last executing test programs:

16m9.921852184s ago: executing program 2 (id=1979):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r1, 0x2285, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436", 0x28}, {&(0x7f0000000040)}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
unlink(&(0x7f0000000280)='./file1\x00')
syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[], 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_open_dev$loop(0x0, 0xf01c, 0x0)
getegid()
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x800, 0x70bd26, 0x20000000, {0x1d, 0x1, 0x3}, [@CGW_CS_XOR={0x8, 0x5, {0x1, 0x5, 0xfffffffffffffffa, 0x7}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x4}}]}, 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x1, 0x0, 0x0)

16m8.545792273s ago: executing program 2 (id=1982):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x4000, 0x0)
r5 = fsmount(r4, 0x0, 0x18)
openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18)
fsetxattr$trusted_overlay_opaque(r3, 0x0, 0x0, 0x0, 0x3)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0)

16m6.605484764s ago: executing program 2 (id=1987):
r0 = socket(0x2, 0x3, 0x100000001)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020)
setsockopt(r0, 0x9, 0x80005b7a, 0x0, 0x0)

16m4.712173381s ago: executing program 2 (id=1994):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount$overlay(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20a242a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_procfs(r2, &(0x7f0000000000)='stat\x00')
lseek(r6, 0x10000000005, 0x0)

16m3.514782067s ago: executing program 2 (id=1999):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
setrlimit(0xb, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$9p_fd(0x0, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x603, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x28}}, 0x10)

16m2.178895226s ago: executing program 2 (id=2003):
syncfs(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)

16m2.065602367s ago: executing program 32 (id=2003):
syncfs(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)

5m1.306433189s ago: executing program 3 (id=4279):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x244)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

5m0.294967523s ago: executing program 3 (id=4281):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x24400, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000003c0)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)

5m0.041764438s ago: executing program 3 (id=4283):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000d80)=0x200000000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r2 = fanotify_init(0x200, 0x0)
r3 = dup(r2)
fanotify_mark(r2, 0x1, 0x8001053, r3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$msr(r4, &(0x7f0000000180)=""/174, 0xae)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r6 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000640)={0xff81, 0xdc40, 0xffff, 0x3, 0x1a, "9165453bc41fb721"})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r6, 0x3ba0, &(0x7f00000005c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, r7})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f00000003c0)={0x400, 0x1, &(0x7f0000000300)=[r10], 0x0, 0x0, 0x0, 0x0, 0x7})
write$uinput_user_dev(r8, &(0x7f0000000140)={'syz0\x00', {0x2, 0x4, 0x2, 0xfff7}, 0x41, [0x4, 0x6, 0x8, 0xfffff800, 0x2, 0xffffffff, 0x401, 0x5, 0xb4, 0x6, 0x485f, 0x487a, 0xa, 0x5, 0xfffffffe, 0x294, 0x80000001, 0x9d25, 0x5, 0x101, 0x8, 0xa438, 0x1, 0x6, 0x300, 0xff, 0x1ff, 0xe7, 0x14, 0xfff, 0x9, 0x0, 0x4, 0xfffffff9, 0x3, 0xfff, 0x7, 0x6, 0x9, 0x8, 0x8000, 0xaaf3, 0x101, 0x200, 0x7, 0x5, 0x4, 0xc, 0x81, 0x8001, 0x9, 0x7ff, 0x6, 0x7ff, 0x9, 0x0, 0x1, 0x2, 0x10, 0x5, 0x8, 0x3, 0x81, 0x1], [0x800, 0x1, 0x1, 0x7, 0x6, 0x2, 0xecf, 0x2, 0x4, 0xf, 0x7814271d, 0x1, 0xffff, 0x8, 0x5, 0x10001, 0xb, 0x8, 0x5, 0x9, 0x2, 0x6, 0x401, 0x6, 0xffffff19, 0x200, 0x80, 0x6, 0x3, 0xfff, 0xb, 0x10001, 0x7, 0x5, 0x4, 0x78f9, 0x6f5, 0x3, 0x8, 0x99, 0x7ff, 0x6, 0x40, 0x6a0, 0x10, 0x4, 0xffffffff, 0x1000, 0x7fff, 0x1, 0xb, 0x7, 0x5, 0xd86, 0x0, 0x7, 0x8, 0x6, 0x8, 0x8, 0x4, 0x5, 0x1000, 0xa], [0x8, 0x9, 0x9, 0x0, 0x529, 0x5, 0x6, 0x4, 0xfffffffd, 0x9, 0x7, 0x6a, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x1, 0xf, 0x68, 0x69, 0x4, 0x1, 0x4, 0x0, 0x6, 0x7, 0x5bf4, 0x3, 0x800, 0x401, 0xc7f, 0x9292, 0x9d, 0x8, 0x8, 0x7, 0x3, 0x0, 0xc, 0x10100000, 0x800, 0x0, 0x800, 0x3c, 0xffff1dac, 0x2, 0xfffffcfd, 0x80000000, 0x7, 0x3, 0x5, 0x3, 0x18a8, 0x7, 0x7, 0x2000000, 0x4c000000, 0xe63b, 0x9, 0x7, 0x4], [0x6, 0x1194, 0x401, 0x7, 0x6, 0x5, 0xff, 0x800, 0x8, 0xf655, 0x7, 0x7, 0x0, 0x80000000, 0x7, 0xa, 0x8, 0x81, 0x1568, 0x5, 0x3, 0x7fff, 0x7, 0x17e, 0x0, 0x5f5, 0xfffffffa, 0x0, 0x0, 0x2, 0x0, 0xe, 0xfffffff9, 0x4, 0x3, 0x7, 0x0, 0x20000, 0x8b, 0x3, 0xc, 0x2f3, 0x9, 0x9e, 0x8, 0x0, 0x6, 0x5, 0x3, 0xd, 0x9, 0x4, 0x13, 0x6a, 0x1, 0x4, 0x2, 0x3, 0x6, 0x3, 0xffffffe8, 0x200, 0x7, 0x8]}, 0x45c)

4m59.805638977s ago: executing program 3 (id=4285):
io_uring_setup(0x76d, &(0x7f0000000180)={0x0, 0x0, 0x20000, 0x0, 0x36b})
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001b00)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001)
write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0xfe, 0x4}, {0x4, 0x6}, @time=@tick=0xcd}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {0x0, 0xfe}, @control={0x90, 0x5, 0xd8b}}], 0x38)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x29, 0x20200, 0x280000}}, 0x50)

4m59.679502113s ago: executing program 3 (id=4287):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
io_setup(0x2e, &(0x7f0000000100)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}])
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285, 0x0, r4}, &(0x7f00000004c0), &(0x7f0000000280))
close_range(r0, 0xffffffffffffffff, 0x0)

4m55.613851131s ago: executing program 3 (id=4298):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x7, 0x2, 0xf9, 0x3, 0xfe, 0x10, 0x8}, {0x0, 0x80, 0x45, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0x1, 0x0, 0x7d, 0x2}, {0x9, 0x1b, 0x1, 0x19, 0x2, 0xd, 0x8, 0x8, 0xff, 0x6, 0x56, 0x3, 0x100}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc, 0x1, 0x41, 0x0, 0xffffffffffffffff, 0x2004cb, 0xfff, 0xfffffffffffffffe, 0x1, 0x80, 0x100000000002, 0xfffffffffffffffc, 0x0, 0x0, 0x7fffffff], 0x80a0000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000})
io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x10)
unshare(0x2c060000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x4008000)
unshare(0x2c020400)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, 0xffffffffffffffff, 0x952de000)

4m39.542040234s ago: executing program 33 (id=4298):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x7, 0x2, 0xf9, 0x3, 0xfe, 0x10, 0x8}, {0x0, 0x80, 0x45, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0x1, 0x0, 0x7d, 0x2}, {0x9, 0x1b, 0x1, 0x19, 0x2, 0xd, 0x8, 0x8, 0xff, 0x6, 0x56, 0x3, 0x100}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc, 0x1, 0x41, 0x0, 0xffffffffffffffff, 0x2004cb, 0xfff, 0xfffffffffffffffe, 0x1, 0x80, 0x100000000002, 0xfffffffffffffffc, 0x0, 0x0, 0x7fffffff], 0x80a0000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000})
io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x10)
unshare(0x2c060000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x4008000)
unshare(0x2c020400)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, 0xffffffffffffffff, 0x952de000)

13.641807577s ago: executing program 0 (id=5159):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_emit_ethernet(0xfb6, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000600)={0x5, 0x7f, 0x6}, 0xc)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={'veth0_to_batadv\x00', {0x2, 0x4e20, @multicast2}})
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000005c0)={0xfffffffe, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xbff], 0x0})
r5 = syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f00000002c0)}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94", 0xd4}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded89748d5abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x90, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x4000, 0x8, 0x1, 0x4}, {0xfffd, 0x1, 0x80, 0x9}, {0x2, 0x2, 0x7, 0x9}, {0x2, 0x4, 0x90, 0x80}]})

12.588206218s ago: executing program 4 (id=5162):
socket(0x10, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x800)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r1, &(0x7f0000000200)='./file0\x00')
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0x800, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0xd, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0xfd, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x4c}}, 0x40004)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x104, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xd4, 0x2, [@TCA_FLOW_EMATCHES={0xd0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x2}, {0x6, 0x4, 0x2, "2345aef9"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x3d}, {0x3, 0x5, 0x1, "6cfd4cda6b"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x51}, {0x80000000, 0xc153, 0x17b, 0x5}}}, @TCF_EM_CONTAINER={0x7c, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x4}, "b7ac328e3a81369ab0e6982785075e1b59e714e7588e91df0daf39f89c9347c8ba6a3c03a6fddb8b1fb176aed89e77a18c8204993bb03da1469d4c0281500c640a1c9acba275c8dc05347b3253eff0603a854c8fa40871698745114151c6cb1ddc310e7aa19d1682e265c55ef91b6adb"}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000100000000000000000000000000000000000000000000000f37bc0f7ef5b071980d9401c5536f5dfcbbb51ec8755db1d69053b24ada00f8f4ee522b4d24bb8be7b5190898ba36115a227657ca7f1711677eb22b84623a4d631b30ceddcc9603a775eb2e9222339dcd815f44e554e520812c9b9a5e8dff62b5723a0a35b92429659fdb0f6a149b04b01a25ee9a2dc308d"], 0x48)
iopl(0x24)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r7, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x299, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) (fail_nth: 2)

11.50991029s ago: executing program 4 (id=5168):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20040000})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

11.421920135s ago: executing program 5 (id=5169):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x1f000000, 0x0, 0x4000}, 0x20004000)

10.431923355s ago: executing program 5 (id=5171):
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xfffd, 0x7, @mcast2, 0x9}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000008c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xc})
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f000001b000)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x40400c4}, 0x44050)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2a, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0xc, 0x4, {0xffffffffffffffff, @usage=0xfffffffffffffffb, 0x0, 0xf, 0x1, 0x65, 0x1d16, 0x3, 0x1, @usage=0x3, 0xffff, 0x592, [0x100000001, 0xe, 0x3, 0x0, 0x6, 0xa7]}, {0x2, @usage=0x80000001, 0x0, 0x34, 0x5f, 0x6, 0x6c, 0xfc46, 0x20, @usage=0x3, 0xb4, 0x0, [0x7, 0x5, 0x3, 0x6, 0x9, 0x6]}, {0x2, @struct={0x1, 0x104}, 0x0, 0x6, 0x40, 0x9, 0xb8, 0x8, 0x8, @usage=0x2, 0x3ff, 0x68a7bd2, [0x5, 0x7, 0x10, 0x7, 0x2, 0x5]}, {0x1, 0x2, 0x6}})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)

10.34654819s ago: executing program 4 (id=5172):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f00000002c0)='autogroup\x00')
pread64(r3, &(0x7f0000001240)=""/102387, 0x18ff3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000100)=0x3ff)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x20004000000000, 0x2, 0x0, 0x5}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r4 = accept(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0xff, 0x1}, 0x1e)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x2, 0xff, 0x0, 0x4}, 0x20)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, r3, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x46, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0400, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x5, {0x80, 0x9, 0xf, 0x4}})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0)

8.812872594s ago: executing program 5 (id=5174):
socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c)
listen(r0, 0x5)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_io_uring_complete(0x0)
connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="003202905dfd", 'netpci0\x00'}}, 0x1e)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)

8.577156526s ago: executing program 0 (id=5176):
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x6}, 0x2)
syz_usb_connect(0x1, 0x24, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, &(0x7f0000000680), &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x9, 0xf, 0xaf85, 0xd4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000480)=[{0x8, 0x2, 0xe, 0x4}, {0x1, 0x2, 0x5, 0x1}, {0x5, 0x1, 0xc, 0x9}, {0x0, 0x3, 0xe, 0xc}, {0x5, 0x3, 0x18, 0x3}, {0x3, 0x3, 0x5, 0xb}, {0x5, 0x3, 0x4, 0x2}, {0x4, 0x3, 0xb, 0x1}], 0x10, 0x1000}, 0x94)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)="c240723b", 0x2, 0x0, 0x8}, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
recvmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
prlimit64(0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$ppp(0xffffffffffffffff, &(0x7f0000000840)="d1065abe07d62f1421f41674694538f8b75df181f2f4d35399f1852451ecc4995976ade17806615d89bae7337442606c71df2aa081d944057ad4902ae5162836abfd691f2f8c62f76d3e50f3ed7806d9eedfe3cd4eec1dafda9a274d0db87714c9dc71f0eb6112e05707346a4c6843f71acaae34fb5a028349fd2736f430af18d91a868a847e87530f64db8e826dae0d492dcb2b2e036ff4ac76d334bb1cebbe564956bc65592ae7075aba387992fa83b1cff6fed53098b2e923e69c158e4b3204555f1f41995815daef0329f9f3458d04967828faeaf66b4e75ff9cbe7bc111c18a0dcde4cefbad30", 0xe9)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
syz_emit_ethernet(0xda, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000001300)=ANY=[@ANYBLOB='\a'], 0x1)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007"], 0x20}}, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

7.367403909s ago: executing program 5 (id=5179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x9, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
chdir(0x0)
fchdir(0xffffffffffffffff)
syz_usb_connect(0x0, 0x4f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904540003ccc8ac00090504041806d8030409044299d83e091515090505022000836282090512002000000a0c0705e6ea3588e4be9aff8bfe131120"], 0x0)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$netlink(0x10, 0x3, 0xb)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000540)="cab0f75fa5c0efcabc64a6b79350f16057786d11d521122d5a7d2463f9a928ca0de05e166903eacab3252aa8c4fc3cbda33ea200000000000088153f10a033ae39e7f7cba2a2d33fe2c7ad9ad2e87a92f5f959b259c37456", 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x1)
fcntl$notify(r5, 0x402, 0x8000003d)
read$msr(r4, &(0x7f0000019680)=""/102391, 0x19010)
add_key(0x0, &(0x7f0000000080), &(0x7f00000003c0)="e7f7944f92a77707c3261874bf6552ebadc63f1fd481807ec6e1d5bc0a16d8679f8223bb3906dc052eb7583d5e7d261919351787c341313357d235bd8ecc2b0038b458b40c0d75ca17ba41c181ca51d689bb26785db252f163dbf1853aedb84a527f000000", 0x65, 0xfffffffffffffffe)
socket$netlink(0x10, 0x3, 0x7)
bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xfffffe30)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

5.789538923s ago: executing program 1 (id=5183):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_io_uring_setup(0x9ea, &(0x7f0000000540)={0x0, 0x7734, 0x8, 0x1, 0x34f}, &(0x7f0000000600)=<r2=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

4.683646562s ago: executing program 1 (id=5184):
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xfffd, 0x7, @mcast2, 0x9}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000008c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xc})
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f000001b000)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x40400c4}, 0x44050)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2a, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0xc, 0x4, {0xffffffffffffffff, @usage=0xfffffffffffffffb, 0x0, 0xf, 0x1, 0x65, 0x1d16, 0x3, 0x1, @usage=0x3, 0xffff, 0x592, [0x100000001, 0xe, 0x3, 0x0, 0x6, 0xa7]}, {0x2, @usage=0x80000001, 0x0, 0x34, 0x5f, 0x6, 0x6c, 0xfc46, 0x20, @usage=0x3, 0xb4, 0x0, [0x7, 0x5, 0x3, 0x6, 0x9, 0x6]}, {0x2, @struct={0x1, 0x104}, 0x0, 0x6, 0x40, 0x9, 0xb8, 0x8, 0x8, @usage=0x2, 0x3ff, 0x68a7bd2, [0x5, 0x7, 0x10, 0x7, 0x2, 0x5]}, {0x1, 0x2, 0x6}})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)

3.956806609s ago: executing program 6 (id=5186):
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
msgget(0x3, 0x710)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0xfff, @local, 0x8}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x30}}, 0x2)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x34, 0x1, 0x70bd2d, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)

3.8820502s ago: executing program 4 (id=5187):
syz_init_net_socket$ax25(0x3, 0x2, 0xce)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="050000"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

3.538258216s ago: executing program 0 (id=5188):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0}, 0x0)
r2 = getpgrp(r1)
syz_open_procfs(r2, &(0x7f0000000180)='totmaps\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r5 = socket$inet(0x2, 0x3, 0x9)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r6, 0x0, 0x0, 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}, 0xfbffff7f}], 0x17fd147c801ae9af, 0xff00)

3.136230574s ago: executing program 1 (id=5189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)

2.361967203s ago: executing program 5 (id=5190):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r2 = inotify_init()
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8)
fcntl$notify(r3, 0x402, 0x8000003b)
inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x420008c9)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.352985898s ago: executing program 6 (id=5191):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a00"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001540)={'ip6tnl0\x00', &(0x7f0000001800)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0xff, 0x5, 0x2, 0x3, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x1e9, 0x1}})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
close(r5)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
close(r4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000e0300000000000000000000000000000d000000"], &(0x7f0000000480)=""/167, 0x43, 0xa7, 0x1}, 0x28)
pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func={0xa, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x30, 0x0, 0x2e, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000140)=""/203, 0x2e, 0xcb, 0x0, 0x2, 0x10000}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x1e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000058260000", @ANYRES32=0x1, @ANYBLOB="000000000700000018160000", @ANYRES32=0x1, @ANYBLOB="0000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000850000000b00000018600000070000000000000000000100bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x72, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0xb, 0x8}, {0x0, 0x5, 0x8, 0xb}, {0x2, 0x5, 0xf, 0x1}, {0x0, 0x3, 0xe}], 0x10, 0x5}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}})
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50)
r10 = signalfd(r0, &(0x7f00000005c0)={[0x1]}, 0x8)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00'}, 0x18)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x78}, [@jmp={0x5, 0x1, 0xc, 0x3, 0x2, 0x18, 0xfffffffffffffff0}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}]}, &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x30, &(0x7f00000000c0)=""/48, 0x41000, 0x4, '\x00', 0x0, @fallback=0x51, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x9, 0x3, 0x1be}, 0x10, 0x0, r7, 0x2, &(0x7f0000000740)=[r9, r10, 0xffffffffffffffff, r11, r12, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x3, 0xc, 0x2}, {0x1, 0x3, 0xc, 0x9}], 0x10, 0x9}, 0x94)

2.279868676s ago: executing program 1 (id=5192):
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0)
r4 = dup(r3)
fallocate(r4, 0x10, 0x0, 0x1062200)

2.275814204s ago: executing program 4 (id=5193):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20040000})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

1.993984406s ago: executing program 5 (id=5194):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4, 0x0, 0x1})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000011c0)={0xffffffff, 0x1, 0x2, {0x1, @win={{0x6, 0x200, 0x200, 0xfffffffa}, 0x9, 0x62e82618, 0x0, 0x5, 0x0, 0x76}}, 0x2})
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r5, 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x8)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, 0x0, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x100000000000000)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000ac0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x9, @loopback}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000700)="d838964de419f4ed5c921244876ce906c8f8040161e2a8f884d74f7dd61141fc715d3a9a8bdeee4bc64f4bd3c9942f0145aa9e781a5dd61547b721385608d4733d2472980096331fd553b7c17e7557ee4bc9d4f520ca9de5ef3cad496fb6a06accbd8910224806e3575b3e636e4296d7623fc9680c1aa643fa22f583e308db9a7b399b8dd7d3ee1dda6c890a76d4c0090bb9037bfe83937a987f99924901497ca921110b3b247272a17741f19f4a2dc3bb375a00d168a953aea0181a95d98e4a1c1c8e5b14e2f10ec4790dff5b4edc5561e589853ec0", 0xd6}, {&(0x7f0000000800)="5fc1b77e3dbf2c484273c4b89a713960be2ad3376436b24de7e5cfc3778c7cbb77b5ca268b0c52a291390a2c5f99dc9b8ca9caf4dfe774aa6f8d315a0020727bb4d8ca2259c2e21b4080c8c33b9903e6339f243a32180c0044f1f1fe20e03089964a57545cab99ffaeedfe3f4a97e02c42536d7e54fafc326341f0d52fb3eca10d0250c1c77cbde386ae5b3f0a6e8f140139c9cc0e5d1cad745e54c3649cb1aa7681e54b355cf1d18a4e69fd35c4998014ea3d7ead36ea86c69e16ff6bf0147463fed8a76ec46498ea1035f74f796d2e920d45c537e0b60a956429eaddabd415", 0xe0}, {&(0x7f0000000900)="6083a52901b97af581e7824998676e4526ebdd14b5808132bb6cb3ddd7b81913e1fc0e8cd81a3132a0996fbd1467e2d476c038ee6d4464df06ff8c1d0226f9f8c274220f56a69dcf66a513753e0a670a051a91c82fa941a7ac6ecd14d60e808a609a4edb427c8082ff622f3ee5bdb2bbbbd7b9368a820095eb171972c49867a2941b5607839eb58872141a1b5148b0ea82db", 0x92}], 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="c0000000000000000401000008000000262bd334c9b02509c91c0f7eb3518abdaace44b6e787103ee803f366637f10da0d0bce79e80fea32b2b06200f5494a7a7f000000700268c6d34b0b50a14d41455321740ef85e9fad328bc6682b257d4eff5c102d6ddf30ff943568aadbdc7cfb65a1ac7394a68672f1c10330533c9ed5f65a0768cb21860f272b7c6c8dea524e0286584e510e5805a98a8d4a60c38fe8a2051a45dc9630b63413083dadf92cd5c03de20f7f4f9f0379722e95431700009d7d918ee40ddcd93df0afc0cb01bf43a654109da77430f8"], 0xc0}, 0x24000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a03"], 0x68}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x30, 0x0, @in={0x1b, 0x4e24, @rand_addr=0x64010102}, @ib={0x1b, 0x0, 0x5372, {}, 0x0, 0x10000, 0x4}}}, 0x118)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb1}, @generic={0x40, 0xd, 0x2, 0xa, 0x9}, @ldst={0x1, 0x3, 0x0, 0x6, 0xb, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x8, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x40ba, 0x80, &(0x7f00000000c0)=""/128, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='ib_mad_recv_done_handler\x00', r10}, 0x18)

1.636252677s ago: executing program 4 (id=5195):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffcf8, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r3, 0x0, 0x2)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x504, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)
keyctl$read(0x20, r2, 0x0, 0x0)
sendmsg$AUDIT_USER(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0xd8, 0x3ed, 0x400, 0x70bd29, 0x25dfdc00, "6ce0d8376d7e11715ddd3f519a477fd94bfbb4d1ddf9c7dc0bc1d90ead9a729034aa138d63a26d0684127f5cd04747d0ba2e3754feb358b1cdac4ec894833aa88d798462accf648052d85792a309d95693c58988ddeb9db309f3bca173b5593a118e97fddf572009e976a1b7fad5b7d35b261d2a9652fc0ca322d80edff93df62c99c2293f006f8122738a4f1057195be1b8fbd0e25f6b0056a6ac00bb14ff56fba2fa39edef257afbcbc5f131bddecaf868dae373164f1c5919c100"/198, ["", "", "", "", "", "", "", ""]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000850}, 0x404c000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmmsg$inet6(r9, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
socket(0x10, 0x803, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050)

1.392344083s ago: executing program 6 (id=5196):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES32=0x0, @ANYBLOB="03000000010000001800128008000100677265000c000280080006000a"], 0x38}}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc)
r3 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x8)
fchdir(r4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000040)=@bcast)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000180)={0x0, &(0x7f0000000380)})
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r6 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r6, r6}, &(0x7f0000000480)=""/83, 0x53, &(0x7f0000000400)={&(0x7f00000002c0)={'michael_mic\x00'}})

1.300243292s ago: executing program 0 (id=5197):
syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0xa5e9, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
removexattr(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa})
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
r6 = getpid()
sched_setscheduler(r6, 0x2, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pidfd_send_signal(r7, 0x0, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x2007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000022c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000140)={&(0x7f0000002300)={0x14, r8, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010)
sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

1.297391266s ago: executing program 1 (id=5198):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18)
dup3(0xffffffffffffffff, r1, 0x80000)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000006240)={0x33, 0x6, 0x0, {0x4, 0x5, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
mount(0x0, 0x0, 0x0, 0x208000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = memfd_create(0x0, 0x9)
fcntl$addseals(r3, 0x409, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6d0000000000000000915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x44)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000180))

548.140919ms ago: executing program 0 (id=5199):
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xfffd, 0x7, @mcast2, 0x9}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000008c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xc})
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f000001b000)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x40400c4}, 0x44050)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2a, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c00)={0xc, 0x4, {0xffffffffffffffff, @usage=0xfffffffffffffffb, 0x0, 0xf, 0x1, 0x65, 0x1d16, 0x3, 0x1, @usage=0x3, 0xffff, 0x592, [0x100000001, 0xe, 0x3, 0x0, 0x6, 0xa7]}, {0x2, @usage=0x80000001, 0x0, 0x34, 0x5f, 0x6, 0x6c, 0xfc46, 0x20, @usage=0x3, 0xb4, 0x0, [0x7, 0x5, 0x3, 0x6, 0x9, 0x6]}, {0x2, @struct={0x1, 0x104}, 0x0, 0x6, 0x40, 0x9, 0xb8, 0x8, 0x8, @usage=0x2, 0x3ff, 0x68a7bd2, [0x5, 0x7, 0x10, 0x7, 0x2, 0x5]}, {0x1, 0x2, 0x6}})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)

263.057241ms ago: executing program 1 (id=5200):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x280)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xef, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00')
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@delchain={0x24, 0x5f, 0xf31, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0xfff1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r7, r5, 0x4, r5}, 0x10)
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

262.643284ms ago: executing program 0 (id=5201):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000170000b7030000100000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$describe(0x6, r4, &(0x7f00000003c0)=""/20, 0x14)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000200)={<r7=>r0, 0x7, 0x9, 0xffffffffffffffff})
getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000280)={@remote}, &(0x7f00000002c0)=0x14)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SG_BLKSECTGET(r7, 0x1267, &(0x7f0000000300))
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={<r8=>0x0, 0x2c, "3788174a43a51c59b65b283ff861b019e1d77f82b1d3349ce36b21eb5bd51e059083a16eca3f3d8bd880ff24"}, &(0x7f0000000100)=0x34)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r8, @in={{0x2, 0x4e21, @empty}}, 0x1, 0x6, 0x9, 0x1000, 0x22, 0x943, 0xff}, 0x9c)

245.467005ms ago: executing program 6 (id=5202):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280), &(0x7f0000000040)=0x4)
sendmmsg$inet_sctp(r0, &(0x7f0000000240), 0x0, 0x8850)

761.829µs ago: executing program 6 (id=5203):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)

0s ago: executing program 6 (id=5204):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000ee1696c89c574fdff80d5844"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1e}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r5, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r5, &(0x7f000000e280), 0x58a, 0x42, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r6}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

kernel console output (not intermixed with test programs):

d map_write } for  pid=24178 comm="syz.0.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1554.680066][T24189] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1554.811758][   T30] audit: type=1400 audit(1755097033.938:23043): avc:  denied  { prog_load } for  pid=24178 comm="syz.0.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1554.932081][ T5858] Bluetooth: hci3: connection err: -111
[ 1555.706202][T24201] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1556.795650][T24213] kernel read not supported for file /cpuacct.usage_percpu (pid: 24213 comm: syz.0.4803)
[ 1557.352749][T24221] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1557.359302][T24221] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1557.367231][T24221] vhci_hcd vhci_hcd.0: Device attached
[ 1557.632612][T24223] vhci_hcd: connection closed
[ 1557.634375][ T1149] vhci_hcd: stop threads
[ 1557.655657][ T1149] vhci_hcd: release socket
[ 1557.661545][ T1149] vhci_hcd: disconnect device
[ 1557.999727][    C1] vcan0: j1939_tp_rxtimer: 0xffff888077b0e800: rx timeout, send abort
[ 1558.504195][   T30] kauditd_printk_skb: 216 callbacks suppressed
[ 1558.504210][   T30] audit: type=1400 audit(1755097038.868:23260): avc:  denied  { write } for  pid=24231 comm="syz.6.4809" name="udp6" dev="proc" ino=4026533317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1558.539999][T24232] openvswitch: netlink: Message has 8 unknown bytes.
[ 1558.570624][   T30] audit: type=1400 audit(1755097038.905:23261): avc:  denied  { create } for  pid=24230 comm="syz.4.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1558.621633][T24233] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1558.646338][   T30] audit: type=1400 audit(1755097038.905:23262): avc:  denied  { write } for  pid=24230 comm="syz.4.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1558.905092][   T30] audit: type=1400 audit(1755097038.933:23263): avc:  denied  { mounton } for  pid=24230 comm="syz.4.4808" path="/389/file0" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1559.932027][   T30] audit: type=1400 audit(1755097038.933:23264): avc:  denied  { mount } for  pid=24230 comm="syz.4.4808" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1559.954370][   T30] audit: type=1400 audit(1755097038.933:23265): avc:  denied  { recv } for  pid=5830 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1560.002062][T24243] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1560.613449][   T30] audit: type=1400 audit(1755097038.933:23266): avc:  denied  { unmount } for  pid=24230 comm="syz.4.4808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1560.633684][   T30] audit: type=1400 audit(1755097038.933:23267): avc:  denied  { recv } for  pid=24160 comm="syz.5.4790" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1560.665977][T24249] netlink: 'syz.5.4813': attribute type 10 has an invalid length.
[ 1560.676323][   T30] audit: type=1400 audit(1755097038.961:23268): avc:  denied  { read write } for  pid=18458 comm="syz-executor" name="loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1560.737965][T24253] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1561.085261][T24258] netlink: zone id is out of range
[ 1561.125786][T24258] netlink: del zone limit has 4 unknown bytes
[ 1561.167105][T24262] openvswitch: netlink: Message has 8 unknown bytes.
[ 1563.247998][T24294] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1563.254545][T24294] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1563.278673][T24294] vhci_hcd vhci_hcd.0: Device attached
[ 1563.624296][ T5950] vhci_hcd: vhci_device speed not set
[ 1563.650895][T24298] vhci_hcd: connection closed
[ 1563.657050][T20109] vhci_hcd: stop threads
[ 1563.680095][T20109] vhci_hcd: release socket
[ 1563.692259][ T5950] usb 35-1: new full-speed USB device number 16 using vhci_hcd
[ 1563.778987][T24309] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1564.107099][   T30] kauditd_printk_skb: 245 callbacks suppressed
[ 1564.107119][   T30] audit: type=1400 audit(1755097043.788:23509): avc:  denied  { read } for  pid=24304 comm="syz.5.4825" dev="nsfs" ino=4026533562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1564.118475][T20109] vhci_hcd: disconnect device
[ 1564.170550][   T30] audit: type=1400 audit(1755097043.788:23510): avc:  denied  { open } for  pid=24304 comm="syz.5.4825" path="net:[4026533562]" dev="nsfs" ino=4026533562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1564.200935][   T30] audit: type=1400 audit(1755097043.788:23511): avc:  denied  { create } for  pid=24304 comm="syz.5.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1564.228274][   T30] audit: type=1400 audit(1755097043.797:23512): avc:  denied  { ioctl } for  pid=24304 comm="syz.5.4825" path="socket:[99508]" dev="sockfs" ino=99508 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1564.276946][   T30] audit: type=1400 audit(1755097043.882:23513): avc:  denied  { create } for  pid=24304 comm="syz.5.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1564.298847][   T30] audit: type=1400 audit(1755097043.882:23514): avc:  denied  { setopt } for  pid=24304 comm="syz.5.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1564.404963][   T30] audit: type=1400 audit(1755097043.900:23515): avc:  denied  { read } for  pid=24304 comm="syz.5.4825" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1564.477919][   T30] audit: type=1400 audit(1755097043.900:23516): avc:  denied  { read open } for  pid=24304 comm="syz.5.4825" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1564.628022][   T30] audit: type=1400 audit(1755097043.910:23517): avc:  denied  { ioctl } for  pid=24304 comm="syz.5.4825" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1564.682418][   T30] audit: type=1400 audit(1755097043.910:23518): avc:  denied  { set_context_mgr } for  pid=24304 comm="syz.5.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1565.154170][T24324] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1565.302376][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4828'.
[ 1566.766723][T24329] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1567.086945][ T9590] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1567.254769][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4835'.
[ 1567.275468][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4835'.
[ 1567.473567][T24347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4836'.
[ 1567.527856][ T9590] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1567.571243][ T9590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1567.599208][ T9590] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1568.182309][ T9590] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1568.441934][T24352] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1568.811104][ T9590] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1568.897736][ T9590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.928062][ T9590] usb 7-1: config 0 descriptor??
[ 1569.066930][T24358] futex_wake_op: syz.0.4840 tries to shift op by -1; fix this program
[ 1569.389546][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4842'.
[ 1569.445503][ T9590] hid_parser_main: 5 callbacks suppressed
[ 1569.445517][ T9590] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[ 1569.487093][   T30] kauditd_printk_skb: 282 callbacks suppressed
[ 1569.487111][   T30] audit: type=1400 audit(1755097049.139:23762): avc:  denied  { create } for  pid=24357 comm="syz.0.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1569.586198][ T9590] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[ 1569.794858][ T5950] vhci_hcd: vhci_device speed not set
[ 1569.813984][   T30] audit: type=1400 audit(1755097049.139:23763): avc:  denied  { setopt } for  pid=24357 comm="syz.0.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1569.860863][   T30] audit: type=1400 audit(1755097049.139:23764): avc:  denied  { write } for  pid=24357 comm="syz.0.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1569.867513][ T9590] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[ 1569.896835][ T9590] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[ 1569.921152][ T9590] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[ 1569.930066][T24371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1569.933460][ T9590] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1569.955907][   T30] audit: type=1400 audit(1755097049.139:23765): avc:  denied  { module_request } for  pid=24357 comm="syz.0.4840" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1569.983486][   T30] audit: type=1400 audit(1755097049.241:23766): avc:  denied  { recv } for  pid=24366 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1570.018308][   T30] audit: type=1400 audit(1755097049.438:23767): avc:  denied  { read write } for  pid=24336 comm="syz.6.4834" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1570.042693][T24371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1570.096351][   T30] audit: type=1400 audit(1755097049.438:23768): avc:  denied  { open } for  pid=24336 comm="syz.6.4834" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1570.513167][   T30] audit: type=1400 audit(1755097049.485:23769): avc:  denied  { sys_module } for  pid=24357 comm="syz.0.4840" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1570.551090][   T30] audit: type=1400 audit(1755097049.485:23770): avc:  denied  { module_request } for  pid=24357 comm="syz.0.4840" kmod="" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1570.591559][   T30] audit: type=1400 audit(1755097049.485:23771): avc:  denied  { read } for  pid=24336 comm="syz.6.4834" dev="nsfs" ino=4026533213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1571.709118][T24337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1571.859172][T24399] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1572.596407][ T5950] usb 7-1: USB disconnect, device number 11
[ 1573.500683][T24417] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4855'.
[ 1573.527826][T24415] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4855'.
[ 1573.966086][T18651] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1574.191022][T18651] usb 7-1: Using ep0 maxpacket: 16
[ 1574.200693][T18651] usb 7-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config
[ 1574.222345][T18651] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1574.357113][T18651] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[ 1574.366464][T18651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.389431][T18651] usb 7-1: config 0 descriptor??
[ 1574.399598][T18651] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1575.092868][   T30] kauditd_printk_skb: 304 callbacks suppressed
[ 1575.092887][   T30] audit: type=1400 audit(1755097054.386:24076): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1575.433139][   T30] audit: type=1400 audit(1755097054.685:24078): avc:  denied  { create } for  pid=24440 comm="syz.5.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1575.509277][   T30] audit: type=1400 audit(1755097054.732:24079): avc:  denied  { allowed } for  pid=24440 comm="syz.5.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1575.571438][   T30] audit: type=1400 audit(1755097054.685:24077): avc:  denied  { module_request } for  pid=24438 comm="syz.1.4862" kmod="crypto-digest_null-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1576.114901][   T30] audit: type=1400 audit(1755097054.732:24081): avc:  denied  { create } for  pid=24427 comm="syz.6.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1576.135782][   T30] audit: type=1400 audit(1755097054.732:24082): avc:  denied  { write } for  pid=24427 comm="syz.6.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1576.156851][   T30] audit: type=1400 audit(1755097054.732:24083): avc:  denied  { ioctl } for  pid=24427 comm="syz.6.4858" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1576.183237][   T30] audit: type=1400 audit(1755097054.732:24084): avc:  denied  { module_request } for  pid=24438 comm="syz.1.4862" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1576.206456][   T30] audit: type=1400 audit(1755097054.732:24080): avc:  denied  { create } for  pid=24440 comm="syz.5.4863" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1576.322837][   T30] audit: type=1400 audit(1755097054.742:24085): avc:  denied  { map } for  pid=24440 comm="syz.5.4863" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1577.234244][ T5914] usb 7-1: USB disconnect, device number 12
[ 1578.526082][T24488] fuse: Unknown parameter 'Üu'
[ 1580.468042][   T30] kauditd_printk_skb: 216 callbacks suppressed
[ 1580.468052][   T30] audit: type=1400 audit(1755097059.419:24302): avc:  denied  { read write } for  pid=24515 comm="syz.6.4879" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1580.520429][   T30] audit: type=1400 audit(1755097059.447:24303): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1580.570042][   T30] audit: type=1400 audit(1755097059.447:24304): avc:  denied  { open } for  pid=24515 comm="syz.6.4879" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1580.603298][   T30] audit: type=1400 audit(1755097059.447:24305): avc:  denied  { mounton } for  pid=24515 comm="syz.6.4879" path="/84/file0" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1580.755568][T24519] netlink: 'syz.0.4880': attribute type 10 has an invalid length.
[ 1581.749458][   T30] audit: type=1400 audit(1755097059.447:24306): avc:  denied  { mount } for  pid=24515 comm="syz.6.4879" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1581.772312][   T30] audit: type=1400 audit(1755097059.578:24307): avc:  denied  { create } for  pid=24516 comm="syz.0.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1581.792090][   T30] audit: type=1400 audit(1755097059.578:24308): avc:  denied  { setopt } for  pid=24516 comm="syz.0.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1581.815660][   T30] audit: type=1400 audit(1755097059.699:24309): avc:  denied  { mounton } for  pid=24516 comm="syz.0.4880" path="/364/file0" dev="tmpfs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1581.838831][   T30] audit: type=1400 audit(1755097059.709:24310): avc:  denied  { mount } for  pid=24516 comm="syz.0.4880" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1581.861162][   T30] audit: type=1400 audit(1755097059.755:24311): avc:  denied  { create } for  pid=24516 comm="syz.0.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1582.719844][T24528] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4882'.
[ 1582.978667][T24535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1583.009823][T24535] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4884'.
[ 1583.908753][T24537] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1584.048635][T24550] fuse: Unknown parameter 'grou00000000000000000000'
[ 1585.379423][T22782] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[ 1585.490704][T18651] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1585.509356][T24573] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1585.546089][T22782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1585.643572][T24575] binder: 24570:24575 unknown command 0
[ 1585.649199][T24575] binder: 24570:24575 ioctl c0306201 200000000080 returned -22
[ 1585.817673][T22782] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1585.839107][T22782] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1585.840248][   T30] kauditd_printk_skb: 246 callbacks suppressed
[ 1585.840260][   T30] audit: type=1400 audit(1755097064.442:24558): avc:  denied  { unmount } for  pid=17355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1585.851600][T18651] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1585.864420][   T30] audit: type=1400 audit(1755097064.451:24559): avc:  denied  { ioctl } for  pid=24564 comm="syz.6.4894" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1585.909870][T22782] usb 5-1: Manufacturer: syz
[ 1585.917688][T22782] usb 5-1: config 0 descriptor??
[ 1585.926645][T18651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.939016][T18651] usb 7-1: Product: syz
[ 1585.954422][T18651] usb 7-1: Manufacturer: syz
[ 1585.973314][   T30] audit: type=1400 audit(1755097064.507:24560): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1586.007534][T18651] usb 7-1: SerialNumber: syz
[ 1586.023105][   T30] audit: type=1400 audit(1755097064.507:24561): avc:  denied  { unmount } for  pid=17355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1586.066500][   T30] audit: type=1400 audit(1755097064.535:24562): avc:  denied  { ioctl } for  pid=24548 comm="syz.4.4889" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1586.173600][ T9590] usb 5-1: USB disconnect, device number 6
[ 1586.190364][T18651] usb 7-1: config 0 descriptor??
[ 1586.223395][   T30] audit: type=1400 audit(1755097064.797:24563): avc:  denied  { ioctl } for  pid=24564 comm="syz.6.4894" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1586.304791][   T30] audit: type=1400 audit(1755097064.797:24564): avc:  denied  { read } for  pid=24576 comm="syz.0.4898" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1586.329861][   T30] audit: type=1400 audit(1755097064.797:24565): avc:  denied  { open } for  pid=24576 comm="syz.0.4898" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1586.545496][   T30] audit: type=1400 audit(1755097064.928:24566): avc:  denied  { allowed } for  pid=24576 comm="syz.0.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1586.928389][   T30] audit: type=1400 audit(1755097064.928:24567): avc:  denied  { create } for  pid=24576 comm="syz.0.4898" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1587.023959][ T5914] usb 7-1: USB disconnect, device number 13
[ 1587.573774][T24592] comedi comedi0: comedi_config --init_data is deprecated
[ 1591.229178][   T30] kauditd_printk_skb: 154 callbacks suppressed
[ 1591.229194][   T30] audit: type=1400 audit(1755097069.474:24722): avc:  denied  { read write } for  pid=18458 comm="syz-executor" name="loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1591.394222][   T30] audit: type=1400 audit(1755097069.512:24723): avc:  denied  { read write open } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1591.552431][   T30] audit: type=1400 audit(1755097069.512:24724): avc:  denied  { ioctl } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1591.579618][   T30] audit: type=1400 audit(1755097069.521:24725): avc:  denied  { mounton } for  pid=24619 comm="syz.0.4908" path="/370/file0" dev="tmpfs" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1591.609884][T24625] comedi comedi1: pcl711: I/O port conflict (0x2f00,16)
[ 1591.652295][   T30] audit: type=1400 audit(1755097069.540:24726): avc:  denied  { mount } for  pid=24619 comm="syz.0.4908" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1591.656344][T24625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24625 comm=syz.6.4910
[ 1591.677309][   T30] audit: type=1400 audit(1755097069.577:24727): avc:  denied  { read write } for  pid=22447 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1592.096189][   T30] audit: type=1400 audit(1755097069.577:24728): avc:  denied  { read write open } for  pid=22447 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1592.125408][   T30] audit: type=1400 audit(1755097069.577:24729): avc:  denied  { ioctl } for  pid=22447 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1592.156631][   T30] audit: type=1400 audit(1755097069.586:24730): avc:  denied  { recv } for  pid=22447 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1592.187634][   T30] audit: type=1400 audit(1755097069.614:24731): avc:  denied  { prog_load } for  pid=24621 comm="syz.1.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1592.231359][T24632] fuse: Unknown parameter 'grou00000000000000000000'
[ 1594.003908][T24653] wg1 speed is unknown, defaulting to 1000
[ 1595.718187][T24677] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1596.330993][T24699] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1596.381785][T24699] cramfs: wrong magic
[ 1596.439551][T24702] netlink: 'syz.5.4930': attribute type 4 has an invalid length.
[ 1596.580871][   T30] kauditd_printk_skb: 301 callbacks suppressed
[ 1596.580888][   T30] audit: type=1400 audit(1755097587.402:25033): avc:  denied  { execmem } for  pid=24703 comm="syz.6.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1596.606403][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1596.625056][   T30] audit: type=1400 audit(1755097587.523:25034): avc:  denied  { mount } for  pid=24686 comm="syz.4.4928" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1597.094265][   T30] audit: type=1400 audit(1755097587.598:25035): avc:  denied  { recv } for  pid=24703 comm="syz.6.4931" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1597.206957][   T30] audit: type=1400 audit(1755097587.626:25036): avc:  denied  { allowed } for  pid=24703 comm="syz.6.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1597.229770][   T30] audit: type=1400 audit(1755097587.626:25037): avc:  denied  { create } for  pid=24703 comm="syz.6.4931" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1597.286337][   T30] audit: type=1400 audit(1755097587.626:25038): avc:  denied  { map } for  pid=24703 comm="syz.6.4931" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1597.402308][   T30] audit: type=1400 audit(1755097587.626:25039): avc:  denied  { read write } for  pid=24703 comm="syz.6.4931" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1597.428862][   T30] audit: type=1400 audit(1755097588.010:25040): avc:  denied  { recv } for  pid=24678 comm="syz.1.4924" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1597.457644][   T30] audit: type=1400 audit(1755097588.028:25041): avc:  denied  { recv } for  pid=13716 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1598.189438][   T30] audit: type=1400 audit(1755097588.028:25042): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1598.265695][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1598.436807][ T5914] usb 1-1: Using ep0 maxpacket: 32
[ 1598.518038][ T5914] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1598.604103][ T5914] usb 1-1: config 0 has no interface number 0
[ 1598.622340][ T5914] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1598.633641][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.641712][ T5914] usb 1-1: Product: syz
[ 1599.737090][ T5914] usb 1-1: Manufacturer: syz
[ 1599.744236][ T5914] usb 1-1: SerialNumber: syz
[ 1599.759655][ T5914] usb 1-1: config 0 descriptor??
[ 1599.871202][ T5914] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1599.880193][ T5914] usb 1-1: selecting invalid altsetting 1
[ 1599.885983][ T5914] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1599.916254][ T5914] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1599.930008][ T5914] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1599.945057][ T5914] usb 1-1: media controller created
[ 1600.010605][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1600.095606][ T5914] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[ 1600.107041][ T5914] zl10353_read_register: readreg error (reg=127, ret==-32)
[ 1600.125054][ T5914] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1600.422780][ T5914] usb 1-1: USB disconnect, device number 16
[ 1600.938651][T24751] netlink: 'syz.1.4944': attribute type 12 has an invalid length.
[ 1601.940941][   T30] kauditd_printk_skb: 196 callbacks suppressed
[ 1601.940977][   T30] audit: type=1400 audit(1755097592.500:25239): avc:  denied  { prog_load } for  pid=24755 comm="syz.1.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1602.005198][   T30] audit: type=1400 audit(1755097592.509:25240): avc:  denied  { bpf } for  pid=24759 comm="syz.4.4947" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1602.719358][   T30] audit: type=1400 audit(1755097592.509:25241): avc:  denied  { write } for  pid=24759 comm="syz.4.4947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1602.749350][   T30] audit: type=1400 audit(1755097592.509:25242): avc:  denied  { create } for  pid=24759 comm="syz.4.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1602.932702][   T30] audit: type=1400 audit(1755097592.509:25243): avc:  denied  { create } for  pid=24759 comm="syz.4.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1602.957250][   T30] audit: type=1400 audit(1755097592.509:25244): avc:  denied  { ioctl } for  pid=24759 comm="syz.4.4947" path="socket:[102413]" dev="sockfs" ino=102413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1602.990196][   T30] audit: type=1400 audit(1755097592.509:25245): avc:  denied  { ioctl } for  pid=24759 comm="syz.4.4947" path="socket:[102412]" dev="sockfs" ino=102412 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1603.268662][T24771] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1603.276709][   T30] audit: type=1400 audit(1755097592.509:25246): avc:  denied  { prog_load } for  pid=24759 comm="syz.4.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1603.617935][   T30] audit: type=1400 audit(1755097592.509:25247): avc:  denied  { bpf } for  pid=24759 comm="syz.4.4947" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1603.639045][   T30] audit: type=1400 audit(1755097592.509:25248): avc:  denied  { perfmon } for  pid=24759 comm="syz.4.4947" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1604.747727][T24781] FAULT_INJECTION: forcing a failure.
[ 1604.747727][T24781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1604.757347][T24783] gfs2: gfs2 mount does not exist
[ 1604.766800][T24781] CPU: 0 UID: 0 PID: 24781 Comm: syz.4.4952 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[ 1604.766828][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1604.766839][T24781] Call Trace:
[ 1604.766845][T24781]  <TASK>
[ 1604.766852][T24781]  dump_stack_lvl+0x16c/0x1f0
[ 1604.766877][T24781]  should_fail_ex+0x512/0x640
[ 1604.766907][T24781]  _copy_from_user+0x2e/0xd0
[ 1604.766931][T24781]  copy_msghdr_from_user+0x98/0x160
[ 1604.766952][T24781]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1604.766982][T24781]  ___sys_sendmsg+0xfe/0x1d0
[ 1604.767001][T24781]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1604.767041][T24781]  ? __mutex_unlock_slowpath+0x100/0x800
[ 1604.767072][T24781]  __sys_sendmsg+0x16d/0x220
[ 1604.767090][T24781]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1604.767123][T24781]  do_syscall_64+0xcd/0x4c0
[ 1604.767143][T24781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1604.767162][T24781] RIP: 0033:0x7f2071d8ebe9
[ 1604.767178][T24781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1604.767195][T24781] RSP: 002b:00007f2072b36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1604.767213][T24781] RAX: ffffffffffffffda RBX: 00007f2071fb5fa0 RCX: 00007f2071d8ebe9
[ 1604.767225][T24781] RDX: 0000000020004000 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1604.767236][T24781] RBP: 00007f2072b36090 R08: 0000000000000000 R09: 0000000000000000
[ 1604.767246][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1604.767257][T24781] R13: 00007f2071fb6038 R14: 00007f2071fb5fa0 R15: 00007ffcdfc1fd28
[ 1604.767281][T24781]  </TASK>
[ 1606.070107][T18651] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1606.241055][T18651] usb 1-1: Using ep0 maxpacket: 16
[ 1606.281755][T18651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1606.322570][T18651] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1606.337257][T18651] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1606.356603][T18651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.384748][T18651] usb 1-1: Product: syz
[ 1606.402151][T18651] usb 1-1: Manufacturer: syz
[ 1606.411610][T18651] usb 1-1: SerialNumber: syz
[ 1606.969155][T24809] overlayfs: failed to clone lowerpath
[ 1607.347162][   T30] kauditd_printk_skb: 217 callbacks suppressed
[ 1607.347179][   T30] audit: type=1400 audit(1510.952:25415): avc:  denied  { read write } for  pid=18458 comm="syz-executor" name="loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1607.403494][T24814] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1607.543585][T24815] overlayfs: statfs failed on './file0'
[ 1607.667545][T24811] 9pnet_fd: Insufficient options for proto=fd
[ 1607.684241][   T30] audit: type=1400 audit(1510.952:25416): avc:  denied  { open } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1607.708597][   T30] audit: type=1400 audit(1510.952:25417): avc:  denied  { ioctl } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1607.733426][   T30] audit: type=1400 audit(1510.952:25418): avc:  denied  { recv } for  pid=5830 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1608.257577][   T30] audit: type=1400 audit(1510.999:25419): avc:  denied  { read write } for  pid=24807 comm="syz.4.4961" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1608.366166][   T30] audit: type=1400 audit(1510.999:25420): avc:  denied  { open } for  pid=24807 comm="syz.4.4961" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1608.391675][T24826] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1608.639867][   T30] audit: type=1400 audit(1511.008:25421): avc:  denied  { mounton } for  pid=24807 comm="syz.4.4961" path="/426/file0" dev="tmpfs" ino=2270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1608.700126][   T30] audit: type=1400 audit(1511.102:25422): avc:  denied  { recv } for  pid=5830 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1608.817105][   T30] audit: type=1400 audit(1511.102:25423): avc:  denied  { recv } for  pid=13716 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1608.873911][   T30] audit: type=1400 audit(1511.111:25424): avc:  denied  { mounton } for  pid=24813 comm="syz.1.4962" path="/347/file0" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1609.500094][T24832] openvswitch: netlink: Message has 8 unknown bytes.
[ 1609.603392][T18651] usb 1-1: 0:2 : does not exist
[ 1609.638509][T18651] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1609.683122][T18651] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1610.478752][T18651] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1610.489271][T18651] usb 1-1: USB disconnect, device number 17
[ 1612.249942][T24863] syz.5.4973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1612.310804][T24863] CPU: 1 UID: 0 PID: 24863 Comm: syz.5.4973 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[ 1612.310836][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1612.310848][T24863] Call Trace:
[ 1612.310857][T24863]  <TASK>
[ 1612.310866][T24863]  dump_stack_lvl+0x16c/0x1f0
[ 1612.310891][T24863]  warn_alloc+0x248/0x3a0
[ 1612.310919][T24863]  ? __pfx_warn_alloc+0x10/0x10
[ 1612.310937][T24863]  ? trace_sched_exit_tp+0xd1/0x120
[ 1612.310959][T24863]  ? __schedule+0x11a3/0x5de0
[ 1612.310999][T24863]  ? xskq_create+0x52/0x1d0
[ 1612.311024][T24863]  ? xsk_setsockopt+0x74e/0x9a0
[ 1612.311051][T24863]  ? xskq_create+0xfb/0x1d0
[ 1612.311079][T24863]  __vmalloc_node_range_noprof+0xff5/0x14b0
[ 1612.311116][T24863]  ? xskq_create+0xfb/0x1d0
[ 1612.311145][T24863]  ? irqentry_exit+0x3b/0x90
[ 1612.311163][T24863]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1612.311181][T24863]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1612.311211][T24863]  ? xskq_create+0xfb/0x1d0
[ 1612.311242][T24863]  ? xskq_create+0xfb/0x1d0
[ 1612.311268][T24863]  vmalloc_user_noprof+0x9e/0xe0
[ 1612.311296][T24863]  ? xskq_create+0xfb/0x1d0
[ 1612.311321][T24863]  xskq_create+0xfb/0x1d0
[ 1612.311348][T24863]  xsk_setsockopt+0x74e/0x9a0
[ 1612.311374][T24863]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1612.311397][T24863]  ? find_held_lock+0x2b/0x80
[ 1612.311421][T24863]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1612.311445][T24863]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1612.311470][T24863]  do_sock_setsockopt+0xf3/0x1d0
[ 1612.311494][T24863]  __sys_setsockopt+0x1a0/0x230
[ 1612.311521][T24863]  __x64_sys_setsockopt+0xbd/0x160
[ 1612.311535][T24863]  ? do_syscall_64+0x91/0x4c0
[ 1612.311552][T24863]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1612.311568][T24863]  do_syscall_64+0xcd/0x4c0
[ 1612.311587][T24863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1612.311604][T24863] RIP: 0033:0x7fd8eeb8ebe9
[ 1612.311619][T24863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1612.311636][T24863] RSP: 002b:00007fd8ef993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1612.311655][T24863] RAX: ffffffffffffffda RBX: 00007fd8eedb5fa0 RCX: 00007fd8eeb8ebe9
[ 1612.311666][T24863] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[ 1612.311676][T24863] RBP: 00007fd8eec11e19 R08: 0000000000000004 R09: 0000000000000000
[ 1612.311687][T24863] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1612.311697][T24863] R13: 00007fd8eedb6038 R14: 00007fd8eedb5fa0 R15: 00007fff9cc57f28
[ 1612.311720][T24863]  </TASK>
[ 1612.312884][T24863] Mem-Info:
[ 1612.593615][T24863] active_anon:8750 inactive_anon:2 isolated_anon:0
[ 1612.593615][T24863]  active_file:21044 inactive_file:41814 isolated_file:0
[ 1612.593615][T24863]  unevictable:768 dirty:221 writeback:0
[ 1612.593615][T24863]  slab_reclaimable:7834 slab_unreclaimable:112903
[ 1612.593615][T24863]  mapped:34188 shmem:4929 pagetables:1478
[ 1612.593615][T24863]  sec_pagetables:0 bounce:0
[ 1612.593615][T24863]  kernel_misc_reclaimable:0
[ 1612.593615][T24863]  free:1265503 free_pcp:18993 free_cma:0
[ 1612.642325][T24863] Node 0 active_anon:35200kB inactive_anon:8kB active_file:84112kB inactive_file:167004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136868kB dirty:884kB writeback:0kB shmem:18380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12072kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1612.680274][T24863] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1612.712779][T24863] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1612.747009][   T30] kauditd_printk_skb: 179 callbacks suppressed
[ 1612.747026][   T30] audit: type=1400 audit(1516.003:25604): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1612.778941][T24867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4972'.
[ 1612.788726][T24863] lowmem_reserve[]: 0 2479 2481 2481 2481
[ 1612.825812][T24863] Node 0 DMA32 free:1151888kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37276kB inactive_anon:8kB active_file:84112kB inactive_file:165676kB unevictable:1536kB writepending:884kB present:3129332kB managed:2539412kB mlocked:0kB bounce:0kB free_pcp:65764kB local_pcp:41112kB free_cma:0kB
[ 1612.826332][   T30] audit: type=1400 audit(1516.022:25605): avc:  denied  { create } for  pid=24858 comm="syz.4.4972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1612.883430][T24863] lowmem_reserve[]: 0 0 1 1 1
[ 1612.894920][T24863] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB
[ 1612.927749][T24863] lowmem_reserve[]:
[ 1612.930836][   T30] audit: type=1400 audit(1516.022:25606): avc:  denied  { write } for  pid=24858 comm="syz.4.4972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1612.955039][T24863]  0 0 0 0 0
[ 1612.958473][T24863] Node 1 Normal free:3894696kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:252kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10700kB local_pcp:6448kB free_cma:0kB
[ 1612.992437][T24863] lowmem_reserve[]: 0
[ 1612.996476][   T30] audit: type=1400 audit(1516.022:25607): avc:  denied  { read } for  pid=24858 comm="syz.4.4972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1613.025141][T24863]  0 0 0 0
[ 1613.030850][T24863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1613.044460][T24863] Node 0 DMA32: 571*4kB (UME) 960*8kB (UME) 674*16kB (UME) 
[ 1613.055237][   T30] audit: type=1400 audit(1516.059:25608): avc:  denied  { allowed } for  pid=24868 comm="syz.1.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1613.081923][T24863] 532*32kB (UME) 315*64kB (UME) 198*128kB (UME) 108*256kB (UME) 35*512kB (UM) 15*1024kB (UME) 2*2048kB (UM) 245*4096kB (UM) = 1151820kB
[ 1613.096834][T24863] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1613.109489][T24863] Node 1 Normal: 2*4kB (ME) 4*8kB (ME) 8*16kB (E) 96*32kB (UME) 118*64kB (UME) 33*128kB (UME) 11*256kB (UME) 10*512kB (UME) 9*1024kB (UME) 6*2048kB (UME) 940*4096kB (UM) = 3894696kB
[ 1613.128728][T24863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1613.138526][T24863] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1613.147866][T24863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1613.160288][T24863] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1613.173045][   T30] audit: type=1400 audit(1516.059:25609): avc:  denied  { create } for  pid=24868 comm="syz.1.4976" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1613.245532][T24863] 69430 total pagecache pages
[ 1613.250297][   T30] audit: type=1400 audit(1516.059:25610): avc:  denied  { map } for  pid=24868 comm="syz.1.4976" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1613.296758][T24863] 2 pages in swap cache
[ 1613.330229][T24863] Free swap  = 124988kB
[ 1613.343716][T24863] Total swap = 124996kB
[ 1613.375886][T24863] 2097051 pages RAM
[ 1613.397528][T24863] 0 pages HighMem/MovableOnly
[ 1613.403008][   T30] audit: type=1400 audit(1516.059:25611): avc:  denied  { read write } for  pid=24868 comm="syz.1.4976" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1613.433860][T24863] 430236 pages reserved
[ 1613.451730][T24863] 0 pages cma reserved
[ 1613.799021][   T30] audit: type=1400 audit(1516.059:25612): avc:  denied  { allowed } for  pid=24868 comm="syz.1.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1613.908983][   T30] audit: type=1400 audit(1516.059:25613): avc:  denied  { create } for  pid=24868 comm="syz.1.4976" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1613.991795][T24874] new mount options do not match the existing superblock, will be ignored
[ 1615.349292][ T9590] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1616.056357][ T9590] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1616.068577][ T9590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1616.078913][ T9590] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1616.201570][ T9590] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1616.293471][ T9590] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1616.362665][ T9590] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1616.371183][ T9590] usb 1-1: Product: syz
[ 1616.375686][ T9590] usb 1-1: Manufacturer: syz
[ 1616.385543][ T9590] cdc_wdm 1-1:1.0: skipping garbage
[ 1616.396958][ T9590] cdc_wdm 1-1:1.0: skipping garbage
[ 1616.411819][ T9590] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1616.424647][ T9590] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1617.156733][T24895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1617.165586][T24895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1617.275865][ T1056] usb 1-1: USB disconnect, device number 18
[ 1617.916654][T24922] openvswitch: netlink: Message has 8 unknown bytes.
[ 1618.022065][T24923] netlink: 'syz.1.4989': attribute type 4 has an invalid length.
[ 1618.132014][   T30] kauditd_printk_skb: 200 callbacks suppressed
[ 1618.132025][   T30] audit: type=1400 audit(1521.041:25814): avc:  denied  { create } for  pid=24918 comm="syz.0.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1618.174606][   T30] audit: type=1400 audit(1521.088:25815): avc:  denied  { read } for  pid=24924 comm="syz.6.4991" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1618.201728][   T30] audit: type=1400 audit(1521.088:25816): avc:  denied  { open } for  pid=24924 comm="syz.6.4991" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1618.233661][   T30] audit: type=1400 audit(1521.107:25817): avc:  denied  { ioctl } for  pid=24919 comm="syz.1.4989" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1618.265682][   T30] audit: type=1400 audit(1521.135:25818): avc:  denied  { ioctl } for  pid=24924 comm="syz.6.4991" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1618.309259][T24926] netlink: 'syz.6.4991': attribute type 1 has an invalid length.
[ 1618.329645][T24926] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4991'.
[ 1618.345230][   T30] audit: type=1400 audit(1521.144:25819): avc:  denied  { map_create } for  pid=24924 comm="syz.6.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1618.375520][   T30] audit: type=1400 audit(1521.144:25820): avc:  denied  { bpf } for  pid=24924 comm="syz.6.4991" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1618.396172][ T5950] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1618.404239][   T30] audit: type=1400 audit(1521.144:25821): avc:  denied  { map_read map_write } for  pid=24924 comm="syz.6.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1618.424027][   T30] audit: type=1400 audit(1521.144:25822): avc:  denied  { prog_load } for  pid=24924 comm="syz.6.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1618.445137][   T30] audit: type=1400 audit(1521.144:25823): avc:  denied  { perfmon } for  pid=24924 comm="syz.6.4991" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1618.474598][T24929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24929 comm=syz.6.4991
[ 1618.488414][T24929] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4991'.
[ 1618.557400][ T5950] usb 2-1: Using ep0 maxpacket: 32
[ 1618.565004][ T5950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[ 1618.597975][ T5950] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1618.613052][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.622285][ T5950] usb 2-1: Product: syz
[ 1618.626591][ T5950] usb 2-1: Manufacturer: syz
[ 1618.633172][ T5950] usb 2-1: SerialNumber: syz
[ 1618.640699][ T5950] usb 2-1: config 0 descriptor??
[ 1618.647819][T24923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1618.662399][ T5950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1618.941848][ T5950] usb 2-1: USB disconnect, device number 20
[ 1619.120843][T24933] libceph: resolve '4' (ret=-3): failed
[ 1620.305102][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4995'.
[ 1620.319894][T24943] : entered promiscuous mode
[ 1620.356554][T24861] Set syz1 is full, maxelem 65536 reached
[ 1620.438009][ T5950] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1620.716468][ T5950] usb 1-1: Using ep0 maxpacket: 16
[ 1620.789595][ T5950] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[ 1620.790853][ T9590] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1620.890134][ T5950] usb 1-1: config 0 has no interface number 0
[ 1621.377442][ T5950] usb 1-1: config 0 interface 48 has no altsetting 0
[ 1621.408801][ T5950] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[ 1621.449824][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.502025][T24957] openvswitch: netlink: Message has 8 unknown bytes.
[ 1621.508803][ T9590] usb 5-1: Using ep0 maxpacket: 16
[ 1621.515874][ T9590] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1621.517273][ T5950] usb 1-1: Product: syz
[ 1621.533833][ T9590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1621.548365][ T9590] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1621.557036][ T5950] usb 1-1: Manufacturer: syz
[ 1621.562141][ T9590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.570321][ T9590] usb 5-1: Product: syz
[ 1621.586371][ T9590] usb 5-1: Manufacturer: syz
[ 1621.594512][T24962] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1621.648008][ T5950] usb 1-1: SerialNumber: syz
[ 1621.669900][ T9590] usb 5-1: SerialNumber: syz
[ 1621.680091][ T9590] usb 5-1: config 0 descriptor??
[ 1621.698328][ T9590] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1621.866876][ T9590] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1621.896551][ T5950] usb 1-1: config 0 descriptor??
[ 1622.250265][T24969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5003'.
[ 1622.536770][T24971] netlink: 'syz.6.5004': attribute type 1 has an invalid length.
[ 1622.577149][T24971] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5004'.
[ 1622.699041][T24974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24974 comm=syz.6.5004
[ 1622.712636][T24974] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5004'.
[ 1622.855110][ T9590] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1622.861697][ T9590] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1623.087693][ T9590] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 1623.094956][ T9590] em28xx 5-1:0.0: No AC97 audio processor
[ 1623.263224][T24985] program syz.1.5007 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1623.630547][   T30] kauditd_printk_skb: 230 callbacks suppressed
[ 1623.630565][   T30] audit: type=1400 audit(1525.765:26054): avc:  denied  { prog_load } for  pid=24981 comm="syz.1.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1623.655686][   T30] audit: type=1400 audit(1525.765:26055): avc:  denied  { bpf } for  pid=24981 comm="syz.1.5007" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1623.676204][   T30] audit: type=1400 audit(1525.765:26056): avc:  denied  { perfmon } for  pid=24981 comm="syz.1.5007" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1623.705994][T18651] usb 1-1: USB disconnect, device number 19
[ 1623.735483][ T9590] usb 5-1: USB disconnect, device number 7
[ 1623.759002][ T9590] em28xx 5-1:0.0: Disconnecting em28xx
[ 1623.779750][ T9590] em28xx 5-1:0.0: Freeing device
[ 1623.791026][   T30] audit: type=1400 audit(1525.793:26057): avc:  denied  { prog_run } for  pid=24981 comm="syz.1.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1623.972794][   T30] audit: type=1400 audit(1525.812:26058): avc:  denied  { recv } for  pid=24981 comm="syz.1.5007" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1624.018464][   T30] audit: type=1400 audit(1525.821:26059): avc:  denied  { read write } for  pid=24981 comm="syz.1.5007" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1624.267917][T24993] binder: 24988:24993 ioctl 4018620d 0 returned -22
[ 1624.353491][   T30] audit: type=1400 audit(1525.821:26060): avc:  denied  { open } for  pid=24981 comm="syz.1.5007" path="/dev/sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1624.379678][T24987] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1624.386212][T24987] audit: audit_lost=198 audit_rate_limit=0 audit_backlog_limit=64
[ 1624.394137][T24987] audit: backlog limit exceeded
[ 1625.017346][T24999] openvswitch: netlink: Message has 8 unknown bytes.
[ 1625.092241][T25003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5014'.
[ 1625.606904][T25005] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1627.438714][T25035] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1627.784485][T25041] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 1628.520516][T25058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5027'.
[ 1628.539092][T25058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5027'.
[ 1628.731828][ T9590] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1628.877497][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1628.888128][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1628.903071][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1628.912362][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1628.922488][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1628.922557][ T9590] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1628.946115][ T9590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.956864][ T9590] usb 1-1: config 0 descriptor??
[ 1629.204367][   T30] kauditd_printk_skb: 297 callbacks suppressed
[ 1629.204387][   T30] audit: type=1400 audit(1531.387:26355): avc:  denied  { create } for  pid=25059 comm="syz.6.5028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1629.241292][   T30] audit: type=1400 audit(1531.434:26356): avc:  denied  { read } for  pid=25061 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1629.262666][   T30] audit: type=1400 audit(1531.434:26357): avc:  denied  { open } for  pid=25061 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1629.288748][   T30] audit: type=1400 audit(1531.434:26358): avc:  denied  { mounton } for  pid=25061 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1629.314805][   T30] audit: type=1400 audit(1531.508:26359): avc:  denied  { read write } for  pid=16906 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1629.342548][T25061] wg1 speed is unknown, defaulting to 1000
[ 1629.365352][   T30] audit: type=1400 audit(1531.508:26360): avc:  denied  { open } for  pid=16906 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1629.402673][   T30] audit: type=1400 audit(1531.508:26361): avc:  denied  { ioctl } for  pid=16906 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1629.444896][   T30] audit: type=1400 audit(1531.508:26362): avc:  denied  { recv } for  pid=22447 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1629.585959][   T30] audit: type=1400 audit(1531.508:26363): avc:  denied  { recv } for  pid=22447 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1629.629248][   T30] audit: type=1400 audit(1531.518:26364): avc:  denied  { ioctl } for  pid=25052 comm="syz.0.5025" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1629.664382][ T9590] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1629.881025][T25055] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1630.095553][T25061] chnl_net:caif_netlink_parms(): no params data found
[ 1630.534264][T25078] netlink: 'syz.1.5030': attribute type 10 has an invalid length.
[ 1630.729425][T25078] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1631.199184][T25061] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1631.208332][T25061] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.221001][T25061] bridge_slave_0: entered allmulticast mode
[ 1631.240322][T25061] bridge_slave_0: entered promiscuous mode
[ 1631.302889][T25061] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1631.397828][T25061] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.406889][T21038] Bluetooth: hci5: command tx timeout
[ 1632.080230][T25061] bridge_slave_1: entered allmulticast mode
[ 1632.179727][T25061] bridge_slave_1: entered promiscuous mode
[ 1632.352051][ T9590] [drm:udl_init] *ERROR* Selecting channel failed
[ 1632.373829][ T9590] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[ 1632.394394][T25061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1632.403584][ T9590] [drm] Initialized udl on minor 2
[ 1632.411632][ T9590] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1632.427681][ T9590] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1632.449353][T25061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1632.466394][T18651] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1632.483076][ T9590] usb 1-1: USB disconnect, device number 20
[ 1632.498417][T18651] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1632.855531][T25061] team0: Port device team_slave_0 added
[ 1632.884710][T25061] team0: Port device team_slave_1 added
[ 1633.075660][T25096] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1633.174724][T25061] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1633.185087][T25061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1633.219218][T25061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1633.234490][T25061] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1633.244614][T25061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1633.325803][T25108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5037'.
[ 1633.383936][T25061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1633.416952][T25112] netlink: 676 bytes leftover after parsing attributes in process `syz.1.5036'.
[ 1633.434223][T25112] netlink: 676 bytes leftover after parsing attributes in process `syz.1.5036'.
[ 1633.630445][T21038] Bluetooth: hci5: command tx timeout
[ 1634.126483][T25061] hsr_slave_0: entered promiscuous mode
[ 1634.136903][T25061] hsr_slave_1: entered promiscuous mode
[ 1634.194127][T25061] debugfs: 'hsr0' already exists in 'hsr'
[ 1634.208350][T25061] Cannot create hsr debugfs directory
[ 1634.748100][   T30] kauditd_printk_skb: 173 callbacks suppressed
[ 1634.748135][   T30] audit: type=1400 audit(1536.588:26538): avc:  denied  { recv } for  pid=25120 comm="syz.1.5040" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1634.960670][   T30] audit: type=1400 audit(1536.709:26539): avc:  denied  { read write } for  pid=16906 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1634.996537][   T30] audit: type=1400 audit(1536.709:26540): avc:  denied  { open } for  pid=16906 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1635.005235][T25061] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.021271][   T30] audit: type=1400 audit(1536.709:26541): avc:  denied  { ioctl } for  pid=16906 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1635.172351][   T30] audit: type=1400 audit(1536.915:26542): avc:  denied  { read } for  pid=25124 comm="syz.4.5041" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1635.200063][   T30] audit: type=1400 audit(1536.915:26543): avc:  denied  { open } for  pid=25124 comm="syz.4.5041" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1635.234869][   T30] audit: type=1400 audit(1536.971:26544): avc:  denied  { mounton } for  pid=25110 comm="syz.0.5038" path="/file0" dev="ramfs" ino=103440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1635.338866][   T30] audit: type=1400 audit(1536.971:26545): avc:  denied  { mount } for  pid=25110 comm="syz.0.5038" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1635.367110][   T30] audit: type=1400 audit(1536.971:26546): avc:  denied  { mounton } for  pid=25110 comm="syz.0.5038" path="/file0" dev="ramfs" ino=103440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1635.390746][T25061] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.430309][   T30] audit: type=1400 audit(1536.971:26547): avc:  denied  { mount } for  pid=25110 comm="syz.0.5038" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1635.827291][T25061] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.862009][T21038] Bluetooth: hci5: command tx timeout
[ 1636.285537][T25130] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1636.593436][T25140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1636.672080][T25061] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1637.000001][T25061] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1637.092247][T25061] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1637.121457][T25061] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1637.137618][T25061] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1637.249056][T25061] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1637.347985][T25061] 8021q: adding VLAN 0 to HW filter on device team0
[ 1637.371016][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1637.378180][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1637.459333][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1637.466529][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1637.606944][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'.
[ 1637.618679][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5047'.
[ 1637.620380][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5048'.
[ 1638.149438][T21038] Bluetooth: hci5: command tx timeout
[ 1638.375276][T25174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5050'.
[ 1639.200422][T25061] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1639.514246][T25188] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5053'.
[ 1639.899041][T25188] kvm: kvm [25187]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xe6000000000000
[ 1640.110355][   T30] kauditd_printk_skb: 239 callbacks suppressed
[ 1640.110373][   T30] audit: type=1400 audit(1541.601:26787): avc:  denied  { create } for  pid=25187 comm="syz.1.5053" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1640.229741][   T30] audit: type=1400 audit(1541.601:26788): avc:  denied  { map } for  pid=25187 comm="syz.1.5053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1640.284957][   T30] audit: type=1400 audit(1541.601:26789): avc:  denied  { read write } for  pid=25187 comm="syz.1.5053" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=103637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1640.329461][   T30] audit: type=1400 audit(1541.639:26790): avc:  denied  { create } for  pid=25193 comm="syz.0.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1640.354500][   T30] audit: type=1400 audit(1541.639:26791): avc:  denied  { bind } for  pid=25193 comm="syz.0.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1640.562726][   T30] audit: type=1400 audit(1541.639:26792): avc:  denied  { accept } for  pid=25193 comm="syz.0.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1640.844823][   T30] audit: type=1400 audit(1541.639:26793): avc:  denied  { read } for  pid=25193 comm="syz.0.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1641.028212][   T30] audit: type=1400 audit(1541.639:26794): avc:  denied  { create } for  pid=25193 comm="syz.0.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1641.047696][   T30] audit: type=1400 audit(1541.648:26795): avc:  denied  { allowed } for  pid=25193 comm="syz.0.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1641.066745][   T30] audit: type=1400 audit(1541.648:26796): avc:  denied  { create } for  pid=25193 comm="syz.0.5055" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1641.111424][T25061] veth0_vlan: entered promiscuous mode
[ 1641.599594][T25061] veth1_vlan: entered promiscuous mode
[ 1641.621969][T25061] veth0_macvtap: entered promiscuous mode
[ 1641.632842][T25061] veth1_macvtap: entered promiscuous mode
[ 1641.646680][T25061] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1641.661162][T25061] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1641.674821][T24461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1641.699808][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'.
[ 1641.711211][T24461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1641.759309][T24461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1641.794472][T24461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1641.907612][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1641.942619][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1642.029941][T24461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.200552][T24461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.093576][ T9590] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1643.498014][ T9590] usb 6-1: Using ep0 maxpacket: 8
[ 1643.524259][ T9590] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1643.556779][ T9590] usb 6-1: config 0 has no interface number 0
[ 1643.574500][ T9590] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1643.586703][ T9590] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1643.598741][ T9590] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1643.627901][ T9590] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1643.672942][ T9590] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1643.695143][ T9590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.715762][ T9590] usb 6-1: config 0 descriptor??
[ 1643.740128][ T9590] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1644.730807][ T9590] usb 6-1: USB disconnect, device number 63
[ 1644.767610][ T9590] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1644.805986][T20111] bridge_slave_1: left allmulticast mode
[ 1644.811765][T20111] bridge_slave_1: left promiscuous mode
[ 1644.830815][T20111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1644.978045][T20111] bridge_slave_0: left allmulticast mode
[ 1644.990780][T20111] bridge_slave_0: left promiscuous mode
[ 1645.002041][T20111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1645.252725][T25264] comedi comedi3: pcl812: I/O port conflict (0x4f27,16)
[ 1645.496913][   T30] kauditd_printk_skb: 267 callbacks suppressed
[ 1645.496931][   T30] audit: type=1400 audit(1546.363:27064): avc:  denied  { create } for  pid=25254 comm="syz.4.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1645.836477][   T30] audit: type=1400 audit(1546.381:27065): avc:  denied  { create } for  pid=25254 comm="syz.4.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1645.895848][   T30] audit: type=1400 audit(1546.391:27066): avc:  denied  { ioctl } for  pid=25254 comm="syz.4.5072" path="socket:[105294]" dev="sockfs" ino=105294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1646.020092][   T30] audit: type=1400 audit(1546.391:27067): avc:  denied  { write } for  pid=25254 comm="syz.4.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1646.093771][   T30] audit: type=1400 audit(1546.391:27068): avc:  denied  { ioctl } for  pid=25254 comm="syz.4.5072" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1646.128747][   T30] audit: type=1400 audit(1546.428:27069): avc:  denied  { allowed } for  pid=25254 comm="syz.4.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1646.156677][   T30] audit: type=1400 audit(1546.437:27070): avc:  denied  { create } for  pid=25254 comm="syz.4.5072" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1646.182541][   T30] audit: type=1400 audit(1546.625:27071): avc:  denied  { prog_load } for  pid=25254 comm="syz.4.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1646.215597][   T30] audit: type=1400 audit(1546.625:27072): avc:  denied  { bpf } for  pid=25254 comm="syz.4.5072" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1646.240081][   T30] audit: type=1400 audit(1546.625:27073): avc:  denied  { perfmon } for  pid=25254 comm="syz.4.5072" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1646.461301][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1646.634476][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1646.659429][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1646.669172][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.685539][    T9] usb 1-1: config 0 descriptor??
[ 1647.140031][    T9] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor
[ 1647.155961][T20111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1647.172039][T20111] bond_slave_0: left allmulticast mode
[ 1647.178936][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003C/input/input132
[ 1647.197970][T20111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1647.208498][T20111] bond_slave_1: left allmulticast mode
[ 1647.215780][T20111] bond0 (unregistering): Released all slaves
[ 1647.240822][T20111] bond1 (unregistering): Released all slaves
[ 1647.347591][    T9] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1647.584629][T25259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.607567][T20111] k›*·]‘: left promiscuous mode
[ 1648.138717][T25281] openvswitch: netlink: Missing valid actions attribute.
[ 1648.201058][T25281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1648.211144][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5076'.
[ 1648.220397][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5076'.
[ 1648.317312][T25259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1648.341994][T21038] Bluetooth: hci2: command 0xfc11 tx timeout
[ 1648.349042][ T5858] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[ 1648.476706][T20111] tipc: Disabling bearer <udp:syz2>
[ 1648.495308][T20111] tipc: Left network mode
[ 1648.865050][ T5914] usb 1-1: USB disconnect, device number 21
[ 1648.906200][T25259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1649.115377][T25259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1649.238866][ T5950] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1649.317762][T20111] hsr_slave_0: left promiscuous mode
[ 1649.337874][T20111] hsr_slave_1: left promiscuous mode
[ 1649.357225][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1649.375505][T20111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1649.387472][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1649.406745][T20111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1649.420435][ T5950] usb 6-1: Using ep0 maxpacket: 8
[ 1649.438120][ T5950] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 1649.450454][ T5950] usb 6-1: New USB device strings: Mfr=30, Product=2, SerialNumber=3
[ 1649.452643][T20111] veth1_macvtap: left promiscuous mode
[ 1649.477753][T20111] veth0_macvtap: left promiscuous mode
[ 1649.483431][T20111] veth1_vlan: left promiscuous mode
[ 1649.494842][ T5950] usb 6-1: Product: syz
[ 1649.509585][ T5950] usb 6-1: Manufacturer: syz
[ 1649.514597][ T5950] usb 6-1: SerialNumber: syz
[ 1649.561486][ T5950] usb 6-1: config 0 descriptor??
[ 1649.796273][T25292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1650.437346][T25292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1650.479215][ T5950] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 1650.557398][T25304] random: crng reseeded on system resumption
[ 1650.935870][   T30] kauditd_printk_skb: 194 callbacks suppressed
[ 1650.936130][   T30] audit: type=1400 audit(1551.722:27268): avc:  denied  { recv } for  pid=5830 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1650.974271][   T30] audit: type=1400 audit(1551.722:27269): avc:  denied  { read write } for  pid=16906 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1651.000868][   T30] audit: type=1400 audit(1551.741:27270): avc:  denied  { open } for  pid=16906 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1651.028743][   T30] audit: type=1400 audit(1551.741:27271): avc:  denied  { ioctl } for  pid=16906 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1651.054693][   T30] audit: type=1400 audit(1551.751:27272): avc:  denied  { recv } for  pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1651.097574][   T30] audit: type=1400 audit(1551.779:27273): avc:  denied  { prog_load } for  pid=25305 comm="syz.4.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1651.120644][   T30] audit: type=1400 audit(1551.779:27274): avc:  denied  { bpf } for  pid=25305 comm="syz.4.5084" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1651.145566][   T30] audit: type=1400 audit(1551.779:27275): avc:  denied  { perfmon } for  pid=25305 comm="syz.4.5084" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1651.167215][   T30] audit: type=1400 audit(1551.788:27276): avc:  denied  { execmem } for  pid=25305 comm="syz.4.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1651.186444][   T30] audit: type=1400 audit(1551.863:27277): avc:  denied  { egress } for  pid=25305 comm="syz.4.5084" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[ 1651.231186][T20111] team0 (unregistering): Port device team_slave_1 removed
[ 1651.279456][T20111] team0 (unregistering): Port device team_slave_0 removed
[ 1651.701822][T18651] infiniband syz1: ib_query_port failed (-19)
[ 1651.731434][T20107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1651.754059][T20107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1651.779059][T20107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1651.804963][T20107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1651.994139][T25311] binder: 25309:25311 ioctl c018620c 200000000100 returned -1
[ 1652.377135][T20111] IPVS: stop unused estimator thread 0...
[ 1652.511750][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5085'.
[ 1652.520698][T25310] bridge_slave_1: left allmulticast mode
[ 1652.526334][T25310] bridge_slave_1: left promiscuous mode
[ 1652.532155][T25310] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1652.542978][T25310] bridge_slave_0: left allmulticast mode
[ 1652.548654][T25310] bridge_slave_0: left promiscuous mode
[ 1652.554412][T25310] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1652.792211][T25310] bond0: (slave bridge0): Releasing backup interface
[ 1653.462392][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5088'.
[ 1653.472047][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5088'.
[ 1653.588193][ T5950] usb write operation failed. (-71)
[ 1653.600076][ T5950] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1653.632723][ T5950] dvbdev: DVB: registering new adapter (Terratec H7)
[ 1653.639475][ T5950] usb 6-1: media controller created
[ 1653.701080][ T5950] usb read operation failed. (-71)
[ 1653.717815][ T5950] usb write operation failed. (-71)
[ 1653.758192][ T5950] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 1653.886964][ T5950] usb 6-1: USB disconnect, device number 64
[ 1655.490098][T25335] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5090'.
[ 1656.299075][   T30] kauditd_printk_skb: 165 callbacks suppressed
[ 1656.299098][   T30] audit: type=1400 audit(1556.746:27444): avc:  denied  { create } for  pid=25337 comm="syz.4.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1656.413871][   T30] audit: type=1400 audit(1556.727:27443): avc:  denied  { name_bind } for  pid=25339 comm="syz.0.5092" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1656.437827][   T30] audit: type=1400 audit(1556.774:27445): avc:  denied  { node_bind } for  pid=25339 comm="syz.0.5092" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 1656.458614][   T30] audit: type=1400 audit(1556.783:27446): avc:  denied  { write } for  pid=25339 comm="syz.0.5092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1656.477904][   T30] audit: type=1400 audit(1556.783:27447): avc:  denied  { connect } for  pid=25339 comm="syz.0.5092" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1656.498302][   T30] audit: type=1400 audit(1556.783:27448): avc:  denied  { name_connect } for  pid=25339 comm="syz.0.5092" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1656.520790][   T30] audit: type=1400 audit(1556.839:27449): avc:  denied  { read write } for  pid=25339 comm="syz.0.5092" name="radio1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1656.703849][T25335] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5090'.
[ 1656.767598][   T30] audit: type=1400 audit(1556.839:27450): avc:  denied  { open } for  pid=25339 comm="syz.0.5092" path="/dev/radio1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1656.831003][   T30] audit: type=1400 audit(1556.839:27451): avc:  denied  { listen } for  pid=25337 comm="syz.4.5094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1657.309189][   T30] audit: type=1400 audit(1556.839:27452): avc:  denied  { ioctl } for  pid=25339 comm="syz.0.5092" path="/dev/radio1" dev="devtmpfs" ino=956 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1657.780375][ T5914] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1658.307493][ T5914] usb 1-1: config 0 has no interfaces?
[ 1658.313707][ T5914] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1658.326632][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.341797][ T5914] usb 1-1: config 0 descriptor??
[ 1658.580431][T25361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.593181][T25361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1658.806623][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1659.057433][T25381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'.
[ 1659.066890][T25381] bridge_slave_1: left allmulticast mode
[ 1659.073359][T25381] bridge_slave_1: left promiscuous mode
[ 1659.079898][T25381] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1659.430071][T25381] bridge_slave_0: left allmulticast mode
[ 1659.435859][T25381] bridge_slave_0: left promiscuous mode
[ 1659.457924][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1659.469879][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1659.479834][T25381] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1659.494585][ T5914] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1659.507523][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.544375][ T5950] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13)
[ 1659.599351][ T5914] usb 5-1: config 0 descriptor??
[ 1659.615887][T25381] bond0: (slave bridge0): Releasing backup interface
[ 1659.916862][T25386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5105'.
[ 1659.927634][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5105'.
[ 1660.195436][ T5914] hid-steam 0003:28DE:1142.003D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[ 1660.196901][   T78] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.272828][   T78] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.281923][ T5914] hid-steam 0003:28DE:1142.003D: Steam wireless receiver connected
[ 1660.293559][   T78] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.335055][   T78] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1660.357118][ T5914] hid-steam 0003:28DE:1142.003E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[ 1661.650529][ T5914] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[ 1661.709609][   T30] kauditd_printk_skb: 186 callbacks suppressed
[ 1661.709625][   T30] audit: type=1400 audit(1561.805:27639): avc:  denied  { recv } for  pid=5830 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1661.839233][   T30] audit: type=1400 audit(1561.805:27640): avc:  denied  { recv } for  pid=78 comm="kworker/u8:4" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1661.921028][ T1056] usb 1-1: USB disconnect, device number 22
[ 1661.963756][   T30] audit: type=1400 audit(1561.842:27641): avc:  denied  { read write } for  pid=18458 comm="syz-executor" name="loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1662.254377][T25407] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1662.434888][   T30] audit: type=1400 audit(1561.842:27642): avc:  denied  { open } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1662.498704][   T30] audit: type=1400 audit(1561.842:27643): avc:  denied  { ioctl } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1662.620806][T25413] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1662.627561][T25413] audit: audit_lost=200 audit_rate_limit=0 audit_backlog_limit=64
[ 1662.635641][T25413] audit: backlog limit exceeded
[ 1662.642016][T25413] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1662.649240][T25413] audit: audit_lost=201 audit_rate_limit=0 audit_backlog_limit=64
[ 1662.751588][ T1056] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1663.189781][ T9590] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1663.214171][ T1056] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1663.279571][ T1056] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1663.629486][ T1056] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1663.641601][ T1056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.650617][ T1056] usb 1-1: Product: syz
[ 1663.654914][ T1056] usb 1-1: Manufacturer: syz
[ 1663.659575][ T1056] usb 1-1: SerialNumber: syz
[ 1663.998857][ T1056] usb 1-1: config 0 descriptor??
[ 1664.002628][ T9590] usb 7-1: Using ep0 maxpacket: 8
[ 1664.020536][ T9590] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1664.042167][ T9590] usb 7-1: config 0 has no interface number 0
[ 1664.054495][ T9590] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1664.070757][ T9590] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1664.141617][ T5950] usb 5-1: USB disconnect, device number 8
[ 1664.218300][ T9590] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1664.282377][T25425] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1664.289504][ T5950] hid-steam 0003:28DE:1142.003D: Steam wireless receiver disconnected
[ 1664.465483][ T9590] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1664.483583][ T9590] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1664.540496][ T9590] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1664.542043][ T1056] usb 1-1: USB disconnect, device number 23
[ 1664.598264][T25426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5116'.
[ 1664.608387][ T9590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.639653][T25428] netlink: 'syz.1.5117': attribute type 21 has an invalid length.
[ 1664.653695][T25428] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1664.666052][ T9590] usb 7-1: config 0 descriptor??
[ 1664.676656][ T9590] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1664.729393][T25430] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8)
[ 1666.514620][T19420] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1666.685041][T22782] usb 7-1: USB disconnect, device number 14
[ 1666.694850][T22782] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1666.903179][T19420] usb 2-1: Using ep0 maxpacket: 8
[ 1666.921959][T19420] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[ 1666.922049][T19420] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1666.922114][T19420] usb 2-1: config 1 has no interface number 1
[ 1666.922471][T19420] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7
[ 1666.939099][T19420] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1666.939191][T19420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1666.939256][T19420] usb 2-1: Product: syz
[ 1666.939315][T19420] usb 2-1: Manufacturer: syz
[ 1666.939373][T19420] usb 2-1: SerialNumber: syz
[ 1667.097009][   T30] kauditd_printk_skb: 300 callbacks suppressed
[ 1667.097030][   T30] audit: type=1400 audit(1566.790:27892): avc:  denied  { prog_load } for  pid=25442 comm="syz.6.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1667.097074][   T30] audit: type=1400 audit(1566.790:27893): avc:  denied  { bpf } for  pid=25442 comm="syz.6.5122" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1667.097111][   T30] audit: type=1400 audit(1566.790:27894): avc:  denied  { create } for  pid=25442 comm="syz.6.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1667.097148][   T30] audit: type=1400 audit(1566.809:27895): avc:  denied  { recv } for  pid=25448 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1667.097198][   T30] audit: type=1400 audit(1566.818:27896): avc:  denied  { ioctl } for  pid=25446 comm="syz.5.5123" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1667.097254][   T30] audit: type=1400 audit(1566.837:27897): avc:  denied  { prog_load } for  pid=25448 comm="syz.0.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1667.097289][   T30] audit: type=1400 audit(1566.837:27898): avc:  denied  { bpf } for  pid=25448 comm="syz.0.5124" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1667.196799][   T30] audit: type=1400 audit(1566.931:27899): avc:  denied  { read write } for  pid=25448 comm="syz.0.5124" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.197058][   T30] audit: type=1400 audit(1566.931:27900): avc:  denied  { open } for  pid=25448 comm="syz.0.5124" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.197397][   T30] audit: type=1400 audit(1566.931:27901): avc:  denied  { ioctl } for  pid=25448 comm="syz.0.5124" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.445218][T19420] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1668.257771][T19420] usb 2-1: 2:1 : unsupported format bits 0x80
[ 1668.321319][ T5950] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1668.436110][T19420] usb 2-1: USB disconnect, device number 21
[ 1668.492289][ T5950] usb 1-1: Using ep0 maxpacket: 8
[ 1669.841568][ T5950] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[ 1669.852345][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1669.860703][ T5950] usb 1-1: Product: syz
[ 1669.864199][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5123'.
[ 1669.879148][ T5950] usb 1-1: Manufacturer: syz
[ 1669.891747][ T5950] usb 1-1: SerialNumber: syz
[ 1669.905817][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'.
[ 1669.907843][ T5950] usb 1-1: config 0 descriptor??
[ 1669.926005][ T5950] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[ 1669.943691][ T5950] dvb-usb: bulk message failed: -22 (2/0)
[ 1669.956196][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1669.988337][ T5950] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[ 1670.004041][ T5950] usb 1-1: media controller created
[ 1670.032610][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1670.056591][ T5950] dvb-usb: bulk message failed: -22 (1/0)
[ 1670.062697][ T5950] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[ 1670.087763][ T5950] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input133
[ 1670.146168][ T5950] dvb-usb: schedule remote query interval to 50 msecs.
[ 1670.286794][ T5950] dvb-usb: bulk message failed: -22 (2/0)
[ 1670.360910][T19420] dvb-usb: bulk message failed: -22 (1/0)
[ 1670.369624][T19420] dvb-usb: error while querying for an remote control event.
[ 1670.384111][ T5950] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[ 1670.502246][T19420] dvb-usb: bulk message failed: -22 (1/0)
[ 1670.532776][T19420] dvb-usb: error while querying for an remote control event.
[ 1670.597985][T25451] nvme_fabrics: missing parameter 'transport=%s'
[ 1670.604561][T25451] nvme_fabrics: missing parameter 'nqn=%s'
[ 1670.619722][T19420] dvb-usb: bulk message failed: -22 (1/0)
[ 1670.638579][T19420] dvb-usb: error while querying for an remote control event.
[ 1670.707605][T19420] dvb-usb: bulk message failed: -22 (1/0)
[ 1670.841535][T19420] dvb-usb: error while querying for an remote control event.
[ 1670.923405][ T5950] dvb-usb: bulk message failed: -22 (1/0)
[ 1670.992910][ T5950] dvb-usb: error while querying for an remote control event.
[ 1671.410893][ T5950] dvb-usb: bulk message failed: -22 (1/0)
[ 1671.416793][ T5950] dvb-usb: error while querying for an remote control event.
[ 1671.571300][ T5950] dvb-usb: bulk message failed: -22 (1/0)
[ 1671.609661][ T5950] dvb-usb: error while querying for an remote control event.
[ 1671.755254][ T5950] dvb-usb: bulk message failed: -22 (1/0)
[ 1671.774543][ T5950] dvb-usb: error while querying for an remote control event.
[ 1671.786630][ T5950] usb 1-1: USB disconnect, device number 24
[ 1673.090550][   T30] kauditd_printk_skb: 174 callbacks suppressed
[ 1673.090563][   T30] audit: type=1400 audit(1571.701:28076): avc:  denied  { egress } for  pid=25494 comm="syz.6.5133" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[ 1673.158454][   T30] audit: type=1400 audit(1571.701:28077): avc:  denied  { sendto } for  pid=25494 comm="syz.6.5133" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[ 1673.364212][   T30] audit: type=1400 audit(1571.701:28078): avc:  denied  { recv } for  pid=25494 comm="syz.6.5133" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1673.599531][   T30] audit: type=1400 audit(1572.496:28079): avc:  denied  { create } for  pid=25495 comm="syz.0.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1673.677386][   T30] audit: type=1400 audit(1572.515:28080): avc:  denied  { create } for  pid=25495 comm="syz.0.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.867002][ T5950] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[ 1673.892916][   T30] audit: type=1400 audit(1572.637:28081): avc:  denied  { read write } for  pid=25495 comm="syz.0.5135" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1673.965843][   T30] audit: type=1400 audit(1572.637:28082): avc:  denied  { open } for  pid=25495 comm="syz.0.5135" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1674.150845][T25517] fuse: Bad value for 'fd'
[ 1674.478075][   T30] audit: type=1400 audit(1572.637:28083): avc:  denied  { ioctl } for  pid=25495 comm="syz.0.5135" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1675.762897][   T30] audit: type=1400 audit(1572.945:28084): avc:  denied  { allowed } for  pid=25495 comm="syz.0.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1675.794345][   T30] audit: type=1400 audit(1572.945:28085): avc:  denied  { create } for  pid=25495 comm="syz.0.5135" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1677.592008][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1677.664931][ T9590] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1677.752363][T25547] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1677.772501][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1677.786730][    T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1677.798499][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.823618][    T9] usb 1-1: Product: syz
[ 1677.833902][    T9] usb 1-1: Manufacturer: syz
[ 1677.846876][ T9590] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.859322][ T9590] usb 5-1: config 0 has no interfaces?
[ 1677.864809][ T9590] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1677.907403][    T9] usb 1-1: SerialNumber: syz
[ 1677.951688][ T9590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1677.963652][    T9] usb 1-1: config 0 descriptor??
[ 1677.991232][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[ 1678.013014][ T9590] usb 5-1: config 0 descriptor??
[ 1678.463870][   T30] kauditd_printk_skb: 236 callbacks suppressed
[ 1678.463901][   T30] audit: type=1400 audit(1577.473:28322): avc:  denied  { allowed } for  pid=25565 comm="syz.1.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1678.491029][    T9] gspca_se401: ExtraFeatures: 97
[ 1678.496179][    T9] gspca_se401: Too many frame sizes
[ 1678.505040][   T30] audit: type=1400 audit(1577.473:28323): avc:  denied  { create } for  pid=25565 comm="syz.1.5154" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1678.535085][   T30] audit: type=1400 audit(1577.473:28324): avc:  denied  { map } for  pid=25565 comm="syz.1.5154" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1678.561388][   T30] audit: type=1400 audit(1577.473:28325): avc:  denied  { read write } for  pid=25565 comm="syz.1.5154" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1678.589823][   T30] audit: type=1400 audit(1577.510:28326): avc:  denied  { ioctl } for  pid=25538 comm="syz.0.5145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.621769][   T30] audit: type=1400 audit(1577.538:28327): avc:  denied  { recv } for  pid=5830 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1678.650033][   T30] audit: type=1400 audit(1577.538:28328): avc:  denied  { recv } for  pid=18458 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1678.843209][ T5914] usb 1-1: USB disconnect, device number 25
[ 1678.862627][   T30] audit: type=1400 audit(1577.548:28329): avc:  denied  { read write } for  pid=18458 comm="syz-executor" name="loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1678.922105][   T30] audit: type=1400 audit(1577.548:28330): avc:  denied  { open } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1678.968788][   T30] audit: type=1400 audit(1577.548:28331): avc:  denied  { ioctl } for  pid=18458 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=4675 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1680.324686][T25578] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1680.493546][ T9590] usb 5-1: string descriptor 0 read error: -71
[ 1680.535066][ T9590] usb 5-1: USB disconnect, device number 9
[ 1680.649297][T25535] delete_channel: no stack
[ 1681.085811][T22782] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[ 1681.293892][T22782] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1681.304624][T22782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1681.315913][T22782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[ 1681.327565][T22782] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1681.350975][T22782] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1681.363762][T22782] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1681.386691][T22782] usb 1-1: Manufacturer: syz
[ 1681.409530][T22782] usb 1-1: config 0 descriptor??
[ 1681.628019][T25612] vcan0: tx address claim with dlc 0
[ 1681.823682][T22782] rc_core: IR keymap rc-hauppauge not found
[ 1681.828623][ T5858] Bluetooth: hci1: SCO packet for unknown connection handle 0
[ 1681.829646][T22782] Registered IR keymap rc-empty
[ 1681.861107][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1682.264594][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1682.385966][T25630] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5165'.
[ 1683.019690][T22782] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1683.155073][T22782] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input134
[ 1683.301523][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.368321][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.451566][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.491411][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.529492][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.590831][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.662471][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.813605][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.814166][   T30] kauditd_printk_skb: 299 callbacks suppressed
[ 1683.814179][   T30] audit: type=1400 audit(1582.477:28631): avc:  denied  { recv } for  pid=25579 comm="syz.0.5159" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1683.851527][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1683.878974][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.943152][T22782] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 1683.969073][   T30] audit: type=1400 audit(1582.627:28632): avc:  denied  { create } for  pid=25641 comm="syz.1.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1684.016901][T22782] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1684.034637][T22782] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1684.455065][   T30] audit: type=1400 audit(1582.683:28633): avc:  denied  { name_bind } for  pid=25641 comm="syz.1.5173" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1684.476372][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1684.555787][   T30] audit: type=1400 audit(1582.683:28634): avc:  denied  { node_bind } for  pid=25641 comm="syz.1.5173" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1684.633065][   T30] audit: type=1400 audit(1582.692:28635): avc:  denied  { create } for  pid=25641 comm="syz.1.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1684.652108][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1684.744938][ T5914] usb 1-1: USB disconnect, device number 26
[ 1685.326066][   T30] audit: type=1400 audit(1582.702:28636): avc:  denied  { read } for  pid=25641 comm="syz.1.5173" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1685.464326][T25659] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1685.470927][T25659] audit: audit_lost=219 audit_rate_limit=0 audit_backlog_limit=64
[ 1685.478754][T25659] audit: backlog limit exceeded
[ 1685.802618][   T30] audit: type=1400 audit(1582.702:28637): avc:  denied  { read open } for  pid=25641 comm="syz.1.5173" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1685.910923][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5176'.
[ 1686.297167][T25668] openvswitch: netlink: Message has 8 unknown bytes.
[ 1686.709202][ T5914] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1686.885251][T25671] netlink: 'syz.6.5181': attribute type 1 has an invalid length.
[ 1686.903018][T25671] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5181'.
[ 1686.977116][ T5914] usb 6-1: config 0 has an invalid interface number: 84 but max is 0
[ 1687.088749][T25673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25673 comm=syz.6.5181
[ 1687.090422][ T5914] usb 6-1: config 0 has an invalid interface number: 66 but max is 0
[ 1687.118742][T25673] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5181'.
[ 1687.165746][ T5914] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1687.393420][ T5914] usb 6-1: config 0 has no interface number 0
[ 1687.419821][ T5914] usb 6-1: config 0 has no interface number 1
[ 1687.512219][ T5914] usb 6-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[ 1687.580883][ T5914] usb 6-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1688.616101][ T5914] usb 6-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[ 1688.654882][ T5914] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[ 1688.669861][ T5914] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[ 1688.686965][ T5914] usb 6-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[ 1688.700192][ T5914] usb 6-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024
[ 1688.712308][ T5914] usb 6-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024
[ 1688.723200][ T5914] usb 6-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[ 1688.746331][ T5914] usb 6-1: config 0 interface 66 has no altsetting 0
[ 1688.756484][ T5914] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[ 1688.773334][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.785236][ T5914] usb 6-1: Product: syz
[ 1688.789516][ T5914] usb 6-1: Manufacturer: syz
[ 1688.794263][ T5914] usb 6-1: SerialNumber: syz
[ 1688.801411][ T5914] usb 6-1: config 0 descriptor??
[ 1688.809262][ T5914] ljca 6-1:0.84: bulk endpoints not found
[ 1689.180119][   T30] kauditd_printk_skb: 200 callbacks suppressed
[ 1689.180134][   T30] audit: type=1400 audit(1587.500:28838): avc:  denied  { create } for  pid=25661 comm="syz.5.5179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1689.232134][   T30] audit: type=1400 audit(1587.528:28839): avc:  denied  { read } for  pid=25661 comm="syz.5.5179" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1689.267808][T25663] netlink: 'syz.5.5179': attribute type 10 has an invalid length.
[ 1689.289535][T25663] team0: Port device dummy0 added
[ 1689.321450][   T30] audit: type=1400 audit(1587.528:28840): avc:  denied  { open } for  pid=25661 comm="syz.5.5179" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1689.620528][   T30] audit: type=1400 audit(1587.528:28841): avc:  denied  { watch watch_reads } for  pid=25661 comm="syz.5.5179" path="/23" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1689.647544][   T30] audit: type=1400 audit(1587.538:28842): avc:  denied  { read } for  pid=25661 comm="syz.5.5179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1689.685764][   T30] audit: type=1400 audit(1587.631:28843): avc:  denied  { recv } for  pid=25684 comm="syz.6.5185" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1689.718272][   T30] audit: type=1400 audit(1587.678:28844): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1689.750184][   T30] audit: type=1400 audit(1587.678:28845): avc:  denied  { read write } for  pid=22447 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1689.805781][   T30] audit: type=1400 audit(1587.678:28846): avc:  denied  { open } for  pid=22447 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1689.836212][   T30] audit: type=1400 audit(1587.678:28847): avc:  denied  { ioctl } for  pid=22447 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1690.896410][ T5914] ljca 6-1:0.66: probe with driver ljca failed with error -71
[ 1691.019953][ T5914] usb 6-1: USB disconnect, device number 65
[ 1691.031466][T25705] openvswitch: netlink: Message has 8 unknown bytes.
[ 1691.890097][T25721] netlink: 'syz.5.5194': attribute type 2 has an invalid length.
[ 1692.131542][T25733] Invalid ELF header magic: != ELF
[ 1692.580004][T25738] sctp: [Deprecated]: syz.4.5195 (pid 25738) Use of int in max_burst socket option.
[ 1692.580004][T25738] Use struct sctp_assoc_value instead
[ 1692.694743][T25737] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1692.694743][T25737]    program syz.1.5198 not setting count and/or reply_len properly
[ 1692.730640][T25731] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1693.162690][T25746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5200'.
[ 1693.643956][T25769] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5209'.
[ 1693.696718][T25768] wg1 speed is unknown, defaulting to 1000
[ 1694.630668][   T30] kauditd_printk_skb: 266 callbacks suppressed
[ 1694.637123][   T30] audit: type=1400 audit(1592.598:29114): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1694.781975][   T30] audit: type=1400 audit(1592.748:29115): avc:  denied  { recv } for  pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1696.322285][   T30] audit: type=1400 audit(1594.188:29116): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1696.673368][   T30] audit: type=1400 audit(1594.516:29117): avc:  denied  { recv } for  pid=18022 comm="ipvs-e:21:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1696.743074][   T30] audit: type=1400 audit(1594.572:29118): avc:  denied  { read write } for  pid=25061 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1696.770230][   T30] audit: type=1400 audit(1594.572:29119): avc:  denied  { read write } for  pid=16906 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1699.878292][   T30] audit: type=1400 audit(1597.509:29120): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1700.345071][   T30] audit: type=1400 audit(1597.949:29121): avc:  denied  { recv } for  pid=19420 comm="kworker/1:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1701.024698][   T30] audit: type=1400 audit(1598.585:29122): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[ 1706.787055][   T30] audit: type=1400 audit(1603.973:29123): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1707.869213][   T30] audit: type=1400 audit(1604.983:29124): avc:  denied  { recv } for  pid=20109 comm="kworker/u8:16" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1708.551295][   T30] audit: type=1400 audit(1605.628:29125): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[ 1720.354957][   T30] audit: type=1400 audit(1616.666:29126): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1722.920711][   T30] audit: type=1400 audit(1619.061:29127): avc:  denied  { recv } for  pid=20107 comm="kworker/u8:14" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1748.519069][   T30] audit: type=1400 audit(1643.007:29128): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1752.343158][   T30] audit: type=1400 audit(1646.589:29129): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1761.407260][ T5858] Bluetooth: hci5: command 0x0406 tx timeout
[ 1770.129650][   T30] audit: type=1400 audit(1663.221:29130): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[ 1781.079332][   T30] audit: type=1400 audit(1673.463:29131): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[ 1803.810777][   T30] audit: type=1400 audit(1694.725:29132): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1813.920535][   T30] audit: type=1400 audit(1704.182:29133): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52084 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[ 1848.811087][   T31] INFO: task kworker/1:7:5963 blocked for more than 143 seconds.
[ 1848.818842][   T31]       Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0
[ 1848.826672][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1848.835506][   T31] task:kworker/1:7     state:D stack:22280 pid:5963  tgid:5963  ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1848.847569][   T31] Workqueue: usb_hub_wq hub_event
[ 1848.852609][   T31] Call Trace:
[ 1848.855949][   T31]  <TASK>
[ 1848.858884][   T31]  __schedule+0x1190/0x5de0
[ 1848.863412][   T31]  ? __pfx___schedule+0x10/0x10
[ 1848.868371][   T31]  ? find_held_lock+0x2b/0x80
[ 1848.873301][   T31]  ? schedule+0x2d7/0x3a0
[ 1848.878005][   T31]  schedule+0xe7/0x3a0
[ 1848.882103][   T31]  usb_kill_urb+0x253/0x320
[ 1848.886649][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 1848.891706][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1848.897982][   T31]  ? lockdep_init_map_type+0x10/0x280
[ 1848.903380][   T31]  usb_start_wait_urb+0x250/0x4b0
[ 1848.908531][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1848.914076][   T31]  ? __asan_memset+0x23/0x50
[ 1848.918723][   T31]  usb_control_msg+0x326/0x4a0
[ 1848.923513][   T31]  ? __pfx_usb_control_msg+0x10/0x10
[ 1848.928888][   T31]  get_bMaxPacketSize0.constprop.0+0xd0/0x1f0
[ 1848.934972][   T31]  hub_port_init+0x690/0x3a70
[ 1848.939830][   T31]  hub_event+0x2ce1/0x4fe0
[ 1848.944272][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1848.949031][   T31]  ? interval_tree_remove+0x90/0xee0
[ 1848.954336][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1848.959101][   T31]  process_one_work+0x9cc/0x1b70
[ 1848.964064][   T31]  ? __pfx_hcd_resume_work+0x10/0x10
[ 1848.969374][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1848.974762][   T31]  ? assign_work+0x1a0/0x250
[ 1848.979344][   T31]  worker_thread+0x6c8/0xf10
[ 1848.984461][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1848.989598][   T31]  kthread+0x3c5/0x780
[ 1848.993718][   T31]  ? __pfx_kthread+0x10/0x10
[ 1848.998330][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1849.003135][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.007990][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1849.012615][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.017235][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1849.022017][   T31]  </TASK>
[ 1849.025305][   T31] 
[ 1849.025305][   T31] Showing all locks held in the system:
[ 1849.033045][   T31] 1 lock held by khungtaskd/31:
[ 1849.037912][   T31]  #0: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1849.047803][   T31] 2 locks held by getty/5605:
[ 1849.052469][   T31]  #0: ffff8880362080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1849.062238][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1849.072368][   T31] 5 locks held by kworker/1:7/5963:
[ 1849.077557][   T31]  #0: ffff888021e82d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1849.088371][   T31]  #1: ffffc900054e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1849.100079][   T31]  #2: ffff88802aa3c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0
[ 1849.109020][   T31]  #3: ffff88802aa3f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0
[ 1849.119152][   T31]  #4: ffff88802a5f5368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0
[ 1849.128918][   T31] 
[ 1849.131247][   T31] =============================================
[ 1849.131247][   T31] 
[ 1849.139720][   T31] NMI backtrace for cpu 0
[ 1849.139733][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[ 1849.139754][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1849.139765][   T31] Call Trace:
[ 1849.139772][   T31]  <TASK>
[ 1849.139780][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1849.139803][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1849.139828][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1849.139857][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1849.139883][   T31]  watchdog+0xf0e/0x1260
[ 1849.139907][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1849.139924][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1849.139942][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1849.139969][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1849.139993][   T31]  kthread+0x3c5/0x780
[ 1849.140011][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.140029][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1849.140051][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.140072][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1849.140089][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.140107][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1849.140140][   T31]  </TASK>
[ 1849.140160][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1849.258926][    C1] NMI backtrace for cpu 1
[ 1849.258941][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[ 1849.258961][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1849.258969][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1849.258987][    C1] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 c2 16 00 fb f4 <e9> 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1849.259001][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2
[ 1849.259012][    C1] RAX: 00000000090d6967 RBX: 0000000000000001 RCX: ffffffff8b934c29
[ 1849.259021][    C1] RDX: 0000000000000000 RSI: ffffffff8de4f205 RDI: ffffffff8c162580
[ 1849.259030][    C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655
[ 1849.259038][    C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001
[ 1849.259047][    C1] R13: ffff88801e2ea440 R14: ffffffff90ab3690 R15: 0000000000000000
[ 1849.259056][    C1] FS:  0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000
[ 1849.259070][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1849.259079][    C1] CR2: 000055f145cd6168 CR3: 000000000e380000 CR4: 00000000003526f0
[ 1849.259088][    C1] Call Trace:
[ 1849.259093][    C1]  <TASK>
[ 1849.259098][    C1]  default_idle+0x13/0x20
[ 1849.259113][    C1]  default_idle_call+0x6d/0xb0
[ 1849.259127][    C1]  do_idle+0x391/0x510
[ 1849.259145][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1849.259161][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[ 1849.259177][    C1]  cpu_startup_entry+0x4f/0x60
[ 1849.259192][    C1]  start_secondary+0x21d/0x2b0
[ 1849.259212][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1849.259240][    C1]  common_startup_64+0x13e/0x148
[ 1849.259259][    C1]  </TASK>
[ 1849.259994][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1849.260007][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) 
[ 1849.260026][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1849.260035][   T31] Call Trace:
[ 1849.260041][   T31]  <TASK>
[ 1849.260047][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1849.260066][   T31]  vpanic+0x6e8/0x7a0
[ 1849.260088][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1849.260112][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[ 1849.260132][   T31]  panic+0xca/0xd0
[ 1849.260153][   T31]  ? __pfx_panic+0x10/0x10
[ 1849.260175][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1849.260197][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[ 1849.260219][   T31]  ? watchdog+0xd78/0x1260
[ 1849.260235][   T31]  ? watchdog+0xd6b/0x1260
[ 1849.260252][   T31]  watchdog+0xd89/0x1260
[ 1849.260272][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1849.260287][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1849.260304][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1849.260326][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1849.260342][   T31]  kthread+0x3c5/0x780
[ 1849.260358][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.260374][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1849.260393][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.260409][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1849.260423][   T31]  ? __pfx_kthread+0x10/0x10
[ 1849.260438][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1849.260466][   T31]  </TASK>
[ 1849.571631][   T31] Kernel Offset: disabled
[ 1849.575939][   T31] Rebooting in 86400 seconds..