last executing test programs:

19.844042225s ago: executing program 1 (id=634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000000040))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x24, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x44}}, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

17.765668579s ago: executing program 1 (id=630):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10)
bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8)
bpf$LINK_DETACH(0xf, &(0x7f0000000080)=r6, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

16.976413224s ago: executing program 1 (id=633):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = userfaultfd(0x801)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, <r4=>0x0}, 0x2020)
open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50)
read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r6, r3, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x80086601, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@loopback}, 0x0, 0x7e}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x104}}, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0)

16.728714927s ago: executing program 1 (id=637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000600))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000740)={'syztnl2\x00', <r7=>0x0, 0x1, 0x301, 0x9, 0x0, {{0x17, 0x4, 0x0, 0xd, 0x5c, 0x67, 0x0, 0x80, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0x7, [{@multicast2, 0x7}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x10, "85cbef1838a5ad66436a18b41f91"}, @ssrr={0x89, 0x3, 0x49}, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0xa, [{@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101, 0x1}, {@private=0xa010100, 0x4}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x224, r4, 0x500, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1677}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r10}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0xc1)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="00020000", @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="e201330080000000ffffffffffff0802110000000b605fcc36fc0000000000000000000064002000000004060000000000000602000005040000006825030000002a01003c04010008012d1a000000000000"], 0x200}}, 0x0)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="185000000200000000fc9603d87d624000000000000000183300000200000004"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x28, &(0x7f0000000e00)=""/40, 0x61680, 0x2e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x2, 0xc, 0x5, 0x81}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001000)=[r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001040)=[{0x4, 0x1, 0x9, 0x4}, {0x5, 0x5, 0x3, 0x8}, {0x2, 0x3, 0x5, 0xa}, {0x4, 0x5, 0xa, 0x1}, {0x1, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x5, 0x5}, {0x4, 0x1, 0x7, 0x3}, {0x3, 0x5, 0x8, 0x3}, {0x0, 0x2, 0x10, 0x4}], 0x10, 0x7}, 0x90)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009cf60e3b34cd663650e33e2286953c58ccdd2f9e00ceb61d1ef45884d1ca9ea48ee4181b06d35b2453fa3d0b7727bf0555debe6181a294a041b3053eb6467d6d61c20bba7babc285bc73991ef6295492778e6842ae85c7487e97b6fd7bebff677d1cd000000000d86399fd07752ed6f6bba8fda5128acb8ec7f9854457c1479e57790b30136164dae1475cf0fe8fd617e698389ab63eb3cb73", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1}, &(0x7f0000000bc0), &(0x7f0000000c00)=r11}, 0x20)
pipe(&(0x7f0000000000)={<r14=>0xffffffffffffffff})
r15 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
splice(r14, 0x0, r15, &(0x7f0000000040), 0x8f5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r14}, 0x4)

16.48126048s ago: executing program 1 (id=638):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
syz_emit_ethernet(0x36, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72)
r4 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
r5 = dup2(r2, r3)
sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r6 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

16.266298137s ago: executing program 1 (id=641):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x4c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8}]}}]}, 0x4c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0100000000000000b7080000000400007b8af8ff000000e21619352ab5275e4c4a8ace7d0000000007020000f8ffffffb703000008000000b704e0ffffff00008500000001000000957c9fac41082dce15ec49602d04693b97cfc557c2582c109d06000000992a7d259aed3c8670c7782221b0591b813a3ff66320d666af627f96c67b99701794ba360de515aaa8e6c5b7c6418a4dff8f17c227649b0120258c9f118e9b4362c814a776fbadff576af6ad29226151ed3c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r6}, 0x10)
socket(0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
syz_emit_vhci(0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

13.262658845s ago: executing program 3 (id=653):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfbd2)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]})
dup(r0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x390, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r6, 0x25, 0x0, @void}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.962921155s ago: executing program 3 (id=656):
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x27fffff, 0x1ffc, 0xffffffffffffffff, 0xd59ef000)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x10, 0x0, @fd, 0x0, 0x0, 0x8, 0x3, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00))
r3 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000003c0)=0x2, 0x4)
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
writev(r3, &(0x7f0000002340)=[{&(0x7f0000001040)="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", 0xff8}], 0x1)
r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000340)={0xffffffff, 0x0, 0x3010, 0x0, 0xfffffffd, 0x79, 0x5ba})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x40040b0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000440)="f9ff1ce0f0b510063153329375a2f11092dbe891b60a11177094db5cc5394f0c7222e3cc4f7150a34433f9bf82968b2878040d6878662b52c269a30a13b15afdaf6ca53774fa44ec43d9c64fbd35f223caa4bf9bfff076a8df0033fbbab643ad01a8ddbcad85aa211065ff7754ae850d745bd0c7b622b65a798a307aade169c63ab2a3b2c845a8b819ca9b36548524dd6840a42677327515fd00213a74a2f62e58fdd8e96ff6e290d01f42727752dc1b5569e203294589586a080140374579e0be4cdb15c4e38b20b186c1bcc6963846fcccea3aba7fa4ebdf8d160a2bdb1cc68a68f2e50fef1ee81c8cf7b131372371")
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000", 0x4)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c)

11.02796177s ago: executing program 3 (id=660):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
getresuid(0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
setregid(r2, 0x0)
mq_open(&(0x7f0000005f00)='(\x12}[}]*\x00', 0x0, 0x42, &(0x7f0000005f40)={0x7, 0x1d, 0x9, 0x8})
openat$cgroup(0xffffffffffffffff, &(0x7f0000005f80)='syz1\x00', 0x200002, 0x0)
epoll_create1(0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
getpgid(0xffffffffffffffff)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x42742, 0x0)
fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f0000000240)='./file0\x00', r4, 0xee00)
syz_clone(0x0, 0x0, 0x0, &(0x7f0000006180), &(0x7f00000061c0), &(0x7f0000006200)="b6482f0c7a5dd8515b63e64fdd63fb913c990be1792b1cc0a173ac7d34")
statx(0xffffffffffffff9c, &(0x7f0000006240)='./file0\x00', 0x800, 0x200, &(0x7f0000006280))
r5 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o\xc6\xd18\xaaK\xa5\xd3\v)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQ\xca\xb4\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)S\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Ponfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x02\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xa7\xae\xd3\xef\xf7~\xb2\xb1\x01n\xc7&\xc5\x14L\xb7\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1u\x84 \x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B6R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05lwD3.H \x7f\xd2}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:s@\x00\x00\x00\x00\x00\x00\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xed)q\xc9I\xb7\xf6\xc5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\aC=V\x17P\xb8\xadI3q\xb0m\'\x1a\x87c\xcbk\x1f\x06|>\xe5\x8c\xe6`\xc3\xbb\xbey[mR\xa8\xeb\x9a\xfd\xa9\xd5\xeb/C\xd0\x06b\r\x9f\x10\xbc\xc7\xf3t\xdeKKW\xcc\x98*\xc9s\v[;\xba8a\x196\xfa\b(\xa7\xb1\xfc\x14\xf3@\xa0\x9b/\xbal,\xe7\x9eR#s\xe3\xf5b\xcbT\xcdf\xc4X\\\xc7\xb99\x1fO\xc8kW=\xaa\xc9Gz\x84\xa8\xce\xef\xc2\xdd7\xcajA\xeb\v\x81f\x1c\xf1D\xe1\xf1SH\xe3@\xca6\x88\f\x83\xeeBr\xcd\x9aFt\x15\x9d\xe1r\xcd\xe8\xc1\x8b\xd2\x99\x90\xc7\xa9\xb4\xabi\x94\xb2\xea\x8do\xd0\xce&z\x91\xbf\xda\x1e\x9b\xcc\"\x10{\x1b\xbe \xc9\xd6q\xbb\x04\x00\x00\x00\x03\x8dp;\xfd\x90\'\xefA\xebY1\xb9$o\xf1\xa4q\xfc\xbb\x12\xdd\xde\b\xec\xb3N\xf0\xbf\xb5z\xa6\x00\xd6\x93\xa1\xe5\xb3x\x95\x01=\"D\x81\xb9\xbc\x0f\xf1!\xcdm\x81\xe8\x97\f{\xe5\x10\xacs\xab;\x1c\x940}\x14\xd1\xed!R\xda[\x91\xf68(\xb8\x9dp`r\xc0\xda\xaf\xb6\xf9\vr\x91R\xff%;W\x1a\xf3F\x9a\x0f\x15tn\xc9x\x84\xa5\xe6\x89\x87\xb3\x98u\xc0ng\x1ba\xa7\x97\x00\x06\x8d\xad\v>\x85\"\xdcG\"5`\xe8/\xeb_\xee\xc4\xda\xbe;\x18\xf8\xfb\xbftA\xa8\xe5\xa1\xea\xd2s\f\xf3\x158\x03\xe1\x1dV\xbaSA\x7f\xbdI7\x83\xbfR\xc6,\xfaK\xf0l\x18D\x91\xe9x\x87\x98\xc4>Fe\xc1\xdd\x92s\x99F\xe0[\x16\xdb@\xa9\x03\xb8\x02\xa9j\xda\x1fh\x9a\xea\x82\xe7\xae<}\xf3\xce\xff\xf6\x1e_\v\x13-N\x97Q\xea8o4\\EX\n\f\x05\xfdU\xc2\b\xa1\x9bT\xd7\x04\"u\xee\xe0cu\xf2\xdc\xfc\n\x8eY\x15\xf2XSQ\xa3\xe8t\xb1^\xaf\xf0\x86\xe1\x04\x17/\xb4u\xe5\xd0\x18p\xb0:\xc2\xa2\";5\xa7\xad\xabX2\xec\xec\xe1\xac6\xf9\xa9\xa2m\x976\xd31\x811?\a\x00\x00\x00\x00\x00\x00\x00.I\x92S\x11\xd2\x00VEW\xd14\x8dF\xaf\x85\xb8\xba$\x9d\xb1n\xc31\x89\xd7f-\xc5\'v\xc1\xb8\x16\x96\xf7\xaf\xce\x1f\xd8\x8c\xda\x87\"\xddj|\x8c\xec\xee1\xc7\xfd\xfe~I\x9a\xca \xfb\xe5\xd8\xc1:\x1d\b\xaa\xc4\x9d&\x97\f{;4\x1c\xc3\xa9\xe8\xe0\xbc{(\xb8Bs\x88\xfd\xf0\xc5*\xf2\xdc\xfd)\xe671\x98\xa5\x00'/1257, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x11, r5, 0xce7ac000)
fallocate(r5, 0x0, 0x0, 0x8000001)
fcntl$setstatus(r5, 0x7, 0x20000000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, 0x0, 0x46}, 0x1}], 0x1, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000040))

9.595038914s ago: executing program 3 (id=665):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r0}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000540)='ext4_da_write_pages\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2800000002070102"], 0x28}}, 0x0)
recvmmsg$unix(r5, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '9p_protocol_dump\x00'}, {0x20, '\x00'}, {0x20, '['}], 0xa, "709e2bb40590968af4e692d8eb6d9ce874c8e8fc90d16668f0c0d5424a31c110e57946f9af55b12b349b64a967393496eecadf5937f25f5d2fd6fe432176683c17b98032d852acaee63cd70035fee7a8a1bd69c465b5365487ddf44196c3d7b17657d71867bee6b7163eb1dd461dbc831e3f6aabd3f32c8a181d92650bf596947d35c059dd23f316f8500d696b9ff92fd23eab7c3bf759c9058d97c4be1d4c9a688757bd3ac23e881a4ce25169747127948bba13741d5a6cd2a1a63f833d6cf8101da9a152fe05f440005ad0fbbe620cd2c54fbdff3aaa76f9d8611b14e5b27f6b266258b4ca1145e562131473be13bab495f7f33f35f694"}, 0x119)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="fc098589618748ab97cf6b58394d77965362fd3359efb6dde91a3d8b4bf367e0d0866cf69d521979a8b3fc9d1664de51961a68d649a8db89d134ff264e68d48d40730748988a1a36e98073dd5ab7d9756ea9759cae879034e0a2be94326e1351f3546ab9d3fbcbb78abfd66bbf20763637d862de2a56834b0cc3a564736cbdf93f1f3ebdc6aa57496a5034df", @ANYRESHEX=r9, @ANYBLOB=',\x00'])

9.445401122s ago: executing program 3 (id=666):
pipe2(0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='sync\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='sync\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
getpid()
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
getdents64(0xffffffffffffffff, &(0x7f0000002ec0)=""/4096, 0x1000)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='bfs\x00', 0x208000, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14}}], 0x18}, 0x0)
clock_settime(0x0, &(0x7f00000009c0)={0x0, r2+60000000})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x0, 0x1}]})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0xc0182101, 0x20000000)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = gettid()
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/246, 0xf6}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000500)=""/238, 0xee}], 0x1, 0x0)

5.273397416s ago: executing program 0 (id=678):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000340)=""/126, 0x7e, &(0x7f00000003c0)=""/212, 0x3, 0x2}}, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)

5.246958956s ago: executing program 2 (id=679):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8009000, 0x2, 0x1})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_SECURITY(r1, 0x12, 0x3, 0x0, 0x20000000)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0xebb, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000180)={0x3e, 0x278053d6, 0x81})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000860000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0xffff, 0x2, 0x4})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1})

4.614047783s ago: executing program 0 (id=680):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="de93", 0x2}], 0x1}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00002a3000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x68004040}, 0x800)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r6 = io_uring_setup(0x65b, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000019c0)={0x1, 0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001c00)={0xfffffffd, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00), 0x5f}], 0x0, 0x1}, 0x20)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socket$unix(0x1, 0x5, 0x0)
pread64(r7, &(0x7f0000000240)=""/164, 0x131, 0x48)

3.725423889s ago: executing program 0 (id=681):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='ext4_mb_release_group_pa\x00', r0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
pipe2$9p(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0xffffffffffffffe9)
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x7b, 0x2000077d, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0xc63b9e35)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
exit(0x0)
sched_setscheduler(r1, 0x3, 0x0)
socket$unix(0x1, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
writev(r4, 0x0, 0x0)

2.804600364s ago: executing program 2 (id=682):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002b00), 0x10, 0x7}, 0x90)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x401}, 0x1c}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2.062570524s ago: executing program 2 (id=683):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x10006}]}, 0x90)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff03, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000340), 0x4)
r2 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_setup(0x5de, &(0x7f0000000200), &(0x7f0000000940)=<r4=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff)
io_uring_enter(r2, 0x1d2d, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x6942b24c}}]}, 0x3c}}, 0x0)
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17)

1.7754281s ago: executing program 2 (id=684):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x54, 0x20048885}, 0x20084054)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
gettid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x2, 0x0, 'queue0\x00', 0xffffffff})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103}, 0x20)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000400)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@tclass={{0x14}}], 0x18}, 0x0)
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r4 = socket(0x848000000015, 0x805, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x400, 0x0, @loopback}, 0x1c)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9)

1.388369369s ago: executing program 2 (id=685):
syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x53)
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000440)=0x5, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001000)={0x2c, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x2c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x50, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FLAGS={0x8}]}, 0x50}}, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0x18}}, 0x1c)
r9 = accept(r4, 0x0, &(0x7f0000000140))
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000010101010000000000000000000000040c0018800800034000000000600004805c000280050001001f0000000c0003400000000000000001050001000600000005000200000000000c000340000000000000000805000200ff0000000c00034000000000000000070c000340000000000000000008000840000000010c0017000001000000000040040002800c001880080002400000000714001080080002407fffffff08000340000000030000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x4080)
connect$inet6(r4, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x5c}}, 0x0)

785.344744ms ago: executing program 0 (id=686):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
close(r0)
socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000180)={@desc={0x1, 0x0, @desc3}})
prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0xfbfffff8)
mmap$dsp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)={0x1c, 0x41, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="2aef9c30"}]}, 0x1c}}, 0x0)

784.974495ms ago: executing program 2 (id=687):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
lseek(r4, 0xae7d, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0))
openat$pmem0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020)
write$uinput_user_dev(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r7 = inotify_init1(0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, <r8=>0x0})
r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00')
lseek(r9, 0x600, 0x4)

461.382089ms ago: executing program 0 (id=688):
r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x80080)
syz_open_pts(r0, 0x100)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$usbfs(0x0, 0x0, 0x880)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20882)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000800))
r5 = dup(r4)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfb}, 0x10}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r5, &(0x7f00000020c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1}], "", ['\x00']}, 0x178)
write$evdev(r2, &(0x7f0000000000), 0x100000008)
ioctl$EVIOCGBITSW(r2, 0x80044501, &(0x7f0000000300)=""/243)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)

246.586417ms ago: executing program 3 (id=668):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
r2 = syz_open_dev$audion(&(0x7f0000000040), 0x8001, 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000100))
r3 = getpid()
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x68}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', <r7=>0x0, 0x80, 0x10, 0x8, 0x8, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xb3, 0x1, 0x2, [{@private=0xa010100, 0x5}, {@rand_addr=0x64010101, 0x2}, {@remote, 0x8}, {@private=0xa010101, 0x40}]}]}}}}})
r8 = dup2(0xffffffffffffffff, r0)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x92}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xdc, &(0x7f00000004c0)=""/220, 0x40f00, 0x3, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x6, 0x1}, 0x10, 0xa690, 0xffffffffffffffff, 0x8, &(0x7f0000000680)=[0x1, r8, r9, 0xffffffffffffffff, r10, 0x1], &(0x7f00000006c0)=[{0x80000001, 0x4, 0x7, 0x1}, {0x3, 0x1, 0xc, 0x7}, {0x3, 0x1, 0xb, 0x4}, {0x0, 0x1, 0xc, 0x1}, {0x4, 0x4, 0x2, 0x3}, {0x0, 0x4, 0xd, 0xc}, {0x3, 0x2, 0x6, 0xa}, {0x4, 0x5, 0xa, 0x1}], 0x10, 0x1111}, 0x90)

0s ago: executing program 0 (id=689):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x20004840)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48)
futex(&(0x7f0000000180)=0x2, 0x8c, 0x1, 0x0, &(0x7f0000000200), 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0xfc, 0xfc, 0x9, 0x0, 0x1, 0x3fffffe}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x75})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cb, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="05000000010000", 0x7)
lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="dc0000001e00010a000000000000000000020000c70032000115f9b158ff052bb707c9351ace3f524a8973d1b8bbd09e972cf4642c57a1d79fd15644925376124983201eb7c82bfc0444d3bfd4079ff226b54c86d98ec2fd6b8f97ecca2def8efca10d139b914742df7183ec41220d02946c16439157efe88e94e402f7e7596671f60d5231fb183e72ea4466df81b3b4c77fba3cfbff4d93d8f6787f16bdcafe37893fe59a756322f4fa746b028251295ed4348d96b6019629bda93a6dba736e27dba14fcf5290e706b7af2c5fcf49999e1e5594616d3504a288da001420a8f94e8026ef986f6cc05ba89f723e0390544f21982bddc52d33f34da5cc49166487b1cc7fb74a42877247f32fe7a003931cb6d107ed1bf45b1332a0533ef56ab05e6c53b45a2b89f99b665fe0f655"], 0xdc}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000140021010000000000000000021f0000", @ANYRES32, @ANYBLOB="08000200a70a0000"], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={0x0, 0x54}}, 0x8004)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="050009000400000008000200ac1414aa"], 0x50}, 0x1, 0x4c00000000000000}, 0x0)

kernel console output (not intermixed with test programs):

c 0000:0000:0000.0003: unknown main item tag 0x0
[  130.898150][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.901296][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.926555][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.937395][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.940562][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.943398][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.946772][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.950187][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.953318][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.962069][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.968068][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.972286][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.975863][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.979111][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.985478][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  130.988614][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.006508][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.012585][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.015753][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.020628][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.024320][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.028167][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.031413][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.034798][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.038432][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.042069][   T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.082196][   T25] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  132.095538][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[  132.128341][ T6399] block device autoloading is deprecated and will be removed.
[  132.588607][ T6271] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  132.774235][ T6271] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.784740][ T6271] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.793957][ T6271] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.819146][ T6271] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.822514][ T6271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.828643][ T6271] usb 6-1: Product: syz
[  132.830255][ T6271] usb 6-1: Manufacturer: syz
[  132.838092][ T6271] usb 6-1: SerialNumber: syz
[  132.865611][ T6271] usb 6-1: selecting invalid altsetting 1
[  133.127678][ T6271] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[  133.133593][ T6271] cdc_ncm 6-1:1.0: bind() failure
[  133.153001][ T6271] usb 6-1: USB disconnect, device number 5
[  133.541904][ T6414] dvmrp0: entered allmulticast mode
[  133.556221][ T6420] dvmrp0: left allmulticast mode
[  133.922548][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.234'.
[  134.321484][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.343729][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.439936][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.101232][   T40] kauditd_printk_skb: 18 callbacks suppressed
[  135.101247][   T40] audit: type=1400 audit(2000000068.280:545): avc:  denied  { setopt } for  pid=6450 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  135.122125][   T40] audit: type=1400 audit(2000000068.290:546): avc:  denied  { write } for  pid=4808 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.133313][   T40] audit: type=1400 audit(2000000068.290:547): avc:  denied  { remove_name } for  pid=4808 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.149433][   T40] audit: type=1400 audit(2000000068.290:548): avc:  denied  { rename } for  pid=4808 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.159600][   T40] audit: type=1400 audit(2000000068.290:549): avc:  denied  { add_name } for  pid=4808 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.170364][   T40] audit: type=1400 audit(2000000068.290:550): avc:  denied  { unlink } for  pid=4808 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.179421][   T40] audit: type=1400 audit(2000000068.290:551): avc:  denied  { create } for  pid=4808 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  135.188952][   T40] audit: type=1400 audit(2000000068.360:552): avc:  denied  { write } for  pid=6450 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  135.259780][   T40] audit: type=1400 audit(2000000068.440:553): avc:  denied  { bind } for  pid=6450 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  135.268556][   T40] audit: type=1400 audit(2000000068.440:554): avc:  denied  { write } for  pid=6450 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  135.330371][ T6458] netlink: 830 bytes leftover after parsing attributes in process `syz.3.243'.
[  135.334725][ T6458] bond_slave_0: entered promiscuous mode
[  135.337601][ T6458] bond_slave_1: entered promiscuous mode
[  135.621508][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  136.202041][ T5341] Bluetooth: hci2: command tx timeout
[  137.443271][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'.
[  138.612841][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  138.616265][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  138.876186][ T6482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6482 comm=syz.0.248
[  140.650065][   T40] kauditd_printk_skb: 2 callbacks suppressed
[  140.650079][   T40] audit: type=1400 audit(2000000073.830:557): avc:  denied  { read } for  pid=6499 comm="syz.3.251" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  140.802359][   T40] audit: type=1400 audit(2000000073.980:558): avc:  denied  { ioctl } for  pid=6499 comm="syz.3.251" path="socket:[13526]" dev="sockfs" ino=13526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  140.839792][ T6509] netlink: 'syz.3.251': attribute type 2 has an invalid length.
[  141.002514][   T40] audit: type=1400 audit(2000000074.190:559): avc:  denied  { read } for  pid=6499 comm="syz.3.251" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  141.024834][   T40] audit: type=1400 audit(2000000074.210:560): avc:  denied  { open } for  pid=6499 comm="syz.3.251" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  141.054336][   T40] audit: type=1400 audit(2000000074.230:561): avc:  denied  { read } for  pid=6510 comm="syz.1.254" name="usbmon0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  141.073780][   T40] audit: type=1400 audit(2000000074.230:562): avc:  denied  { open } for  pid=6510 comm="syz.1.254" path="/dev/usbmon0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  141.084797][   T40] audit: type=1400 audit(2000000074.250:563): avc:  denied  { mount } for  pid=6505 comm="syz.0.252" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  141.094483][   T40] audit: type=1400 audit(2000000074.270:564): avc:  denied  { ioctl } for  pid=6510 comm="syz.1.254" path="/dev/usbmon0" dev="devtmpfs" ino=723 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  141.106282][   T40] audit: type=1400 audit(2000000074.270:565): avc:  denied  { setattr } for  pid=6505 comm="syz.0.252" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  141.117752][   T40] audit: type=1400 audit(2000000074.280:566): avc:  denied  { create } for  pid=6510 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  141.713482][ T6524] netfs: Couldn't get user pages (rc=-14)
[  141.819888][ T6529] veth1_macvtap: left promiscuous mode
[  141.826223][ T6529] macsec0: entered promiscuous mode
[  141.839106][ T6529] macsec0: entered allmulticast mode
[  141.959676][ T6529] veth1_macvtap: entered promiscuous mode
[  141.962098][ T6529] veth1_macvtap: entered allmulticast mode
[  141.975961][ T6529] macsec0: left promiscuous mode
[  141.978346][ T6529] macsec0: left allmulticast mode
[  141.980469][ T6529] veth1_macvtap: left allmulticast mode
[  142.085667][ T6535] 9pnet_fd: Insufficient options for proto=fd
[  142.635692][ T6542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6542 comm=syz.2.262
[  143.934246][ T6549] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  144.921925][ T5341] Bluetooth: hci0: command 0x0c20 tx timeout
[  145.192621][ T6554] syz.3.264 (6554): drop_caches: 1
[  145.381149][ T5976] Bluetooth: hci4: Frame reassembly failed (-84)
[  145.390713][ T5976] Bluetooth: hci4: Frame reassembly failed (-84)
[  145.472592][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'.
[  145.741992][ T6271] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  145.953989][ T6271] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  145.958058][ T6271] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  145.963249][ T6271] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  145.968851][ T6271] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  145.973346][ T6271] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.979606][ T6271] usb 8-1: config 0 descriptor??
[  145.984891][ T6589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  146.237663][ T6601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  146.414407][   T40] kauditd_printk_skb: 39 callbacks suppressed
[  146.414496][   T40] audit: type=1400 audit(2000000079.600:606): avc:  denied  { create } for  pid=6596 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  146.444678][ T6271] usbhid 8-1:0.0: can't add hid device: -71
[  146.452611][ T6271] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  146.463605][ T6271] usb 8-1: USB disconnect, device number 8
[  146.620734][   T40] audit: type=1400 audit(2000000079.800:607): avc:  denied  { write } for  pid=6603 comm="syz.1.277" path="socket:[13697]" dev="sockfs" ino=13697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  146.650327][   T40] audit: type=1400 audit(2000000079.800:608): avc:  denied  { read } for  pid=6603 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  146.727713][   T40] audit: type=1400 audit(2000000079.910:609): avc:  denied  { ioctl } for  pid=6605 comm="syz.1.286" path="socket:[14685]" dev="sockfs" ino=14685 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  146.771900][   T40] audit: type=1400 audit(2000000079.950:610): avc:  denied  { getopt } for  pid=6606 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  147.072024][ T5397] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  147.252038][ T5397] usb 6-1: Using ep0 maxpacket: 16
[  147.257281][ T5397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[  147.264112][ T5397] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  147.268462][ T5397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.272109][ T5397] usb 6-1: Product: syz
[  147.274292][ T5397] usb 6-1: Manufacturer: syz
[  147.276500][ T5397] usb 6-1: SerialNumber: syz
[  147.281111][ T5397] usb 6-1: config 0 descriptor??
[  147.287499][ T5397] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  147.296797][ T5397] usb 6-1: Detected FT232R
[  147.402395][ T5341] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  147.402523][   T66] Bluetooth: hci4: command 0x1003 tx timeout
[  147.512316][ T5397] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  147.724423][ T5397] ftdi_sio 6-1:0.0: GPIO initialisation failed: -5
[  147.730207][ T5397] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  147.953476][  T832] usb 6-1: USB disconnect, device number 6
[  147.962714][  T832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  147.967225][  T832] ftdi_sio 6-1:0.0: device disconnected
[  148.262098][ T6619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6619 comm=syz.3.279
[  148.571999][ T5679] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  148.754189][ T5679] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  148.767061][ T5679] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  148.773430][ T5679] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  148.777462][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.787791][ T6618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  148.806793][ T5679] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  149.115752][ T6627] x_tables: duplicate underflow at hook 2
[  149.131476][ T5341] Bluetooth: hci2: SCO packet for unknown connection handle 1
[  149.167490][ T5679] usb 5-1: USB disconnect, device number 6
[  150.707751][ T6642] fuse: Bad value for 'rootmode'
[  150.758093][   T40] audit: type=1400 audit(2000000083.940:611): avc:  denied  { ioctl } for  pid=6641 comm="syz.3.285" path="/dev/ppp" dev="devtmpfs" ino=716 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  150.916294][   T40] audit: type=1400 audit(2000000084.090:612): avc:  denied  { setopt } for  pid=6643 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  151.106547][ T6649] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  151.320923][   T40] audit: type=1400 audit(2000000084.500:613): avc:  denied  { execute } for  pid=6652 comm="syz.1.290" dev="hugetlbfs" ino=12553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  151.343864][   T40] audit: type=1400 audit(2000000084.500:614): avc:  denied  { execute_no_trans } for  pid=6652 comm="syz.1.290" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=12553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  151.386780][   T40] audit: type=1400 audit(2000000084.570:615): avc:  denied  { create } for  pid=6654 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  151.466700][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  151.466716][   T40] audit: type=1400 audit(2000000084.640:617): avc:  denied  { unmount } for  pid=5334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  151.741257][ T6661] Bluetooth: MGMT ver 1.23
[  151.901101][ T6666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6666 comm=syz.0.293
[  152.516903][   T66] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  152.755396][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'.
[  153.010055][ T6676] fuse: Bad value for 'group_id'
[  153.012481][ T6676] fuse: Bad value for 'group_id'
[  153.164522][ T5341] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  153.514786][   T40] audit: type=1400 audit(2000000086.700:618): avc:  denied  { write } for  pid=6682 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  153.837252][   T40] audit: type=1400 audit(2000000087.020:619): avc:  denied  { connect } for  pid=6682 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  153.858118][   T40] audit: type=1400 audit(2000000087.040:620): avc:  denied  { write } for  pid=6682 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  153.972977][   T40] audit: type=1400 audit(2000000087.160:621): avc:  denied  { read } for  pid=6682 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  154.027839][   T40] audit: type=1326 audit(2000000087.210:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.2.296" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba9f799b9 code=0x0
[  154.362193][ T6704] ALSA: seq fatal error: cannot create timer (-22)
[  154.413923][ T6704] xt_connbytes: Forcing CT accounting to be enabled
[  154.422302][ T6704] --map-set only usable from mangle table
[  154.538629][ T6685] block nbd1: shutting down sockets
[  154.868666][ T6710] [U] 
[  154.897694][   T40] audit: type=1400 audit(2000000088.080:623): avc:  denied  { read } for  pid=6711 comm="syz.1.304" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  154.923056][   T40] audit: type=1400 audit(2000000088.080:624): avc:  denied  { open } for  pid=6711 comm="syz.1.304" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  154.935045][   T40] audit: type=1400 audit(2000000088.110:625): avc:  denied  { ioctl } for  pid=6711 comm="syz.1.304" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  155.052226][ T5341] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  155.726086][   T40] audit: type=1400 audit(2000000088.910:626): avc:  denied  { accept } for  pid=6721 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  155.744608][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.758144][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.706493][ T6731] netlink: 'syz.3.310': attribute type 3 has an invalid length.
[  156.733240][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  156.733255][   T40] audit: type=1400 audit(2000000089.910:631): avc:  denied  { mount } for  pid=6730 comm="syz.3.310" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  157.427367][   T40] audit: type=1400 audit(2000000090.610:632): avc:  denied  { ioctl } for  pid=6744 comm="syz.2.313" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  157.488335][   T40] audit: type=1400 audit(2000000090.660:633): avc:  denied  { accept } for  pid=6744 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  157.555897][    C3] vkms_vblank_simulate: vblank timer overrun
[  157.692655][ T6752] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  157.805479][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.314'.
[  157.863861][   T40] audit: type=1400 audit(2000000091.050:634): avc:  denied  { setopt } for  pid=6751 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  158.339238][   T40] audit: type=1400 audit(2000000091.520:635): avc:  denied  { create } for  pid=6755 comm="syz.3.316" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  158.356477][ T6762] syz.3.316: attempt to access beyond end of device
[  158.356477][ T6762] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  158.366240][   T40] audit: type=1400 audit(2000000091.540:636): avc:  denied  { mounton } for  pid=6755 comm="syz.3.316" path="/78/file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  158.386849][ T6762] SQUASHFS error: Failed to read block 0x0: -5
[  158.389466][ T6762] unable to read squashfs_super_block
[  158.516158][   T40] audit: type=1400 audit(2000000091.700:637): avc:  denied  { read write } for  pid=6763 comm="syz.2.318" name="vhost-net" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  158.527358][   T40] audit: type=1400 audit(2000000091.700:638): avc:  denied  { open } for  pid=6763 comm="syz.2.318" path="/dev/vhost-net" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  158.538312][   T40] audit: type=1400 audit(2000000091.700:639): avc:  denied  { ioctl } for  pid=6763 comm="syz.2.318" path="/dev/vhost-net" dev="devtmpfs" ino=1117 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  158.965793][   T40] audit: type=1400 audit(2000000092.140:640): avc:  denied  { create } for  pid=6770 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  159.270617][ T6775] bridge_slave_0: left allmulticast mode
[  159.275724][ T6775] bridge_slave_0: left promiscuous mode
[  159.278911][ T6777] IPVS: length: 174 != 1776
[  159.285916][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.334035][ T6775] bridge_slave_1: left allmulticast mode
[  159.334049][ T6775] bridge_slave_1: left promiscuous mode
[  159.334699][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.367999][ T6775] bond0: (slave bond_slave_0): Releasing backup interface
[  159.385264][ T6775] bond0: (slave bond_slave_1): Releasing backup interface
[  159.440972][ T6775] team0: Port device team_slave_0 removed
[  159.458752][ T6775] team0: Port device team_slave_1 removed
[  159.464061][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.468045][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.478101][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.481346][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.596124][ T6783] team0: Port device wg2 added
[  159.721261][ T6791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6791 comm=syz.2.323
[  160.200431][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'.
[  160.551991][   T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  160.707393][ T6806] mmap: syz.3.327 (6806) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  160.736166][   T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  160.740711][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.744945][   T25] usb 6-1: Product: syz
[  160.751736][   T25] usb 6-1: Manufacturer: syz
[  160.755509][   T25] usb 6-1: SerialNumber: syz
[  160.775907][   T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  160.909142][  T832] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  161.506825][ T6816] cdrom: dropping to single frame dma
[  161.965270][  T832] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  161.973578][  T832] ath9k_htc: Failed to initialize the device
[  162.019413][  T832] usb 6-1: ath9k_htc: USB layer deinitialized
[  162.336225][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  162.336240][   T40] audit: type=1326 audit(2000000095.520:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.2.331" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba9f799b9 code=0x0
[  162.471186][ T6823] syz.0.330: attempt to access beyond end of device
[  162.471186][ T6823] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  162.484283][ T6823] SQUASHFS error: Failed to read block 0x0: -5
[  162.512437][ T5679] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  162.559329][ T6823] unable to read squashfs_super_block
[  162.715398][ T5679] usb 8-1: Using ep0 maxpacket: 16
[  162.720096][ T5679] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.724141][ T5679] usb 8-1: config 0 has no interfaces?
[  162.726325][ T5679] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  162.730435][ T5679] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.740974][ T5679] usb 8-1: config 0 descriptor??
[  163.334976][   T40] audit: type=1400 audit(2000000096.520:650): avc:  denied  { append } for  pid=6824 comm="syz.3.332" name="fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  163.354612][   T40] audit: type=1400 audit(2000000096.530:651): avc:  denied  { map } for  pid=6824 comm="syz.3.332" path="/dev/fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  163.378991][   T40] audit: type=1400 audit(2000000096.530:652): avc:  denied  { write execute } for  pid=6824 comm="syz.3.332" path="/dev/fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  163.404633][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.413987][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.429297][   T40] audit: type=1400 audit(2000000096.610:653): avc:  denied  { sqpoll } for  pid=6824 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  163.910011][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[  164.193260][ T5397] usb 6-1: USB disconnect, device number 7
[  164.297930][ T6848] 9pnet_fd: Insufficient options for proto=fd
[  164.396225][   T40] audit: type=1400 audit(2000000097.570:654): avc:  denied  { read } for  pid=5046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  164.411708][   T40] audit: type=1400 audit(2000000097.590:655): avc:  denied  { search } for  pid=5046 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  164.436577][   T40] audit: type=1400 audit(2000000097.590:656): avc:  denied  { read } for  pid=5046 comm="dhcpcd" name="n72" dev="tmpfs" ino=3066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  164.446487][ T5341] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  164.466316][   T40] audit: type=1400 audit(2000000097.590:657): avc:  denied  { open } for  pid=5046 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=3066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  164.477163][   T40] audit: type=1400 audit(2000000097.590:658): avc:  denied  { getattr } for  pid=5046 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=3066 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  165.102844][ T6861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6861 comm=syz.1.338
[  165.348373][ T5679] usb 8-1: USB disconnect, device number 9
[  166.335040][ T5341] Bluetooth: hci0: unexpected event for opcode 0x0407
[  166.415057][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[  166.545157][ T6882] xt_bpf: check failed: parse error
[  166.811303][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'.
[  167.349063][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  167.349076][   T40] audit: type=1400 audit(2000000100.530:673): avc:  denied  { execute } for  pid=6899 comm="syz.3.345" path="/dev/audio1" dev="devtmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  167.798497][   T40] audit: type=1400 audit(2000000100.980:674): avc:  denied  { read } for  pid=6904 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  168.148279][   T40] audit: type=1400 audit(2000000101.320:675): avc:  denied  { mount } for  pid=6906 comm="syz.3.347" name="/" dev="gadgetfs" ino=15688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  168.164128][   T40] audit: type=1400 audit(2000000101.320:676): avc:  denied  { bind } for  pid=6906 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  168.179588][   T40] audit: type=1400 audit(2000000101.330:677): avc:  denied  { connect } for  pid=6906 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  169.399846][ T5341] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  170.963465][ T6943] bridge0: port 3(bond0) entered blocking state
[  170.966616][ T6943] bridge0: port 3(bond0) entered disabled state
[  170.972118][ T6943] bond0: entered allmulticast mode
[  170.974506][ T6943] bond_slave_0: entered allmulticast mode
[  170.976952][ T6943] bond_slave_1: entered allmulticast mode
[  170.981167][ T6943] bond0: entered promiscuous mode
[  170.983528][ T6943] bond_slave_0: entered promiscuous mode
[  170.986247][ T6943] bond_slave_1: entered promiscuous mode
[  170.990493][ T6943] bridge0: port 3(bond0) entered blocking state
[  170.993726][ T6943] bridge0: port 3(bond0) entered forwarding state
[  171.252903][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6947 comm=syz.2.356
[  173.481998][  T834] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  173.695013][  T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  173.700310][  T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  173.705761][   T40] audit: type=1400 audit(2000000106.890:678): avc:  denied  { mount } for  pid=6960 comm="syz.2.359" name="/" dev="overlay" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  173.735612][  T834] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.740728][  T834] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.766100][  T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.790877][  T834] usb 8-1: config 0 descriptor??
[  173.817474][ T6959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  174.051977][   T40] audit: type=1400 audit(2000000107.140:679): avc:  denied  { unmount } for  pid=5334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  174.060314][   T40] audit: type=1400 audit(2000000107.150:680): avc:  denied  { setopt } for  pid=6962 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  174.142259][   T40] audit: type=1400 audit(2000000107.150:681): avc:  denied  { listen } for  pid=6962 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  174.452928][  T834] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  174.457078][  T834] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  174.492255][  T834] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  174.637574][ T6972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.656321][ T6973] autofs: Bad value for 'fd'
[  174.658672][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'.
[  174.709122][   T40] audit: type=1400 audit(2000000107.890:682): avc:  denied  { write } for  pid=6970 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  174.711044][ T6972] bridge1: port 1(bridge_slave_1) entered blocking state
[  174.740811][ T6974] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  174.747484][ T6972] bridge1: port 1(bridge_slave_1) entered disabled state
[  174.751122][ T6972] bridge_slave_1: entered allmulticast mode
[  174.775198][ T6972] bridge_slave_1: entered promiscuous mode
[  174.778198][ T6974] loop0: detected capacity change from 0 to 7
[  174.792426][ T6959] bridge_slave_1: left allmulticast mode
[  174.793815][ T6974] Dev loop0: unable to read RDB block 7
[  174.801100][ T6959] bridge_slave_1: left promiscuous mode
[  174.803998][ T6974]  loop0: unable to read partition table
[  174.806455][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.808887][ T6974] loop0: partition table beyond EOD, truncated
[  174.815337][ T6974] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  174.815337][ T6974] 
) failed (rc=-5)
[  174.860978][ T6978] usb usb9: check_ctrlrecip: process 6978 (syz.1.363) requesting ep 01 but needs 81
[  174.866181][ T6978] usb usb9: usbfs: process 6978 (syz.1.363) did not claim interface 0 before use
[  174.946932][  T834] usb 8-1: USB disconnect, device number 10
[  175.165902][   T40] audit: type=1400 audit(2000000108.350:683): avc:  denied  { mounton } for  pid=6981 comm="syz.1.364" path="/93/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  175.501992][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  175.511619][ T6984] pimreg: entered allmulticast mode
[  175.526746][ T6984] pimreg: left allmulticast mode
[  175.564790][ T6990] binder: 6989:6990 ioctl 4018620d 0 returned -22
[  175.568743][ T6990] binder: 6989:6990 unknown command 0
[  175.570995][ T6990] binder: 6989:6990 ioctl c0306201 20000080 returned -22
[  175.675377][   T40] audit: type=1400 audit(2000000108.850:684): avc:  denied  { sys_module } for  pid=6992 comm="syz.3.368" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  175.691321][   T40] audit: type=1400 audit(2000000108.850:685): avc:  denied  { module_load } for  pid=6992 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  175.706507][   T40] audit: type=1400 audit(2000000108.890:686): avc:  denied  { bind } for  pid=6992 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  175.716025][   T10] usb 6-1: Using ep0 maxpacket: 16
[  175.719373][   T40] audit: type=1400 audit(2000000108.890:687): avc:  denied  { name_bind } for  pid=6992 comm="syz.3.368" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  175.754367][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  175.772453][   T10] usb 6-1: unable to read config index 0 descriptor/start: -71
[  175.776754][   T10] usb 6-1: can't read configurations, error -71
[  176.469176][ T7002] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  176.720070][ T5341] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  176.756263][ T5341] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  176.880867][ T7007] kvm: kvm [7006]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0x800
[  177.101939][   T59] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  177.299668][   T59] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  177.307887][   T59] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  177.312830][   T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  177.316884][   T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.336239][ T7009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  177.343090][   T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  177.830377][   T10] usb 7-1: USB disconnect, device number 7
[  178.601532][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'.
[  178.919091][ T5341] Bluetooth: Unexpected start frame (len 120)
[  179.162097][ T5341] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  179.167990][ T5341] Bluetooth: hci2: Injecting HCI hardware error event
[  179.173720][   T66] Bluetooth: hci2: hardware error 0x00
[  179.727566][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  179.727582][   T40] audit: type=1400 audit(2000000112.910:694): avc:  denied  { write } for  pid=7048 comm="syz.3.382" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.927963][ T7053] futex_wake_op: syz.1.383 tries to shift op by 144; fix this program
[  179.934914][ T7053] netlink: 'syz.1.383': attribute type 4 has an invalid length.
[  179.938265][ T7053] netlink: 17 bytes leftover after parsing attributes in process `syz.1.383'.
[  180.036745][   T40] audit: type=1400 audit(2000000113.220:695): avc:  denied  { write } for  pid=7052 comm="syz.1.383" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  180.383754][   T40] audit: type=1400 audit(2000000113.560:696): avc:  denied  { mount } for  pid=7056 comm="syz.1.384" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  180.482761][ T7058] virtio-fs: tag <(null)> not found
[  180.492552][   T40] audit: type=1400 audit(2000000113.670:697): avc:  denied  { ioctl } for  pid=7056 comm="syz.1.384" path="socket:[17493]" dev="sockfs" ino=17493 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  180.605973][ T7058] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  180.609197][ T7058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  180.653665][ T7058] vhci_hcd vhci_hcd.0: Device attached
[  180.847049][   T35] vhci_hcd: vhci_device speed not set
[  180.925118][   T35] usb 15-1: new full-speed USB device number 2 using vhci_hcd
[  181.033809][ T7059] vhci_hcd: connection reset by peer
[  181.052903][ T5976] vhci_hcd: stop threads
[  181.070505][ T5976] vhci_hcd: release socket
[  181.095198][ T5976] vhci_hcd: disconnect device
[  181.152653][   T40] audit: type=1400 audit(2000000114.340:698): avc:  denied  { ioctl } for  pid=7062 comm="syz.0.385" path="socket:[12823]" dev="sockfs" ino=12823 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  181.227391][   T40] audit: type=1326 audit(2000000114.410:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.0.385" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86bb799b9 code=0x0
[  181.241972][   T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  181.282673][ T7068] netlink: 92 bytes leftover after parsing attributes in process `syz.3.386'.
[  181.303722][   T40] audit: type=1400 audit(2000000114.490:700): avc:  denied  { mounton } for  pid=7064 comm="syz.3.386" path="/97/file0/bus" dev="ramfs" ino=17504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  181.310598][ T7068] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  181.315785][ T7068] overlayfs: failed to set xattr on upper
[  181.318275][ T7068] overlayfs: ...falling back to redirect_dir=nofollow.
[  181.321232][ T7068] overlayfs: ...falling back to index=off.
[  181.330456][ T7068] overlayfs: ...falling back to uuid=null.
[  181.642140][   T66] Bluetooth: hci1: command 0x0406 tx timeout
[  181.730717][   T40] audit: type=1400 audit(2000000114.910:701): avc:  denied  { unmount } for  pid=5342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  181.775947][   T40] audit: type=1400 audit(2000000114.960:702): avc:  denied  { append } for  pid=7071 comm="syz.1.387" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  182.461539][   T40] audit: type=1400 audit(2000000115.620:703): avc:  denied  { ioctl } for  pid=7082 comm="syz.3.392" path="socket:[15880]" dev="sockfs" ino=15880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  182.734335][ T5375] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  182.945478][ T5375] usb 8-1: Using ep0 maxpacket: 8
[  182.964595][ T5375] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.968927][ T5375] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.983345][ T5375] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.988861][ T5375] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.010785][ T5375] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  183.016248][ T5375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.276772][ T5375] usb 8-1: GET_CAPABILITIES returned 0
[  183.279170][ T5375] usbtmc 8-1:16.0: can't read capabilities
[  183.625566][ T5679] usb 8-1: USB disconnect, device number 11
[  184.053157][ T5341] Bluetooth: hci0: unexpected event for opcode 0x204e
[  184.086886][ T7108] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available
[  184.750868][ T7121] =======================================================
[  184.750868][ T7121] WARNING: The mand mount option has been deprecated and
[  184.750868][ T7121]          and is ignored by this kernel. Remove the mand
[  184.750868][ T7121]          option from the mount to silence this warning.
[  184.750868][ T7121] =======================================================
[  184.801932][ T5375] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  185.052281][ T7127] batadv0: mtu less than device minimum
[  185.054884][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  185.054896][   T40] audit: type=1400 audit(2000000118.240:710): avc:  denied  { ioctl } for  pid=7113 comm="syz.1.400" path="socket:[12918]" dev="sockfs" ino=12918 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  185.093879][ T5375] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  185.098440][ T5375] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  185.106467][ T5375] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  185.111043][ T5375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.120260][ T5375] usb 5-1: config 0 descriptor??
[  185.126734][ T5375] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  185.196954][ T7117] syz.3.401 (7117) used greatest stack depth: 20752 bytes left
[  185.305573][   T40] audit: type=1400 audit(2000000118.490:711): avc:  denied  { mount } for  pid=7132 comm="syz.1.403" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  185.314874][   T40] audit: type=1400 audit(2000000118.490:712): avc:  denied  { mounton } for  pid=7132 comm="syz.1.403" path="/105/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  185.324940][   T40] audit: type=1400 audit(2000000118.500:713): avc:  denied  { read } for  pid=7132 comm="syz.1.403" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  185.337057][   T40] audit: type=1400 audit(2000000118.500:714): avc:  denied  { open } for  pid=7132 comm="syz.1.403" path="/105/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  185.387217][ T7133] input: syz0 as /devices/virtual/input/input13
[  185.486008][   T40] audit: type=1400 audit(2000000118.670:715): avc:  denied  { ioctl } for  pid=7132 comm="syz.1.403" path="/105/file0" dev="overlay" ino=2 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  185.505703][   T40] audit: type=1400 audit(2000000118.670:716): avc:  denied  { read } for  pid=7132 comm="syz.1.403" name="mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  185.516207][   T40] audit: type=1400 audit(2000000118.670:717): avc:  denied  { open } for  pid=7132 comm="syz.1.403" path="/dev/input/mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  185.526941][   T40] audit: type=1400 audit(2000000118.690:718): avc:  denied  { attach_queue } for  pid=7129 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  185.748765][   T40] audit: type=1400 audit(2000000118.930:719): avc:  denied  { unmount } for  pid=5342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  185.920298][ T7141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.939080][ T7141] ipt_REJECT: ECHOREPLY no longer supported.
[  186.042068][   T35] vhci_hcd: vhci_device speed not set
[  186.999167][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'.
[  187.324429][  T831] usb 5-1: USB disconnect, device number 7
[  188.086842][ T7196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  188.090515][ T7196] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  188.094591][ T7196] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  188.981610][ T7221] serio: Serial port pts0
[  189.062008][ T7220] binder: 7218:7220 ioctl 4018620d 0 returned -22
[  189.077853][ T7220] PKCS7: Unknown OID: [4] 0.0
[  189.085861][ T7220] PKCS7: Only support pkcs7_signedData type
[  190.068757][ T7239] sch_fq: defrate 0 ignored.
[  190.418253][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  190.418268][   T40] audit: type=1400 audit(2000000123.600:727): avc:  denied  { connect } for  pid=7242 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  190.441182][ T7249] Cannot find add_set index 0 as target
[  190.835057][ T7254] batadv0: mtu less than device minimum
[  191.126401][ T7257] ALSA: seq fatal error: cannot create timer (-22)
[  191.295043][   T40] audit: type=1400 audit(2000000124.460:728): avc:  denied  { create } for  pid=7258 comm="syz.3.426" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  192.138270][   T40] audit: type=1400 audit(2000000125.320:729): avc:  denied  { unlink } for  pid=5344 comm="syz-executor" name="file0" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  192.240336][   T40] audit: type=1400 audit(2000000125.420:730): avc:  denied  { read } for  pid=7262 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.852356][  T831] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  193.119865][  T831] usb 8-1: descriptor type invalid, skip
[  193.124726][  T831] usb 8-1: descriptor type invalid, skip
[  193.131564][  T831] usb 8-1: descriptor type invalid, skip
[  193.137025][  T831] usb 8-1: descriptor type invalid, skip
[  193.139254][  T831] usb 8-1: descriptor type invalid, skip
[  193.222087][  T831] usb 8-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32
[  193.226590][  T831] usb 8-1: config 1 interface 0 has no altsetting 0
[  193.266476][  T831] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  193.270868][  T831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.278273][  T831] usb 8-1: Product: ࠌ
[  193.280234][  T831] usb 8-1: Manufacturer: ȗ⩪㞄밽屠莅�齟୾ᗞ洫뜠ඓ�ǽ馊䚭讇�㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك�褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ�
[  193.296741][  T831] usb 8-1: SerialNumber: ц
[  193.302542][ T7276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  193.799558][  T831] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8
[  193.820371][  T831] usb 8-1: USB disconnect, device number 12
[  193.890546][  T831] usblp0: removed
[  194.480419][ T7301] mkiss: ax0: crc mode is auto.
[  194.631563][ T7305] netlink: 211388 bytes leftover after parsing attributes in process `syz.3.434'.
[  194.820386][   T40] audit: type=1404 audit(2000000128.000:731): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
May 18 03:35:28 syzkaller kern.notice kernel: [  194.820386][   T40] audit: type[  194.842604][   T40] audit: type=1400 audit(2000000128.020:732): avc:  denied  { read } for  pid=4808 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
=1404 audit(2000000128.000:731): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
May 18 03:35:28 syzkaller kern.notice kernel: [  194.842604][   T40] audit: type=1400 audit(2000000128.020:732):[  194.865659][   T40] audit: type=1400 audit(2000000128.040:733): avc:  denied  { read } for  pid=4808 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
 avc:  denied  { read } for  pid=4808 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=sys[  194.879702][   T40] audit: type=1400 audit(2000000128.060:734): avc:  denied  { read } for  pid=4808 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
tem_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
May 18 03:35:28 syzkaller kern.notice kernel: [  194.865659][   T40] audit: type=1400 audit(2000000128.040:733): avc:  denied  { read } for  pid=4808 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l
[  194.906933][   T40] audit: type=1404 audit(2000000128.080:735): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  194.932813][   T40] audit: type=1400 audit(2000000128.110:736): avc:  denied  { read } for  pid=4808 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  195.153847][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'.
[  195.558388][   T40] kauditd_printk_skb: 26 callbacks suppressed
[  195.558403][   T40] audit: type=1400 audit(2000000128.740:763): avc:  denied  { create } for  pid=7315 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  195.736491][   T40] audit: type=1400 audit(2000000128.920:764): avc:  denied  { read write } for  pid=7319 comm="syz.0.440" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.774804][   T40] audit: type=1400 audit(2000000128.930:765): avc:  denied  { open } for  pid=7319 comm="syz.0.440" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  195.912185][   T40] audit: type=1400 audit(2000000128.980:766): avc:  denied  { create } for  pid=7315 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  195.924011][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'.
[  195.933083][   T40] audit: type=1400 audit(2000000128.980:767): avc:  denied  { bind } for  pid=7315 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  196.040322][   T40] audit: type=1400 audit(2000000129.060:768): avc:  denied  { write } for  pid=7319 comm="syz.0.440" name="fib_trie" dev="proc" ino=4026533038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  196.095379][   T40] audit: type=1400 audit(2000000129.090:769): avc:  denied  { setopt } for  pid=7315 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  196.105743][   T40] audit: type=1400 audit(2000000129.110:770): avc:  denied  { write } for  pid=7315 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  196.141724][   T40] audit: type=1400 audit(2000000129.310:771): avc:  denied  { mounton } for  pid=7319 comm="syz.0.440" path="/114/file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  196.188247][ T7322] gfs2: not a GFS2 filesystem
[  196.833055][   T40] audit: type=1400 audit(2000000130.020:772): avc:  denied  { read write } for  pid=7330 comm="syz.1.442" name="renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  196.835836][ T7331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'.
[  197.239471][ T7338] netlink: 'syz.3.444': attribute type 39 has an invalid length.
[  197.244435][ T7338] netlink: 'syz.3.444': attribute type 4 has an invalid length.
[  197.248968][ T7338] netlink: 152 bytes leftover after parsing attributes in process `syz.3.444'.
[  197.254091][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.431593][ T7338] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  197.861324][   T35] IPVS: starting estimator thread 0...
[  197.877940][ T7349] hpfs: bad mount options.
[  197.973512][ T7350] IPVS: using max 33 ests per chain, 79200 per kthread
[  198.260887][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'.
[  198.272868][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'.
[  198.298637][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'.
[  198.306364][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'.
[  198.642260][ T7362] netlink: 'syz.0.449': attribute type 3 has an invalid length.
[  199.852008][ T5341] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  200.063012][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  200.066299][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  200.624521][   T40] kauditd_printk_skb: 126 callbacks suppressed
[  200.624536][   T40] audit: type=1400 audit(2000000133.810:899): avc:  denied  { name_bind } for  pid=7392 comm="syz.0.457" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  200.637703][   T40] audit: type=1400 audit(2000000133.810:900): avc:  denied  { node_bind } for  pid=7392 comm="syz.0.457" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  200.650103][   T40] audit: type=1400 audit(2000000133.830:901): avc:  denied  { listen } for  pid=7392 comm="syz.0.457" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  200.662369][   T40] audit: type=1400 audit(2000000133.840:902): avc:  denied  { accept } for  pid=7392 comm="syz.0.457" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  200.703913][   T40] audit: type=1400 audit(2000000133.890:903): avc:  denied  { connect } for  pid=7392 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  200.792922][   T40] audit: type=1400 audit(2000000133.890:904): avc:  denied  { name_connect } for  pid=7392 comm="syz.0.457" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  200.874666][   T40] audit: type=1400 audit(2000000134.050:905): avc:  denied  { unmount } for  pid=5334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  201.040489][   T40] audit: type=1400 audit(2000000134.220:906): avc:  denied  { write } for  pid=7397 comm="syz.1.458" name="virtual_nci" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  201.087357][   T40] audit: type=1400 audit(2000000134.270:907): avc:  denied  { ioctl } for  pid=7397 comm="syz.1.458" path="/dev/virtual_nci" dev="devtmpfs" ino=695 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  201.101197][   T40] audit: type=1400 audit(2000000134.280:908): avc:  denied  { bind } for  pid=7397 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  201.204724][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x205
[  201.542063][ T7415] trusted_key: encrypted_key: insufficient parameters specified
[  201.576933][ T7401] sp0: Synchronizing with TNC
[  202.174585][ T7431] netlink: 'syz.1.462': attribute type 7 has an invalid length.
[  202.178947][ T7431] netlink: 'syz.1.462': attribute type 39 has an invalid length.
[  202.222291][ T7431] bridge2: port 1(gretap1) entered blocking state
[  202.225306][ T7431] bridge2: port 1(gretap1) entered disabled state
[  202.228349][ T7431] gretap1: entered allmulticast mode
[  202.231990][ T7431] gretap1: entered promiscuous mode
[  202.249183][ T7431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7431 comm=syz.1.462
[  202.256841][ T7431] netlink: 'syz.1.462': attribute type 7 has an invalid length.
[  202.265512][ T7431] netlink: 'syz.1.462': attribute type 39 has an invalid length.
[  204.429304][ T5978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.529172][ T5978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.619469][ T5978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.726548][ T5978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.913314][   T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  204.920977][   T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  204.928631][   T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  204.947703][   T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  204.951643][ T5978] bond0: left allmulticast mode
[  204.956220][ T5978] bond_slave_0: left allmulticast mode
[  204.959019][   T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  204.959100][ T5978] bond_slave_1: left allmulticast mode
[  204.965222][   T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.968206][ T5978] bond0: left promiscuous mode
[  204.971426][ T5978] bond_slave_0: left promiscuous mode
[  204.975374][ T5978] bond_slave_1: left promiscuous mode
[  204.980237][ T5978] bridge0: port 3(bond0) entered disabled state
[  205.012923][ T5978] bridge_slave_1: left allmulticast mode
[  205.015416][ T5978] bridge_slave_1: left promiscuous mode
[  205.018119][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.031925][ T5978] bridge_slave_0: left allmulticast mode
[  205.034316][ T5978] bridge_slave_0: left promiscuous mode
[  205.036757][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.087781][ T7475] SELinux:  Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped).
[  205.143964][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'.
[  205.148899][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'.
[  205.226826][ T5341] block nbd0: Receive control failed (result -107)
[  205.543712][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.554268][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.566321][ T5978] bond0 (unregistering): Released all slaves
[  205.915343][ T7469] chnl_net:caif_netlink_parms(): no params data found
[  206.020956][   T40] kauditd_printk_skb: 49 callbacks suppressed
[  206.020973][   T40] audit: type=1400 audit(2000000139.200:958): avc:  denied  { rmdir } for  pid=5335 comm="syz-executor" name="control" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:newrole_exec_t:s0"
[  206.125181][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.135920][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.138808][ T7469] bridge_slave_0: entered allmulticast mode
[  206.141855][ T7469] bridge_slave_0: entered promiscuous mode
[  206.147011][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.150027][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.153076][ T7469] bridge_slave_1: entered allmulticast mode
[  206.156638][ T7469] bridge_slave_1: entered promiscuous mode
[  206.184827][ T5978] hsr_slave_0: left promiscuous mode
[  206.188544][ T5978] hsr_slave_1: left promiscuous mode
[  206.192310][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.195851][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.200544][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.204180][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.256938][ T5978] veth0_macvtap: left promiscuous mode
[  206.260196][ T5978] veth1_vlan: left promiscuous mode
[  206.263841][ T5978] veth0_vlan: left promiscuous mode
[  207.004241][ T5341] Bluetooth: hci0: command tx timeout
[  207.160941][ T5978] team0 (unregistering): Port device team_slave_1 removed
[  207.267434][ T5978] team0 (unregistering): Port device team_slave_0 removed
[  208.034305][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.042240][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.105190][ T7469] team0: Port device team_slave_0 added
[  208.130664][ T7469] team0: Port device team_slave_1 added
[  208.203489][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.207082][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.226309][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.231607][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.239117][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.252100][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.341723][ T7469] hsr_slave_0: entered promiscuous mode
[  208.347283][ T7469] hsr_slave_1: entered promiscuous mode
[  208.352154][ T7469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.355501][ T7469] Cannot create hsr debugfs directory
[  208.482455][ T5978] IPVS: stop unused estimator thread 0...
[  209.042755][ T7469] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  209.047715][ T7469] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  209.064588][ T7469] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  209.071292][ T7469] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  209.082222][ T5341] Bluetooth: hci0: command tx timeout
[  209.179750][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.201430][ T7469] 8021q: adding VLAN 0 to HW filter on device team0
[  209.224008][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.227301][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.232497][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.235688][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.310969][   T40] audit: type=1400 audit(2000000142.490:959): avc:  denied  { sys_module } for  pid=7469 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  209.454598][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.521462][ T7469] veth0_vlan: entered promiscuous mode
[  209.530841][ T7469] veth1_vlan: entered promiscuous mode
[  209.561567][ T7469] veth0_macvtap: entered promiscuous mode
[  209.569499][ T7469] veth1_macvtap: entered promiscuous mode
[  209.586780][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.591082][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.595615][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.600177][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.606316][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.616378][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.624512][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.629608][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.638521][ T7469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.642530][ T7469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.645829][ T7469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.649413][ T7469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.723820][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.727311][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.778651][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.782236][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.804899][   T40] audit: type=1400 audit(2000000142.980:960): avc:  denied  { mounton } for  pid=7469 comm="syz-executor" path="/syzkaller.5KXb80/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  209.818778][   T40] audit: type=1400 audit(2000000142.980:961): avc:  denied  { mount } for  pid=7469 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  209.838330][   T40] audit: type=1400 audit(2000000142.990:962): avc:  denied  { unmount } for  pid=7469 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  209.847216][   T40] audit: type=1400 audit(2000000143.010:963): avc:  denied  { mounton } for  pid=7469 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  209.860093][   T40] audit: type=1400 audit(2000000143.010:964): avc:  denied  { mount } for  pid=7469 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  209.896335][   T40] audit: type=1400 audit(2000000143.080:965): avc:  denied  { read } for  pid=7550 comm="syz.2.470" name="rtc0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  209.924508][   T40] audit: type=1400 audit(2000000143.080:966): avc:  denied  { open } for  pid=7550 comm="syz.2.470" path="/dev/rtc0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  209.944163][   T40] audit: type=1400 audit(2000000143.080:967): avc:  denied  { ioctl } for  pid=7550 comm="syz.2.470" path="/dev/rtc0" dev="devtmpfs" ino=867 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  210.065512][ T7565] trusted_key: encrypted_key: insufficient parameters specified
[  210.147901][ T7560] Bluetooth: MGMT ver 1.23
[  210.152058][ T5679] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  210.331893][ T5679] usb 6-1: Using ep0 maxpacket: 32
[  210.336295][ T5679] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  210.345088][ T5679] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  210.349044][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  210.353164][ T5679] usb 6-1: Product: syz
[  210.355104][ T5679] usb 6-1: Manufacturer: syz
[  210.358615][ T5679] usb 6-1: SerialNumber: syz
[  210.385994][ T5679] usb 6-1: config 0 descriptor??
[  210.621556][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.630350][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.638945][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.647306][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.662212][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.669985][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.115656][   T10] usb 6-1: USB disconnect, device number 10
[  211.162486][ T5341] Bluetooth: hci0: command tx timeout
[  211.827136][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  211.827152][   T40] audit: type=1400 audit(2000000145.010:973): avc:  denied  { create } for  pid=7577 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  211.856550][ T7570] syz.3.475 (7570): drop_caches: 2
[  212.058715][ T7572] syz.3.475 (7572): drop_caches: 2
[  212.252119][   T40] audit: type=1400 audit(2000000145.430:974): avc:  denied  { ioctl } for  pid=7583 comm="syz.3.479" path="socket:[18360]" dev="sockfs" ino=18360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  212.265332][   T40] audit: type=1400 audit(2000000145.430:975): avc:  denied  { create } for  pid=7583 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  212.402285][   T40] audit: type=1400 audit(2000000145.590:976): avc:  denied  { append } for  pid=7581 comm="syz.1.478" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  212.422609][ T7582] binder: 7581:7582 ioctl c018620c 200002c0 returned -1
[  212.423874][   T40] audit: type=1400 audit(2000000145.610:977): avc:  denied  { ioctl } for  pid=7581 comm="syz.1.478" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  213.193947][   T40] audit: type=1400 audit(2000000146.380:978): avc:  denied  { shutdown } for  pid=7588 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  213.208381][   T40] audit: type=1400 audit(2000000146.380:979): avc:  denied  { getopt } for  pid=7588 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  213.246679][ T5341] Bluetooth: hci0: command tx timeout
[  213.257523][   T40] audit: type=1400 audit(2000000146.380:980): avc:  denied  { name_connect } for  pid=7588 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  213.270826][ T7596] CIFS mount error: No usable UNC path provided in device string!
[  213.270826][ T7596] 
[  213.276764][ T5341] Bluetooth: hci0: unknown advertising packet type: 0xbc
[  213.276843][ T5341] Bluetooth: hci0: unknown advertising packet type: 0xf3
[  213.280973][ T5341] Bluetooth: hci0: unknown advertising packet type: 0xad
[  213.290731][ T5341] Bluetooth: hci0: unknown advertising packet type: 0xb5
[  213.291102][   T40] audit: type=1400 audit(2000000146.380:981): avc:  denied  { read write } for  pid=7597 comm="syz.2.485" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  213.294449][ T5341] Bluetooth: hci0: unknown advertising packet type: 0x4e
[  213.299035][   T40] audit: type=1400 audit(2000000146.380:982): avc:  denied  { open } for  pid=7597 comm="syz.2.485" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  213.323326][ T7596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  214.358328][ T7621] ptrace attach of "/syz-executor exec"[5342] was attempted by "/syz-executor exec"[7621]
[  216.683008][   T35] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  216.871919][   T35] usb 6-1: Using ep0 maxpacket: 32
[  216.879415][   T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  216.886604][   T35] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.906741][   T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  216.911925][   T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.927614][   T35] usb 6-1: Product: syz
[  216.928943][   T35] usb 6-1: Manufacturer: syz
[  216.930474][   T35] usb 6-1: SerialNumber: syz
[  216.986820][ T7648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  217.316775][   T35] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  217.353493][   T35] usb 6-1: USB disconnect, device number 11
[  217.385312][   T35] usblp0: removed
[  217.961755][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  217.965015][   T40] audit: type=1400 audit(2000000151.140:987): avc:  denied  { unmount } for  pid=7649 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  218.089652][   T40] audit: type=1400 audit(2000000151.270:988): avc:  denied  { create } for  pid=7653 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  218.417711][   T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  218.561732][   T40] audit: type=1400 audit(2000000151.740:989): avc:  denied  { ioctl } for  pid=7661 comm="syz.3.502" path="socket:[18414]" dev="sockfs" ino=18414 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  218.587968][   T40] audit: type=1400 audit(2000000151.770:990): avc:  denied  { connect } for  pid=7661 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  218.668545][ T7660] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0'
[  218.687909][ T7660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.500'.
[  218.692594][ T7660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'.
[  218.943373][   T40] audit: type=1400 audit(2000000152.120:991): avc:  denied  { read } for  pid=7661 comm="syz.3.502" path="socket:[18419]" dev="sockfs" ino=18419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  219.081956][   T25] usb 7-1: Using ep0 maxpacket: 8
[  219.122788][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  219.127886][   T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  219.132456][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.138340][   T25] usb 7-1: config 0 descriptor??
[  219.429727][   T25] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  219.637024][   T25] usb 7-1: USB disconnect, device number 8
[  219.642077][   T25] iowarrior 7-1:0.0: I/O-Warror #0 now disconnected
[  219.661967][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  219.841928][   T10] usb 5-1: Using ep0 maxpacket: 16
[  219.855515][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.862453][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.870068][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  219.883274][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  219.908201][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.915671][   T10] usb 5-1: config 0 descriptor??
[  220.463384][   T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  220.481276][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input15
[  220.521280][   T40] audit: type=1400 audit(2000000153.700:992): avc:  denied  { read } for  pid=4811 comm="acpid" name="event4" dev="devtmpfs" ino=2597 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  220.695727][   T40] audit: type=1400 audit(2000000153.700:993): avc:  denied  { open } for  pid=4811 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2597 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  220.740803][   T40] audit: type=1400 audit(2000000153.780:994): avc:  denied  { write } for  pid=7684 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  220.759709][   T10] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  220.794010][   T40] audit: type=1400 audit(2000000153.820:995): avc:  denied  { ioctl } for  pid=4811 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2597 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  220.856021][   T40] audit: type=1400 audit(2000000153.850:996): avc:  denied  { ioctl } for  pid=7675 comm="syz.0.504" path="/dev/uinput" dev="devtmpfs" ino=866 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  220.930660][   T10] usb 5-1: USB disconnect, device number 8
[  223.330488][ T7725] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  223.348546][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  223.348562][   T40] audit: type=1400 audit(2000000156.530:1003): avc:  denied  { name_bind } for  pid=7724 comm="syz.0.517" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  223.415485][   T40] audit: type=1400 audit(2000000156.600:1004): avc:  denied  { accept } for  pid=7728 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  223.496669][ T7723] syz.3.516: attempt to access beyond end of device
[  223.496669][ T7723] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0
[  223.512015][ T7723] hfsplus: unable to find HFS+ superblock
[  223.588835][   T40] audit: type=1400 audit(2000000156.620:1005): avc:  denied  { create } for  pid=7728 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  223.600935][   T40] audit: type=1400 audit(2000000156.620:1006): avc:  denied  { bind } for  pid=7728 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  223.621696][   T40] audit: type=1400 audit(2000000156.620:1007): avc:  denied  { accept } for  pid=7722 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  223.651363][   T40] audit: type=1400 audit(2000000156.790:1008): avc:  denied  { write } for  pid=7728 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  224.055279][   T40] audit: type=1400 audit(2000000157.240:1009): avc:  denied  { create } for  pid=7737 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  224.145342][   T40] audit: type=1400 audit(2000000157.330:1010): avc:  denied  { mounton } for  pid=7734 comm="syz.3.521" path="/proc/493/task" dev="proc" ino=21537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  224.282824][   T40] audit: type=1400 audit(2000000157.470:1011): avc:  denied  { connect } for  pid=7737 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  224.801911][ T5397] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  224.916971][   T40] audit: type=1326 audit(2000000158.100:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.3.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ab1799b9 code=0x7ffc0000
[  225.004256][ T5397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.009402][ T5397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.014760][ T5397] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  225.019600][ T5397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.039212][ T5397] usb 6-1: config 0 descriptor??
[  225.483188][ T5397] usbhid 6-1:0.0: can't add hid device: -71
[  225.486886][ T5397] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  225.495250][ T5397] usb 6-1: USB disconnect, device number 12
[  225.936415][ T7768] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  225.939769][ T7768] netlink: 224 bytes leftover after parsing attributes in process `syz.0.527'.
[  226.203162][ T7778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.529'.
[  226.974540][ T7784] autofs: Unknown parameter './file1'
[  227.071525][ T7785] netlink: 'syz.3.531': attribute type 8 has an invalid length.
[  227.593869][ T7792] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  228.682028][   T40] kauditd_printk_skb: 76 callbacks suppressed
[  228.682046][   T40] audit: type=1400 audit(2000000161.860:1089): avc:  denied  { append } for  pid=7799 comm="syz.3.535" name="nbd3" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  228.685491][ T7804] ptrace attach of "/syz-executor exec"[5344] was attempted by "/syz-executor exec"[7804]
[  229.120960][ T7807] can0: slcan on ptm0.
[  229.232256][   T40] audit: type=1400 audit(2000000162.400:1090): avc:  denied  { unlink } for  pid=7801 comm="syz.0.536" name="#5" dev="tmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  229.242747][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  229.252838][   T40] audit: type=1400 audit(2000000162.400:1091): avc:  denied  { mount } for  pid=7801 comm="syz.0.536" name="/" dev="overlay" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  229.433060][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.439571][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3
[  229.445035][   T10] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  229.448889][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.449588][ T7801] can0 (unregistered): slcan off ptm0.
[  229.464208][   T10] usb 7-1: config 0 descriptor??
[  229.700147][ T7822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.749196][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'.
[  230.127053][   T40] audit: type=1400 audit(2000000163.310:1092): avc:  denied  { write } for  pid=7834 comm="syz.1.541" name="fdinfo" dev="proc" ino=19719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  230.138443][   T40] audit: type=1400 audit(2000000163.310:1093): avc:  denied  { add_name } for  pid=7834 comm="syz.1.541" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  230.138675][   T40] audit: type=1400 audit(2000000163.310:1094): avc:  denied  { create } for  pid=7834 comm="syz.1.541" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  230.153579][ T7835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'.
[  230.185849][   T40] audit: type=1400 audit(2000000163.310:1095): avc:  denied  { associate } for  pid=7834 comm="syz.1.541" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  230.225375][   T10] usb 7-1: Direct firmware load for ar3k/ramps_0xd2b9879d_0.dfu failed with error -2
[  230.231497][   T40] audit: type=1400 audit(2000000163.410:1096): avc:  denied  { bind } for  pid=7834 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  230.309521][   T10] usb 7-1: Falling back to sysfs fallback for: ar3k/ramps_0xd2b9879d_0.dfu
[  230.413001][   T40] audit: type=1400 audit(2000000163.600:1097): avc:  denied  { read } for  pid=7834 comm="syz.1.541" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  230.428934][   T40] audit: type=1400 audit(2000000163.600:1098): avc:  denied  { open } for  pid=7834 comm="syz.1.541" path="/dev/sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  230.469626][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'.
[  230.473949][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'.
[  231.251370][ T7855] binder: 7851:7855 ioctl c0306201 0 returned -14
[  233.314010][ T7876] overlayfs: missing 'lowerdir'
[  234.477858][ T5404] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  234.682400][ T5404] usb 6-1: Using ep0 maxpacket: 8
[  234.696887][ T5404] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab
[  234.701586][ T5404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.712271][ T5404] usb 6-1: Product: syz
[  234.715863][ T5404] usb 6-1: Manufacturer: syz
[  234.717971][ T5404] usb 6-1: SerialNumber: syz
[  234.723320][ T5404] usb 6-1: config 0 descriptor??
[  234.727127][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  234.727139][   T40] audit: type=1400 audit(2000000167.910:1109): avc:  denied  { read } for  pid=7888 comm="syz.3.555" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  234.762109][   T40] audit: type=1400 audit(2000000167.940:1110): avc:  denied  { open } for  pid=7888 comm="syz.3.555" path="/142/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  234.782397][   T40] audit: type=1400 audit(2000000167.960:1111): avc:  denied  { ioctl } for  pid=7888 comm="syz.3.555" path="/142/file0/file0" dev="fuse" ino=0 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  235.020218][   T40] audit: type=1400 audit(2000000168.200:1112): avc:  denied  { connect } for  pid=7890 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  235.122235][ T5404] usb 6-1: USB disconnect, device number 13
[  235.160103][ T5340] udevd[5340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.340314][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.360953][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.375479][   T40] audit: type=1400 audit(2000000168.560:1113): avc:  denied  { create } for  pid=7896 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  235.387995][   T40] audit: type=1400 audit(2000000168.570:1114): avc:  denied  { accept } for  pid=7896 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  235.399042][   T40] audit: type=1400 audit(2000000168.570:1115): avc:  denied  { connect } for  pid=7896 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.412443][   T40] audit: type=1400 audit(2000000168.570:1116): avc:  denied  { write } for  pid=7896 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.421682][   T40] audit: type=1400 audit(2000000168.580:1117): avc:  denied  { getopt } for  pid=7896 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.469190][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.877037][ T7901] veth1_macvtap: left promiscuous mode
[  235.880067][ T7901] macsec0: entered promiscuous mode
[  235.882561][ T7901] macsec0: entered allmulticast mode
[  235.918001][   T40] audit: type=1400 audit(2000000169.090:1118): avc:  denied  { setcurrent } for  pid=7898 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  235.920089][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'.
[  235.930363][ T7901] veth1_macvtap: entered promiscuous mode
[  235.932985][ T7901] veth1_macvtap: entered allmulticast mode
[  235.938623][ T7901] macsec0: left promiscuous mode
[  235.941000][ T7901] macsec0: left allmulticast mode
[  235.943305][ T7901] veth1_macvtap: left allmulticast mode
[  237.234642][ T7917] 9pnet_fd: Insufficient options for proto=fd
[  237.548403][ T7925] netfs: Couldn't get user pages (rc=-14)
[  238.519467][ T7943] netlink: 'syz.2.570': attribute type 2 has an invalid length.
[  239.583952][ T7958] 9pnet_fd: Insufficient options for proto=fd
[  239.849763][   T40] kauditd_printk_skb: 24 callbacks suppressed
[  239.849785][   T40] audit: type=1400 audit(2000000173.030:1143): avc:  denied  { getopt } for  pid=7948 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  239.869448][ T7949] lo: left allmulticast mode
[  240.346543][ T7969] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  240.575823][   T40] audit: type=1400 audit(2000000173.760:1144): avc:  denied  { create } for  pid=7975 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  240.602449][   T40] audit: type=1400 audit(2000000173.770:1145): avc:  denied  { bind } for  pid=7975 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  240.660021][   T40] audit: type=1400 audit(2000000173.840:1146): avc:  denied  { setopt } for  pid=7965 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  240.764090][   T40] audit: type=1326 audit(2000000173.940:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e7f799b9 code=0x7fc00000
[  240.776247][   T40] audit: type=1326 audit(2000000173.940:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f84e7f799b9 code=0x7fc00000
[  241.016815][ T7982] 9pnet_fd: Insufficient options for proto=fd
[  241.359451][   T40] audit: type=1326 audit(2000000174.540:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e7f799b9 code=0x7fc00000
[  241.672490][   T40] audit: type=1326 audit(2000000174.860:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.0.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86bb799b9 code=0x7fc00000
[  241.688313][   T40] audit: type=1326 audit(2000000174.870:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.0.591" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc86bb799b9 code=0x7fc00000
[  242.299937][   T40] audit: type=1326 audit(2000000175.480:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.0.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86bb799b9 code=0x7fc00000
[  242.822295][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.837075][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.908210][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.668273][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'.
[  244.538137][ T8042] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  244.552059][ T5404] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  244.647452][ T8046] netfs: Couldn't get user pages (rc=-14)
[  244.714686][ T5404] usb 5-1: device descriptor read/64, error -71
[  244.724965][ T8048] netlink: 'syz.1.602': attribute type 4 has an invalid length.
[  244.731479][ T8048] netlink: 'syz.1.602': attribute type 4 has an invalid length.
[  244.991983][ T5404] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  245.172524][ T5404] usb 5-1: device descriptor read/64, error -71
[  245.208024][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  245.208039][   T40] audit: type=1400 audit(2000000178.400:1161): avc:  denied  { write } for  pid=8062 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  245.292602][ T5404] usb usb5-port1: attempt power cycle
[  245.332978][   T40] audit: type=1326 audit(2000000178.520:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.1.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c5799b9 code=0x7fc00000
[  245.342698][   T40] audit: type=1326 audit(2000000178.520:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.1.596" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3c2c5799b9 code=0x7fc00000
[  245.723982][ T5404] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  245.757976][ T5404] usb 5-1: device descriptor read/8, error -71
[  245.926793][   T40] audit: type=1326 audit(2000000179.110:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.1.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c5799b9 code=0x7fc00000
[  246.034363][ T5404] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  246.072933][ T5404] usb 5-1: device descriptor read/8, error -71
[  246.138289][   T40] audit: type=1400 audit(2000000179.320:1165): avc:  denied  { execute } for  pid=8074 comm="syz.3.610" dev="hugetlbfs" ino=18947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  246.151700][   T40] audit: type=1400 audit(2000000179.330:1166): avc:  denied  { execute_no_trans } for  pid=8074 comm="syz.3.610" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=18947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  246.216188][ T5404] usb usb5-port1: unable to enumerate USB device
[  246.601953][ T5341] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  246.999601][ T8088] ecryptfs_parse_options: eCryptfs: unrecognized option [&@]
[  247.003320][ T8088] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end]
[  247.007086][ T8088] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  247.014830][ T8088] Error parsing options; rc = [-22]
[  247.218739][ T8085] dvmrp0: left allmulticast mode
[  247.221192][ T8085] dvmrp1: left allmulticast mode
[  247.516650][ T8098] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  247.716090][ T8103] Cannot find add_set index 0 as target
[  248.469584][   T40] audit: type=1400 audit(2000000181.650:1167): avc:  denied  { unmount } for  pid=5335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  248.696196][   T40] audit: type=1326 audit(2000000181.880:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.611" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ab1799b9 code=0x7fc00000
[  248.710100][   T40] audit: type=1326 audit(2000000181.880:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.611" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f12ab1799b9 code=0x7fc00000
[  249.369718][   T40] audit: type=1326 audit(2000000182.550:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.611" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ab1799b9 code=0x7fc00000
[  249.561948][ T5341] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  250.871449][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  250.871542][   T40] audit: type=1400 audit(2000000184.030:1181): avc:  denied  { create } for  pid=8139 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  251.209078][ T8144] dvmrp0: entered allmulticast mode
[  251.225031][ T8137] dvmrp0: left allmulticast mode
[  251.429792][   T40] audit: type=1400 audit(2000000184.610:1182): avc:  denied  { ioctl } for  pid=8134 comm="syz.1.618" path="socket:[20165]" dev="sockfs" ino=20165 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  252.300687][ T8154] netlink: 'syz.1.622': attribute type 2 has an invalid length.
[  252.308942][ T8154] netlink: 'syz.1.622': attribute type 1 has an invalid length.
[  252.318018][ T8154] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.622'.
[  253.089064][ T8154] block nbd1: shutting down sockets
[  253.773306][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'.
[  254.255704][   T40] audit: type=1400 audit(2000000187.430:1183): avc:  denied  { map } for  pid=8169 comm="syz.3.626" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  254.624217][   T40] audit: type=1400 audit(2000000187.810:1184): avc:  denied  { read } for  pid=8181 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  254.762054][   T40] audit: type=1400 audit(2000000187.880:1185): avc:  denied  { connect } for  pid=8179 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  256.352882][ T8205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.367743][   T40] audit: type=1400 audit(2000000189.530:1186): avc:  denied  { setopt } for  pid=8204 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  256.379757][ T8202] x_tables: duplicate underflow at hook 2
[  256.411314][   T66] Bluetooth: hci1: SCO packet for unknown connection handle 1
[  256.440177][   T40] audit: type=1400 audit(2000000189.620:1187): avc:  denied  { setopt } for  pid=8204 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  256.916500][   T40] audit: type=1400 audit(2000000190.100:1188): avc:  denied  { write } for  pid=8216 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  256.997902][   T40] audit: type=1400 audit(2000000190.180:1189): avc:  denied  { shutdown } for  pid=8218 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  257.022136][   T40] audit: type=1400 audit(2000000190.180:1190): avc:  denied  { ioctl } for  pid=8218 comm="syz.2.639" path="socket:[22061]" dev="sockfs" ino=22061 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  257.169860][   T40] audit: type=1400 audit(2000000190.350:1191): avc:  denied  { setopt } for  pid=8221 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  257.300892][ T8230] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  257.305565][ T8230] tipc: Enabled bearer <udp:syz1>, priority 10
[  258.077836][ T8239] netlink: 44 bytes leftover after parsing attributes in process `syz.3.644'.
[  258.119727][   T40] audit: type=1400 audit(2000000191.300:1192): avc:  denied  { read } for  pid=8243 comm="syz.0.645" name="ppp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  258.129773][   T40] audit: type=1400 audit(2000000191.300:1193): avc:  denied  { open } for  pid=8243 comm="syz.0.645" path="/dev/ppp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  258.139853][   T40] audit: type=1400 audit(2000000191.310:1194): avc:  denied  { ioctl } for  pid=8243 comm="syz.0.645" path="/dev/ppp" dev="devtmpfs" ino=716 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  258.179557][   T40] audit: type=1400 audit(2000000191.340:1195): avc:  denied  { setopt } for  pid=8243 comm="syz.0.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  258.230375][ T8248] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  258.234821][ T8248] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  258.239196][ T8248] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  258.244563][ T8248] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  258.249803][ T8248] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  258.253645][ T8248] block nbd0: shutting down sockets
[  258.317665][ T5679] tipc: Node number set to 6291454
[  258.396159][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'.
[  260.078152][ T8271] XFS (nullb0): Invalid superblock magic number
[  261.266372][ T8285] sp0: Synchronizing with TNC
[  261.487102][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  262.273986][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  262.274002][   T40] audit: type=1400 audit(2000000195.460:1207): avc:  denied  { read } for  pid=8293 comm="syz.0.658" laddr=fe80::4470:7dff:fe3c:2186 lport=5 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  263.291013][ T8308] nfs: Unknown parameter 'smackfstransmute'
[  263.307792][ T8308] input: syz1 as /devices/virtual/input/input18
[  263.448412][   T40] audit: type=1400 audit(2000000196.630:1208): avc:  denied  { setopt } for  pid=8309 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  263.511136][ T8314] xt_NFQUEUE: number of total queues is 0
[  263.664583][   T40] audit: type=1400 audit(2000000196.850:1209): avc:  denied  { map } for  pid=8315 comm="syz.0.664" path="/dev/dri/card2" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  263.714169][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'.
[  263.722266][   T40] audit: type=1400 audit(2000000196.900:1210): avc:  denied  { read } for  pid=8318 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  263.725043][ T8319] 9pnet_fd: Insufficient options for proto=fd
[  264.682687][ T5338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  264.689052][ T5338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  264.697136][ T5338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.702836][ T5338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.712124][ T5338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  264.716220][ T5338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  264.891996][ T8332] chnl_net:caif_netlink_parms(): no params data found
[  265.033584][ T5976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.092089][  T832] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  265.130666][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.136750][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.139976][ T8332] bridge_slave_0: entered allmulticast mode
[  265.144053][ T8332] bridge_slave_0: entered promiscuous mode
[  265.164341][ T5976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.181991][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.186019][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.188795][ T8332] bridge_slave_1: entered allmulticast mode
[  265.193829][ T8332] bridge_slave_1: entered promiscuous mode
[  265.243678][ T5976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.282347][  T832] usb 5-1: Using ep0 maxpacket: 8
[  265.287232][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.300598][  T832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  265.301482][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.305813][  T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  265.313334][  T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  265.317280][  T832] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  265.323596][  T832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  265.327951][  T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.354647][   T40] audit: type=1400 audit(2000000198.527:1211): avc:  denied  { map } for  pid=8345 comm="syz.2.671" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  265.370004][   T40] audit: type=1400 audit(2000000198.527:1212): avc:  denied  { execute } for  pid=8345 comm="syz.2.671" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  265.371684][ T5976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.472721][ T8332] team0: Port device team_slave_0 added
[  265.479721][ T8332] team0: Port device team_slave_1 added
[  265.537887][  T832] usb 5-1: GET_CAPABILITIES returned 0
[  265.540843][  T832] usbtmc 5-1:16.0: can't read capabilities
[  265.555724][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.559015][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.577096][ T8332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.587035][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.589788][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.602337][ T8332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.744040][    C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.756309][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.764593][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.768138][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.771535][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.792720][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.797070][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.801477][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.808027][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.809382][ T5976] bridge_slave_0: left allmulticast mode
[  265.812137][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.812175][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.814174][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.814854][ T5976] bridge_slave_0: left promiscuous mode
[  265.818666][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.818697][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.824737][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.827149][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.846713][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  265.865870][  T831] usb 5-1: USB disconnect, device number 13
[  265.921756][ T5976] bond_slave_0: left promiscuous mode
[  265.926138][ T5976] bond_slave_1: left promiscuous mode
[  265.978791][ T8351] 9pnet_fd: Insufficient options for proto=fd
[  266.365959][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.374094][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.382314][ T5976] bond0 (unregistering): Released all slaves
[  266.450360][ T8332] hsr_slave_0: entered promiscuous mode
[  266.512822][ T8332] hsr_slave_1: entered promiscuous mode
[  266.513654][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  266.559652][ T8332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.571973][ T8332] Cannot create hsr debugfs directory
[  266.614576][ T5976] tipc: Left network mode
[  266.615070][ T4826] udevd[4826]: worker [5340] terminated by signal 33 (Unknown signal 33)
[  266.620691][ T4826] udevd[4826]: worker [5340] failed while handling '/devices/virtual/misc/kvm'
[  266.726191][ T8354] block device autoloading is deprecated and will be removed.
[  266.751147][ T8353] hub 6-0:1.0: USB hub found
[  266.753464][ T8353] hub 6-0:1.0: 1 port detected
[  266.762103][   T66] Bluetooth: hci3: command tx timeout
[  267.447235][ T5338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  267.453787][ T5338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  267.462402][ T5338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  267.472968][ T5338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  267.478362][ T5338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  267.483073][ T5338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  267.700996][ T5976] hsr_slave_0: left promiscuous mode
[  267.713184][ T5976] hsr_slave_1: left promiscuous mode
[  267.723297][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.726434][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.734226][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.768723][ T5976] veth1_macvtap: left promiscuous mode
[  267.771153][ T5976] veth0_macvtap: left promiscuous mode
[  267.773728][ T5976] veth1_vlan: left promiscuous mode
[  267.776118][ T5976] veth0_vlan: left promiscuous mode
[  268.046754][ T8394] fuse: Unknown parameter '0x0000000000000008'
[  268.055397][ T8394] Process accounting resumed
[  268.124613][ T8394] vim2m vim2m.0: vidioc_s_fmt queue busy
[  268.222470][ T8400] netlink: 168 bytes leftover after parsing attributes in process `syz.0.678'.
[  268.662489][   T66] Bluetooth: hci1: unexpected event for opcode 0x041b
[  268.842047][   T66] Bluetooth: hci3: command tx timeout
[  269.105094][ T5976] team0 (unregistering): Port device team_slave_1 removed
[  269.256570][ T5976] team0 (unregistering): Port device team_slave_0 removed
[  269.578484][   T66] Bluetooth: hci4: command tx timeout
[  269.622624][    C2] vkms_vblank_simulate: vblank timer overrun
[  270.516432][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.621310][ T8389] chnl_net:caif_netlink_parms(): no params data found
[  270.889703][ T8332] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  270.899986][ T8332] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  270.927946][   T66] Bluetooth: hci3: command tx timeout
[  270.961718][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.965560][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.968319][ T8389] bridge_slave_0: entered allmulticast mode
[  270.972222][ T8389] bridge_slave_0: entered promiscuous mode
[  270.979453][ T8332] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  271.007011][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.010403][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.020524][ T8389] bridge_slave_1: entered allmulticast mode
[  271.024790][ T8389] bridge_slave_1: entered promiscuous mode
[  271.154540][ T8332] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  271.179748][ T5976] IPVS: stop unused estimator thread 0...
[  271.220270][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.229556][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.300578][ T8436] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.683'.
[  271.306219][ T8436] netlink: 8438 bytes leftover after parsing attributes in process `syz.2.683'.
[  271.372844][ T8389] team0: Port device team_slave_0 added
[  271.381098][ T8389] team0: Port device team_slave_1 added
[  271.524355][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.527382][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.539074][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.546132][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.550436][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.562268][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.641992][   T66] Bluetooth: hci4: command tx timeout
[  271.666114][ T8443] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  271.678399][ T8389] hsr_slave_0: entered promiscuous mode
[  271.683523][ T8389] hsr_slave_1: entered promiscuous mode
[  271.686669][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.690007][ T8389] Cannot create hsr debugfs directory
[  271.907838][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.949039][ T8389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.985292][   T40] audit: type=1400 audit(2000000205.167:1213): avc:  denied  { accept } for  pid=8444 comm="syz.2.685" laddr=ff01::1 lport=32 faddr=::ffff:0.0.0.24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  272.025713][ T8332] 8021q: adding VLAN 0 to HW filter on device team0
[  272.065231][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.069352][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.076126][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.079302][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.163882][ T8389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.289178][ T8389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.417380][ T8389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.431129][ T8332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.512089][ T8332] veth0_vlan: entered promiscuous mode
[  272.523905][ T8332] veth1_vlan: entered promiscuous mode
[  272.549994][ T8332] veth0_macvtap: entered promiscuous mode
[  272.561601][ T8332] veth1_macvtap: entered promiscuous mode
[  272.593249][ T8332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.597366][ T8332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.601160][ T8332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.605933][ T8332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.611413][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.617072][ T8332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.626329][ T8332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.630596][ T8332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.635141][ T8332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.642294][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.651167][ T8332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.654336][ T8332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.657176][ T8332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.661278][ T8332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.794501][ T8389] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  272.817109][ T8389] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  272.825642][ T8389] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  272.836606][ T8389] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  272.863439][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.869781][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.915739][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.926010][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.977988][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.005617][ T8389] 8021q: adding VLAN 0 to HW filter on device team0
[  273.012472][   T66] Bluetooth: hci3: command tx timeout
[  273.047225][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.050654][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.060720][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.063816][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.292058][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.374389][ T8389] veth0_vlan: entered promiscuous mode
[  273.388526][ T8389] veth1_vlan: entered promiscuous mode
[  273.427568][ T8389] veth0_macvtap: entered promiscuous mode
[  273.429000][ T8471] Bluetooth: hci0: Opcode 0x0c03 failed: -22
[  273.455005][ T8389] veth1_macvtap: entered promiscuous mode
[  273.460545][ T5341] ==================================================================
[  273.464152][ T5341] BUG: KASAN: slab-use-after-free in set_powered_sync+0xc1/0xd0
[  273.469973][ T5341] Read of size 8 at addr ffff888024527c18 by task kworker/u33:3/5341
[  273.474121][ T5341] 
[  273.475117][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: kworker/u33:3 Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0
[  273.479873][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  273.482066][   T40] audit: type=1400 audit(2000000206.657:1214): avc:  denied  { write } for  pid=5248 comm="syz-executor" path="pipe:[3975]" dev="pipefs" ino=3975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  273.485826][ T5341] Workqueue: hci0 hci_cmd_sync_work
[  273.497447][ T5341] Call Trace:
[  273.498791][ T5341]  <TASK>
[  273.499854][ T5341]  dump_stack_lvl+0x116/0x1f0
[  273.501514][ T5341]  print_report+0xc3/0x620
[  273.503067][ T5341]  ? __virt_addr_valid+0x5e/0x590
[  273.504793][ T5341]  ? __phys_addr+0xc6/0x150
[  273.506334][ T5341]  kasan_report+0xd9/0x110
[  273.507736][ T5341]  ? set_powered_sync+0xc1/0xd0
[  273.509367][ T5341]  ? set_powered_sync+0xc1/0xd0
[  273.511169][ T5341]  set_powered_sync+0xc1/0xd0
[  273.512868][ T5341]  hci_cmd_sync_work+0x1a4/0x410
[  273.514825][ T5341]  process_one_work+0x9c5/0x1b40
[  273.516816][ T5341]  ? __pfx_lock_acquire+0x10/0x10
[  273.518857][ T5341]  ? __pfx_process_one_work+0x10/0x10
[  273.521035][ T5341]  ? assign_work+0x1a0/0x250
[  273.522922][ T5341]  worker_thread+0x6c8/0xf20
[  273.524706][ T5341]  ? __pfx_worker_thread+0x10/0x10
[  273.526659][ T5341]  kthread+0x2c1/0x3a0
[  273.528237][ T5341]  ? _raw_spin_unlock_irq+0x23/0x50
[  273.530152][ T5341]  ? __pfx_kthread+0x10/0x10
[  273.531818][ T5341]  ret_from_fork+0x45/0x80
[  273.533387][ T5341]  ? __pfx_kthread+0x10/0x10
[  273.535624][ T5341]  ret_from_fork_asm+0x1a/0x30
[  273.537641][ T5341]  </TASK>
[  273.538895][ T5341] 
[  273.540136][ T5341] Allocated by task 8472:
[  273.541836][ T5341]  kasan_save_stack+0x33/0x60
[  273.543644][ T5341]  kasan_save_track+0x14/0x30
[  273.545615][ T5341]  __kasan_kmalloc+0xaa/0xb0
[  273.547600][ T5341]  mgmt_pending_new+0x5b/0x290
[  273.549705][ T5341]  mgmt_pending_add+0x36/0x160
[  273.551762][ T5341]  set_powered+0x28c/0x5c0
[  273.553829][ T5341]  hci_sock_sendmsg+0x1528/0x25e0
[  273.555928][ T5341]  sock_write_iter+0x50a/0x5c0
[  273.557760][ T5341]  vfs_write+0x6b6/0x1140
[  273.559427][ T5341]  ksys_write+0x1f8/0x260
[  273.561093][ T5341]  do_syscall_64+0xcd/0x250
[  273.562888][ T5341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.565222][ T5341] 
[  273.566195][ T5341] Freed by task 8223:
[  273.567882][ T5341]  kasan_save_stack+0x33/0x60
[  273.569870][ T5341]  kasan_save_track+0x14/0x30
[  273.571842][ T5341]  kasan_save_free_info+0x3b/0x60
[  273.573876][ T5341]  poison_slab_object+0xf7/0x160
[  273.575890][ T5341]  __kasan_slab_free+0x32/0x50
[  273.577853][ T5341]  kfree+0x12a/0x3b0
[  273.579455][ T5341]  settings_rsp+0x257/0x400
[  273.581611][ T5341]  mgmt_pending_foreach+0xdf/0x140
[  273.583827][ T5341]  __mgmt_power_off+0xcd/0x2d0
[  273.585955][ T5341]  hci_dev_close_sync+0xc33/0x1110
[  273.588077][ T5341]  hci_dev_do_close+0x2e/0x90
[  273.590041][ T5341]  hci_dev_close+0x183/0x1e0
[  273.591910][ T5341]  hci_sock_ioctl+0x28c/0x880
[  273.593665][ T5341]  sock_do_ioctl+0x116/0x280
[  273.595420][ T5341]  sock_ioctl+0x22e/0x6c0
[  273.596905][ T5341]  __x64_sys_ioctl+0x193/0x220
[  273.598544][ T5341]  do_syscall_64+0xcd/0x250
[  273.600117][ T5341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.602112][ T5341] 
[  273.603035][ T5341] The buggy address belongs to the object at ffff888024527c00
[  273.603035][ T5341]  which belongs to the cache kmalloc-96 of size 96
[  273.608652][ T5341] The buggy address is located 24 bytes inside of
[  273.608652][ T5341]  freed 96-byte region [ffff888024527c00, ffff888024527c60)
[  273.614204][ T5341] 
[  273.615228][ T5341] The buggy address belongs to the physical page:
[  273.617748][ T5341] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24527
[  273.621997][ T5341] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  273.625123][ T5341] page_type: 0xfdffffff(slab)
[  273.626812][ T5341] raw: 00fff00000000000 ffff888015842280 ffffea0000683380 dead000000000002
[  273.629834][ T5341] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000
[  273.633261][ T5341] page dumped because: kasan: bad access detected
[  273.635736][ T5341] page_owner tracks the page as allocated
[  273.637779][ T5341] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 57, tgid 57 (kworker/u32:3), ts 64856230997, free_ts 64321966224
[  273.645598][ T5341]  post_alloc_hook+0x2d1/0x350
[  273.647452][ T5341]  get_page_from_freelist+0x1351/0x2e50
[  273.649611][ T5341]  __alloc_pages_noprof+0x22b/0x2460
[  273.651383][ T5341]  alloc_slab_page+0x4e/0xf0
[  273.652978][ T5341]  new_slab+0x84/0x260
[  273.654563][ T5341]  ___slab_alloc+0xdac/0x1870
[  273.656490][ T5341]  __slab_alloc.constprop.0+0x56/0xb0
[  273.658889][ T5341]  __kmalloc_cache_noprof+0x2b4/0x300
[  273.661043][ T5341]  nsim_fib_event_nb+0x1b6/0xec0
[  273.663058][ T5341]  notifier_call_chain+0xb9/0x410
[  273.664973][ T5341]  atomic_notifier_call_chain+0x71/0x1c0
[  273.667052][ T5341]  call_fib_notifiers+0x33/0x70
[  273.669032][ T5341]  fib6_add+0x25cb/0x4ba0
[  273.671045][ T5341]  ip6_ins_rt+0xb6/0x110
[  273.672887][ T5341]  __ipv6_ifa_notify+0xafc/0xe20
[  273.674925][ T5341]  addrconf_dad_completed+0x19d/0x1060
[  273.677123][ T5341] page last free pid 56 tgid 56 stack trace:
[  273.679103][ T5341]  free_unref_page+0x64a/0xe40
[  273.680758][ T5341]  vfree+0x181/0x7a0
[  273.682099][ T5341]  delayed_vfree_work+0x56/0x70
[  273.683771][ T5341]  process_one_work+0x9c5/0x1b40
[  273.685455][ T5341]  worker_thread+0x6c8/0xf20
[  273.687125][ T5341]  kthread+0x2c1/0x3a0
[  273.688682][ T5341]  ret_from_fork+0x45/0x80
[  273.690328][ T5341]  ret_from_fork_asm+0x1a/0x30
[  273.692460][ T5341] 
[  273.693466][ T5341] Memory state around the buggy address:
[  273.695533][ T5341]  ffff888024527b00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[  273.698218][ T5341]  ffff888024527b80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  273.700839][ T5341] >ffff888024527c00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  273.703681][ T5341]                             ^
[  273.705713][ T5341]  ffff888024527c80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  273.708956][ T5341]  ffff888024527d00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  273.712048][ T5341] ==================================================================
[  273.723580][ T5341] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  273.726925][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: kworker/u33:3 Not tainted 6.11.0-rc3-syzkaller-00066-g1fb918967b56 #0
[  273.731187][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  273.736990][ T5341] Workqueue: hci0 hci_cmd_sync_work
[  273.739284][ T5341] Call Trace:
[  273.740722][ T5341]  <TASK>
[  273.742406][ T5341]  dump_stack_lvl+0x3d/0x1f0
[  273.744938][ T5341]  panic+0x6f5/0x7a0
[  273.746728][ T5341]  ? __pfx_panic+0x10/0x10
[  273.749736][ T5341]  ? irqentry_exit+0x3b/0x90
[  273.751902][ T5341]  ? lockdep_hardirqs_on+0x7c/0x110
[  273.754884][ T5341]  ? preempt_schedule_thunk+0x1a/0x30
[  273.758106][ T5341]  ? preempt_schedule_common+0x44/0xc0
[  273.760467][ T5341]  ? check_panic_on_warn+0x1f/0xb0
[  273.771453][ T5341]  check_panic_on_warn+0xab/0xb0
[  273.774084][ T5341]  end_report+0x117/0x180
[  273.776016][ T5341]  kasan_report+0xe9/0x110
[  273.778053][ T5341]  ? set_powered_sync+0xc1/0xd0
[  273.780167][ T5341]  ? set_powered_sync+0xc1/0xd0
[  273.783044][ T5341]  set_powered_sync+0xc1/0xd0
[  273.785504][ T5341]  hci_cmd_sync_work+0x1a4/0x410
[  273.788248][ T5341]  process_one_work+0x9c5/0x1b40
[  273.790186][ T5341]  ? __pfx_lock_acquire+0x10/0x10
[  273.792178][ T5341]  ? __pfx_process_one_work+0x10/0x10
[  273.794528][ T5341]  ? assign_work+0x1a0/0x250
[  273.796597][ T5341]  worker_thread+0x6c8/0xf20
[  273.799015][ T5341]  ? __pfx_worker_thread+0x10/0x10
[  273.801377][ T5341]  kthread+0x2c1/0x3a0
[  273.803458][ T5341]  ? _raw_spin_unlock_irq+0x23/0x50
[  273.805991][ T5341]  ? __pfx_kthread+0x10/0x10
[  273.808195][ T5341]  ret_from_fork+0x45/0x80
[  273.810080][ T5341]  ? __pfx_kthread+0x10/0x10
[  273.812093][ T5341]  ret_from_fork_asm+0x1a/0x30
[  273.814145][ T5341]  </TASK>
[  273.816388][ T5341] Kernel Offset: disabled
[  273.818234][ T5341] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:56:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84fe9eb5 RDI=ffffffff951a26a0 RBP=ffffffff951a2660 RSP=ffffc9000329f710
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3534323038386552
R12=0000000000000000 R13=0000000000000033 R14=ffffffff84fe9e50 R15=0000000000000000
RIP=ffffffff84fe9edf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000100000000 CR3=000000003a436000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223c9e86bc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223c9e86c9
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223c9e86c3
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223c9e86d7
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223c9e875d
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f223c9e883b
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002c03000000 4002000800000000 307a797300010009 00000002d5ff1a5e
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100110000001400 000000327a797300 0300090000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000200000000ff e6000003010a0300 00002c0300000040 0200080000000030
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff816b6bce RDX=ffff888016b14880
RSI=ffffffff816b6bbc RDI=0000000000000001 RBP=00000000000000ef RSP=ffffc90000987c50
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000200 R13=ffff88801c25c880 R14=ffffffff8b516b40 R15=ffffc90000987cd0
RIP=ffffffff816b6bbe RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b100000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffcb15bdc28 CR3=000000002b520000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f414c6eb6a3 00007f414c6eb6a3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb15c03b0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555628023fc 00005555628023f0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555627ff490
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555562871ac3 00005555628716a0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555628058dc 00005555628058c0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb15c0730
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000100018100001 000000080608010a d208800403ffffff ff0402800402ded4
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000100018 1000010000000806 08010ad208800403 ffffffff04028004
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02ded40800080145 b600000000000000 000000000001ffff ffffffffffffe708
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02b80301080002b0 0300080002a00300 0800029803000800 02900305c5a60800
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02880303ffffffff 0400100000040580 0403ffffffff040a 012b8e0073666769
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffff88806b0467c0 RCX=ffffffff817e493b RDX=ffff8880196ec880
RSI=ffffffff817e4915 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000083f9c0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed100d608cf9 R13=0000000000000001 R14=ffff88806b0467c8 R15=ffff88806b23ffc0
RIP=ffffffff817e4917 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b200000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000100000000 CR3=000000000db7c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bbe86bc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bbe86c9
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bbe86c3
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bbe86d7
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bbe875d
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bbe883b
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bceb488 00007fc86bceb480 00007fc86bceb478 00007fc86bceb450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86c84d100 00007fc86bceb440 00007fc86bceb458 00007fc86bceb4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc86bceb498 00007fc86bceb490 00007fc86bceb488 00007fc86bceb480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=ffff88806b33ff40 RCX=ffffffff817e6638 RDX=ffff8880186c0000
RSI=ffffffff817e6613 RDI=0000000000000005 RBP=ffffc90000167d60 RSP=ffffc90000167c40
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff8ddc0c70
R12=1ffff9200002cf8c R13=0000000000000001 R14=0000000000000003 R15=ffffed100d667fe9
RIP=ffffffff817e6615 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806b300000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000042efc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080008000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c00000000000000 00000000000080fe
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e8691
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e8689
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e86bc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e86c9
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e86c3
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e86d7
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e875d
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe903e883b
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656700315f657661 6c735f7664617461 6200305f6576616c 735f766461746162
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007664617461625f 6f745f3168746576 007664617461625f 6f745f3068746576
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000