last executing test programs:

10.084466682s ago: executing program 2 (id=1996):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @jumbo={0xc2, 0x4, 0xf}]}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x4, 0x0, 0x3, 0x8, 0x1, 0x34cc}]})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write(r2, &(0x7f00000000c0)="9d4cf67ec78cd1efe06f4847b365056eafe8013258e7b3b375d8e0379a85868eb2e5dd922e4818ea01e0f8b5d0bdeac80b39fee7abf5a7d192c2953e50ae3d12", 0x40)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x46, 0x400000)
ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000140)=""/4096)
r4 = socket(0x8, 0x5, 0x2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008880}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001300)={0x5, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r6 = accept(r4, &(0x7f0000001340)=@caif=@dgm, &(0x7f00000013c0)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000015c0)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f28f9e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xba40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "a504754e54dc77cbb3c38d3c2877ee1cf82f92473ea7d1767b704480bd43bdbd2aa0b05c394d4db52fab1b71b9de63d037914acbd78c78b72be2d0ddcb2df955760b495471c65e92b9f30183886b0b974e1ba67288429388ab4abb322574e0b1"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "543a385eb3e28d7c71ed2403b23b1776850ecf6d961976eed307c3cbd8906b84eea6f83292f72784e7687348cc731548d60f36ef7a20f73b3bff112072ea29e73a3fe148e22b52a738bb8518e1dc3055ffd454657a549fbe47efd207adb36c349a2c1ca9d7f6b0bbc623bfaed1fa576ca831c81829eba0e9bd769bace286789f3e4ee96f7a6ea864cf807ebc96620b81887ca3d8453107c881b860a70c214b9855baab8182471f50b1552d60faa698028ca7e65dc4e8069a7f87bf9e011c0282"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2d6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20006800}, 0xc845)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r7, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x50)
r11 = socket$inet6(0xa, 0x8080a, 0x200)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001c40)={@ipv4={""/10, ""/2, @remote}, <r12=>0x0}, &(0x7f0000001c80)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001cc0)={@loopback, 0x50, r12})
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
recvmsg(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/182, 0xb6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/82, 0x52}], 0x5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000022c0)={'tunl0\x00', &(0x7f0000002240)={'syztnl2\x00', r12, 0x7, 0x10, 0x5, 0xffffffff, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @local, @multicast2, @broadcast]}, @generic={0x83, 0xa, "11a1aa553f6d92ac"}]}}}}})
connect$packet(r6, &(0x7f0000002300)={0x11, 0x1b, r12, 0x1, 0x6, 0x6, @random="896f8054f495"}, 0x14)
connect$packet(r0, &(0x7f0000002340)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @random="864526350277"}, 0x14)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000002380)=0x4, 0x4)

8.275853528s ago: executing program 2 (id=1996):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @jumbo={0xc2, 0x4, 0xf}]}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x4, 0x0, 0x3, 0x8, 0x1, 0x34cc}]})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write(r2, &(0x7f00000000c0)="9d4cf67ec78cd1efe06f4847b365056eafe8013258e7b3b375d8e0379a85868eb2e5dd922e4818ea01e0f8b5d0bdeac80b39fee7abf5a7d192c2953e50ae3d12", 0x40)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x46, 0x400000)
ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000140)=""/4096)
r4 = socket(0x8, 0x5, 0x2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008880}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001300)={0x5, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r6 = accept(r4, &(0x7f0000001340)=@caif=@dgm, &(0x7f00000013c0)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000015c0)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f28f9e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xba40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "a504754e54dc77cbb3c38d3c2877ee1cf82f92473ea7d1767b704480bd43bdbd2aa0b05c394d4db52fab1b71b9de63d037914acbd78c78b72be2d0ddcb2df955760b495471c65e92b9f30183886b0b974e1ba67288429388ab4abb322574e0b1"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "543a385eb3e28d7c71ed2403b23b1776850ecf6d961976eed307c3cbd8906b84eea6f83292f72784e7687348cc731548d60f36ef7a20f73b3bff112072ea29e73a3fe148e22b52a738bb8518e1dc3055ffd454657a549fbe47efd207adb36c349a2c1ca9d7f6b0bbc623bfaed1fa576ca831c81829eba0e9bd769bace286789f3e4ee96f7a6ea864cf807ebc96620b81887ca3d8453107c881b860a70c214b9855baab8182471f50b1552d60faa698028ca7e65dc4e8069a7f87bf9e011c0282"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2d6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20006800}, 0xc845)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r7, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x50)
r11 = socket$inet6(0xa, 0x8080a, 0x200)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001c40)={@ipv4={""/10, ""/2, @remote}, <r12=>0x0}, &(0x7f0000001c80)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001cc0)={@loopback, 0x50, r12})
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
recvmsg(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/182, 0xb6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/82, 0x52}], 0x5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000022c0)={'tunl0\x00', &(0x7f0000002240)={'syztnl2\x00', r12, 0x7, 0x10, 0x5, 0xffffffff, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @local, @multicast2, @broadcast]}, @generic={0x83, 0xa, "11a1aa553f6d92ac"}]}}}}})
connect$packet(r6, &(0x7f0000002300)={0x11, 0x1b, r12, 0x1, 0x6, 0x6, @random="896f8054f495"}, 0x14)
connect$packet(r0, &(0x7f0000002340)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @random="864526350277"}, 0x14)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000002380)=0x4, 0x4)

6.383818145s ago: executing program 2 (id=1996):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @jumbo={0xc2, 0x4, 0xf}]}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x4, 0x0, 0x3, 0x8, 0x1, 0x34cc}]})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write(r2, &(0x7f00000000c0)="9d4cf67ec78cd1efe06f4847b365056eafe8013258e7b3b375d8e0379a85868eb2e5dd922e4818ea01e0f8b5d0bdeac80b39fee7abf5a7d192c2953e50ae3d12", 0x40)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x46, 0x400000)
ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000140)=""/4096)
r4 = socket(0x8, 0x5, 0x2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008880}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001300)={0x5, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r6 = accept(r4, &(0x7f0000001340)=@caif=@dgm, &(0x7f00000013c0)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000015c0)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f28f9e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xba40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "a504754e54dc77cbb3c38d3c2877ee1cf82f92473ea7d1767b704480bd43bdbd2aa0b05c394d4db52fab1b71b9de63d037914acbd78c78b72be2d0ddcb2df955760b495471c65e92b9f30183886b0b974e1ba67288429388ab4abb322574e0b1"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "543a385eb3e28d7c71ed2403b23b1776850ecf6d961976eed307c3cbd8906b84eea6f83292f72784e7687348cc731548d60f36ef7a20f73b3bff112072ea29e73a3fe148e22b52a738bb8518e1dc3055ffd454657a549fbe47efd207adb36c349a2c1ca9d7f6b0bbc623bfaed1fa576ca831c81829eba0e9bd769bace286789f3e4ee96f7a6ea864cf807ebc96620b81887ca3d8453107c881b860a70c214b9855baab8182471f50b1552d60faa698028ca7e65dc4e8069a7f87bf9e011c0282"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2d6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20006800}, 0xc845)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r7, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x50)
r11 = socket$inet6(0xa, 0x8080a, 0x200)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001c40)={@ipv4={""/10, ""/2, @remote}, <r12=>0x0}, &(0x7f0000001c80)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001cc0)={@loopback, 0x50, r12})
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
recvmsg(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/182, 0xb6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/82, 0x52}], 0x5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000022c0)={'tunl0\x00', &(0x7f0000002240)={'syztnl2\x00', r12, 0x7, 0x10, 0x5, 0xffffffff, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @local, @multicast2, @broadcast]}, @generic={0x83, 0xa, "11a1aa553f6d92ac"}]}}}}})
connect$packet(r6, &(0x7f0000002300)={0x11, 0x1b, r12, 0x1, 0x6, 0x6, @random="896f8054f495"}, 0x14)
connect$packet(r0, &(0x7f0000002340)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @random="864526350277"}, 0x14)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000002380)=0x4, 0x4)

4.540900641s ago: executing program 1 (id=2109):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)

4.438292333s ago: executing program 1 (id=2113):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x10, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

4.437192623s ago: executing program 1 (id=2115):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000480)='system_u:object_r:pinentry_exec_t:s0\x00', 0x4f, 0x1)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write(r1, &(0x7f0000000100), 0xfffffe5d)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffffc1902008, 0xfff8, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x20, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})
lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300)=@sha1={0x1, "c0b05916c2577420ec50a5f37b71d4a85dd334a1"}, 0x15, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f)
read$FUSE(r2, &(0x7f0000002b80)={0x2020}, 0x2020)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="0adfc72e37", 0x5}, {0x0}], 0x2)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)

4.436964723s ago: executing program 3 (id=2116):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x109)
r1 = socket(0x80000000000000a, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = epoll_create1(0x0)
epoll_pwait(r2, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
r5 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r5, &(0x7f0000000140)='attr/current\x00')
preadv2(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x9)

4.405874263s ago: executing program 3 (id=2117):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r4 = memfd_create(&(0x7f0000000580)='}\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00b\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\xd7{\x01vR\x01\x80\x00\x00\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\x00\x00\x00\x00\x10\xfaK\x1f\x96l\v\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13t\xafNx\xc0$\x85\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x94vz\xe1\x84\x99%\xa8\xbc\x18\xb2\xcd\"\x10\xd6\x84\xd0\xf1\x1bWE\x9e\x1d\xaf\v\x95\x80\x86\xaa\x82\x12}\xa1H\xd4e\x9et\'\\\xfa\x81J3N\xaa\xb0]\xb2\xb1\xd3\x14\x82\x875\xd0\xa9\x03\xc8\xb1\xf6\x1d\xf4\x8b\xbd\xbd-\xf9R4\xc4\xc5\x89(\x97\xd8\xd3\xb8-&p\xca\xc6\t\x8f=h\xe2\xdf\x9d\xf5\xb4(\x87\xf2\xa5X\x9f\x92\x06o\x10/\x0f~\xa9Q\xd9\xfd\xcaw\x17db\xfcD\xa0D\x85\x9d!\"/;\x13\xf3\x19\x9d\xe2\x9b\x9b4\xb4jt\xb7\x00'/618, 0x2)
ftruncate(r4, 0xffff) (async)
fcntl$addseals(r4, 0x409, 0x7) (async)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000140)=0x1)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000040) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000280)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x2) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) (async)
r9 = dup3(r8, r7, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046304}], 0x0, 0x0, 0x0})

4.379297384s ago: executing program 2 (id=1996):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @jumbo={0xc2, 0x4, 0xf}]}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x4, 0x0, 0x3, 0x8, 0x1, 0x34cc}]})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write(r2, &(0x7f00000000c0)="9d4cf67ec78cd1efe06f4847b365056eafe8013258e7b3b375d8e0379a85868eb2e5dd922e4818ea01e0f8b5d0bdeac80b39fee7abf5a7d192c2953e50ae3d12", 0x40)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x46, 0x400000)
ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000140)=""/4096)
r4 = socket(0x8, 0x5, 0x2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008880}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001300)={0x5, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r6 = accept(r4, &(0x7f0000001340)=@caif=@dgm, &(0x7f00000013c0)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000015c0)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f28f9e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xba40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "a504754e54dc77cbb3c38d3c2877ee1cf82f92473ea7d1767b704480bd43bdbd2aa0b05c394d4db52fab1b71b9de63d037914acbd78c78b72be2d0ddcb2df955760b495471c65e92b9f30183886b0b974e1ba67288429388ab4abb322574e0b1"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "543a385eb3e28d7c71ed2403b23b1776850ecf6d961976eed307c3cbd8906b84eea6f83292f72784e7687348cc731548d60f36ef7a20f73b3bff112072ea29e73a3fe148e22b52a738bb8518e1dc3055ffd454657a549fbe47efd207adb36c349a2c1ca9d7f6b0bbc623bfaed1fa576ca831c81829eba0e9bd769bace286789f3e4ee96f7a6ea864cf807ebc96620b81887ca3d8453107c881b860a70c214b9855baab8182471f50b1552d60faa698028ca7e65dc4e8069a7f87bf9e011c0282"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2d6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20006800}, 0xc845)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r7, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x50)
r11 = socket$inet6(0xa, 0x8080a, 0x200)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001c40)={@ipv4={""/10, ""/2, @remote}, <r12=>0x0}, &(0x7f0000001c80)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001cc0)={@loopback, 0x50, r12})
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
recvmsg(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/182, 0xb6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/82, 0x52}], 0x5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000022c0)={'tunl0\x00', &(0x7f0000002240)={'syztnl2\x00', r12, 0x7, 0x10, 0x5, 0xffffffff, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @local, @multicast2, @broadcast]}, @generic={0x83, 0xa, "11a1aa553f6d92ac"}]}}}}})
connect$packet(r6, &(0x7f0000002300)={0x11, 0x1b, r12, 0x1, 0x6, 0x6, @random="896f8054f495"}, 0x14)
connect$packet(r0, &(0x7f0000002340)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @random="864526350277"}, 0x14)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000002380)=0x4, 0x4)

2.366282163s ago: executing program 3 (id=2119):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x80000000003})
r1 = socket(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x6) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
listen(r8, 0x0) (async)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r10) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfef, 0x0, 0x0, 0xfffffe52, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000200)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})

2.358094804s ago: executing program 0 (id=2120):
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000004c0), 0x8, 0x4000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={r0, 0xd54f, {0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1, 0x1c, 0x10, "479819c9e84944d9ef87eeec7c2380480cd473dcdb4cf693e3f061a96e189920549ba2365a16ebc8105b367149694f53ad70c80044ebe221d85c297398fe5e77", "369198d51e594843b3704dad71ffa203fc9c778a70f437a9581253e7e38d3eae5ba7dd11b7f21156027f5ba57ff905324c1e14d9f12faaf167f6cffe3d27cffb", "a57c1c984fc6e974865f7c2c3eec7964150c0ec4decd118f6f340389629b5bee", [0x8, 0x5]}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x3})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
close_range(r3, 0xffffffffffffffff, 0x0)

2.290484495s ago: executing program 0 (id=2121):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$FUSE_INIT(r2, &(0x7f0000002240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x9, 0x20, 0x0, 0x7fff, 0xffff8001, 0x9, 0x0, 0x0, 0x10, 0x5}}, 0x50)
write$nbd(r1, &(0x7f00000022c0)={0x67446698, 0x1, 0x1, 0x0, 0x1}, 0x10)
openat$cgroup_subtree(r1, &(0x7f0000002340), 0x2, 0x0)
write$binfmt_register(r1, &(0x7f0000003480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'cgroup.subtree_control\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f]}, 0x3f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
unshare(0x22020600)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = eventfd(0x5)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0x7, 0x2, r6})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003500), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x34, r7, 0x72f4290620afba53, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x18, 0x8, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000c)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r11, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})

2.290088935s ago: executing program 3 (id=2122):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x402, 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xe)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'})

2.218185217s ago: executing program 3 (id=2123):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000040)=0x5, 0x4) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0)
r1 = syz_clone(0x2284000, &(0x7f0000000080)="e85af628f8a7cb6030fe834d5c150896cccf5dc643ed6a552e8d97f6287b03818fc3ae9894d53dfdfcaf8bc1107ba7b8f64fcc08bcf919acf0032d6bccc828895d541e4cbf29f9816a7d2698ffae7db92e2d9cf6bfdb3c618e2a5b841e367b8539c9dc94f46f32d534d4f172de64cc", 0x6f, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="5471e1a942c7cab2391ecd1e9005d78e06fc287e8e59dfceaa448e2b05d39d89f98ef22f96cfe9c160b433cc489b1631796f745e4175a9a5359581c9674de20a74e967838a23add4625fe40f1920bc1a3b291a2ffee4e036b94efc35c89c67bd7cb386c3ece62db1bee400600c720cfc2cecae2f936a24ce217f6b89e504a07bf1194e0ee61c19f0b1cf919baff3039bbdcdd6af207a6239b46a6120122accd132b357668f0192d295faa16529ad9bd8684fcb09559481710401937cdeec8fa0c0d4609ed2c5a4d3298e67b927151ac69d36c4476be30bea3cd63dad86e8896ea53e6aafe7be5dc2f995ffa6247b1727")
ptrace$cont(0x18, r1, 0x2000000000001, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.205881916s ago: executing program 0 (id=2124):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
clock_gettime(0x0, &(0x7f00000023c0)={<r1=>0x0, <r2=>0x0})
r3 = userfaultfd(0x80001)
r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x2012, r4, 0x5401000)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000})
recvmmsg(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)=@in6, 0x80, &(0x7f0000001280)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, &(0x7f00000012c0)=""/117, 0x75}, 0x8}, {{&(0x7f0000001340)=@isdn, 0x80, &(0x7f0000001400)=[{&(0x7f00000013c0)=""/57, 0x39}], 0x1}, 0x6}, {{&(0x7f0000001440)=@in, 0x80, &(0x7f0000002580)=[{&(0x7f00000014c0)=""/148, 0x94}, {&(0x7f0000001580)=""/215, 0xd7}, {&(0x7f0000002440)=""/48, 0x30}, {&(0x7f0000002480)=""/219, 0xdb}], 0x4, &(0x7f00000016c0)=""/33, 0x21}, 0x9}, {{&(0x7f0000001700)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001780)=""/37, 0x25}, {&(0x7f00000017c0)=""/126, 0x7e}], 0x2, &(0x7f0000001880)=""/210, 0xd2}, 0x7fffffff}, {{&(0x7f0000001980)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/70, 0x46}, {&(0x7f0000001a80)=""/51, 0x33}, {&(0x7f0000001ac0)=""/67, 0x43}, {&(0x7f0000001b40)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/30, 0x1e}, {&(0x7f0000001c00)=""/142, 0xea}], 0x6}, 0x6b0}, {{&(0x7f0000001d40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/159, 0x9f}, {&(0x7f0000001f40)=""/123, 0x87}, {&(0x7f0000002000)=""/229, 0xe5}], 0x4, &(0x7f0000002140)=""/203, 0xcb}}], 0x6, 0x1, &(0x7f0000002400)={r1, r2+10000000})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700})
clock_gettime(0x0, &(0x7f0000001fc0)={<r6=>0x0, <r7=>0x0})
ppoll(&(0x7f0000001680)=[{r4, 0x8400}], 0x1, &(0x7f00000025c0)={r6, r7+60000000}, &(0x7f0000002600)={[0xe000000000000000]}, 0x8)

2.154778977s ago: executing program 2 (id=1996):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @jumbo={0xc2, 0x4, 0xf}]}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x4, 0x0, 0x3, 0x8, 0x1, 0x34cc}]})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write(r2, &(0x7f00000000c0)="9d4cf67ec78cd1efe06f4847b365056eafe8013258e7b3b375d8e0379a85868eb2e5dd922e4818ea01e0f8b5d0bdeac80b39fee7abf5a7d192c2953e50ae3d12", 0x40)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x46, 0x400000)
ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000140)=""/4096)
r4 = socket(0x8, 0x5, 0x2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008880}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001300)={0x5, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r6 = accept(r4, &(0x7f0000001340)=@caif=@dgm, &(0x7f00000013c0)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000015c0)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f28f9e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xba40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "a504754e54dc77cbb3c38d3c2877ee1cf82f92473ea7d1767b704480bd43bdbd2aa0b05c394d4db52fab1b71b9de63d037914acbd78c78b72be2d0ddcb2df955760b495471c65e92b9f30183886b0b974e1ba67288429388ab4abb322574e0b1"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "543a385eb3e28d7c71ed2403b23b1776850ecf6d961976eed307c3cbd8906b84eea6f83292f72784e7687348cc731548d60f36ef7a20f73b3bff112072ea29e73a3fe148e22b52a738bb8518e1dc3055ffd454657a549fbe47efd207adb36c349a2c1ca9d7f6b0bbc623bfaed1fa576ca831c81829eba0e9bd769bace286789f3e4ee96f7a6ea864cf807ebc96620b81887ca3d8453107c881b860a70c214b9855baab8182471f50b1552d60faa698028ca7e65dc4e8069a7f87bf9e011c0282"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2d6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20006800}, 0xc845)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r7, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x50)
r11 = socket$inet6(0xa, 0x8080a, 0x200)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001c40)={@ipv4={""/10, ""/2, @remote}, <r12=>0x0}, &(0x7f0000001c80)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001cc0)={@loopback, 0x50, r12})
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
recvmsg(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/182, 0xb6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/82, 0x52}], 0x5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000022c0)={'tunl0\x00', &(0x7f0000002240)={'syztnl2\x00', r12, 0x7, 0x10, 0x5, 0xffffffff, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @local, @multicast2, @broadcast]}, @generic={0x83, 0xa, "11a1aa553f6d92ac"}]}}}}})
connect$packet(r6, &(0x7f0000002300)={0x11, 0x1b, r12, 0x1, 0x6, 0x6, @random="896f8054f495"}, 0x14)
connect$packet(r0, &(0x7f0000002340)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @random="864526350277"}, 0x14)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000002380)=0x4, 0x4)

114.851298ms ago: executing program 0 (id=2125):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='}.\x00')

114.612558ms ago: executing program 1 (id=2126):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x80927000) (async, rerun: 32)
mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r0, 0xffffe000) (rerun: 32)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x90, &(0x7f00000002c0)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0xc6, 0x0, 0x1, 0x101, 0x0}) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async)
r1 = socket(0x3, 0x801, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="060000001201000000000007000000000067fabaa790bbafc58bc4ec79fcdc3a52006900f90aca2da64c0d4a54312b6c45275d03f4bbaac9c39a6a185e7d81ce67221d95f86e5935805ef6468ec497ba2fd6c8b033b9d42dcca293b9bdba6564959af7963067d4776d24ff44c3cd4c307bb2ce319a42"], 0x14}}, 0x0) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
pidfd_send_signal(r3, 0x25, 0x0, 0x0) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r6, 0xae9a) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) (async, rerun: 32)
r8 = syz_open_pts(r7, 0x141601) (rerun: 32)
fcntl$setstatus(r8, 0x4, 0x102800)
write(r8, &(0x7f0000000000)="d5", 0xfffffedf) (async)
readv(r7, &(0x7f0000003100)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1) (async)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

114.417898ms ago: executing program 3 (id=2127):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) (async)
syz_clone3(0x0, 0x43)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210000000000180000000700000073000000000000000a000200"], 0x28}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205000000a51f2aa621176bf300d2e1bb54c1963710"], 0x0}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) (async, rerun: 32)
r4 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
getsockopt$inet6_int(r4, 0x29, 0x7, 0x0, &(0x7f0000000040)) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (rerun: 32)
mmap(&(0x7f000065a000/0x1000)=nil, 0x1000, 0x2, 0x12, r5, 0x0) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee01) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="19dbd1e441550d2427bd7000fcdbdf25"], 0x10}}, 0x800) (async)
connect$netlink(r5, &(0x7f00000008c0)=@unspec, 0xc)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
setgroups(0x1, &(0x7f0000002040)=[0xee01]) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x30, 0x4a, "b4ff84caba9a58d45e502590fd9bbe4efcb39d2bcd53ed3c7264bef01175a9c5e5666fd2c66d8e529ab1d854538bd543cc6a3780442ed6d3b1558ae8971bc43014b88871931e581d5a72"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x83, "f904f221417e4299c52ceef447c50aabf755204a44cf95cdd948e50c3b37b22a7a37b7916b867061890ac3de3d68e2584ce2fe96bbc5b4140a2a678b90d9e807c573263a228bf767d9f2df6b3bc4025b84ea43d90911c93355e78ac9a2f6767b698276912660d674e1db309618b69725d8eb00b71a540fa5ae55da38ced4a5a74afdd7"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x6}}) (async)
lstat(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0xf4, {0xf4, 0x6, "e8fcbf74de9701d05b6de0f6635c748c40fe8439f44bbe012329ef897fc18f43359e8a140a0e31e6096384565a7e500848b6fe13f02e835e34db369fa133d4b361e539c4575b8c302681df0c0e6f836408e1f99b01bdc1d7c385d269c1a46e19b1d966bd2379b94fad437d3814b630bf305d6c8b775ab0c1e8c9f33ec90ca24b5ff7c601ed8be2bc7965ee521f6c659ab0d7974cd74efe0d498831201aa808a03b0e40784748adb7730f664df8f3f1ba28a8d4616585c6041f31da2d2abcc2c3eec5e6413593a9765064ef0ae700ff0302c79dd8a61182abe7bf2aa44bb59a04693a0d885bdf7ccf1aaf9e8a89e70b96e7a4"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x802}}, &(0x7f0000000880)={0x0, 0x22, 0x10, {[@global=@item_012={0x2, 0x1, 0x2, 'a\\'}, @local=@item_4={0x3, 0x2, 0x1, "7e82c14b"}, @global=@item_012={0x2, 0x1, 0x3, "b9ac"}, @global=@item_4={0x3, 0x1, 0xb, "ad6d9d51"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0x80, 0x1, {0x22, 0xad2}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000340)={0x40, 0x13, 0x8, "c6df06e09ed1708c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x1, 0xef, "b40a88b8e3296ba0e0edf9d1f4c11511aae475206a9292c8c30628c6d068754e0b5b2910c56c86eae102b59824a6ffb4c2c1952b91d1b01b8b75118e06ba5e0e288a63f1f912065c87dc746c8c8dd28428fb38a732f22660648faa15cffb0ecf951fbfc86874e49b55532495307e10a6c35b3caf3d1a173c7a29c671a8f7dd6869d7240d2718e70691ba1c52f489db54c6691abd61218ca03141a0409fb70084a45743c44a9d0ca42975bfec698565c4bb89d745e9745410372d27ecd233062f268d95666b630fa5521cdb74d0178902475011e3475ef915777dba0568ade7e284c242584cf05745c4959f6edd0ccb"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x5}})

38.370039ms ago: executing program 0 (id=2128):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x100010, r0, 0x10000000)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x5, 0x828}, &(0x7f0000000040))

38.049989ms ago: executing program 1 (id=2129):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000100)="8684b94757eabab5369768b6c57c8b04f3ef434b", 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$selinux_validatetrans(r3, &(0x7f0000000100)={'system_u:object_r:framebuf_device_t:s0', 0x20, 'system_u:object_r:gpg_exec_t:s0', 0x20, 0x9, 0x20, '/sbin/dhclient\x00'}, 0x6b)

37.745729ms ago: executing program 0 (id=2130):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r8, 0x111, 0x1, 0x0, &(0x7f0000000080))
splice(r4, 0x0, r5, 0x0, 0x2000, 0xa)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
r9 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
shutdown(r9, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x9fd, 0x2, 0x9, 0xe}, {0x4, 0x37, 0x7, 0xb19}, {0xe7, 0x3, 0x0, 0x3ff}, {0x3, 0x3, 0x9, 0x401}]}, 0x10)
close(r2)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0)

35.292219ms ago: executing program 1 (id=2131):
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00')
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x20000, 0x145}, 0x18)
unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x250904, 0x51)
r2 = signalfd4(r0, &(0x7f0000000180)={[0x2]}, 0x8, 0x80800)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x5)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x385)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x240000, 0x0)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]})
r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x200000, 0x5)
renameat2(r1, &(0x7f00000005c0)='./file0\x00', r3, &(0x7f0000000640)='./file1\x00', 0x3)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000680)={{0x87, @dev={0xac, 0x14, 0x14, 0x44}, 0x4e22, 0x4, 'lc\x00', 0x2c, 0x6, 0x54}, {@empty, 0x4e22, 0x10006, 0x0, 0x2, 0x1e3}}, 0x44)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000700)=[@wr_crn={0x46, 0x20, {0xc, 0x47}}], 0x20})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f00000007c0)={0xa3, 0x0, &(0x7f0000000780)})
truncate(&(0x7f0000000840)='./file0\x00', 0xf8)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000880)={0x0, 0xa9c6, 0xa})
r5 = syz_usb_connect$uac1(0x2, 0xfe, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0xb4, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x80}, [@processing_unit={0x9, 0x24, 0x7, 0x2, 0x0, 0x8, "c7ea"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x4, 0x5, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x8, "f6"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x207, 0x4, 0xeb, 0xbafc, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xc, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0xbe, 0x0, "95"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9a, 0x2, 0x4, 0x7f, "a0ea", 'P'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0xc8, 0xca, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x3, 0x0, 0x0, "", "ba1cb4"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0xc1, 0x40, "12d3763d"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x1, 0x0, "94b37f8d"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfffd, 0xc75c, 0x2, "fd20e387571ba9aef2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfa, 0x3, 0xfd, 0xff, "", 'c'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xde, 0x2, 0xfc, 0xf, "e6ebb1", "78ce5b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfe, 0xda, 0xe, {0x7, 0x25, 0x1, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x200, 0x9, 0x3, 0x4, 0xff, 0x9}, 0x10, &(0x7f0000000a00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x0, 0xc, 0x1, 0xb5}]}, 0x3, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xd0f4}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000000c00)={0x14, &(0x7f0000000b40)={0x40, 0x4, 0x4b, {0x4b, 0x23, "838e36ee68ce1af5fdd6ec5db7314adbbf6f45f497d7e54dc02b82c256ba2dfb59cd8941526ab8261d1a5deb1583dc2e57b51fdc4d6a1a0490b8e4042be1dbce8450750a5b83389d63"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x15, @string={0x15, 0x3, "d009d157066e6631c799779368dca08094268d"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000c40)={0x0, 0x14, 0xda, "35a8cbeb345968157c9ca769e9258d0e8f90e521fa774fd9b192551506063da2871eee23ca78dd19238b08fbe842f20fd961844bec77d8dee2a399cf921848951c774589a6a490809dec13e6aa9f127f1695e7dcb53aa6f328e8a435b08b8cf5519fc7c0b8e789463292c188be6235af5139366a896e00c8659aeb786461956a88e507577ac813a4c56fdf9eb810b666d951b47c8028d0b0c597dd713b333059481dad541af9d7ec7791c076854773607ee095b573e358986dee78a8f783a314d3a2785e48445d06f550846e8290b88a642ccdff72f875776455"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000dc0)={0x20, 0x81, 0x3, "458604"}, &(0x7f0000000e00)={0x20, 0x82, 0x3, "47ab9e"}, &(0x7f0000000e40)={0x20, 0x83, 0x3, 'q*\b'}, &(0x7f0000000e80)={0x20, 0x84, 0x2, "bae3"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "fe5d69"}})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/power/pm_freeze_timeout', 0x109101, 0x100)
write$cgroup_subtree(r6, &(0x7f0000000fc0)={[{0x2b, 'pids'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x2d, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'perf_event'}]}, 0x2c)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x8c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5}, @void, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_VENDOR_DATA={0x5c, 0xc5, "99d98d2bd203e02dc0583d58299e9f8127b8e335dbf8de5399cb6704edb5879435e7dafdc622311e4969f7de749e225401ec567d92ed418f4431ab2b31bfcb638edaa740b062800726cf1b726162720a0b071ae4796e6bbf"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0xc014)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000012c0)={0x14, &(0x7f00000011c0)={0x20, 0x11, 0xb6, {0xb6, 0x5, "b00fb71ad6d358fc7de9be25493da6eee70718da6f13ddec878a029525ffc208db56157187eefdbb04969adb59439713e0c4be9df7f9227ca261cf21b6bf3aa618a221034806fb46312569b43753a70d19317ee797c8e12b70e84604a51f55898ae40d3ceb8869c8e0f4f7609945135c4913bf81e1fcba5e4ef0bb5d226da3dcc144ee8544cc65821f0f793d3e54c6d9c7f68e2908b0ee2b04fba6b568d7a5629e062622a3e75e621813813c2fc23a874ef899e7"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001300)={0x0, 0x30, 0x9, "de0e9f8a5877684973"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000013c0)={0xc0, 0x5, 0x2, "1d27"}, &(0x7f0000001400)={0x40, 0x5, 0x6, "9f2f8c8ca8a9"}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
unlink(&(0x7f0000001480)='./file1\x00')
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001500)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x68, r7, 0x408, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x400c051)
openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x4400, 0x0)

0s ago: executing program 2 (id=1996):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @jumbo={0xc2, 0x4, 0xf}]}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x4, 0x0, 0x3, 0x8, 0x1, 0x34cc}]})
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write(r2, &(0x7f00000000c0)="9d4cf67ec78cd1efe06f4847b365056eafe8013258e7b3b375d8e0379a85868eb2e5dd922e4818ea01e0f8b5d0bdeac80b39fee7abf5a7d192c2953e50ae3d12", 0x40)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x46, 0x400000)
ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000140)=""/4096)
r4 = socket(0x8, 0x5, 0x2)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008880}, 0x40000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001300)={0x5, 0x4, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r6 = accept(r4, &(0x7f0000001340)=@caif=@dgm, &(0x7f00000013c0)=0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000018c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000015c0)={0x2a4, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f28f9e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xba40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2e}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x164, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "a504754e54dc77cbb3c38d3c2877ee1cf82f92473ea7d1767b704480bd43bdbd2aa0b05c394d4db52fab1b71b9de63d037914acbd78c78b72be2d0ddcb2df955760b495471c65e92b9f30183886b0b974e1ba67288429388ab4abb322574e0b1"}, @NL80211_ATTR_VENDOR_DATA={0xc4, 0xc5, "543a385eb3e28d7c71ed2403b23b1776850ecf6d961976eed307c3cbd8906b84eea6f83292f72784e7687348cc731548d60f36ef7a20f73b3bff112072ea29e73a3fe148e22b52a738bb8518e1dc3055ffd454657a549fbe47efd207adb36c349a2c1ca9d7f6b0bbc623bfaed1fa576ca831c81829eba0e9bd769bace286789f3e4ee96f7a6ea864cf807ebc96620b81887ca3d8453107c881b860a70c214b9855baab8182471f50b1552d60faa698028ca7e65dc4e8069a7f87bf9e011c0282"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2d6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20006800}, 0xc845)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r7, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7fffffff}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x50)
r11 = socket$inet6(0xa, 0x8080a, 0x200)
getsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001c40)={@ipv4={""/10, ""/2, @remote}, <r12=>0x0}, &(0x7f0000001c80)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000001cc0)={@loopback, 0x50, r12})
r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
recvmsg(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/182, 0xb6}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/229, 0xe5}, {&(0x7f0000002100)=""/82, 0x52}], 0x5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000022c0)={'tunl0\x00', &(0x7f0000002240)={'syztnl2\x00', r12, 0x7, 0x10, 0x5, 0xffffffff, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x23, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @multicast1, @local, @multicast2, @broadcast]}, @generic={0x83, 0xa, "11a1aa553f6d92ac"}]}}}}})
connect$packet(r6, &(0x7f0000002300)={0x11, 0x1b, r12, 0x1, 0x6, 0x6, @random="896f8054f495"}, 0x14)
connect$packet(r0, &(0x7f0000002340)={0x11, 0x4, r12, 0x1, 0x6, 0x6, @random="864526350277"}, 0x14)
setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000002380)=0x4, 0x4)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   16.676160][   T36] kauditd_printk_skb: 31 callbacks suppressed
[   16.676179][   T36] audit: type=1400 audit(1759271929.370:59): avc:  denied  { transition } for  pid=231 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   16.682031][   T36] audit: type=1400 audit(1759271929.370:60): avc:  denied  { noatsecure } for  pid=231 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   16.685271][   T36] audit: type=1400 audit(1759271929.380:61): avc:  denied  { write } for  pid=231 comm="sh" path="pipe:[2631]" dev="pipefs" ino=2631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   16.689259][   T36] audit: type=1400 audit(1759271929.380:62): avc:  denied  { rlimitinh } for  pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   16.692913][   T36] audit: type=1400 audit(1759271929.380:63): avc:  denied  { siginh } for  pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts.
[   24.935030][   T36] audit: type=1400 audit(1759271937.630:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.936493][  T281] cgroup: Unknown subsys name 'net'
[   24.957932][   T36] audit: type=1400 audit(1759271937.630:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.985501][   T36] audit: type=1400 audit(1759271937.660:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.985680][  T281] cgroup: Unknown subsys name 'devices'
[   25.170707][  T281] cgroup: Unknown subsys name 'hugetlb'
[   25.176357][  T281] cgroup: Unknown subsys name 'rlimit'
[   25.351766][   T36] audit: type=1400 audit(1759271938.050:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.375337][   T36] audit: type=1400 audit(1759271938.050:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.384039][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.400486][   T36] audit: type=1400 audit(1759271938.050:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   25.432329][   T36] audit: type=1400 audit(1759271938.110:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.457990][   T36] audit: type=1400 audit(1759271938.110:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.494554][   T36] audit: type=1400 audit(1759271938.190:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.495108][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   25.520270][   T36] audit: type=1400 audit(1759271938.190:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.398806][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.405980][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.413398][  T290] bridge_slave_0: entered allmulticast mode
[   26.419944][  T290] bridge_slave_0: entered promiscuous mode
[   26.428650][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.435797][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.442977][  T288] bridge_slave_0: entered allmulticast mode
[   26.449478][  T288] bridge_slave_0: entered promiscuous mode
[   26.456130][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.463388][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.470892][  T290] bridge_slave_1: entered allmulticast mode
[   26.477169][  T290] bridge_slave_1: entered promiscuous mode
[   26.491237][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.498445][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.505576][  T288] bridge_slave_1: entered allmulticast mode
[   26.512215][  T288] bridge_slave_1: entered promiscuous mode
[   26.528299][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.535455][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.542795][  T289] bridge_slave_0: entered allmulticast mode
[   26.549214][  T289] bridge_slave_0: entered promiscuous mode
[   26.563128][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.570323][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.577435][  T289] bridge_slave_1: entered allmulticast mode
[   26.584402][  T289] bridge_slave_1: entered promiscuous mode
[   26.625977][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.633346][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.640700][  T291] bridge_slave_0: entered allmulticast mode
[   26.647199][  T291] bridge_slave_0: entered promiscuous mode
[   26.666424][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.673864][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.681536][  T291] bridge_slave_1: entered allmulticast mode
[   26.688034][  T291] bridge_slave_1: entered promiscuous mode
[   26.844159][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.851479][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.858988][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.866130][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.881834][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.889036][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.896796][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.904068][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.931049][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.938134][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.945476][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.952725][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.965674][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.972872][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.980190][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.987262][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.017125][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.024754][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.032382][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.039813][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.047256][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.054977][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.062774][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.070294][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.099893][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.107051][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.114743][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.121935][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.130345][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.137400][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.145342][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.152430][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.178566][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.185726][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.195008][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.202100][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.234500][  T289] veth0_vlan: entered promiscuous mode
[   27.257701][  T290] veth0_vlan: entered promiscuous mode
[   27.265880][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.273274][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.284200][  T289] veth1_macvtap: entered promiscuous mode
[   27.293465][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.300765][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.320835][  T288] veth0_vlan: entered promiscuous mode
[   27.336099][  T290] veth1_macvtap: entered promiscuous mode
[   27.356398][  T288] veth1_macvtap: entered promiscuous mode
[   27.391053][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.396097][  T291] veth0_vlan: entered promiscuous mode
[   27.443866][  T291] veth1_macvtap: entered promiscuous mode
[   27.464450][  T335] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   27.495184][  T335] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   27.507000][  T335] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   27.515369][  T339] can0: slcan on ptm0.
[   27.518132][  T335] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   27.585337][  T345] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.611609][  T345] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   27.624819][  T345] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2'.
[   27.718922][  T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.773924][  T361] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   27.782081][  T361] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   27.790914][  T361] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   27.798797][  T330] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   27.799444][  T361] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   27.889516][  T329] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[   27.897824][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   27.909167][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   27.920580][  T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   27.933547][  T329] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   27.942845][  T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.952583][  T329] usb 4-1: config 0 descriptor??
[   27.958574][  T334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   27.979419][  T330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   27.990366][  T330] usb 1-1: config 0 has no interfaces?
[   27.995934][  T330] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   28.005194][  T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.018552][  T330] usb 1-1: config 0 descriptor??
[   28.098382][   T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   28.210070][  T371] overlayfs: statfs failed on './file0'
[   28.211479][  T370] rust_binder: Write failure EFAULT in pid:11
[   28.237317][  T330] usb 1-1: USB disconnect, device number 2
[   28.253320][   T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   28.283086][   T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   28.302438][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   28.312410][  T339] can0 (unregistered): slcan off ptm0.
[   28.319946][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   28.341740][   T31] usb 2-1: SerialNumber: syz
[   28.359382][   T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[   28.373954][  T329] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   28.376754][   T31] usb-storage 2-1:1.0: USB Mass Storage device detected
[   28.390887][  T329] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   28.413862][  T329] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   28.444837][   T31] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   28.466205][   T31] scsi host1: usb-storage 2-1:1.0
[   28.544518][  T402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'.
[   29.303836][  T334] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   29.325240][  T334] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   29.334210][  T334] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   29.342394][  T334] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   29.433431][  T437] support for cryptoloop has been removed.  Use dm-crypt instead.
[   29.495583][   T46] usb 4-1: USB disconnect, device number 2
[   29.569710][  T440] binder: Bad value for 'stats'
[   29.629273][  T446] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   29.670434][  T451] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   29.670481][  T451] rust_binder: Read failure Err(EFAULT) in pid:8
[   29.679695][  T452] netlink: 'syz.3.24': attribute type 16 has an invalid length.
[   29.812727][  T458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.26'.
[   29.821744][  T458] netlink: 35 bytes leftover after parsing attributes in process `syz.3.26'.
[   29.830825][  T458] netlink: 'syz.3.26': attribute type 6 has an invalid length.
[   29.838581][  T458] netlink: 'syz.3.26': attribute type 5 has an invalid length.
[   29.846368][  T458] netlink: 35 bytes leftover after parsing attributes in process `syz.3.26'.
[   29.962679][   T36] kauditd_printk_skb: 93 callbacks suppressed
[   29.962700][   T36] audit: type=1400 audit(1759271942.660:167): avc:  denied  { remount } for  pid=466 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   29.989133][  T467] =======================================================
[   29.989133][  T467] WARNING: The mand mount option has been deprecated and
[   29.989133][  T467]          and is ignored by this kernel. Remove the mand
[   29.989133][  T467]          option from the mount to silence this warning.
[   29.989133][  T467] =======================================================
[   30.027248][   T36] audit: type=1400 audit(1759271942.720:168): avc:  denied  { create } for  pid=466 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   30.070014][   T36] audit: type=1400 audit(1759271942.770:169): avc:  denied  { read } for  pid=468 comm="syz.3.30" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.070859][  T469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'.
[   30.123290][   T36] audit: type=1400 audit(1759271942.770:170): avc:  denied  { open } for  pid=468 comm="syz.3.30" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.148340][   T36] audit: type=1400 audit(1759271942.770:171): avc:  denied  { ioctl } for  pid=468 comm="syz.3.30" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.176685][   T36] audit: type=1400 audit(1759271942.770:172): avc:  denied  { nlmsg_read } for  pid=468 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   30.198885][   T36] audit: type=1400 audit(1759271942.800:173): avc:  denied  { ioctl } for  pid=468 comm="syz.3.30" path="socket:[3920]" dev="sockfs" ino=3920 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.224402][   T36] audit: type=1400 audit(1759271942.820:174): avc:  denied  { read write } for  pid=473 comm="syz.3.31" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   30.248321][   T36] audit: type=1400 audit(1759271942.820:175): avc:  denied  { open } for  pid=473 comm="syz.3.31" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   30.272215][   T36] audit: type=1400 audit(1759271942.950:176): avc:  denied  { ioctl } for  pid=475 comm="syz.3.32" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   30.376240][  T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[   30.440857][  T489] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   31.608711][  T364] usb 2-1: USB disconnect, device number 2
[   31.708473][  T448] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   31.709950][  T449] Bluetooth: hci0: command 0x1003 tx timeout
[   39.060903][  T516] rust_binder: 12: no such ref 0
[   39.061707][  T518] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[   39.065911][  T518] rust_binder: Error while translating object.
[   39.065947][  T516] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   39.088020][  T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.091689][  T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30
[   39.092401][  T515] fuse: Bad value for 'rootmode'
[   39.111117][  T516] rust_binder: 12: no such ref 2
[   39.120533][  T516] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   39.120624][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.135622][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.142268][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.148670][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.155013][  T521] rust_binder: Write failure EFAULT in pid:52
[   39.161067][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   39.161089][   T36] audit: type=1400 audit(1759271951.860:185): avc:  denied  { read } for  pid=526 comm="syz.2.47" path="socket:[5153]" dev="sockfs" ino=5153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.167125][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.180848][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.210056][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.216443][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.223216][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.231759][   T36] audit: type=1400 audit(1759271951.930:186): avc:  denied  { map } for  pid=533 comm="syz.2.49" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   39.268453][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.268488][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.279141][   T36] audit: type=1400 audit(1759271951.930:187): avc:  denied  { block_suspend } for  pid=535 comm="syz.3.50" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   39.285832][  T541] binder: Unknown parameter ''
[   39.311841][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.311875][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.318907][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.323114][   T36] audit: type=1400 audit(1759271951.960:188): avc:  denied  { execute } for  pid=533 comm="syz.2.49" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   39.325304][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.370037][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.376428][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.382947][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.392539][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.394124][  T543] rust_binder: 543 RLIMIT_NICE not set
[   39.399013][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399088][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399109][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399128][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399147][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399196][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399216][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399235][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399254][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399273][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399291][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399309][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.399328][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.487626][   T36] audit: type=1400 audit(1759271952.150:189): avc:  denied  { setopt } for  pid=544 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.502596][   T10] rust_binder: 542: removing orphan mapping 0:1048
[   39.514477][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.523706][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.527360][  T548] rust_binder: Write failure EFAULT in pid:45
[   39.530251][   T36] audit: type=1400 audit(1759271952.160:190): avc:  denied  { read } for  pid=542 comm="syz.3.52" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.567616][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.567648][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.574154][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.581541][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.581623][  T553] fuse: Unknown parameter 'group_idvT��u�d'
[   39.587819][   T36] audit: type=1400 audit(1759271952.160:191): avc:  denied  { open } for  pid=542 comm="syz.3.52" path="/18/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.599671][  T555] rust_binder: Error while translating object.
[   39.600281][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.624408][  T555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.631868][   T36] audit: type=1400 audit(1759271952.160:192): avc:  denied  { ioctl } for  pid=542 comm="syz.3.52" path="/18/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.660498][  T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50
[   39.673146][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.674001][  T557] overlayfs: failed to resolve './file1': -2
[   39.682612][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.688650][   T36] audit: type=1400 audit(1759271952.220:193): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   39.694741][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.721002][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.727251][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.733677][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.740180][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.746799][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.753226][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.759653][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.765968][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.772253][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.773309][   T36] audit: type=1400 audit(1759271952.470:194): avc:  denied  { lock } for  pid=556 comm="syz.3.57" path="socket:[4773]" dev="sockfs" ino=4773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.778406][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.785818][  T560] rust_binder: 557 RLIMIT_NICE not set
[   39.808349][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.820074][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.826452][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.833299][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.839789][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.846400][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.852996][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.859360][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.865835][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.872944][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.879492][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.885724][  T516] rust_binder: Write failure EINVAL in pid:12
[   39.907719][  T571] can0: slcan on ptm0.
[   39.958320][  T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   40.108341][  T330] usb 3-1: Using ep0 maxpacket: 8
[   40.114602][  T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11
[   40.126045][  T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   40.128366][  T364] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   40.138989][  T330] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00
[   40.156197][  T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.164309][  T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   40.172752][  T330] usb 3-1: config 0 descriptor??
[   40.289721][  T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   40.301515][  T364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   40.314574][  T364] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[   40.323871][  T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.329585][  T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   40.333330][  T364] usb 4-1: config 0 descriptor??
[   40.345610][  T329] usb 2-1: config 0 has no interfaces?
[   40.349710][  T569] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   40.353098][  T329] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   40.362948][  T364] usbhid 4-1:0.0: can't add hid device: -22
[   40.370003][  T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.376698][  T364] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[   40.389077][  T329] usb 2-1: config 0 descriptor??
[   40.576510][  T569] SELinux: failed to load policy
[   40.582601][  T364] usb 4-1: USB disconnect, device number 3
[   40.589639][  T330] wacom 0003:056A:0301.0002: Unknown device_type for 'HID 056a:0301'. Assuming pen.
[   40.606260][  T329] usb 2-1: USB disconnect, device number 3
[   40.613553][  T330] wacom 0003:056A:0301.0002: hidraw0: USB HID vff.ea Device [HID 056a:0301] on usb-dummy_hcd.2-1/input0
[   40.627468][  T571] can0 (unregistered): slcan off ptm0.
[   40.641637][  T330] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0301.0002/input/input5
[   41.100096][  T621] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure
[   41.118490][  T559] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   41.126828][  T559] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   41.145981][  T559] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   41.154240][  T559] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   41.164986][  T329] usb 3-1: USB disconnect, device number 2
[   41.213343][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.269078][  T627] rust_binder: Write failure EFAULT in pid:18
[   41.558322][  T364] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   41.688394][  T631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56
[   41.719567][  T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   41.739832][  T364] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[   41.749099][  T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.758073][  T364] usb 4-1: config 0 descriptor??
[   41.849681][  T638] rust_binder: Error while translating object.
[   41.849713][  T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.856188][  T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62
[   42.365234][  T629] rust_binder: Error while translating object.
[   42.374715][  T629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   42.381238][  T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81
[   42.393482][  T364] usbhid 4-1:0.0: can't add hid device: -71
[   42.409913][  T364] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   42.419730][  T364] usb 4-1: USB disconnect, device number 4
[   42.693808][  T648] exFAT-fs (rnullb0): invalid boot record signature
[   42.700594][  T648] exFAT-fs (rnullb0): failed to read boot sector
[   42.707390][  T648] exFAT-fs (rnullb0): failed to recognize exfat type
[   43.009802][  T656] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.029494][  T656] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[   43.105308][  T658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91
[   43.166231][  T668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'.
[   43.186198][  T668] overlayfs: failed to clone upperpath
[   43.228398][  T449] Bluetooth: hci0: command 0x1003 tx timeout
[   43.228398][  T448] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   43.807693][  T685] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.820284][  T685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'.
[   43.829352][  T685] bridge_slave_1: left allmulticast mode
[   43.835421][  T685] bridge_slave_1: left promiscuous mode
[   43.841290][  T685] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.849968][  T685] bridge_slave_0: left allmulticast mode
[   43.855887][  T685] bridge_slave_0: left promiscuous mode
[   43.861982][  T685] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.081833][  T697] tap0: tun_chr_ioctl cmd 1074025677
[   44.087255][  T697] tap0: linktype set to 1
[   44.118059][  T697] tap0: tun_chr_ioctl cmd 1342215191
[   44.157703][  T703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'.
[   44.205103][  T712] binder: Binderfs stats mode cannot be changed during a remount
[   44.205622][   T36] kauditd_printk_skb: 30 callbacks suppressed
[   44.205642][   T36] audit: type=1400 audit(1759271956.900:225): avc:  denied  { write } for  pid=710 comm="syz.2.96" path="socket:[5452]" dev="sockfs" ino=5452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   44.246120][   T36] audit: type=1326 audit(1759271956.940:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.0.95" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88d58eec9 code=0x0
[   44.260910][  T714] rust_binder: Write failure EFAULT in pid:79
[   44.658130][   T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   44.676122][  T727] /dev/nbd2: Can't lookup blockdev
[   44.687309][  T731] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   44.687334][  T731] rust_binder: Read failure Err(EFAULT) in pid:35
[   44.712377][   T36] audit: type=1400 audit(1759271957.397:227): avc:  denied  { getopt } for  pid=732 comm="syz.1.102" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.738939][   T36] audit: type=1400 audit(1759271957.397:228): avc:  denied  { bind } for  pid=732 comm="syz.1.102" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.826031][   T46] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   44.835628][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.844982][   T46] usb 4-1: config 0 descriptor??
[   44.958995][  T330] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   45.121167][  T330] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   45.130700][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.133604][   T36] audit: type=1400 audit(1759271957.794:229): avc:  denied  { create } for  pid=734 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.140086][  T330] usb 2-1: config 0 descriptor??
[   45.159326][   T36] audit: type=1400 audit(1759271957.794:230): avc:  denied  { accept } for  pid=734 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.201326][   T36] audit: type=1400 audit(1759271957.852:231): avc:  denied  { setopt } for  pid=736 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   45.267780][   T36] audit: type=1400 audit(1759271957.930:232): avc:  denied  { lock } for  pid=700 comm="syz.3.91" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   45.299645][   T46] usb 4-1: Cannot set MAC address
[   45.304862][   T46] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   45.327796][   T46] usb 4-1: USB disconnect, device number 5
[   45.389723][  T744] rust_binder: Error while translating object.
[   45.389769][  T744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   45.396218][  T744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:87
[   45.480833][  T749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[   45.559226][   T36] audit: type=1400 audit(1759271958.211:233): avc:  denied  { ioctl } for  pid=764 comm="syz.2.114" path="socket:[6407]" dev="sockfs" ino=6407 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.598258][  T765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   45.598307][  T765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:97
[   45.676142][   T36] audit: type=1400 audit(1759271958.327:234): avc:  denied  { read } for  pid=767 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.688183][  T768] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.914382][  T775] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.117'.
[   46.214357][  T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.224284][  T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.280915][  T330] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   46.291190][  T330] asix 2-1:0.0: probe with driver asix failed with error -71
[   46.300910][  T330] usb 2-1: USB disconnect, device number 4
[   46.352033][  T796] binder: Bad value for 'stats'
[   46.453900][  T804] rust_binder: 112: no such ref 0
[   46.459013][  T804] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   46.466394][  T805] rust_binder: 112: no such ref 0
[   46.471459][  T805] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   46.478801][  T804] rust_binder: 112: no such ref 2
[   46.484019][  T805] rust_binder: 112: no such ref 2
[   46.484188][  T804] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   46.489231][  T805] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[   46.817959][  T813] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   46.891486][  T815] process 'syz.1.131' launched '/dev/fd/8' with NULL argv: empty string added
[   47.182353][  T836] fuse: Bad value for 'fd'
[   47.200738][  T839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=839 comm=syz.0.138
[   47.280557][  T849] netlink: 'syz.2.139': attribute type 11 has an invalid length.
[   47.696965][  T364] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   47.850981][  T364] usb 3-1: Using ep0 maxpacket: 32
[   47.857333][  T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10
[   47.869371][  T364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26219, setting to 1024
[   47.881414][  T364] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   47.891759][  T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.905193][  T364] usb 3-1: config 0 descriptor??
[   47.910556][  T853] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   47.920419][  T364] hub 3-1:0.0: USB hub found
[   47.964279][  T870] /dev/rnullb0: Can't lookup blockdev
[   48.124293][  T364] hub 3-1:0.0: 1 port detected
[   48.585044][  T880] fuse: Bad value for 'fd'
[   48.585051][  T881] fuse: Bad value for 'fd'
[   48.972247][  T897] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   49.412240][   T36] kauditd_printk_skb: 25 callbacks suppressed
[   49.412260][   T36] audit: type=1400 audit(1759271961.968:260): avc:  denied  { ioctl } for  pid=937 comm="syz.1.173" path="socket:[5877]" dev="sockfs" ino=5877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   49.444702][   T36] audit: type=1400 audit(1759271961.978:261): avc:  denied  { map } for  pid=937 comm="syz.1.173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.469271][   T36] audit: type=1400 audit(1759271961.978:262): avc:  denied  { read write } for  pid=937 comm="syz.1.173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.519754][  T940] binder: Bad value for 'stats'
[   49.524881][  T941] binder: Bad value for 'stats'
[   49.776067][  T954] netlink: 'syz.0.179': attribute type 4 has an invalid length.
[   49.785136][  T364] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[   49.792053][   T31] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[   49.793503][  T954] netlink: 'syz.0.179': attribute type 4 has an invalid length.
[   49.931701][  T364] usb 3-1: reset high-speed USB device number 3 using dummy_hcd
[   49.953146][   T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[   49.965465][   T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt
[   49.975839][   T31] usb 4-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   49.988834][   T31] usb 4-1: config 1 interface 0 has no altsetting 0
[   49.997193][   T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   50.006553][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.014815][   T31] usb 4-1: Product: 퓶
[   50.018996][   T31] usb 4-1: Manufacturer: 퇊禤딀
[   50.024627][   T31] usb 4-1: SerialNumber: ᐄ
[   50.030384][  T943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   50.037994][  T943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   50.038351][  T962] netlink: 72 bytes leftover after parsing attributes in process `syz.1.181'.
[   50.045593][  T943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   50.074590][  T364] usb 3-1: device descriptor read/64, error -32
[   50.320894][  T364] usb 3-1: device descriptor read/64, error -32
[   50.330360][   T36] audit: type=1400 audit(1759271962.858:263): avc:  denied  { write } for  pid=965 comm="syz.2.183" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   50.359527][   T36] audit: type=1400 audit(1759271962.858:264): avc:  denied  { open } for  pid=965 comm="syz.2.183" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   50.386156][   T36] audit: type=1400 audit(1759271962.858:265): avc:  denied  { ioctl } for  pid=965 comm="syz.2.183" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   50.475035][  T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.484801][  T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.495271][  T943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.504991][  T943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.513222][  T943] rust_binder: Error while translating object.
[   50.513299][  T943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.524944][  T943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[   50.546864][   T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   50.564407][   T36] audit: type=1400 audit(1759271963.083:266): avc:  denied  { map } for  pid=965 comm="syz.2.183" path="socket:[7050]" dev="sockfs" ino=7050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   50.589094][   T31] usb 4-1: USB disconnect, device number 6
[   50.650884][  T976] netlink: 980 bytes leftover after parsing attributes in process `syz.1.186'.
[   50.808127][  T992] rust_binder: 143: no such ref 0
[   50.965686][  T996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   51.107353][   T36] audit: type=1400 audit(1759271963.621:267): avc:  denied  { setopt } for  pid=1004 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   51.194054][ T1009] batadv_slave_0: entered promiscuous mode
[   51.218148][ T1008] batadv_slave_0: left promiscuous mode
[   51.250555][  T508] usb 3-1: USB disconnect, device number 3
[   51.548715][ T1043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144
[   51.553553][  T508] kernel write not supported for file /144/projid_map (pid: 508 comm: kworker/1:3)
[   51.553618][    T9] kernel write not supported for file /144/projid_map (pid: 9 comm: kworker/0:0)
[   51.582585][ T1043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144
[   51.605880][ T1047] rust_binder: 148: no such ref 0
[   51.626345][ T1047] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   51.633890][ T1047] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   51.659248][ T1055] can0: slcan on ptm0.
[   51.903534][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   51.999771][ T1072] overlayfs: failed to clone lowerpath
[   52.007147][ T1072] overlayfs: failed to clone upperpath
[   52.056539][    T9] usb 4-1: Using ep0 maxpacket: 32
[   52.063043][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.074157][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.084541][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   52.093878][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.102474][    T9] usb 4-1: config 0 descriptor??
[   52.309296][   T36] audit: type=1400 audit(1759271964.797:268): avc:  denied  { ioctl } for  pid=1101 comm="syz.2.223" path="socket:[7189]" dev="sockfs" ino=7189 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   52.544894][    T9] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[   52.606467][   T36] audit: type=1400 audit(1759271965.081:269): avc:  denied  { bind } for  pid=1115 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   52.653692][ T1123] 9pnet_fd: Insufficient options for proto=fd
[   52.852451][ T1152] overlayfs: failed to clone lowerpath
[   52.956589][ T1055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.965463][ T1055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.999274][  T330] usb 4-1: USB disconnect, device number 7
[   53.046405][ T1055] can0 (unregistered): slcan off ptm0.
[   53.190060][ T1199] EXT4-fs: dax option not supported
[   53.213850][ T1203] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[   53.644313][ T1250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   53.653131][ T1250] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   53.661465][ T1250] overlayfs: missing 'lowerdir'
[   53.689426][ T1253] 9pnet_fd: Insufficient options for proto=fd
[   53.929797][ T1280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   54.171198][ T1310] 9pnet_fd: Insufficient options for proto=fd
[   54.210062][ T1318] /dev/rnullb0: Can't lookup blockdev
[   54.609598][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   54.609795][   T36] audit: type=1400 audit(1759271967.055:287): avc:  denied  { lock } for  pid=1358 comm="syz.3.309" path="/dev/userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   54.715496][ T1374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'.
[   54.725613][   T36] audit: type=1400 audit(1759271967.173:288): avc:  denied  { watch watch_reads } for  pid=1372 comm="syz.2.315" path="/91/file0" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   55.734523][ T1427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'.
[   56.041860][   T36] audit: type=1400 audit(1759271968.462:289): avc:  denied  { nlmsg_read } for  pid=1448 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   56.438094][   T36] audit: type=1400 audit(1759271968.857:290): avc:  denied  { mounton } for  pid=1459 comm="syz.3.342" path="/60/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   56.543451][ T1468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'.
[   56.552431][ T1468] bridge_slave_1: left allmulticast mode
[   56.558214][ T1468] bridge_slave_1: left promiscuous mode
[   56.563998][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.571799][ T1468] bridge_slave_0: left allmulticast mode
[   56.577805][ T1468] bridge_slave_0: left promiscuous mode
[   56.583741][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.730219][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   56.912706][ T1475] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.346'.
[   56.922489][ T1475] x_tables: unsorted underflow at hook 4
[   57.386514][   T36] audit: type=1400 audit(1759271969.807:291): avc:  denied  { write } for  pid=1505 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.416787][ T1506] Zero length message leads to an empty skb
[   57.608414][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   57.759537][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   57.771405][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   57.782723][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   57.792563][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.805614][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.814706][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.824068][    T9] usb 4-1: config 0 descriptor??
[   57.862467][ T1530] overlayfs: failed to clone upperpath
[   58.232276][    T9] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max
[   58.249053][    T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   58.261705][    T9] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   58.541242][ T1572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.557003][ T1572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.740482][ T1580] fuse: Bad value for 'fd'
[   59.074693][ T1593] netlink: 5 bytes leftover after parsing attributes in process `syz.0.386'.
[   59.096291][   T36] audit: type=1400 audit(1759271971.517:292): avc:  denied  { map } for  pid=1594 comm="syz.0.387" path="socket:[9073]" dev="sockfs" ino=9073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   59.259917][ T1614] veth1: entered allmulticast mode
[   59.272272][ T1614] veth1: left allmulticast mode
[   59.873683][   T36] audit: type=1400 audit(1759271972.297:293): avc:  denied  { write } for  pid=1637 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   60.012186][   T36] audit: type=1400 audit(1759271972.437:294): avc:  denied  { accept } for  pid=1664 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   60.087358][   T36] audit: type=1400 audit(1759276324.502:295): avc:  denied  { setcurrent } for  pid=1681 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   60.107053][   T36] audit: type=1401 audit(1759276324.502:296): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[   60.298907][  T508] usb 4-1: USB disconnect, device number 8
[   60.322841][   T36] audit: type=1400 audit(1759276324.742:297): avc:  denied  { bind } for  pid=1696 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   60.329715][ T1699] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[   60.364832][ T1701] rust_binder: Write failure EFAULT in pid:226
[   60.516018][   T36] audit: type=1400 audit(1759276324.932:298): avc:  denied  { getopt } for  pid=1714 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.574323][   T36] audit: type=1400 audit(1759276324.992:299): avc:  denied  { bind } for  pid=1724 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   60.593652][   T36] audit: type=1400 audit(1759276324.992:300): avc:  denied  { name_bind } for  pid=1724 comm="syz.2.427" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   60.614531][   T36] audit: type=1400 audit(1759276324.992:301): avc:  denied  { node_bind } for  pid=1724 comm="syz.2.427" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   60.637325][   T36] audit: type=1400 audit(1759276324.992:302): avc:  denied  { setopt } for  pid=1724 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   60.667879][ T1735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.432'.
[   60.738473][  T508] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   60.911006][  T508] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   60.920131][  T508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.928249][  T508] usb 4-1: Product: syz
[   60.932640][  T508] usb 4-1: Manufacturer: syz
[   60.937333][  T508] usb 4-1: SerialNumber: syz
[   61.029956][ T1765] mmap: syz.1.443 (1765) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   61.148754][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.157495][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.649741][ T1775] 9pnet_fd: Insufficient options for proto=fd
[   61.686890][    T9] usb 4-1: USB disconnect, device number 9
[   61.743375][ T1781] netlink: 'syz.0.448': attribute type 4 has an invalid length.
[   61.752539][ T1781] netlink: 'syz.0.448': attribute type 5 has an invalid length.
[   61.763261][ T1781] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.448'.
[   62.308441][  T364] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   62.469789][  T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.480975][  T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.491271][  T364] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   62.500600][  T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.511061][  T364] usb 4-1: config 0 descriptor??
[   62.630495][ T1853] ./cgroup: Can't lookup blockdev
[   62.769101][ T1864] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.846046][ T1877] netlink: 168 bytes leftover after parsing attributes in process `syz.1.478'.
[   62.958774][ T1889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.481'.
[   62.967750][ T1889] netlink: 43 bytes leftover after parsing attributes in process `syz.0.481'.
[   62.976798][ T1889] netlink: 'syz.0.481': attribute type 6 has an invalid length.
[   62.984706][ T1889] netlink: 'syz.0.481': attribute type 5 has an invalid length.
[   62.993007][ T1889] netlink: 43 bytes leftover after parsing attributes in process `syz.0.481'.
[   63.119839][  T364] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71
[   63.134159][  T364] usb 4-1: USB disconnect, device number 10
[   63.199676][ T1898] capability: warning: `syz.0.484' uses 32-bit capabilities (legacy support in use)
[   63.641051][ T1913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   63.641082][ T1913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:240
[   63.730045][ T1926] binder: Binderfs stats mode cannot be changed during a remount
[   63.863950][ T1947] overlayfs: failed to clone lowerpath
[   63.933927][ T1953] rust_binder: Error while translating object.
[   63.933957][ T1953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   63.940513][ T1953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258
[   64.328417][  T329] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   64.488419][  T329] usb 4-1: Using ep0 maxpacket: 32
[   64.495023][  T329] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   64.503677][  T329] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   64.512468][  T329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   64.521489][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   64.531562][  T329] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   64.541301][  T329] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   64.554392][  T329] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   64.563518][  T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.572376][  T329] usb 4-1: config 0 descriptor??
[   64.751070][ T1970] .��
[   64.751070][ T1970] �&����g^���剷�`Jd)u��	�a�֒��2T: Can't lookup blockdev
[   64.781582][  T329] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   64.797239][  T329] usb 4-1: USB disconnect, device number 11
[   64.804877][  T329] usblp0: removed
[   64.950040][ T1990] /dev/loop0: Can't lookup blockdev
[   64.955561][ T1991] /dev/loop0: Can't lookup blockdev
[   65.228435][  T329] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   65.378447][  T329] usb 4-1: Using ep0 maxpacket: 32
[   65.384783][  T329] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[   65.393331][  T329] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   65.402205][  T329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[   65.411414][  T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   65.421265][  T329] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   65.431059][  T329] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   65.444097][  T329] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   65.453446][  T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.462220][  T329] usb 4-1: config 0 descriptor??
[   65.521518][ T2007] overlayfs: failed to clone upperpath
[   65.671364][  T329] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   65.872089][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   65.872108][   T36] audit: type=1400 audit(1759276330.292:320): avc:  denied  { read write } for  pid=1956 comm="syz.3.504" name="lp0" dev="devtmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   65.902065][   T36] audit: type=1400 audit(1759276330.292:321): avc:  denied  { open } for  pid=1956 comm="syz.3.504" path="/dev/usb/lp0" dev="devtmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   66.037977][  T508] usb 4-1: USB disconnect, device number 12
[   66.044663][  T508] usblp0: removed
[   66.135373][ T2026] No source specified
[   66.138484][   T36] audit: type=1400 audit(1759276330.552:322): avc:  denied  { mounton } for  pid=2025 comm="syz.2.530" path="/156/file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   66.459781][ T2042] __vm_enough_memory: pid: 2042, comm: syz.3.535, bytes: 18014402804453376 not enough memory for the allocation
[   66.488268][   T36] audit: type=1400 audit(1759276330.902:323): avc:  denied  { write } for  pid=2048 comm="syz.3.537" name="psched" dev="proc" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   66.512579][   T36] audit: type=1400 audit(1759276330.942:324): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   66.548151][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   66.609040][ T2061] cgroup: fork rejected by pids controller in /syz1
[   67.333237][   T36] audit: type=1326 audit(1759276331.752:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.1.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x0
[   67.429244][ T2140] overlayfs: failed to clone upperpath
[   67.436493][   T36] audit: type=1400 audit(1759276331.852:326): avc:  denied  { read } for  pid=2139 comm="syz.0.558" path="socket:[10164]" dev="sockfs" ino=10164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   67.889386][ T2143] netlink: 'syz.2.559': attribute type 9 has an invalid length.
[   68.059786][   T36] audit: type=1400 audit(1759276332.482:327): avc:  denied  { mount } for  pid=2151 comm="syz.0.562" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   68.412541][ T2155] overlayfs: failed to clone upperpath
[   68.617472][ T2161] 9pnet_fd: Insufficient options for proto=fd
[   68.623829][  T449] Bluetooth: hci0: command 0x1003 tx timeout
[   68.629860][  T448] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   69.003003][   T36] audit: type=1326 audit(1759276333.422:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.2.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61ca78eec9 code=0x0
[   69.160572][   T36] audit: type=1400 audit(1759276333.582:329): avc:  denied  { accept } for  pid=2169 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   69.887389][ T2194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=2194 comm=syz.2.576
[   69.929581][ T2197] cgroup: Invalid name
[   69.989837][ T2205] overlayfs: failed to clone lowerpath
[   70.005365][ T2209] 9pnet_fd: Insufficient options for proto=fd
[   70.245483][ T2220] /dev/rnullb0: Can't lookup blockdev
[   70.359169][ T2226] fuseblk: Bad value for 'fd'
[   70.364844][ T2226] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   70.376500][ T2226] overlayfs: missing 'lowerdir'
[   70.393874][ T2229] tmpfs: Unknown parameter ':;2�SHDO��k����Q:ۘM�ck?3�\7o+Y�;W`��z��C�U\��v��"�I�]�:sU��Br?�I�S�Y�,8'
[   70.430258][ T2238] fuse: Bad value for 'fd'
[   70.884971][ T2290] fuse: Bad value for 'fd'
[   70.991695][ T2301] netlink: 'syz.1.612': attribute type 4 has an invalid length.
[   70.999647][ T2301] netlink: 17 bytes leftover after parsing attributes in process `syz.1.612'.
[   71.022802][ T2306] 9pnet_fd: Insufficient options for proto=fd
[   71.626911][ T2337] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.451747][ T2370] 9pnet_fd: Insufficient options for proto=fd
[   73.337268][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   73.337288][   T36] audit: type=1400 audit(1759276337.752:336): avc:  denied  { read } for  pid=2407 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   73.396566][   T36] audit: type=1400 audit(1759276337.802:337): avc:  denied  { map } for  pid=2409 comm="syz.1.648" path="socket:[11461]" dev="sockfs" ino=11461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   73.429625][   T36] audit: type=1400 audit(1759276337.802:338): avc:  denied  { read } for  pid=2409 comm="syz.1.648" path="socket:[11461]" dev="sockfs" ino=11461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   73.550888][ T2426] 9pnet_fd: Insufficient options for proto=fd
[   73.649331][   T36] audit: type=1400 audit(1759276338.072:339): avc:  denied  { setopt } for  pid=2427 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   73.653077][ T2428] netlink: 'syz.0.655': attribute type 7 has an invalid length.
[   74.171960][ T2459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'.
[   74.229900][ T2463] bpf: Bad value for 'mode'
[   74.261095][   T36] audit: type=1400 audit(1759276338.682:340): avc:  denied  { lock } for  pid=2467 comm="syz.0.670" path="socket:[12377]" dev="sockfs" ino=12377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   74.463639][ T2475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.672'.
[   74.472861][ T2475] tipc: Invalid UDP bearer configuration
[   74.472890][ T2475] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.588850][ T2484] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[   74.607449][   T36] audit: type=1400 audit(1759276339.022:341): avc:  denied  { name_bind } for  pid=2488 comm="syz.1.676" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   74.628769][   T36] audit: type=1400 audit(1759276339.022:342): avc:  denied  { node_bind } for  pid=2488 comm="syz.1.676" saddr=172.30.1.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   74.701698][ T2495] 9pnet_fd: Insufficient options for proto=fd
[   74.765606][ T2501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'.
[   74.862872][   T36] audit: type=1326 audit(1759276339.282:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8a998eec9 code=0x0
[   74.964185][   T36] audit: type=1326 audit(1759276339.382:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz.3.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8a998eec9 code=0x0
[   75.115803][   T36] audit: type=1400 audit(1759276339.532:345): avc:  denied  { getopt } for  pid=2511 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   75.745012][ T2539] netlink: 188 bytes leftover after parsing attributes in process `syz.3.694'.
[   76.663381][ T2588] netlink: 'syz.3.711': attribute type 1 has an invalid length.
[   76.786600][ T2602] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   77.128843][ T2617] fuse: Bad value for 'fd'
[   77.697094][ T2627] netlink: 124 bytes leftover after parsing attributes in process `syz.1.725'.
[   77.755512][ T2633] overlayfs: failed to clone upperpath
[   78.041762][ T2657] overlay: filesystem on ./bus is read-only
[   78.525988][ T2681] overlayfs: failed to clone upperpath
[   79.212307][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   79.212328][   T36] audit: type=1400 audit(1759276343.637:351): avc:  denied  { ioctl } for  pid=2710 comm="syz.0.754" path="socket:[12640]" dev="sockfs" ino=12640 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   79.215263][ T2711] x_tables: duplicate underflow at hook 1
[   79.521998][ T2722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.759'.
[   80.635049][ T2761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'.
[   80.643965][ T2761] bridge_slave_1: left allmulticast mode
[   80.649726][ T2761] bridge_slave_1: left promiscuous mode
[   80.655462][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.663528][ T2761] bridge_slave_0: left allmulticast mode
[   80.669795][ T2761] bridge_slave_0: left promiscuous mode
[   80.675684][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.918109][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.778'.
[   81.343259][   T36] audit: type=1401 audit(1759276345.767:352): op=setxattr invalid_context=""
[   81.353578][   T36] audit: type=1400 audit(1759276345.777:353): avc:  denied  { connect } for  pid=2843 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.374380][   T36] audit: type=1400 audit(1759276345.797:354): avc:  denied  { write } for  pid=2843 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.382256][ T2863] 9pnet_fd: Insufficient options for proto=fd
[   81.917118][ T2865] tipc: Started in network mode
[   81.922229][ T2865] tipc: Node identity , cluster identity 4711
[   81.928588][ T2865] tipc: Failed to set node id, please configure manually
[   81.935802][ T2865] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   82.134798][   T36] audit: type=1400 audit(1759276346.557:355): avc:  denied  { create } for  pid=2892 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   82.255192][ T2916] fuse: Bad value for 'fd'
[   82.292237][   T36] audit: type=1400 audit(1759276346.717:356): avc:  denied  { bind } for  pid=2917 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   82.673407][ T2926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'.
[   82.683036][ T2926] bridge_slave_1: left allmulticast mode
[   82.688817][ T2926] bridge_slave_1: left promiscuous mode
[   82.694678][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.702646][ T2926] bridge_slave_0: left allmulticast mode
[   82.708590][ T2926] bridge_slave_0: left promiscuous mode
[   82.714267][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.832051][ T2946] /dev/loop0: Can't lookup blockdev
[   82.921434][ T2962] 9pnet_fd: Insufficient options for proto=fd
[   83.136216][   T36] audit: type=1400 audit(1759276347.557:357): avc:  denied  { mount } for  pid=2980 comm="syz.0.838" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   83.159563][   T36] audit: type=1400 audit(1759276347.567:358): avc:  denied  { search } for  pid=2980 comm="syz.0.838" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.183323][   T36] audit: type=1400 audit(1759276347.567:359): avc:  denied  { setattr } for  pid=2980 comm="syz.0.838" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.206468][   T36] audit: type=1400 audit(1759276347.567:360): avc:  denied  { write } for  pid=2980 comm="syz.0.838" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.410217][ T2992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.843'.
[   83.719957][ T2999] netlink: 288 bytes leftover after parsing attributes in process `syz.0.846'.
[   83.733374][ T2999] 9pnet_fd: Insufficient options for proto=fd
[   83.740054][ T3000] 9pnet_fd: Insufficient options for proto=fd
[   84.038803][ T3028] overlayfs: failed to resolve 'fowner=00000000000000060929': -2
[   84.275277][ T3042] fuse: Unknown parameter '��!0x0000000000000004'
[   84.322265][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   84.322285][   T36] audit: type=1400 audit(1759276348.747:372): avc:  denied  { map } for  pid=3050 comm="syz.0.866" path="socket:[13018]" dev="sockfs" ino=13018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   84.412196][   T36] audit: type=1326 audit(1759276348.837:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.0.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88d58eec9 code=0x0
[   84.689923][ T3078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'.
[   85.094919][ T3085] netlink: 136 bytes leftover after parsing attributes in process `syz.1.876'.
[   87.206077][   T36] audit: type=1400 audit(1759276351.627:374): avc:  denied  { map } for  pid=3153 comm="syz.1.904" path="pipe:[13131]" dev="pipefs" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dhcp_state_t tclass=fifo_file permissive=1
[   87.231450][   T36] audit: type=1400 audit(1759276351.627:375): avc:  denied  { execute } for  pid=3153 comm="syz.1.904" path="pipe:[13131]" dev="pipefs" ino=13131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dhcp_state_t tclass=fifo_file permissive=1
[   87.572609][ T3187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'.
[   88.511759][ T3239] overlay: Bad value for 'xino'
[   88.585169][ T3250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'.
[   88.675055][   T36] audit: type=1400 audit(1759276353.097:376): avc:  denied  { accept } for  pid=3252 comm="syz.2.940" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   88.730750][ T3257] netlink: 260 bytes leftover after parsing attributes in process `syz.2.941'.
[   89.460900][   T36] audit: type=1400 audit(1759276353.887:377): avc:  denied  { setattr } for  pid=3286 comm="syz.3.952" name="" dev="pipefs" ino=13311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   89.491067][ T3289] netlink: 100 bytes leftover after parsing attributes in process `syz.3.953'.
[   89.996206][ T3297] netlink: 136 bytes leftover after parsing attributes in process `syz.2.956'.
[   90.155642][ T3318] fuseblk: Unknown parameter '}d'
[   90.341697][ T3325] tipc: Started in network mode
[   90.346709][ T3325] tipc: Node identity ac14140f, cluster identity 4711
[   90.353916][ T3325] tipc: New replicast peer: 255.255.255.255
[   90.360212][ T3325] tipc: Enabled bearer <udp:syz2>, priority 10
[   90.724407][   T36] audit: type=1326 audit(1759276355.147:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3350 comm="syz.3.976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8a998eec9 code=0xffff0000
[   90.777552][ T3347] netlink: 'syz.2.974': attribute type 16 has an invalid length.
[   90.786648][ T3347] netlink: 'syz.2.974': attribute type 16 has an invalid length.
[   90.797270][   T36] audit: type=1400 audit(1759276355.217:379): avc:  denied  { accept } for  pid=3346 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   90.858283][ T3356] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.867201][ T3356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.874495][ T3356] IPv6: NLM_F_CREATE should be set when creating new route
[   90.881778][ T3356] IPv6: NLM_F_CREATE should be set when creating new route
[   90.896490][ T3357] netlink: 288 bytes leftover after parsing attributes in process `syz.2.977'.
[   90.942507][ T3366] overlayfs: failed to clone lowerpath
[   91.134416][ T3380] overlayfs: failed to clone upperpath
[   91.367356][ T3396] /dev/rnullb0: Can't lookup blockdev
[   91.477811][   T36] audit: type=1400 audit(1759276355.897:380): avc:  denied  { create } for  pid=3407 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   91.508672][   T31] tipc: Node number set to 2886997007
[   91.583519][ T3420] fuseblk: Bad value for 'user_id'
[   91.588845][ T3420] fuseblk: Bad value for 'user_id'
[   91.596165][ T3420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'.
[   91.772420][   T36] audit: type=1326 audit(1759276356.197:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.2.1013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61ca78eec9 code=0x0
[   92.245519][ T3474] EXT4-fs: dax option not supported
[   92.300885][ T3482] x_tables: duplicate underflow at hook 2
[   92.415270][ T3492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[   92.859373][ T3514] No source specified
[   93.048365][   T36] audit: type=1326 audit(1759276357.467:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3529 comm="syz.0.1039" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88d58eec9 code=0x0
[   93.078195][   T36] audit: type=1400 audit(1759276357.497:383): avc:  denied  { mount } for  pid=3534 comm="syz.0.1040" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   93.247974][ T3540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1042'.
[   93.593472][ T3553] fuse: Bad value for 'user_id'
[   93.598478][ T3553] fuse: Bad value for 'user_id'
[   93.615607][ T3556] sock: sock_set_timeout: `syz.0.1048' (pid 3556) tries to set negative timeout
[   94.049575][ T3638] No source specified
[   94.106232][   T36] audit: type=1400 audit(1759276358.527:384): avc:  denied  { accept } for  pid=3648 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   94.128059][ T3650] tmpfs: Bad value for 'nr_blocks'
[   94.170790][   T36] audit: type=1400 audit(1759276358.597:385): avc:  denied  { mount } for  pid=3661 comm="syz.2.1084" name="/" dev="ramfs" ino=13780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   94.281994][ T3684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[   94.303844][ T3688] overlayfs: conflicting options: nfs_export=on,index=off
[   94.311794][ T3690] fuseblk: Unknown parameter 'fd<fk
[   94.311794][ T3690] <����2?Q^�#æVf��9�CI'
[   94.323148][ T3690] netlink: 'syz.0.1095': attribute type 28 has an invalid length.
[   94.336354][ T3690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=193 sclass=netlink_route_socket pid=3690 comm=syz.0.1095
[   94.372047][ T3702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'.
[   94.538131][   T36] audit: type=1400 audit(1759276358.957:386): avc:  denied  { listen } for  pid=3706 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.611152][   T36] audit: type=1400 audit(1759276359.037:387): avc:  denied  { getopt } for  pid=3719 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   94.639158][ T3722] 9pnet_fd: Insufficient options for proto=fd
[   94.934303][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'.
[   95.558490][ T3762] 9pnet_fd: Insufficient options for proto=fd
[   95.571495][ T3753] /dev/rnullb0: Can't lookup blockdev
[   96.024713][ T3772] 9pnet_fd: Insufficient options for proto=fd
[   96.092121][ T3774] 9pnet_fd: Insufficient options for proto=fd
[   96.110624][ T3777] overlayfs: failed to clone upperpath
[   96.121485][ T3779] overlayfs: failed to clone upperpath
[   96.466301][ T3804] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1136'.
[   97.143621][ T3836] 9pnet_fd: Insufficient options for proto=fd
[   97.668649][ T3842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'.
[   98.050839][ T3871] 9pnet_fd: Insufficient options for proto=fd
[   98.064283][   T36] audit: type=1400 audit(1759276362.487:388): avc:  denied  { create } for  pid=3868 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   98.348590][ T3891] 9pnet_fd: Insufficient options for proto=fd
[   98.618829][ T3897] ./cgroup: Can't lookup blockdev
[   98.781540][   T36] audit: type=1326 audit(1759276363.207:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.0.1182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fd88d58eec9 code=0x0
[   98.815462][   T36] audit: type=1400 audit(1759276363.237:390): avc:  denied  { read } for  pid=3953 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.868868][ T3966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3966 comm=syz.0.1186
[   98.886212][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'.
[   99.192706][   T36] audit: type=1400 audit(1759276363.617:391): avc:  denied  { connect } for  pid=3968 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.220821][ T3971] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   99.268718][ T3984] SELinux:  Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped).
[   99.324329][ T3987] overlayfs: failed to clone upperpath
[   99.361312][   T36] audit: type=1400 audit(1759276363.787:392): avc:  denied  { relabelto } for  pid=3983 comm="syz.2.1192" name="bus" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0"
[   99.388846][ T3984] 9pnet_fd: Insufficient options for proto=fd
[   99.417421][   T36] audit: type=1400 audit(1759276363.797:393): avc:  denied  { associate } for  pid=3983 comm="syz.2.1192" name="bus" dev="tmpfs" ino=1917 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:traceroute_exec_t:s0"
[   99.447087][   T36] audit: type=1400 audit(1759276363.797:394): avc:  denied  { write } for  pid=3983 comm="syz.2.1192" name="bus" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0"
[   99.474812][   T36] audit: type=1400 audit(1759276363.797:395): avc:  denied  { add_name } for  pid=3983 comm="syz.2.1192" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0"
[   99.476130][ T3996] incfs: Options parsing error. -22
[   99.509701][ T3996] incfs: mount failed -22
[   99.668703][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   99.668722][   T36] audit: type=1326 audit(1759276364.097:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.0.1205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88d58eec9 code=0x0
[   99.715373][   T36] audit: type=1400 audit(1759276364.137:405): avc:  denied  { checkpoint_restore } for  pid=4022 comm="syz.2.1206" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.993106][ T4040] fuse: Bad value for 'user_id'
[   99.998237][ T4040] fuse: Bad value for 'user_id'
[  100.179470][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'.
[  100.217041][   T36] audit: type=1400 audit(1759276364.637:406): avc:  denied  { shutdown } for  pid=4057 comm="syz.2.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.508881][   T36] audit: type=1326 audit(1759276364.937:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.1.1226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x0
[  100.664735][   T36] audit: type=1326 audit(1759276365.087:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.1.1226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x0
[  100.775632][   T36] audit: type=1326 audit(1759276365.197:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a998eec9 code=0x7fc00000
[  100.806542][ T4087] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  100.880228][ T4092] fuse: Unknown parameter '�0x0000000000000008'
[  100.995737][ T4101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1231'.
[  101.005231][ T4101] tipc: Invalid UDP bearer configuration
[  101.005261][ T4101] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.036388][   T36] audit: type=1400 audit(1759276365.447:410): avc:  denied  { setattr } for  pid=4102 comm="syz.3.1232" name="NETLINK" dev="sockfs" ino=15519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  101.086181][ T4114] /dev/loop0: Can't lookup blockdev
[  101.124113][ T4121] raw_sendmsg: syz.2.1234 forgot to set AF_INET. Fix it!
[  101.965771][ T4148] 9pnet_fd: Insufficient options for proto=fd
[  102.390262][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  102.788678][   T36] audit: type=1400 audit(1759276367.217:411): avc:  denied  { create } for  pid=4204 comm="syz.1.1268" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  102.847012][ T4215] netlink: 'syz.1.1271': attribute type 4 has an invalid length.
[  102.855350][ T4215] netlink: 992 bytes leftover after parsing attributes in process `syz.1.1271'.
[  102.930492][ T4218] fuseblk: Bad value for 'user_id'
[  102.935725][ T4218] fuseblk: Bad value for 'user_id'
[  102.948533][ T4218] 9pnet_fd: Insufficient options for proto=fd
[  104.338794][ T4284] SELinux:  Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped).
[  104.348589][   T36] audit: type=1400 audit(1759276368.777:412): avc:  denied  { relabelto } for  pid=4283 comm="syz.3.1294" name="file0" dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_dep_t:s0"
[  104.354582][ T4284] overlayfs: failed to clone lowerpath
[  104.375477][   T36] audit: type=1400 audit(1759276368.777:413): avc:  denied  { associate } for  pid=4283 comm="syz.3.1294" name="file0" dev="tmpfs" ino=1436 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_dep_t:s0"
[  104.839907][ T4298] netlink: 'syz.2.1299': attribute type 16 has an invalid length.
[  104.847890][ T4298] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1299'.
[  104.869307][ T4302] fuse: Unknown parameter '000000000000000000000000x0000000000000003'
[  104.936857][ T4307] 9pnet_fd: Insufficient options for proto=fd
[  105.513430][ T4352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4352 comm=syz.3.1319
[  107.139284][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'.
[  107.252690][ T4418] overlayfs: failed to clone lowerpath
[  107.368353][   T36] audit: type=1400 audit(1759276371.787:414): avc:  denied  { create } for  pid=4443 comm="syz.1.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  107.410265][ T4455] overlayfs: failed to clone upperpath
[  107.450090][   T36] audit: type=1400 audit(1759276371.879:415): avc:  denied  { getattr } for  pid=4458 comm="syz.2.1360" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  108.555832][ T4600] /dev/rnullb0: Can't lookup blockdev
[  108.954660][   T36] audit: type=1400 audit(1759276373.379:416): avc:  denied  { write } for  pid=4616 comm="syz.2.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  109.211081][ T4641] /dev/rnullb0: Can't lookup blockdev
[  109.227671][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'.
[  109.236723][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'.
[  109.245811][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1418'.
[  109.518053][ T4654] fuse: Unknown parameter '��Q��'M�r(j�\Cp�ׅ#q���'ڡN�w�ʎ�d!E��I�9'
[  109.980576][ T4668] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.122031][ T4683] /dev/rnullb0: Can't lookup blockdev
[  110.229745][ T4679] Invalid ELF header magic: != ELF
[  110.235193][   T36] audit: type=1400 audit(1759276374.659:417): avc:  denied  { module_load } for  pid=4678 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  110.267853][ T4679] Invalid ELF header magic: != ELF
[  111.060397][ T4709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=4709 comm=syz.2.1443
[  111.115862][ T4711] /dev/loop0: Can't lookup blockdev
[  111.265542][   T36] audit: type=1400 audit(1759276375.689:418): avc:  denied  { read } for  pid=4718 comm="syz.1.1447" name="file2" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.280876][ T4719] 9pnet_fd: p9_fd_create_unix (4719): problem connecting socket: ./file2: -111
[  111.288661][   T36] audit: type=1400 audit(1759276375.709:419): avc:  denied  { mounton } for  pid=4718 comm="syz.1.1447" path="/326/file2" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.829844][ T4746] overlayfs: failed to clone upperpath
[  111.992769][ T4751] 9pnet_fd: Insufficient options for proto=fd
[  112.012675][ T4754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  112.407292][   T36] audit: type=1326 audit(1759276376.829:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.432266][   T36] audit: type=1326 audit(1759276376.829:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.456379][   T36] audit: type=1326 audit(1759276376.839:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.468201][ T4776] syz.1.1468(4776): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  112.480519][   T36] audit: type=1326 audit(1759276376.839:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.517446][   T36] audit: type=1326 audit(1759276376.839:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.541685][   T36] audit: type=1326 audit(1759276376.839:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.565090][   T36] audit: type=1326 audit(1759276376.839:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.588945][   T36] audit: type=1326 audit(1759276376.839:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  112.612943][   T36] audit: type=1326 audit(1759276376.839:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.636503][   T36] audit: type=1326 audit(1759276376.839:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  112.686663][ T4788] tmpfs: Unknown parameter ':;2�SHDO��k����Q:ۘM�ck?3�\7o+Y�;W`��z��C�U\��v��"/selinux/status'
[  113.141489][ T4808] /dev/rnullb0: Can't lookup blockdev
[  113.423344][ T4818] overlayfs: empty lowerdir
[  113.428198][ T4819] overlayfs: empty lowerdir
[  113.470982][ T4831] fuse: Unknown parameter 'fd}�x�yc����'��X5)�x1����0177777777777777777777700000000000000000000'
[  113.590228][ T4847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1492'.
[  114.973687][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  114.982949][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  115.006914][ T4925] fuse: Bad value for 'fd'
[  115.175899][ T4953] /dev/loop0: Can't lookup blockdev
[  115.297516][ T4981] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  115.368889][ T4995] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  115.400463][ T4999] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1544'.
[  115.410825][ T4999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1544'.
[  116.223083][ T5053] 9pnet_fd: Insufficient options for proto=fd
[  117.798441][ T5175] futex_wake_op: syz.2.1601 tries to shift op by -1; fix this program
[  117.852626][ T5179] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.475733][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  118.475755][   T36] audit: type=1400 audit(1759276382.899:445): avc:  denied  { associate } for  pid=5199 comm="syz.1.1612" name="hidraw0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  118.510991][   T36] audit: type=1400 audit(1759276382.929:446): avc:  denied  { mounton } for  pid=5199 comm="syz.1.1612" path="/file0" dev="rootfs" ino=18575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  118.554146][ T5208] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.700617][ T5216] netlink: 'syz.2.1618': attribute type 4 has an invalid length.
[  118.708629][ T5216] netlink: 'syz.2.1618': attribute type 5 has an invalid length.
[  118.716425][ T5216] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1618'.
[  118.739418][ T5219] 9pnet_fd: Insufficient options for proto=fd
[  118.757641][   T36] audit: type=1400 audit(1759276383.179:447): avc:  denied  { nlmsg_write } for  pid=5220 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  118.817598][ T5231] bpf: Bad value for 'uid'
[  118.822755][ T5231] netlink: 'syz.0.1624': attribute type 12 has an invalid length.
[  118.831815][ T5231] bpf: Bad value for 'uid'
[  118.979894][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'.
[  118.989786][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  118.996067][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.002411][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.008899][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.015452][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.022732][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.029080][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.035313][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.041618][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.047949][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.055051][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.064772][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.071654][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.078164][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.084835][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.091371][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.097860][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.104437][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.111102][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.117536][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.124263][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.130834][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.137252][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.143889][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.150529][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.156868][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.168617][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.175145][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.182401][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.188988][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.195434][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.199698][ T5265] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  119.201888][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.211553][ T5265] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  119.215818][ T5262] 9pnet_fd: Insufficient options for proto=fd
[  119.224421][ T5265] tipc: Enabled bearer <udp:syz0>, priority 10
[  119.249982][ T5268] syz.0.1637 uses obsolete (PF_INET,SOCK_PACKET)
[  119.332417][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'.
[  120.297693][ T5314] overlayfs: failed to clone upperpath
[  120.374634][ T5330] /dev/loop0: Can't lookup blockdev
[  120.747189][   T36] audit: type=1400 audit(1759276385.164:448): avc:  denied  { setattr } for  pid=5355 comm="syz.0.1670" name="file2" dev="tmpfs" ino=2344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  120.909760][ T5374] syz.3.1674 (5374): attempted to duplicate a private mapping with mremap.  This is not supported.
[  120.935638][ T5377] overlayfs: failed to clone upperpath
[  120.973551][ T5386] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.007868][ T5390] 9pnet_fd: Insufficient options for proto=fd
[  121.108533][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'.
[  121.193687][ T5420] /dev/rnullb0: Can't lookup blockdev
[  121.657985][   T36] audit: type=1400 audit(1759276386.074:449): avc:  denied  { unmount } for  pid=5431 comm="syz.1.1693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  122.095125][ T5476] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1706'.
[  122.106302][ T5476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1706'.
[  122.247636][   T36] audit: type=1400 audit(1759276386.664:450): avc:  denied  { execute_no_trans } for  pid=5500 comm="syz.2.1715" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  122.323630][ T5506] /dev/rnullb0: Can't lookup blockdev
[  122.420806][ T5520] netlink: 'syz.3.1723': attribute type 1 has an invalid length.
[  122.428808][ T5520] netlink: 'syz.3.1723': attribute type 2 has an invalid length.
[  122.723573][ T5563] netlink: 'syz.3.1736': attribute type 12 has an invalid length.
[  122.825210][ T5582] overlayfs: failed to clone upperpath
[  123.732273][ T5620] 9pnet: Unknown protocol version 9
[  123.774372][   T36] audit: type=1400 audit(1759276388.194:451): avc:  denied  { create } for  pid=5623 comm="syz.3.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  123.806282][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'.
[  123.882388][ T5641] /dev/rnullb0: Can't lookup blockdev
[  123.904468][ T5643] netlink: 'syz.3.1767': attribute type 11 has an invalid length.
[  123.912460][ T5643] netlink: 'syz.3.1767': attribute type 2 has an invalid length.
[  124.044715][ T5645] 9pnet_fd: Insufficient options for proto=fd
[  124.239235][ T5649] overlayfs: failed to clone upperpath
[  124.261615][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'.
[  124.436010][ T5676] tipc: Started in network mode
[  124.441765][ T5676] tipc: Node identity ac14142f, cluster identity 4711
[  124.449001][ T5676] tipc: New replicast peer: 0.0.0.0
[  124.454899][ T5676] tipc: Enabled bearer <udp:syz2>, priority 10
[  124.462216][ T5676] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  124.470455][ T5676] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  124.480875][ T5676] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  124.790464][ T5704] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1786'.
[  124.810711][ T5704] netlink: 'syz.2.1786': attribute type 16 has an invalid length.
[  124.828548][ T5704] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1786'.
[  124.893859][   T36] audit: type=1400 audit(1759276389.314:452): avc:  denied  { setopt } for  pid=5716 comm="syz.2.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.125702][   T36] audit: type=1107 audit(1759276389.544:453): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='�]��_Aq�·���!�I�'
[  125.150713][   T36] audit: type=1107 audit(1759276389.544:454): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='�]��_Aq�·���!�I�'
[  125.202191][ T5742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1797'.
[  125.211504][ T5742] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  125.568385][  T508] tipc: Node number set to 2886997039
[  125.574220][   T36] audit: type=1400 audit(1759276389.994:455): avc:  denied  { create } for  pid=5756 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  126.335618][   T36] audit: type=1400 audit(1759276390.754:456): avc:  denied  { shutdown } for  pid=5808 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  126.371727][   T36] audit: type=1400 audit(1759276390.794:457): avc:  denied  { accept } for  pid=5812 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  126.391451][   T36] audit: type=1400 audit(1759276390.794:458): avc:  denied  { create } for  pid=5814 comm="syz.0.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  126.442712][ T5825] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1823'.
[  126.464530][ T5828] veth1: entered allmulticast mode
[  126.773629][ T5836] fuse: blksize only supported for fuseblk
[  126.794012][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'.
[  126.975341][   T36] audit: type=1400 audit(1759276391.394:459): avc:  denied  { mounton } for  pid=5850 comm="syz.3.1833" path="/file0" dev="ramfs" ino=20606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  127.296781][ T5827] veth1: left allmulticast mode
[  127.404982][   T36] audit: type=1326 audit(1759276391.824:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.1838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f863078eec9 code=0x0
[  127.933784][ T5920] veth0_vlan: left promiscuous mode
[  127.992455][ T5928] incfs_lookup_dentry err:-13
[  127.997382][ T5928] incfs: Can't find or create .index dir in ./bus
[  128.004154][ T5928] incfs: mount failed -13
[  128.042584][ T5939] 9pnet_fd: Insufficient options for proto=fd
[  128.065808][ T5944] incfs: Error accessing: ./file0.
[  128.071702][ T5944] incfs: mount failed -20
[  128.125025][ T5965] tipc: Started in network mode
[  128.130243][ T5965] tipc: Node identity , cluster identity 4711
[  128.136431][ T5965] tipc: Failed to obtain node identity
[  128.142272][ T5965] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  128.167454][ T5971] tipc: Started in network mode
[  128.172704][ T5971] tipc: Node identity ac14140f, cluster identity 4711
[  128.179604][ T5971] tipc: New replicast peer: 255.255.255.255
[  128.185962][ T5971] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.220734][ T5976] overlayfs: failed to resolve '/
[  128.220734][ T5976] ': -2
[  128.646378][ T6002] /dev/rnullb0: Can't lookup blockdev
[  128.652596][ T6003] /dev/rnullb0: Can't lookup blockdev
[  129.009154][ T6039] 9pnet_fd: Insufficient options for proto=fd
[  129.131857][ T6052] fuse: Bad value for 'group_id'
[  129.136865][ T6052] fuse: Bad value for 'group_id'
[  129.150809][ T6049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1893'.
[  129.170606][ T6049] gretap0: entered promiscuous mode
[  129.188428][ T6049] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1893'.
[  129.214850][ T6049] 0��{X��: renamed from gretap0
[  129.241966][ T6049] 0��{X��: left promiscuous mode
[  129.268398][ T6049] 0��{X��: entered allmulticast mode
[  129.288803][ T6049] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  129.318400][  T330] tipc: Node number set to 2886997007
[  129.402233][ T6071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6071 comm=syz.0.1900
[  129.448600][ T6076] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1902'.
[  129.539480][ T6082] overlayfs: failed to clone lowerpath
[  129.565087][ T6086] 9p: Unknown access argument dW�.���#W>�ȕ-��p�RZZ@��ɝ�t�;�: -22
[  129.638480][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'.
[  129.676381][ T6093] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1909'.
[  129.846642][ T6096] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1910'.
[  129.896649][ T6104] overlayfs: failed to clone lowerpath
[  129.904046][ T6104] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  130.162889][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  130.162909][   T36] audit: type=1400 audit(1759276394.584:466): avc:  denied  { create } for  pid=6115 comm="syz.1.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  130.395627][ T6144] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1928'.
[  130.416256][ T6146] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  130.424474][ T6146] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  130.456372][ T6153] overlayfs: missing 'lowerdir'
[  130.797500][   T36] audit: type=1400 audit(1759276395.214:467): avc:  denied  { mount } for  pid=6182 comm="syz.1.1942" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  130.815401][ T6188] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[  130.856370][   T36] audit: type=1400 audit(1759276395.274:468): avc:  denied  { accept } for  pid=6192 comm="syz.1.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  130.925237][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'.
[  130.994612][   T36] audit: type=1400 audit(1759276395.414:469): avc:  denied  { bind } for  pid=6222 comm="syz.3.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  131.363339][   T36] audit: type=1400 audit(1759276395.784:470): avc:  denied  { create } for  pid=6256 comm="syz.3.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  131.384415][ T6261] tmpfs: Unknown parameter 'uid���r�t��ws�wU\V�����}Z�ϧ6srs�xx(�Դ�J��!���V�m*b��������J\�gKv)T�'��k|�^�
[  131.384415][ T6261] ���K���ô�+��>C
���᮸�p$��'
[  131.402774][   T36] audit: type=1400 audit(1759276395.814:471): avc:  denied  { getopt } for  pid=6256 comm="syz.3.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  131.668981][ T6276] overlay: Unknown parameter 'fowner'
[  131.691293][ T6274] /dev/rnullb0: Can't lookup blockdev
[  132.223583][ T6292] 9pnet_fd: Insufficient options for proto=fd
[  132.347333][ T6299] incfs: Backing dir is not set, filesystem can't be mounted.
[  132.355089][ T6299] incfs: mount failed -2
[  132.815670][ T6319] 9pnet_fd: Insufficient options for proto=fd
[  133.001760][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'.
[  133.436672][ T2787] tipc: Disabling bearer <udp:syz2>
[  133.444626][ T2787] tipc: Left network mode
[  133.455512][ T2787] veth1_macvtap: left promiscuous mode
[  134.374387][ T6410] ip6gre0: entered promiscuous mode
[  134.380238][ T6409] ip6gre0: left promiscuous mode
[  135.109076][ T6439] fuse: Bad value for 'fd'
[  135.159419][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'.
[  136.680424][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=6469 comm=syz.1.2028
[  138.768669][ T6510] /dev/rnullb0: Can't lookup blockdev
[  138.924346][ T6527] .N: renamed from veth0_to_bond (while UP)
[  139.991222][   T36] audit: type=1400 audit(1759276404.414:472): avc:  denied  { write } for  pid=329 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22583 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  140.032487][ T6537] fuse: Unknown parameter 'groA�up_��c00000000000000000000'
[  140.042382][ T6540] fuse: Unknown parameter 'gr����id'
[  140.122760][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'.
[  140.144231][ T6543] 9pnet_fd: Insufficient options for proto=fd
[  141.372120][ T6567] fuse: Unknown parameter '
'
[  141.391466][   T36] audit: type=1400 audit(1759276405.814:473): avc:  denied  { create } for  pid=6560 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  141.414379][   T36] audit: type=1400 audit(1759276405.814:474): avc:  denied  { setopt } for  pid=6560 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  142.702687][ T6575] netlink: 'syz.0.2061': attribute type 15 has an invalid length.
[  144.232887][ T6598] /dev/rnullb0: Can't lookup blockdev
[  144.274712][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'.
[  144.310748][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2074'.
[  144.335439][   T36] audit: type=1326 audit(1759276408.754:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.359373][   T36] audit: type=1326 audit(1759276408.754:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.388403][   T36] audit: type=1326 audit(1759276408.754:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.416949][   T36] audit: type=1326 audit(1759276408.754:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.443068][   T36] audit: type=1326 audit(1759276408.754:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.470049][   T36] audit: type=1326 audit(1759276408.754:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.494352][   T36] audit: type=1326 audit(1759276408.754:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863078eec9 code=0x7ffc0000
[  144.999441][   T36] kauditd_printk_skb: 476 callbacks suppressed
[  144.999456][   T36] audit: type=1326 audit(1759276409.424:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.030648][   T36] audit: type=1326 audit(1759276409.424:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.054773][   T36] audit: type=1326 audit(1759276409.424:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.078555][   T36] audit: type=1326 audit(1759276409.424:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.102295][   T36] audit: type=1326 audit(1759276409.424:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.125799][   T36] audit: type=1326 audit(1759276409.424:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.149647][   T36] audit: type=1326 audit(1759276409.424:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.173105][   T36] audit: type=1326 audit(1759276409.424:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.196628][   T36] audit: type=1326 audit(1759276409.434:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.220117][   T36] audit: type=1326 audit(1759276409.434:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86307c1785 code=0x7ffc0000
[  145.908830][ T6628] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.931189][ T6628] /dev/rnullb0: Can't lookup blockdev
[  149.377921][ T6671] cannot load conntrack support for proto=3
[  149.389548][ T6671] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.478844][ T6691] tipc: Can't bind to reserved service type 0
[  151.236151][ T6698] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2100'.
[  151.253155][ T6697] /dev/rnullb0: Can't lookup blockdev
[  151.307899][ T6708] bpf: Bad value for 'uid'
[  151.337664][ T6715] devtmpfs: Unknown parameter 'fuse'
[  151.396124][ T6715] overlayfs: failed to clone upperpath
[  153.256888][ T6729] netlink: 'syz.3.2112': attribute type 2 has an invalid length.
[  153.271332][ T6729] /dev/rnullb0: Can't lookup blockdev
[  153.317205][ T6738] SELinux:  Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped).
[  153.330425][   T36] kauditd_printk_skb: 63 callbacks suppressed
[  153.330445][   T36] audit: type=1400 audit(1759276417.754:1031): avc:  denied  { relabelto } for  pid=6735 comm="syz.1.2115" name="file0" dev="tmpfs" ino=2743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0"
[  153.379728][   T36] audit: type=1400 audit(1759276417.754:1032): avc:  denied  { associate } for  pid=6735 comm="syz.1.2115" name="file0" dev="tmpfs" ino=2743 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0"
[  155.350737][ T6751] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  155.396593][ T6752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6752 comm=syz.3.2119
[  155.486333][ T6759] tipc: Started in network mode
[  155.491520][ T6759] tipc: Node identity , cluster identity 4711
[  155.498056][ T6759] tipc: Failed to obtain node identity
[  155.504198][ T6759] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  155.578394][ T6767] netlink: 'syz.0.2124': attribute type 4 has an invalid length.
[  155.597824][ T6767] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2124'.
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=2 req=1996 state=3 status=67 (errno 9: Bad file descriptor)
[  157.787893][   T36] audit: type=1400 audit(1759276422.204:1033): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1765]" dev="pipefs" ino=1765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  158.169893][ T2789] tipc: Disabling bearer <udp:syz2>
[  158.175357][ T2789] tipc: Left network mode
[  158.182223][ T2789] veth1_macvtap: left promiscuous mode
[  158.187765][ T2789] veth0_vlan: left promiscuous mode