last executing test programs:

38.05058828s ago: executing program 0 (id=878):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x5f)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000))
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x254, 0x14, 0x100, 0x70bd25, 0x25dfdbff, {0x1, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "7369b9393acb5f45e331a9b3f59c1806aa66c803af34aa3f740c2199cc715410d6b12b9446e575ac17878679d3d0a0f2b597176971b53b8fd7f7f9c28172e60bef9ab5359643e0bda29a3c24"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "f519e11e6a57f4f9310c3a9ced5fef22d45c5e05558d33b971f78cf927472fa45927f23f5ed86f4ac74bd106ee8e9d45f9c49d98f903b27efa133bbca74cfcc692e8600fbbf7e422f73ea89513761498d70cde339de5bb6fa9ed1884ec33dd156a81ddd763b6e22f6daaedf50df0921756227c114af44fc50cf4f7ceaa8ce3075b23d6dc2aa682"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "b688a0f546261d2915c3ac3c3f4edc842865b805082cc958cb35da5094465e1322fab9a5c8291b8c6f36a8adb257fe2361c815680b04ca75fae15ba0b34de9e1ae8fb9636a987c7331e9"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "f1955620c34f223154b3ef48db3795eb72c526eb257c1d1261b6354f"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "c1a12628f52cdfb9e186f0841ba5dd204a929bec1c4ff83ef85d86002fe418d28d9c8d97233e7788fde1cddd8a2a683f8496ffc82fef407461d9851a70552bac388a19517a80e060931ac722cec2591e835da9e5ca911792e892dcc12b08530be2c2f98f792b6888f33619b848d0a0163cdc1eabbfe3559528002dac7772202d0a1b1d5202e006290988007da7f2e3e2adea4cf147c132558ca8fb6743725d662e"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "9ce9f5e179048b8d753d83df17e2c1e2c35cfcf486855061d43ee79aec5181ff28686e39eb3165de41bd5d39381b4c02c3e0765fd32fa4e4c4815935c80cd5a4de67378625"}]}, 0x254}, 0x1, 0x0, 0x0, 0xe5089137e04f2ba1}, 0x8900)
accept4(r0, 0x0, 0x0, 0x0)
close(0x3)
close(0x4)

38.050323907s ago: executing program 0 (id=879):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="d8000000100081044e81f782db44b904021d006a0f000000dafe55a1290015000600142603600e120900040004ed0000a80016470a000a40020000000006ffc3b94dcf5c0461c1d67f6f94007134cf6ee08000a0e6475acc136f33cdd3f154bed8ef52a98516277ce06bbace802e8bec4c2ee5a7cef4090000001fb7914df9255ece1b019d9514d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040e3d95667e006dcdf63951f215ce3bb9ad809d5e1cace81508ff60d7fed0bffece0b42a9ecbee90421a91", 0xd8}], 0x1}, 0x60010)

37.991201909s ago: executing program 0 (id=880):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = landlock_create_ruleset(&(0x7f0000000800)={0x7f6e, 0x2, 0x0, 0x0, 0x2}, 0xe, 0x0)
landlock_restrict_self(r0, 0xe)
socket$kcm(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r1, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)

37.990614318s ago: executing program 0 (id=881):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'fl512\x00', [0x0, 0xe65, 0x3, 0x1, 0xe7, 0x80000008, 0x626d, 0x85, 0xff46, 0x100, 0xcf3, 0x9, 0x1d8, 0x2, 0x6, 0x101, 0x1, 0x1008b, 0xffff8148, 0x2, 0x4, 0x80000001, 0x8, 0x2000007, 0xb, 0x5, 0x3c, 0x5, 0x7fffffff, 0xffff, 0xfffffff6]})

37.930845594s ago: executing program 0 (id=882):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r0, 0x40140921, 0x200000000005)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x5}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xa})
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil)
r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000a40)={0x0, 0x0})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

37.640925255s ago: executing program 0 (id=883):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0) (async)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = getpgid(0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000f2, 0x0, 0x10}]})
r6 = syz_pidfd_open(r2, 0x0) (async)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
pidfd_send_signal(r6, 0x0, 0x0, 0x4)

37.628778797s ago: executing program 32 (id=883):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0) (async)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = getpgid(0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000f2, 0x0, 0x10}]})
r6 = syz_pidfd_open(r2, 0x0) (async)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
pidfd_send_signal(r6, 0x0, 0x0, 0x4)

32.399541529s ago: executing program 4 (id=891):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
ptrace$peeksig(0x4209, r3, &(0x7f0000000100)={0x8, 0x0, 0x2}, &(0x7f00000002c0)=[{}, {}])
socket$nl_route(0x10, 0x3, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
socket(0x6, 0x80802, 0x400000)
socket$tipc(0x1e, 0x5, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x4}, 0x18)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x1820, r1}, 0x1)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000402bbbbbbbbbbbbffffffffffffaaaaaa98aa2501"])
socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$kcm(0x2c, 0x3, 0x0)
close(r7)
close(r6)
socket$kcm(0xa, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)

26.634852983s ago: executing program 4 (id=891):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
ptrace$peeksig(0x4209, r3, &(0x7f0000000100)={0x8, 0x0, 0x2}, &(0x7f00000002c0)=[{}, {}])
socket$nl_route(0x10, 0x3, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
socket(0x6, 0x80802, 0x400000)
socket$tipc(0x1e, 0x5, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x4}, 0x18)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x1820, r1}, 0x1)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000402bbbbbbbbbbbbffffffffffffaaaaaa98aa2501"])
socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$kcm(0x2c, 0x3, 0x0)
close(r7)
close(r6)
socket$kcm(0xa, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)

21.490490254s ago: executing program 2 (id=1070):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

21.314247558s ago: executing program 2 (id=1071):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x207, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6)
r6 = syz_open_dev$mouse(&(0x7f0000000040), 0x5d0, 0x440480)
ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000080)={0xfffffffc, "8a2279ba940aeee0731de9c4c55790d30a2f8ddf4e5cbe29597b5c251e5abc6b", 0x20, 0x7fff, 0x4, 0x4, 0x4})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

21.22868425s ago: executing program 2 (id=1072):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={<r1=>0x0, 0xfffffc01, 0x3, 0x2, 0x2, 0x0, 0x9, 0x80, {<r2=>0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x2}}, 0xfffff17e, 0x0, 0x4, 0xe, 0x6}}, &(0x7f00000000c0)=0xb0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x101, 0x30}, 0xc) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x6, 0x8000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r2, 0xc, 0xa, [0x13d, 0xc, 0x1, 0x8, 0x100, 0x4, 0x0, 0x3, 0x1, 0xf]}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, <r6=>0xffffffffffffffff}, 0x4) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r7=>0x0, @dev, @multicast2}, &(0x7f0000000380)=0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1000, 0x4, 0x2, 0x200, r6, 0xbf8e, '\x00', r7, r0, 0x0, 0x1}, 0x50) (async)
ioctl$XFS_IOC_DIOINFO(r6, 0x800c581e, &(0x7f0000000440)) (async, rerun: 64)
r9 = memfd_secret(0x80000) (rerun: 64)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000500)={r1, 0x74, &(0x7f0000000480)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x98}, @in6={0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e21, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000540)=0x10) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000580)={"00a43b8ebc3f366275a68294a0a0c8a9", 0x0, <r10=>0x0, {0x2, 0x3}, {0x60000000000, 0x1ff}, 0x9, [0x6, 0x9, 0xfffffffffffffffd, 0x400, 0x401, 0x64b4, 0xa1, 0xd5, 0xaa, 0x800, 0xaba, 0x6, 0x2, 0x5, 0x3, 0x7ff]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={<r11=>0x0, 0x100, 0x0, [0x1, 0x6, 0x85f, 0x1ff, 0x3], [0x7, 0x100000001, 0xaf, 0x9, 0x37, 0x6, 0x1c000000000000, 0x3ff, 0x7, 0x0, 0x5, 0x1, 0x400, 0xfffffffffffffffd, 0x9, 0x3, 0x2, 0x44a8, 0x2, 0x6d5, 0x7, 0x3, 0x8000000000000000, 0xa, 0x1, 0x8001, 0x5, 0x6c72071f, 0x4, 0x7, 0xfffffffffffffffa, 0x7, 0xd, 0x5, 0x2, 0xa65, 0x1, 0x6e8, 0xb1a, 0x70000000000, 0xfd, 0x6, 0x9, 0x8, 0x7, 0x0, 0xb, 0x5, 0x10, 0x1, 0x0, 0xf, 0x2, 0x8, 0x10000, 0xf9, 0x100000000, 0xfffffffffffffff3, 0x5, 0x9, 0x81, 0x1000, 0x5, 0x8, 0x4, 0x1, 0x4, 0xd, 0x20000000, 0x100000000, 0xb0, 0x400, 0x7aa, 0xb, 0x2, 0x8000000000000001, 0x78cf, 0x4, 0x5, 0x3, 0xfffffffffffffffb, 0x8, 0x7, 0x2, 0xe, 0x2, 0x3, 0x80000000, 0x6, 0xfffffffffffffffa, 0xff, 0x3, 0x5bd, 0x10000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x32, 0x44, 0x2, 0x6, 0x1, 0x596, 0x9, 0x3, 0x7ff, 0x5, 0x2, 0x7, 0x4, 0xe5, 0x8, 0x4, 0xfffffffffffffff9, 0x1, 0x101, 0x2, 0x3, 0x2]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000b80)={{r8}, r10, 0x0, @inherit={0x88, &(0x7f0000000680)={0x1, 0x8, 0x6, 0x4, {0x30, 0xc0000, 0xcbb, 0x1, 0x401}, [0x2, 0x8, 0x100, 0x8000, 0x0, 0x100000, 0x971d, 0x5]}}, @devid=r11})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000001b80)={{0x1, 0x1, 0x18, <r12=>r4}, './file0\x00'}) (async, rerun: 64)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), r3) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001c40)={'wg2\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xac, r13, 0x201, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x84b) (async, rerun: 32)
socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32)
ioctl$TUNSETDEBUG(r12, 0x400454c9, &(0x7f0000001dc0)=0x827) (async)
r15 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001e00), 0x42100, 0x0)
read$FUSE(r9, &(0x7f0000001e40)={0x2020, 0x0, <r16=>0x0}, 0x2020)
write$FUSE_LSEEK(r15, &(0x7f0000003e80)={0x18, 0x0, r16, {0xd}}, 0x18) (async)
r17 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003ec0), 0xe02c0, 0x0) (async)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f40), r4)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r17, &(0x7f0000004040)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x68, r18, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
pidfd_getfd(r15, r3, 0x0)

21.100469997s ago: executing program 2 (id=1074):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x3a, 0x1, 0x0, 0x20)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2457, 0x400, 0x1000002, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x20000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x5d33, 0xf0940)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$CDROM_GET_MCN(r4, 0x5311, 0x0)
fsmount(r3, 0x0, 0x8)
mmap$IORING_OFF_CQ_RING(0x0, 0x17, 0x1000000, 0x2010, r3, 0x8000000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f00000000c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
poll(&(0x7f0000000100)=[{r2, 0x4482}, {r2, 0x1000}, {r5, 0x1000}], 0x3, 0x1)

20.660026252s ago: executing program 1 (id=1078):
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f00000001c0)={0x5, 0x5}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x12)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000040, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3040000000000000000636f6e6e6c696d69740000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000b8f927da706ab4195e16b4471b972fbb19cb88951bc51a0a67449875bf55ad7761686d734d6fc549b8fbfe7ab7079a054fb2320b35f4da2a04b4a7a3ed7c9f03b26cc23a"], 0xa8}}, 0x4048010) (async, rerun: 32)
bind$l2tp(r2, &(0x7f00000000c0), 0x10) (async, rerun: 32)
sendto$l2tp(r2, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) (async, rerun: 64)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2120, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000150a010209000000000000000000001c"], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)
r4 = syz_clone3(&(0x7f0000000380)={0x121000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x6, &(0x7f0000000000)) (async)
syz_open_procfs$pagemap(r4, &(0x7f0000000040)) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x82d3, 0x39}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008011}, 0x20004000)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000002100)={0x802, 0x0, 0x0, 0x7fffffff}, 0x10) (async)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r8], 0x20}}, 0x0)

20.637010029s ago: executing program 4 (id=891):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=<r3=>0x0)
ptrace$peeksig(0x4209, r3, &(0x7f0000000100)={0x8, 0x0, 0x2}, &(0x7f00000002c0)=[{}, {}])
socket$nl_route(0x10, 0x3, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
socket(0x6, 0x80802, 0x400000)
socket$tipc(0x1e, 0x5, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x4}, 0x18)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x1820, r1}, 0x1)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000402bbbbbbbbbbbbffffffffffffaaaaaa98aa2501"])
socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$kcm(0x2c, 0x3, 0x0)
close(r7)
close(r6)
socket$kcm(0xa, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)

20.590898315s ago: executing program 1 (id=1079):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040)
capset(0x0, &(0x7f0000000080))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5)
r5 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902"], 0x0)
write$usbip_server(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35)

20.195882362s ago: executing program 2 (id=1080):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_pktinfo(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
r4 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x90)
r6 = openat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19.887325244s ago: executing program 2 (id=1081):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
ptrace(0x10, r4)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
ptrace$getsig(0x4202, r4, 0x9, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @empty, @empty, @local}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x2, 0x1)
setsockopt(r8, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
setsockopt(r8, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0)
sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040011)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0)

19.327865728s ago: executing program 1 (id=1083):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00008000000000000000020000000000000000005ff4f8b1202e3db6741dc34ab96f975eda0d15a9b63171b5"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000e73f3c20e50cfbf34c03735645dbac47c602bc140dbef656c8cc65db54c0cb1e7b2a1f472e13372b9f429947ca780cd95f3c1d6b9ec50311f717ab960bb88694e273cd0e3a069a957129b01cf8fb", @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000018"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r5)
sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x200, 0x70bd29, 0x6, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20)
r7 = socket$igmp(0x2, 0x3, 0x2)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r10, 0x34da2000)

19.078043039s ago: executing program 1 (id=1086):
ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0xec, 0x455, '\x00', &(0x7f0000000000)=0x6})
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0x7, 0x2001, 0x9, 0x4, 0x7, 0x1, 0x2}})
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000140)={0x3, 0x1, [0xe, 0x7f, 0x5, 0x9b3b, 0x9, 0x240000, 0x7, 0x6]})
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = getpgid(0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r3=>0x0})
ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000200))
rt_sigprocmask(0x1, &(0x7f0000000240)={[0xcc]}, &(0x7f0000000280), 0x8)
ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000002c0)={[0x3]})
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f0000000300)={0x24, @none={0x0, 0xffff}}, 0x14)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000340)={0xb, 0x0, '\x00', {0x0, @reserved}})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="0fc76800b879000f00d0f68000008466b80500000066b9f46f00000f01d90f01c90f01fb0f01c40f01c40f20c06635020000000f22c066b95e0b00000f32", 0x3e}], 0x1, 0xa, 0xfffffffffffffffd, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x8]}, 0x8, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000004c0)={0x1, 0x4, 0x35, 0x80080, <r7=>0xffffffffffffffff})
r8 = memfd_create(&(0x7f0000000500)='*^,\x00', 0x6)
ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000000b00)={0x6, &(0x7f0000000a40)=[{0x9, 0x8a, &(0x7f0000000540)="04c9687bbc5460dc6dbce95497e87b31b81335c44c9b42fc0e641a6c605493c1c4d79c12c883ed304226c0a59d6459e50140dc3202d9324c6748b6974fc049927340b2da8e8049c05a55fca003e7db11293d2086d41e79036aae5b25d9310276f7526a50b9aac97e55f303941769950e1bb5bfd06ed3bd3789d71de3a3ace99cc91710a49a0181cce3bf", 0x1}, {0x1, 0xf2, &(0x7f0000000600)="90498d61857acee732fecec14cc9d3968d61d7c6fe645ebe8c7faeb1bfdc126a047942676f7cc6b15e36409ea76ce04502502b3ca96d6e346b6ff3791b7f52d2a12eac9f4f5ad35fb23268fba95bb40b2abd235fa3af82335f8c5b2afc8ee729c3bac4e325bf6e03741d0a0e9bde6d27fb83de3d44ba76d2e4580386fd4c9471d73ce949d7ce07314ca7d25ab14eb459ac90b7b082d1269a150edf813ffe09337819c2250ee513bd502bff386adeaaa4f82e068fc0014294daf4fb72ea8a18d7c480cd8004725f1fcf704168905643124866d0031520cb830f87cc896870e8c8bc1153ff00f1182b9dc8a6bcb3beabdad667", 0x1}, {0x5, 0xea, &(0x7f0000000700)="6814e62ba03c002fd6928c8873253ed403e3b0708dcae3d0d8833970fb57cc6e43220858de71c3ac1c5f23965e11dbef2c491fd83f6d2c8db552536034a89ad925e90ae60132a2197155fd16636bcc89400b16bf23d014738947ad6762db1032dd9b7947d823d9eb6bffab3872a33f94cf2d3bbfd562e889136b0ad099195e00973c659b5e44d88b2e5fb833afcfe7515a6ce79229f105d60a0563d702984cb2666c0a79c73da9b13b801d70e32a931081f770fbfdc7f6e5b7114a050cfc55b04fd3c7f7d5c11817b5fb362b725494bcdcaa8c65a72cb5c62497d6e4a21f224f4f7699b30f8962aeb759", 0x0, 0x1}, {0x5, 0xba, &(0x7f0000000800)="be7e304a7c1bbe5635055318c53b89583ca20a204873bb08e11750dafb61d960d80884dadd76f77fcc610564905efb3a6d925426ba283b41015a922ffb55675906fcedae6eb675f0ae160398a9451865b7a0a6446de1d66454d7fc764bbf039feb24e54861398dd50adfac4c84a7da72eda56cf4e28ac2f1b9aee44c5266405be8c55c97a8e3dd3c3c0d81c2258e243380d93e3c080dd81b168e383c8cf078db883217e5e138e2fbb520f3bce6146579b98797368ef377aff554"}, {0x8, 0x5f, &(0x7f00000008c0)="6597f681a5342971871ce96400dcae9b6738cf11aa61ee840367771a27ee6d2a5fe61138e46549f5bd71fab0ffa48f4e80cc2b284c88bd9d6ca342840708365e99a41e2296fd77bb01130a3e788ea8e04edc179892bb8ecb9cc2da9089db4b", 0x0, 0x1}, {0x27, 0xf0, &(0x7f0000000940)="b52ac276e45efb2b86bdf2ee60e5efffac346897f5c9531610c62edd44a2b9e971df9e1e1aa6a94699c8922a5749eb4a7f7738777a95952b73980b87363c70867b6c763055805dab5ea1c3c150cde4fa118c550fff82a07f7e236e729710275b144deeeeb2437687e00ee6d6e233c125fd906adea562ced89f9583b26b79ee117543c3d05a9dac2721ea7347c1d013283d2d57166e6d8c833260c4249504cfe71f3afade0ab99f33422036486497181337c57da79dd8c0a6b7b2375f6c815b55bd88d7160eee6aadcdbf094763661099c8480ad5da8708db0d50cdd6958900a659976c14074e0ec1c10d1060efc8616f"}]})
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x7f, &(0x7f0000000b40)=0x3, 0x4)
epoll_pwait(r6, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000c00)={[0x4]}, 0x8)
io_uring_setup(0x4799, &(0x7f0000000c40)={0x0, 0xbb39, 0x8, 0x3, 0x45})
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1e, 0xfffffffc, 0x434c7772, 0x7, 0x40, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50)
fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000d40))
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000d80)={0x0, @ctrl})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000e40)={0x6, 'veth1_macvtap\x00', {0x2}, 0x7fff})
r9 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x7)
r10 = signalfd4(r9, &(0x7f0000000e80)={[0x200]}, 0x8, 0x80800)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ec0)=r10, 0x4)

18.220652472s ago: executing program 1 (id=1092):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863336057ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x15, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) (async, rerun: 64)
r5 = fsmount(r3, 0x1, 0x6) (async, rerun: 64)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
dup(r2) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000006c0)="89e25da8"})
ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000240)) (async)
fchdir(r5) (async)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d753450a0ec519083cd8ba36e69782c00"]) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) (async)
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r9, 0x2)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r10, &(0x7f0000002140)=""/17, 0x11, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12)

18.208095179s ago: executing program 1 (id=1093):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0xb, 0x1], 0x80a0000, 0x50})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15.48715612s ago: executing program 3 (id=1094):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501000000100002800c000180080001000500110004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8ac7, 0x63}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8000)

15.486991981s ago: executing program 3 (id=1095):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x6)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) (async)
sendfile(r0, r0, 0x0, 0x6) (async)

15.410405459s ago: executing program 3 (id=1096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

15.32992404s ago: executing program 3 (id=1097):
r0 = getpid()
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x80001)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x104b)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000cb5b715fdcaf4917b55ad530ea7735136fbed61a9a861443d9b6c3e25cde44cd490e5e88cc0573d88ecd7e564ce40802e4cf3c7553f86c2f3999b738632ec6e08d43309880ecfcb566d5e31a9e2101249e597fc4d8e0087e6308b227604f03e611a9ce4010b97c7cd319c1b65cd376d275e7de75a30cbc9111a7bb4c00c6e268c2cd1cd375b6b05631ef4e8ac9fc11054f54c78b030bad7b41466f0cf5c598be0ac92cc7a3042d2ba2918242d14c767aa3621b3db5bd6cef2637d0fc2162732a"], 0x14}, 0x1, 0x0, 0x0, 0x20040811}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xac, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xe0}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb78a1381423425e3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008800}, 0x4000)
r8 = syz_open_procfs(r0, &(0x7f0000000040)='io\x00')
getdents(r8, &(0x7f0000002000)=""/4096, 0x1000)

15.060056055s ago: executing program 3 (id=1098):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x9, 0x8, 0x7f, 0x9})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x5})

15.058992139s ago: executing program 3 (id=1099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4000, 0xfffffa38, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000008c0)='X', 0x1}], 0x1)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_to_hsr\x00', {'veth1_vlan\x00'}, 0xb946})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$PPPIOCGFLAGS(r8, 0x8004745a, &(0x7f0000000040))
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x5})
sendmsg$nl_route(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000)

4.031909107s ago: executing program 33 (id=1081):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
ptrace(0x10, r4)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
ptrace$getsig(0x4202, r4, 0x9, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @empty, @empty, @local}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x2, 0x1)
setsockopt(r8, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
setsockopt(r8, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0)
sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040011)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0)

3.017563475s ago: executing program 34 (id=1093):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0xb, 0x1], 0x80a0000, 0x50})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 35 (id=1099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4000, 0xfffffa38, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000008c0)='X', 0x1}], 0x1)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_to_hsr\x00', {'veth1_vlan\x00'}, 0xb946})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x0)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$PPPIOCGFLAGS(r8, 0x8004745a, &(0x7f0000000040))
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x5})
sendmsg$nl_route(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x8, 0xfe, 0x2, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000)

kernel console output (not intermixed with test programs):

permissive=1
[   94.144418][   T42] audit: type=1400 audit(1783269796.762:645): avc:  denied  { write } for  pid=7321 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   94.301335][   T41] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   94.559896][   T42] audit: type=1400 audit(1783269797.172:646): avc:  denied  { mount } for  pid=7328 comm="syz.0.403" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   94.561583][ T7329] devpts: Bad value for 'max'
[   94.568618][   T42] audit: type=1400 audit(1783269797.182:647): avc:  denied  { remount } for  pid=7328 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   94.587855][   T42] audit: type=1400 audit(1783269797.202:648): avc:  denied  { unmount } for  pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   95.963435][ T7264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.966834][ T7275] netlink: 'syz.3.397': attribute type 2 has an invalid length.
[   95.971089][ T7275] netlink: 228 bytes leftover after parsing attributes in process `syz.3.397'.
[   96.038955][ T7344] No source specified
[   96.045570][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'.
[   96.050996][ T7344] No source specified
[   96.054682][ T7344] No source specified
[   96.056080][ T7344] No source specified
[   96.066079][ T7344] No source specified
[   96.067635][   T42] audit: type=1400 audit(1783269798.682:649): avc:  denied  { mounton } for  pid=7339 comm="syz.0.408" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   96.128237][ T7356] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.412' sets config #1
[   96.134886][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'.
[   96.151030][   T42] audit: type=1400 audit(1783269798.762:650): avc:  denied  { connect } for  pid=7357 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.158256][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[   96.162271][   T42] audit: type=1400 audit(1783269798.772:651): avc:  denied  { read } for  pid=7357 comm="syz.3.413" laddr=172.20.20.170 lport=43537 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.167193][ T5740] Bluetooth: hci1: Malformed Event: 0x2f
[   96.198800][ T7359] comedi comedi3: s526: a I/O base address must be specified
[   96.267177][ T7371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.417'.
[   96.324317][ T7380] program syz.2.419 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   96.329440][ T7380] ata1.00: invalid command format 67
[   96.497404][ T7399] mmap: syz.3.424 (7399): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   96.624954][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'.
[   96.692167][ T5832] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   96.754620][ T7427] overlayfs: failed to resolve './bus': -2
[   96.842889][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.846626][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   96.850264][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   96.856357][ T5832] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   96.859402][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.862420][ T5832] usb 5-1: Product: syz
[   96.863834][ T5832] usb 5-1: Manufacturer: syz
[   96.865420][ T5832] usb 5-1: SerialNumber: syz
[   96.872759][ T5832] usb 5-1: config 0 descriptor??
[   96.878942][ T7398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   96.931763][ T5832] rc_core: IR keymap rc-streamzap not found
[   96.934250][ T5832] Registered IR keymap rc-empty
[   96.938285][ T5832] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[   96.947357][ T5832] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input12
[   97.093787][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.097233][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.138969][ T5890] usb 5-1: USB disconnect, device number 10
[   97.253006][ T7445] Invalid logical block size (8196)
[   97.745586][ T7488] futex_wake_op: syz.0.439 tries to shift op by -1; fix this program
[   97.797693][ T7488] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[   97.932574][ T7493] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   97.994151][ T7494] loop7: detected capacity change from 0 to 16384
[   98.254062][ T7493] loop7: detected capacity change from 16384 to 0
[   98.339927][ T7500] netlink: 'syz.0.443': attribute type 1 has an invalid length.
[   98.364446][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   98.368934][ T7500] ªªªªªª: renamed from lo
[   98.421068][   T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   98.585617][   T29] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[   98.589188][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.592637][   T29] usb 6-1: Product: syz
[   98.594264][   T29] usb 6-1: Manufacturer: syz
[   98.596130][   T29] usb 6-1: SerialNumber: syz
[   98.662231][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.663668][ T7526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'.
[   98.669878][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.676735][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.735690][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.741938][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.801735][ T7535] netlink: 'syz.3.452': attribute type 1 has an invalid length.
[   98.824333][   T29] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   98.829124][ T7535] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.830153][   T29] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   98.875758][   T29] usb 6-1: USB disconnect, device number 5
[   98.895879][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.931674][ T7537] bond2: (slave geneve3): making interface the new active one
[   98.936971][ T7537] bond2: (slave geneve3): Enslaving as an active interface with an up link
[   99.283580][   T42] kauditd_printk_skb: 9 callbacks suppressed
[   99.283599][   T42] audit: type=1400 audit(1783269801.902:661): avc:  denied  { create } for  pid=7538 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.294422][   T42] audit: type=1400 audit(1783269801.902:662): avc:  denied  { write } for  pid=7538 comm="syz.2.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.302777][   T42] audit: type=1400 audit(1783269801.912:663): avc:  denied  { map } for  pid=7538 comm="syz.2.453" path="socket:[20605]" dev="sockfs" ino=20605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.313453][   T42] audit: type=1400 audit(1783269801.912:664): avc:  denied  { read accept } for  pid=7538 comm="syz.2.453" path="socket:[20605]" dev="sockfs" ino=20605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.417477][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'.
[   99.471064][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'.
[   99.549671][ T5992] udevd[5992]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   99.701985][   T42] audit: type=1400 audit(1783269802.322:665): avc:  denied  { mount } for  pid=7551 comm="syz.3.456" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   99.711778][ T7552] NILFS (nbd3): device size too small
[   99.805381][   T42] audit: type=1400 audit(1783269802.422:666): avc:  denied  { unmount } for  pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   99.841271][ T7554] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   99.843383][ T7554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   99.846194][ T7554] vhci_hcd vhci_hcd.0: Device attached
[   99.919726][   T42] audit: type=1400 audit(1783269802.532:667): avc:  denied  { write } for  pid=7557 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  100.091034][ T5832] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  100.217070][ T5789] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.220998][ T5789] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.224244][ T5789] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.228337][ T5789] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.267796][   T42] audit: type=1400 audit(1783269802.882:668): avc:  denied  { nlmsg_read } for  pid=7571 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  100.285048][ T7577] netlink: 'syz.1.464': attribute type 10 has an invalid length.
[  100.289850][ T7577] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  100.329137][   T42] audit: type=1401 audit(1783269802.942:669): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  100.355412][ T7584] »»»»»»: renamed from bridge_slave_1 (while UP)
[  100.438590][ T7592] hfsplus: Unknown parameter 'syz1'
[  100.440376][   T42] audit: type=1400 audit(1783269803.052:670): avc:  denied  { mounton } for  pid=7591 comm="syz.1.469" path="/139/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  100.520613][ T7584] Cannot find del_set index 1 as target
[  100.556343][ T7598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=7598 comm=syz.1.470
[  100.724948][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'.
[  100.768568][ T7611] tc action pedit 'at' offset 3 out of bounds
[  100.881196][ T5848] hid_parser_main: 28 callbacks suppressed
[  100.881212][ T5848] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  100.891380][ T5848] hid-generic 0000:0000:0000.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  100.918058][ T7617] fido_id[7617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  101.445169][ T7632] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20003
[  101.614948][ T7632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7632 comm=syz.2.479
[  101.661366][ T7637] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  101.666439][ T7637] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  101.680477][ T7637] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  101.687642][ T7637] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  101.690798][ T7637] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  101.694747][ T7637] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  101.699373][ T7637] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  101.701571][ T7637] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  101.705096][ T7637] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  101.708673][ T7637] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  101.710655][ T7637] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  101.715164][ T7637] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  101.869867][ T7650] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[  101.875135][ T7650] netlink: 756 bytes leftover after parsing attributes in process `syz.0.486'.
[  101.909775][ T7652] loop6: detected capacity change from 0 to 8
[  101.947104][ T7658] binder: BINDER_SET_CONTEXT_MGR already set
[  101.949034][ T7658] binder: 7657:7658 ioctl 4018620d 200000000200 returned -16
[  101.961299][ T7652] loop6: detected capacity change from 8 to 7
[  101.968402][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.022905][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.026933][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.032630][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.035812][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.040170][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.044000][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.048524][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.051601][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.056848][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.060867][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.064802][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.067925][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.070650][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.074422][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.077309][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.080269][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.082907][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  102.086297][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.090148][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  102.102759][ T7652] ldm_validate_partition_table(): Disk read failed.
[  102.111888][ T7652] Dev loop6: unable to read RDB block 0
[  102.122670][ T7652]  loop6: unable to read partition table
[  102.124780][ T7652] loop6: partition table beyond EOD, truncated
[  102.127389][ T7652] loop_reread_partitions: partition scan of loop6 (ÛuêƒGŸ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð
[  102.127389][ T7652] å’�<l·k¨3"	[8­S~) failed (rc=-5)
[  102.221460][ T5846] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  102.371472][ T5846] usb 5-1: Using ep0 maxpacket: 32
[  102.376486][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short
[  102.388908][ T5846] usb 5-1: string descriptor 0 read error: -22
[  102.397330][ T5846] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  102.401177][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.417958][ T5846] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  102.425239][ T5846] dw2102: su3000_power_ctrl: 1, initialized 0
[  102.428560][ T5846] dvb-usb: bulk message failed: -22 (2/0)
[  102.431554][ T7706] netlink: 'syz.2.497': attribute type 12 has an invalid length.
[  102.447405][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  102.458059][ T5846] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  102.462209][ T5846] usb 5-1: media controller created
[  102.464480][ T5846] dvb-usb: bulk message failed: -22 (6/0)
[  102.467066][ T5846] dw2102: i2c transfer failed.
[  102.469275][ T5846] dvb-usb: bulk message failed: -22 (6/0)
[  102.473817][ T5846] dw2102: i2c transfer failed.
[  102.477487][ T5846] dvb-usb: bulk message failed: -22 (6/0)
[  102.480533][ T5846] dw2102: i2c transfer failed.
[  102.483055][ T5846] dvb-usb: bulk message failed: -22 (6/0)
[  102.485530][ T5846] dw2102: i2c transfer failed.
[  102.487532][ T5846] dvb-usb: bulk message failed: -22 (6/0)
[  102.490004][ T5846] dw2102: i2c transfer failed.
[  102.494438][ T5846] dvb-usb: bulk message failed: -22 (6/0)
[  102.496916][ T5846] dw2102: i2c transfer failed.
[  102.498903][ T5846] dvb-usb: MAC address: 02:02:02:02:02:02
[  102.515037][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  102.534692][ T5846] dvb-usb: bulk message failed: -22 (3/0)
[  102.537644][ T5846] dw2102: command 0x0e transfer failed.
[  102.540156][ T5846] dvb-usb: bulk message failed: -22 (3/0)
[  102.542634][ T5846] dw2102: command 0x0e transfer failed.
[  102.858008][ T7555] vhci_hcd: connection reset by peer
[  102.860853][   T12] vhci_hcd vhci_hcd.3: stop threads
[  102.860880][   T12] vhci_hcd vhci_hcd.3: release socket
[  102.861904][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  102.862883][ T5846] dvb-usb: bulk message failed: -22 (3/0)
[  102.864081][ T5846] dw2102: command 0x0e transfer failed.
[  102.864092][ T5846] dvb-usb: bulk message failed: -22 (3/0)
[  102.864099][ T5846] dw2102: command 0x0e transfer failed.
[  102.864104][ T5846] dvb-usb: bulk message failed: -22 (1/0)
[  102.864111][ T5846] dw2102: command 0x51 transfer failed.
[  102.864477][ T7735] dvb-usb: bulk message failed: -22 (3/0)
[  102.864514][ T7735] dw2102: i2c transfer failed.
[  102.898541][ T5846] DVB: Unable to find symbol ds3000_attach()
[  102.898560][ T5846] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  102.960999][ T5846] rc_core: IR keymap rc-su3000 not found
[  102.961018][ T5846] Registered IR keymap rc-empty
[  102.961825][ T5846] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[  102.964603][ T5846] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input13
[  102.969958][ T5846] dvb-usb: schedule remote query interval to 150 msecs.
[  102.969977][ T5846] dw2102: su3000_power_ctrl: 0, initialized 1
[  102.969987][ T5846] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  103.062991][ T1049] usb 5-1: USB disconnect, device number 11
[  103.126362][ T1049] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  103.131998][ T7761] netlink: 'syz.1.505': attribute type 4 has an invalid length.
[  103.140062][ T7760] netlink: 'syz.1.505': attribute type 2 has an invalid length.
[  103.143384][ T7760] netlink: 232 bytes leftover after parsing attributes in process `syz.1.505'.
[  103.380986][ T7774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.385976][ T7773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.544839][ T7784] hugetlbfs: Bad value 'x' for mount option 'size'
[  103.544839][ T7784] 
[  103.663149][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout
[  103.667735][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.669955][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.672435][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.675036][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.677324][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.679934][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.698071][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.701747][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.704150][   T29] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0
[  103.731056][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout
[  103.731367][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout
[  103.731444][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout
[  103.740429][   T29] hid-generic 0005:000B:0009.0005: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1
[  103.891173][   T41] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  103.905347][ T7800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.908300][ T7800] IPv6: NLM_F_CREATE should be set when creating new route
[  104.064916][   T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.068109][   T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  104.071019][   T41] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  104.073777][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.078949][   T41] usb 5-1: config 0 descriptor??
[  104.086899][   T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  104.089134][   T41] dvb-usb: bulk message failed: -22 (3/0)
[  104.093550][   T41] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  104.101410][   T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  104.106241][   T41] usb 5-1: media controller created
[  104.111482][   T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  104.133361][   T41] dvb-usb: bulk message failed: -22 (6/0)
[  104.137987][   T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  104.146881][ T7815] xt_hashlimit: size too large, truncated to 1048576
[  104.161467][   T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input14
[  104.165157][   T41] dvb-usb: schedule remote query interval to 150 msecs.
[  104.165176][   T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  104.293646][ T7788] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  104.297708][ T7788] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  104.306976][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  104.306983][ T7788] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  104.306991][   T42] audit: type=1400 audit(1783269806.922:695): avc:  denied  { firmware_load } for  pid=7787 comm="syz.0.512" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  104.332373][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  104.335448][   T41] dvb-usb: error while querying for an remote control event.
[  104.424739][ T7825] could not allocate digest TFM handle cryptd(blake2b-160)
[  104.491157][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  104.493051][   T41] dvb-usb: error while querying for an remote control event.
[  104.519456][   T42] audit: type=1400 audit(1783269807.132:696): avc:  denied  { name_bind } for  pid=7837 comm="syz.2.525" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  104.663478][ T5819] dvb-usb: bulk message failed: -22 (1/0)
[  104.663519][ T5819] dvb-usb: error while querying for an remote control event.
[  104.788174][ T7848] macvlan0: entered promiscuous mode
[  104.821055][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  104.822952][   T41] dvb-usb: error while querying for an remote control event.
[  104.887421][ T7851] tmpfs: Bad value for 'mpol'
[  104.981750][ T5819] dvb-usb: bulk message failed: -22 (1/0)
[  104.984583][   T42] audit: type=1400 audit(1783269807.602:697): avc:  denied  { write } for  pid=7852 comm="syz.1.529" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  104.985571][ T5819] dvb-usb: error while querying for an remote control event.
[  104.995158][   T42] audit: type=1400 audit(1783269807.602:698): avc:  denied  { open } for  pid=7852 comm="syz.1.529" path="/160/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  105.007016][   T42] audit: type=1400 audit(1783269807.632:699): avc:  denied  { ioctl } for  pid=7852 comm="syz.1.529" path="/160/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  105.085888][   T42] audit: type=1400 audit(1783269807.702:700): avc:  denied  { write } for  pid=7866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  105.144241][   T42] audit: type=1400 audit(1783269807.762:701): avc:  denied  { write } for  pid=7869 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  105.150990][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  105.153069][   T41] dvb-usb: error while querying for an remote control event.
[  105.234565][   T42] audit: type=1400 audit(1783269807.852:702): avc:  denied  { write } for  pid=7871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  105.235778][ T7874] binder: 7873:7874 ioctl c018620c 200000000040 returned -1
[  105.241599][ T5832] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  105.254687][   T42] audit: type=1326 audit(1783269807.872:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.2.532" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80ad9de59 code=0x0
[  105.289248][   T42] audit: type=1400 audit(1783269807.902:704): avc:  denied  { write } for  pid=7876 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  105.291415][ T7878] pim6reg1: entered promiscuous mode
[  105.300135][ T7878] pim6reg1: entered allmulticast mode
[  105.312586][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  105.314951][   T41] dvb-usb: error while querying for an remote control event.
[  105.471125][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  105.473788][   T41] dvb-usb: error while querying for an remote control event.
[  105.509192][ T7894] lo: entered promiscuous mode
[  105.577326][ T7900] syz.2.538 (7900) used obsolete PPPIOCDETACH ioctl
[  105.642822][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  105.644713][   T41] dvb-usb: error while querying for an remote control event.
[  105.737651][ T7907] lo: left promiscuous mode
[  105.743081][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout
[  105.785448][ T7907] bridge0: port 2(»»»»»») entered disabled state
[  105.791481][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.810984][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout
[  105.811474][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout
[  105.815514][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  105.821438][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.825364][   T41] dvb-usb: error while querying for an remote control event.
[  105.837763][ T7916] comedi comedi3: s526: a I/O base address must be specified
[  105.858787][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.864402][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.957228][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.962131][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.965402][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.968283][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.972661][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.975504][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.978291][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.982482][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.991270][   T41] dvb-usb: bulk message failed: -22 (1/0)
[  105.993339][   T41] dvb-usb: error while querying for an remote control event.
[  106.161596][ T5819] dvb-usb: bulk message failed: -22 (1/0)
[  106.164176][ T5819] dvb-usb: error while querying for an remote control event.
[  106.241061][   T41] usb 7-1: new high-speed USB device number 11 using dummy_hcd

syzkaller
syzkaller login: [  106.331261][ T5819] dvb-usb: bulk message failed: -22 (1/0)
[  106.336398][ T5819] dvb-usb: error while querying for an remote control event.
[  106.394603][   T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.398363][   T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.402256][   T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  106.406576][   T41] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.410031][   T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.416745][   T41] usb 7-1: config 0 descriptor??
[  106.500989][ T5819] dvb-usb: bulk message failed: -22 (1/0)
[  106.502985][ T5819] dvb-usb: error while querying for an remote control event.
[  106.622853][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.627371][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.642665][ T5819] usb 5-1: USB disconnect, device number 12
[  106.667319][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  106.817290][ T7954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  106.819398][ T7954] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  106.824272][ T7954] vhci_hcd vhci_hcd.0: Device attached
[  106.837175][   T41] hid_parser_main: 4087 callbacks suppressed
[  106.837188][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.850513][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.855915][ T7959] vhci_hcd: connection closed
[  106.860279][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.860859][   T12] vhci_hcd vhci_hcd.0: stop threads
[  106.864413][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.867296][   T12] vhci_hcd vhci_hcd.0: release socket
[  106.870574][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  106.870796][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.877111][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.879835][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.882831][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.885315][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.887676][   T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  106.896544][   T41] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  107.397408][ T7982] netlink: 'syz.1.561': attribute type 1 has an invalid length.
[  107.410382][ T7982] bond3: option mode: invalid value (7)
[  107.413356][ T7982] bond3 (unregistering): Released all slaves
[  107.461700][ T7990] netlink: 'syz.1.561': attribute type 10 has an invalid length.
[  107.464268][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.561'.
[  107.467343][ T7990] dummy0: entered promiscuous mode
[  107.628390][ T7999] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[  107.631277][ T8000] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  107.644084][ T7999] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.655436][ T7999] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.657842][ T7999] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  107.662500][ T7999] bond3: (slave vti0): Error -95 calling set_mac_address
[  107.713670][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'.
[  107.730178][ T8007] team1: entered promiscuous mode
[  107.732024][ T8007] team1: entered allmulticast mode
[  107.733894][ T8007] 8021q: adding VLAN 0 to HW filter on device team1
[  107.812172][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout
[  107.891392][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout
[  107.901247][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout
[  107.901276][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout
[  108.092316][ T8027] input: syz1 as /devices/virtual/input/input15
[  108.109353][ T8026] IPVS: Scheduler module ip_vs_sip not found
[  108.146064][ T8029] IPVS: Scheduler module ip_vs_sip not found
[  108.262922][ T8038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  108.265392][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  108.269506][ T8038] vhci_hcd vhci_hcd.0: Device attached
[  108.501090][ T5890] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[  108.531105][   T41] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  108.685987][ T8051] netlink: 'syz.1.579': attribute type 1 has an invalid length.
[  108.688943][ T8051] netlink: 232 bytes leftover after parsing attributes in process `syz.1.579'.
[  108.692804][   T41] usb 5-1: Using ep0 maxpacket: 16
[  108.693573][ T8051] netlink: 'syz.1.579': attribute type 1 has an invalid length.
[  108.696248][   T41] usb 5-1: config 0 has no interfaces?
[  108.702078][   T41] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  108.705531][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.708536][   T41] usb 5-1: Product: syz
[  108.710114][   T41] usb 5-1: Manufacturer: syz
[  108.713197][   T41] usb 5-1: SerialNumber: syz
[  108.724624][   T41] usb 5-1: config 0 descriptor??
[  108.839389][ T8057] xt_hashlimit: size too large, truncated to 1048576
[  108.910517][ T8061] netlink: 'syz.1.582': attribute type 11 has an invalid length.
[  108.930207][ T8039] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  108.934665][   T41] usb 5-1: USB disconnect, device number 13
[  108.945418][ T5789] vhci_hcd vhci_hcd.0: stop threads
[  108.950034][ T5789] vhci_hcd vhci_hcd.0: release socket
[  108.955853][ T5789] vhci_hcd vhci_hcd.0: disconnect device
[  108.968338][ T8065] tmpfs: Bad value for 'mpol'
[  108.974887][ T8067] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  109.006150][ T8069] netlink: 236 bytes leftover after parsing attributes in process `syz.1.585'.
[  109.009561][ T8069] netlink: 236 bytes leftover after parsing attributes in process `syz.1.585'.
[  109.013831][ T8069] netlink: 'syz.1.585': attribute type 2 has an invalid length.
[  109.017974][ T8065] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  109.022882][ T8065] overlayfs: failed to look up (tracing) for ino (-66)
[  109.044040][ T8072] overlay: filesystem on ./file0 not supported as upperdir
[  109.102662][   T10] usb 7-1: USB disconnect, device number 11
[  109.125277][ T8082] 8021q: VLANs not supported on tunl0
[  109.127504][ T8082] 8021q: VLANs not supported on tunl0
[  109.130242][ T8082] 8021q: VLANs not supported on tunl0
[  109.132374][ T8082] 8021q: VLANs not supported on tunl0
[  109.134392][ T8082] 8021q: VLANs not supported on tunl0
[  109.136456][ T8082] 8021q: VLANs not supported on tunl0
[  109.139044][ T8082] 8021q: VLANs not supported on tunl0
[  109.141202][ T8082] 8021q: VLANs not supported on tunl0
[  109.143254][ T8082] 8021q: VLANs not supported on tunl0
[  109.145759][ T8082] 8021q: VLANs not supported on tunl0
[  109.149365][ T8082] 8021q: VLANs not supported on tunl0
[  109.152964][ T8082] 8021q: VLANs not supported on tunl0
[  109.155001][ T8082] 8021q: VLANs not supported on tunl0
[  109.157018][ T8082] 8021q: VLANs not supported on tunl0
[  109.158988][ T8082] 8021q: VLANs not supported on tunl0
[  109.161049][ T8082] 8021q: VLANs not supported on tunl0
[  109.163270][ T8082] 8021q: VLANs not supported on tunl0
[  109.165321][ T8082] 8021q: VLANs not supported on tunl0
[  109.167328][ T8082] 8021q: VLANs not supported on tunl0
[  109.169400][ T8082] 8021q: VLANs not supported on tunl0
[  109.171783][ T8082] 8021q: VLANs not supported on tunl0
[  109.173802][ T8082] 8021q: VLANs not supported on tunl0
[  109.176285][ T8082] 8021q: VLANs not supported on tunl0
[  109.178373][ T8082] 8021q: VLANs not supported on tunl0
[  109.180448][ T8082] 8021q: VLANs not supported on tunl0
[  109.204650][ T8082] 8021q: VLANs not supported on tunl0
[  109.207784][ T8082] 8021q: VLANs not supported on tunl0
[  109.210842][ T8082] 8021q: VLANs not supported on tunl0
[  109.215307][ T8082] 8021q: VLANs not supported on tunl0
[  109.218240][ T8082] 8021q: VLANs not supported on tunl0
[  109.221119][ T8082] 8021q: VLANs not supported on tunl0
[  109.224021][ T8082] 8021q: VLANs not supported on tunl0
[  109.226955][ T8082] 8021q: VLANs not supported on tunl0
[  109.229941][ T8082] 8021q: VLANs not supported on tunl0
[  109.233195][ T8082] 8021q: VLANs not supported on tunl0
[  109.235640][ T8082] 8021q: VLANs not supported on tunl0
[  109.237981][ T8082] 8021q: VLANs not supported on tunl0
[  109.240315][ T8082] 8021q: VLANs not supported on tunl0
[  109.242792][ T8082] 8021q: VLANs not supported on tunl0
[  109.245336][ T8082] 8021q: VLANs not supported on tunl0
[  109.247618][ T8082] 8021q: VLANs not supported on tunl0
[  109.249862][ T8082] 8021q: VLANs not supported on tunl0
[  109.256366][ T8082] 8021q: VLANs not supported on tunl0
[  109.258527][ T8082] 8021q: VLANs not supported on tunl0
[  109.261131][ T8082] 8021q: VLANs not supported on tunl0
[  109.265098][ T8082] 8021q: VLANs not supported on tunl0
[  109.268186][ T8082] 8021q: VLANs not supported on tunl0
[  109.271091][ T8082] 8021q: VLANs not supported on tunl0
[  109.273258][ T8082] 8021q: VLANs not supported on tunl0
[  109.277025][ T8082] 8021q: VLANs not supported on tunl0
[  109.279411][ T8082] 8021q: VLANs not supported on tunl0
[  109.281757][ T8082] 8021q: VLANs not supported on tunl0
[  109.283904][ T8082] 8021q: VLANs not supported on tunl0
[  109.285959][ T8082] 8021q: VLANs not supported on tunl0
[  109.288396][ T8082] 8021q: VLANs not supported on tunl0
[  109.294891][ T8082] 8021q: VLANs not supported on tunl0
[  109.297834][ T8082] 8021q: VLANs not supported on tunl0
[  109.300799][ T8082] 8021q: VLANs not supported on tunl0
[  109.303834][ T8082] 8021q: VLANs not supported on tunl0
[  109.306763][ T8082] 8021q: VLANs not supported on tunl0
[  109.309648][ T8082] 8021q: VLANs not supported on tunl0
[  109.313041][ T8082] 8021q: VLANs not supported on tunl0
[  109.316018][ T8082] 8021q: VLANs not supported on tunl0
[  109.318929][ T8082] 8021q: VLANs not supported on tunl0
[  109.321829][ T8082] 8021q: VLANs not supported on tunl0
[  109.358651][   T42] kauditd_printk_skb: 22 callbacks suppressed
[  109.358671][   T42] audit: type=1400 audit(1783269811.972:727): avc:  denied  { connect } for  pid=8087 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  109.372336][   T42] audit: type=1400 audit(1783269811.982:728): avc:  denied  { shutdown } for  pid=8087 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  109.444456][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  109.444566][   T42] audit: type=1400 audit(1783269812.062:729): avc:  denied  { name_bind } for  pid=8093 comm="syz.1.596" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  109.447017][ T8096] netlink: 'syz.3.595': attribute type 21 has an invalid length.
[  109.447042][ T8096] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.447288][ T8094] netlink: 'syz.1.596': attribute type 19 has an invalid length.
[  109.447459][ T8096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.447536][ T8096] IPv6: NLM_F_CREATE should be set when creating new route
[  109.447634][ T8096] IPv6: NLM_F_CREATE should be set when creating new route
[  109.447656][ T8096] IPv6: NLM_F_CREATE should be set when creating new route
[  109.473556][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  109.484887][ T5789] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.484934][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  109.492311][ T8094] netlink: 'syz.1.596': attribute type 19 has an invalid length.
[  109.501832][ T5789] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.507255][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  109.507303][ T5789] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.514888][ T5789] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.578602][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'.
[  109.702576][   T42] audit: type=1400 audit(1783269812.322:730): avc:  denied  { block_suspend } for  pid=8110 comm="syz.0.603" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  109.920449][   T42] audit: type=1400 audit(1783269812.532:731): avc:  denied  { getopt } for  pid=8134 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  109.929510][ T8135] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  109.966020][   T42] audit: type=1401 audit(1783269812.582:732): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  110.012104][ T8146] xt_hashlimit: size too large, truncated to 1048576
[  110.262774][   T42] audit: type=1400 audit(1783269812.882:733): avc:  denied  { mount } for  pid=8157 comm="syz.2.616" name="/" dev="autofs" ino=25613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  112.921128][ T8135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.928235][ T8165] __nla_validate_parse: 4 callbacks suppressed
[  112.928355][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'.
[  113.048117][ T8178] syzkaller0: entered promiscuous mode
[  113.053806][ T8178] syzkaller0: entered allmulticast mode
[  113.071097][ T8178] tipc: Started in network mode
[  113.073972][ T8178] tipc: Node identity 3acf9eca226d, cluster identity 4711
[  113.076649][ T8178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.109465][ T8187] bond2: option xmit_hash_policy: invalid value (6)
[  113.113608][ T8187] bond2 (unregistering): Released all slaves
[  113.149068][ T8176] tipc: Resetting bearer <eth:syzkaller0>
[  113.187836][ T8176] tipc: Disabling bearer <eth:syzkaller0>
[  113.218421][ T8193] bond2: option xmit_hash_policy: invalid value (6)
[  113.223458][ T8193] bond2 (unregistering): Released all slaves
[  113.326959][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  113.329867][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.627'.
[  113.433091][   T42] audit: type=1400 audit(1783269816.052:734): avc:  denied  { read } for  pid=8212 comm="syz.1.630" path="socket:[23926]" dev="sockfs" ino=23926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  113.594064][   T42] audit: type=1400 audit(1783269816.212:735): avc:  denied  { append } for  pid=8226 comm="syz.3.634" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  113.641756][ T5890] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  113.648943][ T8232] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  113.716947][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'.
[  113.719831][ T8241] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  114.425233][ T8227] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  114.430648][ T8227] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  114.433556][ T8227] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  114.436479][ T8227] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  114.492174][ T5740] Bluetooth: hci2: unknown advertising packet type: 0x82
[  114.492234][ T5740] Bluetooth: hci2: Dropping invalid advertising data
[  114.499770][ T5740] Bluetooth: hci2: Malformed LE Event: 0x02
[  114.507976][   T42] audit: type=1400 audit(1783269817.122:736): avc:  denied  { getopt } for  pid=8262 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  114.584961][   T42] audit: type=1400 audit(1783269817.202:737): avc:  denied  { setopt } for  pid=8260 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  115.004292][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'.
[  115.004343][ T8294] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  115.004355][ T8294] nbd: error processing sock list
[  115.044981][ T8296] vxfs: unable to read disk superblock at 1
[  115.046345][ T8296] vxfs: unable to read disk superblock at 8
[  115.046364][ T8296] vxfs: can't find superblock.
[  115.139810][ T8298] netlink: 292 bytes leftover after parsing attributes in process `syz.1.654'.
[  115.287503][   T42] audit: type=1400 audit(1783269817.902:738): avc:  denied  { setopt } for  pid=8309 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  115.329642][   T42] audit: type=1400 audit(1783269817.942:739): avc:  denied  { connect } for  pid=8311 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  115.367477][ T8322] Failed to get privilege flags for destination (handle=0x2:0xffffff01)
[  115.370492][ T8321] Failed to get privilege flags for destination (handle=0x2:0xffffff01)
[  115.390460][ T8317] netlink: 48 bytes leftover after parsing attributes in process `syz.3.659'.
[  115.413691][   T42] audit: type=1400 audit(1783269818.032:740): avc:  denied  { watch_mount } for  pid=8324 comm="syz.1.662" path="/206/file0" dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.453612][ T8333] netlink: 'syz.1.664': attribute type 7 has an invalid length.
[  115.456341][ T8333] netlink: 'syz.1.664': attribute type 13 has an invalid length.
[  115.504346][ T8338] x_tables: duplicate underflow at hook 1
[  115.643511][ T8345] netlink: 'syz.1.667': attribute type 1 has an invalid length.
[  115.668962][ T8345] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.676880][ T8345] bond4: (slave bond5): making interface the new active one
[  115.680615][ T8345] bond4: (slave bond5): Enslaving as an active interface with an up link
[  115.687803][ T8345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.667'.
[  115.692257][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.667'.
[  115.698632][ T8345] 8021q: adding VLAN 0 to HW filter on device bond4
[  115.731044][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout
[  115.790436][   T42] audit: type=1400 audit(1783269818.402:741): avc:  denied  { write } for  pid=8357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.794041][ T8361] binder: 8359:8361 ioctl ae01 0 returned -22
[  115.835024][   T42] audit: type=1400 audit(1783269818.452:742): avc:  denied  { write } for  pid=8365 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.906092][   T42] audit: type=1400 audit(1783269818.522:743): avc:  denied  { write } for  pid=8367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  115.969707][   T42] audit: type=1400 audit(1783269818.582:744): avc:  denied  { write } for  pid=8372 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.033109][   T42] audit: type=1400 audit(1783269818.652:745): avc:  denied  { write } for  pid=8380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.088820][ T8390] netlink: 156 bytes leftover after parsing attributes in process `syz.1.676'.
[  116.128233][ T8395] vxfs: WRONG superblock magic 00000000 at 1
[  116.130412][ T8395] vxfs: WRONG superblock magic 00000000 at 8
[  116.132876][ T8395] vxfs: can't find superblock.
[  116.138443][ T8394] vxfs: WRONG superblock magic 00000000 at 1
[  116.140513][ T8394] vxfs: WRONG superblock magic 00000000 at 8
[  116.142976][ T8394] vxfs: can't find superblock.
[  116.461206][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.461302][ T5752] Bluetooth: hci0: command 0x0c1a tx timeout
[  116.463232][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout
[  116.503001][ T8443] netlink: 'syz.1.686': attribute type 12 has an invalid length.
[  116.565086][ T8455] overlay: Unknown parameter 'dont_measure'
[  116.580700][ T8453] geneve3: entered promiscuous mode
[  116.582843][ T8453] geneve3: entered allmulticast mode
[  116.862031][ T8491] No buffer was provided with the request
[  116.955706][ T8500] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.045339][ T8512] Bluetooth: MGMT ver 1.23
[  117.490818][ T8530] overlayfs: upper fs does not support file handles, falling back to index=off.
[  117.494590][ T8530] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  118.063920][ T8561] __nla_validate_parse: 3 callbacks suppressed
[  118.063933][ T8561] netlink: 80 bytes leftover after parsing attributes in process `syz.0.721'.
[  118.072404][ T8562] netlink: 80 bytes leftover after parsing attributes in process `syz.0.721'.
[  118.201699][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[  118.245213][ T8573] veth1_vlan: entered allmulticast mode
[  118.248249][ T8572] veth1_vlan: left allmulticast mode
[  118.376127][ T8586] usb usb8: usbfs: process 8586 (syz.2.730) did not claim interface 0 before use
[  118.412365][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'.
[  118.442229][ T8595] CIFS: VFS: UNC: path must begin with // or \\
[  118.449661][ T8595] Malformed UNC in devname
[  118.449661][ T8595] 
[  118.452562][ T8595] CIFS: VFS: Malformed UNC in devname
[  118.455220][ T8594] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  118.514318][ T8597] use of bytesused == 0 is deprecated and will be removed in the future,
[  118.518705][ T8597] use the actual size instead.
[  118.531508][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout
[  118.570213][ T8601] overlayfs: workdir and upperdir must be separate subtrees
[  118.619153][ T5832] libceph: connect (1)[c::]:6789 error -101
[  118.620285][ T5832] libceph: mon0 (1)[c::]:6789 connect error
[  118.804356][ T8609] Error: Device magic number does not match.
[  118.845056][ T8612] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  118.892947][ T5848] libceph: connect (1)[c::]:6789 error -101
[  118.896520][ T5848] libceph: mon0 (1)[c::]:6789 connect error
[  118.910138][ T8615] syzkaller0: entered promiscuous mode
[  118.913179][ T8615] syzkaller0: entered allmulticast mode
[  119.009768][ T8617] xt_hashlimit: size too large, truncated to 1048576
[  119.128523][ T8623] netlink: 'syz.3.741': attribute type 23 has an invalid length.
[  119.341843][ T8597] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  119.402676][ T8601] ceph: No mds server is up or the cluster is laggy
[  119.409221][ T8625] binder: 8624:8625 ioctl c0306201 200000000080 returned -22
[  119.414594][ T5848] libceph: connect (1)[c::]:6789 error -101
[  119.416784][ T5848] libceph: mon0 (1)[c::]:6789 connect error
[  119.493715][ T8633] XFS (loop1): SB validate failed with error -5.
[  119.538344][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  119.538356][   T42] audit: type=1400 audit(1783269822.152:770): avc:  denied  { map } for  pid=8642 comm="syz.3.747" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.596254][   T42] audit: type=1400 audit(1783269822.212:771): avc:  denied  { read write } for  pid=8646 comm="syz.1.749" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  119.604567][   T42] audit: type=1400 audit(1783269822.212:772): avc:  denied  { open } for  pid=8646 comm="syz.1.749" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  119.612097][   T42] audit: type=1400 audit(1783269822.212:773): avc:  denied  { ioctl } for  pid=8646 comm="syz.1.749" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  119.619725][   T42] audit: type=1400 audit(1783269822.212:774): avc:  denied  { map } for  pid=8646 comm="syz.1.749" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  119.644028][ T8649] netlink: 'syz.1.750': attribute type 23 has an invalid length.
[  119.875685][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  119.886536][ T8667] loop5: detected capacity change from 0 to 7
[  119.893527][    C0] blk_print_req_error: 16 callbacks suppressed
[  119.893539][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.898641][    C0] buffer_io_error: 15 callbacks suppressed
[  119.898650][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.904734][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.907728][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.910395][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.913285][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.916769][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.919852][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.922571][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.925706][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.928662][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.932608][    C2] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.936079][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.939066][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.941965][ T8667] ldm_validate_partition_table(): Disk read failed.
[  119.945101][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.948050][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.950872][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.953856][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.957000][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.959978][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  119.962780][ T8667] Dev loop5: unable to read RDB block 0
[  119.965115][ T8667]  loop5: unable to read partition table
[  119.967050][ T8667] loop5: partition table beyond EOD, truncated
[  119.968979][ T8667] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  120.872900][   T42] audit: type=1400 audit(1783269823.492:775): avc:  denied  { read } for  pid=8686 comm="syz.2.759" laddr=172.20.20.47 lport=36318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  121.125521][ T8697] fuse: Bad value for 'fd'
[  121.125644][   T42] audit: type=1400 audit(1783269823.742:776): avc:  denied  { mounton } for  pid=8696 comm="syz.1.761" path="/238/file0" dev="tmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  121.222379][   T42] audit: type=1400 audit(1783269823.842:777): avc:  denied  { mount } for  pid=8701 comm="syz.1.763" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  121.326431][ T8704] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  121.329363][   T42] audit: type=1400 audit(1783269823.942:778): avc:  denied  { mounton } for  pid=8701 comm="syz.1.763" path="/240/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  121.693945][ T5890] kernel write not supported for file /audio1 (pid: 5890 comm: kworker/0:6)
[  121.856163][ T8713] vivid-007: =================  START STATUS  =================
[  121.858549][ T8713] vivid-007: Enable Output Cropping: true grabbed
[  121.860757][ T8713] vivid-007: Enable Output Composing: true grabbed
[  121.865189][ T8713] vivid-007: Enable Output Scaler: true grabbed
[  121.867820][ T8713] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  121.870720][ T8713] vivid-007: Transmit Mode: HDMI grabbed
[  121.873194][ T8713] vivid-007: Hotplug Present: 0x00000000
[  121.875429][ T8713] vivid-007: RxSense Present: 0x00000000
[  121.877762][ T8713] vivid-007: EDID Present: 0x00000000
[  121.879821][ T8713] vivid-007: ==================  END STATUS  ==================
[  122.069547][   T42] audit: type=1400 audit(1783269824.682:779): avc:  denied  { unmount } for  pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  122.401375][ T8736] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  122.403939][ T8736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  122.407555][ T8736] vhci_hcd vhci_hcd.0: Device attached
[  122.661125][   T34] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[  122.671055][ T5848] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  122.820596][ T8754] netlink: 'syz.3.779': attribute type 58 has an invalid length.
[  122.829619][ T8754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pid=8754 comm=syz.3.779
[  122.842364][ T5848] usb 5-1: Using ep0 maxpacket: 16
[  122.845441][ T5848] usb 5-1: config 0 has no interfaces?
[  122.849874][ T5848] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  122.854768][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.859628][ T5848] usb 5-1: Product: syz
[  122.861200][ T5848] usb 5-1: Manufacturer: syz
[  122.862696][ T5848] usb 5-1: SerialNumber: syz
[  122.868033][ T5848] usb 5-1: config 0 descriptor??
[  123.058881][ T8766] Invalid argument reading file caps for ./file0
[  123.067637][ T8769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8769 comm=syz.3.784
[  123.072388][ T8737] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  123.083470][ T5818] vhci_hcd vhci_hcd.0: stop threads
[  123.085187][   T41] usb 5-1: USB disconnect, device number 14
[  123.085204][ T5818] vhci_hcd vhci_hcd.0: release socket
[  123.092018][ T5818] vhci_hcd vhci_hcd.0: disconnect device
[  123.110133][ T8775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.785'.
[  123.143974][ T8778] capability: warning: `syz.3.787' uses 32-bit capabilities (legacy support in use)
[  123.351013][   T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  123.501018][   T29] usb 7-1: Using ep0 maxpacket: 8
[  123.504996][   T29] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  123.507736][   T29] usb 7-1: config 0 has no interface number 0
[  123.509572][   T29] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  123.513718][   T29] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  123.517295][   T29] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  123.520624][   T29] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  123.524908][   T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  123.527844][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.533699][   T29] usb 7-1: config 0 descriptor??
[  123.539027][   T29] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  123.791064][ T8807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.874073][ T8817] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  123.876163][ T8817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  123.880716][ T8817] vhci_hcd vhci_hcd.0: Device attached
[  123.897905][ T8807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.024961][ T1049] usb 7-1: USB disconnect, device number 12
[  124.041746][   T29] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  124.042416][ T8807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.046318][ T1049] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  124.120277][ T8807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.123588][   T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  124.131018][ T5832] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[  124.206368][   T29] usb 5-1: config 0 has no interfaces?
[  124.212217][   T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  124.218245][   T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  124.222400][   T29] usb 5-1: Product: syz
[  124.223414][ T5818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.223797][   T29] usb 5-1: Manufacturer: syz
[  124.228707][   T29] usb 5-1: SerialNumber: syz
[  124.230773][ T5789] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.240073][   T29] usb 5-1: config 0 descriptor??
[  124.251833][ T5789] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.270451][ T5789] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.290976][   T41] usb 6-1: Using ep0 maxpacket: 16
[  124.294005][   T41] usb 6-1: config 0 has no interfaces?
[  124.297493][   T41] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  124.300479][   T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.303355][   T41] usb 6-1: Product: syz
[  124.304896][   T41] usb 6-1: Manufacturer: syz
[  124.306476][   T41] usb 6-1: SerialNumber: syz
[  124.309996][   T41] usb 6-1: config 0 descriptor??
[  124.448647][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'.
[  124.459127][   T29] usb 5-1: USB disconnect, device number 15
[  124.494096][ T8834] netlink: 'syz.3.806': attribute type 5 has an invalid length.
[  124.513227][ T8818] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  124.514268][   T41] usb 6-1: USB disconnect, device number 6
[  124.520730][ T5789] vhci_hcd vhci_hcd.1: stop threads
[  124.522574][ T5789] vhci_hcd vhci_hcd.1: release socket
[  124.524403][ T5789] vhci_hcd vhci_hcd.1: disconnect device
[  124.529381][ T8836] netlink: 'syz.3.807': attribute type 61 has an invalid length.
[  124.567557][   T42] kauditd_printk_skb: 20 callbacks suppressed
[  124.567571][   T42] audit: type=1400 audit(1783269827.182:800): avc:  denied  { create } for  pid=8837 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  124.632865][ T8845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.810'.
[  124.660100][   T42] audit: type=1400 audit(1783269827.272:801): avc:  denied  { search } for  pid=8847 comm="syz.2.811" name="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  124.670724][   T42] audit: type=1400 audit(1783269827.272:802): avc:  denied  { read } for  pid=8847 comm="syz.2.811" name="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  124.680814][   T42] audit: type=1400 audit(1783269827.272:803): avc:  denied  { read open } for  pid=8847 comm="syz.2.811" path="/" dev="configfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  125.159572][ T8882] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  125.185067][ T8882] cramfs: wrong magic
[  125.217200][ T8885] netlink: 'syz.1.819': attribute type 1 has an invalid length.
[  125.264376][ T8891] gfs2: error -5 reading superblock
[  125.270952][   T42] audit: type=1400 audit(1783269827.882:804): avc:  denied  { append } for  pid=8889 comm="syz.0.821" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  125.282214][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'.
[  125.330952][ T8898] netlink: 'syz.1.823': attribute type 2 has an invalid length.
[  125.339976][ T8900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  125.342052][ T8900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  125.351090][ T8900] vhci_hcd vhci_hcd.0: Device attached
[  125.408207][   T42] audit: type=1400 audit(1783269828.022:805): avc:  denied  { compute_member } for  pid=8905 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  125.438732][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[  125.444232][ T8907] netlink: 348 bytes leftover after parsing attributes in process `syz.1.826'.
[  125.447960][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[  125.451701][ T8907] netlink: 348 bytes leftover after parsing attributes in process `syz.1.826'.
[  125.455557][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[  125.601618][ T5890] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  125.760965][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  125.764007][ T5890] usb 5-1: config 0 has no interfaces?
[  125.767816][ T5890] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  125.770625][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.773266][ T5890] usb 5-1: Product: syz
[  125.774616][ T5890] usb 5-1: Manufacturer: syz
[  125.775978][ T5890] usb 5-1: SerialNumber: syz
[  125.782731][ T5890] usb 5-1: config 0 descriptor??
[  125.912543][ T8947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.837'.
[  125.970264][   T42] audit: type=1400 audit(1783269828.582:806): avc:  denied  { write } for  pid=8943 comm="syz.1.837" name="/" dev="9p" ino=78905435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  125.989134][ T8901] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  125.990954][   T10] usb 5-1: USB disconnect, device number 16
[  125.992061][ T5789] vhci_hcd vhci_hcd.0: stop threads
[  125.999283][ T5789] vhci_hcd vhci_hcd.0: release socket
[  125.999479][ T8944] syz.1.837 (8944) used greatest stack depth: 19800 bytes left
[  126.002000][ T5789] vhci_hcd vhci_hcd.0: disconnect device
[  126.121009][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  126.251023][ T5890] usb 7-1: device descriptor read/64, error -71
[  126.348139][ T8954] Failed to initialize the IGMP autojoin socket (err -2)
[  126.443083][ T8958] Unknown options in mask b7f2
[  126.491079][ T5890] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  126.631005][ T5890] usb 7-1: device descriptor read/64, error -71
[  126.727592][ T8983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8983 comm=syz.3.847
[  126.731904][ T8983] netlink: 'syz.3.847': attribute type 10 has an invalid length.
[  126.743304][ T8983] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  126.747145][ T8983] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  126.752233][ T5890] usb usb7-port1: attempt power cycle
[  126.752543][ T8982] netlink: 'syz.3.847': attribute type 4 has an invalid length.
[  126.756652][ T8982] netlink: 'syz.3.847': attribute type 10 has an invalid length.
[  126.765760][ T8982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  127.084568][ T8995] netlink: 'syz.3.851': attribute type 15 has an invalid length.
[  127.087250][ T8995] netlink: 'syz.3.851': attribute type 18 has an invalid length.
[  127.091038][ T5890] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  127.119672][ T8998] overlayfs: failed to resolve './bus': -2
[  127.121887][ T5890] usb 7-1: device descriptor read/8, error -71
[  127.167788][   T42] audit: type=1400 audit(1783269829.782:807): avc:  denied  { append } for  pid=9003 comm="syz.3.854" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  127.214434][ T9006] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value
[  127.370969][ T5890] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  127.401456][ T5890] usb 7-1: device descriptor read/8, error -71
[  127.408248][   T42] audit: type=1400 audit(1783269830.022:808): avc:  denied  { ioctl } for  pid=9023 comm="syz.1.859" path="socket:[30061]" dev="sockfs" ino=30061 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  127.431655][ T9026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.521605][ T5890] usb usb7-port1: unable to enumerate USB device
[  127.801157][   T34] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  127.850634][ T9054] sd 0:0:0:0: PR command failed: 1026
[  127.853364][ T9054] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  127.856277][ T9054] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  127.910046][   T42] audit: type=1804 audit(1783269830.522:809): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.871" name="/newroot/187/file0" dev="tmpfs" ino=1011 res=1 errno=0
[  127.951052][ T5741] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  128.104721][ T5741] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  128.121096][ T5741] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  128.125698][ T5741] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  128.128582][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.139548][ T5741] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  128.173550][ T5741] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[  128.227064][ T9076] gfs2: error -5 reading superblock
[  128.237802][ T9076] __nla_validate_parse: 13 callbacks suppressed
[  128.237813][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.877'.
[  128.431162][ T9081] netlink: 'syz.0.879': attribute type 4 has an invalid length.
[  128.433546][ T9081] netlink: 'syz.0.879': attribute type 10 has an invalid length.
[  128.435812][ T9081] netlink: 152 bytes leftover after parsing attributes in process `syz.0.879'.
[  128.438526][ T9081] bond_slave_0: mtu greater than device maximum
[  128.507471][   T29] usb 6-1: USB disconnect, device number 7
[  128.836821][ T5818] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.896943][ T9090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  128.947897][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.955927][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.963736][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.968337][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.977006][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.983574][ T5818] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.083557][ T5818] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.185600][ T5818] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.196644][ T9096] Failed to initialize the IGMP autojoin socket (err -2)
[  129.251038][ T5832] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  129.268315][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.894'.
[  129.328454][ T9127] nvme_fabrics: missing parameter 'transport=%s'
[  129.331573][ T9127] nvme_fabrics: missing parameter 'nqn=%s'
[  129.367104][ T9133] netlink: 'syz.1.896': attribute type 39 has an invalid length.
[  129.473279][ T5818] bridge_slave_1: left allmulticast mode
[  129.476225][ T5818] bridge_slave_1: left promiscuous mode
[  129.480832][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.489754][ T5818] bridge_slave_0: left allmulticast mode
[  129.491976][ T5818] bridge_slave_0: left promiscuous mode
[  129.494146][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.623177][ T5818] gretap0 (unregistering): left promiscuous mode
[  129.671379][   T42] kauditd_printk_skb: 5 callbacks suppressed
[  129.671427][   T42] audit: type=1400 audit(1783269832.292:815): avc:  denied  { lock } for  pid=9136 comm="syz.1.897" path="socket:[30151]" dev="sockfs" ino=30151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  129.693762][ T5818] bond0 (unregistering): left promiscuous mode
[  129.696196][ T5818] bond_slave_0: left promiscuous mode
[  129.698053][ T5818] bond_slave_1: left promiscuous mode
[  129.705884][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.710507][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.714502][ T5818] bond0 (unregistering): Released all slaves
[  129.721290][ T5818] bond1 (unregistering): Released all slaves
[  129.847557][   T42] audit: type=1400 audit(1783269832.462:816): avc:  denied  { write } for  pid=9144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.900439][   T42] audit: type=1400 audit(1783269832.512:817): avc:  denied  { accept } for  pid=9151 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  129.911084][   T42] audit: type=1400 audit(1783269832.522:818): avc:  denied  { write } for  pid=9151 comm="syz.1.898" name="stat" dev="proc" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  129.959892][   T42] audit: type=1400 audit(1783269832.572:819): avc:  denied  { write } for  pid=9156 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  129.963698][ T9160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=9160 comm=syz.1.900
[  130.010609][ T9160] overlayfs: missing 'workdir'
[  130.021705][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.035162][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.037512][ T9096] bridge_slave_0: entered allmulticast mode
[  130.045045][ T9096] bridge_slave_0: entered promiscuous mode
[  130.065911][ T9165] dummy0: entered allmulticast mode
[  130.068253][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.077096][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.079399][ T9096] bridge_slave_1: entered allmulticast mode
[  130.084401][ T9096] bridge_slave_1: entered promiscuous mode
[  130.115050][ T9172] ublk0: read batch cmd buffer failed
[  130.117866][ T9172] ublk0: read batch cmd buffer failed
[  130.174093][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.224459][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.290466][ T5818] hsr_slave_0: left promiscuous mode
[  130.296016][ T5818] hsr_slave_1: left promiscuous mode
[  130.298106][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.303836][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.306865][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.325147][ T5818] veth1_macvtap: left promiscuous mode
[  130.328078][ T5818] veth0_macvtap: left promiscuous mode
[  130.330036][ T5818] veth1_vlan: left promiscuous mode
[  130.331870][ T5818] veth0_vlan: left promiscuous mode
[  130.512425][ T5818] team0 (unregistering): Port device team_slave_1 removed
[  130.523488][ T5818] team0 (unregistering): Port device team_slave_0 removed
[  130.615434][ T9096] team0: Port device team_slave_0 added
[  130.625123][ T9096] team0: Port device team_slave_1 added
[  130.673276][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.676075][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  130.686891][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.693437][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.696179][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  130.707796][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.820805][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'.
[  130.821850][ T9202] tmpfs: Bad value for 'gid'
[  130.824672][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'.
[  130.826446][ T9202] tmpfs: Bad value for 'gid'
[  130.858949][ T9096] hsr_slave_0: entered promiscuous mode
[  130.865160][ T9096] hsr_slave_1: entered promiscuous mode
[  130.890866][ T9198] hsr_slave_1 (unregistering): left promiscuous mode
[  131.013476][ T5752] Bluetooth: hci0: command tx timeout
[  131.155021][ T9224] Failed to initialize the IGMP autojoin socket (err -2)
[  131.304207][ T9096] netdevsim netdevsim4 netdevsim0: renamed from eth6
[  131.313232][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  131.315263][   T42] audit: type=1400 audit(1783269833.932:820): avc:  denied  { write } for  pid=9240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.330738][ T9096] netdevsim netdevsim4 netdevsim1: renamed from eth7
[  131.344107][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  131.351517][ T9096] netdevsim netdevsim4 netdevsim2: renamed from eth8
[  131.356772][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  131.359510][ T9096] netdevsim netdevsim4 netdevsim3: renamed from eth9
[  131.370835][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  131.374460][   T42] audit: type=1400 audit(1783269834.002:821): avc:  denied  { nlmsg_write } for  pid=9245 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  131.398338][   T42] audit: type=1400 audit(1783269834.012:822): avc:  denied  { write } for  pid=9248 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  131.510147][ T9263] vlan2: entered promiscuous mode
[  131.512226][ T9263] bridge0: entered promiscuous mode
[  131.534943][ T9096] 8021q: adding VLAN 0 to HW filter on device team0
[  131.548439][   T42] audit: type=1400 audit(1783269834.162:823): avc:  denied  { write } for  pid=9260 comm="syz.3.921" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  131.549097][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.550487][ T9261] fuseblk: Bad value for 'rootmode'
[  131.559363][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.562494][   T42] audit: type=1400 audit(1783269834.162:824): avc:  denied  { mounton } for  pid=9260 comm="syz.3.921" path="/227/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  131.577249][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.579547][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.672455][ T9271] 9p: Unknown uid 00000000004294967295
[  131.718278][ T9266] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value
[  131.882945][ T9295] netlink: 'syz.2.930': attribute type 8 has an invalid length.
[  132.039550][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.123123][ T9310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.933'.
[  132.248214][ T9096] veth0_vlan: entered promiscuous mode
[  132.251694][ T9096] veth1_vlan: entered promiscuous mode
[  132.280771][ T9096] veth0_macvtap: entered promiscuous mode
[  132.288918][ T9096] veth1_macvtap: entered promiscuous mode
[  132.334333][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.349913][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.359389][ T9096] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  132.368975][ T9096] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  132.379629][ T9096] wireguard: wg0: Could not create IPv4 socket
[  132.387099][ T9096] wireguard: wg1: Could not create IPv4 socket
[  132.392106][ T9096] wireguard: wg2: Could not create IPv4 socket
[  133.263848][ T9359] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.938'.
[  133.361182][ T9366] netlink: 'syz.1.940': attribute type 1 has an invalid length.
[  133.365461][ T9366] netlink: 'syz.1.940': attribute type 2 has an invalid length.
[  133.369199][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'.
[  133.390789][ T9350] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  133.406842][ T9350] can0: slcan on ttyS3.
[  133.412537][ T9371] gtp1: entered promiscuous mode
[  133.414145][ T9371] gtp1: entered allmulticast mode
[  133.521994][ T9350] can0 (unregistered): slcan off ttyS3.
[  133.818697][ T9405] netlink: 'syz.2.948': attribute type 4 has an invalid length.
[  133.859995][ T9410] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  133.862323][ T9410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  133.867609][ T9410] vhci_hcd vhci_hcd.0: Device attached
[  134.101267][ T5839] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  134.106391][ T5819] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  134.258686][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.262612][ T5819] usb 7-1: Using ep0 maxpacket: 16
[  134.266804][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.271591][ T5819] usb 7-1: config 0 has no interfaces?
[  134.273338][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.276683][ T5819] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  134.278194][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.280662][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.280682][ T5819] usb 7-1: Product: syz
[  134.280695][ T5819] usb 7-1: Manufacturer: syz
[  134.280708][ T5819] usb 7-1: SerialNumber: syz
[  134.290557][ T5819] usb 7-1: config 0 descriptor??
[  134.295570][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.500004][ T9411] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2
[  134.500444][ T5819] usb 7-1: USB disconnect, device number 17
[  134.506661][ T5818] vhci_hcd vhci_hcd.2: stop threads
[  134.509271][ T9433] Failed to initialize the IGMP autojoin socket (err -2)
[  134.510974][ T5818] vhci_hcd vhci_hcd.2: release socket
[  134.517976][ T5818] vhci_hcd vhci_hcd.2: disconnect device
[  134.748831][   T42] kauditd_printk_skb: 29 callbacks suppressed
[  134.748845][   T42] audit: type=1400 audit(1783269837.362:854): avc:  denied  { write } for  pid=9460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.820612][   T42] audit: type=1400 audit(1783269837.432:855): avc:  denied  { write } for  pid=9463 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.940272][   T42] audit: type=1400 audit(1783269837.552:856): avc:  denied  { write } for  pid=9466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  134.967382][ T9470] input: syz0 as /devices/virtual/input/input18
[  134.988237][   T42] audit: type=1400 audit(1783269837.602:857): avc:  denied  { write } for  pid=9471 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.049778][   T42] audit: type=1400 audit(1783269837.662:858): avc:  denied  { setopt } for  pid=9473 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  135.133520][   T42] audit: type=1400 audit(1783269837.752:859): avc:  denied  { write } for  pid=9483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.177321][   T42] audit: type=1400 audit(1783269837.792:860): avc:  denied  { ioctl } for  pid=9494 comm="syz.1.959" path="socket:[30654]" dev="sockfs" ino=30654 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1
[  135.184876][   T42] audit: type=1400 audit(1783269837.792:861): avc:  denied  { write } for  pid=9493 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.194693][ T9495] IPv6: Can't replace route, no match found
[  135.202675][ T9495] overlayfs: conflicting options: userxattr,redirect_dir=on
[  135.317136][   T42] audit: type=1400 audit(1783269837.932:862): avc:  denied  { write } for  pid=9500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.323565][ T9510] netlink: 52 bytes leftover after parsing attributes in process `syz.1.963'.
[  135.341224][   T34] usb 7-1: new low-speed USB device number 18 using dummy_hcd
[  135.383271][   T42] audit: type=1400 audit(1783269837.992:863): avc:  denied  { write } for  pid=9512 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  135.395743][ T9516] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  135.398315][ T9516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.404779][ T9516] vhci_hcd vhci_hcd.0: Device attached
[  135.448604][ T9521] netlink: 'syz.1.966': attribute type 1 has an invalid length.
[  135.482448][ T9521] bond6: entered promiscuous mode
[  135.484523][ T9521] 8021q: adding VLAN 0 to HW filter on device bond6
[  135.493714][   T34] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  135.497420][   T34] usb 7-1: config 0 has no interface number 0
[  135.501363][   T34] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  135.505800][   T34] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  135.510007][   T34] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  135.514979][   T34] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  135.518992][   T34] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  135.523758][   T34] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  135.529162][   T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  135.536567][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.542232][   T34] usb 7-1: config 0 descriptor??
[  135.547881][ T9482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  135.553116][ T9482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  135.559490][   T34] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  135.672499][ T5741] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[  135.758897][ T9482] ldusb 7-1:0.55: Write buffer overflow, 64894 bytes dropped
[  135.764810][ T5846] usb 7-1: USB disconnect, device number 18
[  135.770259][ T5846] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  135.880042][ T9433] netdevsim netdevsim4 netdevsim0: renamed from eth6
[  135.890271][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  135.895419][ T9433] netdevsim netdevsim4 netdevsim1: renamed from eth7
[  135.906226][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  135.910024][ T9433] netdevsim netdevsim4 netdevsim2: renamed from eth8
[  135.915800][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  135.919539][ T9433] netdevsim netdevsim4 netdevsim3: renamed from eth9
[  135.927255][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  136.280609][ T9561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.371026][ T5752] Bluetooth: hci0: command tx timeout
[  136.388644][ T5752] Bluetooth: hci2: unexpected cc 0x1804 length: 14 > 1
[  136.391823][ T5752] Bluetooth: hci2: unexpected event for opcode 0x1804
[  136.435355][ T9433] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  136.442795][ T9433] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  136.448846][ T9433] wireguard: wg0: Could not create IPv4 socket
[  136.452802][ T9433] wireguard: wg1: Could not create IPv4 socket
[  136.457537][ T9433] wireguard: wg2: Could not create IPv4 socket
[  136.489469][ T5752] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11
[  136.606945][ T9598] netlink: 'syz.2.975': attribute type 4 has an invalid length.
[  136.652517][ T9605] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  136.816416][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'.
[  137.433800][ T9645] netlink: 176 bytes leftover after parsing attributes in process `syz.2.980'.
[  137.608852][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[  137.735851][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  137.816878][ T9671] ceph: No mds server is up or the cluster is laggy
[  138.064923][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  138.108750][ T9707] kvm: MWAIT instruction emulated as NOP!
[  138.388706][ T9517] vhci_hcd: connection reset by peer
[  138.394522][ T5818] vhci_hcd vhci_hcd.3: stop threads
[  138.397979][ T5818] vhci_hcd vhci_hcd.3: release socket
[  138.407594][ T5818] vhci_hcd vhci_hcd.3: disconnect device
[  138.705800][ T5752] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  138.823796][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  139.085291][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'.
[  139.088197][ T9780] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1004'.
[  139.124012][ T9784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56314 sclass=netlink_route_socket pid=9784 comm=syz.3.1006
[  139.159593][ T9791] bridge2: entered promiscuous mode
[  139.161787][ T9791] bridge2: entered allmulticast mode
[  139.166025][ T9791] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1026
[  139.214474][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'.
[  139.214475][ T5747] Bluetooth: hci3: unexpected event for opcode 0x0c22
[  139.241077][ T5839] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  139.279755][ T9799] netlink: 'syz.3.1008': attribute type 15 has an invalid length.
[  139.807132][ T9825] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  139.840985][   T42] kauditd_printk_skb: 53 callbacks suppressed
[  139.840998][   T42] audit: type=1400 audit(1783269842.452:916): avc:  denied  { write } for  pid=9823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.904686][   T42] audit: type=1400 audit(1783269842.522:917): avc:  denied  { write } for  pid=9830 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.984087][ T9838] netlink: 'syz.1.1014': attribute type 1 has an invalid length.
[  139.986625][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'.
[  139.991889][ T9838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9838 comm=syz.1.1014
[  140.005492][   T42] audit: type=1400 audit(1783269842.622:918): avc:  denied  { write } for  pid=9836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.025759][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.030833][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  140.034111][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  140.039924][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  140.048556][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.088676][   T42] audit: type=1400 audit(1783269842.702:919): avc:  denied  { write } for  pid=9851 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.189180][ T9867] netlink: 'syz.1.1019': attribute type 1 has an invalid length.
[  140.226874][   T42] audit: type=1400 audit(1783269842.842:920): avc:  denied  { write } for  pid=9863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.281804][   T42] audit: type=1400 audit(1783269842.902:921): avc:  denied  { write } for  pid=9880 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.285935][ T9879] bond3: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms
[  140.300193][ T9841] Failed to initialize the IGMP autojoin socket (err -2)
[  140.304325][ T9885] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  140.364271][ T9897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  140.368904][ T9897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  140.372325][ T9897] vhci_hcd vhci_hcd.0: Device attached
[  140.375288][ T9899] vhci_hcd: cannot find a urb of seqnum 2855 max seqnum 2
[  140.380439][ T5818] vhci_hcd vhci_hcd.3: stop threads
[  140.389179][ T5818] vhci_hcd vhci_hcd.3: release socket
[  140.392997][ T5818] vhci_hcd vhci_hcd.3: disconnect device
[  140.393584][   T42] audit: type=1400 audit(1783269843.002:922): avc:  denied  { write } for  pid=9895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.412834][ T9903] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  140.415192][ T9903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  140.418308][ T9903] vhci_hcd vhci_hcd.0: Device attached
[  140.431882][   T42] audit: type=1400 audit(1783269843.052:923): avc:  denied  { write } for  pid=9909 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.547262][   T42] audit: type=1400 audit(1783269843.162:924): avc:  denied  { write } for  pid=9914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.590951][   T42] audit: type=1400 audit(1783269843.202:925): avc:  denied  { write } for  pid=9918 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  140.680993][ T5846] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  140.683320][ T5890] usb 39-1: new low-speed USB device number 4 using vhci_hcd
[  140.763172][ T5741] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  140.830982][ T5846] usb 6-1: Using ep0 maxpacket: 16
[  140.835996][ T5846] usb 6-1: config 0 has no interfaces?
[  140.839509][ T5846] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  140.845434][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.849895][ T5846] usb 6-1: Product: syz
[  140.851110][ T5846] usb 6-1: Manufacturer: syz
[  140.854612][ T5846] usb 6-1: SerialNumber: syz
[  140.858819][ T5846] usb 6-1: config 0 descriptor??
[  141.073421][ T9906] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  141.078558][ T1049] usb 6-1: USB disconnect, device number 8
[  141.084813][ T5818] vhci_hcd vhci_hcd.1: stop threads
[  141.086909][ T5818] vhci_hcd vhci_hcd.1: release socket
[  141.089234][ T5818] vhci_hcd vhci_hcd.1: disconnect device
[  141.729230][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'.
[  141.902941][ T9841] netdevsim netdevsim4 netdevsim0: renamed from eth6
[  141.913980][ T9841] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  141.916873][ T9841] netdevsim netdevsim4 netdevsim1: renamed from eth7
[  141.922856][ T9841] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  141.925563][ T9841] netdevsim netdevsim4 netdevsim2: renamed from eth8
[  141.926330][T10003] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  141.937194][ T9841] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  141.940040][ T9841] netdevsim netdevsim4 netdevsim3: renamed from eth9
[  141.945113][ T9841] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  141.988422][T10009] gfs2: error -5 reading superblock
[  142.109081][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'.
[  142.114202][T10024] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1043'.
[  142.120058][T10024] netlink: 'syz.1.1043': attribute type 3 has an invalid length.
[  142.125843][T10024] netlink: 'syz.1.1043': attribute type 2 has an invalid length.
[  142.130036][T10024] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1043'.
[  142.141390][ T5753] Bluetooth: hci0: command tx timeout
[  142.343257][T10055] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  142.345307][T10055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  142.350628][T10055] vhci_hcd vhci_hcd.0: Device attached
[  142.374382][ T9841] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  142.382638][ T9841] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  142.389821][ T9841] wireguard: wg0: Could not create IPv4 socket
[  142.394975][ T9841] wireguard: wg1: Could not create IPv4 socket
[  142.398542][ T9841] wireguard: wg2: Could not create IPv4 socket
[  142.602958][ T1049] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  142.672517][T10070] 9pnet_fd: p9_fd_create_tcp (10070): problem creating socket
[  142.780265][ T1049] usb 6-1: Using ep0 maxpacket: 16
[  142.795863][ T1049] usb 6-1: config 0 has no interfaces?
[  142.804542][ T1049] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  142.808380][ T1049] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.811812][ T1049] usb 6-1: Product: syz
[  142.813657][ T1049] usb 6-1: Manufacturer: syz
[  142.815708][ T1049] usb 6-1: SerialNumber: syz
[  142.829495][ T1049] usb 6-1: config 0 descriptor??
[  143.034385][T10056] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  143.038151][ T5839] usb 6-1: USB disconnect, device number 9
[  143.046070][   T12] vhci_hcd vhci_hcd.1: stop threads
[  143.047776][   T12] vhci_hcd vhci_hcd.1: release socket
[  143.051582][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  143.359279][T10113] trusted_key: encrypted_key: hex blob is missing
[  143.906155][T10163] fuse: Bad value for 'fd'
[  144.919783][T10227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  144.923800][T10227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  144.927495][T10227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  144.940789][T10199] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1066'.
[  144.940972][T10227] kvm: kvm [10226]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  144.948382][T10227] kvm: kvm [10226]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  144.991642][T10231] bridge0: port 3(macvlan2) entered blocking state
[  144.993955][T10231] bridge0: port 3(macvlan2) entered disabled state
[  144.996171][T10231] macvlan2: entered allmulticast mode
[  145.000840][T10231] macvlan2: left allmulticast mode
[  145.099384][   T42] kauditd_printk_skb: 46 callbacks suppressed
[  145.099404][   T42] audit: type=1400 audit(1783269847.712:972): avc:  denied  { write } for  pid=10232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  145.141933][   T42] audit: type=1400 audit(1783269847.762:973): avc:  denied  { write } for  pid=10235 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  145.401463][T10247] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  145.811137][ T5890] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  145.887939][T10294] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  145.890129][T10294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  145.899662][T10294] vhci_hcd vhci_hcd.0: Device attached
[  146.075373][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.084122][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.087751][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.091655][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.094477][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.162069][ T5741] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  146.328960][ T5741] usb 6-1: Using ep0 maxpacket: 16
[  146.332943][ T5741] usb 6-1: config 0 has no interfaces?
[  146.337151][ T5741] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  146.343993][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.349416][ T5741] usb 6-1: Product: syz
[  146.353756][ T5741] usb 6-1: Manufacturer: syz
[  146.355182][T10304] Failed to initialize the IGMP autojoin socket (err -2)
[  146.357738][ T5741] usb 6-1: SerialNumber: syz
[  146.371384][ T5890] usb 39-1: device descriptor read/64, error -110
[  146.374796][ T5741] usb 6-1: config 0 descriptor??
[  146.580634][T10295] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3
[  146.582974][ T5741] usb 6-1: USB disconnect, device number 10
[  146.593528][   T12] vhci_hcd vhci_hcd.1: stop threads
[  146.596839][   T12] vhci_hcd vhci_hcd.1: release socket
[  146.608338][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  146.631039][ T5890] usb 39-1: new low-speed USB device number 5 using vhci_hcd
[  146.638212][ T5890] usb 39-1: enqueue for inactive port 0
[  146.721018][ T5890] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  146.755278][   T42] audit: type=1326 audit(1783269849.372:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.2.1081" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd80ad9de59 code=0x0
[  146.857523][T10334] dummy0: entered allmulticast mode
[  147.194324][   T42] audit: type=1400 audit(1783269849.812:975): avc:  denied  { write } for  pid=10349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.222493][   T42] audit: type=1804 audit(1783269849.832:976): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1083" name="/newroot/363/cgroup.controllers" dev="tmpfs" ino=1972 res=1 errno=0
[  147.235172][   T42] audit: type=1800 audit(1783269849.832:977): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1083" name="cgroup.controllers" dev="tmpfs" ino=1972 res=0 errno=0
[  147.258106][   T42] audit: type=1400 audit(1783269849.872:978): avc:  denied  { write } for  pid=10357 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.377173][   T42] audit: type=1400 audit(1783269850.002:979): avc:  denied  { read } for  pid=10364 comm="syz.3.1085" name="file1" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  147.377598][T10367] Unsupported ieee802154 address type: 0
[  147.394147][   T42] audit: type=1400 audit(1783269850.002:980): avc:  denied  { watch watch_reads } for  pid=10364 comm="syz.3.1085" path="/262/file1" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  147.426945][   T42] audit: type=1400 audit(1783269850.002:981): avc:  denied  { bind } for  pid=10365 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  147.440420][T10332] dummy0: left allmulticast mode
[  147.453954][T10333] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  147.461096][T10333] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  147.471425][T10333] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  147.473601][T10333] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  147.488841][T10304] netdevsim netdevsim4 netdevsim0: renamed from eth6
[  147.501384][T10304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  147.511672][T10304] netdevsim netdevsim4 netdevsim1: renamed from eth7
[  147.519038][T10304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  147.547075][T10304] netdevsim netdevsim4 netdevsim2: renamed from eth8
[  147.555742][T10304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  147.558688][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'.
[  147.559498][T10304] netdevsim netdevsim4 netdevsim3: renamed from eth9
[  147.569897][T10304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  148.131399][ T5753] Bluetooth: hci0: command tx timeout
[  148.196309][T10304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  148.205995][T10304] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  148.216047][T10304] wireguard: wg0: Could not create IPv4 socket
[  148.220878][T10304] wireguard: wg1: Could not create IPv4 socket
[  148.225937][T10304] wireguard: wg2: Could not create IPv4 socket
[  150.103384][   T42] kauditd_printk_skb: 30 callbacks suppressed
[  150.103399][   T42] audit: type=1400 audit(1783269852.722:1012): avc:  denied  { write } for  pid=10490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.164407][   T42] audit: type=1400 audit(1783269852.782:1013): avc:  denied  { write } for  pid=10493 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.221677][ T5753] Bluetooth: hci0: command tx timeout
[  150.309061][   T42] audit: type=1400 audit(1783269852.922:1014): avc:  denied  { write } for  pid=10496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.359079][   T42] audit: type=1400 audit(1783269852.972:1015): avc:  denied  { write } for  pid=10499 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.484848][   T42] audit: type=1400 audit(1783269853.102:1016): avc:  denied  { write } for  pid=10502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.543125][   T42] audit: type=1400 audit(1783269853.162:1017): avc:  denied  { write } for  pid=10505 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.673293][   T42] audit: type=1400 audit(1783269853.292:1018): avc:  denied  { write } for  pid=10508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.726731][   T42] audit: type=1400 audit(1783269853.342:1019): avc:  denied  { write } for  pid=10511 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.828435][   T42] audit: type=1400 audit(1783269853.442:1020): avc:  denied  { write } for  pid=10514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  150.879584][   T42] audit: type=1400 audit(1783269853.492:1021): avc:  denied  { write } for  pid=10517 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.069259][T10531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'.
[  151.194792][T10544] nbd: must specify an index to disconnect
[  151.232438][ T5992] udevd[5992]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  151.522843][T10565] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1099'.
[  152.291068][ T5753] Bluetooth: hci0: command tx timeout
[  154.385567][ T5753] Bluetooth: hci0: command tx timeout
[  155.884862][   T42] kauditd_printk_skb: 38 callbacks suppressed
[  155.884877][   T42] audit: type=1400 audit(1783269858.502:1060): avc:  denied  { write } for  pid=10718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  155.924490][   T42] audit: type=1400 audit(1783269858.542:1061): avc:  denied  { write } for  pid=10721 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.065487][   T42] audit: type=1400 audit(1783269858.682:1062): avc:  denied  { write } for  pid=10726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.104771][   T42] audit: type=1400 audit(1783269858.722:1063): avc:  denied  { write } for  pid=10729 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.226874][   T42] audit: type=1400 audit(1783269858.842:1064): avc:  denied  { write } for  pid=10731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.267379][   T42] audit: type=1400 audit(1783269858.882:1065): avc:  denied  { write } for  pid=10734 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.347714][   T42] audit: type=1400 audit(1783269858.962:1066): avc:  denied  { write } for  pid=10736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.387798][   T42] audit: type=1400 audit(1783269859.002:1067): avc:  denied  { write } for  pid=10739 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.473011][   T42] audit: type=1400 audit(1783269859.092:1068): avc:  denied  { write } for  pid=10741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.525416][   T42] audit: type=1400 audit(1783269859.142:1069): avc:  denied  { write } for  pid=10744 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  160.903236][   T42] kauditd_printk_skb: 47 callbacks suppressed
[  160.903257][   T42] audit: type=1400 audit(1783269863.522:1117): avc:  denied  { write } for  pid=10906 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.062011][   T42] audit: type=1400 audit(1783269863.682:1118): avc:  denied  { write } for  pid=10920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.127265][   T42] audit: type=1400 audit(1783269863.742:1119): avc:  denied  { write } for  pid=10923 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.242230][   T42] audit: type=1400 audit(1783269863.862:1120): avc:  denied  { write } for  pid=10925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.290802][   T42] audit: type=1400 audit(1783269863.902:1121): avc:  denied  { write } for  pid=10928 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.443631][   T42] audit: type=1400 audit(1783269864.062:1122): avc:  denied  { write } for  pid=10938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.507074][   T42] audit: type=1400 audit(1783269864.122:1123): avc:  denied  { write } for  pid=10941 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.607788][   T42] audit: type=1400 audit(1783269864.222:1124): avc:  denied  { write } for  pid=10943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  161.653937][   T42] audit: type=1400 audit(1783269864.272:1125): avc:  denied  { write } for  pid=10946 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.068308][   T42] audit: type=1400 audit(1783269867.682:1126): avc:  denied  { write } for  pid=10978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.933520][   T42] kauditd_printk_skb: 9 callbacks suppressed
[  165.933533][   T42] audit: type=1400 audit(1783269868.552:1136): avc:  denied  { write } for  pid=11008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.983833][   T42] audit: type=1400 audit(1783269868.602:1137): avc:  denied  { write } for  pid=11011 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.069113][   T42] audit: type=1400 audit(1783269868.682:1138): avc:  denied  { write } for  pid=11014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.110746][   T42] audit: type=1400 audit(1783269868.722:1139): avc:  denied  { write } for  pid=11017 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.237958][   T42] audit: type=1400 audit(1783269868.852:1140): avc:  denied  { write } for  pid=11020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.304223][   T42] audit: type=1400 audit(1783269868.922:1141): avc:  denied  { write } for  pid=11023 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.423177][   T42] audit: type=1400 audit(1783269869.042:1142): avc:  denied  { write } for  pid=11026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.475861][   T42] audit: type=1400 audit(1783269869.092:1143): avc:  denied  { write } for  pid=11029 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.580992][   T42] audit: type=1400 audit(1783269869.192:1144): avc:  denied  { write } for  pid=11033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  166.618930][   T42] audit: type=1400 audit(1783269869.232:1145): avc:  denied  { write } for  pid=11037 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  170.981080][   T42] kauditd_printk_skb: 52 callbacks suppressed
[  170.981100][   T42] audit: type=1400 audit(1783269873.592:1198): avc:  denied  { write } for  pid=11199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.032432][   T42] audit: type=1400 audit(1783269873.652:1199): avc:  denied  { write } for  pid=11202 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.150256][   T42] audit: type=1400 audit(1783269873.762:1200): avc:  denied  { write } for  pid=11205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.201954][   T42] audit: type=1400 audit(1783269873.822:1201): avc:  denied  { write } for  pid=11208 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.340147][   T42] audit: type=1400 audit(1783269873.952:1202): avc:  denied  { write } for  pid=11214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.405322][   T42] audit: type=1400 audit(1783269874.022:1203): avc:  denied  { write } for  pid=11217 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.545629][   T42] audit: type=1400 audit(1783269874.162:1204): avc:  denied  { write } for  pid=11221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  171.586459][   T42] audit: type=1400 audit(1783269874.202:1205): avc:  denied  { write } for  pid=11224 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.694683][   T42] audit: type=1400 audit(1783269878.312:1206): avc:  denied  { write } for  pid=11229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  175.745697][   T42] audit: type=1400 audit(1783269878.362:1207): avc:  denied  { write } for  pid=11232 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.087165][   T42] audit: type=1400 audit(1783269878.702:1208): avc:  denied  { write } for  pid=11235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.136369][   T42] audit: type=1400 audit(1783269878.752:1209): avc:  denied  { write } for  pid=11238 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.264544][   T42] audit: type=1400 audit(1783269878.882:1210): avc:  denied  { write } for  pid=11241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.329589][   T42] audit: type=1400 audit(1783269878.942:1211): avc:  denied  { write } for  pid=11244 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.802335][   T42] audit: type=1400 audit(1783269879.422:1212): avc:  denied  { write } for  pid=11247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.874688][   T42] audit: type=1400 audit(1783269879.492:1213): avc:  denied  { write } for  pid=11250 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  179.023032][T10333] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  179.025000][T10333] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  179.033690][ T5890] ------------[ cut here ]------------
[  179.036030][ T5890] workqueue: cannot queue hci_conn_timeout on wq hci3
[  179.038466][ T5890] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#0: kworker/0:6/5890
[  179.041847][ T5890] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  179.043616][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  179.047674][ T5890] Tainted: [L]=SOFTLOCKUP
[  179.049433][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  179.053530][ T5890] Workqueue: events l2cap_chan_timeout
[  179.055741][ T5890] RIP: 0010:__queue_work+0xd31/0x12b0
[  179.057675][ T5890] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 43 2b 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03
[  179.063865][ T5890] RSP: 0018:ffffc9000472fa28 EFLAGS: 00010046
[  179.065835][ T5890] RAX: dffffc0000000000 RBX: ffff88801bcf5400 RCX: 1ffff11007bb914b
[  179.068353][ T5890] RDX: ffff888035651970 RSI: ffffffff8aafda30 RDI: ffffffff91256240
[  179.071007][ T5890] RBP: ffff88803ddc8a40 R08: 0000000000000005 R09: 0000000000000000
[  179.073538][ T5890] R10: 0000000000200000 R11: 0000000000000000 R12: ffff888035651800
[  179.076046][ T5890] R13: ffff8880267a4a80 R14: ffff88803ddc8a88 R15: ffff88803ddc8a48
[  179.078585][ T5890] FS:  0000000000000000(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000
[  179.081525][ T5890] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.083661][ T5890] CR2: 00007ffde1c314d0 CR3: 000000000e992000 CR4: 0000000000352ef0
[  179.086218][ T5890] Call Trace:
[  179.087343][ T5890]  <TASK>
[  179.088318][ T5890]  ? __cancel_work+0x2b5/0x340
[  179.089888][ T5890]  ? lockdep_hardirqs_on+0x78/0x100
[  179.091753][ T5890]  ? __cancel_work+0x245/0x340
[  179.093329][ T5890]  __queue_delayed_work+0x357/0x450
[  179.095080][ T5890]  queue_delayed_work_on+0x180/0x1e0
[  179.096812][ T5890]  l2cap_chan_del+0x644/0x920
[  179.098390][ T5890]  l2cap_chan_close+0x3b0/0xa70
[  179.100040][ T5890]  ? __pfx_l2cap_chan_close+0x10/0x10
[  179.101827][ T5890]  l2cap_chan_timeout+0x211/0x3f0
[  179.103505][ T5890]  process_one_work+0xa23/0x1940
[  179.105135][ T5890]  ? __pfx_process_one_work+0x10/0x10
[  179.106860][ T5890]  ? __pfx_l2cap_chan_timeout+0x10/0x10
[  179.108712][ T5890]  worker_thread+0x5ef/0xe50
[  179.110249][ T5890]  ? __pfx_worker_thread+0x10/0x10
[  179.112022][ T5890]  ? kthread+0x13a/0x450
[  179.113426][ T5890]  ? __pfx_worker_thread+0x10/0x10
[  179.115147][ T5890]  kthread+0x370/0x450
[  179.116576][ T5890]  ? __pfx_kthread+0x10/0x10
[  179.118087][ T5890]  ret_from_fork+0x72b/0xd50
[  179.119775][ T5890]  ? __pfx_ret_from_fork+0x10/0x10
[  179.121542][ T5890]  ? __switch_to+0x800/0x10f0
[  179.123132][ T5890]  ? __pfx_kthread+0x10/0x10
[  179.124622][ T5890]  ret_from_fork_asm+0x1a/0x30
[  179.126240][ T5890]  </TASK>
[  179.127289][ T5890] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  179.129664][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  179.133189][ T5890] Tainted: [L]=SOFTLOCKUP
[  179.134584][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  179.137791][ T5890] Workqueue: events l2cap_chan_timeout
[  179.139558][ T5890] Call Trace:
[  179.140673][ T5890]  <TASK>
[  179.141662][ T5890]  dump_stack_lvl+0x100/0x190
[  179.143276][ T5890]  vpanic+0x552/0x970
[  179.144675][ T5890]  ? __pfx_vpanic+0x10/0x10
[  179.146172][ T5890]  panic+0xd1/0xe0
[  179.147468][ T5890]  ? __pfx_panic+0x10/0x10
[  179.148926][ T5890]  ? check_panic_on_warn+0x1f/0x90
[  179.150617][ T5890]  check_panic_on_warn.cold+0x19/0x34
[  179.152384][ T5890]  ? __queue_work+0xd2d/0x12b0
[  179.154015][ T5890]  __warn.cold+0x191/0x318
[  179.155529][ T5890]  __report_bug+0x30f/0x440
[  179.156971][ T5890]  ? __queue_work+0xd2d/0x12b0
[  179.158450][ T5890]  ? __pfx___report_bug+0x10/0x10
[  179.160069][ T5890]  ? __pfx_hci_conn_timeout+0x10/0x10
[  179.161833][ T5890]  ? __pfx_debug_object_assert_init+0x10/0x10
[  179.163929][ T5890]  report_bug_entry+0xe1/0x290
[  179.165531][ T5890]  ? __queue_work+0xd31/0x12b0
[  179.167082][ T5890]  handle_bug+0x1cd/0x2a0
[  179.168669][ T5890]  exc_invalid_op+0x17/0x50
[  179.170181][ T5890]  asm_exc_invalid_op+0x1a/0x20
[  179.171850][ T5890] RIP: 0010:__queue_work+0xd31/0x12b0
[  179.173610][ T5890] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 43 2b 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03
[  179.179871][ T5890] RSP: 0018:ffffc9000472fa28 EFLAGS: 00010046
[  179.181890][ T5890] RAX: dffffc0000000000 RBX: ffff88801bcf5400 RCX: 1ffff11007bb914b
[  179.184401][ T5890] RDX: ffff888035651970 RSI: ffffffff8aafda30 RDI: ffffffff91256240
[  179.186917][ T5890] RBP: ffff88803ddc8a40 R08: 0000000000000005 R09: 0000000000000000
[  179.189515][ T5890] R10: 0000000000200000 R11: 0000000000000000 R12: ffff888035651800
[  179.192092][ T5890] R13: ffff8880267a4a80 R14: ffff88803ddc8a88 R15: ffff88803ddc8a48
[  179.194670][ T5890]  ? __pfx_hci_conn_timeout+0x10/0x10
[  179.196426][ T5890]  ? __queue_work+0xcff/0x12b0
[  179.197966][ T5890]  ? __cancel_work+0x2b5/0x340
[  179.199613][ T5890]  ? lockdep_hardirqs_on+0x78/0x100
[  179.201314][ T5890]  ? __cancel_work+0x245/0x340
[  179.202925][ T5890]  __queue_delayed_work+0x357/0x450
[  179.204598][ T5890]  queue_delayed_work_on+0x180/0x1e0
[  179.206312][ T5890]  l2cap_chan_del+0x644/0x920
[  179.207853][ T5890]  l2cap_chan_close+0x3b0/0xa70
[  179.209486][ T5890]  ? __pfx_l2cap_chan_close+0x10/0x10
[  179.211286][ T5890]  l2cap_chan_timeout+0x211/0x3f0
[  179.212951][ T5890]  process_one_work+0xa23/0x1940
[  179.214550][ T5890]  ? __pfx_process_one_work+0x10/0x10
[  179.216343][ T5890]  ? __pfx_l2cap_chan_timeout+0x10/0x10
[  179.218106][ T5890]  worker_thread+0x5ef/0xe50
[  179.219692][ T5890]  ? __pfx_worker_thread+0x10/0x10
[  179.221364][ T5890]  ? kthread+0x13a/0x450
[  179.222812][ T5890]  ? __pfx_worker_thread+0x10/0x10
[  179.224447][ T5890]  kthread+0x370/0x450
[  179.225746][ T5890]  ? __pfx_kthread+0x10/0x10
[  179.227353][ T5890]  ret_from_fork+0x72b/0xd50
[  179.228887][ T5890]  ? __pfx_ret_from_fork+0x10/0x10
[  179.230543][ T5890]  ? __switch_to+0x800/0x10f0
[  179.232128][ T5890]  ? __pfx_kthread+0x10/0x10
[  179.233626][ T5890]  ret_from_fork_asm+0x1a/0x30
[  179.235237][ T5890]  </TASK>
[  179.236989][ T5890] Kernel Offset: disabled
[  179.238436][ T5890] Rebooting in 86400 seconds..