pwc: recv_control_msg error -32 req 02 val 2700
[   91.207286][ T5865] pwc: recv_control_msg error -32 req 02 val 2c00
[   91.215710][ T5865] pwc: recv_control_msg error -32 req 04 val 1000
[   91.225239][ T5865] pwc: recv_control_msg error -32 req 04 val 1300
[   91.233765][ T5865] pwc: recv_control_msg error -32 req 04 val 1400
[   91.242221][ T5865] pwc: recv_control_msg error -32 req 02 val 2000
[   91.249471][ T5865] pwc: recv_control_msg error -32 req 02 val 2100
[   91.257364][ T5865] pwc: recv_control_msg error -32 req 04 val 1500
[   91.478867][ T5865] pwc: recv_control_msg error -71 req 02 val 2400
[   91.494035][ T5865] pwc: recv_control_msg error -71 req 02 val 2600
[   91.501634][ T5865] pwc: recv_control_msg error -71 req 02 val 2900
[   91.508796][ T5865] pwc: recv_control_msg error -71 req 02 val 2800
[   91.517618][ T5865] pwc: recv_control_msg error -71 req 04 val 1100
[   91.525408][ T5865] pwc: recv_control_msg error -71 req 04 val 1200
[   91.535020][ T5865] pwc: Registered as video103.
[   91.546343][ T5865] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[   91.599704][   T30] kauditd_printk_skb: 39 callbacks suppressed
[   91.599720][   T30] audit: type=1400 audit(1745888211.873:498): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=2773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   91.628285][    C1] vkms_vblank_simulate: vblank timer overrun
[   91.639382][ T5865] usb 2-1: USB disconnect, device number 4
[   91.724852][   T30] audit: type=1400 audit(1745888211.873:499): avc:  denied  { open } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   91.748868][    C1] vkms_vblank_simulate: vblank timer overrun
[   91.782004][   T30] audit: type=1400 audit(1745888211.873:500): avc:  denied  { ioctl } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2773 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.247398][   T30] audit: type=1400 audit(1745888212.513:501): avc:  denied  { read } for  pid=6220 comm="syz.0.90" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   92.385922][   T30] audit: type=1400 audit(1745888212.523:502): avc:  denied  { open } for  pid=6220 comm="syz.0.90" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   92.466921][ T5816] usb 3-1: usb_control_msg returned -71
[   92.477834][ T5816] usbtmc 3-1:16.0: can't read capabilities
[   92.491810][   T30] audit: type=1400 audit(1745888212.533:503): avc:  denied  { ioctl } for  pid=6220 comm="syz.0.90" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   92.528597][ T5816] usb 3-1: USB disconnect, device number 3
[   93.193084][ T5893] usb 4-1: USB disconnect, device number 3
[   93.193857][   T30] audit: type=1400 audit(1745888212.733:504): avc:  denied  { write } for  pid=6220 comm="syz.0.90" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   93.193918][   T30] audit: type=1400 audit(1745888212.743:505): avc:  denied  { read write } for  pid=6224 comm="syz.1.91" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.193939][   T30] audit: type=1400 audit(1745888212.743:506): avc:  denied  { open } for  pid=6224 comm="syz.1.91" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.193960][   T30] audit: type=1400 audit(1745888212.783:507): avc:  denied  { append } for  pid=6226 comm="syz.2.93" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.314625][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.391500][ T6263] netlink: 'syz.3.100': attribute type 1 has an invalid length.
[   95.415026][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'.
[   96.670593][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   96.860863][ T5865] usb 2-1: Using ep0 maxpacket: 8
[   97.011353][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   97.041632][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   97.076251][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   97.121361][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.163477][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   97.189318][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.421427][   T30] kauditd_printk_skb: 46 callbacks suppressed
[   97.421442][   T30] audit: type=1400 audit(1745888217.703:554): avc:  denied  { read write } for  pid=6288 comm="syz.0.108" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   97.578571][   T30] audit: type=1400 audit(1745888217.733:555): avc:  denied  { open } for  pid=6288 comm="syz.0.108" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   97.979966][   T30] audit: type=1400 audit(1745888217.733:556): avc:  denied  { create } for  pid=6270 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   97.999439][   T30] audit: type=1400 audit(1745888217.843:557): avc:  denied  { allowed } for  pid=6270 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   98.009533][ T5865] usb 2-1: GET_CAPABILITIES returned 0
[   98.042223][ T5865] usbtmc 2-1:16.0: can't read capabilities
[   98.043410][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.049890][   T30] audit: type=1400 audit(1745888217.843:558): avc:  denied  { create } for  pid=6270 comm="syz.1.104" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   98.122836][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.153248][   T30] audit: type=1400 audit(1745888217.843:559): avc:  denied  { map } for  pid=6270 comm="syz.1.104" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   98.181206][   T30] audit: type=1400 audit(1745888217.843:560): avc:  denied  { read write } for  pid=6270 comm="syz.1.104" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   98.228809][   T30] audit: type=1400 audit(1745888218.313:561): avc:  denied  { read append } for  pid=6288 comm="syz.0.108" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   98.273919][   T30] audit: type=1400 audit(1745888218.313:562): avc:  denied  { open } for  pid=6288 comm="syz.0.108" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   98.323705][   T30] audit: type=1400 audit(1745888218.313:563): avc:  denied  { ioctl } for  pid=6288 comm="syz.0.108" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   99.656619][    T9] usb 2-1: USB disconnect, device number 5
[  100.405305][ T6323] siw: device registration error -23
[  101.236001][ T5864] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  101.499988][ T5864] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  101.735999][ T5864] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  101.760354][ T5864] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  101.769424][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.429730][ T6341] siw: device registration error -23
[  103.137838][   T30] kauditd_printk_skb: 68 callbacks suppressed
[  103.137850][   T30] audit: type=1400 audit(1745888223.413:632): avc:  denied  { read write } for  pid=6346 comm="syz.3.121" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  103.246991][   T30] audit: type=1400 audit(1745888223.413:633): avc:  denied  { open } for  pid=6346 comm="syz.3.121" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  103.383412][   T30] audit: type=1400 audit(1745888223.513:634): avc:  denied  { read append } for  pid=6346 comm="syz.3.121" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  103.843494][   T30] audit: type=1400 audit(1745888223.513:635): avc:  denied  { open } for  pid=6346 comm="syz.3.121" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  103.846713][ T5864] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  103.880773][ T5864] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9
[  103.901738][   T30] audit: type=1400 audit(1745888223.513:636): avc:  denied  { ioctl } for  pid=6346 comm="syz.3.121" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  103.934656][   T30] audit: type=1400 audit(1745888224.183:637): avc:  denied  { append } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  103.958322][ T5864] input: failed to attach handler kbd to device input9, error: -5
[  104.158488][ T5864] usb 2-1: USB disconnect, device number 6
[  104.636718][   T30] audit: type=1400 audit(1745888224.243:638): avc:  denied  { map_create } for  pid=6355 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  104.673578][   T30] audit: type=1400 audit(1745888224.243:639): avc:  denied  { map_read map_write } for  pid=6355 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  104.702127][   T30] audit: type=1400 audit(1745888224.253:640): avc:  denied  { prog_load } for  pid=6355 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  104.722821][   T30] audit: type=1400 audit(1745888224.253:641): avc:  denied  { bpf } for  pid=6355 comm="syz.4.124" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  105.396998][ T6372] siw: device registration error -23
[  106.385737][ T6378] SELinux: selinux_ima_measure_state_locked: failed to read policy -12.
[  107.937371][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[  108.155585][   T30] kauditd_printk_skb: 81 callbacks suppressed
[  108.155601][   T30] audit: type=1400 audit(1745888228.433:723): avc:  denied  { create } for  pid=6396 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  108.607962][   T30] audit: type=1400 audit(1745888228.623:724): avc:  denied  { append } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  108.630700][   T30] audit: type=1400 audit(1745888228.883:725): avc:  denied  { ioctl } for  pid=6392 comm="syz.2.134" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  108.657219][   T30] audit: type=1400 audit(1745888228.933:726): avc:  denied  { ioctl } for  pid=6396 comm="syz.3.135" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  108.682731][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  108.694770][ T6399] loop7: detected capacity change from 0 to 2
[  108.698538][   T30] audit: type=1400 audit(1745888228.973:727): avc:  denied  { read write } for  pid=6396 comm="syz.3.135" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  108.731508][   T30] audit: type=1400 audit(1745888228.973:728): avc:  denied  { open } for  pid=6396 comm="syz.3.135" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  108.755745][   T30] audit: type=1400 audit(1745888228.973:729): avc:  denied  { read append } for  pid=6396 comm="syz.3.135" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.785998][   T30] audit: type=1400 audit(1745888228.973:730): avc:  denied  { open } for  pid=6396 comm="syz.3.135" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.830710][   T30] audit: type=1400 audit(1745888228.973:731): avc:  denied  { ioctl } for  pid=6396 comm="syz.3.135" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.910345][ T5816] usb 3-1: Using ep0 maxpacket: 16
[  108.910840][   T30] audit: type=1400 audit(1745888229.003:732): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  108.971125][ T5816] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  108.977506][ T6399] Dev loop7: unable to read RDB block 2
[  108.985002][ T6399]  loop7: unable to read partition table
[  108.992780][ T6399] loop7: partition table beyond EOD, truncated
[  109.033874][ T6399] loop_reread_partitions: partition scan of loop7 (�被x������ڬ��dƤ����ݡ�����
[  109.033874][ T6399] 
) failed (rc=-5)
[  109.102523][ T5816] usb 3-1: config 0 has no interface number 0
[  109.108960][ T5816] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  109.177617][ T5816] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  109.242962][ T5816] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  109.254930][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  109.265055][ T5816] usb 3-1: Product: syz
[  109.353018][ T5816] usb 3-1: SerialNumber: syz
[  109.368318][ T5816] usb 3-1: config 0 descriptor??
[  109.375893][ T5816] cm109 3-1:0.8: invalid payload size 0, expected 4
[  109.384553][ T5816] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10
[  109.504606][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.888349][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  109.920630][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  110.042590][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.053456][ T5864] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  110.068777][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.090578][    T9] usb 2-1: Using ep0 maxpacket: 8
[  110.108686][ T5864] usb 5-1: config 0 descriptor??
[  110.110835][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  110.156694][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  110.170883][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  110.171126][ T5868] usb 3-1: USB disconnect, device number 4
[  110.177848][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  110.197420][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  110.206752][ T5864] pwc: Askey VC010 type 2 USB webcam detected.
[  110.368358][ T5868] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  110.401781][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  110.489120][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  110.503787][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.577147][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.594080][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.622104][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00
[  110.630404][ T5864] pwc: recv_control_msg error -32 req 02 val 2700
[  110.637898][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00
[  110.647676][ T5864] pwc: recv_control_msg error -32 req 04 val 1000
[  110.657780][ T5864] pwc: recv_control_msg error -32 req 04 val 1300
[  110.670617][ T5864] pwc: recv_control_msg error -32 req 04 val 1400
[  110.834431][ T5864] pwc: recv_control_msg error -32 req 02 val 2000
[  110.850875][ T5864] pwc: recv_control_msg error -32 req 02 val 2100
[  110.858051][ T5864] pwc: recv_control_msg error -32 req 04 val 1500
[  111.082290][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.094007][ T5864] pwc: recv_control_msg error -71 req 02 val 2400
[  111.144370][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.187860][ T5864] pwc: recv_control_msg error -71 req 02 val 2600
[  111.299817][ T5864] pwc: recv_control_msg error -71 req 02 val 2900
[  111.335393][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  111.348794][    T9] usbtmc 2-1:16.0: can't read capabilities
[  111.518145][ T5864] pwc: recv_control_msg error -71 req 02 val 2800
[  111.530494][ T5864] pwc: recv_control_msg error -71 req 04 val 1100
[  111.537744][ T5864] pwc: recv_control_msg error -71 req 04 val 1200
[  111.550719][ T5864] pwc: Registered as video103.
[  111.557044][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  111.579483][ T5864] usb 5-1: USB disconnect, device number 2
[  112.556713][ T5868] usb 2-1: USB disconnect, device number 7
[  115.622136][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  115.622151][   T30] audit: type=1400 audit(1745888235.903:787): avc:  denied  { append } for  pid=6476 comm="syz.3.156" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.660130][   T30] audit: type=1400 audit(1745888235.933:788): avc:  denied  { create } for  pid=6476 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  116.671494][   T30] audit: type=1400 audit(1745888236.863:789): avc:  denied  { create } for  pid=6478 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  116.813731][   T30] audit: type=1400 audit(1745888236.903:790): avc:  denied  { write } for  pid=6478 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  118.160373][ T5865] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  118.204009][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  118.306881][   T30] audit: type=1400 audit(1745888238.583:791): avc:  denied  { name_bind } for  pid=6505 comm="syz.4.165" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  118.342179][   T30] audit: type=1400 audit(1745888238.623:792): avc:  denied  { module_request } for  pid=6502 comm="syz.0.164" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  118.354690][ T6509] netlink: 156 bytes leftover after parsing attributes in process `syz.1.163'.
[  118.374871][   T30] audit: type=1400 audit(1745888238.623:793): avc:  denied  { write } for  pid=6500 comm="syz.1.163" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  118.375566][    T9] usb 3-1: device descriptor read/64, error -71
[  118.398533][   T30] audit: type=1400 audit(1745888238.643:794): avc:  denied  { write } for  pid=6505 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  118.425354][   T30] audit: type=1400 audit(1745888238.643:795): avc:  denied  { create } for  pid=6505 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.433748][ T5865] usb 4-1: Using ep0 maxpacket: 8
[  118.445393][   T30] audit: type=1400 audit(1745888238.643:796): avc:  denied  { ioctl } for  pid=6505 comm="syz.4.165" path="socket:[9463]" dev="sockfs" ino=9463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.516186][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.532707][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.571097][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.581165][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.597425][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.736056][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.860389][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  119.001847][    T9] usb 3-1: device descriptor read/64, error -71
[  119.032858][ T5865] usb 4-1: GET_CAPABILITIES returned 0
[  119.150337][ T5865] usbtmc 4-1:16.0: can't read capabilities
[  119.172585][    T9] usb usb3-port1: attempt power cycle
[  119.246949][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.263042][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.328939][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  120.361568][    T9] usb 3-1: device descriptor read/8, error -71
[  120.600489][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  121.092234][    T9] usb 3-1: device descriptor read/8, error -71
[  121.163548][ T5868] usb 4-1: USB disconnect, device number 4
[  121.203113][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  121.203127][   T30] audit: type=1400 audit(1745888241.483:806): avc:  denied  { read write } for  pid=6538 comm="syz.3.174" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  121.234349][ T6539] fuse: Unknown parameter 'group_i00000000000000000000'
[  121.382212][    T9] usb usb3-port1: unable to enumerate USB device
[  121.395448][   T30] audit: type=1400 audit(1745888241.513:807): avc:  denied  { open } for  pid=6538 comm="syz.3.174" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  122.295020][   T30] audit: type=1400 audit(1745888241.713:808): avc:  denied  { write } for  pid=6540 comm="syz.1.172" name="xfrm_stat" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  122.319204][   T30] audit: type=1400 audit(1745888241.793:809): avc:  denied  { write } for  pid=6538 comm="syz.3.174" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  122.342484][   T30] audit: type=1400 audit(1745888242.233:810): avc:  denied  { create } for  pid=6540 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.363036][   T30] audit: type=1400 audit(1745888242.303:811): avc:  denied  { read } for  pid=6540 comm="syz.1.172" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  122.389102][   T30] audit: type=1400 audit(1745888242.303:812): avc:  denied  { open } for  pid=6540 comm="syz.1.172" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  122.669727][   T30] audit: type=1400 audit(1745888242.303:813): avc:  denied  { ioctl } for  pid=6540 comm="syz.1.172" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  122.851341][   T30] audit: type=1400 audit(1745888242.983:814): avc:  denied  { bind } for  pid=6551 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  123.318948][   T30] audit: type=1400 audit(1745888242.983:815): avc:  denied  { setopt } for  pid=6551 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  124.952392][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[  125.512113][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.694603][    T9] usb 3-1: Using ep0 maxpacket: 16
[  126.008195][    T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  126.020518][    T9] usb 3-1: config 0 has no interface number 0
[  126.028466][    T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  126.053845][    T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  126.087067][    T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  126.097378][    T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  126.140781][    T9] usb 3-1: Product: syz
[  126.145085][    T9] usb 3-1: SerialNumber: syz
[  126.158003][    T9] usb 3-1: config 0 descriptor??
[  126.171096][    T9] cm109 3-1:0.8: invalid payload size 0, expected 4
[  126.190079][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12
[  126.460635][  T974] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  126.530531][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  126.584473][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  126.584550][   T30] audit: type=1400 audit(1745888246.863:831): avc:  denied  { unmount } for  pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  126.620714][  T974] usb 2-1: device descriptor read/64, error -71
[  126.784005][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.792248][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.799430][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.807499][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.815255][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.822379][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.829496][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.836649][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.843796][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.845171][ T5864] usb 3-1: USB disconnect, device number 9
[  126.850732][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  126.857515][ T6592] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[  126.870362][  T974] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  126.927345][ T6594] netlink: 76 bytes leftover after parsing attributes in process `syz.0.185'.
[  126.941423][ T5864] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  126.994663][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'.
[  127.004811][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.041330][  T974] usb 2-1: device descriptor read/64, error -71
[  127.150730][  T974] usb usb2-port1: attempt power cycle
[  128.213479][  T974] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  128.249451][ T6611] xt_connbytes: Forcing CT accounting to be enabled
[  128.256262][ T6611] Cannot find add_set index 0 as target
[  128.280896][  T974] usb 2-1: device descriptor read/8, error -71
[  128.980415][  T974] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  129.047498][  T974] usb 2-1: device descriptor read/8, error -71
[  129.200691][  T974] usb usb2-port1: unable to enumerate USB device
[  129.438675][   T30] audit: type=1400 audit(1745888249.713:832): avc:  denied  { setopt } for  pid=6625 comm="syz.1.194" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.585234][   T30] audit: type=1400 audit(1745888249.713:833): avc:  denied  { connect } for  pid=6625 comm="syz.1.194" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.609067][   T30] audit: type=1400 audit(1745888249.713:834): avc:  denied  { getopt } for  pid=6625 comm="syz.1.194" laddr=fe80::a8aa:aaff:feaa:aaaa lport=6 faddr=fc01::a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.756118][   T30] audit: type=1400 audit(1745888249.713:835): avc:  denied  { setattr } for  pid=6625 comm="syz.1.194" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  130.148761][   T30] audit: type=1400 audit(1745888250.073:836): avc:  denied  { ioctl } for  pid=6632 comm="syz.0.195" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  130.213176][   T30] audit: type=1400 audit(1745888250.153:837): avc:  denied  { create } for  pid=6632 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  130.647992][   T30] audit: type=1400 audit(1745888250.223:838): avc:  denied  { ioctl } for  pid=6632 comm="syz.0.195" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10299 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  130.859355][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'.
[  130.869468][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.968988][   T30] audit: type=1400 audit(1745888251.243:839): avc:  denied  { name_bind } for  pid=6645 comm="syz.4.198" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  130.993110][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.046554][   T30] audit: type=1400 audit(1745888251.243:840): avc:  denied  { node_bind } for  pid=6645 comm="syz.4.198" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  131.068837][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.147081][ T6646] siw: device registration error -23
[  131.500514][ T5907] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  131.638700][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[  131.654052][ T6656] siw: device registration error -23
[  131.698952][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.727996][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.809618][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.840836][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  131.910411][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.945509][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.525740][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.532500][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  132.578749][ T5907] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  132.587993][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.599088][ T5907] usb 5-1: config 0 descriptor??
[  132.870121][ T6668] Bluetooth: MGMT ver 1.23
[  132.970545][ T5893] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  133.259584][   T30] audit: type=1400 audit(1745888253.533:841): avc:  denied  { create } for  pid=6649 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  133.521132][ T5907] usbhid 5-1:0.0: can't add hid device: -71
[  133.527168][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  133.552662][ T5907] usb 5-1: USB disconnect, device number 3
[  133.590574][ T5893] usb 3-1: device descriptor read/64, error -71
[  133.831741][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  133.980672][ T5893] usb 3-1: device descriptor read/64, error -71
[  134.174281][ T5893] usb usb3-port1: attempt power cycle
[  134.580559][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  134.816900][   T30] audit: type=1400 audit(1745888255.093:842): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  134.819239][ T5893] usb 3-1: device descriptor read/8, error -71
[  134.838818][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.883324][   T30] audit: type=1400 audit(1745888255.093:843): avc:  denied  { search } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.904797][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.993964][   T30] audit: type=1400 audit(1745888255.093:844): avc:  denied  { append } for  pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.050462][   T30] audit: type=1400 audit(1745888255.093:845): avc:  denied  { open } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.072898][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.081814][   T30] audit: type=1400 audit(1745888255.093:846): avc:  denied  { getattr } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.104526][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.163679][   T30] audit: type=1400 audit(1745888255.093:847): avc:  denied  { ioctl } for  pid=6662 comm="syz.2.204" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  135.168266][ T6693] loop7: detected capacity change from 0 to 2
[  135.188422][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.336354][ T5814] Dev loop7: unable to read RDB block 2
[  135.343672][ T5814]  loop7: unable to read partition table
[  135.351301][   T30] audit: type=1400 audit(1745888255.143:848): avc:  denied  { create } for  pid=6689 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  135.409269][ T5814] loop7: partition table beyond EOD, truncated
[  135.415800][   T30] audit: type=1400 audit(1745888255.143:849): avc:  denied  { write } for  pid=6689 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  135.420393][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  135.435994][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.585425][   T30] audit: type=1400 audit(1745888255.143:850): avc:  denied  { ioctl } for  pid=6689 comm="syz.4.211" path="socket:[9940]" dev="sockfs" ino=9940 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  135.828250][ T6693] Dev loop7: unable to read RDB block 2
[  135.834154][ T6693]  loop7: unable to read partition table
[  135.857605][ T6693] loop7: partition table beyond EOD, truncated
[  136.145852][ T6693] loop_reread_partitions: partition scan of loop7 (�被x������ڬ��dƤ����ݡ�����
[  136.145852][ T6693] 
) failed (rc=-5)
[  136.380397][ T5893] usb 3-1: device not accepting address 13, error -71
[  136.431868][ T5893] usb usb3-port1: unable to enumerate USB device
[  136.522758][ T6709] fuse: Unknown parameter 'group_id00000000000000000000'
[  137.461124][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'.
[  137.882250][ T6727] FAULT_INJECTION: forcing a failure.
[  137.882250][ T6727] name failslab, interval 1, probability 0, space 0, times 0
[  137.928578][ T5893] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  138.100466][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.0.221 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  138.100494][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  138.100503][ T6727] Call Trace:
[  138.100509][ T6727]  <TASK>
[  138.100516][ T6727]  dump_stack_lvl+0x16c/0x1f0
[  138.100546][ T6727]  should_fail_ex+0x512/0x640
[  138.100568][ T6727]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  138.100598][ T6727]  should_failslab+0xc2/0x120
[  138.100616][ T6727]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  138.100642][ T6727]  ? copy_process+0x4bd/0x91a0
[  138.100670][ T6727]  copy_process+0x4bd/0x91a0
[  138.100691][ T6727]  ? _kstrtoull+0x145/0x200
[  138.100707][ T6727]  ? __pfx__kstrtoull+0x10/0x10
[  138.100728][ T6727]  ? find_held_lock+0x2b/0x80
[  138.100755][ T6727]  ? __pfx_copy_process+0x10/0x10
[  138.100785][ T6727]  ? find_held_lock+0x2b/0x80
[  138.100815][ T6727]  kernel_clone+0xfc/0x960
[  138.100839][ T6727]  ? __pfx_kernel_clone+0x10/0x10
[  138.100871][ T6727]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  138.100895][ T6727]  __do_sys_clone+0xce/0x120
[  138.100917][ T6727]  ? __pfx___do_sys_clone+0x10/0x10
[  138.100955][ T6727]  ? ksys_write+0x1b9/0x240
[  138.100979][ T6727]  ? __pfx_ksys_write+0x10/0x10
[  138.101000][ T6727]  ? rcu_is_watching+0x12/0xc0
[  138.101027][ T6727]  do_syscall_64+0xcd/0x260
[  138.101048][ T6727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.101064][ T6727] RIP: 0033:0x7f622cb8e969
[  138.101078][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.101093][ T6727] RSP: 002b:00007f622d9f0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  138.101110][ T6727] RAX: ffffffffffffffda RBX: 00007f622cdb6160 RCX: 00007f622cb8e969
[  138.101120][ T6727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f5982400
[  138.101133][ T6727] RBP: 00007f622d9f1090 R08: 0000000000000000 R09: 0000000000000000
[  138.101143][ T6727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  138.101152][ T6727] R13: 0000000000000000 R14: 00007f622cdb6160 R15: 00007ffdda6bc2e8
[  138.101175][ T6727]  </TASK>
[  138.520408][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  138.541973][ T5893] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  138.561777][ T5893] usb 3-1: config 0 has no interface number 0
[  138.568171][ T5893] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  138.694048][ T5893] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  138.904011][ T5893] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  138.926209][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  138.968401][ T5893] usb 3-1: Product: syz
[  138.986880][ T5893] usb 3-1: SerialNumber: syz
[  138.999252][ T5893] usb 3-1: config 0 descriptor??
[  139.023537][ T5893] cm109 3-1:0.8: invalid payload size 0, expected 4
[  139.042034][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  139.042050][   T30] audit: type=1400 audit(1745888259.323:893): avc:  denied  { write } for  pid=6733 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  139.070635][ T5893] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input13
[  139.261112][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  139.417486][   T30] audit: type=1400 audit(1745888259.363:894): avc:  denied  { ioctl } for  pid=6733 comm="syz.4.224" path="socket:[10422]" dev="sockfs" ino=10422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  139.496020][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.503374][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.510458][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.517538][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.524655][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.531800][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.538939][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.546133][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.553355][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.560522][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  139.576464][   T30] audit: type=1400 audit(1745888259.443:895): avc:  denied  { create } for  pid=6733 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  139.578957][ T5907] usb 3-1: USB disconnect, device number 14
[  139.578999][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  139.854253][ T5907] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  139.861006][   T30] audit: type=1400 audit(1745888259.463:896): avc:  denied  { getopt } for  pid=6733 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  139.915096][   T30] audit: type=1400 audit(1745888259.463:897): avc:  denied  { setopt } for  pid=6733 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  139.952491][   T30] audit: type=1400 audit(1745888259.473:898): avc:  denied  { bind } for  pid=6733 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  140.112305][   T30] audit: type=1400 audit(1745888259.473:899): avc:  denied  { name_bind } for  pid=6733 comm="syz.4.224" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  140.255121][   T30] audit: type=1400 audit(1745888259.473:900): avc:  denied  { node_bind } for  pid=6733 comm="syz.4.224" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  140.584058][ T6746] siw: device registration error -23
[  140.675260][ T6748] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[  140.690555][   T30] audit: type=1400 audit(1745888259.483:901): avc:  denied  { write } for  pid=6733 comm="syz.4.224" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  140.725655][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[  140.846341][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'.
[  140.847280][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'.
[  140.871864][   T30] audit: type=1400 audit(1745888259.483:902): avc:  denied  { connect } for  pid=6733 comm="syz.4.224" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  141.096138][ T6758] FAULT_INJECTION: forcing a failure.
[  141.096138][ T6758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.110081][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.0.232 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  141.110105][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  141.110114][ T6758] Call Trace:
[  141.110119][ T6758]  <TASK>
[  141.110126][ T6758]  dump_stack_lvl+0x16c/0x1f0
[  141.110148][ T6758]  should_fail_ex+0x512/0x640
[  141.110171][ T6758]  _copy_from_user+0x2e/0xd0
[  141.110190][ T6758]  move_addr_to_kernel+0x65/0x170
[  141.110205][ T6758]  __sys_connect+0xaf/0x170
[  141.110219][ T6758]  ? __pfx___sys_connect+0x10/0x10
[  141.110232][ T6758]  ? sysvec_kvm_asyncpf_interrupt+0x60/0xc0
[  141.110248][ T6758]  ? __pfx_ksys_write+0x10/0x10
[  141.110267][ T6758]  __x64_sys_connect+0x72/0xb0
[  141.110288][ T6758]  ? lockdep_hardirqs_on+0x7c/0x110
[  141.110304][ T6758]  do_syscall_64+0xcd/0x260
[  141.110324][ T6758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.110340][ T6758] RIP: 0033:0x7f622cb8e969
[  141.110353][ T6758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.110368][ T6758] RSP: 002b:00007f622da12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  141.110385][ T6758] RAX: ffffffffffffffda RBX: 00007f622cdb6080 RCX: 00007f622cb8e969
[  141.110395][ T6758] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000007
[  141.110404][ T6758] RBP: 00007f622da12090 R08: 0000000000000000 R09: 0000000000000000
[  141.110412][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.110421][ T6758] R13: 0000000000000000 R14: 00007f622cdb6080 R15: 00007ffdda6bc2e8
[  141.110443][ T6758]  </TASK>
[  142.065765][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'.
[  142.225517][ T6770] netlink: 156 bytes leftover after parsing attributes in process `syz.2.230'.
[  142.356935][ T3468] Bluetooth: hci5: Frame reassembly failed (-84)
[  143.472669][ T6773] netlink: 156 bytes leftover after parsing attributes in process `syz.4.234'.
[  144.440399][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  144.540375][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  144.540391][   T30] audit: type=1400 audit(1745888264.813:926): avc:  denied  { write } for  pid=6781 comm="syz.3.238" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  144.575774][   T30] audit: type=1400 audit(1745888264.853:927): avc:  denied  { write } for  pid=6785 comm="syz.4.239" name="sockstat6" dev="proc" ino=4026533307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  144.790366][ T5893] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  145.600432][ T5865] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  145.660458][ T5893] usb 2-1: Using ep0 maxpacket: 32
[  145.816177][ T6795] SELinux: syz.3.242 (6795) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  145.880686][ T5865] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  145.954285][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.001414][ T5865] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  146.020729][ T5893] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  146.078481][ T5893] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  146.082016][ T5865] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  146.115194][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.125502][ T5893] usb 2-1: Product: syz
[  146.129766][ T5893] usb 2-1: Manufacturer: syz
[  146.130312][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.146344][ T5893] usb 2-1: SerialNumber: syz
[  146.416607][ T5893] usb 2-1: Limiting number of CPorts to U8_MAX
[  146.464814][   T30] audit: type=1400 audit(1745888266.733:928): avc:  denied  { create } for  pid=6785 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  146.731647][ T5893] usb 2-1: Not enough endpoints found in device, aborting!
[  147.057893][   T30] audit: type=1400 audit(1745888267.333:929): avc:  denied  { create } for  pid=6804 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  148.117076][ T5865] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  148.138617][ T5868] usb 2-1: USB disconnect, device number 12
[  148.149910][ T5865] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input14
[  148.243327][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[  148.349173][ T3468] Bluetooth: hci5: Frame reassembly failed (-84)
[  148.371676][ T5865] input: failed to attach handler kbd to device input14, error: -5
[  149.299374][ T5865] usb 5-1: USB disconnect, device number 4
[  149.421058][   T30] audit: type=1400 audit(1745888269.693:930): avc:  denied  { create } for  pid=6827 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.514070][ T6826] netlink: 156 bytes leftover after parsing attributes in process `syz.1.250'.
[  150.220415][   T30] audit: type=1400 audit(1745888270.323:931): avc:  denied  { create } for  pid=6833 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  150.240510][   T30] audit: type=1400 audit(1745888270.503:932): avc:  denied  { write } for  pid=6833 comm="syz.3.252" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  150.350403][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  150.357361][ T5817] Bluetooth: hci5: command 0x1003 tx timeout
[  151.003444][ T6848] lo speed is unknown, defaulting to 1000
[  151.220372][ T5868] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  151.254657][   T30] audit: type=1400 audit(1745888271.533:933): avc:  denied  { read write } for  pid=6858 comm="syz.0.257" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  151.341243][   T30] audit: type=1400 audit(1745888271.533:934): avc:  denied  { open } for  pid=6858 comm="syz.0.257" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  151.369990][   T30] audit: type=1400 audit(1745888271.533:935): avc:  denied  { read } for  pid=6858 comm="syz.0.257" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  151.395449][   T30] audit: type=1400 audit(1745888271.533:936): avc:  denied  { open } for  pid=6858 comm="syz.0.257" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  151.422344][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.433498][ T5868] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  151.443406][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.462288][ T5868] usb 3-1: config 0 descriptor??
[  151.465681][ T5868] pwc: Askey VC010 type 2 USB webcam detected.
[  152.114026][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.132771][   T30] audit: type=1400 audit(1745888272.383:937): avc:  denied  { ioctl } for  pid=6868 comm="syz.3.260" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  152.147598][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.263423][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00
[  152.285078][ T5868] pwc: recv_control_msg error -32 req 02 val 2700
[  152.442435][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00
[  152.480434][   T30] audit: type=1400 audit(1745888272.393:938): avc:  denied  { read write } for  pid=6851 comm="syz.2.256" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  152.510386][  T974] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  152.524017][   T30] audit: type=1400 audit(1745888272.393:939): avc:  denied  { open } for  pid=6851 comm="syz.2.256" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  152.554083][   T30] audit: type=1400 audit(1745888272.453:940): avc:  denied  { read write } for  pid=5818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  152.584680][ T5868] pwc: recv_control_msg error -32 req 04 val 1000
[  152.639602][ T5868] pwc: recv_control_msg error -32 req 04 val 1300
[  152.647359][ T5868] pwc: recv_control_msg error -32 req 04 val 1400
[  152.657119][ T5868] pwc: recv_control_msg error -32 req 02 val 2000
[  152.674687][ T5868] pwc: recv_control_msg error -32 req 02 val 2100
[  152.718731][ T5868] pwc: recv_control_msg error -32 req 04 val 1500
[  152.726354][ T5868] pwc: recv_control_msg error -32 req 02 val 2500
[  152.770508][  T974] usb 4-1: Using ep0 maxpacket: 32
[  152.781451][  T974] usb 4-1: unable to get BOS descriptor or descriptor too short
[  152.812466][  T974] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  153.732191][  T974] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  153.736591][ T5868] pwc: recv_control_msg error -71 req 02 val 2600
[  153.750372][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.761717][ T5868] pwc: recv_control_msg error -71 req 02 val 2900
[  153.769087][ T5868] pwc: recv_control_msg error -71 req 02 val 2800
[  153.769129][  T974] usb 4-1: Product: syz
[  154.020378][ T5868] pwc: recv_control_msg error -71 req 04 val 1100
[  154.038608][  T974] usb 4-1: Manufacturer: syz
[  154.050574][  T974] usb 4-1: SerialNumber: syz
[  154.064627][ T5868] pwc: recv_control_msg error -71 req 04 val 1200
[  154.083562][ T5868] pwc: Registered as video103.
[  154.098909][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15
[  154.144653][ T5868] usb 3-1: USB disconnect, device number 15
[  154.288997][  T974] usb 4-1: Limiting number of CPorts to U8_MAX
[  154.355459][  T974] usb 4-1: Not enough endpoints found in device, aborting!
[  155.113165][ T6894] syz.1.265: attempt to access beyond end of device
[  155.113165][ T6894] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[  155.137985][ T6894] XFS (nbd1): SB validate failed with error -5.
[  155.190710][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'.
[  155.215094][ T2994] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[  156.254983][  T974] usb 4-1: USB disconnect, device number 5
[  156.650325][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  156.650358][   T30] audit: type=1400 audit(1745888276.853:984): avc:  denied  { create } for  pid=6907 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  156.679366][   T30] audit: type=1400 audit(1745888276.853:985): avc:  denied  { write } for  pid=6907 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  156.699909][   T30] audit: type=1400 audit(1745888276.853:986): avc:  denied  { nlmsg_read } for  pid=6907 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  157.091307][   T30] audit: type=1400 audit(1745888277.253:987): avc:  denied  { bind } for  pid=6910 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  157.107398][ T6919] netlink: 'syz.4.269': attribute type 1 has an invalid length.
[  157.172953][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'.
[  157.221973][   T30] audit: type=1400 audit(1745888277.473:988): avc:  denied  { name_bind } for  pid=6922 comm="syz.0.271" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  157.224317][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.269'.
[  157.251144][ T6925] siw: device registration error -23
[  157.258888][ T5130] Bluetooth: hci5: command 0x1003 tx timeout
[  157.265211][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  157.543289][   T30] audit: type=1400 audit(1745888277.473:989): avc:  denied  { node_bind } for  pid=6922 comm="syz.0.271" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  157.565989][   T30] audit: type=1400 audit(1745888277.523:990): avc:  denied  { create } for  pid=6922 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  157.592340][   T30] audit: type=1400 audit(1745888277.523:991): avc:  denied  { write } for  pid=6922 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  157.635059][ T6924] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.705430][   T30] audit: type=1400 audit(1745888277.963:992): avc:  denied  { create } for  pid=6927 comm="syz.4.273" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  157.743926][ T6928] netlink: 'syz.4.273': attribute type 11 has an invalid length.
[  157.978273][   T30] audit: type=1400 audit(1745888278.243:993): avc:  denied  { write } for  pid=6935 comm="syz.0.275" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  158.416510][ T6937] lo speed is unknown, defaulting to 1000
[  158.871229][ T5907] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  159.068817][ T6941] SELinux: selinux_ima_measure_state_locked: failed to read policy -12.
[  159.087051][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.100247][ T5907] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  159.117292][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.129319][ T5907] usb 5-1: config 0 descriptor??
[  160.140530][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  160.381934][ T5893] usb 2-1: Using ep0 maxpacket: 32
[  160.391685][ T5893] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  160.420789][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0
[  160.427987][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  160.442822][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.453910][ T5893] usb 2-1: config 0 descriptor??
[  160.807249][ T5907] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  161.546044][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'.
[  161.559104][ T6965] loop7: detected capacity change from 0 to 2
[  161.574601][ T5907] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input16
[  161.588105][ T5893] logitech 0003:046D:C50C.0002: hidraw0: USB HID vff.fc Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0
[  161.599540][ T6965] Dev loop7: unable to read RDB block 2
[  161.599573][ T6965]  loop7: unable to read partition table
[  161.599705][ T6965] loop7: partition table beyond EOD, truncated
[  161.707182][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  161.707196][   T30] audit: type=1400 audit(1745888281.983:1041): avc:  denied  { map_read map_write } for  pid=6966 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  161.714032][ T6965] loop_reread_partitions: partition scan of loop7 (�被x������ڬ��dƤ����ݡ�����
[  161.714032][ T6965] 
) failed (rc=-5)
[  161.782369][ T6949] tmpfs: Unknown parameter 'usrquota����ڬ��dƤ����ݡ�����
[  161.782369][ T6949] 
'
[  161.940594][ T5907] keytouch 0003:0926:3333.0001: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  161.942153][   T30] audit: type=1400 audit(1745888282.063:1042): avc:  denied  { mounton } for  pid=6947 comm="syz.1.278" path="/49/file1" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  162.363443][   T30] audit: type=1400 audit(1745888282.073:1043): avc:  denied  { write } for  pid=6966 comm="syz.3.282" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  162.422176][ T6972] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[  162.438753][   T30] audit: type=1400 audit(1745888282.083:1044): avc:  denied  { mount } for  pid=6966 comm="syz.3.282" name="/" dev="overlay" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  162.461944][   T30] audit: type=1400 audit(1745888282.213:1045): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=2873 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.484718][   T30] audit: type=1400 audit(1745888282.213:1046): avc:  denied  { open } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2873 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.508843][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'.
[  162.518733][   T30] audit: type=1400 audit(1745888282.213:1047): avc:  denied  { ioctl } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2873 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  162.544761][   T30] audit: type=1400 audit(1745888282.713:1048): avc:  denied  { create } for  pid=6947 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  162.564220][   T30] audit: type=1400 audit(1745888282.803:1049): avc:  denied  { write } for  pid=6947 comm="syz.1.278" path="socket:[11426]" dev="sockfs" ino=11426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  162.651618][    T9] usb 5-1: USB disconnect, device number 5
[  162.690155][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'.
[  162.873393][   T30] audit: type=1400 audit(1745888283.143:1050): avc:  denied  { prog_run } for  pid=6976 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  162.874782][ T5907] usb 2-1: USB disconnect, device number 13
[  163.080032][ T6980] loop7: detected capacity change from 0 to 2
[  163.097104][ T6980] Dev loop7: unable to read RDB block 2
[  163.103824][ T6980]  loop7: unable to read partition table
[  163.532613][ T6980] loop7: partition table beyond EOD, truncated
[  163.560169][ T6980] loop_reread_partitions: partition scan of loop7 (�被x������ڬ��dƤ����ݡ�����
[  163.560169][ T6980] 
) failed (rc=-5)
[  163.650840][ T5868] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  163.854614][ T5868] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  163.901656][ T5868] usb 4-1: config 0 has no interface number 0
[  163.987500][ T5868] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=55.7a
[  164.014438][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.029382][ T5868] usb 4-1: Product: syz
[  164.041003][ T5868] usb 4-1: Manufacturer: syz
[  164.048718][ T5868] usb 4-1: SerialNumber: syz
[  164.059177][ T5868] usb 4-1: config 0 descriptor??
[  164.072746][ T5868] usbserial_generic 4-1:0.223: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  164.084627][ T5868] usbserial_generic 4-1:0.223: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  164.102740][ T5868] usbserial_generic 4-1:0.223: device has no bulk endpoints
[  164.385268][ T6986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.287'.
[  164.413348][ T6986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.287'.
[  164.712660][ T5864] usb 4-1: USB disconnect, device number 6
[  165.407313][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[  166.027618][ T5893] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  166.381980][ T5893] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  166.426974][ T5893] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  166.441869][ T5893] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  166.510540][ T5868] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  166.599337][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.683060][ T7032] siw: device registration error -23
[  166.927975][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  166.927991][   T30] audit: type=1400 audit(1745888287.203:1077): avc:  denied  { create } for  pid=7011 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  167.046746][ T5868] usb 2-1: Using ep0 maxpacket: 16
[  167.323614][ T5868] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  167.364200][ T5868] usb 2-1: config 0 has no interface number 0
[  167.382919][ T5868] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  167.521400][ T5868] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  167.574163][ T5868] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  167.580343][   T30] audit: type=1400 audit(1745888287.853:1078): avc:  denied  { create } for  pid=7037 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  167.586833][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  167.610360][   T30] audit: type=1400 audit(1745888287.853:1079): avc:  denied  { create } for  pid=7037 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  167.633824][   T30] audit: type=1400 audit(1745888287.853:1080): avc:  denied  { listen } for  pid=7037 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  167.653604][   T30] audit: type=1400 audit(1745888287.853:1081): avc:  denied  { accept } for  pid=7037 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  167.682150][ T5868] usb 2-1: Product: syz
[  167.686670][ T5868] usb 2-1: SerialNumber: syz
[  167.784679][ T5868] usb 2-1: config 0 descriptor??
[  167.795114][ T5868] cm109 2-1:0.8: invalid payload size 0, expected 4
[  167.805374][ T5868] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input18
[  168.271829][ T5893] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  168.282337][ T5893] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17
[  168.318236][ T5893] input: failed to attach handler kbd to device input17, error: -5
[  168.396084][ T5893] usb 3-1: USB disconnect, device number 16
[  168.442747][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  169.482485][   T30] audit: type=1400 audit(1745888289.613:1082): avc:  denied  { create } for  pid=7045 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  169.526296][ T5864] usb 2-1: USB disconnect, device number 14
[  169.551938][ T5864] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  169.582024][   T30] audit: type=1400 audit(1745888289.623:1083): avc:  denied  { bind } for  pid=7045 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  169.756539][   T30] audit: type=1400 audit(1745888289.623:1084): avc:  denied  { accept } for  pid=7045 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  169.782685][   T30] audit: type=1400 audit(1745888289.803:1085): avc:  denied  { write } for  pid=7013 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  169.937574][  T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  170.197346][  T974] usb 5-1: Using ep0 maxpacket: 8
[  170.238479][  T974] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.324473][  T974] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  170.416478][  T974] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  170.451030][ T7063] FAULT_INJECTION: forcing a failure.
[  170.451030][ T7063] name failslab, interval 1, probability 0, space 0, times 0
[  170.464468][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.0.306 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  170.464492][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  170.464503][ T7063] Call Trace:
[  170.464509][ T7063]  <TASK>
[  170.464516][ T7063]  dump_stack_lvl+0x16c/0x1f0
[  170.464542][ T7063]  should_fail_ex+0x512/0x640
[  170.464564][ T7063]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  170.464594][ T7063]  should_failslab+0xc2/0x120
[  170.464612][ T7063]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  170.464639][ T7063]  ? mas_alloc_nodes+0x18b/0x8b0
[  170.464659][ T7063]  mas_alloc_nodes+0x18b/0x8b0
[  170.464682][ T7063]  mas_node_count_gfp+0x105/0x130
[  170.464701][ T7063]  mas_preallocate+0x53e/0xcd0
[  170.464728][ T7063]  ? __pfx_mas_preallocate+0x10/0x10
[  170.464758][ T7063]  ? __asan_memset+0x23/0x50
[  170.464787][ T7063]  commit_merge+0x29a/0x1020
[  170.464816][ T7063]  ? __pfx_commit_merge+0x10/0x10
[  170.464846][ T7063]  ? vma_merge_existing_range+0xc3b/0x1cd0
[  170.464870][ T7063]  ? vma_merge_existing_range+0xc48/0x1cd0
[  170.464899][ T7063]  vma_merge_existing_range+0xc50/0x1cd0
[  170.464938][ T7063]  ? __pfx_vma_merge_existing_range+0x10/0x10
[  170.464967][ T7063]  ? __pfx___schedule+0x10/0x10
[  170.464987][ T7063]  vma_modify+0x87/0x510
[  170.465014][ T7063]  vma_modify_flags+0x212/0x2d0
[  170.465041][ T7063]  ? __pfx_vma_modify_flags+0x10/0x10
[  170.465065][ T7063]  ? mtree_range_walk+0x718/0xc00
[  170.465099][ T7063]  mlock_fixup+0x27c/0xe50
[  170.465130][ T7063]  apply_mlockall_flags+0x2d4/0x470
[  170.465157][ T7063]  ? __pfx_apply_mlockall_flags+0x10/0x10
[  170.465183][ T7063]  ? __pfx___might_resched+0x10/0x10
[  170.465213][ T7063]  ? __pfx_down_write_killable+0x10/0x10
[  170.465236][ T7063]  ? __pfx_ksys_write+0x10/0x10
[  170.465265][ T7063]  __do_sys_munlockall+0xc5/0x280
[  170.465284][ T7063]  do_syscall_64+0xcd/0x260
[  170.465306][ T7063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.465323][ T7063] RIP: 0033:0x7f622cb8e969
[  170.465338][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.465355][ T7063] RSP: 002b:00007f622d9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098
[  170.465373][ T7063] RAX: ffffffffffffffda RBX: 00007f622cdb6160 RCX: 00007f622cb8e969
[  170.465384][ T7063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  170.465394][ T7063] RBP: 00007f622d9f1090 R08: 0000000000000000 R09: 0000000000000000
[  170.465404][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.465414][ T7063] R13: 0000000000000001 R14: 00007f622cdb6160 R15: 00007ffdda6bc2e8
[  170.465437][ T7063]  </TASK>
[  170.731490][ T7063] vmg ffffc9000fb17c80 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start)
[  170.746011][ T7063] vmg ffffc9000fb17c80 state: mm ffff888022ae1e00 pgoff 200000000
[  170.746011][ T7063] vmi ffffc9000fb17e38 [200000000000,200000800000)
[  170.746011][ T7063] prev ffff88802f7a1000 middle ffff88802f7a1000 next 0000000000000000 target 0000000000000000
[  170.746011][ T7063] start 200000000000 end 200000800000 flags 8100077
[  170.746011][ T7063] file 0000000000000000 anon_vma ffff888033740990 policy 0000000000000000
[  170.746011][ T7063] uffd_ctx 0000000000000000
[  170.746011][ T7063] anon_name 0000000000000000
[  170.746011][ T7063] state 0
[  170.746011][ T7063] just_expand 0
[  170.746011][ T7063] __adjust_middle_start 0 __adjust_next_start 0
[  170.746011][ T7063] __remove_middle 0 __remove_next 0
[  170.811373][ T7063] vmg ffffc9000fb17c80 mm:
[  170.815872][ T7063] mm ffff888022ae1e00 task_size 140737488351232
[  170.815872][ T7063] mmap_base 140059649228800 mmap_legacy_base 47573145939968
[  170.815872][ T7063] pgd ffff88807f872000 mm_users 4 mm_count 1 pgtables_bytes 135168 map_count 36
[  170.815872][ T7063] hiwater_rss 14e5 hiwater_vm 5f8c total_vm 5fef locked_vm 800
[  170.815872][ T7063] pinned_vm 0 data_vm 23fb exec_vm 1a4 stack_vm 21
[  170.815872][ T7063] start_code 7f622ca49000 end_code 7f622cbeadd9 start_data 7f622cd90000 end_data 7f622cd90000
[  170.815872][ T7063] start_brk 55556759b000 brk 5555675cf000 start_stack 7ffdda6bcb50
[  170.815872][ T7063] arg_start 7ffdda6bdf6d arg_end 7ffdda6bdf81 env_start 7ffdda6bdf81 env_end 7ffdda6bdfe9
[  170.815872][ T7063] binfmt ffffffff8e6096e0 flags 800007fd
[  170.815872][ T7063] ioctx_table 0000000000000000
[  170.815872][ T7063] owner ffff88802b3a8000 exe_file ffff88806e10bc00
[  170.815872][ T7063] notifier_subscriptions 0000000000000000
[  170.815872][ T7063] numa_next_scan 4294954246 numa_scan_offset 0 numa_scan_seq 0
[  170.815872][ T7063] tlb_flush_pending 0
[  170.815872][ T7063] def_flags: 0x0()
[  170.919786][ T7063] vmg ffffc9000fb17c80 prev:
[  170.924515][ T7063] vma ffff88802f7a1000 start 0000200000000000 end 0000200000800000 mm ffff888022ae1e00
[  170.924515][ T7063] prot 25 anon_vma ffff888033740990 vm_ops 0000000000000000
[  170.924515][ T7063] pgoff 200000000 file 0000000000000000 private_data 0000000000000000
[  170.924515][ T7063] refcnt 1
[  170.924515][ T7063] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty)
[  170.966027][ T7063] vmg ffffc9000fb17c80 middle:
[  170.989376][ T7063] vma ffff88802f7a1000 start 0000200000000000 end 0000200000800000 mm ffff888022ae1e00
[  170.989376][ T7063] prot 25 anon_vma ffff888033740990 vm_ops 0000000000000000
[  170.989376][ T7063] pgoff 200000000 file 0000000000000000 private_data 0000000000000000
[  170.989376][ T7063] refcnt 1
[  170.989376][ T7063] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty)
[  171.026982][ T7063] vmg ffffc9000fb17c80 next: (NULL)
[  171.032420][ T7063] vmg ffffc9000fb17c80 vmi:
[  171.036981][ T7063] MAS: tree=ffff888022ae1e40 enode=ffff8880324cce0c 
[  171.037021][ T7063] (ma_active)
[  171.048673][ T7063] Store Type: 
[  171.052219][ T7063] node_store
[  171.058866][ T7063] [6/10] index=200000000000 last=2000007fffff
[  171.065129][ T7063]      min=0 max=5555675bcfff alloc=0000000000000000, depth=1, flags=0
[  171.073556][ T7063] maple_tree(ffff888022ae1e40) flags 30B, height 2 root ffff8880324cd21e
[  171.082246][ T7063] 0-ffffffffffffffff: node ffff8880324cd200 depth 0 type 3 parent ffff888022ae1e41 contents: 35556659a000 2a0cc3428000 e3000 ffff800225942000 0 0 0 0 0 0 | 03 03| ffff8880324cce0c 5555675BCFFF ffff888022e8d60c 7F622C9FFFFF ffff8880324cc40c 7F622D9F2FFF ffff8880324cc80c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000
[  171.121750][ T7063]   0-5555675bcfff: node ffff8880324cce00 depth 1 type 1 parent ffff8880324cd206 contents: 0000000000000000 110C22FFFF ffff88802f7a13c0 110E22FFFF 0000000000000000 1B2EA1FFFF ffff88802f7a1280 1B2EA5FFFF 0000000000000000 1FFFFFFFEFFF ffff88802f7a1140 1FFFFFFFFFFF ffff88802f7a1000 2000007FFFFF ffff8880337d9dc0 200000FFFFFF ffff88802f7a1780 200001000FFF 0000000000000000 55556759AFFF ffff88802f7a1500 5555675BCFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000a
[  171.170460][ T7063]     0-110c22ffff: 0000000000000000
[  171.176049][ T7063]     110c230000-110e22ffff: ffff88802f7a13c0
[  171.182381][ T7063]     110e230000-1b2ea1ffff: 0000000000000000
[  171.188609][ T7063]     1b2ea20000-1b2ea5ffff: ffff88802f7a1280
[  171.194903][ T7063]     1b2ea60000-1fffffffefff: 0000000000000000
[  171.201391][ T7063]     1ffffffff000-1fffffffffff: ffff88802f7a1140
[  171.207951][ T7063]     200000000000-2000007fffff: ffff88802f7a1000
[  171.214598][ T7063]     200000800000-200000ffffff: ffff8880337d9dc0
[  171.221182][ T7063]     200001000000-200001000fff: ffff88802f7a1780
[  171.227737][ T7063]     200001001000-55556759afff: 0000000000000000
[  171.234385][ T7063]     55556759b000-5555675bcfff: ffff88802f7a1500
[  171.241131][ T7063]   5555675bd000-7f622c9fffff: node ffff888022e8d600 depth 1 type 1 parent ffff8880324cd20e contents: ffff888025b6e000 5555675CEFFF 0000000000000000 7F622A9F6FFF ffff888025b6eb40 7F622A9F7FFF ffff888025b6ea00 7F622B1F7FFF ffff888025b6edc0 7F622B1F8FFF ffff888034a8d3c0 7F622B9F8FFF ffff888022f1a3c0 7F622B9FAFFF ffff888022f1a500 7F622BDFAFFF ffff888034a8da00 7F622BDFCFFF ffff8880237a9140 7F622C1FCFFF ffff888030b33b40 7F622C1FEFFF ffff888030b33c80 7F622C5FEFFF ffff888030b33a00 7F622C5FFFFF ffff888030b33500 7F622C9FFFFF 0000000000000000 0 000000000000000d
[  171.298006][ T7063]     5555675bd000-5555675cefff: ffff888025b6e000
[  171.304616][ T7063]     5555675cf000-7f622a9f6fff: 0000000000000000
[  171.311304][ T7063]     7f622a9f7000-7f622a9f7fff: ffff888025b6eb40
[  171.317883][ T7063]     7f622a9f8000-7f622b1f7fff: ffff888025b6ea00
[  171.324433][ T7063]     7f622b1f8000-7f622b1f8fff: ffff888025b6edc0
[  171.331525][ T7063]     7f622b1f9000-7f622b9f8fff: ffff888034a8d3c0
[  171.338072][ T7063]     7f622b9f9000-7f622b9fafff: ffff888022f1a3c0
[  171.344696][ T7063]     7f622b9fb000-7f622bdfafff: ffff888022f1a500
[  171.355746][ T7063]     7f622bdfb000-7f622bdfcfff: ffff888034a8da00
[  171.362420][ T7063]     7f622bdfd000-7f622c1fcfff: ffff8880237a9140
[  171.368974][ T7063]     7f622c1fd000-7f622c1fefff: ffff888030b33b40
[  171.375658][ T7063]     7f622c1ff000-7f622c5fefff: ffff888030b33c80
[  171.382324][ T7063]     7f622c5ff000-7f622c5fffff: ffff888030b33a00
[  171.388904][ T7063]     7f622c600000-7f622c9fffff: ffff888030b33500
[  171.395727][ T7063]   7f622ca00000-7f622d9f2fff: node ffff8880324cc400 depth 1 type 1 parent ffff8880324cd216 contents: ffff888030b33dc0 7F622CA48FFF ffff888030b33640 7F622CBEAFFF ffff888030b338c0 7F622CC97FFF ffff888030b333c0 7F622CD7CFFF ffff88805dbc6c80 7F622CD85FFF 0000000000000000 7F622CD8FFFF ffff88805dbc6dc0 7F622D8EDFFF 0000000000000000 7F622D9D0FFF ffff8880337d9b40 7F622D9D1FFF ffff8880337d9c80 7F622D9F1FFF ffff88807bf5da00 7F622D9F2FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000a
[  171.445034][ T7063]     7f622ca00000-7f622ca48fff: ffff888030b33dc0
[  171.454365][ T7063]     7f622ca49000-7f622cbeafff: ffff888030b33640
[  171.461637][ T7063]     7f622cbeb000-7f622cc97fff: ffff888030b338c0
[  171.468150][ T7063]     7f622cc98000-7f622cd7cfff: ffff888030b333c0
[  171.475692][ T7063]     7f622cd7d000-7f622cd85fff: ffff88805dbc6c80
[  171.482663][ T7063]     7f622cd86000-7f622cd8ffff: 0000000000000000
[  171.489476][ T7063]     7f622cd90000-7f622d8edfff: ffff88805dbc6dc0
[  171.496170][ T7063]     7f622d8ee000-7f622d9d0fff: 0000000000000000
[  171.547560][  T974] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.561418][   T30] audit: type=1400 audit(1745888291.403:1086): avc:  denied  { setopt } for  pid=7058 comm="syz.0.306" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  171.572466][ T7063]     7f622d9d1000-7f622d9d1fff: 
[  171.581826][  T974] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  171.581852][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.606339][ T7063] ffff8880337d9b40
[  171.610079][ T7063]     7f622d9d2000-7f622d9f1fff: ffff8880337d9c80
[  171.621255][ T7063]     7f622d9f2000-7f622d9f2fff: ffff88807bf5da00
[  171.627702][ T7063]   7f622d9f3000-ffffffffffffffff: node ffff8880324cc800 depth 1 type 1 parent ffff8880324cd21e contents: ffff88807fb34640 7F622DA12FFF ffff8880337d9500 7F622DA13FFF ffff88807fb34780 7F622DA33FFF ffff88805dbc6000 7F622DA37FFF ffff88807fb34c80 7F622DA39FFF ffff88807fb34dc0 7F622DA3BFFF 0000000000000000 7FFDDA69CFFF ffff88807fb348c0 7FFDDA6BDFFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008
[  171.724648][ T7063]     7f622d9f3000-7f622da12fff: ffff88807fb34640
[  171.865075][ T7063]     7f622da13000-7f622da13fff: ffff8880337d9500
[  171.874929][ T7063]     7f622da14000-7f622da33fff: 
[  172.460394][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  172.460502][   T30] audit: type=1400 audit(1745888292.713:1088): avc:  denied  { create } for  pid=7066 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  172.506072][ T7063] ffff88807fb34780
[  172.591150][  T974] usb 5-1: GET_CAPABILITIES returned 0
[  172.596970][  T974] usbtmc 5-1:16.0: can't read capabilities
[  172.639147][ T7063]     7f622da34000-7f622da37fff: ffff88805dbc6000
[  172.677891][   T30] audit: type=1400 audit(1745888292.723:1089): avc:  denied  { getopt } for  pid=7066 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  172.762582][ T7063]     7f622da38000-7f622da39fff: ffff88807fb34c80
[  172.812424][   T30] audit: type=1400 audit(1745888292.723:1090): avc:  denied  { setopt } for  pid=7066 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  172.854092][   T30] audit: type=1400 audit(1745888292.733:1091): avc:  denied  { bind } for  pid=7066 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  172.875540][ T7063]     7f622da3a000-7f622da3bfff: ffff88807fb34dc0
[  172.900769][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.909311][ T7063]     7f622da3c000-7ffdda69cfff: 0000000000000000
[  172.916600][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.924625][   T30] audit: type=1400 audit(1745888292.733:1092): avc:  denied  { name_bind } for  pid=7066 comm="syz.2.309" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  172.950360][ T7063]     7ffdda69d000-7ffdda6bdfff: ffff88807fb348c0
[  172.956909][ T7063]     7ffdda6be000-ffffffffffffffff: 0000000000000000
[  172.963547][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  172.985941][ T7063] ------------[ cut here ]------------
[  172.990512][   T30] audit: type=1400 audit(1745888292.733:1093): avc:  denied  { node_bind } for  pid=7066 comm="syz.2.309" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  172.991882][ T7063] WARNING: CPU: 0 PID: 7063 at mm/vma.c:768 vma_merge_existing_range+0x5d1/0x1cd0
[  173.022485][ T7063] Modules linked in:
[  173.023525][   T30] audit: type=1400 audit(1745888292.783:1094): avc:  denied  { write } for  pid=7066 comm="syz.2.309" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  173.026613][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.0.306 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  173.059874][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  173.070121][ T7063] RIP: 0010:vma_merge_existing_range+0x5d1/0x1cd0
[  173.076826][ T7063] Code: 00 00 00 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ef 0b aa ff 48 c7 c6 80 d3 9b 8b 48 89 df e8 90 bb f2 ff 90 <0f> 0b 90 e9 9d fc ff ff e8 d2 0b aa ff 48 8b 54 24 20 48 b8 00 00
[  173.076922][   T30] audit: type=1400 audit(1745888292.793:1095): avc:  denied  { connect } for  pid=7066 comm="syz.2.309" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  173.096976][ T7063] RSP: 0018:ffffc9000fb17b20 EFLAGS: 00010293
[  173.123405][   T30] audit: type=1400 audit(1745888292.793:1096): avc:  denied  { name_connect } for  pid=7066 comm="syz.2.309" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  173.124690][ T7063] RAX: 0000000000000000 RBX: ffffc9000fb17c80 RCX: ffffffff8b62b713
[  173.154619][ T7063] RDX: ffff88802fc04880 RSI: ffffffff82112520 RDI: 0000000000000006
[  173.162667][ T7063] RBP: ffff88802f7a1000 R08: 0000000000000006 R09: ffffffffffffffff
[  173.170764][ T7063] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000200000800000
[  173.178784][ T7063] R13: ffffc9000fb17ca0 R14: ffff88802f7a1000 R15: 0000200000000000
[  173.186837][ T7063] FS:  00007f622d9f16c0(0000) GS:ffff8881249e4000(0000) knlGS:0000000000000000
[  173.187015][   T30] audit: type=1400 audit(1745888293.173:1097): avc:  denied  { write } for  pid=7053 comm="syz.4.304" name="usbtmc0" dev="devtmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  173.196113][ T7063] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.225931][ T7063] CR2: 000000110c2d5559 CR3: 000000007f872000 CR4: 00000000003526f0
[  173.233997][ T7063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  173.242053][ T7063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  173.250084][ T7063] Call Trace:
[  173.253405][ T7063]  <TASK>
[  173.256369][ T7063]  ? __pfx_vma_merge_existing_range+0x10/0x10
[  173.262504][ T7063]  ? lockdep_hardirqs_on+0x7c/0x110
[  173.267751][ T7063]  vma_modify+0x87/0x510
[  173.272069][ T7063]  vma_modify_flags+0x212/0x2d0
[  173.276969][ T7063]  ? __pfx_vma_modify_flags+0x10/0x10
[  173.282411][ T7063]  ? mtree_range_walk+0x718/0xc00
[  173.287488][ T7063]  ? mas_walk+0x6a6/0x910
[  173.291884][ T7063]  mlock_fixup+0x27c/0xe50
[  173.296623][ T7063]  apply_mlockall_flags+0x2d4/0x470
[  173.301920][ T7063]  ? __pfx_apply_mlockall_flags+0x10/0x10
[  173.307688][ T7063]  ? __pfx___might_resched+0x10/0x10
[  173.313060][ T7063]  ? __pfx_down_write_killable+0x10/0x10
[  173.318737][ T7063]  ? __pfx_ksys_write+0x10/0x10
[  173.323694][ T7063]  __do_sys_munlockall+0xc5/0x280
[  173.328769][ T7063]  do_syscall_64+0xcd/0x260
[  173.333380][ T7063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.339332][ T7063] RIP: 0033:0x7f622cb8e969
[  173.343822][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.363623][ T7063] RSP: 002b:00007f622d9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098
[  173.372133][ T7063] RAX: ffffffffffffffda RBX: 00007f622cdb6160 RCX: 00007f622cb8e969
[  173.380144][ T7063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  173.388194][ T7063] RBP: 00007f622d9f1090 R08: 0000000000000000 R09: 0000000000000000
[  173.397052][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.405460][ T7063] R13: 0000000000000001 R14: 00007f622cdb6160 R15: 00007ffdda6bc2e8
[  173.413514][ T7063]  </TASK>
[  173.416547][ T7063] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  173.423812][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.0.306 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  173.435683][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  173.445723][ T7063] Call Trace:
[  173.448987][ T7063]  <TASK>
[  173.451904][ T7063]  dump_stack_lvl+0x3d/0x1f0
[  173.456484][ T7063]  panic+0x71c/0x800
[  173.460371][ T7063]  ? __pfx_panic+0x10/0x10
[  173.464777][ T7063]  ? show_trace_log_lvl+0x29b/0x3e0
[  173.469962][ T7063]  ? check_panic_on_warn+0x1f/0xb0
[  173.475066][ T7063]  ? vma_merge_existing_range+0x5d1/0x1cd0
[  173.480879][ T7063]  check_panic_on_warn+0xab/0xb0
[  173.485810][ T7063]  __warn+0xf6/0x3c0
[  173.489684][ T7063]  ? vma_merge_existing_range+0x5d1/0x1cd0
[  173.495482][ T7063]  report_bug+0x3c3/0x580
[  173.499795][ T7063]  ? vma_merge_existing_range+0x5d1/0x1cd0
[  173.505596][ T7063]  handle_bug+0x184/0x210
[  173.509914][ T7063]  exc_invalid_op+0x17/0x50
[  173.514426][ T7063]  asm_exc_invalid_op+0x1a/0x20
[  173.519273][ T7063] RIP: 0010:vma_merge_existing_range+0x5d1/0x1cd0
[  173.525695][ T7063] Code: 00 00 00 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ef 0b aa ff 48 c7 c6 80 d3 9b 8b 48 89 df e8 90 bb f2 ff 90 <0f> 0b 90 e9 9d fc ff ff e8 d2 0b aa ff 48 8b 54 24 20 48 b8 00 00
[  173.545294][ T7063] RSP: 0018:ffffc9000fb17b20 EFLAGS: 00010293
[  173.551359][ T7063] RAX: 0000000000000000 RBX: ffffc9000fb17c80 RCX: ffffffff8b62b713
[  173.559348][ T7063] RDX: ffff88802fc04880 RSI: ffffffff82112520 RDI: 0000000000000006
[  173.567313][ T7063] RBP: ffff88802f7a1000 R08: 0000000000000006 R09: ffffffffffffffff
[  173.575271][ T7063] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000200000800000
[  173.583246][ T7063] R13: ffffc9000fb17ca0 R14: ffff88802f7a1000 R15: 0000200000000000
[  173.591217][ T7063]  ? mt_dump_node+0xcd3/0x16d0
[  173.595980][ T7063]  ? vma_merge_existing_range+0x5d0/0x1cd0
[  173.601790][ T7063]  ? __pfx_vma_merge_existing_range+0x10/0x10
[  173.607851][ T7063]  ? lockdep_hardirqs_on+0x7c/0x110
[  173.613038][ T7063]  vma_modify+0x87/0x510
[  173.617273][ T7063]  vma_modify_flags+0x212/0x2d0
[  173.622115][ T7063]  ? __pfx_vma_modify_flags+0x10/0x10
[  173.627491][ T7063]  ? mtree_range_walk+0x718/0xc00
[  173.632508][ T7063]  ? mas_walk+0x6a6/0x910
[  173.636823][ T7063]  mlock_fixup+0x27c/0xe50
[  173.641252][ T7063]  apply_mlockall_flags+0x2d4/0x470
[  173.646484][ T7063]  ? __pfx_apply_mlockall_flags+0x10/0x10
[  173.652207][ T7063]  ? __pfx___might_resched+0x10/0x10
[  173.657488][ T7063]  ? __pfx_down_write_killable+0x10/0x10
[  173.663111][ T7063]  ? __pfx_ksys_write+0x10/0x10
[  173.667959][ T7063]  __do_sys_munlockall+0xc5/0x280
[  173.672968][ T7063]  do_syscall_64+0xcd/0x260
[  173.677461][ T7063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.683340][ T7063] RIP: 0033:0x7f622cb8e969
[  173.687736][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.707328][ T7063] RSP: 002b:00007f622d9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098
[  173.715731][ T7063] RAX: ffffffffffffffda RBX: 00007f622cdb6160 RCX: 00007f622cb8e969
[  173.723685][ T7063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  173.731638][ T7063] RBP: 00007f622d9f1090 R08: 0000000000000000 R09: 0000000000000000
[  173.739594][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.747553][ T7063] R13: 0000000000000001 R14: 00007f622cdb6160 R15: 00007ffdda6bc2e8
[  173.755517][ T7063]  </TASK>
[  173.758735][ T7063] Kernel Offset: disabled
[  173.763037][ T7063] Rebooting in 86400 seconds..