last executing test programs:

6m56.67836897s ago: executing program 3 (id=16):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x91e}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x20, <r4=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r4, 0x8001, 0x10}, 0xc)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x10, 0xf, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={0x0, r5, 0x0, 0x70b0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

6m55.800305009s ago: executing program 3 (id=21):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd)

6m50.615037479s ago: executing program 3 (id=38):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0xa})
syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x27, 0x0, 0x4a5a1aa33e4f1aec, 0x6, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m50.250454537s ago: executing program 3 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908386d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x4d5}}, 0x1006)
syz_genetlink_get_family_id$team(&(0x7f0000001700), r0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0x4000090)

6m49.786428124s ago: executing program 3 (id=44):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

6m48.837223189s ago: executing program 3 (id=48):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)
sendto$inet(r1, &(0x7f0000000080)="d0", 0x1, 0x801, 0x0, 0x0)

6m33.804975852s ago: executing program 32 (id=48):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)
sendto$inet(r1, &(0x7f0000000080)="d0", 0x1, 0x801, 0x0, 0x0)

6m26.266759124s ago: executing program 2 (id=135):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f500000075461d10000000000071090000000000409500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"/816]}, 0x3a8)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @remote, 0x6}, 0xffffffffffffff5d)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000001c0)={'c', ' *:* ', 'r\x00'}, 0x8)

6m26.05041638s ago: executing program 2 (id=137):
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d37, 0x0, 0x0, 0x0, 0x0)

6m25.643221589s ago: executing program 2 (id=138):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0)

6m25.013416244s ago: executing program 2 (id=140):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)

6m24.403232416s ago: executing program 2 (id=142):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1)

6m24.223026792s ago: executing program 2 (id=144):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0xe)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x0, 0x0, @void}, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020)

6m8.843752001s ago: executing program 33 (id=144):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0xe)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0x0, 0x0, @void}, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020)

3m56.340324203s ago: executing program 6 (id=618):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)

3m55.347273467s ago: executing program 6 (id=621):
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

3m55.057545176s ago: executing program 6 (id=623):
mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r1 = fsmount(r0, 0x0, 0x0)
openat$cgroup_pressure(r1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000140)={0x0, 0x989680}, 0x0)

3m54.427192477s ago: executing program 6 (id=624):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m54.25966638s ago: executing program 6 (id=627):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)

3m53.628149031s ago: executing program 6 (id=631):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0xb4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa71, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0)

3m53.342170007s ago: executing program 34 (id=631):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0xb4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa71, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f00009c4000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0)

2m36.204895619s ago: executing program 5 (id=850):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8815}, 0x24000004)
r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xc7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x68}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m35.359028532s ago: executing program 5 (id=854):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
readv(r0, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f0000000000)=""/167, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000700)={'filter\x00', 0x0, 0x3, 0x0, [0x3, 0x1, 0x8000000000000000, 0x1a, 0x7, 0x10], 0x9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0}, &(0x7f00000005c0)=0x78)

2m34.095878824s ago: executing program 5 (id=859):
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local}}}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_audit(0x10, 0x3, 0x9)
getrusage(0x0, &(0x7f0000000500))

2m32.264236129s ago: executing program 5 (id=865):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
open_tree(r1, 0x0, 0x89981)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}})
keyctl$read(0xb, r2, &(0x7f0000000080)=""/42, 0x2a)

2m28.853206909s ago: executing program 5 (id=882):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0xffff, 0x9, 0x0, 0x7fff, 0x0, "a0590469a322d928"})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600})

2m26.757376669s ago: executing program 5 (id=877):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
utimes(&(0x7f0000000180)='./file0\x00', 0x0)

2m11.224904494s ago: executing program 35 (id=877):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff000)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
utimes(&(0x7f0000000180)='./file0\x00', 0x0)

18.256008836s ago: executing program 1 (id=1197):
syz_open_dev$sndmidi(&(0x7f0000002100), 0x2, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
close(0x3)
r3 = syz_open_dev$loop(&(0x7f0000001580), 0x8, 0x8080)
ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0)

17.641866344s ago: executing program 7 (id=1199):
r0 = socket$inet6(0xa, 0x800, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="85000000a00000003500000000f31700850000002300000095000000000000007aaa8ab7f0e877dc1633c777bf404435e9e08854a5214b25aa1adc346f2d6b826db20de437e5824ce97b490ea4a7564f920eb396378a769ba18487ed91ac1a8a32b100829cdaaee08a59dfc11af0d5fe99cc3499fe50c7e50e9fd439c257df194d32a99cf72aed10fc69fd777a6cb5fdb322e7e3bafd7c144f16ba20943908d17335743dce60c096c62958f251b0b24f5a16796f3ac45cc5dc1d375efd2544ae85b30d12cf233a57006fb84e8435b4d47239b6535cf25f9ba334977300000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x6e, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffda1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000100)={0x0, 0x8, 0x6})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x68, 0x1, 0x8, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x10, 0x0, 0x9}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000004c0)=0x45)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0xe3b, 0x81, 0x400, 0x0, 0xfffffffc}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))

16.579379235s ago: executing program 7 (id=1203):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1a, &(0x7f0000000740)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000000c0)='GPL\x00', 0xb8b6, 0xc3, &(0x7f0000000580)=""/195, 0x41100, 0x14, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r1], 0x108}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
ptrace(0x10, r0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/183, 0xb7}], 0x1, 0x180, 0x0)

14.2304001s ago: executing program 7 (id=1207):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = memfd_secret(0x80000)
ppoll(&(0x7f0000000240)=[{r4, 0x40c2}, {r3, 0x102}, {r4, 0x4}, {r4}, {r4, 0x4010}, {r1, 0x60}], 0x6, 0x0, &(0x7f0000000480)={[0x6]}, 0x8)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0)
ioctl$SIOCNRDECOBS(r5, 0x89e2)

11.92668118s ago: executing program 7 (id=1210):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
ioperm(0x0, 0x1fb, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = gettid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r3, &(0x7f0000000080)='./file0/file0\x00', r3, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0)
tkill(r2, 0x1)
write$cgroup_int(r1, &(0x7f0000000040)=0x922, 0x12)

11.153160884s ago: executing program 7 (id=1212):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000019080)='net/ip_tables_targets\x00')
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(0x0, 0x0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x1, 0x4a40)

11.115698718s ago: executing program 8 (id=1213):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x20000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x5, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x0)
futex(&(0x7f0000000200), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8, @local, 0x402}], 0x1c)

10.833029327s ago: executing program 1 (id=1214):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x124000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100000606010100000000000000000a369839fe7f0150947a68b500000005000100070000000901020073797a31000800000900020073797a31000000000500010007000000d206f71b650adb4276ef711abace5b141893d7549c6e81d9f62a38f817a7894b8bc92a0b600ad0f201"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0)

10.163984752s ago: executing program 0 (id=1215):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000000000))
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
syz_io_uring_setup(0x4073, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200))
mq_open(&(0x7f0000000040)='!-@\x00', 0xc2, 0x50, &(0x7f00000000c0)={0x8, 0x5, 0xfffffe01, 0x8})

10.081984498s ago: executing program 7 (id=1216):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setfsgid(0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
io_uring_setup(0x40af, &(0x7f0000000080)={0x0, 0x7283, 0x8, 0x0, 0xfffffffb})
close(r3)
close(0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [], [0x0, 0xfffffffc], [0x400000000000001]})
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf2509020000050007000200000008000100010000000500080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

10.08058473s ago: executing program 8 (id=1217):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

8.879838605s ago: executing program 36 (id=1216):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setfsgid(0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
io_uring_setup(0x40af, &(0x7f0000000080)={0x0, 0x7283, 0x8, 0x0, 0xfffffffb})
close(r3)
close(0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [], [0x0, 0xfffffffc], [0x400000000000001]})
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf2509020000050007000200000008000100010000000500080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

8.835438497s ago: executing program 0 (id=1220):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000180)=""/74)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, {0xa}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040080}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
socket$inet6(0xa, 0x800000000000002, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x13d, 0x5000, 0x0, r6})
close_range(r5, r6, 0x0)

8.825960854s ago: executing program 4 (id=1221):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)

6.991074028s ago: executing program 1 (id=1222):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r4, 0x0, 0x400000000000003, 0x2)

6.565901152s ago: executing program 4 (id=1223):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
keyctl$chown(0x6, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

6.54848331s ago: executing program 8 (id=1224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = memfd_create(0x0, 0x2)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x2)
syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

5.286679657s ago: executing program 1 (id=1225):
r0 = msgget$private(0x0, 0x214)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000240)=0xc)
setreuid(0x0, r3)
msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0xb2, 0x5d, 0x4a, 0x8, 0x50d, 0x109, 0xb470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc9, 0x40, 0x80, 0x1, [{{0x9, 0x4, 0xf9, 0x4, 0x0, 0x3a, 0xab, 0x30, 0xff}}]}}]}}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000100))
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x2, r3, 0xee00, 0xee01, r4, 0xa0, 0x6}, 0x0, 0x0, 0x3, 0x6, 0x8, 0xfffffffffffffffc, 0x5, 0xfffe, 0xc2bf, 0x1000})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=[<r6=>0x0, 0x0], &(0x7f0000000340)=[<r7=>0x0], 0x0, 0x0, 0x2, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, r6], 0x2, 0x0, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000a40)={&(0x7f0000000140)=[r7, r7, r7], 0x3, 0x80800})
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, 0x0, r4, 0x0, 0xee00, 0x7a, 0x8}, 0x0, 0x0, 0x7, 0x5, 0x10001, 0x9, 0x9, 0x100, 0x0, 0xd, 0x0, r2})
setgroups(0x2, &(0x7f00000000c0)=[r4, r4])
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

5.171661322s ago: executing program 0 (id=1226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
fanotify_init(0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "57d4915b52cdfd588ea56ed6c1ca719a"})

5.073955304s ago: executing program 4 (id=1227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
socket$kcm(0x10, 0x2, 0x4)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000040)='./file0\x00')
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1, 0x0, 0x0, 0x4005}, 0x846)

3.943338786s ago: executing program 0 (id=1228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

3.292694176s ago: executing program 4 (id=1229):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000100)="b9ff03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)

2.591501718s ago: executing program 0 (id=1230):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}})

2.525465581s ago: executing program 8 (id=1231):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20044011)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x2}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x8}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x1f}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0x1}, 0x2)

1.5128394s ago: executing program 1 (id=1232):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x48f0, 0x0, 0x3}, &(0x7f00000003c0), &(0x7f0000000280))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a1f000008000000ff0f0000070000000000eeff67aeb606579d51facd3b4c1d969e5789971a9dea9b655a5ca65ab2f3fe5f9e581fd12464a9e7aa1a64e5b181a834b9451662d4469154c35016c175627cf9b788a14b87e0f4f68c6f1dfa4dff7234"], 0x50)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="7ca3", 0x2}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000000000000840000000800000018000000000000008400000000000000"], 0x28}, 0x41)

1.510324837s ago: executing program 8 (id=1233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000007000000"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)

1.495612296s ago: executing program 0 (id=1234):
fanotify_init(0x0, 0x400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb, 0x6, "de52d394845fb4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc4}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x10]}, 0x8, 0x80000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xca, 0x1a, 0x60, 0x40, 0x2304, 0x20f, 0x3bde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0xe1, 0x3, 0xb3}}]}}]}}, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x1)

1.472920904s ago: executing program 4 (id=1235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d500000000000600"/18], 0x20}}, 0x2000c010)

583.796657ms ago: executing program 1 (id=1236):
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
r0 = socket(0x15, 0x6, 0x2)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e)

509.22135ms ago: executing program 4 (id=1237):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
listen(r1, 0x3)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000001500), 0x588, 0x3000000)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=1238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
syz_open_dev$usbmon(0x0, 0x80000001, 0x8c00)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000a40), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

kernel console output (not intermixed with test programs):

29] audit: type=1400 audit(1737443816.712:467): avc:  denied  { getopt } for  pid=7091 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  146.482483][ T7107] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[  146.560830][ T7107] bond1: (slave ip6erspan0): making interface the new active one
[  146.575274][ T7107] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  146.815043][ T5862] usb 6-1: USB disconnect, device number 2
[  146.941884][   T29] audit: type=1400 audit(1737443817.932:468): avc:  denied  { bind } for  pid=7125 comm="syz.5.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  147.756069][   T29] audit: type=1400 audit(1737443818.752:469): avc:  denied  { read write } for  pid=7132 comm="syz.6.284" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  147.780387][   T29] audit: type=1400 audit(1737443818.752:470): avc:  denied  { open } for  pid=7132 comm="syz.6.284" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  147.792615][ T7133] xt_connbytes: Forcing CT accounting to be enabled
[  147.851633][ T7133] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  147.887081][ T7133] xt_bpf: check failed: parse error
[  148.981366][   T29] audit: type=1400 audit(1737443819.962:471): avc:  denied  { ioctl } for  pid=7142 comm="syz.1.287" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  150.772780][ T7177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  150.796642][   T29] audit: type=1400 audit(1737443821.792:472): avc:  denied  { ioctl } for  pid=7176 comm="syz.6.295" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  151.086429][ T5865] IPVS: starting estimator thread 0...
[  151.094297][ T7182] net_ratelimit: 10 callbacks suppressed
[  151.094312][ T7182] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  151.201747][ T7186] IPVS: using max 26 ests per chain, 62400 per kthread
[  152.946850][   T29] audit: type=1400 audit(1737443823.942:473): avc:  denied  { map } for  pid=7207 comm="syz.4.301" path="socket:[12909]" dev="sockfs" ino=12909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  153.006395][   T29] audit: type=1804 audit(1737443824.002:474): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.300" name="/newroot/73/file1" dev="fuse" ino=1 res=1 errno=0
[  153.028651][   T29] audit: type=1800 audit(1737443824.002:475): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.300" name="/" dev="fuse" ino=1 res=0 errno=0
[  153.051059][   T29] audit: type=1804 audit(1737443824.032:476): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.300" name="/newroot/73/file1" dev="fuse" ino=1 res=1 errno=0
[  153.078812][   T29] audit: type=1804 audit(1737443824.032:477): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.300" name="/newroot/73/file1" dev="fuse" ino=1 res=1 errno=0
[  153.109188][   T29] audit: type=1800 audit(1737443824.032:478): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.300" name="/" dev="fuse" ino=1 res=0 errno=0
[  154.327287][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz.1.309'.
[  154.349059][ T7247] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[  158.371335][   T29] audit: type=1400 audit(1737443829.352:479): avc:  denied  { append } for  pid=7325 comm="syz.1.326" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  158.454829][   T29] audit: type=1400 audit(1737443829.422:480): avc:  denied  { shutdown } for  pid=7325 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  158.566086][ T7321] overlayfs: failed to get inode (-116)
[  158.586743][ T7321] overlayfs: failed to get inode (-116)
[  161.929783][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.336'.
[  162.033764][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'.
[  162.092892][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.336'.
[  162.153450][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.336'.
[  162.866415][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  162.873184][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  163.796294][   T29] audit: type=1400 audit(1737443834.792:481): avc:  denied  { bind } for  pid=7421 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  164.237879][   T29] audit: type=1400 audit(1737443834.792:482): avc:  denied  { create } for  pid=7421 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  164.557209][   T29] audit: type=1400 audit(1737443835.552:483): avc:  denied  { read } for  pid=7433 comm="syz.4.346" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  164.645041][   T29] audit: type=1400 audit(1737443835.552:484): avc:  denied  { open } for  pid=7433 comm="syz.4.346" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  164.895617][   T29] audit: type=1400 audit(1737443835.892:485): avc:  denied  { bind } for  pid=7417 comm="syz.6.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  165.439171][   T29] audit: type=1400 audit(1737443836.432:486): avc:  denied  { nlmsg_write } for  pid=7449 comm="syz.5.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  165.517752][ T7452] kvm: emulating exchange as write
[  165.579473][   T29] audit: type=1107 audit(1737443836.462:487): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  167.726168][   T29] audit: type=1400 audit(1737443838.722:488): avc:  denied  { setopt } for  pid=7475 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  168.549400][   T29] audit: type=1400 audit(1737443839.542:489): avc:  denied  { connect } for  pid=7481 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  169.198736][   T29] audit: type=1400 audit(1737443839.542:490): avc:  denied  { name_connect } for  pid=7481 comm="syz.5.359" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  170.198765][   T29] audit: type=1400 audit(1737443841.192:491): avc:  denied  { listen } for  pid=7506 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  170.218163][ T5862] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  170.341664][   T29] audit: type=1400 audit(1737443841.192:492): avc:  denied  { ioctl } for  pid=7506 comm="syz.5.365" path="socket:[14309]" dev="sockfs" ino=14309 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  170.431526][   T29] audit: type=1400 audit(1737443841.192:493): avc:  denied  { getopt } for  pid=7506 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  170.468437][ T5862] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  170.701511][ T5862] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  170.711529][ T5862] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  170.720609][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.465528][ T7503] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  171.497414][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  171.938035][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[  173.328994][   T29] audit: type=1400 audit(1737443844.322:494): avc:  denied  { ioctl } for  pid=7551 comm="syz.5.371" path="socket:[15411]" dev="sockfs" ino=15411 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  173.395171][   T29] audit: type=1400 audit(1737443844.392:495): avc:  denied  { sqpoll } for  pid=7556 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  173.447808][ T7557] netfs: Couldn't get user pages (rc=-14)
[  173.455552][   T29] audit: type=1400 audit(1737443844.452:496): avc:  denied  { ioctl } for  pid=7559 comm="syz.0.373" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  173.636168][ T5866] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  173.811758][   T46] usb 7-1: USB disconnect, device number 2
[  173.823524][ T5866] usb 6-1: Using ep0 maxpacket: 16
[  173.861359][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.879496][ T5866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.899712][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  173.937198][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.981543][ T5866] usb 6-1: Product: syz
[  174.004373][ T5866] usb 6-1: Manufacturer: syz
[  174.032715][ T5866] usb 6-1: SerialNumber: syz
[  174.183932][   T29] audit: type=1400 audit(1737443845.172:497): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  174.288445][   T29] audit: type=1400 audit(1737443845.242:498): avc:  denied  { read } for  pid=7574 comm="syz.1.376" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  174.331657][ T5866] usb 6-1: 0:2 : does not exist
[  174.394139][ T5866] usb 6-1: USB disconnect, device number 3
[  174.432937][   T29] audit: type=1400 audit(1737443845.242:499): avc:  denied  { open } for  pid=7574 comm="syz.1.376" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  174.705116][ T7563] udevd[7563]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.746801][   T29] audit: type=1400 audit(1737443845.722:500): avc:  denied  { bind } for  pid=7589 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  174.857383][ T7583] syz.4.377: attempt to access beyond end of device
[  174.857383][ T7583] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  174.870962][ T7583] SQUASHFS error: Failed to read block 0x0: -5
[  174.877251][ T7583] unable to read squashfs_super_block
[  175.823403][   T29] audit: type=1400 audit(1737443846.812:501): avc:  denied  { write } for  pid=7618 comm="syz.5.384" lport=33856 faddr=172.30.0.6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1
[  175.910399][ T7632] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  175.929663][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  175.959100][   T29] audit: type=1400 audit(1737443846.922:502): avc:  denied  { ioctl } for  pid=7631 comm="syz.1.387" path="socket:[14545]" dev="sockfs" ino=14545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  177.452931][ T7676] netlink: 'syz.4.394': attribute type 4 has an invalid length.
[  177.489494][ T7676] netlink: 'syz.4.394': attribute type 4 has an invalid length.
[  177.811578][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  178.344775][ T5862] usb 7-1: Using ep0 maxpacket: 32
[  178.467033][ T5862] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  178.583393][ T5862] usb 7-1: config 0 has no interface number 0
[  178.594794][ T5862] usb 7-1: config 0 interface 184 has no altsetting 0
[  178.610739][ T5862] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  178.622556][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.631030][ T5862] usb 7-1: Product: syz
[  178.638917][ T5862] usb 7-1: Manufacturer: syz
[  178.644774][ T5862] usb 7-1: SerialNumber: syz
[  178.659887][ T5862] usb 7-1: config 0 descriptor??
[  178.674914][ T5862] smsc75xx v1.0.0
[  178.686601][   T29] audit: type=1400 audit(1737443849.682:503): avc:  denied  { create } for  pid=7700 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  178.720953][   T29] audit: type=1400 audit(1737443849.702:504): avc:  denied  { write } for  pid=7700 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  179.725949][   T29] audit: type=1400 audit(1737443850.712:505): avc:  denied  { connect } for  pid=7717 comm="syz.4.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  180.123960][ T5862] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  180.561666][ T5862] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  180.600511][ T5862] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  180.653695][ T5862] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  180.717758][ T5862] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  180.812062][ T5862] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  180.869789][ T5862] usb 7-1: USB disconnect, device number 3
[  180.997752][   T29] audit: type=1400 audit(1737443851.992:506): avc:  denied  { create } for  pid=7738 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  181.073666][ T5818] Bluetooth: hci3: command 0x0406 tx timeout
[  181.399634][ T7757] warning: `syz.1.411' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  182.996455][ T7786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.015511][ T7786] syzkaller0: entered promiscuous mode
[  183.021105][ T7786] syzkaller0: entered allmulticast mode
[  183.835179][ T7786] tipc: Resetting bearer <eth:syzkaller0>
[  183.969159][ T7782] tipc: Resetting bearer <eth:syzkaller0>
[  184.127558][ T7782] tipc: Disabling bearer <eth:syzkaller0>
[  185.555005][   T29] audit: type=1400 audit(1737443856.552:507): avc:  denied  { mount } for  pid=7838 comm="syz.5.426" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  185.759292][   T29] audit: type=1400 audit(1737443856.582:508): avc:  denied  { watch } for  pid=7838 comm="syz.5.426" path="/57/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  186.252586][ T7840] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.699358][ T7840] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.937726][ T7840] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.287876][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803430a400: rx timeout, send abort
[  187.298271][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803430b800: rx timeout, send abort
[  187.306660][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803430a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  187.323299][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803430b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  187.512467][ T7840] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.841207][ T7840] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.937252][ T7840] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.037342][ T7840] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.079308][ T7840] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.201293][   T29] audit: type=1400 audit(1737443859.192:509): avc:  denied  { unmount } for  pid=6258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  188.585526][   T29] audit: type=1400 audit(1737443859.582:510): avc:  denied  { bind } for  pid=7884 comm="syz.5.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  189.204174][ T7898] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.765485][ T7905] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  190.848548][   T29] audit: type=1400 audit(1737443861.842:511): avc:  denied  { mount } for  pid=7919 comm="syz.6.443" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  190.865941][ T7921] netlink: 40 bytes leftover after parsing attributes in process `syz.6.443'.
[  190.995296][ T7931] devtmpfs: Unknown parameter 'norecovery'
[  190.998978][   T29] audit: type=1400 audit(1737443861.992:512): avc:  denied  { getopt } for  pid=7924 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  193.085737][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'.
[  194.361395][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.370085][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  196.662064][   T29] audit: type=1400 audit(1737443867.632:513): avc:  denied  { append } for  pid=8007 comm="syz.1.462" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  197.074204][ T8006] block device autoloading is deprecated and will be removed.
[  199.123945][ T8048] netlink: 288 bytes leftover after parsing attributes in process `syz.1.473'.
[  199.134473][ T8048] unsupported nlmsg_type 40
[  199.164619][   T29] audit: type=1400 audit(1737443870.162:514): avc:  denied  { create } for  pid=8045 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  199.386105][ T8053] ieee802154 phy0 wpan0: encryption failed: -22
[  199.397746][   T29] audit: type=1400 audit(1737443870.382:515): avc:  denied  { write } for  pid=8052 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  201.061725][   T29] audit: type=1400 audit(1737443872.052:516): avc:  denied  { create } for  pid=8072 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  201.137117][   T29] audit: type=1400 audit(1737443872.092:517): avc:  denied  { bind } for  pid=8072 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  201.217843][   T29] audit: type=1400 audit(1737443872.092:518): avc:  denied  { write } for  pid=8072 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  201.266328][   T29] audit: type=1400 audit(1737443872.162:519): avc:  denied  { getopt } for  pid=8072 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  203.029497][   T29] audit: type=1400 audit(1737443874.012:520): avc:  denied  { map } for  pid=8097 comm="syz.0.487" path="socket:[16359]" dev="sockfs" ino=16359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  203.071607][   T29] audit: type=1400 audit(1737443874.012:521): avc:  denied  { read accept } for  pid=8097 comm="syz.0.487" path="socket:[16359]" dev="sockfs" ino=16359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  203.193342][ T8101] syz.1.489 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  203.991368][ T8104] syz.0.490 (8104): drop_caches: 2
[  203.997897][ T8104] syz.0.490 (8104): drop_caches: 2
[  204.584657][   T29] audit: type=1400 audit(1737443875.582:522): avc:  denied  { write } for  pid=8109 comm="syz.0.492" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  204.764187][   T29] audit: type=1400 audit(1737443875.582:523): avc:  denied  { add_name } for  pid=8109 comm="syz.0.492" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  204.901684][   T29] audit: type=1400 audit(1737443875.582:524): avc:  denied  { create } for  pid=8109 comm="syz.0.492" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  205.629460][   T29] audit: type=1400 audit(1737443875.582:525): avc:  denied  { associate } for  pid=8109 comm="syz.0.492" name="cpuacct.usage_percpu_user" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  206.047596][ T8126] netlink: 'syz.1.496': attribute type 4 has an invalid length.
[  206.644439][ T8131] netlink: 'syz.1.496': attribute type 4 has an invalid length.
[  207.747517][   T29] audit: type=1400 audit(1737443878.732:526): avc:  denied  { ioctl } for  pid=8133 comm="syz.0.498" path="socket:[17449]" dev="sockfs" ino=17449 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  208.691070][   T29] audit: type=1400 audit(1737443879.682:527): avc:  denied  { bind } for  pid=8146 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  208.957953][ T8156] No such timeout policy "syz1"
[  209.331546][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  209.501962][   T29] audit: type=1400 audit(1737443880.482:528): avc:  denied  { setattr } for  pid=8158 comm="syz.4.506" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  209.510483][ T8160] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  209.535850][ T8160] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  209.544471][ T8160] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  209.572353][ T5893] usb 7-1: Using ep0 maxpacket: 32
[  209.653510][ T8144] tc_dump_action: action bad kind
[  209.837583][ T5893] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  209.853041][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.903404][ T5893] usb 7-1: config 0 descriptor??
[  209.922841][ T5893] gspca_main: sunplus-2.14.0 probing 041e:400b
[  211.250685][   T29] audit: type=1400 audit(1737443882.232:529): avc:  denied  { write } for  pid=8152 comm="syz.6.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  211.295737][ T5893] gspca_sunplus: reg_r err -71
[  211.300601][ T5893] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  211.364561][ T5893] usb 7-1: USB disconnect, device number 4
[  212.701620][   T29] audit: type=1400 audit(1737443883.162:530): avc:  denied  { write } for  pid=8174 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  214.851535][   T29] audit: type=1400 audit(1737443885.842:531): avc:  denied  { getopt } for  pid=8195 comm="syz.6.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  215.051697][    T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  215.062686][ T8210] netlink: 'syz.4.521': attribute type 11 has an invalid length.
[  215.105180][ T8210] veth0_vlan: entered allmulticast mode
[  215.149107][ T8210] ªªªªªª: renamed from vlan0
[  215.184094][ T8212] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  215.211691][    T8] usb 6-1: Using ep0 maxpacket: 8
[  215.238903][    T8] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  215.260266][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.283657][    T8] usb 6-1: config 0 descriptor??
[  215.518321][ T5865] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  216.251610][ T5865] usb 5-1: Using ep0 maxpacket: 16
[  217.138435][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  217.172108][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.543126][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.656328][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  217.669243][ T5865] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  217.678346][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.708800][ T5865] usb 5-1: config 0 descriptor??
[  217.881048][ T5862] libceph: connect (1)[c::]:6789 error -101
[  217.911593][ T5862] libceph: mon0 (1)[c::]:6789 connect error
[  217.937707][ T5862] libceph: connect (1)[c::]:6789 error -101
[  217.962816][ T5862] libceph: mon0 (1)[c::]:6789 connect error
[  218.039540][ T8236] ceph: No mds server is up or the cluster is laggy
[  218.137166][ T5865] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  218.167107][ T5865] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  218.174510][ T5865] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  218.184251][ T5865] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[  218.202323][ T5865] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  218.214562][ T5865] microsoft 0003:045E:07DA.0002: no inputs found
[  218.220922][ T5865] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[  218.316834][   T29] audit: type=1400 audit(1737443889.312:532): avc:  denied  { create } for  pid=8252 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  218.343637][ T5893] usb 5-1: USB disconnect, device number 4
[  220.977384][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  221.949128][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  221.960403][    T8] asix 6-1:0.0: probe with driver asix failed with error -71
[  221.970778][    T8] usb 6-1: USB disconnect, device number 4
[  224.244628][ T8313] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  224.246648][    T8] IPVS: starting estimator thread 0...
[  224.382911][ T8315] IPVS: using max 30 ests per chain, 72000 per kthread
[  225.380808][   T29] audit: type=1400 audit(1737443896.372:533): avc:  denied  { write } for  pid=8325 comm="syz.5.554" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  232.507755][ T8406] block nbd1: shutting down sockets
[  232.784152][   T29] audit: type=1400 audit(1737443903.782:534): avc:  denied  { create } for  pid=8412 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  234.185090][   T29] audit: type=1400 audit(1737443905.182:535): avc:  denied  { mounton } for  pid=8422 comm="syz.4.580" path="mnt:[4026532810]" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  237.240943][   T29] audit: type=1400 audit(1737443908.172:536): avc:  denied  { write } for  pid=8442 comm="syz.4.586" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  238.648149][   T29] audit: type=1400 audit(1737443908.762:537): avc:  denied  { read } for  pid=8448 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  238.818118][ T8457] nfs: Unknown parameter 'ntext'
[  238.951370][ T8459] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.384213][   T29] audit: type=1400 audit(1737443911.382:538): avc:  denied  { wake_alarm } for  pid=8458 comm="syz.0.591" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  242.804290][ T8498] netlink: 'syz.0.601': attribute type 1 has an invalid length.
[  242.816207][ T8478] [U] 
[  242.819676][ T8478] [U] 
[  242.822698][ T8478] [U] ŒB˜-LRJ[ÉÍĆÈÍÑœ6Š}Ä%Ü4̾	­¦H‚�ÐÛ@K„Ì-�Y•LE‹÷U¾Ÿ¡–ÏÚÁ@‡ŸF´¡§%PEZE,™ÍŽ9F�Ë*À
[  242.833058][ T8478] [U] CW¯™ÇÇ* Þ9JÁQØ#EØËSWÐÁÔC±ÏV·1žÂÛÏ!È	�žGPœX
[  242.839874][ T8478] [U] N%Ì9ÙÞÖC…_¹ÁNÊ…ÇBC‰…$�ÞÔ4Þ(�²ž
[  242.845741][ T8478] [U] Hª QÄØ›Tµ¦OÂR‚I#ıËTNBS_RЬ‰¡¾Æ«°
:‰Ø€–ɦT‘ȯËÙ0¿™’ÚÃËŒÃ�WÚ™_[HN%
[  242.854642][ T8478] [U] Ï £ÜÙÛ4‡RЛŸÛŠ<)Ü6JG؃¬ÍKÉ^�R\
[  242.860449][ T8478] [U] 7¼R:€J37Ø
[  242.864715][ T8478] [U] YÛPÜ<�ÅÔ…ÚU’“
H¦3Æ°-Î̤„Ø\PQBXÕ!Q6ÃÜÆSO'}­Ï[ÉÛÀP5OÉ>€DÊÅÖŽYÞJ>|H0=ÖÔ·TžXÈÒZÔY֦ʢ
Äš4ª‡IÇ¢À5AZËÑ~ZAÂ~ÝKÝ^�TGžSÍJ‹I:Á¶¬Ž¥OD!M2KÃW§¬R>ƈΗKC?X…8 ¥HÇÒ*©@QEÛ»ÚU	½À.J9�È“~´{—Á`²ÍÃ'R)Ó-ÀǬŸÎ=5­ÝÖ�JLY ÉCÄBˆØ;+LP�°,FØN‡‚ÁÁYÎ%¿3†P¨ÈÕ&Ç)­Ó][œÈ‹4ÃL»Ã¶£„!’J�>	ÔÎ
[  242.891124][ T8478] [U] Ø.”CšÖ¯·ÏEJÓJ
Û@œK’JÁ605RXUÑTTµO‹&�XÐOº�Ö•§\®‹&…¬°¡ÙN
%Y‹‘ÁÐ17¿6`¬ÌI‚W
[  242.901351][ T8478] [U] ÏØÇM<@NºÙKJ(ÝÂ6)Ô)ÎVÌÕLR¢
[  242.907483][ T8478] [U] >YGÐ¤Zª?Œ¹`–O­MÉXØ�Ó‡Ø"Á¨¹š·¢9+¼¾DEÝÁ¹{“ÅŒ$~BÜYDšUME«!XÌÝ›A¹£AUÇ}J„¿Â£2N%MBËQÑÉÄ
[  242.918016][ T8478] [U] ÞWV×ÏÙW‹@HZ�=¦(ƒ„Eˆ‡JÉ~ÈOS@žËBÈHª:"®ÃÁ‡!ƒJIÖÄUJ=Á¥)ÎŽU¤Å	G×ØÐÚÔ–=Y=ÊKÊADËÎ
R†¨¹¹Á:=ÉSÖÙ—�AX¾¢ÛX
[  242.930970][ T8478] [U] BIÞ™E¿„}¼ETØ@±3Ì(Ü ¿¥¨�V¤žÀÐ{™Îº©’~ÐUK+Þ{3T˜Ú$Æ».ÃN[8S‹Ê‡šº""ÒÊ”̺„]RÏGÝ5
[  242.940602][ T8478] [U] V²{Õ¨ÓVNB>DM«·T•¨�QÂTÀ
ÃÌÚÀ
[  242.946008][ T8478] [U] GÁ*|Ó9ÙºŸÅ†¸
[  242.949888][ T8478] [U] G´ÆMIUÔE!ÞÕT
ÏŒ*ß�…8A7I5‚-|¤Ï6LK
[  242.955993][ T8478] [U] NÅ«—Dª²Ë	ÂÌS}R�½BÃÅYºW<»ÂÊÈC‚ ÓÆÐH°\ÓFÍÈD.›Ã÷®˜FŒPK¸Ï‹,ªÎ‚C—Úœ.Â;
¤ÊEYºÝK÷Æ]Z>‘ÚIÃÁ�ÓOQ&
O«’�¼”½,PÙÖ]–,7Í›�§UÚÑÝI­­Â
[  242.971034][ T8478] [U] ÀÛ	$ÄL÷U2Ê¿F_3•+|NWÕµZÓEÇ—ÒP1W~·Ö�N‹(§OÍ�±¸8ÒDÏ	£SÆÙCDÊ®FÂ��65ÖZÜGÃR“Þ°Ú{ÁÒÕT“·ÈK£"@£ÆÐÔÈ:Á5}GÝB—©DѸ¦ƒ\K”
[  242.985253][ T8478] [U] ÈÐÙ‡YÓ…ÒŸ8Î4Œ4N<;
[  242.990709][ T8478] [U] Ã�ÔU†IŽ7X#E¤4VML‚ÔÈ‹¬œšGÍ””A³©)-‡ÌÌ(¿NÌ—N–¢ÈÖL#Ã)׌SU�É6�
[  242.999855][ T8478] [U] )Æ<�ÈE?ÊA­¤Uܤ—9ˆ%]²ÔDCCŽE+L<'T�¬1Â�KÈ…œ·3ÅÜ.É»Á€ÊÆWS¨ÉÐÀ×ÐZY­Ï¼9I>ÌÒÑØ
]ÞÈœ}{”
/`ÌÜ¿5'ÙE–	41ßTNAX߿ʯÇÏ­Q�ÌëI TÒ%ÒGÐ7L~·BÝS
[  243.015194][ T8478] [U] £Í¢ÄÅ¢
[  243.019065][ T8478] [U] ZÓ‘UÝĪÕ4¬©&Ë™ÃE~Ý8EÁσ1´¥L{ȨGV‰Y$PN�O4MËÈÓ*FÓ`ÂÎA€‰T×ÙM0?*I›#;ÁѤ+4V
’¹ÛGA
ØݬÆ%H»·[›A�YX)LG]F ‚ÏHÂ|ÞZV²E­/Ëϧ1Ò7Ǭ³-ǽÈÍHœO+¯…^È)8™&E£@A8GË…Œ-ÈWR»�SÃÜ-V–-Ò±ÌO>ÆÅ�Q�œÄ#9¨UA„
[  243.101363][ T8500] 8021q: adding VLAN 0 to HW filter on device bond1
[  243.464617][ T8498] vlan2: entered promiscuous mode
[  243.495221][ T8498] bond1: entered promiscuous mode
[  244.828565][ T8498] bond1: left promiscuous mode
[  244.990902][   T29] audit: type=1326 audit(1737443915.982:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.121554][   T29] audit: type=1326 audit(1737443915.982:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.231512][   T29] audit: type=1326 audit(1737443916.072:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c9b84690 code=0x7ffc0000
[  245.306997][   T29] audit: type=1326 audit(1737443916.072:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52c9b84690 code=0x7ffc0000
[  245.361761][   T29] audit: type=1326 audit(1737443916.072:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.444725][ T8522] xt_bpf: check failed: parse error
[  245.451558][   T29] audit: type=1326 audit(1737443916.072:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.506363][   T29] audit: type=1326 audit(1737443916.072:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.570406][   T29] audit: type=1326 audit(1737443916.072:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.710168][   T29] audit: type=1326 audit(1737443916.072:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.780904][   T29] audit: type=1326 audit(1737443916.072:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.6.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52c9b85d29 code=0x7ffc0000
[  245.832007][ T8531] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  245.839516][ T8531] overlayfs: failed to set xattr on upper
[  245.851116][ T8531] overlayfs: ...falling back to redirect_dir=nofollow.
[  245.863174][ T8531] overlayfs: ...falling back to index=off.
[  245.922274][ T8531] overlayfs: ...falling back to uuid=null.
[  246.771572][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  246.971620][ T5865] usb 5-1: Using ep0 maxpacket: 8
[  246.978276][ T5865] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  246.991506][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.025852][ T8545] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  247.033201][ T5865] usb 5-1: config 0 descriptor??
[  247.201749][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  247.491705][ T5893] usb 2-1: Using ep0 maxpacket: 16
[  247.498360][ T5893] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  247.507088][ T5893] usb 2-1: config 0 has no interface number 0
[  247.523969][ T5893] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  247.589454][ T5893] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  247.619449][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.682881][ T5893] usb 2-1: Product: syz
[  247.721217][ T5893] usb 2-1: Manufacturer: syz
[  247.786444][ T5893] usb 2-1: SerialNumber: syz
[  247.986177][ T5893] usb 2-1: config 0 descriptor??
[  248.493079][ T5893] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0
[  248.499939][ T5893] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5
[  249.042686][ T5893] usb 2-1: USB disconnect, device number 2
[  249.524112][ T5865] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  249.577814][ T5865] asix 5-1:0.0: probe with driver asix failed with error -71
[  249.804914][ T5865] usb 5-1: USB disconnect, device number 5
[  250.030339][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.158893][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.211531][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  250.279787][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.381520][   T25] usb 6-1: Using ep0 maxpacket: 32
[  250.397192][   T25] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  250.415972][   T25] usb 6-1: config 0 has no interface number 0
[  250.444365][   T25] usb 6-1: config 0 interface 184 has no altsetting 0
[  250.466230][   T25] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  250.487700][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.511611][   T25] usb 6-1: Product: syz
[  250.515817][   T25] usb 6-1: Manufacturer: syz
[  250.538216][   T25] usb 6-1: SerialNumber: syz
[  250.597902][   T25] usb 6-1: config 0 descriptor??
[  250.632795][   T25] smsc75xx v1.0.0
[  250.732204][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.747043][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.756079][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.772090][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.781181][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  250.788500][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.836488][ T8595] binder_alloc: 8592: binder_alloc_buf, no vma
[  250.841924][   T29] kauditd_printk_skb: 35 callbacks suppressed
[  250.841939][   T29] audit: type=1400 audit(1737443921.832:584): avc:  denied  { map } for  pid=8596 comm="syz.0.636" path="socket:[18369]" dev="sockfs" ino=18369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  250.872518][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.344307][   T12] bridge_slave_1: left allmulticast mode
[  251.381458][   T12] bridge_slave_1: left promiscuous mode
[  251.411648][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.430919][   T12] bridge_slave_0: left allmulticast mode
[  251.441819][   T12] bridge_slave_0: left promiscuous mode
[  251.454351][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.512220][ T5862] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  251.722187][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  251.814364][ T5862] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  251.935522][ T5862] usb 5-1: config 0 has no interface number 0
[  251.951870][ T5862] usb 5-1: config 0 interface 184 has no altsetting 0
[  251.961365][ T5862] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  251.977302][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.007837][ T5862] usb 5-1: Product: syz
[  252.119679][   T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  252.129717][ T5862] usb 5-1: Manufacturer: syz
[  252.135084][ T5862] usb 5-1: SerialNumber: syz
[  252.142662][ T5862] usb 5-1: config 0 descriptor??
[  252.151971][ T5862] smsc75xx v1.0.0
[  252.155658][ T5862] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  252.166102][ T5862] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  252.769553][ T5893] usb 5-1: USB disconnect, device number 6
[  252.795026][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.808119][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.817987][   T12] bond0 (unregistering): Released all slaves
[  252.831880][ T5128] Bluetooth: hci0: command tx timeout
[  252.871376][   T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  252.883057][ T8593] chnl_net:caif_netlink_parms(): no params data found
[  252.920435][ T6843] wlan1: Trigger new scan to find an IBSS to join
[  252.937051][   T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  252.950724][   T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  252.961294][   T25] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  252.982093][   T25] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  253.004221][   T25] usb 6-1: USB disconnect, device number 5
[  253.594184][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.614050][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.673165][ T8593] bridge_slave_0: entered allmulticast mode
[  253.700518][   T29] audit: type=1400 audit(2000000002.179:585): avc:  denied  { remount } for  pid=8657 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  253.728905][ T8593] bridge_slave_0: entered promiscuous mode
[  253.756902][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.775767][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.797659][ T8593] bridge_slave_1: entered allmulticast mode
[  253.816617][ T8593] bridge_slave_1: entered promiscuous mode
[  253.927223][   T12] hsr_slave_0: left promiscuous mode
[  253.938404][   T12] hsr_slave_1: left promiscuous mode
[  253.950200][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.963000][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.971112][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.980849][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.013994][   T12] veth1_macvtap: left promiscuous mode
[  254.019727][   T12] veth0_macvtap: left promiscuous mode
[  254.041340][   T12] veth1_vlan: left promiscuous mode
[  254.052542][   T12] veth0_vlan: left promiscuous mode
[  255.061867][ T5128] Bluetooth: hci0: command tx timeout
[  255.508227][   T29] audit: type=1400 audit(2000000003.979:586): avc:  denied  { listen } for  pid=8679 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  255.530777][    C1] vkms_vblank_simulate: vblank timer overrun
[  255.610794][   T29] audit: type=1400 audit(2000000003.979:587): avc:  denied  { accept } for  pid=8679 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  255.630129][    C1] vkms_vblank_simulate: vblank timer overrun
[  255.800407][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.815411][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  255.955991][ T6843] wlan1: Trigger new scan to find an IBSS to join
[  257.236516][ T5128] Bluetooth: hci0: command tx timeout
[  257.644074][ T1151] wlan1: Creating new IBSS network, BSSID ba:7e:81:eb:cc:04
[  259.321624][ T5128] Bluetooth: hci0: command tx timeout
[  259.679644][   T12] team0 (unregistering): Port device team_slave_1 removed
[  259.773105][   T12] team0 (unregistering): Port device team_slave_0 removed
[  260.883987][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.896216][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.908619][ T8698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.926741][ T8704] tipc: Disabling bearer <eth:syzkaller0>
[  261.132593][ T8593] team0: Port device team_slave_0 added
[  261.166530][ T8593] team0: Port device team_slave_1 added
[  261.242649][   T29] audit: type=1804 audit(2000000009.719:588): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.663" name="/newroot/100/bus/file0" dev="overlay" ino=557 res=1 errno=0
[  261.353159][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.362717][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.484183][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.677560][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.689726][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.721004][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.847027][ T8757] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  261.859125][ T8593] hsr_slave_0: entered promiscuous mode
[  261.877255][ T8593] hsr_slave_1: entered promiscuous mode
[  261.889273][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.923640][ T8593] Cannot create hsr debugfs directory
[  261.963182][ T8764] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  261.996284][ T8757] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  262.034152][   T29] audit: type=1400 audit(2000000010.519:589): avc:  denied  { accept } for  pid=8768 comm="syz.4.668" path=2F3135352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  262.097277][ T8757] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  262.114064][ T8757] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  262.149647][ T8757] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  262.292156][ T8757] netlink: 'syz.0.667': attribute type 29 has an invalid length.
[  263.433525][   T29] audit: type=1400 audit(2000000011.909:590): avc:  denied  { bind } for  pid=8777 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  264.306900][ T8781] netlink: 124 bytes leftover after parsing attributes in process `syz.1.672'.
[  265.150608][ T8593] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  265.208701][ T8593] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  265.271575][ T8593] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  265.295706][ T8593] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  265.534658][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.563941][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  265.580420][ T8593] 8021q: adding VLAN 0 to HW filter on device team0
[  265.612743][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.619887][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.677314][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.684515][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.003526][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.051753][    T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  266.060860][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.112942][ T5818] Bluetooth: hci0: command 0x0405 tx timeout
[  266.116350][    T8] usb 5-1: config 0 descriptor??
[  266.145803][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[  266.258066][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.579760][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[  266.604354][    T8] pwc: recv_control_msg error -32 req 02 val 2700
[  266.627158][    T8] pwc: recv_control_msg error -32 req 02 val 2c00
[  266.644345][    T8] pwc: recv_control_msg error -32 req 04 val 1000
[  266.655891][    T8] pwc: recv_control_msg error -32 req 04 val 1300
[  266.684942][    T8] pwc: recv_control_msg error -32 req 04 val 1400
[  267.326967][    T8] pwc: recv_control_msg error -32 req 02 val 2000
[  267.361528][    T8] pwc: recv_control_msg error -32 req 02 val 2100
[  267.391551][    T8] pwc: recv_control_msg error -32 req 04 val 1500
[  267.534142][ T8593] veth0_vlan: entered promiscuous mode
[  267.662966][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[  267.853205][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[  268.045964][ T8593] veth1_vlan: entered promiscuous mode
[  268.053368][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[  268.179910][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[  268.200388][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[  268.208624][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[  268.952780][    T8] pwc: Registered as video103.
[  268.960761][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  268.977304][    T8] usb 5-1: USB disconnect, device number 7
[  268.986488][ T8593] veth0_macvtap: entered promiscuous mode
[  269.033196][ T8593] veth1_macvtap: entered promiscuous mode
[  269.076540][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.130946][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.162537][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.234602][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.366527][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.424861][ T1152] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  269.536307][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.651158][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.693651][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.731549][ T1152] usb 6-1: Using ep0 maxpacket: 16
[  269.743659][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.772489][ T1152] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  269.908303][ T1152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.221512][ T1152] usb 6-1: Product: syz
[  270.226903][ T1152] usb 6-1: Manufacturer: syz
[  270.235953][ T1152] usb 6-1: SerialNumber: syz
[  270.246967][ T1152] usb 6-1: config 0 descriptor??
[  270.306104][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.485596][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.501532][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.534518][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.560379][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.854917][   T29] audit: type=1400 audit(2000000019.089:591): avc:  denied  { write } for  pid=8872 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  271.128409][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.138610][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.152006][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.167334][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.177043][ T1152] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  271.189179][ T1151] usb 6-1: Failed to submit usb control message: -71
[  271.204122][ T1151] usb 6-1: unable to send the bmi data to the device: -71
[  271.218269][ T1152] usb 6-1: USB disconnect, device number 6
[  271.231017][ T1151] usb 6-1: unable to get target info from device
[  271.258646][ T8593] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.277557][ T1151] usb 6-1: could not get target info (-71)
[  271.293206][ T1151] usb 6-1: could not probe fw (-71)
[  271.316710][ T8593] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.331488][ T8593] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.347297][ T8593] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.705973][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.743413][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.820118][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.853280][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  271.864452][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.914549][   T29] audit: type=1400 audit(2000000020.389:592): avc:  denied  { read } for  pid=8880 comm="syz.4.690" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  271.997826][   T29] audit: type=1400 audit(2000000020.389:593): avc:  denied  { open } for  pid=8880 comm="syz.4.690" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  272.080057][   T29] audit: type=1400 audit(2000000020.519:594): avc:  denied  { setopt } for  pid=8880 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  272.120898][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.189484][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.236235][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.274015][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.393599][ T8892] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  272.412146][ T8892] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  272.431838][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.451986][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.481803][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.519581][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.548578][ T8887] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  272.568874][ T8892] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  272.659133][ T8892] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  273.041092][ T8892] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  273.114725][ T8892] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  273.170538][ T8892] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  273.207780][ T8892] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  273.300058][ T8892] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  273.631492][    T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  273.838961][    T8] usb 8-1: config 3 has an invalid interface number: 251 but max is 0
[  273.862054][    T8] usb 8-1: config 3 has no interface number 0
[  273.924052][ T8912] /dev/sg0: Can't lookup blockdev
[  273.932193][    T8] usb 8-1: config 3 interface 251 has no altsetting 0
[  273.960914][    T8] usb 8-1: New USB device found, idVendor=0856, idProduct=ac19, bcdDevice=77.78
[  273.991545][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.024972][    T8] usb 8-1: Product: syz
[  274.029172][    T8] usb 8-1: Manufacturer: syz
[  274.063766][    T8] usb 8-1: SerialNumber: syz
[  274.191618][ T5128] Bluetooth: hci1: command 0x0406 tx timeout
[  274.591577][ T5128] Bluetooth: hci3: command 0x0406 tx timeout
[  274.661850][    T8] ftdi_sio 8-1:3.251: FTDI USB Serial Device converter detected
[  274.670691][    T8] ftdi_sio ttyUSB0: unknown device type: 0x7778
[  274.814489][ T8933] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  274.822482][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.697'.
[  274.896028][    T8] usb 8-1: USB disconnect, device number 2
[  275.081649][ T5128] Bluetooth: hci2: command 0x0406 tx timeout
[  275.219322][    T8] ftdi_sio 8-1:3.251: device disconnected
[  275.231832][ T5128] Bluetooth: hci0: command 0x0405 tx timeout
[  276.273456][ T5128] Bluetooth: hci1: command 0x0406 tx timeout
[  276.703486][ T5128] Bluetooth: hci3: command 0x0406 tx timeout
[  277.151539][ T5128] Bluetooth: hci2: command 0x0406 tx timeout
[  277.311827][ T5128] Bluetooth: hci0: command 0x0405 tx timeout
[  279.401624][ T5128] Bluetooth: hci0: command 0x0405 tx timeout
[  280.031533][   T29] audit: type=1400 audit(2000000028.509:595): avc:  denied  { read } for  pid=8990 comm="syz.1.707" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  280.161495][   T29] audit: type=1400 audit(2000000028.509:596): avc:  denied  { open } for  pid=8990 comm="syz.1.707" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  281.723735][ T9044] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  281.732361][ T9044] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  281.744252][ T9044] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  281.753933][ T9040] block nbd5: shutting down sockets
[  282.335656][ T9055] vlan2: entered promiscuous mode
[  282.341091][ T9055] vlan2: entered allmulticast mode
[  282.360812][ T9055] hsr_slave_1: entered allmulticast mode
[  283.492261][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'.
[  284.624004][   T29] audit: type=1400 audit(2000000033.069:597): avc:  denied  { connect } for  pid=9088 comm="syz.7.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  284.752205][ T9055] hsr_slave_1 (unregistering): left allmulticast mode
[  284.867009][ T9055] hsr_slave_1 (unregistering): left promiscuous mode
[  285.083040][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.155885][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.189689][ T9086] tc_dump_action: action bad kind
[  285.203750][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.090637][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'.
[  287.599173][ T9145] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  287.653793][ T9145] ptrace attach of ""[9146] was attempted by "./syz-executor exec"[9145]
[  287.745720][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  287.756576][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.741'.
[  289.171808][ T5862] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  289.721867][ T5862] usb 2-1: Using ep0 maxpacket: 8
[  289.873147][ T5862] usb 2-1: config 0 has an invalid interface number: 33 but max is 1
[  290.081751][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.093872][ T5862] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  290.103224][ T5862] usb 2-1: config 0 has no interface number 0
[  290.109935][ T5862] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  290.124865][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  290.134414][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.214475][ T5862] usb 2-1: Product: syz
[  290.254759][ T5862] usb 2-1: Manufacturer: syz
[  290.281629][ T5862] usb 2-1: SerialNumber: syz
[  290.309922][ T5862] usb 2-1: config 0 descriptor??
[  290.396717][ T5862] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  290.654225][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.733764][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.832731][ T2324] pvrusb2: Invalid write control endpoint
[  290.869812][ T5862] usb 2-1: USB disconnect, device number 3
[  290.880935][ T9202] TCP: out of memory -- consider tuning tcp_mem
[  290.891163][ T2324] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  290.942080][ T2324] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  291.540007][   T29] audit: type=1400 audit(2000000040.019:598): avc:  denied  { append } for  pid=9215 comm="syz.4.754" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.675077][ T9216] nvme_fabrics: missing parameter 'transport=%s'
[  291.681846][ T9216] nvme_fabrics: missing parameter 'nqn=%s'
[  294.606786][   T29] audit: type=1326 audit(2000000043.089:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9241 comm="syz.4.760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f660e985d29 code=0x0
[  294.704844][ T9255] openvswitch: netlink: Flow actions attr not present in new flow.
[  295.948285][ T9275] syzkaller0: entered promiscuous mode
[  296.011444][ T9277] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  296.475790][ T9275] syzkaller0: entered allmulticast mode
[  296.952499][   T29] audit: type=1400 audit(2000000045.439:600): avc:  denied  { module_load } for  pid=9283 comm="syz.5.768" path="/sys/kernel/notes" dev="sysfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  296.952586][ T9284] Invalid ELF header magic: != ELF
[  300.377044][ T9323] input: syz1 as /devices/virtual/input/input13
[  300.984635][ T9331] Bluetooth: MGMT ver 1.23
[  301.045630][ T5128] Bluetooth: hci3: unexpected event for opcode 0x2043
[  301.744757][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'.
[  305.696937][ T5128] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  305.742332][ T5128] Bluetooth: hci3: Injecting HCI hardware error event
[  305.776044][ T5818] Bluetooth: hci3: hardware error 0x00
[  306.353632][   T29] audit: type=1400 audit(2000000054.839:601): avc:  denied  { write } for  pid=9367 comm="syz.1.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  307.733968][ T9375] bridge0: port 3(erspan0) entered blocking state
[  307.753676][ T9375] bridge0: port 3(erspan0) entered disabled state
[  307.788479][ T9375] erspan0: entered allmulticast mode
[  307.794106][ T5818] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  307.830314][ T9375] erspan0: entered promiscuous mode
[  307.842774][ T9375] bridge0: port 3(erspan0) entered blocking state
[  307.849291][ T9375] bridge0: port 3(erspan0) entered forwarding state
[  308.187612][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.797'.
[  308.229274][   T29] audit: type=1400 audit(2000000056.709:602): avc:  denied  { create } for  pid=9380 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  308.296107][   T29] audit: type=1400 audit(2000000056.739:603): avc:  denied  { setopt } for  pid=9380 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  308.673235][ T5916] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  308.846635][ T5916] usb 8-1: Using ep0 maxpacket: 8
[  308.875234][ T5916] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  308.900721][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  308.919487][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  308.940343][ T5818] Bluetooth: hci2: unexpected event for opcode 0x0c1a
[  308.958665][ T5916] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  308.996784][ T5916] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  309.026691][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.076479][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'.
[  309.257420][ T5916] usb 8-1: GET_CAPABILITIES returned 0
[  309.263094][ T5916] usbtmc 8-1:16.0: can't read capabilities
[  310.065146][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.081721][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.121120][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  310.177795][ T5916] usb 8-1: USB disconnect, device number 3
[  312.275448][   T29] audit: type=1400 audit(2000000060.739:604): avc:  denied  { getopt } for  pid=9464 comm="syz.7.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  313.302907][ T9483] bridge0: port 3(hsr_slave_1) entered blocking state
[  313.372230][ T9483] bridge0: port 3(hsr_slave_1) entered disabled state
[  313.387359][ T9483] hsr_slave_1: entered allmulticast mode
[  313.399782][ T9483] hsr_slave_1: left allmulticast mode
[  313.406201][ T9476] netlink: 'syz.7.808': attribute type 2 has an invalid length.
[  315.053749][ T9503] overlayfs: overlapping lowerdir path
[  315.493880][   T29] audit: type=1400 audit(2000000063.939:605): avc:  denied  { accept } for  pid=9499 comm="syz.4.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  317.352028][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.358800][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.547186][ T9530] binder: 9529:9530 ioctl c0306201 20000bc0 returned -14
[  319.597656][ T9555] netlink: 96 bytes leftover after parsing attributes in process `syz.4.823'.
[  320.097297][ T6386] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  320.667574][ T9562] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  320.969477][   T29] audit: type=1400 audit(2000000069.439:606): avc:  denied  { watch_mount } for  pid=9563 comm="syz.7.826" path="/22" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  321.058727][   T29] audit: type=1400 audit(2000000069.439:607): avc:  denied  { watch_reads } for  pid=9563 comm="syz.7.826" path="/22" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  321.539472][   T29] audit: type=1400 audit(2000000070.009:608): avc:  denied  { write } for  pid=9583 comm="syz.1.830" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  322.841913][ T5818] Bluetooth: hci0: unexpected event for opcode 0x2028
[  323.097268][   T29] audit: type=1326 audit(2000000071.579:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  323.151878][   T29] audit: type=1326 audit(2000000071.579:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  323.224159][   T29] audit: type=1326 audit(2000000071.659:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  324.004536][   T29] audit: type=1326 audit(2000000071.659:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  324.072795][   T29] audit: type=1326 audit(2000000071.659:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  324.179794][   T29] audit: type=1326 audit(2000000071.679:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  324.233965][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'.
[  324.741912][   T29] audit: type=1326 audit(2000000071.679:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.1.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03fd85d29 code=0x7ffc0000
[  325.986242][ T5818] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[  326.914178][ T9644] batman_adv: batadv0: Adding interface: dummy0
[  326.920666][ T9644] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.946626][ T9644] batman_adv: batadv0: Interface activated: dummy0
[  326.963166][ T9644] batadv0: mtu less than device minimum
[  326.970702][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  326.983018][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  326.995091][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.007242][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.019393][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.031549][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.043666][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.055738][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.067043][ T9644] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.627610][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  327.627780][   T29] audit: type=1400 audit(2000000075.719:644): avc:  denied  { read } for  pid=9641 comm="syz.0.848" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  328.034610][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  328.525173][   T29] audit: type=1400 audit(2000000076.929:645): avc:  denied  { name_connect } for  pid=9656 comm="syz.7.853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  328.685748][ T9654] pimreg: entered allmulticast mode
[  329.216904][   T29] audit: type=1326 audit(2000000077.699:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9680 comm="syz.1.856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe03fd85d29 code=0x0
[  333.823809][   T29] audit: type=1400 audit(2000000082.279:647): avc:  denied  { append } for  pid=9716 comm="syz.7.866" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  334.364959][   T29] audit: type=1400 audit(2000000082.849:648): avc:  denied  { setopt } for  pid=9728 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  334.457441][ T9729] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[9729]
[  334.478345][ T9729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.869'.
[  334.830020][ T9732] autofs: Bad value for 'fd'
[  335.619897][   T29] audit: type=1400 audit(2000000083.839:649): avc:  denied  { accept } for  pid=9737 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  335.907223][   T29] audit: type=1400 audit(2000000084.389:650): avc:  denied  { attach_queue } for  pid=9734 comm="syz.5.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  336.140361][ T9750] [U] 
[  336.145924][ T9750] [U] 
[  336.149844][ T9750] [U] ŒB˜-LRJ[ÉÍĆÈÍÑœ6Š}Ä%Ü4̾	­¦H‚�ÐÛ@K„Ì-�Y•LE‹÷U¾Ÿ¡–ÏÚÁ@‡ŸF´¡§%PEZE,™ÍŽ9F�Ë*À
[  336.164933][ T9750] [U] CW¯™ÇÇ* Þ9JÁQØ#EØËSWÐÁÔC±ÏV·1žÂÛÏ!È	�žGPœX
[  336.174905][ T9750] [U] N%Ì9ÙÞÖC…_¹ÁNÊ…ÇBC‰…$�ÞÔ4Þ(�²ž
[  336.193278][ T9750] [U] Hª QÄØ›Tµ¦OÂR‚I#ıËTNBS_RЬ‰¡¾Æ«°
:‰Ø€–ɦT‘ȯËÙ0¿™’ÚÃËŒÃ�WÚ™_[HN%
[  336.206399][ T9750] [U] Ï £ÜÙÛ4‡RЛŸÛŠ<)Ü6JG؃¬ÍKÉ^�R\
[  336.213286][ T9750] [U] 7¼R:€J37Ø
[  336.229531][ T9750] [U] YÛPÜ<�ÅÔ…ÚU’“
H¦3Æ°-Î̤„Ø\PQBXÕ!Q6ÃÜÆSO'}­Ï[ÉÛÀP5OÉ>€DÊÅÖŽYÞJ>|H0=ÖÔ·TžXÈÒZÔY֦ʢ
Äš4ª‡IÇ¢À5AZËÑ~ZAÂ~ÝKÝ^�TGžSÍJ‹I:Á¶¬Ž¥OD!M2KÃW§¬R>ƈΗKC?X…8 ¥HÇÒ*©@QEÛ»ÚU	½À.J9�È“~´{—Á`²ÍÃ'R)Ó-ÀǬŸÎ=5­ÝÖ�JLY ÉCÄBˆØ;+LP�°,FØN‡‚ÁÁYÎ%¿3†P¨ÈÕ&Ç)­Ó][œÈ‹4ÃL»Ã¶£„!’J�>	ÔÎ
[  336.260564][ T9750] [U] Ø.”CšÖ¯·ÏEJÓJ
Û@œK’JÁ605RXUÑTTµO‹&�XÐOº�Ö•§\®‹&…¬°¡ÙN
%Y‹‘ÁÐ17¿6`¬ÌI‚W
[  336.296238][ T9750] [U] ÏØÇM<@NºÙKJ(ÝÂ6)Ô)ÎVÌÕLR¢
[  336.313694][ T9750] [U] >YGÐ¤Zª?Œ¹`–O­MÉXØ�Ó‡Ø"Á¨¹š·¢9+¼¾DEÝÁ¹{“ÅŒ$~BÜYDšUME«!XÌÝ›A¹£AUÇ}J„¿Â£2N%MBËQÑÉÄ
[  336.330874][ T9750] [U] ÞWV×ÏÙW‹@HZ�=¦(ƒ„Eˆ‡JÉ~ÈOS@žËBÈHª:"®ÃÁ‡!ƒJIÖÄUJ=Á¥)ÎŽU¤Å	G×ØÐÚÔ–=Y=ÊKÊADËÎ
R†¨¹¹Á:=ÉSÖÙ—�AX¾¢ÛX
[  336.365188][ T9750] [U] BIÞ™E¿„}¼ETØ@±3Ì(Ü ¿¥¨�V¤žÀÐ{™Îº©’~ÐUK+Þ{3T˜Ú$Æ».ÃN[8S‹Ê‡šº""ÒÊ”̺„]RÏGÝ5
[  336.375726][ T9750] [U] V²{Õ¨ÓVNB>DM«·T•¨�QÂTÀ
ÃÌÚÀ
[  336.391345][ T9750] [U] GÁ*|Ó9ÙºŸÅ†¸
[  336.396985][ T9750] [U] G´ÆMIUÔE!ÞÕT
ÏŒ*ß�…8A7I5‚-|¤Ï6LK
[  336.408801][ T9750] [U] NÅ«—Dª²Ë	ÂÌS}R�½BÃÅYºW<»ÂÊÈC‚ ÓÆÐH°\ÓFÍÈD.›Ã÷®˜FŒPK¸Ï‹,ªÎ‚C—Úœ.Â;
¤ÊEYºÝK÷Æ]Z>‘ÚIÃÁ�ÓOQ&
O«’�¼”½,PÙÖ]–,7Í›�§UÚÑÝI­­Â
[  336.439304][ T9750] [U] ÀÛ	$ÄL÷U2Ê¿F_3•+|NWÕµZÓEÇ—ÒP1W~·Ö�N‹(§OÍ�±¸8ÒDÏ	£SÆÙCDÊ®FÂ��65ÖZÜGÃR“Þ°Ú{ÁÒÕT“·ÈK£"@£ÆÐÔÈ:Á5}GÝB—©DѸ¦ƒ\K”
[  336.463578][ T9750] [U] ÈÐÙ‡YÓ…ÒŸ8Î4Œ4N<;
[  336.526837][ T9750] [U] Ã�ÔU†IŽ7X#E¤4VML‚ÔÈ‹¬œšGÍ””A³©)-‡ÌÌ(¿NÌ—N–¢ÈÖL#Ã)׌SU�É6�
[  336.528231][ T9749] ubi0: attaching mtd0
[  336.536080][ T9750] [U] )Æ<�ÈE?ÊA­¤Uܤ—9ˆ%]²ÔDCCŽE+L<'T�¬1Â�KÈ…œ·3ÅÜ.É»Á€ÊÆWS¨ÉÐÀ×ÐZY­Ï¼9I>ÌÒÑØ
]ÞÈœ}{”
/`ÌÜ¿5'ÙE–	41ßTNAX߿ʯÇÏ­Q�ÌëI TÒ%ÒGÐ7L~·BÝS
[  336.542913][ T9749] ubi0: scanning is finished
[  336.555159][ T9750] [U] £Í¢ÄÅ¢
[  336.559652][ T9749] ubi0: empty MTD device detected
[  336.564366][ T9750] [U] ZÓ‘UÝĪÕ4¬©&Ë™ÃE~Ý8EÁσ1´¥L{ȨGV‰Y$PN�O4MËÈÓ*FÓ`ÂÎA€‰T×ÙM0?*I›#;ÁѤ+4V
’¹ÛGA
ØݬÆ%H»·[›A�YX)LG]F ‚ÏHÂ|ÞZV²E­/Ëϧ1Ò7Ǭ³-ǽÈÍHœO+¯…^È)8™&E£@A8GË…Œ-ÈWR»�SÃÜ-V–-Ò±ÌO>ÆÅ�Q�œÄ#9¨UA„H«)F²Þ½´œžSAÖ™³IÜN¼šZ@¯C—¶º>K³L–VD^1É)§M$/ÜÅЄ78..„»Q�¢ÝA¸|ŸÖȦ)�9Ò">D>EÃÓ#I�¬`\Û|{ÓUÂFH.. œEMÍW}]5ÖÃ-,Å¢RK}ÏFÆÕQ¬À·C×O*ÄPÀ¹›Á¦ÂN�F¶Ê
[  336.602573][ T9750] [U] „§“´
[  336.782118][ T9750] [U] T¦0Ô�—*ÃÕ°�
ÖXAØØÊËÉ£¥A4W…K¦¼¯¼C]X¢‹ŒË]ÊLÛ÷Æ=ß
[  337.213560][ T9750] [U] Ú$C
UGSˆEÔ²6ÖÔÝÌ÷ÝÀ„¹T¼Ï„PPË’Z3T2È�£‚”9W-«†Ö‘Ì™ÅAR�­�Ý»NB�ÚŽ�
²²:^X�Öϧ·œB÷Á°ÑÖ̲~Þ{JÒÅ
[  337.248816][ T9755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.457078][ T9755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.088147][ T9750] [U] ÍÕTÌ·EÀÊ' 2‚­ÄL*ÁAª¢-³;P;BTØÖ.¸N¦`¿�_Ó®Î;®Ò*·U;°Á5C#R/˜ÆQ¸KÚ*M¡„ÏS�AÀšÙÎ#)A‰Bš–>¾YØ�‹O\;^°ˆ'ÝßO�5_�Y¬HŠÑÄÃL
÷CEŽŒ&A‚`;ÂœÖԸЕÙSœ�S¤–Ƈ{ŸH¡Þ ÓTM�0ǸµÀBI^LÝÅ>À�Ô8ÝÙ¢VV8<Ô¶-²{$>°D	œ‚Øý]ÅW¶�–›UŒšÔ0?K¬˼ڹŽ[UIRB_ILÚ/ES¿ßI*ŸWÖSÎ*ÃZSÀÔÀÍŽÑ’‹¿
[  338.114080][ T9750] [U] 
[  338.118505][ T9751] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.874'.
[  338.137102][ T9749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  338.222016][ T9749] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  338.231819][ T9749] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  338.238787][ T9749] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  338.266577][ T9755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.321620][ T9749] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  338.359112][ T9755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.371660][ T9749] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  338.379687][ T9749] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 677229472
[  338.411168][ T9744] [U] 
[  338.438647][ T9755] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.450478][ T9755] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.463071][ T9755] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.474516][ T9755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.495439][ T9749] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  338.544838][ T9762] ubi0: background thread "ubi_bgt0d" started, PID 9762
[  338.661849][  T970] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  339.079404][  T970] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  339.116435][   T29] audit: type=1400 audit(2000000087.579:651): avc:  denied  { cmd } for  pid=9767 comm="syz.1.880" path="socket:[23736]" dev="sockfs" ino=23736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  339.139245][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.154019][  T970] usb 5-1: Product: syz
[  339.238269][  T970] usb 5-1: Manufacturer: syz
[  339.248396][  T970] usb 5-1: SerialNumber: syz
[  339.264311][  T970] usb 5-1: config 0 descriptor??
[  339.334345][  T970] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 008
[  339.733023][  T970]  (null): failure reading functionality
[  340.092629][  T970] i2c i2c-1: failure reading functionality
[  340.143328][  T970] i2c i2c-1: connected i2c-tiny-usb device
[  340.221600][  T970] usb 5-1: USB disconnect, device number 8
[  340.446982][   T29] audit: type=1400 audit(2000000088.929:652): avc:  denied  { append } for  pid=9787 comm="syz.7.887" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  340.784287][ T9797] xt_socket: unknown flags 0x50
[  340.871783][ T5865] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  341.101594][ T5865] usb 8-1: Using ep0 maxpacket: 16
[  341.112895][ T5865] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  341.129260][ T5865] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  341.177366][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.240545][ T5865] usb 8-1: config 0 descriptor??
[  342.376663][   T46] usb 8-1: USB disconnect, device number 4
[  342.483234][ T9810] netlink: 80 bytes leftover after parsing attributes in process `syz.1.894'.
[  342.508023][ T9810] netlink: 80 bytes leftover after parsing attributes in process `syz.1.894'.
[  344.317882][   T29] audit: type=1326 audit(2000000092.799:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.396259][   T29] audit: type=1326 audit(2000000092.799:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.419395][    C0] vkms_vblank_simulate: vblank timer overrun
[  344.444416][   T29] audit: type=1326 audit(2000000092.799:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.467640][    C0] vkms_vblank_simulate: vblank timer overrun
[  344.483047][   T29] audit: type=1326 audit(2000000092.799:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.515857][   T29] audit: type=1326 audit(2000000092.799:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.547271][   T29] audit: type=1326 audit(2000000092.799:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.647126][   T29] audit: type=1326 audit(2000000092.799:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  344.681055][   T29] audit: type=1326 audit(2000000092.799:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660e985d29 code=0x7ffc0000
[  346.949455][ T9855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9855 comm=syz.7.907
[  347.098896][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.907'.
[  347.312619][   T29] audit: type=1400 audit(2000000095.669:661): avc:  denied  { connect } for  pid=9856 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  347.723268][   T29] audit: type=1400 audit(2000000095.679:662): avc:  denied  { read } for  pid=9856 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  350.832836][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.919'.
[  352.267149][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  352.642074][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  353.421952][    T8] usb 5-1: Using ep0 maxpacket: 8
[  353.458737][    T8] usb 5-1: config 2 has an invalid interface number: 241 but max is 0
[  353.496541][ T2324] pvrusb2: request_firmware fatal error with code=-110
[  353.504494][    T8] usb 5-1: config 2 has no interface number 0
[  353.510623][    T8] usb 5-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  353.578432][ T2324] pvrusb2: Failure uploading firmware1
[  353.651890][ T2324] pvrusb2: Device initialization was not successful.
[  353.658614][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  353.679030][    T8] usb 5-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  353.711572][    T8] usb 5-1: config 2 interface 241 has no altsetting 0
[  353.740745][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  353.757949][    T8] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  353.762049][ T5862] pvrusb2: Device being rendered inoperable
[  353.771438][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.956383][    T8] usb 5-1: Product: syz
[  354.572071][    T8] usb 5-1: Manufacturer: syz
[  354.576742][    T8] usb 5-1: SerialNumber: syz
[  354.626022][    T8] ti_usb_3410_5052 5-1:2.241: TI USB 3410 1 port adapter converter detected
[  354.733897][    T8] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  354.794276][   T29] audit: type=1400 audit(2000000103.279:663): avc:  denied  { mounton } for  pid=9932 comm="syz.0.928" path="/189/file0" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  354.836559][ T5128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  354.848478][ T5128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  354.857917][ T5128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  354.881913][ T5128] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  354.902366][ T5128] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  354.912291][ T5128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  354.916547][   T29] audit: type=1400 audit(2000000103.299:664): avc:  denied  { mounton } for  pid=9932 comm="syz.0.928" path="/189/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  354.936200][ T9933] syz.0.928 (9933) used greatest stack depth: 20848 bytes left
[  354.991147][   T29] audit: type=1800 audit(2000000103.329:665): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.928" name="/" dev="9p" ino=2 res=0 errno=0
[  355.032412][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.041322][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.102408][ T5893] usb 5-1: USB disconnect, device number 9
[  355.142107][ T5893] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  355.402230][ T5893] ti_usb_3410_5052 5-1:2.241: device disconnected
[  355.787213][ T9944] block device autoloading is deprecated and will be removed.
[  355.884743][ T9944] syz.0.929: attempt to access beyond end of device
[  355.884743][ T9944] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  356.036523][ T9934] chnl_net:caif_netlink_parms(): no params data found
[  356.689257][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.741218][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.795247][ T9934] bridge_slave_0: entered allmulticast mode
[  356.827287][ T9934] bridge_slave_0: entered promiscuous mode
[  356.844583][ T9952] syz.4.932 (9952) used greatest stack depth: 20752 bytes left
[  356.957531][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.964946][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.972289][ T9934] bridge_slave_1: entered allmulticast mode
[  356.980912][ T9934] bridge_slave_1: entered promiscuous mode
[  357.204543][ T9972] xt_l2tp: v2 tid > 0xffff: 262144
[  357.271486][ T5818] Bluetooth: hci5: command tx timeout
[  358.264490][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.300598][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.425420][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'.
[  358.434421][ T9934] team0: Port device team_slave_0 added
[  358.464737][ T9934] team0: Port device team_slave_1 added
[  358.628425][ T9980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9980 comm=syz.4.938
[  358.672654][ T9980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=9980 comm=syz.4.938
[  358.765189][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.788183][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.817840][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.856514][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.911690][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.776777][ T5818] Bluetooth: hci5: command tx timeout
[  359.967110][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.539001][ T9934] hsr_slave_0: entered promiscuous mode
[  360.602321][ T9934] hsr_slave_1: entered promiscuous mode
[  360.657441][ T9934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.373454][ T9934] Cannot create hsr debugfs directory
[  361.791664][ T5818] Bluetooth: hci5: command tx timeout
[  362.167159][ T9934] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  362.188837][ T9934] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  362.239143][ T9934] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  362.264896][ T9934] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  362.554578][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.580087][ T9934] 8021q: adding VLAN 0 to HW filter on device team0
[  362.605249][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.612623][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.666730][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.673887][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.707685][   T29] audit: type=1400 audit(2000000111.179:666): avc:  denied  { listen } for  pid=10018 comm="syz.7.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  364.263614][ T5818] Bluetooth: hci5: command tx timeout
[  364.572686][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.475904][ T9934] veth0_vlan: entered promiscuous mode
[  366.538234][ T9934] veth1_vlan: entered promiscuous mode
[  366.676436][ T9934] veth0_macvtap: entered promiscuous mode
[  367.102325][   T29] audit: type=1400 audit(2000000115.569:667): avc:  denied  { getopt } for  pid=10072 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  367.703786][ T9934] veth1_macvtap: entered promiscuous mode
[  367.815439][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.881764][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.892551][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.903061][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.912922][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.923415][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.933430][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.948137][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.959037][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  367.969672][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.980754][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.416260][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.524199][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.540788][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.568310][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.605800][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.683770][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.701601][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.712731][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.724336][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.737344][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.753676][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.009907][   T29] audit: type=1400 audit(2000000117.449:668): avc:  denied  { listen } for  pid=10067 comm="syz.7.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  369.318905][ T9934] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.345617][ T9934] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.463027][ T9934] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.523805][ T9934] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.068231][  T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.104405][  T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.201869][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.229221][T10102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.270033][  T319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.284654][  T319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.738224][   T29] audit: type=1800 audit(2000000120.199:669): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.969" name="bus" dev="overlay" ino=1232 res=0 errno=0
[  372.049911][T10129] syz.0.973[10129] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  372.050000][T10129] syz.0.973[10129] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  372.063348][T10129] syz.0.973[10129] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  372.414890][T10135] ip6t_REJECT: ECHOREPLY is not supported
[  373.942177][   T29] audit: type=1400 audit(2000000121.889:670): avc:  denied  { write } for  pid=10136 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  374.010031][T10147] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  374.031886][   T29] audit: type=1400 audit(2000000121.889:671): avc:  denied  { nlmsg_read } for  pid=10136 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  374.067364][T10147] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  375.617589][   T29] audit: type=1400 audit(2000000124.099:672): avc:  denied  { mounton } for  pid=10158 comm="syz.8.980" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  375.964835][T10159] syz.8.980: attempt to access beyond end of device
[  375.964835][T10159] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0
[  375.986669][T10159] XFS (nbd8): SB validate failed with error -5.
[  377.383656][ T5916] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  377.466772][   T29] audit: type=1400 audit(2000000125.949:673): avc:  denied  { shutdown } for  pid=10194 comm="syz.1.987" laddr=fe80::13 lport=41419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  377.641522][ T5916] usb 8-1: Using ep0 maxpacket: 32
[  377.648382][ T5916] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  377.701712][ T5916] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  377.710806][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  377.813684][ T5916] usb 8-1: Product: syz
[  377.818189][ T5916] usb 8-1: Manufacturer: syz
[  377.823042][ T5916] usb 8-1: SerialNumber: syz
[  377.832729][ T5916] usb 8-1: config 0 descriptor??
[  377.839304][T10192] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  377.847292][ T5128] Bluetooth: hci5: command 0x0406 tx timeout
[  378.647663][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.682164][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.689766][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.707116][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.928814][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.973774][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.393278][ T5862] usb 8-1: USB disconnect, device number 5
[  382.482387][T10232] block nbd1: shutting down sockets
[  383.739149][   T29] audit: type=1400 audit(2000000132.209:674): avc:  denied  { getopt } for  pid=10242 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  385.719409][   T29] audit: type=1400 audit(2000000133.539:675): avc:  denied  { map } for  pid=10252 comm="syz.4.1003" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  385.924941][   T29] audit: type=1400 audit(2000000133.539:676): avc:  denied  { execute } for  pid=10252 comm="syz.4.1003" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  385.948849][    C1] vkms_vblank_simulate: vblank timer overrun
[  387.444999][   T29] audit: type=1400 audit(2000000135.929:677): avc:  denied  { read } for  pid=10269 comm="syz.4.1005" path="socket:[26018]" dev="sockfs" ino=26018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  390.092391][T10301] xt_socket: unknown flags 0x50
[  391.389720][T10319] vlan2: entered promiscuous mode
[  391.419667][T10319] team0: entered promiscuous mode
[  391.429815][T10319] team_slave_0: entered promiscuous mode
[  391.447915][T10319] team_slave_1: entered promiscuous mode
[  391.461209][T10319] team0: Device vlan2 is already an upper device of the team interface
[  391.472673][T10319] team0: left promiscuous mode
[  391.480916][T10319] team_slave_0: left promiscuous mode
[  391.491178][T10319] team_slave_1: left promiscuous mode
[  392.351685][ T5916] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  392.468245][T10335] macsec1: entered promiscuous mode
[  392.474409][T10335] macsec1: entered allmulticast mode
[  392.480030][T10335] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  392.561524][ T5916] usb 9-1: Using ep0 maxpacket: 32
[  392.574284][ T5916] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  392.597030][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.646145][ T5916] usb 9-1: Product: syz
[  392.669051][ T5916] usb 9-1: Manufacturer: syz
[  392.683733][ T5916] usb 9-1: SerialNumber: syz
[  392.699309][ T5916] usb 9-1: config 0 descriptor??
[  392.862535][T10336] Invalid ELF header magic: != ELF
[  392.921460][   T29] audit: type=1400 audit(2000000141.399:678): avc:  denied  { write } for  pid=10322 comm="syz.8.1020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  393.516373][ T5916] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  393.530709][ T5916] peak_usb 9-1:0.0 can0: sending command failure: -22
[  393.540872][ T5916] peak_usb 9-1:0.0 can0: sending command failure: -22
[  393.622783][ T5916] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22
[  394.217931][ T5893] usb 9-1: USB disconnect, device number 2
[  394.387308][   T29] audit: type=1400 audit(2000000142.859:679): avc:  denied  { mount } for  pid=10348 comm="syz.7.1028" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  395.722434][  T970] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  395.864263][   T29] audit: type=1400 audit(2000000144.339:680): avc:  denied  { read } for  pid=10360 comm="syz.8.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  396.191981][  T970] usb 8-1: Using ep0 maxpacket: 16
[  396.245893][  T970] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.263236][  T970] usb 8-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae
[  396.301988][  T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.338057][  T970] usb 8-1: Product: syz
[  396.349803][  T970] usb 8-1: Manufacturer: syz
[  396.683313][  T970] usb 8-1: SerialNumber: syz
[  396.695541][  T970] usb 8-1: config 0 descriptor??
[  396.723714][  T970] gspca_main: etoms-2.14.0 probing 102c:6151
[  397.212386][  T970] usb 8-1: USB disconnect, device number 6
[  397.289494][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'.
[  399.619073][T10393] netlink: 'syz.8.1039': attribute type 1 has an invalid length.
[  399.650506][T10393] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1039'.
[  400.025285][   T29] audit: type=1400 audit(2000000148.509:681): avc:  denied  { unmount } for  pid=8593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  400.105949][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'.
[  400.115213][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'.
[  400.124398][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'.
[  401.190338][T10408] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  401.778350][T10414] Bluetooth: hci0: Opcode 0x080f failed: -4
[  402.471017][T10428] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.495947][T10428] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.225268][ T5818] Bluetooth: hci0: command 0x0405 tx timeout
[  404.535157][   T29] audit: type=1800 audit(2000000152.419:682): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1053" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  405.501592][ T5818] Bluetooth: hci0: command 0x0405 tx timeout
[  407.491782][   T29] audit: type=1400 audit(2000000155.899:683): avc:  denied  { ioctl } for  pid=10467 comm="syz.4.1060" path="socket:[26455]" dev="sockfs" ino=26455 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  407.962733][T10473] ubi: mtd0 is already attached to ubi0
[  408.071864][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[  408.081317][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[  408.113639][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10476 comm=syz.4.1062
[  408.273225][ T5128] Bluetooth: hci6: sending frame failed (-49)
[  408.283592][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  408.975776][  T970] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  409.171982][  T970] usb 5-1: config 0 has an invalid interface number: 172 but max is 0
[  409.189046][  T970] usb 5-1: config 0 has no interface number 0
[  409.208385][  T970] usb 5-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de
[  409.227924][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.255896][  T970] usb 5-1: Product: syz
[  409.278651][  T970] usb 5-1: Manufacturer: syz
[  409.283765][  T970] usb 5-1: SerialNumber: syz
[  409.298728][  T970] usb 5-1: config 0 descriptor??
[  409.409527][T10491] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  409.779792][  T970] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state.
[  410.005599][  T970] dvb-usb: bulk message failed: -22 (4/0)
[  410.015417][   T29] audit: type=1400 audit(2000000158.319:684): avc:  denied  { getopt } for  pid=10487 comm="syz.8.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  410.053910][  T970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  410.084678][  T970] dvb-usb: bulk message failed: -22 (5/0)
[  410.103642][  T970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  410.115539][   T29] audit: type=1400 audit(2000000158.599:685): avc:  denied  { accept } for  pid=10492 comm="syz.1.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  410.144360][  T970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  410.162275][  T970] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0)
[  410.177033][  T970] usb 5-1: media controller created
[  410.201444][  T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  410.269748][  T970] ttusb2: set interface to alts=3 failed
[  410.386793][  T970] DVB: Unable to find symbol tda10086_attach()
[  410.401425][  T970] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0'
[  410.419104][  T970] dvb-usb: bulk message failed: -22 (4/0)
[  410.454211][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1069'.
[  410.461997][  T970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  410.486114][  T970] dvb-usb: bulk message failed: -22 (5/0)
[  410.501474][  T970] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  410.531454][  T970] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected.
[  410.588587][  T970] usb 5-1: USB disconnect, device number 10
[  410.638719][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1069'.
[  410.744130][T10504] netlink: 'syz.8.1069': attribute type 1 has an invalid length.
[  410.762334][  T970] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected.
[  410.820617][T10504] nbd: error processing sock list
[  413.815483][T10538] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  413.824702][T10538] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  413.835160][T10538] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  414.676518][T10542] 8021q: adding VLAN 0 to HW filter on device batadv1
[  414.684783][T10542] team0: Port device batadv1 added
[  420.377175][T10590] 9pnet: bogus RREAD count (69 > 41)
[  420.386269][   T29] audit: type=1800 audit(2000000168.869:686): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1094" name="/" dev="9p" ino=2 res=0 errno=0
[  420.820792][   T29] audit: type=1400 audit(2000000168.899:687): avc:  denied  { read write } for  pid=10593 comm="syz.1.1096" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  420.865363][   T29] audit: type=1400 audit(2000000168.899:688): avc:  denied  { open } for  pid=10593 comm="syz.1.1096" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  421.125286][   T29] audit: type=1400 audit(2000000169.479:689): avc:  denied  { create } for  pid=10593 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  421.551026][   T29] audit: type=1400 audit(2000000170.009:690): avc:  denied  { append } for  pid=10598 comm="syz.4.1097" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  421.717212][   T29] audit: type=1800 audit(2000000170.189:691): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1097" name="/" dev="9p" ino=2 res=0 errno=0
[  421.748506][T10599] syz.4.1097 (10599) used greatest stack depth: 19824 bytes left
[  425.242316][ T5893] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  425.521983][ T5893] usb 5-1: Using ep0 maxpacket: 32
[  425.612878][ T5893] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  425.697798][ T5893] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8346, setting to 1024
[  425.735667][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  425.751769][ T5893] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  425.781756][ T5893] usb 5-1: Product: syz
[  425.785967][ T5893] usb 5-1: Manufacturer: syz
[  425.869867][ T5893] hub 5-1:4.0: USB hub found
[  425.926975][T10623] kvm: kvm [10622]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  427.193727][T10640] syzkaller0: entered allmulticast mode
[  427.245948][ T5893] hub 5-1:4.0: 7 ports detected
[  427.289485][ T5893] hub 5-1:4.0: insufficient power available to use all downstream ports
[  428.105651][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.387469][ T5893] usb 5-1: USB disconnect, device number 11
[  431.885057][T10681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'.
[  431.941913][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1119'.
[  431.968863][T10681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'.
[  432.570024][T10681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1119'.
[  432.825312][   T29] audit: type=1400 audit(2000000181.309:692): avc:  denied  { read } for  pid=10687 comm="syz.4.1122" name="/" dev="configfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  432.876852][   T29] audit: type=1400 audit(2000000181.309:693): avc:  denied  { open } for  pid=10687 comm="syz.4.1122" path="/" dev="configfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  432.965513][   T29] audit: type=1400 audit(2000000181.439:694): avc:  denied  { accept } for  pid=10691 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  434.455888][T10701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.568513][T10714] netlink: 288 bytes leftover after parsing attributes in process `syz.8.1128'.
[  435.021536][ T5916] IPVS: starting estimator thread 0...
[  435.111852][T10719] IPVS: using max 34 ests per chain, 81600 per kthread
[  435.176539][T10721] xt_TPROXY: Can be used only with -p tcp or -p udp
[  436.292276][T10733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.361642][   T29] audit: type=1400 audit(2000000185.829:695): avc:  denied  { execute } for  pid=10734 comm="syz.4.1135" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  438.436951][T10729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  438.455115][T10729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  438.500459][T10742] 9pnet_virtio: no channels available for device syz
[  440.113792][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.120161][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.141506][   T46] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  440.482509][   T29] audit: type=1400 audit(2000000188.969:696): avc:  denied  { write } for  pid=10752 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  440.543501][   T46] usb 9-1: Using ep0 maxpacket: 8
[  440.552060][   T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.931484][   T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.961654][   T46] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  440.970964][   T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.989866][   T46] usb 9-1: config 0 descriptor??
[  441.581620][ T5893] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  441.871940][   T46] usbhid 9-1:0.0: can't add hid device: -71
[  441.878578][   T46] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  441.889144][   T46] usb 9-1: USB disconnect, device number 3
[  442.425218][ T5893] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  442.458975][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.478831][ T5893] usb 8-1: Product: syz
[  442.701491][   T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  443.077804][ T5893] usb 8-1: Manufacturer: syz
[  443.105137][ T5893] usb 8-1: SerialNumber: syz
[  443.127907][ T5893] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  443.275175][   T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.212407][   T46] usb 5-1: config 0 has no interfaces?
[  444.225312][ T5916] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  444.227778][   T46] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[  444.268685][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.576622][   T46] usb 5-1: config 0 descriptor??
[  445.636697][ T5916] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  445.995431][ T5916] ath9k_htc: Failed to initialize the device
[  446.129325][ T5916] usb 8-1: ath9k_htc: USB layer deinitialized
[  446.632290][   T46] usb 8-1: USB disconnect, device number 7
[  446.936754][ T5863] usb 5-1: USB disconnect, device number 12
[  449.619562][T10884] capability: warning: `syz.4.1162' uses 32-bit capabilities (legacy support in use)
[  449.667046][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1159'.
[  449.819719][T10889] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  449.828724][T10889] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  449.840797][   T29] audit: type=1400 audit(2000000198.239:697): avc:  denied  { execute } for  pid=10885 comm="syz.1.1161" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  453.972227][T10927] fuse: Invalid rootmode
[  454.062502][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  455.837768][T10950] tmpfs: Bad value for 'mpol'
[  456.961526][   T29] audit: type=1400 audit(2000000205.199:698): avc:  denied  { connect } for  pid=10953 comm="syz.4.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  457.271610][ T5128] Bluetooth: hci5: command 0x0406 tx timeout
[  457.366183][   T29] audit: type=1400 audit(2000000205.809:699): avc:  denied  { read } for  pid=10956 comm="syz.8.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  458.271526][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  461.901444][ T5893] usb 2-1: device descriptor read/all, error -71
[  462.611975][T11000] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  462.618545][T11000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  462.649761][T11000] vhci_hcd vhci_hcd.0: Device attached
[  462.696129][T11006] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.765385][T11000] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.801203][T11000] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.823865][    T8] vhci_hcd: vhci_device speed not set
[  462.834084][T11000] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.865968][T11000] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.894307][T11000] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.901921][    T8] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  462.936748][T11000] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  462.990284][T11000] vhci_hcd vhci_hcd.0: port 0 already used
[  463.229024][   T29] audit: type=1400 audit(2000000211.709:700): avc:  denied  { nlmsg_write } for  pid=10989 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  463.569668][  T970] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  463.897031][  T970] usb 9-1: Using ep0 maxpacket: 16
[  464.011518][  T970] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[  464.021094][T11001] vhci_hcd: connection reset by peer
[  464.036784][  T970] usb 9-1: config 0 has no interface number 0
[  464.047819][T10382] vhci_hcd: stop threads
[  464.061091][  T970] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  464.087565][T10382] vhci_hcd: release socket
[  464.097684][  T970] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  464.115766][T10382] vhci_hcd: disconnect device
[  464.137732][  T970] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  464.142803][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1194'.
[  464.151533][  T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.302221][  T970] usb 9-1: Product: syz
[  464.308621][  T970] usb 9-1: Manufacturer: syz
[  464.313945][  T970] usb 9-1: SerialNumber: syz
[  464.334301][  T970] usb 9-1: config 0 descriptor??
[  464.344465][T11025] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  464.951920][T11025] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  465.242146][  T970] asix 9-1:0.251: probe with driver asix failed with error -71
[  465.525049][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1194'.
[  465.591658][  T970] usb 9-1: USB disconnect, device number 4
[  467.028523][T11074] kernel profiling enabled (shift: 17)
[  468.040008][    T8] vhci_hcd: vhci_device speed not set
[  471.515163][   T29] audit: type=1400 audit(2000000219.479:701): avc:  denied  { ioctl } for  pid=11099 comm="syz.7.1207" path="socket:[29135]" dev="sockfs" ino=29135 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  471.803174][T11114] block device autoloading is deprecated and will be removed.
[  471.909084][T11114] syz.7.1210: attempt to access beyond end of device
[  471.909084][T11114] md34: rw=2048, sector=0, nr_sectors = 8 limit=0
[  472.248671][T11114] syz.7.1210: attempt to access beyond end of device
[  472.248671][T11114] md34: rw=2048, sector=0, nr_sectors = 8 limit=0
[  472.594139][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1213'.
[  473.334469][T11137] Zero length message leads to an empty skb
[  473.610516][   T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  473.807843][   T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  474.321522][   T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  474.331867][   T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  474.342676][   T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  474.352271][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.462201][   T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  474.670582][   T25] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  476.768312][ T5916] usb 2-1: USB disconnect, device number 6
[  476.947751][T11173] udevd[11173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.900421][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  478.912722][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  478.921665][ T5916] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  478.982480][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  479.055683][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  479.067535][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  479.077777][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  479.626572][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'.
[  479.764374][ T5916] usb 2-1: config 201 has an invalid interface number: 249 but max is 0
[  479.843990][ T5916] usb 2-1: config 201 has no interface number 0
[  479.979535][ T5916] usb 2-1: config 201 interface 249 has no altsetting 0
[  480.061923][ T5916] usb 2-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=b4.70
[  480.071887][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.079915][ T5916] usb 2-1: Product: syz
[  480.229636][ T5916] usb 2-1: Manufacturer: syz
[  480.241434][ T5916] usb 2-1: SerialNumber: syz
[  481.103291][T11212] sctp: [Deprecated]: syz.8.1231 (pid 11212) Use of struct sctp_assoc_value in delayed_ack socket option.
[  481.103291][T11212] Use struct sctp_sack_info instead
[  481.231488][ T5818] Bluetooth: hci0: command tx timeout
[  481.668297][T11195] chnl_net:caif_netlink_parms(): no params data found
[  481.964406][ T5916] mct_u232 2-1:201.249: MCT U232 converter detected
[  482.020012][ T5916] mct_u232 ttyUSB0: expected endpoint missing
[  482.081259][ T5916] usb 2-1: USB disconnect, device number 7
[  482.122665][ T5916] mct_u232 2-1:201.249: device disconnected
[  482.184345][T11224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11224 comm=syz.0.1234
[  483.097513][   T29] audit: type=1400 audit(2000004326.578:702): avc:  denied  { bind } for  pid=11237 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  483.098826][T11195] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.124305][T11195] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.132326][T11195] bridge_slave_0: entered allmulticast mode
[  483.133339][    C0] net_ratelimit: 11 callbacks suppressed
[  483.133369][    C0] dccp_v4_rcv: dropped packet with invalid checksum
[  483.139227][T11195] bridge_slave_0: entered promiscuous mode
[  483.160801][T11195] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.168328][T11195] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.176156][T11195] bridge_slave_1: entered allmulticast mode
[  483.183434][T11195] bridge_slave_1: entered promiscuous mode
[  483.226395][   T29] audit: type=1400 audit(2000004326.578:703): avc:  denied  { name_bind } for  pid=11237 comm="syz.4.1237" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  483.283950][   T29] audit: type=1400 audit(2000004326.578:704): avc:  denied  { node_bind } for  pid=11237 comm="syz.4.1237" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  483.318528][ T5818] Bluetooth: hci0: command tx timeout
[  483.337310][   T29] audit: type=1400 audit(2000004326.758:705): avc:  denied  { accept } for  pid=11237 comm="syz.4.1237" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  483.407967][T11195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.419769][T11195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.462997][T11195] team0: Port device team_slave_0 added
[  483.475259][T11195] team0: Port device team_slave_1 added
[  483.530202][T11195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.541971][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.571921][T11195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.639741][   T30] INFO: task kworker/u8:8:6386 blocked for more than 143 seconds.
[  483.648997][   T30]       Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0
[  483.665024][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  483.681647][   T30] task:kworker/u8:8    state:D stack:24400 pid:6386  tgid:6386  ppid:2      flags:0x00004000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  483.766170][   T29] audit: type=1400 audit(2000004327.178:706): avc:  denied  { write } for  pid=5801 comm="syz-executor" path="pipe:[5265]" dev="pipefs" ino=5265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  483.790150][   T30] Workqueue: events_unbound netfs_write_collection_worker
[  483.828245][   T30] Call Trace:
[  483.839169][T11195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.840374][   T30]  <TASK>
[  484.481428][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.541426][T11195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.568315][   T30]  __schedule+0xe58/0x5ad0
[  484.573382][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  484.578636][   T30]  ? __pfx___schedule+0x10/0x10
[  484.597922][   T30]  ? schedule+0x298/0x350
[  484.602382][   T30]  ? __pfx_lock_release+0x10/0x10
[  484.607458][   T30]  ? __pfx_lock_release+0x10/0x10
[  484.612565][   T30]  ? lock_acquire+0x2f/0xb0
[  484.617085][   T30]  ? schedule+0x1fd/0x350
[  484.621493][   T30]  schedule+0xe7/0x350
[  484.625584][   T30]  bit_wait+0x15/0xe0
[  484.629578][   T30]  __wait_on_bit+0x62/0x180
[  484.634234][   T30]  ? __pfx_bit_wait+0x10/0x10
[  484.638949][   T30]  out_of_line_wait_on_bit+0xda/0x110
[  484.644410][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  484.650497][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  484.660603][   T30]  netfs_retry_writes+0x2fa/0x1a00
[  484.667781][   T30]  ? irqentry_exit+0x3b/0x90
[  484.672827][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  484.678224][   T30]  ? __pfx_netfs_retry_writes+0x10/0x10
[  484.686706][   T30]  ? netfs_write_collection_worker+0x67c/0x37c0
[  484.706495][   T30]  ? netfs_write_collection_worker+0x23d5/0x37c0
[  484.713269][   T30]  netfs_write_collection_worker+0x23de/0x37c0
[  484.719460][   T30]  process_one_work+0x9c5/0x1ba0
[  484.724806][   T30]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  484.730447][   T30]  ? __pfx_process_one_work+0x10/0x10
[  484.735861][   T30]  ? rcu_is_watching+0x12/0xc0
[  484.740644][   T30]  ? assign_work+0x1a0/0x250
[  484.745297][   T30]  worker_thread+0x6c8/0xf00
[  484.749931][   T30]  ? __pfx_worker_thread+0x10/0x10
[  484.755261][   T30]  kthread+0x2c1/0x3a0
[  484.759354][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  484.764613][   T30]  ? __pfx_kthread+0x10/0x10
[  484.769214][   T30]  ret_from_fork+0x45/0x80
[  484.773704][   T30]  ? __pfx_kthread+0x10/0x10
[  484.778491][   T30]  ret_from_fork_asm+0x1a/0x30
[  484.783371][   T30]  </TASK>
[  484.786449][   T30] INFO: task syz.5.877:9759 blocked for more than 144 seconds.
[  484.794916][   T30]       Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0
[  484.802975][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  484.811707][   T30] task:syz.5.877       state:D stack:24336 pid:9759  tgid:9754  ppid:6258   flags:0x00004006
[  484.821982][   T30] Call Trace:
[  484.825282][   T30]  <TASK>
[  484.828231][   T30]  __schedule+0xe58/0x5ad0
[  484.833174][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  484.838400][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  484.845181][   T30]  ? __pfx___schedule+0x10/0x10
[  484.850075][   T30]  ? schedule+0x298/0x350
[  484.854871][   T30]  ? __pfx_lock_release+0x10/0x10
[  484.859925][   T30]  ? __mutex_trylock_common+0x78/0x250
[  484.865815][   T30]  ? lock_acquire+0x2f/0xb0
[  484.870339][   T30]  ? schedule+0x1fd/0x350
[  484.875230][   T30]  schedule+0xe7/0x350
[  484.879334][   T30]  schedule_preempt_disabled+0x13/0x30
[  484.885376][   T30]  __mutex_lock+0x62b/0xa60
[  484.889910][   T30]  ? netfs_writepages+0x16c/0x8f0
[  484.895468][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  484.905487][   T30]  ? __mutex_trylock_common+0x78/0x250
[  484.910995][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  484.916899][   T30]  ? netfs_writepages+0x16c/0x8f0
[  484.925249][   T30]  netfs_writepages+0x16c/0x8f0
[  484.930386][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  484.941767][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  484.947521][   T30]  ? lock_acquire+0x2f/0xb0
[  484.952444][   T30]  ? is_bpf_text_address+0x30/0x1a0
[  484.957661][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  484.963201][   T30]  do_writepages+0x1b3/0x820
[  484.967809][   T30]  ? find_held_lock+0x2d/0x110
[  484.972616][   T30]  ? __pfx_do_writepages+0x10/0x10
[  484.977738][   T30]  ? wbc_attach_fdatawrite_inode+0x13a/0x190
[  484.984790][   T30]  ? __pfx_lock_release+0x10/0x10
[  484.989823][   T30]  ? do_raw_spin_lock+0x12d/0x2c0
[  484.994918][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  485.000301][   T30]  ? lock_acquire+0x2f/0xb0
[  485.005110][   T30]  ? wbc_attach_fdatawrite_inode+0x24/0x190
[  485.011025][   T30]  ? do_raw_spin_unlock+0x172/0x230
[  485.016283][   T30]  ? _raw_spin_unlock+0x28/0x50
[  485.021155][   T30]  filemap_fdatawrite_wbc+0x104/0x160
[  485.026664][   T30]  __filemap_fdatawrite_range+0xb3/0xf0
[  485.032341][   T30]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  485.038602][   T30]  ? __call_rcu_common.constprop.0+0x99/0x7a0
[  485.044855][   T30]  v9fs_dir_release+0x429/0x590
[  485.049717][   T30]  ? __pfx_v9fs_dir_release+0x10/0x10
[  485.055230][   T30]  ? __pfx___might_resched+0x10/0x10
[  485.060558][   T30]  ? ima_iint_find+0xea/0x130
[  485.065377][   T30]  ? __pfx_v9fs_dir_release+0x10/0x10
[  485.070787][   T30]  __fput+0x3f8/0xb60
[  485.074866][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  485.080074][   T30]  task_work_run+0x14e/0x250
[  485.084817][   T30]  ? __pfx_task_work_run+0x10/0x10
[  485.090405][   T30]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  485.096390][   T30]  get_signal+0x1d3/0x26c0
[  485.100819][   T30]  ? fput+0x1d3/0x440
[  485.105071][   T30]  ? __pfx_get_signal+0x10/0x10
[  485.109950][   T30]  arch_do_signal_or_restart+0x90/0x7e0
[  485.115893][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  485.123735][   T30]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  485.129480][   T30]  syscall_exit_to_user_mode+0x150/0x2a0
[  485.135374][   T30]  do_syscall_64+0xda/0x250
[  485.139909][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.145934][   T30] RIP: 0033:0x7fa089785d29
[  485.150360][   T30] RSP: 002b:00007fa08a695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  485.159381][   T30] RAX: 00000000002d0000 RBX: 00007fa089975fa0 RCX: 00007fa089785d29
[  485.167520][   T30] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[  485.175586][   T30] RBP: 00007fa089801b08 R08: 0000000000000000 R09: 0000000000000000
[  485.183636][   T30] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000
[  485.191942][   T30] R13: 0000000000000000 R14: 00007fa089975fa0 R15: 00007ffffad78768
[  485.199949][   T30]  </TASK>
[  485.203072][   T30] INFO: task syz.5.877:9766 blocked for more than 144 seconds.
[  485.318227][   T30]       Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0
[  485.325635][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  485.334388][   T30] task:syz.5.877       state:D stack:27824 pid:9766  tgid:9754  ppid:6258   flags:0x00004004
[  485.344674][   T30] Call Trace:
[  485.347962][   T30]  <TASK>
[  485.350900][   T30]  __schedule+0xe58/0x5ad0
[  485.355431][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  485.360658][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  485.381394][   T30]  ? __pfx___schedule+0x10/0x10
[  485.386306][   T30]  ? schedule+0x298/0x350
[  485.393828][ T5818] Bluetooth: hci0: command tx timeout
[  485.410707][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.451443][   T30]  ? __mutex_trylock_common+0x78/0x250
[  485.456973][   T30]  ? lock_acquire+0x2f/0xb0
[  485.491382][   T30]  ? schedule+0x1fd/0x350
[  485.506144][   T30]  schedule+0xe7/0x350
[  485.510271][   T30]  schedule_preempt_disabled+0x13/0x30
[  485.537346][   T30]  __mutex_lock+0x62b/0xa60
[  485.552124][   T30]  ? netfs_writepages+0x16c/0x8f0
[  485.557217][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  485.581534][   T30]  ? __mutex_trylock_common+0x78/0x250
[  485.588209][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  485.597781][   T30]  ? netfs_writepages+0x16c/0x8f0
[  485.607740][   T30]  netfs_writepages+0x16c/0x8f0
[  485.612749][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  485.618371][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  485.623873][   T30]  ? hlock_class+0x4e/0x130
[  485.628410][   T30]  ? __pfx_netfs_writepages+0x10/0x10
[  485.633912][   T30]  do_writepages+0x1b3/0x820
[  485.638548][   T30]  ? __pfx_do_writepages+0x10/0x10
[  485.643963][   T30]  ? wbc_attach_fdatawrite_inode+0x13a/0x190
[  485.649969][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.655083][   T30]  ? do_raw_spin_lock+0x12d/0x2c0
[  485.660116][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  485.665541][   T30]  ? lock_acquire+0x2f/0xb0
[  485.670044][   T30]  ? wbc_attach_fdatawrite_inode+0x24/0x190
[  485.676021][   T30]  ? do_raw_spin_unlock+0x172/0x230
[  485.681229][   T30]  filemap_fdatawrite_wbc+0x104/0x160
[  485.686698][   T30]  __filemap_fdatawrite_range+0xb3/0xf0
[  485.692313][   T30]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  485.698587][   T30]  ? v9fs_fid_lookup+0xe9/0xec0
[  485.703794][   T30]  v9fs_vfs_setattr+0x93a/0xab0
[  485.708667][   T30]  ? __pfx_v9fs_vfs_setattr+0x10/0x10
[  485.714162][   T30]  ? selinux_inode_setattr+0x246/0x400
[  485.720149][   T30]  ? evm_inode_setattr+0x65/0x680
[  485.726506][   T30]  ? __pfx_make_vfsgid+0x10/0x10
[  485.731559][   T30]  ? __pfx_v9fs_vfs_setattr+0x10/0x10
[  485.736944][   T30]  notify_change+0x6a6/0x1230
[  485.741676][   T30]  vfs_utimes+0x41d/0x850
[  485.746015][   T30]  ? __pfx_vfs_utimes+0x10/0x10
[  485.750857][   T30]  ? putname+0x13c/0x180
[  485.755306][   T30]  do_utimes+0x124/0x2a0
[  485.759559][   T30]  ? __pfx_do_utimes+0x10/0x10
[  485.764399][   T30]  ? find_held_lock+0x59/0x110
[  485.769203][   T30]  do_futimesat+0x18f/0x200
[  485.773797][   T30]  ? __pfx_do_futimesat+0x10/0x10
[  485.778829][   T30]  ? lock_acquire+0x2f/0xb0
[  485.783379][   T30]  ? do_user_addr_fault+0x83d/0x13f0
[  485.788670][   T30]  do_syscall_64+0xcd/0x250
[  485.793254][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.799160][   T30] RIP: 0033:0x7fa089785d29
[  485.803943][   T30] RSP: 002b:00007fa08a653038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb
[  485.812405][   T30] RAX: ffffffffffffffda RBX: 00007fa089976160 RCX: 00007fa089785d29
[  485.820895][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[  485.830535][   T30] RBP: 00007fa089801b08 R08: 0000000000000000 R09: 0000000000000000
[  485.838756][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  485.846873][   T30] R13: 0000000000000001 R14: 00007fa089976160 R15: 00007ffffad78768
[  485.854936][   T30]  </TASK>
[  485.868133][   T30] 
[  485.868133][   T30] Showing all locks held in the system:
[  485.876060][   T30] 1 lock held by khungtaskd/30:
[  485.880924][   T30]  #0: ffffffff8e1bbcc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  485.894158][   T30] 4 locks held by kworker/u8:3/52:
[  485.899301][   T30]  #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  485.909894][   T30]  #1: ffffc90000bd7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  485.919916][   T30]  #2: ffffffff8fedba50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0
[  485.929726][   T30]  #3: ffffffff8fef1648 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x15/0xa0
[  485.939251][   T30] 1 lock held by klogd/5178:
[  485.943968][   T30]  #0: ffff8880b873ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  485.954222][   T30] 2 locks held by getty/5566:
[  485.958918][   T30]  #0: ffff888036dd20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  485.968702][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  485.979067][   T30] 1 lock held by syz-executor/5812:
[  485.984380][   T30]  #0: ffffffff8fef1648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  485.993423][   T30] 1 lock held by syz-executor/5821:
[  485.998618][   T30]  #0: ffffffff8fef1648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  486.007843][   T30] 2 locks held by kworker/u8:8/6386:
[  486.013223][   T30]  #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  486.024438][   T30]  #1: ffffc90005c57d80 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  486.036050][   T30] 3 locks held by kworker/u8:10/6843:
[  486.041527][   T30]  #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  486.052827][   T30]  #1: ffffc90003577d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  486.063298][   T30]  #2: ffffffff8fef1648 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  486.072456][   T30] 1 lock held by syz.5.877/9759:
[  486.077395][   T30]  #0: ffff888012a81ec0 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x16c/0x8f0
[  486.087208][   T30] 1 lock held by syz.5.877/9763:
[  486.092174][   T30]  #0: ffff888012a81ec0 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xb9/0x8f0
[  486.101718][   T30] 3 locks held by syz.5.877/9766:
[  486.106739][   T30]  #0: ffff88805e4d6420 (sb_writers#20){.+.+}-{0:0}, at: vfs_utimes+0x6b9/0x850
[  486.116032][   T30]  #1: ffff888012a81b08 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_utimes+0x3d2/0x850
[  486.126407][   T30]  #2: ffff888012a81ec0 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x16c/0x8f0
[  486.136674][   T30] 2 locks held by kworker/u8:13/10381:
[  486.142201][   T30] 2 locks held by syz-executor/11195:
[  486.147574][   T30]  #0: ffff88803153cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  486.157261][   T30]  #1: ffff88803153c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0
[  486.167012][   T30] 1 lock held by syz.0.1234/11220:
[  486.172198][   T30]  #0: ffffffff8fef1648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  486.181214][   T30] 3 locks held by syz.8.1238/11246:
[  486.186446][   T30]  #0: ffff8880251b4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  486.198438][   T30]  #1: ffff8880251b4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0
[  486.209634][   T30]  #2: ffffffff8e1c75f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0
[  486.220232][   T30] 1 lock held by dhcpcd/11247:
[  486.225141][   T30]  #0: ffff888060dc5608 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  486.236148][   T30] 
[  486.238495][   T30] =============================================
[  486.238495][   T30] 
[  486.261884][   T30] NMI backtrace for cpu 1
[  486.266247][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0
[  486.276405][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  486.286458][   T30] Call Trace:
[  486.289733][   T30]  <TASK>
[  486.292654][   T30]  dump_stack_lvl+0x116/0x1f0
[  486.297336][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  486.302270][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  486.308240][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  486.314214][   T30]  watchdog+0xf14/0x1240
[  486.318543][   T30]  ? __pfx_watchdog+0x10/0x10
[  486.323212][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  486.328408][   T30]  ? __kthread_parkme+0x148/0x220
[  486.333428][   T30]  ? __pfx_watchdog+0x10/0x10
[  486.338102][   T30]  kthread+0x2c1/0x3a0
[  486.342167][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.347358][   T30]  ? __pfx_kthread+0x10/0x10
[  486.351942][   T30]  ret_from_fork+0x45/0x80
[  486.356348][   T30]  ? __pfx_kthread+0x10/0x10
[  486.360930][   T30]  ret_from_fork_asm+0x1a/0x30
[  486.365698][   T30]  </TASK>
[  486.369572][   T30] Sending NMI from CPU 1 to CPUs 0:
[  486.375377][    C0] NMI backtrace for cpu 0
[  486.375389][    C0] CPU: 0 UID: 0 PID: 10381 Comm: kworker/u8:13 Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0
[  486.375408][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  486.375419][    C0] Workqueue: bat_events batadv_nc_worker
[  486.375439][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70
[  486.375464][    C0] Code: 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 <83> f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48
[  486.375479][    C0] RSP: 0018:ffffc90004adfb88 EFLAGS: 00000246
[  486.375491][    C0] RAX: 0000000000000000 RBX: 0000000000000400 RCX: ffffffff8afbeaac
[  486.375502][    C0] RDX: ffff888029cdc880 RSI: ffffffff8afbe316 RDI: 0000000000000004
[  486.375512][    C0] RBP: 0000000000000261 R08: 0000000000000004 R09: 0000000000000261
[  486.375521][    C0] R10: 0000000000000400 R11: 0000000000000002 R12: 0000000000000001
[  486.375531][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000
[  486.375541][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  486.375556][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.375566][    C0] CR2: 00005603ddee4600 CR3: 000000000df7e000 CR4: 00000000003526f0
[  486.375577][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  486.375586][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  486.375595][    C0] Call Trace:
[  486.375600][    C0]  <NMI>
[  486.375607][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  486.375627][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  486.375644][    C0]  ? nmi_handle+0x1ac/0x5d0
[  486.375662][    C0]  ? __sanitizer_cov_trace_pc+0x41/0x70
[  486.375683][    C0]  ? default_do_nmi+0x6a/0x160
[  486.375701][    C0]  ? exc_nmi+0x170/0x1e0
[  486.375716][    C0]  ? end_repeat_nmi+0xf/0x53
[  486.375734][    C0]  ? batadv_nc_worker+0x8bc/0x1060
[  486.375748][    C0]  ? batadv_nc_worker+0x126/0x1060
[  486.375764][    C0]  ? __sanitizer_cov_trace_pc+0x41/0x70
[  486.375784][    C0]  ? __sanitizer_cov_trace_pc+0x41/0x70
[  486.375805][    C0]  ? __sanitizer_cov_trace_pc+0x41/0x70
[  486.375826][    C0]  </NMI>
[  486.375830][    C0]  <TASK>
[  486.375835][    C0]  batadv_nc_worker+0x126/0x1060
[  486.375854][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  486.375869][    C0]  ? rcu_is_watching+0x12/0xc0
[  486.375891][    C0]  ? trace_lock_acquire+0x14e/0x1f0
[  486.375915][    C0]  ? process_one_work+0x921/0x1ba0
[  486.375933][    C0]  ? lock_acquire+0x2f/0xb0
[  486.375949][    C0]  ? process_one_work+0x921/0x1ba0
[  486.375968][    C0]  process_one_work+0x9c5/0x1ba0
[  486.375989][    C0]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  486.376008][    C0]  ? __pfx_process_one_work+0x10/0x10
[  486.376024][    C0]  ? rcu_is_watching+0x12/0xc0
[  486.376048][    C0]  ? assign_work+0x1a0/0x250
[  486.376065][    C0]  worker_thread+0x6c8/0xf00
[  486.376086][    C0]  ? __pfx_worker_thread+0x10/0x10
[  486.376103][    C0]  kthread+0x2c1/0x3a0
[  486.376123][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.376143][    C0]  ? __pfx_kthread+0x10/0x10
[  486.376164][    C0]  ret_from_fork+0x45/0x80
[  486.376180][    C0]  ? __pfx_kthread+0x10/0x10
[  486.376200][    C0]  ret_from_fork_asm+0x1a/0x30
[  486.376233][    C0]  </TASK>
[  486.378381][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  486.699689][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0
[  486.709826][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  486.719872][   T30] Call Trace:
[  486.723138][   T30]  <TASK>
[  486.726058][   T30]  dump_stack_lvl+0x3d/0x1f0
[  486.730646][   T30]  panic+0x71d/0x800
[  486.734528][   T30]  ? __pfx_panic+0x10/0x10
[  486.738928][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  486.744291][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  486.750262][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  486.755624][   T30]  ? watchdog+0xd7e/0x1240
[  486.760034][   T30]  ? watchdog+0xd71/0x1240
[  486.764447][   T30]  watchdog+0xd8f/0x1240
[  486.768683][   T30]  ? __pfx_watchdog+0x10/0x10
[  486.773352][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  486.778542][   T30]  ? __kthread_parkme+0x148/0x220
[  486.783560][   T30]  ? __pfx_watchdog+0x10/0x10
[  486.788227][   T30]  kthread+0x2c1/0x3a0
[  486.792284][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.797473][   T30]  ? __pfx_kthread+0x10/0x10
[  486.802056][   T30]  ret_from_fork+0x45/0x80
[  486.806461][   T30]  ? __pfx_kthread+0x10/0x10
[  486.811044][   T30]  ret_from_fork_asm+0x1a/0x30
[  486.815815][   T30]  </TASK>
[  486.819032][   T30] Kernel Offset: disabled
[  486.823357][   T30] Rebooting in 86400 seconds..