last executing test programs:

2m53.116436402s ago: executing program 2 (id=338):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002cc0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x8}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x9, 0xffff1e44, 0x3}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x0, 0x8, 0x8d], 0xfec00000, 0x240046})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
landlock_create_ruleset(0x0, 0x0, 0x0)

2m51.606472174s ago: executing program 2 (id=346):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1d4, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc4, 0x8, 0x0, 0x1, [@typed={0xbe, 0x10, 0x0, 0x0, @binary="0bb26cc69e4fb8629d1e9c952f88c343049c40cbc649ad473543ab2e32d25aa6299f7d966cfefa4030448e61178d22eb9933014480fc89ed8aa5da44647e13fc95a4af91fd9d929e3a2c249abcd95ed99b0f22200c91ff1ebc150b3aae24f341553105e9b6d1d8e49c31cfb12d22adee6f0f618a56f1aa1b0c221658f25f5656b749b6acecd4f345cd7212250ce109f3e744f60a0a0686d341c7f7496f11d959a138a577be13baea62f4d5dc5a206cc59451ab4bd11ed1f3403c"}]}, @generic="353843697f9d179aaa61c85d3ca745ad6638b895a128f3ef46cb8c5df108b5f41ad92c10c1137e7ae650b207e009d205b1b8b91fb25eb859c08f694dccc83d2b78cf82c9e9260d29a46a8aa5564053b4f1b671857c2ac0bcd948c21d78549d1dafc13e2d1386807a4db890cfa9565d4c0b3519e75bdf54e31fc1fb42359006d88108c8f1b29007aff2df06944850265c0edb8de0c2147076cf5e457bb64bcf64d59be63b3da15bfbac9b9098fba487350df1b4c1e8bce53abe5550a58008f1e4f3eecfe872e7675ed0e2674a7c7d2616f2982a6dd231b2dca45e3244c5092dcffa0b2c910a", @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private0}]}, 0x1d4}}, 0x0)

2m51.606024772s ago: executing program 2 (id=347):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket(0x1, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x184, 0x19, 0x2, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="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"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052)

2m51.525185122s ago: executing program 2 (id=348):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (rerun: 32)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00') (async)
pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') (async, rerun: 32)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="2716157f3354"}, 0x10) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000001000000000000926b5d92"], 0x0, 0x26, 0x0, 0x1, 0x80000001}, 0x28)

2m51.396366568s ago: executing program 2 (id=353):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3})
mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='smb3\x00', 0x10000, &(0x7f0000000380)='nocase')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4008054)
write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='q7'], 0x17)
socket(0x3, 0x800, 0x6)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x1f, 0x40032, 0xffffffffffffffff, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000d40)={0xd, 0x4, {0x51, 0x8, 0x1, {0xe0ee, 0x1}, {0x9, 0x100}, @rumble={0x22, 0x3}}, {0x54, 0xab, 0xd, {0xdec8, 0x2}, {0xb, 0xfff9}, @const={0x6c04, {0x7, 0x0, 0x7fff, 0x7}}}})

2m51.15672588s ago: executing program 2 (id=358):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd405, {0x0, 0x0, 0x0, r0, 0x64348, 0x6a6d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0xa42}}, './file0\x00'}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000cc0)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(r6, &(0x7f0000000c40)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/172, 0xac}], 0x5}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f00000008c0)=""/158, 0x9e}, {&(0x7f0000000980)=""/128, 0x80}, {&(0x7f0000000a00)=""/75, 0x4b}], 0x6, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x2, 0x4140, &(0x7f0000000d00)={r7, r8+60000000})

2m51.124488158s ago: executing program 32 (id=358):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async)
add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd405, {0x0, 0x0, 0x0, r0, 0x64348, 0x6a6d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0xa42}}, './file0\x00'}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000cc0)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(r6, &(0x7f0000000c40)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/172, 0xac}], 0x5}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f00000008c0)=""/158, 0x9e}, {&(0x7f0000000980)=""/128, 0x80}, {&(0x7f0000000a00)=""/75, 0x4b}], 0x6, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x2, 0x4140, &(0x7f0000000d00)={r7, r8+60000000})

3.324164413s ago: executing program 0 (id=2388):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
listen(0xffffffffffffffff, 0x5)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYBLOB="030010bd70002b46eaa6147d3cf844d3ffa983d6fbdbdf251200c56d080001002f9fda4d4c84c01b9509a2d477a3deb61c4cd785792b7cf39ccc2279c23a463564bac3eab3828428753767da8cd0491180c1069500a5cb880fe20a0fa406fa2880bb8ebf9db34bffe082e41c4ae8d7b675a291", @ANYRES32=0x0, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x449d0}, 0xfa0ba6f6c119b0b8)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x40103, 0x0)
poll(&(0x7f0000000140)=[{r6, 0x10}], 0x1, 0x128)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000200)={0x2b, @loopback, 0x4e23, 0x2, 'wlc\x00', 0x8, 0x1, 0x31}, 0x2c)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r8)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x34, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xfd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x80, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nfc\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x49}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x404c000}, 0x20008840)

1.740756964s ago: executing program 4 (id=2403):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c)

1.497074909s ago: executing program 4 (id=2404):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xa0, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x101, @empty, 0xbf9d}, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, @in6={0xa, 0x4e22, 0xfc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0xda6, @local, 0x5}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
shutdown(r0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x400)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x7})
syz_open_dev$usbfs(&(0x7f0000000880), 0xfffffffffffffffd, 0x100)
recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)

1.280677735s ago: executing program 4 (id=2405):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = fanotify_init(0x200, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x60044040)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x738, 0x2c, 0x400, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x708, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xcf3}, @TCA_FLOW_EMATCHES={0x6fc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x30c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc0, 0x1, 0x0, 0x0, {{0xae3, 0x4, 0x10}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xd, 0x2}, {0xfff8, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="fe8525079649", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ce9f3f", @TCF_META_TYPE_VAR='L;']}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="555bf1db20b707bde3", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2ec9b4591afaa7c9bad7", @TCF_META_TYPE_VAR="67192e2a4ec5", @TCF_META_TYPE_VAR="c0d6222908695c4e7a46", @TCF_META_TYPE_VAR="08a001"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b78508", @TCF_META_TYPE_VAR="efd734"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x0, 0x1}, {0x100, 0x3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0xfe, 0x1}, {0xa, 0xf6, 0x1}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="cfd27c46", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f61036", @TCF_META_TYPE_VAR="3ab591", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="b11c292d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3689"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x7dba}, {0x8, 0x3, 0xcc6}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x1}, {0x3, 0x6, 0x1}}}, @TCF_EM_CONTAINER={0x48, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x100}, "5727c6159a025f4d1c991e7c6e6f0a80d8848715f714e2f8d29358079c11ab205bf1e46e761a3e027876aa1ade013884e859bf4c0e208a186e9a0e"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xfffb}, {0x49ed, 0xa, 0x2, "d860ea351825eb67ceb0"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x3}, {0xffffffffffffffff, 0x0, 0x4}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x456, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x90, 0x5, "774d23ad6a599fadc56644b8d0562bca137877f6f7905b1be4c95d57b04fe7dfe73c2a80506384202a2c1f49e814eeffc636328c18eb8b8ff84703647a3ccd95e32293943772cbe45df7fff78ebcf73282d65d8e4cfbe00562e25246feacb0ce2cc3215bc2a7aac425bf075b4dd59d2f428ac6f8dc47d976b6e3bf8e2e22fbe677616c3641b8ee4b815cdfdb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7fff, 0x1, 0x1}, {0x8000, 0x8, 0x3, 0x4, 0x2, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0xe4, 0x3, 0x0, 0x0, {{0x81, 0x0, 0x3}, "7ccdd915d4fa2f331c73037fc74e165af684a3b8ce24c694e962fc8e0e0d9f4e5d7e240f1811bea8b35220ab5a9327556c9402ff8ba04a16feee2a24fb56790c3756f4a8a0c7443a0ea7682e1d203a907b815958cf778ae7fcc2a1e9f26956c0d685935862ae53c454fada09db31d0f4e4659b0977aa4e449b8a6362694908e9938043e201d6404f44e2c71c62957de81d94a3dbc88115c417008601662d3effe4d60cefc96454e9a85c29e352ff98ff2c8ecdb8a21b8cceea3bf6f700feb69c415fb6495592e8e219918c8624e205629093d40d8a"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x324, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2bc, 0x2, 0x0, 0x0, {{0x5, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_DATA={0x7f, 0x5, "290aa32f5bcf705bc12124292b768b483b9b79a3e66a5fa937ecede088913a53aede33dca458e07ce913786e643e2ada002d4d04536d147b05bd407cd62c04d614a75366f771a490a3ea149172d405f4ede27506aa3910e01c0cbaa3176059b0bb2c8e88ae9c201cd8d6552cbd56849b84bd3d241ae20ad241e33c"}, @TCA_EM_IPT_MATCH_DATA={0xd7, 0x5, "2aa94a8baea1fe50fa772601d3409eae23acc71c37ae139aa274dedf5948039bfd80c206508df3882b10a3d49f2398150b8cd7c571494d9cf49a37793ce301281842bc203279692e0267715684409b40c6f1ac17f1b0682f761d51fd7f35b9b80bd4ae26a57688566ea56b717d50be2f4bde92aaa7676ba99b413cf776d167e6914fe413df63041447f09b10da8b45c3a8f4be3dd51284e8ed6a4b7653f477845fbeba5719752b25729eef4cf8d938f2268aec79d5d6268f36d927fadc8c4e886a87edb118d35833d5136b47eaa57ccd0b37ae"}, @TCA_EM_IPT_MATCH_DATA={0x57, 0x5, "3afb71591130743d46fa27d4662f290421a9a3dd968b3cd3171a18a7e32380531222c2a1791830bc2f080878d909cacfa03474b77da4551f268950ed90f4444ea727f52e9762f970ca568c41f7b66fe778110e"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xd7, 0x5, "8ee4557fbe0e472d4da6290f4ae76e7fdc703b7be24df90d420b70a5af041a1ec05666073a1e153c8493bebdde380bb7817fe05d6e1022598ebb5068b22a74b265cf86713b927df236fd240c7c6572fca24ccbede02d64867d9e1c16e5a93bde31456a6fb0bc72f823cd36f8c17660ec7b79467ec082761cf3dec70a4c7760798e914ba8861dfaf57e33df59e01afcfb2284446f7774909c2113c3298b907267d29f3b8b01f3f758d90c22d7e40a620de6854c0c7bdf5d2d190f0c666932fc47574e651b81d8773909396cf82fe974d4177118"}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x3}, {0x4, 0x3, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xb000, 0x7, 0xcf31}, {{0x0, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x8, 0x2, 0xc}, {0x92, 0x5, 0x0, "11bb0631a2"}}}, @TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff7, 0x4, 0x3}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xbf0b, 0x3, 0xf2}, {0x1, 0xd6c, 0x1, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0xff, 0x2, 0x954, 0x7}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x401, 0x9, 0x9d}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x1efa, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="0cdc69b7f709913e7c4b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x40, 0x2}, {0x8, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x1}, {0x101, 0x80, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x3}, {0x2, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="cf57", @TCF_META_TYPE_VAR="292bacf3", @TCF_META_TYPE_VAR="89f481b5b757e6", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x78, 0x3a, 0x2}, {0x8, 0x9}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x738}}, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x82)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
fanotify_mark(r2, 0x39, 0x1a, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000400)=""/108, 0x6c)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x71, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdf6, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0xc, 0x0, 0x0, 0x20000, 0x8000000000402})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r10, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)

1.164277866s ago: executing program 4 (id=2406):
r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x7fff, 0x5, 0xd, 0x0, "db060475ea0d8318470c9faddcb12e3a88cae5eb3084c7f199c0fc06bf18d00ae592813c6cb76ba83322095b3803ad537e00f8ab580c7561ac7ce9f88b103b31", "74631679e4037f8f7700645bb83d08d4380e4adb7fd6268a14becdb80c44e421", [0x3fb, 0xff]})

1.004689208s ago: executing program 4 (id=2409):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x10)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0xa, 0x5, 0x7, 0x8, 0x2, 0x0, 0x21f}, {0x2, 0x3, 0x6, 0x5, 0x6, 0x5, 0x9}, {0xd, 0xd2c, 0x3, 0x9, 0xbc6c, 0x3, 0x400}, {0x40000001, 0x2, 0x0, 0x8, 0x3, 0x200003ff, 0x6}]})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x3}]})
landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000580), 0x58203, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000005c0)=0xf)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x1, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0})
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000380)={0x0, @data})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000600))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r5, &(0x7f00000000c0)=""/55, 0x37)
getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000180))
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0100cc2408f35333d8384bfb18a455ef9f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800500090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'erspan0\x00', @multicast})

610.049737ms ago: executing program 1 (id=2412):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c)

535.543358ms ago: executing program 3 (id=2413):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="550054d0b0ef7f5f090001b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

448.065764ms ago: executing program 1 (id=2414):
r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
fcntl$setsig(r0, 0xa, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x814)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000180)={0x4, 0x4, 0x5, 0x0, 0x2})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x1e, 0x100, 0x70bd2b, 0x25dfdbfc, {0x19}, [@typed={0x25, 0x6f, 0x0, 0x0, @binary="fe8a10e577bf656adcb0dc384f9e6c311464bdc5a83a62419578583c0e42aa02b3"}, @typed={0x8, 0x105, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000340))
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000380)={'pim6reg1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000005c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040818}, 0x10000010)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r1, 0xc0106441, &(0x7f0000000600)={0x0, <r5=>0x0, 0x7f})
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000640)={0x3, 0x0, r5})
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x800)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe4, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7db99907}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xe069}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x742}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xe4}}, 0x40)
ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000a80))
recvmsg$unix(r6, &(0x7f0000001240)={&(0x7f0000000b00), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b80)=""/188, 0xbc}, {&(0x7f0000000c40)=""/127, 0x7f}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/239, 0xef}, {&(0x7f0000000e40)=""/219, 0xdb}, {&(0x7f0000000f40)=""/166, 0xa6}, {&(0x7f0000001000)=""/32, 0x20}, {&(0x7f0000001040)=""/35, 0x23}], 0x8, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x40000000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r11, &(0x7f0000001280)={0x1, @set_reserved_lt_addr={{0xc74, 0x1}, {0xc}}}, 0x5)
ioctl$HIDIOCGVERSION(r9, 0x80044801, &(0x7f00000012c0))
r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000001340)={0x5, &(0x7f0000001300)=[{0x8, 0x4, 0x3, 0x40}, {0x7, 0x3, 0x8, 0x3}, {0x7fff, 0xcf, 0x8, 0x3}, {0x302, 0xf7, 0x3, 0xffffffff}, {0x4, 0x6, 0x10, 0x3}]}, 0x10)
sendto$inet(r10, &(0x7f0000001380)="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", 0x1000, 0x90, &(0x7f0000002380)={0x2, 0x4e21, @multicast1}, 0x10)
socket$key(0xf, 0x3, 0x2)

386.09948ms ago: executing program 0 (id=2415):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x1, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x0, 0x401, 0x3}, 0x0, 0x3506, 0x2, 0x1, 0x6, 0x50}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'crct10dif\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="3ce6233fbd655ccc8f98920be31fe729e3436a9364f6d898618079f63dbf4c2c60e623cddcdc9bd4f0de4353496018b2d0a8b223fec42c06046a011da4ad380482d34d34b8e7e570d382426ef891a35483498eade0710deec52d5317994b037243891672fbb0339a931b51629a4482b5dfb1177d71c4a133ca91faf167c1aec6c2fbbda13ad33b03b0c6469f1352518fa6fa0cf543c817092d0a9a59ca2ed2c925c9644597555326df1e75b35057874004abec9292cdce9253da0551a10eabdf75bcf9bf1ceb2f765f01704e7fc71e6561e36e045d9dcb", @ANYRES8=r0], 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0)
sendfile(r1, r1, 0x0, 0x9)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbcf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff0000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048080}, 0x20045091)

380.023477ms ago: executing program 3 (id=2416):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000003cac0)={0x1, &(0x7f0000000200)=[{0xa000005, 0x0, 0x0, 0x4, 0x4000000e}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYBLOB="984e0600c16a010044001280110001006272694467655f736c617665000000002c0005800500070001"], 0x64}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)

378.922613ms ago: executing program 0 (id=2417):
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000240)="99581e2937d225529cb25f17ad5be26b95d5405cee112d0a2c039f2a3b7df689a7ca646049ce9e3834798b4898393ffc562da163376143cfa2fea87869e56f56f030ea10e0ba3511c010403bcdd35be91a1275aa98096d7157918c07b780a77079e84ecf6354dd6a5875a749c6931e7d4814847b5cb28a5a7c277a4cbb11e0f7ce69e9bd7b9d68fdb4dc051e47e0ba668308d3055f211aedb9eb6413401de60eae76ef2a6431b4094cf8de4f948f2d0d86b6277bcf3c665889af4b69f6c7710c64e7c8665137082645a1fe0fe39277fe76", &(0x7f0000000340)=""/138}, 0x20)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000300000000080029078000089b4b87773f730ffaabe3d59a60000e00003000304907800030c58451c00000065000e4e24000c00000000ac141444"], 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @empty, 0x0, "028a3f6c58017479bb0063a64e4aff46e122b7fc3c7b00", 0xb2, 0xbfffeff7, 0x40, 0x40000006}, 0x3c)

293.298592ms ago: executing program 1 (id=2418):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = fcntl$dupfd(r0, 0x0, r1)
bind$inet(r2, &(0x7f00000014c0)={0x2, 0x4e23, @multicast1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0xb80e089baf951c9c) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="0a000000010001", 0x7) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r3, 0x20, &(0x7f0000000200)={&(0x7f00000000c0)=""/174, 0xae, 0x0, &(0x7f0000000180)=""/100, 0x64}}, 0x10)

291.44076ms ago: executing program 0 (id=2419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x2)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)={0x5, 0xe, 0x0, 0xe221, 0x4, 0x0, [{0x8, 0x9, 0x1, '\x00', 0x81}, {0xc6, 0x5, 0x1, '\x00', 0x6}, {0x3, 0x0, 0x0, '\x00', 0x1004}, {0x1ff, 0x3, 0xc86, '\x00', 0x2900}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="250a0000000000006111600000003577183917000400000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)

290.744283ms ago: executing program 3 (id=2420):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x1}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r1, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x17f, 0x80, {"f63298267834492c53dfc6ff3c3c6656"}, 0x3, 0x40, 0xe}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001, 0x7fffffff}}}, 0x118)

290.419159ms ago: executing program 3 (id=2421):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff45}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3cb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000090}, 0x44000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

214.928563ms ago: executing program 0 (id=2422):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x100004c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c)

214.412845ms ago: executing program 1 (id=2423):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xb00, @broadcast}}}}}}, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x4000041)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r5, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000600)={r2, 0xd4a, {0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x6, 0xf, 0x0, "d39bb9451491bc59bc57af10df70a23456468dbaed62970b71ede96eed16cbb0b5f96492eac08543e229a5f1fdc63fbf29687bb9859349db0d2d5b89282de8e5", "5939420bc07741ffe3450973c5b3267f8919161169800908bf47b68f650fbf3611f2c36ea8196bfc837be34f5ef684cfc502317e1fe581346785ff46a87df512", "b561b0f67aafd99826fca58b7898743f847f037ccc056587c2df8cb2f6a48320", [0xfeb3, 0xfff]}})
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r6, 0x1e67b000)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

214.049345ms ago: executing program 3 (id=2424):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x27, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd5a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x6, 0x2, 0x9, 0x2, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0xdf, &(0x7f0000000340)=""/223, 0x81e00, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x80005}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x7, 0x4, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000005c0)=[{0x5, 0x5, 0xa, 0x8}, {0x2, 0x2, 0x7, 0x3}, {0x2, 0x4, 0xf, 0x9}, {0x2, 0x4, 0x3, 0x4}, {0x0, 0x1, 0x0, 0xa}, {0x1, 0x2, 0x1, 0x9}, {0x3, 0x1, 0x7}, {0x3, 0x1, 0x8000006, 0xa}, {0x5, 0x9, 0x8, 0xb}], 0x10, 0x3}, 0x94)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, <r5=>0xffffffffffffffff})
close_range(r1, r2, 0x0)
poll(&(0x7f0000000380)=[{r5, 0x10}], 0x1, 0x5)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x1, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r7, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r8, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0)
r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f00000008c0)=@multiplanar_userptr={0x1775, 0x1, 0x4, 0x4, 0x5, {0x77359400}, {0x3, 0x2, 0xa, 0x2, 0x2, 0xa, "a9118c15"}, 0x3ff, 0x2, {&(0x7f0000000840)=[{0xa, 0x0, {&(0x7f00000007c0)}}, {0x1, 0x0, {&(0x7f0000000800)}, 0x4}]}, 0x5, 0x0, r9})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc8, &(0x7f00000000c0)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)

160.350094ms ago: executing program 1 (id=2425):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}, @mss={0x2, 0x1}], 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"])
writev(r5, &(0x7f0000000100), 0x0)

74.853897ms ago: executing program 0 (id=2426):
mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'')
syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x60, 0x65, 0x0, 0xc0, 0x2f, 0x0, @local, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "af2e7b6ba7f9c633"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x6, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x82, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0xa2}, 0x2, {0x4, 0xd, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3ff, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r1 = socket(0x11, 0x2, 0x1)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
lremovexattr(0x0, &(0x7f0000002280)=@known='trusted.overlay.upper\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000002840)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r8, @ANYBLOB="7076bef6c9ad7cb300bc530f96ab8911f40fcdda5f8e25c18024e1a1c11e5f1d337224b5dca6cc99c68fca98e72835e8c14ba3bd6c08ad16dd7d8c41c7c2f15776209ad133a1ebb76a53a60ad66cc10ae0bcc7b3d1e462cdbfee410a3c4be28317e16606ff083be0f1b0adf140089e3debcef06cd77e008f2f386c15a646712fd143fd4d58d8373699aaec7d7cbe4728b0063b5c6cc6985ff0ea3e70168cb0c4ab86939235e1604bbcad291b489a23810d18281d26b687d58a0aea61470703673755fd23836d72e9f031fd0f17ddeb31df8efccdaf10665fbd2dd6913fa89162235d6c12c29cad6be09a382cb26f45b0a4daaaff02c66842e77080c2527ccac209ffbff095a7b0e1b028afd2ca7bc3d52972876749a6169d80872c1131c65ced741775a0be04783a004632513c20924d426d90bf04706e7970764e1e5cfcb8f8c041b8692c8180fb3ec5ca97b9f786851e5fc1488aa007f2b2b0b809ef74abaf23f4d4a91566188f7d91008903446f83ee2aed98fc3b48152a261f1e12fb97982071ddd2ce9900453ee025a1c7a9797db130cd12e5c4b31c9269c0e12aaa2b0e0c776ae3362e351d8e02f6b63752dc046da687a1f6e01356045d87c30daf5c6132d5984924f4fb2971949f6582f215a28efa6211a416feeb70cef1cf76697b19fc9ce0776598e7f00678a5b8568a683ae39b5cb214d04b5192bbc1b865ba885566d1db2d032623b76ae43ff99f8154c529865238ce67140c1b1879a3f786cdc3d082e9d0123510d190529b5829cf5b7e6e05e8c104247ea8e6e8976d22edda44a7366df292336a1b3b1e464732a335fcb33755ac4acfd1dde5be21b33776eef7fcdc558af5075407af06bf4fb478859fbff1cf33383a2799b35f32c2a86262a3f512dfca3ec8d50ea4f5be064747e458e4c32e49da7cafdec3cb22ec64b801ef9e4b0100b4d17c1d6f3974964debb40ccad32a3bc899fcf40bcf0c320119d6f3e6d4ac87aa32c10506b14fc8cbabed4730234170c824842b61dea945acf322e7e68b48baeadb4c97965d4b6d8dbd912b1f37f94d3dfef8d7db45e9bc45064e13c0762d9193741b07ffbbd70953883c966d8fef01e48bfbadc255468701a3e98b1a27a9d6a54051053d18289180e2b8ac51cc4f99e17994cdff67e3db00ba317edcda17ab5db1905e421e144adc679e7f1f51366fb8fa76528cbce098c3fc653efb7227eb53fbb081069490eb2efa4b186983449f300ca5d48fdb18f1151065fab634928d38b07527dfe5b06ee23ab0a51085d2e33aad424685f3131b03ff40a4999c2d5bcb5a77eea38e62dce4ea3e204f5f948ba1bbc32ece2843630bf89bd8009f7c3fa2e0287a860c591077719cc51dd36ca9c3f247ec2b25d061c363440db80df5100ac86ac20b867f70ef2571d317b39e2d7e9df8df00563f7617b8cc9da28a1b307b721b86dad1fc210e210bbcb948182472a6ca2064867ee4b8afea6e6c06d814f6dfb56d4161bbc87a174677857c384deda32cc1d32ee89efafbfbb4493243b531c8699b46a4203a6569f41419388d2c7ba803221a04d77a0465bd0551fb7e3a96dbb2e036ccb5801918c18fc54eabf6526807cb9a80388772fbbd1c9a535457d440de36262b3341c0708fd4ff9ff596b2b6585b107753d35cbd7f57dc7e776416a5c87d64cb3b45be39fbf3dbef49782a9c385cadc4419a52d3e13afda4ea8993f5c373358e77f7db91985acad0d3b47ac979dcd9b9ce0272da1492d8fd9dab729901ece1ea2c17a9a8bb28d1e757d08cbaa72e8e2e73e329f1150f1f18b352fefbbb671974ed8c62ccc59671ccc5e3c978672756e704fe3ae515f19065d0c25734abd1d2b34e4a90a5f61b91ad77a0387a0a164beba767bc9cfe2d03ce3723293a3bc21f1f9b755c8b271bec427f80b32aa045e130606541b37cb58b47ca20a097b002def10d2a0340fc2a9440fc63c5928874367c54b62303a3dcb66f245136a46d44e4c311b9692aa80fe8e9ed35d1690edd9d0a0634fbf1ef6caf174a534842159a7a24c1303bfa3c9ea812ee2f5f8cf7553a4463ff422477f76603da9d73da1e3ef13daf70959eeb4bbe42441a9538ca534e4d7f8d08418b4e8f5c5e0b64eff158c28928b13c237f2517aae1d858b4df86e0f5053017e94d55c5fe42222a03a94abcf10a57ce6711646fb3a4540ec2298a8f5cd7f885fda4c635ee0c67c3f2f2ed34aff77b6fd7aa33c5fd0e93b49f20d7f6a21512add4b3ae2987be8169a33d169dcb5b978c2d7016e1a1fbb6c0221a3b185e96b32e2829caa50773fbf3cfb07a16dd516f874c6f35fda36b3dc76ab814895dd6c6d9eeaf68316d55f3427bffcad6f145cecd6a7a2959efbd12f562664173cc610bb565def1422b9e1efd3b045581be446c9df00609a53c43c6fc4b65309f519fc695f8008e99274c840b126d2e21efc47d1704b33c4512f92d057ba5b9be2ac5226c53ba859f1299185b736ef07e828e40fe98158aee85f310c1bd4b01cf155d846fbc7a5ca38f0ff87d203243511b3bc46913dd29440e766cbe6260560efe8b5d2bb0a20e09593d384ad1365e190654b3891d586e9608a387313ccecca602b16a558369833063a8812db58b02c123babebb69fd849680574a3b10d1cb4510af8588a23c8f2f95f3fab17c8933b006ebf87ff3bf9b976beb3c735af707621adb8c559c3e009bcd66c271733b8ac8d8a7666bd0094116a80e8e6d4d924bb57e58016acc977df79012e64c302585610e41be97dc80cb34c1ac52499e80e586e223851f1aa69151705de45eac4e4322ac7ca206922395cf968a12179386a4ab75a5e880bbe06aab6a6330d172bf8a7cd0e32f4c1563a26f8c476a816a500cfb85b68a32ed05c5a238d83b53d758c5269145987fac5b226e91bf6f8575766c88b51a7de8e10a432c1fabe946dda15293be6f21fb17fc60504d74d270142584ab99945cf4156ce7cbf513087623959056cfb4ee8dd5a9812d123b00350c3c6bf7c754d2a808bec382d8a2824ee45b8ebd50687dec9906ac43d3ea01bdda06198f88fe70f624baf489a3d3af2e66482bb659954b6400cf04fdaa611b61924a322dddeb553b1e7f32c8d42a7731aa632f161115e52edae2781ef346d308676c3de4f7c270e6c1a626d3a7bda022f91996c3d751abd28f4fa335bcad254e16c1d7a0f8725690b5fa54022489cd8e165e5d96f0437352fbe53a59697c589237b33356dedb98942a06a5ce0eab45a686c0d2ca3ff2547b38f7aa01e6ffd487b807f717c657db90803af54abb16ca81f3a3975c4c3332819c1d5055254cb164ec96607c59e0dc74b59d9b72ea65d046df05a3063ad992f50aa05a6cbf05d5c5c12465a6b35324aa07314c113d0ab92168508e87328bbde5853103d2f84461e4ae3a698d49ad942e8ea70f05800c34d3f3391f20e43c888d4e9350fd2c2a05ecfd32ef2e68c4ebcfce830067a62b8ed1ed940c56e79ca6bf39a315b2201e65880376a940c6969d876b6a110d12eef74f929a1c43cff04263a55c3d91bee430fb19007bb19f64a748118feb719b7f1f988aa189b0485fde269af711fd10b2f71a206213dbeff1ae3fe979dcca6c4fc988b8bd1542989c737415f53b667b61f4e3266c46b5eec5116e21ca481a5fca5e81d6fc2aa393685e6db415098bd4ce2d5e08974f0c0234b3ed6206c9bab9561e23247612305f882cf1d7580c27b955e73b97ec0029bdc50b80facf429345fb59ad1d864bf7eb4cd3d0052aa0ded0ac8f2e97d5d844a1b0749ef0c95e227ee28b3e8601ce28fc6aa8ab2aeef85d7a537d48f878e5b8b441319df9355f451134a128818e89bee25751c0784fb012a3a6619b0d598cd3aab944ae7efd25ee54a26c4ae39133f9a94382368e17ade5f714acd255ab2aa5423fe6661e9ae5e1646d13974344b7d546ebc8a717158d95d3b6e1b1e3bdce679b9e9bfda5ccbfe52788e3a27e507824f0d42089226297d0113f5830f5f6a10c040882341b3bc8e2241c83eefcbd301e079997a1bec50005c884197442ae9c2216e9f9146808172e15a25c44bd652d3f507586afd29c60323611e855d757cdf00cf81d57f77c271bd3fffb6dfb6ab73f1c11404477a5d129921a8212b5159d114ec6dc530afa755bf59b2e82d22f312577d43211bc401f846e2f4778d4e67d2808d9de5e48c561e2c24a9a5c4d9c7e209246363b3d54a21e4be7fa624de7343c12070259f1c560ee1c5dc8c9ec9be0bf5f689fcae081cf1e33b5871b854d1f7ca63e7211de9d1d2ef12ce8a00c75cb0ee1cbcd34fa6e97120c695a10ca3272209932ba962a187c33c06287ce46ef14b604415dd5a0bb7ee0048c11e71827913eba8d5c8bf43470aabf088eebcb123971fc466c289059cd87c654179cef776ecf82aee2a831a9369b85e71da316cc5ee482f510930b790628e00dbc7da6d0401c31ffb57028af67cc82009aa113ec99668d7f6c334d33e3a27cc7e221da411fa5052d80610ec0bf30f3f09b590edfb8317aac3490691486492a23fa361a213c33592bc1941886fad8da8c536cefe716ddb135cab6b655ed1b37aa8531494ec63ce59dc6310b80e7e719a59417e998de1f88e6d7088491a3319bac8b609fc4df8270d3068f933fa34e00bef40d1c53751ce64ee99c00d7fb97816e74e018f12e7f501268c76a59b4a946ad92dc9e53f15478eaf232e6db2a20da21fd9527d3c3be6f49f0dbd2c6a9d38270d7f4784c203a823dc4eaa3a11967bf6cdbe496f6b77cb1e3ad8ac2763a32f5d9ec5ae0a74cb5ba4b55f9bdbe3f0a5266980061e434f9821ef3b65fcb5f2db0c4af3bcd1ff531f15289d7d3c080780cdb318f97b5f99e6e0fb4886e161507bf00b6dede0a60263f9ccf3e260ec688b40c65dd07ab01cf1b73c09c9980429cec8767b79b48618da9e0da943178b931eac3e22ac3bdd822d5ce8dc232dd71c01a3218819c008ee24e25e13ed6dca97a019cb8492c87aa2de6653ae203f9ed99cdc92f5e8fd0e95756a2e5c3cfb2c3127d4837c8f49a7c7ef5c5ac326261b9bde21ccbc27d9712c0c5864ea61b0d7700904010dfc3d28f045c7a44e4f847c9477da2ebe931079222270f13d15ca2e4dc89098c5c4198c9c779f54ea388c1d00b93a70ce75a620599477e17a7f95a88479c4feab68d52c7e6e775e280123af2ff6cda35dff0759a383ae0f39471deab63bac1abc8635e5eb0bf4ede7d0b436a3f819ac7fca1d026f6e5db3845e13b9edc5cd69ca5564dd9e2d5214500e75daa4b6fd1b07ca9658f84c52b07cc169fa923aaa8040e88dc65938c5e51024498453b318464f6175d2365a24201dbf51680ee88fc54f2c2bba69310ce87f0fe960d9c6b9df5c628e5b924da1af6a3f7894318bcc7ff4980cb0443821836fd49ca8a9d9fd0b427af0b782db3bf7b6388507cf168684d151043d4f75e8cb75a2602f490a62558fa78a2f218ea3382c9769c7965f309038aae108a02f62e9ea61000f0e59b7d17a9b0b7b4b01663914e7b8358527a088825d988e155acb0458201ae03cff42e2b880a7fa740d1daa7c95b3c5bcc216a705db2b4340a812bbbc65a1ab22dd491b624148499e1ed8438811f25ab29ab5d7f5df2594dd8d99266fabb1c6d93b649317c4ca302942e2a1b03bf2767fdb208d21260de5e12a2b9e1669775cd59e759e4d22e7d0d56e6153524c3c41151176214fbab11fc927556cb70f10a1d3fee3edb33fc22e2e630df0cadfec51ec2a9d17afc712ab5d4989bb690243926", @ANYRESOCT=r4, @ANYRESOCT=r3, @ANYRES16, @ANYRESOCT=r7, @ANYRES32=r8], 0xd)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

74.53283ms ago: executing program 3 (id=2427):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f3566b831300f00d8360f01f866b83a018ed0c744240029000000430f0018ff2c242e0f2240ff6ffdc4237d3990a8000000000fc73966ba2000ed", 0x3c}], 0x1, 0x6c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x4, 0xc5, 0x3ff, 0x20, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x7}, 0x50)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

73.799638ms ago: executing program 4 (id=2428):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00')
ioctl$COMEDI_POLL(r0, 0x640f)
pread64(r0, &(0x7f0000000140)=""/25, 0x19, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', <r1=>0x0, 0x8, 0x80, 0x7fffffff, 0x6, {{0x11, 0x4, 0x0, 0x8, 0x44, 0x66, 0x9, 0x0, 0x29, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0x1b, 0xb4, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x16}]}, @end, @lsrr={0x83, 0xb, 0x19, [@multicast1, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r2, 0x0)
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffff, 0x2}, {0xd, 0x6}, {0xc, 0x2}}, [{0x8, 0xb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000885)

0s ago: executing program 1 (id=2429):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, '\x00', "91c9add39f5afdd222c3a2dcc939faf4", "fdffffff", "d7da7bc774355bf5"}, 0x28)
sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000640)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e"])
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
open(&(0x7f0000000e80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101000, 0x11)

kernel console output (not intermixed with test programs):

stem_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.480189][ T7944] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.492127][ T7944] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.497341][ T7944] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.506469][T10916] overlayfs: failed to clone upperpath
[  147.525685][   T40] audit: type=1400 audit(2000000000.917:59752): avc:  denied  { write } for  pid=10920 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.647164][T10935] program syz.1.1429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.651787][   T40] audit: type=1400 audit(2000000001.029:59753): avc:  denied  { write } for  pid=10930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.713393][T10941] input: syz0 as /devices/virtual/input/input51
[  147.919435][T10952] xt_time: unknown flags 0xf4
[  148.065980][T10967] netlink: 'syz.0.1435': attribute type 29 has an invalid length.
[  148.070385][T10967] netlink: 'syz.0.1435': attribute type 29 has an invalid length.
[  148.283858][   T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  148.445139][   T39] usb 6-1: Using ep0 maxpacket: 32
[  148.448457][   T39] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  148.452170][   T39] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  148.458318][   T39] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.461976][   T39] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  148.471390][T10983] overlayfs: failed to resolve './bus': -2
[  148.473958][   T39] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  148.479114][   T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.481868][   T39] usb 6-1: Product: syz
[  148.483586][   T39] usb 6-1: Manufacturer: syz
[  148.485513][   T39] usb 6-1: SerialNumber: syz
[  148.493002][    C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  148.502581][   T39] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input52
[  148.721921][   T39] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  148.725317][   T39]  (id 0x00)
[  148.775880][   T39] rc_core: IR keymap rc-imon-pad not found
[  148.779127][   T39] Registered IR keymap rc-empty
[  148.781091][   T39] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  148.784933][   T39] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  148.804382][T11015] input: syz0 as /devices/virtual/input/input54
[  148.819332][   T39] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[  148.843470][   T39] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input53
[  148.855465][   T39] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:17> initialized
[  149.127541][T11051] fuse: fd is not a fuse device
[  149.331673][T11074] xt_bpf: check failed: parse error
[  149.360847][T11077] input: syz0 as /devices/virtual/input/input55
[  149.381035][T10965] sctp: [Deprecated]: syz.1.1434 (pid 10965) Use of int in max_burst socket option deprecated.
[  149.381035][T10965] Use struct sctp_assoc_value instead
[  149.389548][T11079] sctp: [Deprecated]: syz.1.1434 (pid 11079) Use of int in max_burst socket option deprecated.
[  149.389548][T11079] Use struct sctp_assoc_value instead
[  149.399655][T11079] sctp: [Deprecated]: syz.1.1434 (pid 11079) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.399655][T11079] Use struct sctp_sack_info instead
[  149.408573][T10965] sctp: [Deprecated]: syz.1.1434 (pid 10965) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.408573][T10965] Use struct sctp_sack_info instead
[  149.424199][ T5832] usb 6-1: USB disconnect, device number 17
[  149.425266][T11086] cgroup: Unknown subsys name 'uid>00000000000000060929'
[  149.499207][T11092] bond2: ARP target 9.0.0.0 is already present
[  149.510096][T11092] bond2: option arp_ip_target: invalid value (9)
[  149.516480][T11092] bond2 (unregistering): Released all slaves
[  149.517782][T11101] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  149.522367][T11101] overlayfs: failed to set xattr on upper
[  149.524352][T11101] overlayfs: ...falling back to redirect_dir=nofollow.
[  149.526686][T11101] overlayfs: ...falling back to index=off.
[  149.528600][T11101] overlayfs: ...falling back to uuid=null.
[  149.530544][T11101] overlayfs: ...falling back to xino=off.
[  149.532421][T11101] overlayfs: maximum fs stacking depth exceeded
[  149.618676][T11108] fuse: Bad value for 'group_id'
[  149.620537][T11108] fuse: Bad value for 'group_id'
[  149.645918][T11110] xt_hashlimit: size too large, truncated to 1048576
[  149.646788][T11111] xt_hashlimit: size too large, truncated to 1048576
[  149.991422][T11128] __nla_validate_parse: 7 callbacks suppressed
[  149.991434][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'.
[  149.997324][T11128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1483'.
[  150.433258][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'.
[  150.437432][T11133] vlan2: left allmulticast mode
[  150.439737][T11133] ip6gretap0: left allmulticast mode
[  150.442199][T11133] vlan2: left promiscuous mode
[  150.446914][T11133] ip6gretap0: left promiscuous mode
[  150.449695][T11133] bridge0: port 3(vlan2) entered disabled state
[  150.458103][T11133] bridge_slave_1: left allmulticast mode
[  150.460758][T11133] bridge_slave_1: left promiscuous mode
[  150.463444][T11133] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.469685][T11133] bridge_slave_0: left allmulticast mode
[  150.472367][T11133] bridge_slave_0: left promiscuous mode
[  150.480352][T11133] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.613196][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'.
[  150.625629][T11144] macvlan0: entered promiscuous mode
[  150.627535][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'.
[  150.631494][T11135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'.
[  150.637301][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'.
[  150.655505][   T40] kauditd_printk_skb: 13 callbacks suppressed
[  150.655520][   T40] audit: type=1400 audit(2000000003.836:59767): avc:  denied  { ioctl } for  pid=11147 comm="syz.0.1488" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  150.727881][T11154] netlink: del zone limit has 4 unknown bytes
[  150.779135][T11156] input: syz0 as /devices/virtual/input/input56
[  150.879439][T11171] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1496'.
[  150.995597][   T40] audit: type=1400 audit(2000000004.154:59768): avc:  denied  { name_bind } for  pid=11180 comm="syz.4.1499" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  151.065163][T11191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1500'.
[  151.068635][T11191] unsupported nlmsg_type 40
[  151.071913][T11192] input: syz0 as /devices/virtual/input/input57
[  151.140514][T11204] tmpfs: Unknown parameter 'indo64'
[  151.247325][T11221] netlink: 'syz.3.1512': attribute type 1 has an invalid length.
[  151.267523][T11221] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.272891][T11221] bond1: entered allmulticast mode
[  151.282144][  T843] IPVS: starting estimator thread 0...
[  151.382960][T11226] IPVS: using max 30 ests per chain, 72000 per kthread
[  151.437379][  T843] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  151.456811][T11243] input: syz0 as /devices/virtual/input/input58
[  151.607160][  T843] usb 6-1: Using ep0 maxpacket: 8
[  151.611328][  T843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.616233][  T843] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  151.621269][  T843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.625841][  T843] usb 6-1: config 0 descriptor??
[  151.852473][  T843] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  152.356088][T11293] sock: sock_timestamping_bind_phc: sock not bind to device
[  152.523340][T11297] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  152.657625][   T40] audit: type=1400 audit(2000000005.717:59769): avc:  denied  { name_connect } for  pid=11302 comm="syz.0.1523" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  152.711257][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'.
[  152.739993][  T843] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  152.910902][  T843] usb 8-1: Using ep0 maxpacket: 16
[  152.916882][  T843] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  152.920780][  T843] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  152.924209][  T843] usb 8-1: Product: syz
[  152.926067][  T843] usb 8-1: Manufacturer: syz
[  152.928024][  T843] usb 8-1: SerialNumber: syz
[  152.932210][  T843] usb 8-1: config 0 descriptor??
[  153.195777][  T843] usb 8-1: USB disconnect, device number 13
[  153.418386][T11322] overlayfs: failed to clone upperpath
[  153.480406][   T40] audit: type=1400 audit(2000000006.485:59770): avc:  denied  { accept } for  pid=11325 comm="syz.4.1532" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  153.489326][   T40] audit: type=1400 audit(2000000006.503:59771): avc:  denied  { listen } for  pid=11325 comm="syz.4.1532" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  153.545273][T11330] netlink: 'syz.4.1534': attribute type 3 has an invalid length.
[  153.547844][T11330] netlink: 'syz.4.1534': attribute type 1 has an invalid length.
[  153.761835][T11337] input: syz0 as /devices/virtual/input/input59
[  153.764045][T11337] input: failed to attach handler leds to device input59, error: -6
[  153.849474][T11344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11344 comm=syz.3.1538
[  154.162611][T11354] macsec1: entered promiscuous mode
[  154.165097][T11354] macsec1: entered allmulticast mode
[  154.234462][   T40] audit: type=1400 audit(2000000007.186:59772): avc:  denied  { shutdown } for  pid=11365 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  154.242529][T11366] syzkaller1: entered promiscuous mode
[  154.244421][T11366] syzkaller1: entered allmulticast mode
[  154.254039][   T40] audit: type=1800 audit(2000000007.205:59773): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1549" name="file0" dev="tmpfs" ino=1907 res=0 errno=0
[  154.265002][   T40] audit: type=1804 audit(2000000007.205:59774): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1549" name="file0" dev="tmpfs" ino=1907 res=1 errno=0
[  154.274017][   T40] audit: type=1804 audit(2000000007.205:59775): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1549" name="file0" dev="tmpfs" ino=1907 res=1 errno=0
[  154.282732][   T40] audit: type=1800 audit(2000000007.205:59776): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1549" name="file0" dev="tmpfs" ino=1907 res=0 errno=0
[  154.388248][ T2321] usb 6-1: USB disconnect, device number 18
[  154.500980][T11387] input: syz0 as /devices/virtual/input/input60
[  154.702530][T11400] 8021q: adding VLAN 0 to HW filter on device team0
[  154.711510][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.726284][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.730481][T11400] veth1_to_batadv: left promiscuous mode
[  154.734469][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.741841][T11400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.746220][T11400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.754536][T11400] veth1_vlan: left promiscuous mode
[  154.758009][T11400] veth0_vlan: left promiscuous mode
[  154.761051][T11400] veth0_vlan: entered promiscuous mode
[  154.765302][T11400] veth1_vlan: entered promiscuous mode
[  154.771915][T11400] veth1_macvtap: left promiscuous mode
[  154.775352][T11400] tipc: Resetting bearer <eth:veth0_macvtap>
[  154.778317][T11400] veth1_macvtap: entered promiscuous mode
[  154.786990][T11400] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  154.790994][T11400] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  154.795046][T11400] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  154.799034][T11400] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  154.802350][ T2321] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  154.810575][T11400] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.814970][T11400] veth1_to_batadv: entered promiscuous mode
[  154.821057][T11400] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.824917][T11400] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.828734][T11400] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  154.861176][ T7942] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.864754][ T7942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.868725][ T7942] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  154.872388][ T7942] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.876078][ T7942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.879687][ T7942] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  154.887640][ T7946] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  154.903232][ T7942] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.906607][ T7942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.912313][ T7942] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  154.916225][ T7942] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.920383][ T7942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.924112][ T7942] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  154.942403][ T7942] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  154.948103][ T7942] bond3: (slave veth0_to_bond): making interface the new active one
[  154.969626][ T7942] bond3: active interface up!
[  154.975441][ T2321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.981870][ T2321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.987888][ T2321] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  154.992082][ T2321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.000968][ T2321] usb 6-1: config 0 descriptor??
[  155.067348][T11411] misc userio: No port type given on /dev/userio
[  155.132820][T11415] input: syz0 as /devices/virtual/input/input61
[  155.462616][ T2321] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  155.648175][T11422] fuse: fd is not a fuse device
[  155.650291][T11422] fuse: Unknown parameter 'fw'
[  155.731060][ T5825] usb 6-1: USB disconnect, device number 19
[  155.792181][T11433] syzkaller0: entered promiscuous mode
[  155.794154][T11433] syzkaller0: entered allmulticast mode
[  155.805807][T11433] __nla_validate_parse: 4 callbacks suppressed
[  155.805823][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'.
[  155.811112][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1571'.
[  155.994799][T11436] overlayfs: failed to clone upperpath
[  156.150386][ T5825] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  156.330735][ T5825] usb 6-1: Using ep0 maxpacket: 32
[  156.340323][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short
[  156.348161][ T5825] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.353177][ T5825] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  156.356511][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.359794][ T5825] usb 6-1: Product: syz
[  156.361256][ T5825] usb 6-1: Manufacturer: syz
[  156.363351][ T5825] usb 6-1: SerialNumber: syz
[  156.588391][ T5825] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  156.592692][ T5825] usb 6-1: MIDIStreaming interface descriptor not found
[  156.636305][ T5825] usb 6-1: USB disconnect, device number 20
[  157.219559][T11459] syz.0.1579 (11459): drop_caches: 2
[  157.394751][T11469] overlay: ./bus is not a directory
[  157.493553][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  157.493565][   T40] audit: type=1400 audit(2000000010.237:59778): avc:  denied  { ioctl } for  pid=11473 comm="syz.4.1582" path="socket:[44208]" dev="sockfs" ino=44208 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  158.425779][   T40] audit: type=1400 audit(2000000011.107:59779): avc:  denied  { execute_no_trans } for  pid=11497 comm="syz.4.1589" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=44235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  158.432353][T11498] netlink: 'syz.4.1589': attribute type 2 has an invalid length.
[  158.441300][T11498] netlink: 151 bytes leftover after parsing attributes in process `syz.4.1589'.
[  158.468991][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'.
[  158.494816][T11506] input: syz0 as /devices/virtual/input/input62
[  158.547352][T11507] macvlan0: left promiscuous mode
[  158.707567][T11507] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  158.771355][T11520] fuse: fd is not a fuse device
[  158.796588][T11523] 8021q: VLANs not supported on ip_vti0
[  158.841864][   T40] audit: type=1400 audit(2000000011.510:59780): avc:  denied  { listen } for  pid=11525 comm="syz.3.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  158.879510][T11535] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1602'.
[  158.895100][    C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.907153][T11537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1603'.
[  158.908625][   T40] audit: type=1400 audit(2000000011.566:59781): avc:  denied  { map } for  pid=11532 comm="syz.0.1601" path="socket:[44276]" dev="sockfs" ino=44276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  158.926631][T11533] overlayfs: failed to resolve './bus': -2
[  158.932526][   T40] audit: type=1400 audit(2000000011.566:59782): avc:  denied  { accept } for  pid=11532 comm="syz.0.1601" path="socket:[44276]" dev="sockfs" ino=44276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  158.946757][T11539] input: syz0 as /devices/virtual/input/input63
[  158.948478][   T40] audit: type=1400 audit(2000000011.566:59783): avc:  denied  { bind } for  pid=11536 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  158.985087][T11541] trusted_key: encrypted_key: master key parameter is missing
[  159.016830][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'.
[  159.071658][T11547] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1607'.
[  159.221112][T11567] CIFS mount error: No usable UNC path provided in device string!
[  159.221112][T11567] 
[  159.224492][T11567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  159.260830][T11573] overlayfs: failed to clone upperpath
[  159.329356][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'.
[  159.647473][   T40] audit: type=1400 audit(2000000012.258:59784): avc:  denied  { map } for  pid=11606 comm="syz.1.1627" path="socket:[41524]" dev="sockfs" ino=41524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  159.783419][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'.
[  159.788399][T11619] netlink: 'syz.4.1631': attribute type 3 has an invalid length.
[  160.109146][T11641] overlayfs: failed to clone upperpath
[  160.162412][T11647] fuse: fd is not a fuse device
[  160.264796][T11651] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[  160.268324][T11651] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[  160.372102][T11661] netlink: 'syz.4.1642': attribute type 1 has an invalid length.
[  161.449057][ T5825] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  161.631518][ T5825] usb 6-1: Using ep0 maxpacket: 32
[  161.637070][ T5825] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  161.640851][ T5825] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  161.644675][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  161.648701][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.652995][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  161.656211][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  161.660460][ T5825] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  161.663528][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.667470][ T5825] usb 6-1: config 0 descriptor??
[  161.890801][ T5825] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  161.901635][ T5825] usb 6-1: USB disconnect, device number 21
[  161.906019][ T5825] usblp0: removed
[  162.015665][T11669] input: syz0 as /devices/virtual/input/input64
[  162.378791][ T5825] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  162.560418][ T5825] usb 6-1: Using ep0 maxpacket: 32
[  162.564172][ T5825] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  162.567805][ T5825] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  162.571731][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  162.575200][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  162.579157][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  162.585005][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  162.590101][ T5825] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  162.594076][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.599528][ T5825] usb 6-1: config 0 descriptor??
[  162.826272][ T5825] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  163.034374][   T40] audit: type=1400 audit(2000000015.431:59785): avc:  denied  { read write } for  pid=11665 comm="syz.1.1643" name="lp0" dev="devtmpfs" ino=3431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  163.042270][ T5825] usb 6-1: USB disconnect, device number 22
[  163.044182][ T5825] usblp0: removed
[  163.045958][   T40] audit: type=1400 audit(2000000015.431:59786): avc:  denied  { open } for  pid=11665 comm="syz.1.1643" path="/dev/usb/lp0" dev="devtmpfs" ino=3431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  163.120236][T11661] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  163.156747][T11675] overlayfs: conflicting lowerdir path
[  163.211922][T11678] netlink: 'syz.3.1648': attribute type 1 has an invalid length.
[  163.215652][T11678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.219400][T11678] IPv6: NLM_F_CREATE should be set when creating new route
[  163.287679][   T40] audit: type=1400 audit(2000000015.665:59787): avc:  denied  { connect } for  pid=11687 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  163.298708][   T40] audit: type=1400 audit(2000000015.683:59788): avc:  denied  { bind } for  pid=11687 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  163.304878][T11690] sit2: entered promiscuous mode
[  163.345180][   T40] audit: type=1400 audit(2000000015.721:59789): avc:  denied  { connect } for  pid=11692 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.370852][T11678] ceph: No mds server is up or the cluster is laggy
[  163.376839][T11695] __nla_validate_parse: 1 callbacks suppressed
[  163.376850][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'.
[  163.407928][   T40] audit: type=1400 audit(2000000015.777:59790): avc:  denied  { shutdown } for  pid=11692 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.443727][T11698] input: syz0 as /devices/virtual/input/input65
[  163.446612][T11700] overlayfs: failed to clone upperpath
[  163.575667][T11707] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  163.577062][T11707] 
@0Ù: renamed from bond_slave_1 (while UP)
[  163.933113][T11730] input: syz0 as /devices/virtual/input/input66
[  163.970924][ T2321] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  164.141877][ T2321] usb 6-1: Using ep0 maxpacket: 32
[  164.145375][ T2321] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  164.148883][ T2321] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  164.152820][ T2321] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.156457][ T2321] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  164.162580][ T2321] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  164.165718][ T2321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.168994][ T2321] usb 6-1: Product: syz
[  164.170804][ T2321] usb 6-1: Manufacturer: syz
[  164.173048][ T2321] usb 6-1: SerialNumber: syz
[  164.182801][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  164.189840][ T2321] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input67
[  164.339351][ T5739] Bluetooth: hci0: unexpected event for opcode 0x1009
[  164.378916][T11743] No source specified
[  164.420015][ T2321] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  164.423644][ T2321]  (id 0x00)
[  164.429879][T11750] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1672'.
[  164.483991][ T2321] rc_core: IR keymap rc-imon-pad not found
[  164.485973][ T2321] Registered IR keymap rc-empty
[  164.487603][ T2321] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  164.490905][ T2321] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  164.520965][T11755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=11755 comm=syz.4.1674
[  164.527436][ T5739] Bluetooth: hci3: Malformed LE Event: 0x0d
[  164.545348][   T40] audit: type=1400 audit(2000000016.835:59791): avc:  denied  { firmware_load } for  pid=11754 comm="syz.4.1674" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  164.571576][T11755] netlink: 'syz.4.1674': attribute type 10 has an invalid length.
[  164.583064][T11755] team0 (unregistering): Port device team_slave_0 removed
[  164.586975][T11755] team0 (unregistering): Port device team_slave_1 removed
[  164.606970][T11759] overlayfs: missing 'lowerdir'
[  164.636815][ T2321] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[  164.643321][ T2321] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input68
[  164.657744][ T2321] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:23> initialized
[  164.941560][T11782] input: syz0 as /devices/virtual/input/input69
[  165.106332][   T39] usb 6-1: USB disconnect, device number 23
[  165.196257][T11755] syz.4.1674 (11755) used greatest stack depth: 18984 bytes left
[  165.238249][T11788] geneve2: entered promiscuous mode
[  165.249932][ T7953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.271228][ T7953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.279859][ T7953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.283798][ T7953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.683445][T11799] netlink: 'syz.1.1687': attribute type 1 has an invalid length.
[  165.684467][   T40] audit: type=1400 audit(2000000017.911:59792): avc:  denied  { append } for  pid=11800 comm="syz.3.1688" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  165.700508][T11799] 8021q: adding VLAN 0 to HW filter on device bond8
[  165.705803][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'.
[  165.709260][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1687'.
[  167.273518][    C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  178.303281][   T40] audit: type=1400 audit(2000000029.720:59793): avc:  denied  { read } for  pid=11823 comm="syz.4.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  178.354926][   T40] audit: type=1400 audit(2000000029.767:59794): avc:  denied  { write } for  pid=11823 comm="syz.4.1696" path="socket:[42766]" dev="sockfs" ino=42766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  178.490541][T11830] evm: overlay not supported
[  178.605485][T11848] overlayfs: failed to clone upperpath
[  178.659815][T11850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  178.662124][T11850] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  178.665314][T11850] vhci_hcd vhci_hcd.0: Device attached
[  178.667938][T11852] vhci_hcd: connection closed
[  178.668098][ T7937] vhci_hcd vhci_hcd.1: stop threads
[  178.671555][ T7937] vhci_hcd vhci_hcd.1: release socket
[  178.673407][ T7937] vhci_hcd vhci_hcd.1: disconnect device
[  179.202292][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'.
[  179.495796][   T40] audit: type=1400 audit(2000000030.825:59795): avc:  denied  { map } for  pid=11881 comm="syz.1.1712" path="pipe:[44995]" dev="pipefs" ino=44995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  179.522378][T11885] sctp: [Deprecated]: syz.4.1713 (pid 11885) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.522378][T11885] Use struct sctp_sack_info instead
[  179.645978][T11904] input: syz0 as /devices/virtual/input/input70
[  179.786106][T11893] xfrm1: entered allmulticast mode
[  179.810598][   T40] audit: type=1400 audit(2000000031.134:59796): avc:  denied  { append } for  pid=11913 comm="syz.0.1720" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  179.821412][T11916] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  179.990136][T11926] Cannot find del_set index 14804 as target
[  180.203088][T11939] xt_hashlimit: size too large, truncated to 1048576
[  180.352502][T11946] input: syz0 as /devices/virtual/input/input71
[  180.407118][T11943] bond2: entered promiscuous mode
[  180.524741][   T40] audit: type=1326 audit(2000000031.798:59797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.1731" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd13d59cdd9 code=0x0
[  180.603710][T11963] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  180.702893][   T40] audit: type=1400 audit(2000000031.957:59798): avc:  denied  { setattr } for  pid=11968 comm="syz.1.1736" name="vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  180.887270][ T5832] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  181.047612][ T5832] usb 8-1: Using ep0 maxpacket: 8
[  181.051173][ T5832] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  181.053905][ T5832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.057029][ T5832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.060684][ T5832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.064915][ T5832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.069450][ T5832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  181.072518][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.348611][ T5832] usb 8-1: GET_CAPABILITIES returned 0
[  181.351257][ T5832] usbtmc 8-1:16.0: can't read capabilities
[  181.566115][ T5832] usb 8-1: USB disconnect, device number 14
[  182.490013][   T59] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  182.671828][   T59] usb 8-1: Using ep0 maxpacket: 8
[  182.676624][   T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.681365][   T59] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  182.686335][   T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.691934][   T59] usb 8-1: config 0 descriptor??
[  182.915315][   T59] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  182.928173][  T843] usb 8-1: USB disconnect, device number 15
[  182.955014][T11985] input: syz0 as /devices/virtual/input/input72
[  183.017670][T11967] udevd[11967]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  183.021554][T11967] udevd[11967]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  183.100981][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1740'.
[  183.129051][T11928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.215859][T12000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1746'.
[  183.253868][T12009] input: syz0 as /devices/virtual/input/input73
[  183.312517][T12015] gre1: entered promiscuous mode
[  183.362353][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'.
[  183.449183][T12025] netlink: 'syz.0.1754': attribute type 13 has an invalid length.
[  183.493729][T12025] macvtap0: left allmulticast mode
[  183.496801][T12025] veth0_macvtap: left allmulticast mode
[  183.502950][T12028] netlink: 'syz.3.1751': attribute type 1 has an invalid length.
[  183.504557][T12030] netlink: 'syz.0.1754': attribute type 13 has an invalid length.
[  183.527486][T12025] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  183.555838][T12030] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  183.632425][T12040] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1757'.
[  183.699984][ T7955] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.704290][ T7955] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.729532][ T1350] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.741586][T12048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14352 sclass=netlink_route_socket pid=12048 comm=syz.0.1759
[  183.776059][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'.
[  183.846437][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'.
[  183.858327][ T1350] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.861977][T12061] 8021q: adding VLAN 0 to HW filter on device bond3
[  183.879313][T12061] 8021q: adding VLAN 0 to HW filter on device bond4
[  183.883990][T12061] bond3: (slave bond4): Enslaving as an active interface with an up link
[  183.893164][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'.
[  183.905387][T12061] bond3 (unregistering): (slave bond4): Releasing backup interface
[  183.946804][T12061] bond3 (unregistering): Released all slaves
[  184.051534][ T1350] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  184.098024][   T40] audit: type=1400 audit(2000000035.139:59799): avc:  denied  { getopt } for  pid=12076 comm="syz.4.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  184.145391][T12086] netlink: 'syz.1.1772': attribute type 1 has an invalid length.
[  184.182525][T12094] netlink: 'syz.0.1773': attribute type 1 has an invalid length.
[  184.195141][T12094] bond4: entered promiscuous mode
[  184.197088][T12094] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.206532][T12094] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  184.212411][T12094] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  184.215955][T12094] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  184.255494][   T40] audit: type=1400 audit(2000000035.288:59800): avc:  denied  { read } for  pid=12093 comm="syz.0.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  184.379375][T12099] loop5: detected capacity change from 0 to 7
[  184.439119][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'.
[  184.446148][   T59] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  184.454898][T12100] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.559415][T12099] Dev loop5: unable to read RDB block 7
[  184.561988][T12099]  loop5: unable to read partition table
[  184.564996][T12099] loop5: partition table beyond EOD, truncated
[  184.568809][T12099] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  184.584477][   T59] usb 6-1: device descriptor read/64, error -71
[  184.712841][T12119] input: syz0 as /devices/virtual/input/input74
[  184.725423][T12121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1784'.
[  184.775818][   T40] audit: type=1400 audit(2000000035.766:59801): avc:  denied  { relabelfrom } for  pid=12122 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  184.786621][   T40] audit: type=1400 audit(2000000035.766:59802): avc:  denied  { relabelto } for  pid=12122 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  184.856881][   T59] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  185.022459][   T59] usb 6-1: device descriptor read/64, error -71
[  185.150973][   T59] usb usb6-port1: attempt power cycle
[  185.535520][   T59] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  185.568532][   T59] usb 6-1: device descriptor read/8, error -71
[  185.834815][   T59] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  185.856523][   T59] usb 6-1: device descriptor read/8, error -71
[  185.984511][   T59] usb usb6-port1: unable to enumerate USB device
[  186.391253][T12149] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  186.515021][T12168] ip6t_REJECT: ECHOREPLY is not supported
[  187.052876][ T5878] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  187.225640][ T5878] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  187.229567][ T5878] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  187.234149][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  187.238341][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  187.243189][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  187.249428][ T5878] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  187.253387][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  187.257043][ T5878] usb 5-1: Product: syz
[  187.258920][ T5878] usb 5-1: Manufacturer: syz
[  187.265141][ T5878] cdc_wdm 5-1:1.0: skipping garbage
[  187.267866][ T5878] cdc_wdm 5-1:1.0: skipping garbage
[  187.271696][ T5878] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  187.275218][ T5878] cdc_wdm 5-1:1.0: Unknown control protocol
[  187.427265][T12207] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  187.471925][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'.
[  187.475910][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'.
[  187.488991][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1813'.
[  187.556488][T12210] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1813'.
[  187.573647][   T40] audit: type=1400 audit(2000000038.386:59803): avc:  denied  { write } for  pid=12206 comm="syz.1.1813" name="/" dev="9p" ino=77085759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  187.792720][T12220] fuse: fd is not a fuse device
[  187.800989][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  187.912072][T12227] input: syz0 as /devices/virtual/input/input75
[  188.711101][T12250] netlink: 'syz.4.1826': attribute type 2 has an invalid length.
[  188.756462][T12246] kvm: kvm [12245]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  188.761272][T12246] kvm: kvm [12245]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  189.069965][T12274] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  189.194138][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'.
[  189.230325][T12284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  189.235088][   T40] audit: type=1400 audit(2000000039.949:59804): avc:  denied  { bind } for  pid=12283 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  189.313673][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'.
[  189.384804][   T40] audit: type=1400 audit(2000000040.080:59805): avc:  denied  { mount } for  pid=12296 comm="syz.4.1845" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  189.389037][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'.
[  189.560523][   T40] audit: type=1400 audit(2000000040.248:59806): avc:  denied  { map } for  pid=12312 comm="syz.3.1851" path="socket:[46425]" dev="sockfs" ino=46425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  189.571188][   T40] audit: type=1400 audit(2000000040.248:59807): avc:  denied  { read accept } for  pid=12312 comm="syz.3.1851" path="socket:[46425]" dev="sockfs" ino=46425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  189.582818][   T40] audit: type=1400 audit(2000000040.248:59808): avc:  denied  { write } for  pid=12313 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  189.873997][T12335] netlink: 'syz.4.1859': attribute type 16 has an invalid length.
[  189.876898][T12335] netlink: 'syz.4.1859': attribute type 17 has an invalid length.
[  189.912896][T12335] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.921193][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.953668][T12335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.958588][T12335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.967007][T12335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.971184][T12335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.979764][T12335] veth1_vlan: left promiscuous mode
[  189.983468][T12335] veth0_vlan: left promiscuous mode
[  189.986621][T12335] veth0_vlan: entered promiscuous mode
[  189.992021][T12335] veth1_vlan: entered promiscuous mode
[  189.998773][T12335] veth1_macvtap: left promiscuous mode
[  190.002145][T12335] veth0_macvtap: entered promiscuous mode
[  190.005644][T12335] veth1_macvtap: entered promiscuous mode
[  190.015620][T12335] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  190.019480][T12335] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  190.023674][T12335] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  190.027821][T12335] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  190.033773][T12335] syzkaller0: left promiscuous mode
[  190.037171][T12335] syzkaller0: left allmulticast mode
[  190.040067][T12335] tipc: Resetting bearer <eth:syzkaller0>
[  190.042795][T12335] tipc: Resetting bearer <eth:syzkaller0>
[  190.047447][T12335] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.061500][T12335] sit2: left promiscuous mode
[  190.064548][ T5878] usb 5-1: USB disconnect, device number 14
[  190.065126][T12335] geneve2: left promiscuous mode
[  190.073742][T12335] bond2: left promiscuous mode
[  190.076128][T12335] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.080457][T12335] 8021q: adding VLAN 0 to HW filter on device bond4
[  190.086796][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.089784][ T7942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.110606][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.113299][ T7942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.146025][ T7948] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.149525][T12340] input: syz0 as /devices/virtual/input/input76
[  190.150852][ T7948] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.172433][ T7948] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.177716][ T7948] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.231758][T12345] overlayfs: failed to clone upperpath
[  190.371666][T12353] tap0: tun_chr_ioctl cmd 1074025678
[  190.374520][T12353] tap0: group set to 0
[  190.673002][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1870'.
[  190.890605][T12384] input: syz0 as /devices/virtual/input/input78
[  190.937838][T12386] MTD: Couldn't look up '/dev/nullb0': -15
[  190.971447][T12386] io-wq is not configured for unbound workers
[  191.007735][T12391] overlayfs: failed to clone upperpath
[  191.023925][T12393] program syz.3.1877 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.030325][T12393] ata1.00: invalid service action 29
[  191.384698][   T40] audit: type=1400 audit(2000000041.961:59809): avc:  denied  { read write } for  pid=12410 comm="syz.1.1881" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  191.394163][   T40] audit: type=1400 audit(2000000041.961:59810): avc:  denied  { open } for  pid=12410 comm="syz.1.1881" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  191.402975][   T40] audit: type=1400 audit(2000000041.961:59811): avc:  denied  { ioctl } for  pid=12410 comm="syz.1.1881" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  191.431570][ T5739] Bluetooth: hci3: unexpected event for opcode 0x077c
[  191.484156][T12420] input: syz0 as /devices/virtual/input/input79
[  191.667022][T12431] netlink: 'syz.1.1889': attribute type 16 has an invalid length.
[  191.670351][T12431] netlink: 'syz.1.1889': attribute type 17 has an invalid length.
[  191.694429][T12431] tipc: Resetting bearer <eth:wg1>
[  191.697466][T12431] tipc: Resetting bearer <eth:wg1>
[  191.730251][T12431] tipc: Resetting bearer <eth:hsr0>
[  191.741938][T12431] tipc: Resetting bearer <eth:hsr0>
[  191.744678][T12431] tipc: Resetting bearer <eth:hsr0>
[  191.764442][   T40] audit: type=1400 audit(2000000042.307:59812): avc:  denied  { write } for  pid=12434 comm="syz.0.1891" name="/" dev="9p" ino=77085759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  191.779307][   T40] audit: type=1800 audit(2000000042.326:59813): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1891" name="bus" dev="9p" ino=77094581 res=0 errno=0
[  191.782699][T12435] No source specified
[  191.783321][T12431] erspan1: left promiscuous mode
[  191.787464][T12431] 8021q: adding VLAN 0 to HW filter on device bond2
[  191.794809][T12431] 8021q: adding VLAN 0 to HW filter on device bond4
[  191.801553][T12431] bond6: left allmulticast mode
[  191.803445][T12431] ip6gretap1: left allmulticast mode
[  191.805846][T12431] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.811302][T12431] ip6gretap1: left promiscuous mode
[  191.818016][T12431] 8021q: adding VLAN 0 to HW filter on device bond7
[  191.821172][T12431] vlan0: left promiscuous mode
[  191.822887][T12431] hsr0: left promiscuous mode
[  191.824808][T12431] vlan0: left allmulticast mode
[  191.826521][T12431] hsr0: left allmulticast mode
[  191.828455][T12431] hsr_slave_0: left allmulticast mode
[  191.831726][T12431] hsr_slave_1: left allmulticast mode
[  191.837835][T12431] xfrm1: left allmulticast mode
[  191.851285][ T7942] netdevsim netdevsim1 ªªªªªª: set [0, 0] type 1 family 0 port 8472 - 0
[  191.855518][ T7942] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.860421][ T7942] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.864818][ T7942] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.897758][   T40] audit: type=1400 audit(2000000042.438:59814): avc:  denied  { write } for  pid=12438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.952127][   T40] audit: type=1400 audit(2000000042.485:59815): avc:  denied  { write } for  pid=12446 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.178488][T12464] input: syz0 as /devices/virtual/input/input80
[  192.239038][ T7946] tipc: Resetting bearer <eth:hsr0>
[  192.245449][ T7946] tipc: Resetting bearer <eth:hsr0>
[  192.705767][ T1350] usb 6-1: new low-speed USB device number 28 using dummy_hcd
[  192.714919][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'.
[  192.866030][ T1350] usb 6-1: Invalid ep0 maxpacket: 64
[  193.016374][ T1350] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[  193.157817][T12519] autofs4:pid:12519:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371)
[  193.186709][ T1350] usb 6-1: Invalid ep0 maxpacket: 64
[  193.188712][ T1350] usb usb6-port1: attempt power cycle
[  193.314434][T12524] input: syz0 as /devices/virtual/input/input81
[  193.443248][   T39] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  193.548610][T12529] xt_hashlimit: size too large, truncated to 1048576
[  193.571276][ T1350] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[  193.593838][ T1350] usb 6-1: Invalid ep0 maxpacket: 64
[  193.617511][   T39] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[  193.623038][   T39] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  193.629990][   T39] usb 8-1: config 0 interface 0 has no altsetting 0
[  193.635203][   T39] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.639273][   T39] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  193.642827][   T39] usb 8-1: Product: syz
[  193.644767][   T39] usb 8-1: Manufacturer: syz
[  193.647271][   T39] usb 8-1: SerialNumber: syz
[  193.657153][   T39] usb 8-1: config 0 descriptor??
[  193.665506][   T39] hub 8-1:0.0: bad descriptor, ignoring hub
[  193.668567][   T39] hub 8-1:0.0: probe with driver hub failed with error -5
[  193.676773][   T39] usb 8-1: selecting invalid altsetting 0
[  193.753700][ T1350] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[  193.793733][ T1350] usb 6-1: Invalid ep0 maxpacket: 64
[  193.796683][ T1350] usb usb6-port1: unable to enumerate USB device
[  194.026782][   T39] usb 8-1: USB disconnect, device number 16
[  194.391594][T12552] loop2: detected capacity change from 0 to 7
[  194.396590][T12552] Dev loop2: unable to read RDB block 7
[  194.399111][T12552]  loop2: unable to read partition table
[  194.401777][T12552] loop2: partition table beyond EOD, truncated
[  194.407087][T12552] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  195.131855][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'.
[  195.232259][ T5739] Bluetooth: hci0: unexpected event for opcode 0x2028
[  195.776622][T12567] netem: change failed
[  196.144870][T12576] input: syz0 as /devices/virtual/input/input82
[  196.405096][T12580] comedi comedi0: unsupported base address 0x8001
[  196.408451][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  196.408463][   T40] audit: type=1400 audit(2000000046.658:59821): avc:  denied  { node_bind } for  pid=12579 comm="syz.3.1940" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  196.599827][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1943'.
[  196.603447][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1943'.
[  196.661935][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'.
[  196.681001][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  196.785960][T12604] netlink: 'syz.3.1947': attribute type 1 has an invalid length.
[  196.824960][T12604] macvlan2: entered promiscuous mode
[  196.826803][T12604] macvlan2: entered allmulticast mode
[  196.829131][T12604] bond3: entered promiscuous mode
[  196.832046][T12604] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  196.884702][T12604] bond3: left promiscuous mode
[  196.970132][T12610] FAT-fs (sr0): bogus number of reserved sectors
[  196.974092][T12610] FAT-fs (sr0): Can't find a valid FAT filesystem
[  197.083848][   T40] audit: type=1400 audit(2000000047.285:59822): avc:  denied  { map } for  pid=12614 comm="syz.1.1950" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  197.095113][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'.
[  197.116422][T12617] program syz.0.1951 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.117929][T12615] bridge0: port 1(macvlan2) entered blocking state
[  197.119655][T12618] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1951'.
[  197.140796][T12615] bridge0: port 1(macvlan2) entered disabled state
[  197.143263][T12615] macvlan2: entered allmulticast mode
[  197.150129][T12615] macvlan2: left allmulticast mode
[  197.157486][T12621] tmpfs: Too small a size for current use
[  197.160116][T12621] x_tables: duplicate underflow at hook 1
[  197.305707][T12639] netlink: 'syz.1.1959': attribute type 2 has an invalid length.
[  197.308423][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'.
[  197.308958][T12639] netlink: 'syz.1.1959': attribute type 2 has an invalid length.
[  197.370351][T12645] input: syz0 as /devices/virtual/input/input83
[  197.493557][T12651] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003
[  197.512962][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1964'.
[  197.516245][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'.
[  197.529932][   T40] audit: type=1400 audit(2000000047.707:59823): avc:  denied  { setattr } for  pid=12655 comm="syz.3.1966" name="NETLINK" dev="sockfs" ino=49347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  197.649794][T12672] tmpfs: User quota block hardlimit too large.
[  197.655203][T12674] random: crng reseeded on system resumption
[  197.668011][T12674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1971'.
[  197.799442][T12682] geneve2: entered promiscuous mode
[  197.801429][T12682] geneve2: entered allmulticast mode
[  197.804937][T12685] input: syz0 as /devices/virtual/input/input84
[  197.862909][T12682] netlink: zone id is out of range
[  198.041501][T12696] overlay: Unknown parameter 'subj_user'
[  198.125949][T12707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=12707 comm=syz.0.1980
[  198.764842][T12726] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  198.767044][T12726] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  198.769784][T12726] vhci_hcd vhci_hcd.0: Device attached
[  198.813598][   T40] audit: type=1400 audit(2000000048.904:59824): avc:  denied  { lock } for  pid=12724 comm="syz.3.1986" path="socket:[50206]" dev="sockfs" ino=50206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  198.828867][   T40] audit: type=1400 audit(2000000048.904:59825): avc:  denied  { write } for  pid=12724 comm="syz.3.1986" name="/" dev="9p" ino=77085759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.844513][T12731] netlink: 'syz.4.1988': attribute type 4 has an invalid length.
[  198.894457][T12728] vhci_hcd: connection closed
[  198.894645][  T185] vhci_hcd vhci_hcd.3: stop threads
[  198.899258][  T185] vhci_hcd vhci_hcd.3: release socket
[  198.901743][  T185] vhci_hcd vhci_hcd.3: disconnect device
[  199.096033][T12740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.157247][T12740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.217511][T12740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.228632][T12739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.494124][T12752] IPv6: NLM_F_REPLACE set, but no existing node found!
[  199.608203][   T40] audit: type=1400 audit(2000000049.653:59826): avc:  denied  { read } for  pid=12758 comm="syz.3.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  199.619144][T12754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=12754 comm=syz.1.1998
[  199.621745][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'.
[  199.775107][T12764] netlink: 'syz.1.2001': attribute type 322 has an invalid length.
[  200.286138][   T40] audit: type=1400 audit(2000000050.289:59827): avc:  denied  { listen } for  pid=12778 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  200.386088][T12795] lo: entered promiscuous mode
[  200.568513][   T40] audit: type=1400 audit(2000000050.551:59828): avc:  denied  { connect } for  pid=12798 comm="syz.4.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  200.594015][T12802] Cannot find set identified by id 2 to match
[  201.101639][   T40] audit: type=1400 audit(2000000051.047:59829): avc:  denied  { shutdown } for  pid=12814 comm="syz.0.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  201.250689][T12825] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  202.068723][T12837] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  202.807497][   T40] audit: type=1400 audit(2000000052.648:59830): avc:  denied  { write } for  pid=12840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.860874][   T40] audit: type=1400 audit(2000000052.694:59831): avc:  denied  { write } for  pid=12843 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  203.344697][T12782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  203.443814][T12860] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  203.480780][T12863] 9p: Bad value for 'rfdno'
[  203.482744][   T40] audit: type=1400 audit(2000000053.284:59832): avc:  denied  { mounton } for  pid=12862 comm="syz.4.2025" path="/513/file0" dev="tmpfs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  203.497044][T12861] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2024'.
[  203.502140][T12861] gretap0: entered promiscuous mode
[  203.507091][T12861] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2024'.
[  203.510170][T12861] 0ªî{X¹¦: renamed from gretap0
[  203.514885][T12861] 0ªî{X¹¦: left promiscuous mode
[  203.519521][T12861] 0ªî{X¹¦: entered allmulticast mode
[  203.523770][T12867] netlink: 'syz.4.2027': attribute type 3 has an invalid length.
[  203.528684][T12861] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  203.575491][   T40] audit: type=1400 audit(2000000053.368:59833): avc:  denied  { mounton } for  pid=12864 comm="syz.3.2026" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  203.575514][T12869] tmpfs: Bad value for 'mpol'
[  203.760685][   T40] audit: type=1400 audit(2000000053.537:59834): avc:  denied  { listen } for  pid=12885 comm="syz.0.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  203.864276][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'.
[  203.867693][T12902] hsr_slave_0: left promiscuous mode
[  203.871739][T12902] hsr_slave_1: left promiscuous mode
[  204.218916][T12910] binder: 12905:12910 ioctl 400c620e 200000000180 returned -22
[  204.225878][T12914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.234049][T12914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.239984][T12914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.244206][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.255023][T12912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.263856][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.271244][T12914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2042'.
[  204.309971][T12922] overlayfs: missing 'lowerdir'
[  204.451864][ T5739] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[  204.461624][T12944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12944 comm=syz.4.2050
[  204.465733][T12944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=12944 comm=syz.4.2050
[  204.631537][ T1350] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  204.813017][ T1350] usb 6-1: Using ep0 maxpacket: 8
[  204.817153][ T1350] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  204.820899][ T1350] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  204.826134][ T1350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  204.830645][ T1350] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  204.835417][ T1350] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  204.840915][ T1350] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  204.844947][ T1350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.956458][T12954] MTD: Couldn't look up './cgroup': -15
[  204.958538][T12954] ./cgroup: Can't lookup blockdev
[  205.184966][ T1350] usb 6-1: usb_control_msg returned -32
[  205.186836][ T1350] usbtmc 6-1:16.0: can't read capabilities
[  205.240789][ T5878] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  205.390403][ T5878] usb 8-1: device descriptor read/64, error -71
[  205.532043][ T5739] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  205.537944][T12959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12959 comm=syz.4.2055
[  205.561974][T12932] usbtmc 6-1:16.0: usb_control_msg returned -32
[  205.600275][T12965] netlink: 'syz.4.2057': attribute type 20 has an invalid length.
[  205.646586][ T5878] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  205.764255][   T59] usb 6-1: USB disconnect, device number 32
[  205.797234][ T5878] usb 8-1: device descriptor read/64, error -71
[  205.914199][ T5878] usb usb8-port1: attempt power cycle
[  206.287778][ T5878] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  206.309679][ T5878] usb 8-1: device descriptor read/8, error -71
[  206.341365][T12980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12980 comm=syz.1.2061
[  206.397496][T12985] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  206.403706][   T40] audit: type=1400 audit(2000000056.007:59835): avc:  denied  { relabelto } for  pid=12984 comm="syz.1.2062" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"
[  206.426632][   T40] audit: type=1400 audit(2000000056.007:59836): avc:  denied  { associate } for  pid=12984 comm="syz.1.2062" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0"
[  206.465917][T12989] macvtap0: entered allmulticast mode
[  206.467914][T12989] veth0_macvtap: entered allmulticast mode
[  206.565557][ T5878] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  206.587344][ T5878] usb 8-1: device descriptor read/8, error -71
[  206.715564][ T5878] usb usb8-port1: unable to enumerate USB device
[  206.795814][T13009] syzkaller0: entered promiscuous mode
[  206.798298][T13009] syzkaller0: entered allmulticast mode
[  206.859200][T13011] netlink: 'syz.4.2070': attribute type 10 has an invalid length.
[  206.916413][T13016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.943090][ T1435] ieee802154 phy0 wpan0: encryption failed: -22
[  207.336207][T13043] 9pnet: Found fid 0 not clunked
[  207.427987][T13048] netlink: 'syz.0.2080': attribute type 3 has an invalid length.
[  207.885405][T13068] netlink: 'syz.1.2090': attribute type 1 has an invalid length.
[  207.903052][T13068] bond9: entered promiscuous mode
[  207.904806][T13068] bond9: entered allmulticast mode
[  207.906766][T13068] 8021q: adding VLAN 0 to HW filter on device bond9
[  207.913325][T13068] erspan3: entered allmulticast mode
[  207.917373][T13068] bond9: (slave erspan3): making interface the new active one
[  207.919986][T13068] erspan3: entered promiscuous mode
[  207.924447][T13068] bond9: (slave erspan3): Enslaving as an active interface with an up link
[  207.934325][T13072] netlink: 'syz.1.2090': attribute type 1 has an invalid length.
[  208.041203][T13075] netlink: 'syz.1.2091': attribute type 11 has an invalid length.
[  208.322309][T13078] SELinux: ebitmap: truncated map
[  208.330691][ T5739] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  208.344259][ T5874] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  208.362721][T13078] SELinux: failed to load policy
[  208.374801][   T40] audit: type=1400 audit(2000000057.860:59837): avc:  denied  { write } for  pid=13087 comm="syz.1.2095" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  208.387201][T13083] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  208.447173][T13090] input: syz0 as /devices/virtual/input/input85
[  208.448470][T13092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13092 comm=syz.1.2098
[  208.596077][ T1350] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  208.700273][   T40] audit: type=1400 audit(2000000058.159:59838): avc:  denied  { view } for  pid=13113 comm="syz.3.2104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  208.772870][T13119] SET target dimension over the limit!
[  208.799161][ T5874] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  208.980651][ T5874] usb 6-1: Invalid ep0 maxpacket: 64
[  209.023348][   T24] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  209.119587][ T5874] usb 6-1: new low-speed USB device number 34 using dummy_hcd
[  209.183774][   T24] usb 8-1: Using ep0 maxpacket: 16
[  209.187947][   T24] usb 8-1: config index 0 descriptor too short (expected 65, got 36)
[  209.191611][   T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  209.196821][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  209.201528][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.207407][   T24] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  209.211399][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.220005][   T24] usb 8-1: config 0 descriptor??
[  209.233298][   T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input86
[  209.279901][ T5874] usb 6-1: Invalid ep0 maxpacket: 64
[  209.286980][ T5874] usb usb6-port1: attempt power cycle
[  209.496041][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.500688][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.664517][ T5874] usb 6-1: new low-speed USB device number 35 using dummy_hcd
[  209.689759][ T5874] usb 6-1: Invalid ep0 maxpacket: 64
[  209.835514][ T5874] usb 6-1: new low-speed USB device number 36 using dummy_hcd
[  209.859422][ T1350] usb 8-1: USB disconnect, device number 21
[  209.868747][ T5874] usb 6-1: Invalid ep0 maxpacket: 64
[  209.870856][ T5874] usb usb6-port1: unable to enumerate USB device
[  209.919399][T13131] netlink: 'syz.0.2109': attribute type 1 has an invalid length.
[  209.930154][T13133] overlayfs: missing 'lowerdir'
[  210.053657][T13141] input: syz1 as /devices/virtual/input/input87
[  210.176939][T13143] __nla_validate_parse: 10 callbacks suppressed
[  210.176956][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'.
[  210.306564][T13138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2112'.
[  210.836234][T13172] bond3: (slave veth0_to_bond): Releasing active interface
[  210.869177][T13172] team0: Port device team_slave_1 removed
[  210.871531][T13172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.874145][T13172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.877390][T13172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.879812][T13172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.883522][T13172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  210.931384][T13176] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2122'.
[  211.024003][T13180] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  211.026190][T13180] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  211.028951][T13180] vhci_hcd vhci_hcd.0: Device attached
[  211.031301][T13181] vhci_hcd: connection closed
[  211.031523][ T7938] vhci_hcd vhci_hcd.0: stop threads
[  211.038101][ T7938] vhci_hcd vhci_hcd.0: release socket
[  211.040550][ T7938] vhci_hcd vhci_hcd.0: disconnect device
[  211.648210][T13199] kvm: kvm [13198]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  211.659755][T13199] kvm: kvm [13198]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  211.765646][T13213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'.
[  211.769369][ T5739] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1
[  211.804004][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'.
[  211.814213][T13217] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2134'.
[  211.832182][T13219] input: syz0 as /devices/virtual/input/input88
[  211.890044][T13215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=13215 comm=syz.1.2135
[  211.939916][   T40] audit: type=1804 audit(2000000061.191:59839): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2138" name="/newroot/477/file0" dev="tmpfs" ino=2572 res=1 errno=0
[  212.043819][T13234] openvswitch: netlink: IP tunnel TTL not specified.
[  212.047682][T13243] SELinux: failed to load policy
[  212.096006][   T40] audit: type=1400 audit(2000000061.341:59840): avc:  denied  { map } for  pid=13246 comm="syz.4.2146" path="socket:[52025]" dev="sockfs" ino=52025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  212.107614][   T40] audit: type=1400 audit(2000000061.341:59841): avc:  denied  { read accept } for  pid=13246 comm="syz.4.2146" path="socket:[52025]" dev="sockfs" ino=52025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  212.193162][T13267] input: syz0 as /devices/virtual/input/input89
[  212.279318][T13272] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) !
[  212.714103][T13311] fuse: Unknown parameter ''
[  212.763664][   T40] audit: type=1400 audit(2000000061.959:59842): avc:  denied  { write } for  pid=13306 comm="syz.0.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  212.793222][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'.
[  212.793255][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'.
[  212.968484][T13331] 9p: Could not find request transport: v
[  213.026397][T13341] Timeout policy `syz1' can only be used by L3 protocol number 35095
[  213.073586][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'.
[  213.116573][T13345] autofs: Bad value for 'fd'
[  213.200462][   T40] audit: type=1400 audit(2000000062.371:59843): avc:  denied  { nlmsg_read } for  pid=13350 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  213.231379][T13356] program syz.3.2179 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  213.512064][T13399] input: syz0 as /devices/virtual/input/input90
[  213.535307][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2191'.
[  213.636484][T13405] QAT: failed to copy from user.
[  213.778707][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  213.837626][T13407] overlay: Bad value for 'workdir'
[  213.888485][T13411] CIFS mount error: No usable UNC path provided in device string!
[  213.888485][T13411] 
[  213.891770][T13411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  214.270261][ T5874] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  214.442628][ T5874] usb 8-1: Using ep0 maxpacket: 16
[  214.447456][ T5874] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  214.451162][T13421] fuse: fd is not a fuse device
[  214.453056][ T5874] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  214.457200][ T5874] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  214.460942][ T5874] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 18176, setting to 1024
[  214.466736][ T5874] usb 8-1: config 0 interface 0 has no altsetting 0
[  214.471504][ T5874] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  214.474840][   T40] audit: type=1400 audit(2000000063.559:59844): avc:  denied  { watch watch_reads } for  pid=13420 comm="syz.4.2199" path="pipe:[17640]" dev="pipefs" ino=17640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  214.484081][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.491240][ T5874] usb 8-1: Product: syz
[  214.492874][ T5874] usb 8-1: Manufacturer: syz
[  214.495523][ T5874] usb 8-1: SerialNumber: syz
[  214.502432][ T5874] usb 8-1: config 0 descriptor??
[  214.505121][   T40] audit: type=1800 audit(2000000063.587:59845): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2199" name="nullb0" dev="tmpfs" ino=2300 res=0 errno=0
[  214.506943][T13417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  214.713159][   T40] audit: type=1326 audit(2000000063.793:59846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.4.2201" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5d199cdd9 code=0x0
[  214.739176][T13417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  214.743866][ T5874] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input91
[  214.976187][   T24] usb 8-1: USB disconnect, device number 22
[  214.976351][    C3] synaptics_usb 8-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[  215.405706][T13437] netlink: 'syz.1.2203': attribute type 1 has an invalid length.
[  215.466900][T13437] vlan4: entered allmulticast mode
[  215.469003][T13437] macsec0: entered allmulticast mode
[  215.470825][T13437] veth1_macvtap: entered allmulticast mode
[  215.504343][T13437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=13437 comm=syz.1.2203
[  215.560618][T13444] sg_write: process 1304 (syz.3.2204) changed security contexts after opening file descriptor, this is not allowed.
[  215.827462][T13455] input: syz0 as /devices/virtual/input/input92
[  216.159372][T13460] __nla_validate_parse: 2 callbacks suppressed
[  216.159414][T13460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2211'.
[  216.204459][   T59] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  216.390476][   T59] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  216.394617][   T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  216.400247][   T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  216.403643][   T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  216.408559][   T59] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  216.411754][   T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.418487][   T59] usb 5-1: config 0 descriptor??
[  216.489210][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'.
[  216.649913][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2217'.
[  216.657262][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2217'.
[  216.677457][T13486] erspan0: entered promiscuous mode
[  216.680608][T13486] 0ªî{X¹¦: entered promiscuous mode
[  216.682963][T13486] debugfs: 'hsr1' already exists in 'hsr'
[  216.684929][T13486] Cannot create hsr debugfs directory
[  216.687370][T13486] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  216.690726][T13486] hsr1: Slave B (
30ªî{X¹¦) is not up; please bring it up to get a fully working HSR network
[  216.845356][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2221'.
[  216.848829][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2221'.
[  216.929139][   T59] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  217.016946][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2222'.
[  217.086215][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'.
[  217.094729][T13498] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2222'.
[  217.145638][   T40] audit: type=1400 audit(2000000066.067:59847): avc:  denied  { connect } for  pid=13514 comm="syz.1.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  217.297397][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'.
[  217.334338][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.343522][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.346864][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.357161][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.360313][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.380539][ T2321] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  217.402227][   T40] audit: type=1400 audit(2000000066.292:59848): avc:  denied  { mounton } for  pid=13521 comm="syz.1.2229" path="/514/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  217.551093][ T2321] usb 8-1: Using ep0 maxpacket: 8
[  217.559038][ T2321] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.574712][ T2321] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.581901][ T2321] usb 8-1: config 0 interface 0 has no altsetting 0
[  217.585429][ T2321] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  217.588445][ T2321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.596413][ T2321] usb 8-1: config 0 descriptor??
[  217.714263][T13164] bond1: (slave syz_tun): Removing an active aggregator
[  217.717111][T13164] bond1: (slave syz_tun): Releasing backup interface
[  218.032803][ T2321] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  218.036608][T13523] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.036682][T13523] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.036799][T13523] bridge_slave_0: entered allmulticast mode
[  218.038192][T13523] bridge_slave_0: entered promiscuous mode
[  218.041109][ T2321] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  218.047952][T13523] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.055280][T13523] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.058579][T13523] bridge_slave_1: entered allmulticast mode
[  218.061931][ T2321] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  218.062627][T13523] bridge_slave_1: entered promiscuous mode
[  218.065121][ T2321] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  218.069049][ T2321] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  218.071614][ T2321] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  218.085215][T13523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.091984][T13523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.110892][T13523] team0: Port device team_slave_0 added
[  218.114941][T13523] team0: Port device team_slave_1 added
[  218.130675][T13523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.133283][T13523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.149201][T13523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.154088][T13523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.156916][T13523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  218.167490][T13523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.219312][T13523] hsr_slave_0: entered promiscuous mode
[  218.223810][T13523] hsr_slave_1: entered promiscuous mode
[  218.230306][T13523] debugfs: 'hsr0' already exists in 'hsr'
[  218.234661][T13523] Cannot create hsr debugfs directory
[  218.342288][ T6079] usb 8-1: USB disconnect, device number 23
[  218.466174][T13551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13551 comm=syz.1.2231
[  218.593386][T13523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.598819][T13523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.704937][T13523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.709027][T13523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.783999][T13523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.788496][T13523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.822959][ T2321] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  218.876131][T13523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.880672][T13523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.984278][ T2321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.989250][ T2321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.993690][ T2321] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  218.999605][ T2321] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  219.003593][ T2321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.017907][ T2321] usb 6-1: config 0 descriptor??
[  219.119951][T13523] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  219.140068][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  219.141844][ T5878] usb 5-1: USB disconnect, device number 15
[  219.143163][T13523] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  219.152190][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  219.155830][T13523] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  219.161505][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  219.166206][T13523] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  219.178573][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  219.256317][T13523] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.265272][T13523] 8021q: adding VLAN 0 to HW filter on device team0
[  219.268657][T13569] input: syz0 as /devices/virtual/input/input94
[  219.275720][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.278952][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.289662][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.292106][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.408744][ T5739] Bluetooth: hci0: unexpected event for opcode 0x0c22
[  219.456526][ T2321] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  219.459144][ T2321] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  219.461806][ T2321] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  219.464444][ T2321] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  219.467026][ T2321] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  219.471248][T13578] netlink: 'syz.0.2237': attribute type 11 has an invalid length.
[  219.485264][ T2321] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  219.498513][T13578] netlink: 'syz.0.2237': attribute type 1 has an invalid length.
[  219.594139][ T5739] Bluetooth: hci4: command tx timeout
[  219.628042][T13523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.734137][T13556] openvswitch: netlink: IPv6 tunnel dst address is zero
[  219.738045][ T5832] usb 6-1: USB disconnect, device number 37
[  219.804967][T13523] veth0_vlan: entered promiscuous mode
[  219.813469][T13523] veth1_vlan: entered promiscuous mode
[  219.860900][T13523] veth0_macvtap: entered promiscuous mode
[  219.866525][T13523] veth1_macvtap: entered promiscuous mode
[  219.882761][T13523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.890807][T13523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.905825][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.909477][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.913152][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.916645][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.022604][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.032326][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.069087][ T7942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.074803][ T7942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.087223][   T40] audit: type=1400 audit(2000000068.818:59849): avc:  denied  { mounton } for  pid=13523 comm="syz-executor" path="/syzkaller.pKObiz/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  220.095328][   T40] audit: type=1400 audit(2000000068.818:59850): avc:  denied  { mount } for  pid=13523 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  220.105545][   T40] audit: type=1400 audit(2000000068.828:59851): avc:  denied  { mounton } for  pid=13523 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  220.146180][T13596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  220.229191][T13600] kvm: pic: level sensitive irq not supported
[  220.229557][T13600] kvm: pic: non byte read
[  220.234071][T13600] kvm: pic: level sensitive irq not supported
[  220.234318][T13600] kvm: pic: non byte read
[  220.238653][T13600] kvm: pic: level sensitive irq not supported
[  220.238900][T13600] kvm: pic: non byte read
[  220.243177][T13600] kvm: pic: level sensitive irq not supported
[  220.243420][T13600] kvm: pic: non byte read
[  220.247705][T13600] kvm: pic: level sensitive irq not supported
[  220.247954][T13600] kvm: pic: non byte read
[  220.252286][T13600] kvm: pic: level sensitive irq not supported
[  220.252529][T13600] kvm: pic: non byte read
[  220.257123][T13600] kvm: pic: level sensitive irq not supported
[  220.257367][T13600] kvm: pic: non byte read
[  220.261685][T13600] kvm: pic: level sensitive irq not supported
[  220.261931][T13600] kvm: pic: non byte read
[  220.407480][T13608] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  220.474938][   T40] audit: type=1400 audit(2000000069.183:59852): avc:  denied  { create } for  pid=13610 comm="syz.0.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  220.483794][   T40] audit: type=1400 audit(2000000069.183:59853): avc:  denied  { bind } for  pid=13610 comm="syz.0.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  220.490888][   T40] audit: type=1400 audit(2000000069.183:59854): avc:  denied  { write } for  pid=13610 comm="syz.0.2243" path="socket:[57385]" dev="sockfs" ino=57385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  220.513741][T13615] input: syz0 as /devices/virtual/input/input95
[  220.666053][T13624] vlan0: entered allmulticast mode
[  220.667937][T13624] veth0_vlan: entered allmulticast mode
[  220.809029][T13630] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  220.827683][T13630] GUP no longer grows the stack in syz.1.2249 (13630): 200000004000-20000000a000 (200000002000)
[  220.831993][T13630] CPU: 1 UID: 0 PID: 13630 Comm: syz.1.2249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.832026][T13630] Tainted: [L]=SOFTLOCKUP
[  220.832033][T13630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  220.832059][T13630] Call Trace:
[  220.832108][T13630]  <TASK>
[  220.832116][T13630]  dump_stack_lvl+0x100/0x190
[  220.832149][T13630]  gup_vma_lookup.cold+0x83/0x96
[  220.832175][T13630]  __get_user_pages+0x241/0x32a0
[  220.832201][T13630]  ? find_held_lock+0x2b/0x80
[  220.832219][T13630]  ? mtree_load+0x311/0xa90
[  220.832289][T13630]  ? __pfx___get_user_pages+0x10/0x10
[  220.832316][T13630]  get_user_pages_remote+0x3d2/0xb10
[  220.832336][T13630]  ? mas_root_expand+0x670/0x750
[  220.832357][T13630]  ? __pfx_get_user_pages_remote+0x10/0x10
[  220.832378][T13630]  ? __access_remote_vm+0x755/0x890
[  220.832395][T13630]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  220.832440][T13630]  __access_remote_vm+0x3bb/0x890
[  220.832464][T13630]  ? do_raw_spin_lock+0x128/0x260
[  220.832490][T13630]  ? __pfx___access_remote_vm+0x10/0x10
[  220.832506][T13630]  ? proc_pid_cmdline_read+0x31b/0x8c0
[  220.832531][T13630]  proc_pid_cmdline_read+0x4f2/0x8c0
[  220.832552][T13630]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  220.832573][T13630]  ? rw_verify_area+0xce/0x6d0
[  220.832591][T13630]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  220.832608][T13630]  vfs_readv+0x5d8/0x8d0
[  220.832631][T13630]  ? __pfx_vfs_readv+0x10/0x10
[  220.832647][T13630]  ? __lock_acquire+0x4a5/0x2630
[  220.832667][T13630]  ? css_rstat_updated+0x1ce/0x5a0
[  220.832704][T13630]  ? __fget_files+0x21f/0x3d0
[  220.832732][T13630]  ? do_preadv+0x1ac/0x270
[  220.832748][T13630]  do_preadv+0x1ac/0x270
[  220.832765][T13630]  ? __pfx_do_preadv+0x10/0x10
[  220.832783][T13630]  ? rcu_is_watching+0x12/0xc0
[  220.832811][T13630]  do_syscall_64+0x10b/0xf80
[  220.832831][T13630]  ? clear_bhb_loop+0x40/0x90
[  220.832851][T13630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.832868][T13630] RIP: 0033:0x7f1cdd99cdd9
[  220.832882][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.832899][T13630] RSP: 002b:00007f1cde847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  220.832917][T13630] RAX: ffffffffffffffda RBX: 00007f1cddc15fa0 RCX: 00007f1cdd99cdd9
[  220.832929][T13630] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004
[  220.832939][T13630] RBP: 00007f1cdda32d69 R08: 00000000fffffff9 R09: 0000000000000000
[  220.832948][T13630] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  220.832957][T13630] R13: 00007f1cddc16038 R14: 00007f1cddc15fa0 R15: 00007fffbadbd688
[  220.832980][T13630]  </TASK>
[  221.020104][T13641] kvm: user requested TSC rate below hardware speed
[  221.208983][T13662] overlayfs: failed lookup in lower (newroot/497, name='file1', err=-40): overlapping layers
[  221.364548][   T40] audit: type=1400 audit(2000000070.007:59855): avc:  denied  { execmod } for  pid=13667 comm="syz.4.2258" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  221.782516][   T40] audit: type=1400 audit(2000000070.400:59856): avc:  denied  { listen } for  pid=13692 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  221.790974][   T40] audit: type=1400 audit(2000000070.400:59857): avc:  denied  { shutdown } for  pid=13692 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  221.825211][ T5739] Bluetooth: hci4: command tx timeout
[  222.051962][ T5739] Bluetooth: hci1: unexpected event for opcode 0x0c38
[  222.055229][ T5739] Bluetooth: hci1: unexpected event for opcode 0x0c38
[  224.037431][ T5739] Bluetooth: hci4: command tx timeout
[  226.260479][ T5739] Bluetooth: hci4: command tx timeout
[  234.156949][T13715] __nla_validate_parse: 1 callbacks suppressed
[  234.156983][T13715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2270'.
[  234.162232][T13724] trusted_key: encrypted_key: insufficient parameters specified
[  234.166062][T13724] trusted_key: encrypted_key: insufficient parameters specified
[  234.185757][T13727] netlink: 'syz.0.2275': attribute type 21 has an invalid length.
[  234.189988][T13727] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2275'.
[  234.228918][ T5739] Bluetooth: hci0: unexpected event for opcode 0x1009
[  234.281508][ T5739] Bluetooth: hci1: unexpected event for opcode 0x2010
[  234.331649][   T40] audit: type=1400 audit(2000000082.153:59858): avc:  denied  { create } for  pid=13745 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  234.401223][T13757] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  234.404817][T13757] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  234.456157][ T6079] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  234.636642][ T5739] Bluetooth: hci1: Malformed Event: 0x13
[  234.640762][ T6079] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  234.644003][ T6079] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  234.647655][ T6079] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  234.650829][ T6079] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  234.655014][ T6079] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  234.658620][ T6079] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  234.664294][ T6079] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  234.668102][ T6079] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  234.671328][ T6079] usb 8-1: Product: syz
[  234.672998][ T6079] usb 8-1: Manufacturer: syz
[  234.677161][T13728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  234.682410][T13768] fuse: Bad value for 'fd'
[  234.683844][ T6079] cdc_wdm 8-1:1.0: skipping garbage
[  234.686211][ T6079] cdc_wdm 8-1:1.0: skipping garbage
[  234.690827][ T6079] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  234.693166][ T6079] cdc_wdm 8-1:1.0: Unknown control protocol
[  234.779893][T13778] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2289'.
[  234.842706][T13783] random: crng reseeded on system resumption
[  234.895909][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.898842][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.901723][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.904642][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.907542][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.910373][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.913691][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.916545][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.919425][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.922336][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.925237][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.928131][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.931033][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.933924][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.936762][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.939618][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.942688][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.945587][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.948745][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[  234.951610][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[  234.985147][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  234.998165][   T59] usb 8-1: USB disconnect, device number 24
[  235.038878][T13786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2292'.
[  235.043753][T13786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13786 comm=syz.0.2292
[  235.066766][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2293'.
[  235.070845][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2293'.
[  235.083997][T13790] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  235.086246][   T40] audit: type=1400 audit(2000000082.846:59859): avc:  denied  { listen } for  pid=13787 comm="syz.1.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  235.099375][   T40] audit: type=1400 audit(2000000082.855:59860): avc:  denied  { create } for  pid=13789 comm="syz.0.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  235.429661][T13810] binder: 13808:13810 ioctl c0306201 200000000540 returned -22
[  235.574226][T13822] x_tables: duplicate underflow at hook 2
[  235.611074][T13820] netlink: 'syz.0.2301': attribute type 1 has an invalid length.
[  235.645816][   T59] libceph: connect (1)[c::]:6789 error -101
[  235.651376][   T59] libceph: mon0 (1)[c::]:6789 connect error
[  235.669818][   T40] audit: type=1400 audit(2000000083.398:59861): avc:  denied  { ioctl } for  pid=13826 comm="syz.4.2304" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  235.734948][T13820] ceph: No mds server is up or the cluster is laggy
[  235.756765][T13834] netlink: 'syz.0.2301': attribute type 2 has an invalid length.
[  235.916341][T13844] loop5: detected capacity change from 0 to 7
[  235.929608][T13844] Dev loop5: unable to read RDB block 7
[  235.931793][T13844]  loop5: unable to read partition table
[  235.933791][T13844] loop5: partition table beyond EOD, truncated
[  235.946233][T13844] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  236.021741][   T40] audit: type=1400 audit(2000000083.725:59862): avc:  denied  { ioctl } for  pid=13854 comm="syz.4.2311" path="socket:[57739]" dev="sockfs" ino=57739 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  236.103062][T13865] netlink: 'syz.4.2313': attribute type 64 has an invalid length.
[  236.130145][T13868] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2314'.
[  236.130270][   T40] audit: type=1400 audit(2000000083.828:59863): avc:  denied  { map } for  pid=13867 comm="syz.1.2314" path="socket:[56990]" dev="sockfs" ino=56990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  236.159932][T13875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'.
[  236.165480][T13875] pimreg: left allmulticast mode
[  236.196705][T13883] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  236.206842][T13883] netlink: 'syz.0.2319': attribute type 10 has an invalid length.
[  236.209212][T13884] pimreg: entered allmulticast mode
[  236.212065][T13883] veth1_macvtap: left promiscuous mode
[  236.221041][T13883] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  236.228504][   T40] audit: type=1800 audit(2000000083.922:59864): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2320" name="file0" dev="tmpfs" ino=2910 res=0 errno=0
[  236.304793][T13891] nbd2: detected capacity change from 0 to 63
[  236.382718][T13905] overlay: filesystem on ./file1 not supported
[  236.382729][   T40] audit: type=1400 audit(2000000084.072:59865): avc:  denied  { mounton } for  pid=13895 comm="syz.0.2322" path="/516/file1/bus" dev="autofs" ino=57788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  236.404985][   T40] audit: type=1400 audit(2000000084.090:59866): avc:  denied  { write } for  pid=13902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  236.420778][ T5739] block nbd2: Receive control failed (result -104)
[  236.454667][   T40] audit: type=1400 audit(2000000084.128:59867): avc:  denied  { write } for  pid=13908 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  236.619044][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.629425][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.633506][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.637099][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.640993][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.644129][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.649102][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.652311][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.663320][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.667050][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.670226][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.671843][T13936] program syz.3.2331 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.673299][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.679628][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.682698][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.685868][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.688982][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.691992][T13937] sctp: [Deprecated]: syz.1.2326 (pid 13937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.691992][T13937] Use struct sctp_sack_info instead
[  236.697532][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.700733][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.703972][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.707140][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.710264][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.713284][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.716337][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.719440][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.722586][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.725700][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.728790][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.731985][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.735172][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.738303][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.741408][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.744581][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.747721][T13929] usb usb3: usbfs: process 13929 (syz.0.2329) did not claim interface 0 before use
[  236.799316][T13948] xt_hashlimit: Unknown mode mask 84, kernel too old?
[  236.806758][T13950] xt_NFQUEUE: number of total queues is 0
[  236.841126][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'.
[  236.858906][T13948] bond6: entered promiscuous mode
[  236.914434][T13960] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45840 sclass=netlink_xfrm_socket pid=13960 comm=syz.3.2337
[  237.625718][ T1350] libceph: connect (1)[c::]:6789 error -101
[  237.631464][ T1350] libceph: mon0 (1)[c::]:6789 connect error
[  237.691173][   T59] libceph: connect (1)[b::]:6789 error -101
[  237.694755][   T59] libceph: mon0 (1)[b::]:6789 connect error
[  237.911220][ T1350] libceph: connect (1)[c::]:6789 error -101
[  237.923500][ T1350] libceph: mon0 (1)[c::]:6789 connect error
[  237.974881][   T59] libceph: connect (1)[b::]:6789 error -101
[  237.978558][   T59] libceph: mon0 (1)[b::]:6789 connect error
[  238.057074][T14013] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  238.141300][T14017] netlink: 'syz.4.2350': attribute type 13 has an invalid length.
[  238.453530][T14002] ceph: No mds server is up or the cluster is laggy
[  238.454924][T13999] ceph: No mds server is up or the cluster is laggy
[  238.474533][ T1350] libceph: connect (1)[c::]:6789 error -101
[  238.477601][ T1350] libceph: mon0 (1)[c::]:6789 connect error
[  238.527787][   T59] libceph: connect (1)[b::]:6789 error -101
[  238.530955][   T59] libceph: mon0 (1)[b::]:6789 connect error
[  238.711531][T14021] input: syz0 as /devices/virtual/input/input96
[  238.788354][T13900] udevd[13900]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  238.792035][T13900] udevd[13900]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  238.949144][T14028] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  239.054712][T14032] binder: 14031:14032 ioctl c0306201 200000000080 returned -14
[  239.065257][T14032] binder: 14031:14032 ioctl c0306201 2000000003c0 returned -14
[  239.068564][T14032] binder: 14031:14032 ioctl 8008af00 2000000000c0 returned -22
[  239.101693][T14030] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.105893][T14030] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.343508][ T5740] Bluetooth: hci4: command 0x2016 tx timeout
[  239.386109][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.393544][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.842160][ T1161] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.848914][ T1161] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.856504][ T1161] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.860388][ T1161] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.907080][ T5739] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  239.910469][ T5739] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  239.996205][T14057] sch_tbf: burst 19920 is lower than device lo mtu (65550) !
[  240.056747][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  240.056757][   T40] audit: type=1400 audit(2000000087.506:59875): avc:  denied  { connect } for  pid=14052 comm="syz.0.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  240.106067][   T24] hid-generic 0005:04F3:5508.0006: hidraw1: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  240.127271][T14064] input: syz0 as /devices/virtual/input/input97
[  240.207939][T14066] fuse: Bad value for 'user_id'
[  240.209815][T14066] fuse: Bad value for 'user_id'
[  240.261419][T14070] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  240.267492][T14067] netlink: 'syz.4.2365': attribute type 16 has an invalid length.
[  240.275306][T14067] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2365'.
[  240.281822][T14070] bond7: entered promiscuous mode
[  240.283776][T14070] 8021q: adding VLAN 0 to HW filter on device bond7
[  240.297064][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'.
[  240.322855][ T5811] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  240.360597][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'.
[  240.388982][   T40] audit: type=1400 audit(2000000087.815:59876): avc:  granted  { setsecparam } for  pid=14075 comm="syz.4.2368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  240.483102][ T5811] usb 6-1: device descriptor read/64, error -71
[  240.597863][T14091] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  240.610067][ T5739] Bluetooth: hci4: unexpected subevent 0x0c length: 19 > 5
[  240.613480][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'.
[  240.613801][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.749425][T14100] input: syz0 as /devices/virtual/input/input98
[  240.752742][ T5811] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  240.889286][ T5811] usb 6-1: device descriptor read/64, error -71
[  240.936313][T14107] efs: block size(16384) > page size(4096) not supported by filesystem
[  241.007521][ T5811] usb usb6-port1: attempt power cycle
[  241.122512][T14118] netlink: 'syz.0.2382': attribute type 1 has an invalid length.
[  241.136037][T14118] 8021q: adding VLAN 0 to HW filter on device bond8
[  241.370349][ T5811] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  241.382750][T14129] affs: No valid root block on device nullb0
[  241.403497][ T5811] usb 6-1: device descriptor read/8, error -71
[  241.476127][T14118] tipc: Resetting bearer <eth:veth0_macvtap>
[  241.562612][ T5739] Bluetooth: hci4: command 0x2016 tx timeout
[  241.658765][ T5811] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  241.680960][ T5811] usb 6-1: device descriptor read/8, error -71
[  241.771589][ T7938] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.775689][ T7938] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.779763][ T7938] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.783810][ T7938] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.787863][ T7938] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.791719][ T7938] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.795572][ T7938] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.799472][ T7938] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.803493][ T5811] usb usb6-port1: unable to enumerate USB device
[  241.806604][ T7938] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.810548][ T7938] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.814291][ T7938] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.818028][ T7938] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.877611][T14135] input: syz0 as /devices/virtual/input/input99
[  243.200324][ T2214] block nbd2: Connection timed out, retrying (0/1 alive)
[  243.205792][ T2214] block nbd2: Connection timed out, retrying (0/1 alive)
[  243.208689][ T2214] block nbd2: Connection timed out, retrying (0/1 alive)
[  243.211437][ T2214] block nbd2: Connection timed out, retrying (0/1 alive)
[  243.215035][ T2214] block nbd2: Dead connection, failed to find a fallback
[  243.218456][ T2214] block nbd2: shutting down sockets
[  243.222845][ T2214] blk_print_req_error: 10 callbacks suppressed
[  243.222858][ T2214] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.230142][ T2214] buffer_io_error: 10 callbacks suppressed
[  243.230181][ T2214] Buffer I/O error on dev nbd2, logical block 0, async page read
[  243.236693][ T2214] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.240714][ T2214] Buffer I/O error on dev nbd2, logical block 3, async page read
[  243.244023][ T2214] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.247922][ T2214] Buffer I/O error on dev nbd2, logical block 2, async page read
[  243.250784][ T2214] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.253817][ T2214] Buffer I/O error on dev nbd2, logical block 1, async page read
[  243.261246][T13733] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.269155][T13733] Buffer I/O error on dev nbd2, logical block 0, async page read
[  243.272359][T13733] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.275504][T13733] Buffer I/O error on dev nbd2, logical block 1, async page read
[  243.278099][T13733] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.281142][T13733] Buffer I/O error on dev nbd2, logical block 2, async page read
[  243.285496][T13733] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.288535][T13733] Buffer I/O error on dev nbd2, logical block 3, async page read
[  243.291194][T13733] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.294401][T13733] Buffer I/O error on dev nbd2, logical block 0, async page read
[  243.297055][T13733] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.300195][T13733] Buffer I/O error on dev nbd2, logical block 1, async page read
[  243.305721][T13733] ldm_validate_partition_table(): Disk read failed.
[  243.308766][T13733] Dev nbd2: unable to read RDB block 0
[  243.311770][T13733]  nbd2: unable to read partition table
[  243.321749][T13733] ldm_validate_partition_table(): Disk read failed.
[  243.326252][T13733] Dev nbd2: unable to read RDB block 0
[  243.330568][T13733]  nbd2: unable to read partition table
[  243.392229][   T40] audit: type=1400 audit(2000000090.632:59877): avc:  denied  { ioctl } for  pid=14156 comm="syz.3.2392" path="socket:[58221]" dev="sockfs" ino=58221 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  243.436495][   T40] audit: type=1400 audit(2000000090.669:59878): avc:  denied  { write } for  pid=14158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  243.470236][T14165] input: syz0 as /devices/virtual/input/input100
[  243.490821][   T40] audit: type=1400 audit(2000000090.716:59879): avc:  denied  { write } for  pid=14166 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  244.015125][T14181] syzkaller0: entered promiscuous mode
[  244.017532][T14181] syzkaller0: entered allmulticast mode
[  244.187600][T14183] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2399'.
[  244.292266][T14185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  244.446777][T14125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  244.568971][   T40] audit: type=1400 audit(2000000091.727:59880): avc:  denied  { lock } for  pid=14194 comm="syz.4.2402" path="socket:[59173]" dev="sockfs" ino=59173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  244.704069][T14199] input: syz0 as /devices/virtual/input/input101
[  244.988082][   T40] audit: type=1400 audit(2000000092.120:59881): avc:  denied  { read } for  pid=14203 comm="syz.4.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.282689][T14209] loop6: detected capacity change from 0 to 8
[  245.343594][T14209] loop6: detected capacity change from 8 to 0
[  245.494194][T14216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2408'.
[  245.733337][T14225] SELinux:  policydb version -1636199094 does not match my version range 15-35
[  245.737101][T14225] SELinux: failed to load policy
[  245.741055][T14226] SELinux:  policydb version -1636199094 does not match my version range 15-35
[  245.758943][T14226] SELinux: failed to load policy
[  245.787669][T14228] input: syz0 as /devices/virtual/input/input102
[  245.930813][T14231] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  246.044027][T14240] lo: entered allmulticast mode
[  246.062453][T14239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2416'.
[  246.072775][T14239] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.092360][   T40] audit: type=1400 audit(2000000093.149:59882): avc:  denied  { name_bind } for  pid=14242 comm="syz.1.2418" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  246.166854][T14254] input: syz0 as /devices/virtual/input/input103
[  246.168525][T14251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14251 comm=syz.3.2421
[  246.261098][T14260] program syz.1.2425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  246.328084][T14263] netlink: 'syz.0.2426': attribute type 4 has an invalid length.
[  246.382132][T14263] netlink: 'syz.0.2426': attribute type 17 has an invalid length.
[  246.391851][T14263] sock: sock_set_timeout: `syz.0.2426' (pid 14263) tries to set negative timeout
[  246.452434][T14270] 
[  246.453545][T14270] ======================================================
[  246.456527][T14270] WARNING: possible circular locking dependency detected
[  246.459467][T14270] syzkaller #0 Tainted: G             L     
[  246.462107][T14270] ------------------------------------------------------
[  246.465079][T14270] syz.1.2429/14270 is trying to acquire lock:
[  246.467744][T14270] ffffffff8f280b68 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x36a/0x5d0
[  246.471871][T14270] 
[  246.471871][T14270] but task is already holding lock:
[  246.475031][T14270] ffff88803c0ed360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x513/0x1df0
[  246.479093][T14270] 
[  246.479093][T14270] which lock already depends on the new lock.
[  246.479093][T14270] 
[  246.483403][T14270] 
[  246.483403][T14270] the existing dependency chain (in reverse order) is:
[  246.487121][T14270] 
[  246.487121][T14270] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  246.490393][T14270]        lock_sock_nested+0x41/0xf0
[  246.492738][T14270]        inet_shutdown+0x67/0x410
[  246.494907][T14270]        nbd_mark_nsock_dead+0xae/0x5c0
[  246.497285][T14270]        recv_work+0x5fb/0x8c0
[  246.499401][T14270]        process_one_work+0xa0e/0x1980
[  246.501756][T14270]        worker_thread+0x5ef/0xe50
[  246.503995][T14270]        kthread+0x370/0x450
[  246.505993][T14270]        ret_from_fork+0x72b/0xd50
[  246.508199][T14270]        ret_from_fork_asm+0x1a/0x30
[  246.510455][T14270] 
[  246.510455][T14270] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  246.513672][T14270]        __mutex_lock+0x1a4/0x1b10
[  246.515712][T14270]        nbd_queue_rq+0x428/0x1080
[  246.517444][T14270]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  246.519607][T14270]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  246.522075][T14270]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  246.524284][T14270]        blk_mq_run_hw_queue+0x23c/0x670
[  246.526210][T14270]        blk_mq_dispatch_list+0x51d/0x1360
[  246.528208][T14270]        blk_mq_flush_plug_list+0x130/0x600
[  246.530421][T14270]        __blk_flush_plug+0x2c4/0x4b0
[  246.532319][T14270]        __submit_bio+0x584/0x6c0
[  246.534024][T14270]        submit_bio_noacct_nocheck+0x543/0xbf0
[  246.536154][T14270]        submit_bio_noacct+0xd18/0x2000
[  246.538039][T14270]        submit_bh_wbc+0x681/0x890
[  246.539768][T14270]        block_read_full_folio+0x264/0x8e0
[  246.541738][T14270]        filemap_read_folio+0xfc/0x3b0
[  246.543646][T14270]        do_read_cache_folio+0x2d7/0x6b0
[  246.545568][T14270]        read_part_sector+0xd1/0x370
[  246.547399][T14270]        adfspart_check_ICS+0x91/0x7d0
[  246.549287][T14270]        bdev_disk_changed+0x7a3/0x1250
[  246.551159][T14270]        blkdev_get_whole+0x187/0x290
[  246.553080][T14270]        bdev_open+0x2c7/0xe40
[  246.554728][T14270]        blkdev_open+0x34e/0x4f0
[  246.556436][T14270]        do_dentry_open+0x6d8/0x1660
[  246.558239][T14270]        vfs_open+0x82/0x3f0
[  246.559869][T14270]        path_openat+0x208c/0x31a0
[  246.561593][T14270]        do_file_open+0x20e/0x430
[  246.563314][T14270]        do_sys_openat2+0x10d/0x1e0
[  246.565255][T14270]        __x64_sys_openat+0x12d/0x210
[  246.567086][T14270]        do_syscall_64+0x10b/0xf80
[  246.568845][T14270]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.571061][T14270] 
[  246.571061][T14270] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  246.573547][T14270]        __mutex_lock+0x1a4/0x1b10
[  246.575295][T14270]        nbd_queue_rq+0xba/0x1080
[  246.576974][T14270]        blk_mq_dispatch_rq_list+0x422/0x1e70
[  246.579015][T14270]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  246.581279][T14270]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  246.583521][T14270]        blk_mq_run_hw_queue+0x23c/0x670
[  246.585516][T14270]        blk_mq_dispatch_list+0x51d/0x1360
[  246.587470][T14270]        blk_mq_flush_plug_list+0x130/0x600
[  246.589833][T14270]        __blk_flush_plug+0x2c4/0x4b0
[  246.591879][T14270]        __submit_bio+0x584/0x6c0
[  246.593565][T14270]        submit_bio_noacct_nocheck+0x543/0xbf0
[  246.595607][T14270]        submit_bio_noacct+0xd18/0x2000
[  246.597439][T14270]        submit_bh_wbc+0x681/0x890
[  246.599112][T14270]        block_read_full_folio+0x264/0x8e0
[  246.601037][T14270]        filemap_read_folio+0xfc/0x3b0
[  246.602883][T14270]        do_read_cache_folio+0x2d7/0x6b0
[  246.604713][T14270]        read_part_sector+0xd1/0x370
[  246.606448][T14270]        adfspart_check_ICS+0x91/0x7d0
[  246.608234][T14270]        bdev_disk_changed+0x7a3/0x1250
[  246.610278][T14270]        blkdev_get_whole+0x187/0x290
[  246.612321][T14270]        bdev_open+0x2c7/0xe40
[  246.614264][T14270]        blkdev_open+0x34e/0x4f0
[  246.616090][T14270]        do_dentry_open+0x6d8/0x1660
[  246.617836][T14270]        vfs_open+0x82/0x3f0
[  246.619419][T14270]        path_openat+0x208c/0x31a0
[  246.621152][T14270]        do_file_open+0x20e/0x430
[  246.622847][T14270]        do_sys_openat2+0x10d/0x1e0
[  246.624638][T14270]        __x64_sys_openat+0x12d/0x210
[  246.626374][T14270]        do_syscall_64+0x10b/0xf80
[  246.628147][T14270]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.630707][T14270] 
[  246.630707][T14270] -> #5 (set->srcu){.+.+}-{0:0}:
[  246.633718][T14270]        __synchronize_srcu+0xa2/0x300
[  246.636042][T14270]        blk_mq_quiesce_queue+0x149/0x1c0
[  246.638475][T14270]        elevator_switch+0x17b/0x7e0
[  246.640755][T14270]        elevator_change+0x352/0x530
[  246.643043][T14270]        elevator_set_default+0x29e/0x360
[  246.645400][T14270]        blk_register_queue+0x48e/0x630
[  246.647809][T14270]        __add_disk+0x73f/0xe40
[  246.649891][T14270]        add_disk_fwnode+0x118/0x5c0
[  246.652174][T14270]        nbd_dev_add+0x77a/0xb10
[  246.654280][T14270]        nbd_init+0x291/0x2b0
[  246.656317][T14270]        do_one_initcall+0x121/0x750
[  246.658568][T14270]        kernel_init_freeable+0x6ea/0x7b0
[  246.660998][T14270]        kernel_init+0x1f/0x1e0
[  246.663088][T14270]        ret_from_fork+0x72b/0xd50
[  246.665275][T14270]        ret_from_fork_asm+0x1a/0x30
[  246.667504][T14270] 
[  246.667504][T14270] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  246.670516][T14270]        __mutex_lock+0x1a4/0x1b10
[  246.672232][T14270]        elevator_change+0x1bc/0x530
[  246.673987][T14270]        elevator_set_none+0x92/0xf0
[  246.675756][T14270]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[  246.677863][T14270]        nbd_start_device+0x1a6/0xbd0
[  246.679694][T14270]        nbd_genl_connect+0xff2/0x1a40
[  246.681525][T14270]        genl_family_rcv_msg_doit+0x214/0x300
[  246.683579][T14270]        genl_rcv_msg+0x560/0x800
[  246.685266][T14270]        netlink_rcv_skb+0x159/0x420
[  246.687063][T14270]        genl_rcv+0x28/0x40
[  246.688591][T14270]        netlink_unicast+0x585/0x850
[  246.690385][T14270]        netlink_sendmsg+0x8b0/0xda0
[  246.692417][T14270]        ____sys_sendmsg+0x9e1/0xb70
[  246.694245][T14270]        ___sys_sendmsg+0x190/0x1e0
[  246.695988][T14270]        __sys_sendmsg+0x170/0x220
[  246.697710][T14270]        do_syscall_64+0x10b/0xf80
[  246.699499][T14270]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.701636][T14270] 
[  246.701636][T14270] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  246.704493][T14270]        blk_alloc_queue+0x610/0x790
[  246.706234][T14270]        blk_mq_alloc_queue+0x174/0x290
[  246.708101][T14270]        __blk_mq_alloc_disk+0x29/0x120
[  246.709934][T14270]        nbd_dev_add+0x492/0xb10
[  246.711603][T14270]        nbd_init+0x291/0x2b0
[  246.713173][T14270]        do_one_initcall+0x121/0x750
[  246.714922][T14270]        kernel_init_freeable+0x6ea/0x7b0
[  246.716835][T14270]        kernel_init+0x1f/0x1e0
[  246.718451][T14270]        ret_from_fork+0x72b/0xd50
[  246.720243][T14270]        ret_from_fork_asm+0x1a/0x30
[  246.722169][T14270] 
[  246.722169][T14270] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  246.725345][T14270]        fs_reclaim_acquire+0xc4/0x100
[  246.727777][T14270]        __kmalloc_cache_noprof+0x4b/0x6f0
[  246.730358][T14270]        cryptomgr_notify+0xa4/0xb40
[  246.732694][T14270]        notifier_call_chain+0x99/0x400
[  246.735125][T14270]        blocking_notifier_call_chain+0x69/0xa0
[  246.737871][T14270]        crypto_alg_mod_lookup+0x1e2/0x5d0
[  246.740460][T14270]        crypto_alloc_tfm_node+0xd3/0x260
[  246.742951][T14270]        crypto_alloc_sync_skcipher+0x39/0xd0
[  246.745623][T14270]        rxkad_init+0x1d/0x110
[  246.747798][T14270]        rxrpc_init_security+0x95/0x1a0
[  246.749961][T14270]        af_rxrpc_init+0x136/0x370
[  246.751961][T14270]        do_one_initcall+0x121/0x750
[  246.754232][T14270]        kernel_init_freeable+0x6ea/0x7b0
[  246.756729][T14270]        kernel_init+0x1f/0x1e0
[  246.758837][T14270]        ret_from_fork+0x72b/0xd50
[  246.760805][T14270]        ret_from_fork_asm+0x1a/0x30
[  246.763083][T14270] 
[  246.763083][T14270] -> #1 ((crypto_chain).rwsem){++++}-{4:4}:
[  246.766501][T14270]        down_read+0x99/0x450
[  246.768598][T14270]        blocking_notifier_call_chain+0x53/0xa0
[  246.771220][T14270]        __crypto_register_alg+0x2a7/0x3b0
[  246.773801][T14270]        crypto_register_alg+0x1f4/0x340
[  246.776265][T14270]        crypto_register_shash+0x36/0x50
[  246.778741][T14270]        do_one_initcall+0x121/0x750
[  246.781099][T14270]        kernel_init_freeable+0x6ea/0x7b0
[  246.783616][T14270]        kernel_init+0x1f/0x1e0
[  246.785804][T14270]        ret_from_fork+0x72b/0xd50
[  246.788075][T14270]        ret_from_fork_asm+0x1a/0x30
[  246.790419][T14270] 
[  246.790419][T14270] -> #0 (crypto_alg_sem){++++}-{4:4}:
[  246.793710][T14270]        __lock_acquire+0x14b8/0x2630
[  246.796035][T14270]        lock_acquire+0x1b1/0x370
[  246.798200][T14270]        down_write+0x8b/0x1f0
[  246.800295][T14270]        crypto_alg_mod_lookup+0x36a/0x5d0
[  246.802299][T14270]        crypto_alloc_tfm_node+0xd3/0x260
[  246.804126][T14270]        tls_set_sw_offload+0xd4d/0x1670
[  246.805946][T14270]        tls_setsockopt+0xecf/0x1df0
[  246.807638][T14270]        do_sock_setsockopt+0xf3/0x1d0
[  246.809409][T14270]        __sys_setsockopt+0x195/0x220
[  246.811130][T14270]        __x64_sys_setsockopt+0xbd/0x160
[  246.812943][T14270]        do_syscall_64+0x10b/0xf80
[  246.814579][T14270]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.816674][T14270] 
[  246.816674][T14270] other info that might help us debug this:
[  246.816674][T14270] 
[  246.819950][T14270] Chain exists of:
[  246.819950][T14270]   crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6
[  246.819950][T14270] 
[  246.824041][T14270]  Possible unsafe locking scenario:
[  246.824041][T14270] 
[  246.826457][T14270]        CPU0                    CPU1
[  246.828180][T14270]        ----                    ----
[  246.830148][T14270]   lock(sk_lock-AF_INET6);
[  246.831756][T14270]                                lock(&nsock->tx_lock);
[  246.834658][T14270]                                lock(sk_lock-AF_INET6);
[  246.837438][T14270]   lock(crypto_alg_sem);
[  246.838834][T14270] 
[  246.838834][T14270]  *** DEADLOCK ***
[  246.838834][T14270] 
[  246.841418][T14270] 1 lock held by syz.1.2429/14270:
[  246.843054][T14270]  #0: ffff88803c0ed360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x513/0x1df0
[  246.846123][T14270] 
[  246.846123][T14270] stack backtrace:
[  246.848461][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.1.2429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  246.848485][T14270] Tainted: [L]=SOFTLOCKUP
[  246.848492][T14270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  246.848502][T14270] Call Trace:
[  246.848552][T14270]  <TASK>
[  246.848561][T14270]  dump_stack_lvl+0x100/0x190
[  246.848584][T14270]  print_circular_bug.cold+0x178/0x1c7
[  246.848611][T14270]  check_noncircular+0x146/0x160
[  246.848631][T14270]  ? crypto_alloc_tfm_node+0xd3/0x260
[  246.848659][T14270]  __lock_acquire+0x14b8/0x2630
[  246.848684][T14270]  lock_acquire+0x1b1/0x370
[  246.848705][T14270]  ? crypto_alg_mod_lookup+0x36a/0x5d0
[  246.848734][T14270]  ? __pfx___might_resched+0x10/0x10
[  246.848761][T14270]  down_write+0x8b/0x1f0
[  246.848784][T14270]  ? crypto_alg_mod_lookup+0x36a/0x5d0
[  246.848811][T14270]  ? __pfx_down_write+0x10/0x10
[  246.848833][T14270]  ? __init_swait_queue_head+0xca/0x150
[  246.848861][T14270]  ? crypto_larval_alloc+0x1fc/0x270
[  246.848887][T14270]  crypto_alg_mod_lookup+0x36a/0x5d0
[  246.848913][T14270]  crypto_alloc_tfm_node+0xd3/0x260
[  246.848928][T14270]  tls_set_sw_offload+0xd4d/0x1670
[  246.848952][T14270]  tls_setsockopt+0xecf/0x1df0
[  246.848977][T14270]  ? __pfx_tls_setsockopt+0x10/0x10
[  246.849003][T14270]  ? selinux_socket_setsockopt+0x6a/0x80
[  246.849019][T14270]  ? sock_common_setsockopt+0x2e/0xf0
[  246.849036][T14270]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  246.849054][T14270]  do_sock_setsockopt+0xf3/0x1d0
[  246.849071][T14270]  __sys_setsockopt+0x195/0x220
[  246.849099][T14270]  __x64_sys_setsockopt+0xbd/0x160
[  246.849121][T14270]  ? do_syscall_64+0x90/0xf80
[  246.849141][T14270]  ? lockdep_hardirqs_on+0x78/0x100
[  246.849161][T14270]  do_syscall_64+0x10b/0xf80
[  246.849180][T14270]  ? clear_bhb_loop+0x40/0x90
[  246.849199][T14270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.849217][T14270] RIP: 0033:0x7f1cdd99cdd9
[  246.849231][T14270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.849246][T14270] RSP: 002b:00007f1cde847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  246.849263][T14270] RAX: ffffffffffffffda RBX: 00007f1cddc15fa0 RCX: 00007f1cdd99cdd9
[  246.849275][T14270] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003
[  246.849285][T14270] RBP: 00007f1cdda32d69 R08: 0000000000000028 R09: 0000000000000000
[  246.849296][T14270] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  246.849306][T14270] R13: 00007f1cddc16038 R14: 00007f1cddc15fa0 R15: 00007fffbadbd688
[  246.849322][T14270]  </TASK>
[  247.012496][T14270] tmpfs: Bad value for 'mpol'
[  247.015014][T14270] netlink: 'syz.1.2429': attribute type 4 has an invalid length.
[  247.087368][   T40] audit: type=1400 audit(2000000094.085:59883): avc:  denied  { unmount } for  pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  248.326680][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout
[  256.405651][ T7944] bridge_slave_1: left allmulticast mode
[  256.408466][ T7944] bridge_slave_1: left promiscuous mode
[  256.411289][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.416740][ T7944] bridge_slave_0: left allmulticast mode
[  256.419459][ T7944] bridge_slave_0: left promiscuous mode
[  256.422191][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.429982][ T7944] tipc: Resetting bearer <eth:syzkaller0>