last executing test programs:

16.860869803s ago: executing program 4 (id=259):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000004c0), 0x0, 0x0, 0x1, 0x1}, 0x28)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)={0x14, 0x43, 0x9, 0x0, 0x3, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000040)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8)
socket(0x23, 0x1, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4044004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x4, 0x400, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}})
socket$netlink(0x10, 0x3, 0x13)

15.778267435s ago: executing program 4 (id=262):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3})
sendmmsg$inet(r2, 0x0, 0x0, 0xf00)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0xffffffffffffffc8, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbf7, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000)

14.128159168s ago: executing program 2 (id=266):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x4674, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(r0, 0x0, 0x9)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(0x0, 0x2, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x1)
syz_open_dev$video4linux(0x0, 0x401, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create1(0x0)
r5 = inotify_init1(0x0)
r6 = dup(r5)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0x40002013})
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00')
read$eventfd(r7, &(0x7f0000000340), 0x8)
io_setup(0x202, &(0x7f0000000200)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000340)="896102aecdfcc44f", 0xfdfc, 0x2, 0x0, 0xf400}])
socketpair(0x1a, 0x3, 0x100, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'})
syz_genetlink_get_family_id$ethtool(0x0, r3)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
eventfd2(0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x4008800)

13.558428877s ago: executing program 1 (id=267):
r0 = socket$inet6(0xa, 0x2, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x30)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r3, @ANYRES32=r0, @ANYBLOB="0000000000cd3f428b64aabda5e5ade63199b8000700000200150000"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000004a090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000f2ffffff9500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54030000005d01c148cd9a564c90c200", 0x20)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x200000000006, 0x7, 0x0, 0x7ffc0002}, {0x8, 0x9, 0x0, 0x8c6}]})
rt_sigpending(0x0, 0x0)

12.615369744s ago: executing program 1 (id=268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev})
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
timerfd_create(0x9, 0x0)
tkill(r4, 0xb)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56, 0x0, 0x0, 0xf4240}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r7, 0x838, 0xb757, 0x26, &(0x7f0000000180)={[0xffffffffffffff04]}, 0x8)
bind$netrom(r7, &(0x7f00000002c0)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)

12.614514883s ago: executing program 3 (id=269):
inotify_init()
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]})
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, r2, 0x0)
fanotify_init(0x200, 0x40800)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

12.144166462s ago: executing program 2 (id=270):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x6, &(0x7f0000000200)=[{0x6, 0x2, 0x9, 0x7fff0003}, {0x1, 0x75, 0x7, 0x5}, {0x8000, 0x3, 0x4, 0x1}, {0xb, 0x0, 0x80, 0x2}]})
getpriority(0x2, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r2 = fanotify_init(0x4, 0x101801)
fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x14)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x18)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[], 0x20)
syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/241, 0xf1}], 0x2, 0x10006, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
gettid()
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'})

11.60375712s ago: executing program 4 (id=272):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2f7fffbff}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0xbd3, 0x8, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0xc)
bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000100)=0x5)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
unlinkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a01e7168da0dc0000000004000400000000000000000800"}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

11.560119944s ago: executing program 1 (id=273):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r4 = accept(r3, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x46, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x5, {0x80, 0x9, 0xf, 0x4}})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0)

10.619865577s ago: executing program 3 (id=274):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x10, 0xffffffffffffffff, 0x0)
userfaultfd(0x80801)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008800)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={<r4=>r3})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000005c0)="aac37124274b42766e60487ccfe56e864276cf57a71fab4d37c9e93e57491e0fcc234a5489934be9c12f61f991992e435cd9bb8c1e199fd13b1ad9a490e8064f5d9bb1b9ad483addc146757f60ca0de1150ccc507605507d886012a7a9e295cd38337412dd84df7ac316df5a5e66db5537a2c1db6f21035d1de6d6c6434a232cf0f1a275f52b7a9527929a1c40e0c66cb16152bb0b8dea2c3fcb91379db003c86dc3ecc5cd32ca9c5acd3d084a40714019615a89f2a9151275148507dbc0699383329838eabb42547b15b6b3b3ceac5a1348019453d6baf451602d5dae53996d07a503a0db", 0xe5}, {&(0x7f0000000480)="ced10e468195c739b074d3f44eea75c485dc910be904413ca53fd827dbffde140a349ea249b1180d4189a1391bfba1d6337248b67ce2fa58709250a993f4f34ba2f0a5c82dd8be749369a224556a217695bbdee8d00338", 0x57}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="312abe32f2bee970028bbf23baee70c9b8a6a76913e289a6ae5d8867f46726fdb1f11ce3f66fff0ad221d4d1b881ae4bcb90883be88ed6e1ffa39e92f959775d7e777b54f6488ea446c59aa864a24a08b8308f506a5afbc81f7d1561122e152e18e28a48842f8ea2691282af8c60384da2d04fe029ea686e94a90df52b2508f40ce7fe3c5308dd57c2155b1e1de4f9a879c55c3cdbd125851a142ceaa3d9c761496468662d7aa305d55c25b17f17128da75928e61d5d0a8381cf3925430294ffb9fe", 0xc2}, {&(0x7f0000000840)="1de6b314201312c3082cfd9ff9738973b96cc5bc0d3b5b2298f145e118dc70d2726393f2ff13d1715cecec9680a4cdcd4d532e1b4fd895afb44cafec14ab91e6bfe4203d91a57ca5e78e24f41856b9e2093edb4922c20036a783249c3e7b6e7318fe5a2595b6ccdf2c4015dfab5ab30050278c8ec90bcd967f062e2d2c973a", 0x7f}], 0x6, &(0x7f0000000940)=[{0x80, 0x116, 0x0, "755b30aa81ef9c7e99e55ceb50bdacefb63163d8286d1ba6affbf8aeef2a7047a6a0f8fd42f65cc2c13099e940c75797c35dbd218479a371460f70c8cfcb2d3a2c2d7b007c45053f99a0c35982b7577d211267bb209c4c73880d03d2b0598eadb9aca4b8552420dd2c399fc1b8e4a1"}, {0x58, 0xff, 0x9, "6b644b1907998113df1bcda60da5cd6faa198a7934699ee23073c2ef525258dd5265e13dad68242bc20bdbed201f2569ed61a1dc99dc808ceaf56e0aef1b3792d94a4c1422920d"}, {0xa0, 0x10d, 0x4713, "b13b98205748c3b6929db10fe5bb63cd98fe104d2791395717adb352f06d8917eb9e38e52b0e5a7f4db27ccf213f2ae91c9c60f32a9ade85c65526bf0c03541ed79c59e19b9ed292ee98ef2f0c248e6471657c2f68b1a8033586dcf8518dbc69a01dfe7774be4a530a50d4dfaeda6fbb3a0e65765114c90ecb42d78f45e42c4068425c93e2078e8a6e2742"}], 0x178}, 0x5)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20)
close(r3)

9.586643953s ago: executing program 3 (id=276):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r5, &(0x7f0000000200)="a38d", 0x2)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000500)='./bus\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39777c09, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4483}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x1000, &(0x7f0000001480)=""/4096, 0x100, 0x4, '\x00', 0x0, @fallback=0x24, r9, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff]}, 0x94)
r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x20000000)
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000107}]})

9.543367265s ago: executing program 0 (id=277):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, @local}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0xbc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0x3}, 0xffffffffffffffff, 0x0, 0x5, 0x800000000003c0, 0x2b, 0xffffffffffffff5d, 0x35, 0x100000000}}], 0x58}, 0x0)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000240)='./bus/file0\x00', 0x600000, 0x10)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r9 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x490000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r10=>0x0], 0x0, 0x0, 0xfffffd52, 0x1, 0xb})
ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000080)={0x3, r10, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0)

8.494506846s ago: executing program 0 (id=278):
r0 = socket$inet6(0xa, 0x2, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x30)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r3, @ANYRES32=r0, @ANYBLOB="0000000000cd3f428b64aabda5e5ade63199b8000700000200150000"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000004a090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000f2ffffff9500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54030000005d01c148cd9a564c90c200", 0x20)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10)
rt_sigpending(0x0, 0x0)

8.421533081s ago: executing program 2 (id=279):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff})
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r7 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200)
read(r7, 0x0, 0x2)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

7.592697954s ago: executing program 4 (id=280):
inotify_init()
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]})
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, r2, 0x0)
fanotify_init(0x200, 0x40800)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.53581867s ago: executing program 0 (id=281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RTC_ALM_SET(r5, 0x40247007, 0x0)
accept$alg(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
read$FUSE(r7, &(0x7f0000000280)={0x2020}, 0x2020)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002380)=@deltaction={0xa0, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)

6.520889123s ago: executing program 1 (id=282):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000040))
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYRES32=r9, @ANYBLOB="000000000000000014011a80400002803c000180080021"], 0x134}}, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
shutdown(r0, 0x0)
sendfile(r0, r10, 0x0, 0xdc)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0)

5.758412423s ago: executing program 3 (id=283):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3})
sendmmsg$inet(r2, 0x0, 0x0, 0xf00)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0xffffffffffffffc8, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbf7, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000)

5.406154757s ago: executing program 2 (id=284):
inotify_init()
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]})
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, r2, 0x0)
fanotify_init(0x200, 0x40800)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5.210973444s ago: executing program 4 (id=285):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd)
fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)=""/100, 0x64)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000180)=0x1, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', <r13=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x3, 0x200003}, {0x6, 0x0, 0xff, 0x40000000}]})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x64)
write$ppp(r0, &(0x7f0000000680)=':`', 0x2)

5.046836441s ago: executing program 0 (id=286):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f00000004c0), 0x0, 0x0, 0x1, 0x1}, 0x28)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)={0x14, 0x43, 0x9, 0x0, 0x3, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000040)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8)
socket(0x23, 0x1, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4044004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x1, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x4, 0x400, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}})
socket$netlink(0x10, 0x3, 0x13)

4.192645643s ago: executing program 0 (id=287):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r5 = inotify_init1(0x80800)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6)
inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8)
sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000034000900000000caae9e7f531771b3be0000000000030000000c000300332f34122ee5f6c7"], 0x20}}, 0x4000010)
write$6lowpan_control(r3, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

3.30008077s ago: executing program 1 (id=288):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000a, 0x5}, 0x0)
sched_setscheduler(0x0, 0x7, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$l2tp(0x2, 0x2, 0x73)
syz_open_procfs(0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
ptrace(0x10, r2)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0xffffffffffffffff, 0x3, 0x5002)
add_key(0x0, 0x0, &(0x7f00000000c0)="df21f0a6dbb1b350a5b5f9e27b2508088febecff9e1926774b1aacfb67", 0x1d, 0xfffffffffffffffe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100000000000000"])
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000dc0)=ANY=[@ANYBLOB="01000000000000f28b04"])
ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001)

2.468116082s ago: executing program 2 (id=289):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, @local}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0xbc)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0x3}, 0xffffffffffffffff, 0x0, 0x5, 0x800000000003c0, 0x2b, 0xffffffffffffff5d, 0x35, 0x100000000}}], 0x58}, 0x0)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000240)='./bus/file0\x00', 0x600000, 0x10)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r9 = syz_open_dev$dri(&(0x7f00000001c0), 0x1ff, 0x490000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r10=>0x0], 0x0, 0x0, 0xfffffd52, 0x1, 0xb})
ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000080)={0x3, r10, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.357768431s ago: executing program 3 (id=290):
lsm_set_self_attr(0x65, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x4, 0x5}, &(0x7f0000000240)=0x18)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=<r1=>0x0)
prlimit64(r1, 0x2, &(0x7f0000000140)={0x0, 0x100000000000008b}, 0x0)
r2 = socket(0x28, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r5}, 0x10)
r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r9, 0x25, 0x2, @void}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
bpf$LINK_DETACH(0x22, 0x0, 0x0)

2.22631486s ago: executing program 1 (id=291):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2f7fffbff}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0xbd3, 0x8, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0xc)
bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000100)=0x5)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
unlinkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a01e7168da0dc0000000004000400000000000000000800"}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.307898576s ago: executing program 2 (id=292):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000a0}, 0x4000004)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
mincore(&(0x7f0000600000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/189)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$getregs(0xe, 0x0, 0x81, &(0x7f00000001c0)=""/132)
ioctl$BLKFRASET(r1, 0x1264, 0x0)
r3 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
sched_setscheduler(r3, 0x6, &(0x7f0000000040)=0xbbb)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x1, {0x0, 0xff}}, 0x18)
socket$packet(0x11, 0x2, 0x300)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, r6, 0x0, {0x2, 0xf0, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="080300", 0x3}, 0x1, 0x0, 0x0, 0x20008850}, 0x404807e)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
r8 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x589702, 0x9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x18)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

561.345201ms ago: executing program 3 (id=293):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r4, &(0x7f0000000200)="a38d", 0x2)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r7, 0x2007ffb)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000500)='./bus\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39777c09, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4483}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x1000, &(0x7f0000001480)=""/4096, 0x100, 0x4, '\x00', 0x0, @fallback=0x24, r8, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff]}, 0x94)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000107}]})

503.1037ms ago: executing program 4 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000fee000)=0xa9f, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x74}}, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioperm(0x9, 0x9, 0x7)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

0s ago: executing program 0 (id=295):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x10, 0xffffffffffffffff, 0x0)
userfaultfd(0x80801)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008800)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={<r4=>r3})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f00000005c0)="aac37124274b42766e60487ccfe56e864276cf57a71fab4d37c9e93e57491e0fcc234a5489934be9c12f61f991992e435cd9bb8c1e199fd13b1ad9a490e8064f5d9bb1b9ad483addc146757f60ca0de1150ccc507605507d886012a7a9e295cd38337412dd84df7ac316df5a5e66db5537a2c1db6f21035d1de6d6c6434a232cf0f1a275f52b7a9527929a1c40e0c66cb16152bb0b8dea2c3fcb91379db003c86dc3ecc5cd32ca9c5acd3d084a40714019615a89f2a9151275148507dbc0699383329838eabb42547b15b6b3b3ceac5a1348019453d6baf451602d5dae53996d07a503a0db", 0xe5}, {&(0x7f0000000480)="ced10e468195c739b074d3f44eea75c485dc910be904413ca53fd827dbffde140a349ea249b1180d4189a1391bfba1d6337248b67ce2fa58709250a993f4f34ba2f0a5c82dd8be749369a224556a217695bbdee8d00338", 0x57}, {&(0x7f00000006c0)}, {&(0x7f0000000840)="1de6b314201312c3082cfd9ff9738973b96cc5bc0d3b5b2298f145e118dc70d2726393f2ff13d1715cecec9680a4cdcd4d532e1b4fd895afb44cafec14ab91e6bfe4203d91a57ca5e78e24f41856b9e2093edb4922c20036a783249c3e7b6e7318fe5a2595b6ccdf2c4015dfab5ab30050278c8ec90bcd967f062e2d2c973a", 0x7f}], 0x5, &(0x7f0000000940)=[{0x80, 0x116, 0x0, "755b30aa81ef9c7e99e55ceb50bdacefb63163d8286d1ba6affbf8aeef2a7047a6a0f8fd42f65cc2c13099e940c75797c35dbd218479a371460f70c8cfcb2d3a2c2d7b007c45053f99a0c35982b7577d211267bb209c4c73880d03d2b0598eadb9aca4b8552420dd2c399fc1b8e4a1"}, {0x58, 0xff, 0x9, "6b644b1907998113df1bcda60da5cd6faa198a7934699ee23073c2ef525258dd5265e13dad68242bc20bdbed201f2569ed61a1dc99dc808ceaf56e0aef1b3792d94a4c1422920d"}, {0xa0, 0x10d, 0x4713, "b13b98205748c3b6929db10fe5bb63cd98fe104d2791395717adb352f06d8917eb9e38e52b0e5a7f4db27ccf213f2ae91c9c60f32a9ade85c65526bf0c03541ed79c59e19b9ed292ee98ef2f0c248e6471657c2f68b1a8033586dcf8518dbc69a01dfe7774be4a530a50d4dfaeda6fbb3a0e65765114c90ecb42d78f45e42c4068425c93e2078e8a6e2742"}], 0x178}, 0x5)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20)
close(r3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts.
[   64.754876][   T30] audit: type=1400 audit(1755233870.729:62): avc:  denied  { mounton } for  pid=5830 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   64.758278][ T5830] cgroup: Unknown subsys name 'net'
[   64.777860][   T30] audit: type=1400 audit(1755233870.729:63): avc:  denied  { mount } for  pid=5830 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   64.805421][   T30] audit: type=1400 audit(1755233870.759:64): avc:  denied  { unmount } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   64.964778][ T5830] cgroup: Unknown subsys name 'cpuset'
[   64.972358][ T5830] cgroup: Unknown subsys name 'rlimit'
[   65.077596][   T30] audit: type=1400 audit(1755233871.049:65): avc:  denied  { setattr } for  pid=5830 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   65.109967][   T30] audit: type=1400 audit(1755233871.049:66): avc:  denied  { create } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.130498][   T30] audit: type=1400 audit(1755233871.049:67): avc:  denied  { write } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.151227][   T30] audit: type=1400 audit(1755233871.049:68): avc:  denied  { read } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.171923][   T30] audit: type=1400 audit(1755233871.059:69): avc:  denied  { mounton } for  pid=5830 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   65.186057][ T5832] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   65.196804][   T30] audit: type=1400 audit(1755233871.059:70): avc:  denied  { mount } for  pid=5830 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   65.229272][   T30] audit: type=1400 audit(1755233871.099:71): avc:  denied  { read } for  pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   66.195794][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.968526][   T30] kauditd_printk_skb: 6 callbacks suppressed
[   69.968543][   T30] audit: type=1400 audit(1755233875.929:78): avc:  denied  { create } for  pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   70.030960][   T30] audit: type=1400 audit(1755233875.939:79): avc:  denied  { read write } for  pid=5842 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   70.054123][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.065779][   T30] audit: type=1400 audit(1755233875.939:80): avc:  denied  { open } for  pid=5842 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   70.070004][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.099374][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.107230][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.115299][   T30] audit: type=1400 audit(1755233875.949:81): avc:  denied  { ioctl } for  pid=5842 comm="syz-executor" path="socket:[4459]" dev="sockfs" ino=4459 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   70.124238][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.140494][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.155900][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.163714][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.168321][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.179278][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.186665][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.187838][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.201687][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.209228][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.216409][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.217832][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.231785][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.237440][ T5167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.239264][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.246530][ T5167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.252917][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.273373][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.273911][   T30] audit: type=1400 audit(1755233876.149:82): avc:  denied  { read } for  pid=5842 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   70.306256][   T30] audit: type=1400 audit(1755233876.149:83): avc:  denied  { open } for  pid=5842 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   70.330113][   T30] audit: type=1400 audit(1755233876.149:84): avc:  denied  { mounton } for  pid=5842 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   70.330413][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.361377][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.369409][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.642955][   T30] audit: type=1400 audit(1755233876.619:85): avc:  denied  { module_request } for  pid=5847 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   70.706602][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   70.814855][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   70.841816][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   70.967577][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[   70.974028][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[   71.000663][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   71.016032][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.023600][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.031023][ T5847] bridge_slave_0: entered allmulticast mode
[   71.037682][ T5847] bridge_slave_0: entered promiscuous mode
[   71.049161][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.057090][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.064323][ T5847] bridge_slave_1: entered allmulticast mode
[   71.071643][ T5847] bridge_slave_1: entered promiscuous mode
[   71.107175][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   71.133938][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.143737][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.151015][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.158147][ T5850] bridge_slave_0: entered allmulticast mode
[   71.165165][ T5850] bridge_slave_0: entered promiscuous mode
[   71.194757][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.220105][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.227621][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.235087][ T5850] bridge_slave_1: entered allmulticast mode
[   71.242219][ T5850] bridge_slave_1: entered promiscuous mode
[   71.261906][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.268984][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.276610][ T5842] bridge_slave_0: entered allmulticast mode
[   71.283583][ T5842] bridge_slave_0: entered promiscuous mode
[   71.298683][ T5847] team0: Port device team_slave_0 added
[   71.324749][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.331888][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.339000][ T5842] bridge_slave_1: entered allmulticast mode
[   71.346533][ T5842] bridge_slave_1: entered promiscuous mode
[   71.356965][ T5847] team0: Port device team_slave_1 added
[   71.398206][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.436581][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.455978][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.465258][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.472958][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.480164][ T5851] bridge_slave_0: entered allmulticast mode
[   71.486917][ T5851] bridge_slave_0: entered promiscuous mode
[   71.494431][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.501588][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.528158][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.556549][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.566065][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.573495][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.581146][ T5851] bridge_slave_1: entered allmulticast mode
[   71.587795][ T5851] bridge_slave_1: entered promiscuous mode
[   71.607209][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.614211][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.644186][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.671879][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.678965][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.686779][ T5843] bridge_slave_0: entered allmulticast mode
[   71.693642][ T5843] bridge_slave_0: entered promiscuous mode
[   71.701448][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.708553][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.715777][ T5843] bridge_slave_1: entered allmulticast mode
[   71.723936][ T5843] bridge_slave_1: entered promiscuous mode
[   71.748838][ T5850] team0: Port device team_slave_0 added
[   71.756967][ T5850] team0: Port device team_slave_1 added
[   71.783685][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.796453][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.821176][ T5842] team0: Port device team_slave_0 added
[   71.828713][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.863019][ T5842] team0: Port device team_slave_1 added
[   71.869157][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.876614][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.902765][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.915040][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.946285][ T5847] hsr_slave_0: entered promiscuous mode
[   71.952601][ T5847] hsr_slave_1: entered promiscuous mode
[   71.975917][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.982919][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.009519][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.034527][ T5843] team0: Port device team_slave_0 added
[   72.043335][ T5843] team0: Port device team_slave_1 added
[   72.049991][ T5851] team0: Port device team_slave_0 added
[   72.065354][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.072391][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.098315][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.127594][ T5851] team0: Port device team_slave_1 added
[   72.135121][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.142540][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.169240][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.191389][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.198337][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.224274][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.241205][ T5849] Bluetooth: hci0: command tx timeout
[   72.266809][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.273947][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.299929][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.320302][ T5849] Bluetooth: hci3: command tx timeout
[   72.332122][ T5850] hsr_slave_0: entered promiscuous mode
[   72.338202][ T5850] hsr_slave_1: entered promiscuous mode
[   72.344734][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   72.350827][ T5850] Cannot create hsr debugfs directory
[   72.376476][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.383563][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.402662][ T5849] Bluetooth: hci1: command tx timeout
[   72.409617][ T5846] Bluetooth: hci4: command tx timeout
[   72.415161][ T5859] Bluetooth: hci2: command tx timeout
[   72.421190][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.465453][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.472604][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.498606][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.521605][ T5842] hsr_slave_0: entered promiscuous mode
[   72.527641][ T5842] hsr_slave_1: entered promiscuous mode
[   72.533635][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   72.539349][ T5842] Cannot create hsr debugfs directory
[   72.629552][ T5843] hsr_slave_0: entered promiscuous mode
[   72.635866][ T5843] hsr_slave_1: entered promiscuous mode
[   72.642404][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   72.648118][ T5843] Cannot create hsr debugfs directory
[   72.683193][ T5851] hsr_slave_0: entered promiscuous mode
[   72.689185][ T5851] hsr_slave_1: entered promiscuous mode
[   72.695315][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   72.701407][ T5851] Cannot create hsr debugfs directory
[   72.932385][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.966679][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.976736][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.003850][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.068746][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.084969][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.094214][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.107360][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.168245][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.189534][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.198835][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.221295][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.275198][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.316676][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.326813][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.335936][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.348068][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.385009][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   73.431201][  T439] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.438365][  T439] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.448767][  T439] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.456115][  T439] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.491764][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.501544][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.522179][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.533133][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.543370][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.563648][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.607662][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   73.638658][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.654798][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.661926][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.671292][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.678350][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.695743][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   73.722524][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.729584][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.738232][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.745303][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.806044][   T30] audit: type=1400 audit(1755233879.779:86): avc:  denied  { sys_module } for  pid=5847 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   73.812963][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.883439][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   73.909384][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.916493][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.953590][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.960738][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.109845][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.126569][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.179209][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   74.235955][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.243116][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.262557][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.269678][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.324801][ T5849] Bluetooth: hci0: command tx timeout
[   74.328662][ T5847] veth0_vlan: entered promiscuous mode
[   74.365080][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.375479][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.385490][ T5847] veth1_vlan: entered promiscuous mode
[   74.400690][ T5849] Bluetooth: hci3: command tx timeout
[   74.426124][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.482793][ T5849] Bluetooth: hci1: command tx timeout
[   74.488208][ T5849] Bluetooth: hci2: command tx timeout
[   74.495406][ T5859] Bluetooth: hci4: command tx timeout
[   74.495572][ T5847] veth0_macvtap: entered promiscuous mode
[   74.547244][ T5847] veth1_macvtap: entered promiscuous mode
[   74.567207][ T5842] veth0_vlan: entered promiscuous mode
[   74.600892][ T5842] veth1_vlan: entered promiscuous mode
[   74.616430][ T5850] veth0_vlan: entered promiscuous mode
[   74.676000][ T5850] veth1_vlan: entered promiscuous mode
[   74.689694][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.732892][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.743535][ T5842] veth0_macvtap: entered promiscuous mode
[   74.766146][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.788834][ T2913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.804463][ T5842] veth1_macvtap: entered promiscuous mode
[   74.816601][ T2913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.826474][ T2913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.849113][ T2913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.872339][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.882091][ T5850] veth0_macvtap: entered promiscuous mode
[   74.898351][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.907654][ T5850] veth1_macvtap: entered promiscuous mode
[   74.933914][   T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.972695][   T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.982473][   T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.994916][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.014783][ T5843] veth0_vlan: entered promiscuous mode
[   75.024047][   T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.051295][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.064019][ T5851] veth0_vlan: entered promiscuous mode
[   75.070834][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.074931][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.126291][ T5851] veth1_vlan: entered promiscuous mode
[   75.135256][ T2913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.153928][ T5843] veth1_vlan: entered promiscuous mode
[   75.163761][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.174780][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.186546][ T2913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.197419][   T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.209955][   T30] audit: type=1400 audit(1755233881.179:87): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/root/syzkaller.FtI31u/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   75.216052][ T5843] veth0_macvtap: entered promiscuous mode
[   75.258947][   T30] audit: type=1400 audit(1755233881.219:88): avc:  denied  { mount } for  pid=5847 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   75.282916][   T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.290980][   T30] audit: type=1400 audit(1755233881.219:89): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/root/syzkaller.FtI31u/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   75.322127][   T30] audit: type=1400 audit(1755233881.219:90): avc:  denied  { mount } for  pid=5847 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   75.324156][ T5843] veth1_macvtap: entered promiscuous mode
[   75.346901][   T30] audit: type=1400 audit(1755233881.229:91): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/root/syzkaller.FtI31u/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   75.378621][   T30] audit: type=1400 audit(1755233881.229:92): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/root/syzkaller.FtI31u/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   75.384009][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.406586][   T30] audit: type=1400 audit(1755233881.229:93): avc:  denied  { unmount } for  pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   75.441347][   T30] audit: type=1400 audit(1755233881.229:94): avc:  denied  { mounton } for  pid=5847 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   75.449779][ T5851] veth0_macvtap: entered promiscuous mode
[   75.464492][   T30] audit: type=1400 audit(1755233881.229:95): avc:  denied  { mount } for  pid=5847 comm="syz-executor" name="/" dev="gadgetfs" ino=6795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   75.501200][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.502271][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.509028][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.548419][   T30] audit: type=1400 audit(1755233881.229:96): avc:  denied  { mount } for  pid=5847 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   75.574418][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.601740][ T5851] veth1_macvtap: entered promiscuous mode
[   75.610154][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.622323][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.638314][   T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.687254][   T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.699843][   T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.721440][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.729662][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   75.745667][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.782642][   T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.866621][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.891491][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.899476][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.933566][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.967834][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.027875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   76.082614][  T439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.263069][  T439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.400471][ T5846] Bluetooth: hci0: command tx timeout
[   76.472008][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.480339][ T5846] Bluetooth: hci3: command tx timeout
[   76.560357][ T5846] Bluetooth: hci2: command tx timeout
[   76.560902][ T5849] Bluetooth: hci4: command tx timeout
[   76.565887][ T5846] Bluetooth: hci1: command tx timeout
[   76.593982][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.622086][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.631876][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.643023][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   76.701231][ T5965] mmap: syz.0.1 (5965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   76.952777][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.981072][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.058831][  T439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.072415][  T439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.299321][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.382091][ T5974] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   77.391920][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.532646][ T5974] team0: Port device geneve0 added
[   77.586201][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.667099][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   77.730765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.739466][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.747992][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.756466][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.769482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   78.480905][ T5846] Bluetooth: hci0: command tx timeout
[   78.574730][ T5846] Bluetooth: hci3: command tx timeout
[   78.645601][ T5846] Bluetooth: hci4: command tx timeout
[   78.654152][ T5846] Bluetooth: hci2: command tx timeout
[   78.659528][ T5846] Bluetooth: hci1: command tx timeout
[   80.281434][   T30] kauditd_printk_skb: 48 callbacks suppressed
[   80.281463][   T30] audit: type=1400 audit(1755233886.240:145): avc:  denied  { read write } for  pid=6002 comm="syz.3.9" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.512943][   T30] audit: type=1400 audit(1755233886.250:146): avc:  denied  { open } for  pid=6002 comm="syz.3.9" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.568082][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.608300][   T30] audit: type=1400 audit(1755233886.250:147): avc:  denied  { ioctl } for  pid=6002 comm="syz.3.9" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.820066][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.864185][ T5925] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   81.138873][ T6017] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11'.
[   81.493648][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.514456][  T920] cfg80211: failed to load regulatory.db
[   81.524513][   T30] audit: type=1400 audit(1755233887.100:148): avc:  denied  { create } for  pid=6014 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   81.549484][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   81.559463][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.569955][ T5925] usb 4-1: Product: syz
[   81.578294][ T5925] usb 4-1: Manufacturer: syz
[   81.583451][ T5925] usb 4-1: SerialNumber: syz
[   81.603989][ T5925] hub 4-1:1.0: bad descriptor, ignoring hub
[   81.618177][ T5925] hub 4-1:1.0: probe with driver hub failed with error -5
[   81.817763][ T5925] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   81.844199][   T30] audit: type=1400 audit(1755233887.110:149): avc:  denied  { write } for  pid=6014 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   81.959683][   T30] audit: type=1400 audit(1755233887.110:150): avc:  denied  { nlmsg_read } for  pid=6014 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   82.017319][   T30] audit: type=1400 audit(1755233887.980:151): avc:  denied  { read write } for  pid=6002 comm="syz.3.9" name="lp0" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   82.063376][ T6020] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   82.134806][   T30] audit: type=1400 audit(1755233887.980:152): avc:  denied  { open } for  pid=6002 comm="syz.3.9" path="/dev/usb/lp0" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   82.205636][   T30] audit: type=1400 audit(1755233888.040:153): avc:  denied  { setopt } for  pid=6022 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   82.247672][   T30] audit: type=1400 audit(1755233888.070:154): avc:  denied  { search } for  pid=6024 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.271070][ T5917] usb 4-1: USB disconnect, device number 2
[   83.279531][ T5917] usblp0: removed
[   83.663962][ T6052] bridge1: the hash_elasticity option has been deprecated and is always 16
[   83.690430][ T6052] bridge1: entered allmulticast mode
[   83.785431][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'.
[   84.061240][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.498633][ T6070] ubi31: attaching mtd0
[   85.512592][ T6070] ubi31: scanning is finished
[   85.517331][ T6070] ubi31: empty MTD device detected
[   85.589118][   T30] kauditd_printk_skb: 21 callbacks suppressed
[   85.589150][   T30] audit: type=1400 audit(1755233891.460:176): avc:  denied  { append } for  pid=6064 comm="syz.4.17" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   85.906441][   T30] audit: type=1400 audit(1755233891.880:177): avc:  denied  { firmware_load } for  pid=6067 comm="syz.0.18" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   86.022642][ T6074] Bluetooth: MGMT ver 1.23
[   86.041479][   T30] audit: type=1400 audit(1755233891.880:178): avc:  denied  { create } for  pid=6067 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   86.061217][ T6070] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   86.068754][ T6070] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   86.076042][ T6070] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   86.083174][ T6070] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   86.090643][ T6070] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   86.097467][ T6070] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   86.105535][ T6070] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2177908399
[   86.115604][ T6070] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   86.147608][ T6076] ubi31: background thread "ubi_bgt31d" started, PID 6076
[   86.293792][   T30] audit: type=1400 audit(1755233891.920:179): avc:  denied  { bind } for  pid=6067 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   86.318038][   T30] audit: type=1400 audit(1755233892.000:180): avc:  denied  { write } for  pid=6067 comm="syz.0.18" path="socket:[8615]" dev="sockfs" ino=8615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   86.341439][    C1] vkms_vblank_simulate: vblank timer overrun
[   86.700065][ T6082] overlayfs: failed to resolve './file0': -2
[   87.310901][   T30] audit: type=1400 audit(1755233893.200:181): avc:  denied  { create } for  pid=6077 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   87.330556][   T30] audit: type=1400 audit(1755233893.260:182): avc:  denied  { read } for  pid=6077 comm="syz.3.20" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.052656][   T30] audit: type=1400 audit(1755233893.270:183): avc:  denied  { connect } for  pid=6077 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   88.075362][   T30] audit: type=1400 audit(1755233893.280:184): avc:  denied  { create } for  pid=6075 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.116170][   T30] audit: type=1400 audit(1755233893.280:185): avc:  denied  { ioctl } for  pid=6067 comm="syz.0.18" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   88.322856][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   88.524013][ T6072] syz.0.18 (6072) used greatest stack depth: 18792 bytes left
[   89.014419][ T6102] netlink: 'syz.4.22': attribute type 5 has an invalid length.
[   89.538507][ T6103] netlink: 'syz.3.23': attribute type 5 has an invalid length.
[   90.034409][ T6118] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.25'.
[   90.098722][ T6116] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.25'.
[   90.616733][   T30] kauditd_printk_skb: 19 callbacks suppressed
[   90.616749][   T30] audit: type=1400 audit(1755233896.589:205): avc:  denied  { create } for  pid=6107 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   91.549627][   T30] audit: type=1400 audit(1755233896.629:206): avc:  denied  { setopt } for  pid=6107 comm="syz.4.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.697531][   T30] audit: type=1400 audit(1755233896.849:207): avc:  denied  { write } for  pid=6125 comm="syz.3.26" name="vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   91.973747][   T30] audit: type=1400 audit(1755233896.879:208): avc:  denied  { kexec_image_load } for  pid=6125 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   92.030636][ T6148] Zero length message leads to an empty skb
[   92.039484][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   92.048871][ T6148] bridge_slave_1: left allmulticast mode
[   92.345874][   T30] audit: type=1400 audit(1755233897.639:209): avc:  denied  { read write } for  pid=6126 comm="syz.2.27" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   92.429041][ T6148] bridge_slave_1: left promiscuous mode
[   92.447273][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.710908][   T30] audit: type=1400 audit(1755233897.659:210): avc:  denied  { create } for  pid=6093 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   92.953386][   T30] audit: type=1400 audit(1755233897.659:211): avc:  denied  { write } for  pid=6093 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.ipv4ll" dev="tmpfs" ino=2060 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   92.979662][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.026333][ T6148] bridge_slave_0: left allmulticast mode
[   93.037718][ T6148] bridge_slave_0: left promiscuous mode
[   93.055808][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.221088][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'.
[   93.397669][   T30] audit: type=1400 audit(1755233897.659:212): avc:  denied  { append } for  pid=6093 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.ipv4ll" dev="tmpfs" ino=2060 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   93.422096][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.470817][   T30] audit: type=1400 audit(1755233897.699:213): avc:  denied  { read write } for  pid=6126 comm="syz.2.27" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.493670][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.569127][ T6163] syz.0.32: attempt to access beyond end of device
[   93.569127][ T6163] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[   93.592550][ T6163] syz.0.32: attempt to access beyond end of device
[   93.592550][ T6163] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0
[   93.626010][ T6163] Mount JFS Failure: -5
[   93.649259][   T30] audit: type=1400 audit(1755233897.699:214): avc:  denied  { open } for  pid=6126 comm="syz.2.27" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   93.672053][    C1] vkms_vblank_simulate: vblank timer overrun
[   94.218233][ T6172] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[   96.243902][   T30] kauditd_printk_skb: 21 callbacks suppressed
[   96.654846][   T30] audit: type=1400 audit(1755233901.769:236): avc:  denied  { sqpoll } for  pid=6185 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   96.951578][   T30] audit: type=1400 audit(1755233902.619:237): avc:  denied  { unmount } for  pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   97.293337][ T6205] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   97.766769][   T30] audit: type=1400 audit(1755233903.439:238): avc:  denied  { bind } for  pid=6197 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   99.817018][   T30] audit: type=1400 audit(1755233905.059:239): avc:  denied  { create } for  pid=6223 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  100.410311][ T6234] process 'syz.2.41' launched './file1' with NULL argv: empty string added
[  100.551285][   T30] audit: type=1400 audit(1755233905.059:240): avc:  denied  { listen } for  pid=6223 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  100.632485][   T30] audit: type=1400 audit(1755233905.919:241): avc:  denied  { ioctl } for  pid=6224 comm="syz.1.42" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9034 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  100.798829][   T30] audit: type=1400 audit(1755233906.279:242): avc:  denied  { ioctl } for  pid=6224 comm="syz.1.42" path="socket:[9037]" dev="sockfs" ino=9037 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.407581][   T30] audit: type=1400 audit(1755233906.279:243): avc:  denied  { write } for  pid=6224 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.631597][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[  101.675312][   T30] audit: type=1400 audit(1755233906.379:244): avc:  denied  { execute } for  pid=6220 comm="syz.2.41" name="file1" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.845249][   T30] audit: type=1400 audit(1755233906.449:245): avc:  denied  { execute_no_trans } for  pid=6220 comm="syz.2.41" path="/9/file1" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  101.989112][   T30] audit: type=1400 audit(1755233907.519:246): avc:  denied  { mounton } for  pid=6250 comm="syz.0.45" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.100256][ T5961] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  102.323736][ T5961] usb 1-1: config 0 has no interfaces?
[  102.334578][ T5961] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  102.343904][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.374612][ T5961] usb 1-1: Product: syz
[  102.397608][ T5961] usb 1-1: Manufacturer: syz
[  102.428456][ T5961] usb 1-1: SerialNumber: syz
[  102.451268][ T5961] usb 1-1: config 0 descriptor??
[  102.728249][ T6268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  102.885236][   T30] audit: type=1400 audit(1755233908.839:247): avc:  denied  { sys_module } for  pid=6266 comm="syz.4.47" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  103.192513][   T30] audit: type=1400 audit(1755233908.969:248): avc:  denied  { wake_alarm } for  pid=6266 comm="syz.4.47" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  103.420452][   T30] audit: type=1400 audit(1755233909.219:249): avc:  denied  { create } for  pid=6264 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  104.026102][   T30] audit: type=1800 audit(1755233909.999:250): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.49" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  104.110492][ T6291] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[6291]
[  104.323829][   T30] audit: type=1400 audit(1755233910.159:251): avc:  denied  { relabelfrom } for  pid=6287 comm="syz.3.49" name="" dev="pipefs" ino=9110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  104.716321][   T30] audit: type=1400 audit(1755233910.479:252): avc:  denied  { write } for  pid=6290 comm="syz.4.50" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.592588][ T5924] usb 1-1: USB disconnect, device number 2
[  107.580547][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'.
[  107.776192][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  107.776209][   T30] audit: type=1400 audit(1755233913.699:258): avc:  denied  { read } for  pid=6322 comm="syz.1.55" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  108.009809][   T30] audit: type=1400 audit(1755233913.709:259): avc:  denied  { open } for  pid=6322 comm="syz.1.55" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  108.063394][   T30] audit: type=1400 audit(1755233913.709:260): avc:  denied  { ioctl } for  pid=6322 comm="syz.1.55" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  108.136045][   T30] audit: type=1800 audit(1755233914.109:261): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.56" name="bus" dev="ramfs" ino=9399 res=0 errno=0
[  108.298767][   T30] audit: type=1400 audit(1755233914.269:262): avc:  denied  { mount } for  pid=6342 comm="syz.0.67" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  108.479741][   T30] audit: type=1400 audit(1755233914.329:263): avc:  denied  { shutdown } for  pid=6342 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  108.687236][   T30] audit: type=1400 audit(1755233914.339:264): avc:  denied  { unlink } for  pid=6342 comm="syz.0.67" name="#1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  108.799684][   T30] audit: type=1400 audit(1755233914.339:265): avc:  denied  { mount } for  pid=6342 comm="syz.0.67" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  109.424752][   T30] audit: type=1400 audit(1755233915.009:266): avc:  denied  { name_bind } for  pid=6351 comm="syz.4.58" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  109.636159][   T30] audit: type=1400 audit(1755233915.069:267): avc:  denied  { setopt } for  pid=6351 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  110.207600][ T6371] lo speed is unknown, defaulting to 1000
[  110.213953][ T6371] lo speed is unknown, defaulting to 1000
[  110.232731][ T6371] lo speed is unknown, defaulting to 1000
[  111.045640][ T6372] lo speed is unknown, defaulting to 1000
[  111.096089][ T6371] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  111.107110][ T6371] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  111.216407][ T6371] lo speed is unknown, defaulting to 1000
[  111.223728][ T6371] lo speed is unknown, defaulting to 1000
[  111.231358][ T6371] lo speed is unknown, defaulting to 1000
[  111.237856][ T6371] lo speed is unknown, defaulting to 1000
[  111.244365][ T6371] lo speed is unknown, defaulting to 1000
[  111.431516][ T6370] tty tty22: ldisc open failed (-12), clearing slot 21
[  111.532167][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.60'.
[  112.364244][ T6388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  112.371685][ T6388] IPv6: NLM_F_CREATE should be set when creating new route
[  112.379024][ T6388] IPv6: NLM_F_CREATE should be set when creating new route
[  112.386325][ T6388] IPv6: NLM_F_CREATE should be set when creating new route
[  114.068346][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  114.068361][   T30] audit: type=1800 audit(1755233920.039:273): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.64" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  115.067836][   T30] audit: type=1400 audit(1755233921.039:274): avc:  denied  { unmount } for  pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  115.162135][ T6407] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6407]
[  115.204045][ T6403] lo speed is unknown, defaulting to 1000
[  115.461086][   T30] audit: type=1400 audit(1755233921.169:275): avc:  denied  { setopt } for  pid=6396 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  115.484519][ T6405] block device autoloading is deprecated and will be removed.
[  115.500878][   T30] audit: type=1400 audit(1755233921.169:276): avc:  denied  { accept } for  pid=6396 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  115.520096][   T30] audit: type=1400 audit(1755233921.169:277): avc:  denied  { read } for  pid=6396 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  116.180426][   T30] audit: type=1400 audit(1755233921.939:278): avc:  denied  { connect } for  pid=6406 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.553372][   T30] audit: type=1400 audit(1755233921.939:279): avc:  denied  { bind } for  pid=6406 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.579634][   T30] audit: type=1400 audit(1755233921.949:280): avc:  denied  { write } for  pid=6406 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.605133][   T30] audit: type=1400 audit(1755233921.949:281): avc:  denied  { setopt } for  pid=6406 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.868463][ T6431] syz.1.70: attempt to access beyond end of device
[  116.868463][ T6431] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  116.883963][ T6431] syz.1.70: attempt to access beyond end of device
[  116.883963][ T6431] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  116.897067][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  116.908986][ T6431] Mount JFS Failure: -5
[  117.417619][ T6438] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  117.860240][   T24] usb 4-1: Using ep0 maxpacket: 8
[  118.076926][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.151480][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.310328][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.395754][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.529340][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  118.752640][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.915827][   T24] usb 4-1: usb_control_msg returned -71
[  118.964297][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[  118.976048][   T30] audit: type=1400 audit(1755233924.949:282): avc:  denied  { ioctl } for  pid=6445 comm="syz.1.74" path="socket:[9727]" dev="sockfs" ino=9727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  119.020065][   T24] usbtmc 4-1:16.0: can't read capabilities
[  119.076525][   T24] usb 4-1: USB disconnect, device number 3
[  119.103586][   T30] audit: type=1400 audit(1755233924.999:283): avc:  denied  { mounton } for  pid=6447 comm="syz.3.76" path="/14/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  119.386532][ T6456] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  120.400136][   T30] audit: type=1804 audit(1755233926.019:284): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.76" name="file0" dev="ramfs" ino=10408 res=1 errno=0
[  120.480307][ T6442] syz.0.73 (6442): drop_caches: 2
[  120.790530][ T6463] netlink: 'syz.4.78': attribute type 10 has an invalid length.
[  120.798286][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.78'.
[  120.808332][ T6463] dummy0: entered promiscuous mode
[  120.817538][ T6463] bridge0: port 3(dummy0) entered blocking state
[  120.827212][ T6463] bridge0: port 3(dummy0) entered disabled state
[  120.833816][ T6463] dummy0: entered allmulticast mode
[  120.880992][ T6463] bridge0: port 3(dummy0) entered blocking state
[  120.887873][ T6463] bridge0: port 3(dummy0) entered forwarding state
[  121.213955][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'.
[  121.220440][   T30] audit: type=1400 audit(1755233927.189:285): avc:  denied  { read } for  pid=6468 comm="syz.1.80" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.340809][ T6471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.726117][   T30] audit: type=1400 audit(1755233927.189:286): avc:  denied  { open } for  pid=6468 comm="syz.1.80" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.749105][   T30] audit: type=1400 audit(1755233927.299:287): avc:  denied  { name_bind } for  pid=6466 comm="syz.0.79" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  121.770623][   T30] audit: type=1400 audit(1755233927.339:288): avc:  denied  { name_bind } for  pid=6466 comm="syz.0.79" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  121.791661][   T30] audit: type=1400 audit(1755233927.339:289): avc:  denied  { node_bind } for  pid=6466 comm="syz.0.79" saddr=2001:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  121.813497][   T30] audit: type=1400 audit(1755233927.679:290): avc:  denied  { ioctl } for  pid=6468 comm="syz.1.80" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.849651][   T30] audit: type=1804 audit(1755233927.819:291): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.76" name="file0" dev="ramfs" ino=10408 res=1 errno=0
[  121.897734][   T30] audit: type=1400 audit(1755233927.869:292): avc:  denied  { read append } for  pid=6472 comm="syz.4.81" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  123.257245][ T6479] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.393828][ T6482] evm: overlay not supported
[  123.613377][ T6492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.630209][ T6492] netlink: 148 bytes leftover after parsing attributes in process `syz.4.85'.
[  123.759341][ T6494] netlink: 60 bytes leftover after parsing attributes in process `syz.3.83'.
[  124.203340][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  124.203356][   T30] audit: type=1400 audit(1755233929.729:297): avc:  denied  { nlmsg_write } for  pid=6484 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  124.270402][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  124.339210][   T30] audit: type=1400 audit(1755233930.259:298): avc:  denied  { name_connect } for  pid=6484 comm="syz.3.83" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  124.856437][   T30] audit: type=1400 audit(1755233930.299:299): avc:  denied  { bind } for  pid=6484 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  125.242397][ T5886] usb 3-1: config 0 has no interfaces?
[  125.249915][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  125.260639][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.269592][ T5886] usb 3-1: Product: syz
[  125.292496][ T5886] usb 3-1: Manufacturer: syz
[  125.297123][ T5886] usb 3-1: SerialNumber: syz
[  125.320537][ T5886] usb 3-1: config 0 descriptor??
[  125.704552][ T6492] syz.4.85 (6492): drop_caches: 2
[  125.754872][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'.
[  125.763920][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'.
[  126.372954][ T6515] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  126.843269][ T6518] pim6reg1: entered allmulticast mode
[  127.351762][ T5961] usb 3-1: USB disconnect, device number 2
[  127.426932][   T30] audit: type=1800 audit(1755233933.399:300): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.90" name="bus" dev="ramfs" ino=9947 res=0 errno=0
[  128.262891][ T6533] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  129.347959][ T6544] syz.3.94: attempt to access beyond end of device
[  129.347959][ T6544] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  129.363382][ T6544] syz.3.94: attempt to access beyond end of device
[  129.363382][ T6544] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[  129.381212][ T6544] Mount JFS Failure: -5
[  129.623192][   T30] audit: type=1400 audit(1755233935.469:301): avc:  denied  { mount } for  pid=6539 comm="syz.1.95" name="/" dev="autofs" ino=10006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  129.728369][   T30] audit: type=1400 audit(1755233935.619:302): avc:  denied  { create } for  pid=6543 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  130.644462][ T5849] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1
[  130.911229][   T30] audit: type=1400 audit(1755233936.839:303): avc:  denied  { ioctl } for  pid=6539 comm="syz.1.95" path="socket:[10003]" dev="sockfs" ino=10003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  130.970356][   T30] audit: type=1400 audit(1755233936.849:304): avc:  denied  { mounton } for  pid=6539 comm="syz.1.95" path="/19/file1" dev="autofs" ino=10006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  131.385658][   T30] audit: type=1400 audit(1755233937.359:305): avc:  denied  { mount } for  pid=6554 comm="syz.0.99" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  131.431146][   T30] audit: type=1400 audit(1755233937.389:306): avc:  denied  { search } for  pid=6554 comm="syz.0.99" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  131.441571][ T6563] libceph: resolve '4..' (ret=-3): failed
[  131.528340][ T6565] block device autoloading is deprecated and will be removed.
[  131.541164][ T6565] syz.0.99: attempt to access beyond end of device
[  131.541164][ T6565] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  131.677660][   T30] audit: type=1400 audit(1755233937.389:307): avc:  denied  { search } for  pid=6554 comm="syz.0.99" name="/" dev="configfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  131.863328][   T30] audit: type=1400 audit(1755233937.839:308): avc:  denied  { write } for  pid=6554 comm="syz.0.99" path="socket:[10023]" dev="sockfs" ino=10023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  131.936273][ T6571] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.100'.
[  133.614141][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  133.620575][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.726376][   T30] audit: type=1400 audit(1755233938.979:309): avc:  denied  { map } for  pid=6572 comm="syz.4.101" path="socket:[10037]" dev="sockfs" ino=10037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  133.864508][   T30] audit: type=1400 audit(1755233938.979:310): avc:  denied  { read } for  pid=6572 comm="syz.4.101" path="socket:[10037]" dev="sockfs" ino=10037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  134.620337][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.745106][ T6587] mkiss: ax0: crc mode is auto.
[  134.779822][ T5849] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  134.789667][ T5849] Bluetooth: hci4: Injecting HCI hardware error event
[  134.815572][ T5846] Bluetooth: hci4: hardware error 0x00
[  134.964472][    T9] usb 4-1: config 0 has no interfaces?
[  134.974717][    T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  135.049499][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.195722][    T9] usb 4-1: Product: syz
[  135.355910][    T9] usb 4-1: Manufacturer: syz
[  135.364436][ T6594] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  135.395174][    T9] usb 4-1: SerialNumber: syz
[  135.431765][    T9] usb 4-1: config 0 descriptor??
[  135.650557][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  135.659987][   T30] audit: type=1400 audit(1755233941.579:314): avc:  denied  { accept } for  pid=6595 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  136.559572][   T30] audit: type=1800 audit(1755233942.529:315): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.107" name="bus" dev="ramfs" ino=10674 res=0 errno=0
[  137.052239][ T5846] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  137.212872][ T6613] siw: device registration error -23
[  137.568148][   T24] usb 4-1: USB disconnect, device number 4
[  138.148763][ T6625] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  138.728003][ T6632] hub 1-0:1.0: USB hub found
[  138.735992][ T6632] hub 1-0:1.0: 1 port detected
[  138.743346][   T30] audit: type=1326 audit(1755233944.449:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.2.113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e7b38ebe9 code=0x0
[  138.992721][   T30] audit: type=1400 audit(1755233944.609:317): avc:  denied  { write } for  pid=6621 comm="syz.4.112" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  139.120061][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.0.114'.
[  140.176160][ T6638] lo speed is unknown, defaulting to 1000
[  140.922005][ T6648] overlayfs: failed to resolve './file0': -2
[  141.311999][   T30] audit: type=1400 audit(1755233946.999:318): avc:  denied  { read } for  pid=6643 comm="syz.1.116" path="socket:[10140]" dev="sockfs" ino=10140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  141.657358][ T6650] mkiss: ax0: crc mode is auto.
[  141.680582][   T30] audit: type=1400 audit(1755233947.639:319): avc:  denied  { bind } for  pid=6641 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  141.705639][   T30] audit: type=1400 audit(1755233947.649:320): avc:  denied  { listen } for  pid=6641 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  141.751634][   T30] audit: type=1400 audit(1755233947.649:321): avc:  denied  { write } for  pid=6641 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  142.385794][   T30] audit: type=1400 audit(1755233947.649:322): avc:  denied  { connect } for  pid=6641 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  142.675033][ T6659] ceph: No mds server is up or the cluster is laggy
[  142.691397][   T24] libceph: connect (1)[c::]:6789 error -101
[  142.698656][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  142.707371][   T30] audit: type=1800 audit(1755233948.509:323): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.117" name="bus" dev="ramfs" ino=10220 res=0 errno=0
[  143.683456][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  143.766969][ T6674] tc_dump_action: action bad kind
[  145.242097][ T6697] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  145.720339][ T6699] bridge1: the hash_elasticity option has been deprecated and is always 16
[  145.729141][ T6699] bridge1: entered allmulticast mode
[  146.552126][ T6704] ceph: No mds server is up or the cluster is laggy
[  148.608200][ T6719] geneve2: entered promiscuous mode
[  148.616940][ T6719] geneve2: entered allmulticast mode
[  149.413510][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'.
[  149.808326][ T5886] libceph: connect (1)[c::]:6789 error -101
[  149.824053][ T5886] libceph: mon0 (1)[c::]:6789 connect error
[  149.876919][   T30] audit: type=1400 audit(1755233955.849:324): avc:  denied  { setopt } for  pid=6739 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  150.012604][ T6735] ceph: No mds server is up or the cluster is laggy
[  150.238698][   T30] audit: type=1400 audit(1755233956.199:325): avc:  denied  { append } for  pid=6739 comm="syz.0.132" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  150.306549][ T6745] loop6: detected capacity change from 0 to 2560
[  150.351536][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.366362][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.377014][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.387447][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.398841][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.414337][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.424613][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.434738][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.445253][ T6745] ldm_validate_partition_table(): Disk read failed.
[  150.453193][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.464189][ T6745] Buffer I/O error on dev loop6, logical block 0, async page read
[  150.477176][ T6745] Dev loop6: unable to read RDB block 0
[  150.486982][ T6745]  loop6: unable to read partition table
[  150.495743][ T6745] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  150.684869][   T30] audit: type=1400 audit(1755233956.619:326): avc:  denied  { read } for  pid=5202 comm="acpid" name="event8" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  150.839993][ T6751] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.908610][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[  150.988099][   T30] audit: type=1400 audit(1755233956.619:327): avc:  denied  { open } for  pid=5202 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  151.020515][   T30] audit: type=1400 audit(1755233956.619:328): avc:  denied  { ioctl } for  pid=5202 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2822 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1
[  151.052437][ T6755] syz.2.134: attempt to access beyond end of device
[  151.052437][ T6755] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  151.821556][ T6762] warning: `syz.1.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  152.060839][   T30] audit: type=1400 audit(1755233957.879:329): avc:  denied  { ioctl } for  pid=6761 comm="syz.1.137" path="socket:[10901]" dev="sockfs" ino=10901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  152.798573][ T6767] kvm: user requested TSC rate below hardware speed
[  154.651999][ T6787] pim6reg1: entered allmulticast mode
[  155.372130][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'.
[  156.433178][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805754b400: rx timeout, send abort
[  156.630581][   T30] audit: type=1400 audit(1755233962.609:330): avc:  denied  { read } for  pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  157.012736][   T30] audit: type=1400 audit(1755233962.609:331): avc:  denied  { search } for  pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.180274][   T30] audit: type=1400 audit(1755233962.609:332): avc:  denied  { search } for  pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.213314][   T30] audit: type=1400 audit(1755233962.609:333): avc:  denied  { add_name } for  pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.237263][   T30] audit: type=1400 audit(1755233962.609:334): avc:  denied  { create } for  pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.375361][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'.
[  157.466956][   T30] audit: type=1400 audit(1755233962.609:335): avc:  denied  { append open } for  pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.489974][    C1] vkms_vblank_simulate: vblank timer overrun
[  157.756250][   T30] audit: type=1400 audit(1755233962.609:336): avc:  denied  { getattr } for  pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.790432][   T30] audit: type=1800 audit(1755233963.389:337): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.146" name="bus" dev="ramfs" ino=11698 res=0 errno=0
[  158.440004][ T5849] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1
[  158.448721][ T5849] Bluetooth: hci3: unexpected event for opcode 0x203e
[  158.527984][ T6833] ubi: mtd0 is already attached to ubi31
[  158.657311][   T30] audit: type=1400 audit(1755233964.489:338): avc:  denied  { append } for  pid=6830 comm="syz.2.151" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  160.127074][   T30] audit: type=1400 audit(1755233966.089:339): avc:  denied  { watch } for  pid=6837 comm="syz.1.153" path="/32/control" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  160.184963][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.155'.
[  160.194011][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.155'.
[  160.299639][ T6850] sctp: [Deprecated]: syz.1.153 (pid 6850) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.299639][ T6850] Use struct sctp_sack_info instead
[  160.807844][ T6843] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  160.845310][ T6843] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  160.926932][ T6843] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  160.964125][ T6843] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.971356][ T6843] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  161.030747][ T6843] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  161.120508][ T6865] lo speed is unknown, defaulting to 1000
[  161.203372][ T6843] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  161.212754][ T6843] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  161.231826][ T6843] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  161.259880][ T6843] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  161.267017][ T6843] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  161.412570][ T6843] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  161.610350][ T6868] pim6reg1: entered allmulticast mode
[  162.533783][ T6858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.668820][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.159'.
[  162.830287][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  163.051086][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  163.280257][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  163.286393][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  164.610277][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  164.610318][   T30] audit: type=1400 audit(1755233970.579:342): avc:  denied  { read } for  pid=6881 comm="syz.4.162" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  164.880936][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  165.043860][   T30] audit: type=1400 audit(1755233970.579:343): avc:  denied  { open } for  pid=6881 comm="syz.4.162" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  165.162315][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  166.135743][   T30] audit: type=1400 audit(1755233970.619:344): avc:  denied  { ioctl } for  pid=6881 comm="syz.4.162" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  166.173790][   T30] audit: type=1400 audit(1755233970.629:345): avc:  denied  { set_context_mgr } for  pid=6881 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  166.200252][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  166.206345][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  166.634033][   T30] audit: type=1400 audit(1755233972.429:346): avc:  denied  { create } for  pid=6892 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  166.673548][   T30] audit: type=1400 audit(1755233972.449:347): avc:  denied  { write } for  pid=6892 comm="syz.4.165" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  166.713574][   T30] audit: type=1400 audit(1755233972.499:348): avc:  denied  { setopt } for  pid=6892 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  166.888972][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'.
[  166.893360][   T30] audit: type=1400 audit(1755233972.749:349): avc:  denied  { ioctl } for  pid=6892 comm="syz.4.165" path="socket:[11112]" dev="sockfs" ino=11112 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  166.897940][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'.
[  166.985650][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  167.027167][ T6894] netlink: 96 bytes leftover after parsing attributes in process `syz.3.160'.
[  167.204645][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  168.243194][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  168.249322][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  168.703672][   T30] audit: type=1326 audit(1755233974.499:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42678ebe9 code=0x7ffc0000
[  168.773503][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[  168.790390][   T30] audit: type=1326 audit(1755233974.499:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42678ebe9 code=0x7ffc0000
[  168.932774][ T6935] mkiss: ax0: crc mode is auto.
[  169.930620][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  169.930637][   T30] audit: type=1400 audit(1755233975.729:385): avc:  denied  { create } for  pid=6942 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  170.119889][   T30] audit: type=1400 audit(1755233975.919:386): avc:  denied  { map } for  pid=6944 comm="syz.1.177" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.163720][   T30] audit: type=1400 audit(1755233975.919:387): avc:  denied  { execute } for  pid=6944 comm="syz.1.177" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.612002][ T6959] pim6reg1: entered allmulticast mode
[  170.884871][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'.
[  170.893804][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'.
[  170.970982][ T6962] pim6reg1: entered allmulticast mode
[  171.126462][ T5846] Bluetooth: hci3: command 0x0405 tx timeout
[  171.870248][   T30] audit: type=1400 audit(1755233977.759:388): avc:  denied  { create } for  pid=6973 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  172.148021][   T30] audit: type=1400 audit(1755233977.759:389): avc:  denied  { ioctl } for  pid=6973 comm="syz.0.182" path="socket:[11223]" dev="sockfs" ino=11223 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  172.306929][   T30] audit: type=1400 audit(1755233977.769:390): avc:  denied  { bind } for  pid=6973 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  172.326649][   T30] audit: type=1400 audit(1755233977.769:391): avc:  denied  { write } for  pid=6973 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  173.255853][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  173.461178][ T6994] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  173.740317][    T9] usb 4-1: Using ep0 maxpacket: 16
[  174.307037][   T30] audit: type=1400 audit(1755233979.909:392): avc:  denied  { mount } for  pid=6997 comm="syz.1.187" name="/" dev="hugetlbfs" ino=12015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  174.364557][ T7004] block device autoloading is deprecated and will be removed.
[  175.515132][   T30] audit: type=1400 audit(1755233981.359:393): avc:  denied  { unmount } for  pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  176.240596][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  176.248253][    T9] usb 4-1: can't read configurations, error -71
[  176.810223][ T7031] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  176.864298][ T7031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.171267][   T30] audit: type=1326 audit(1755233983.139:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  177.203242][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'.
[  177.213915][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.192'.
[  177.510223][   T30] audit: type=1326 audit(1755233983.139:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  177.533951][   T30] audit: type=1326 audit(1755233983.139:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  177.695264][ T7022] mkiss: ax0: crc mode is auto.
[  177.852478][   T30] audit: type=1326 audit(1755233983.139:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  177.890074][   T30] audit: type=1326 audit(1755233983.139:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  177.930588][   T30] audit: type=1326 audit(1755233983.179:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  178.169751][   T30] audit: type=1326 audit(1755233983.179:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  178.205920][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'.
[  178.214922][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'.
[  178.539111][   T30] audit: type=1326 audit(1755233983.209:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  178.562824][   T30] audit: type=1326 audit(1755233983.209:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17c38ebe9 code=0x7ffc0000
[  178.839906][ T7053] lo speed is unknown, defaulting to 1000
[  179.767567][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.783150][ T7068] syz.1.198 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  181.041809][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  181.041823][   T30] audit: type=1400 audit(1755233986.659:430): avc:  denied  { execute } for  pid=7063 comm="syz.1.198" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  181.117781][ T7069] netlink: 'syz.0.197': attribute type 21 has an invalid length.
[  181.297647][ T7069] netlink: 128 bytes leftover after parsing attributes in process `syz.0.197'.
[  181.310227][   T30] audit: type=1400 audit(1755233987.239:431): avc:  denied  { write } for  pid=7070 comm="syz.3.200" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  181.363047][   T30] audit: type=1400 audit(1755233987.249:432): avc:  denied  { map } for  pid=7070 comm="syz.3.200" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  181.404906][ T7069] netlink: 'syz.0.197': attribute type 5 has an invalid length.
[  181.458094][ T7077] binder: 7070:7077 ioctl c0306201 0 returned -14
[  181.562987][ T7069] netlink: 3 bytes leftover after parsing attributes in process `syz.0.197'.
[  182.661843][ T7083] pim6reg1: entered allmulticast mode
[  182.684327][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'.
[  182.693286][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'.
[  182.800273][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'.
[  183.708555][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.203'.
[  183.865172][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'.
[  184.508356][ T7113] bridge3: the hash_elasticity option has been deprecated and is always 16
[  184.517384][ T7113] bridge3: entered allmulticast mode
[  184.672249][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'.
[  185.623795][   T30] audit: type=1400 audit(1755233990.729:433): avc:  denied  { accept } for  pid=7101 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  185.702499][   T30] audit: type=1326 audit(1755233991.589:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  185.725718][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.733335][   T30] audit: type=1326 audit(1755233991.589:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  185.770228][   T30] audit: type=1326 audit(1755233991.589:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  185.793407][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.809644][   T30] audit: type=1326 audit(1755233991.589:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  186.140194][   T30] audit: type=1326 audit(1755233991.589:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  186.176555][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  186.392283][   T30] audit: type=1326 audit(1755233991.589:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  186.470351][ T5886] usb 5-1: Using ep0 maxpacket: 8
[  186.558510][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  186.574764][ T5886] usb 5-1: config 0 has no interface number 0
[  186.620662][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.686024][   T30] audit: type=1326 audit(1755233991.589:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  186.711288][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  186.821494][ T5886] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  186.873467][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.873596][   T30] audit: type=1326 audit(1755233991.589:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  186.897602][ T5886] usb 5-1: config 0 descriptor??
[  186.920940][ T5886] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  186.936412][   T30] audit: type=1326 audit(1755233991.589:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  186.972750][   T30] audit: type=1326 audit(1755233991.589:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  187.001082][   T30] audit: type=1326 audit(1755233991.589:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  187.031541][   T30] audit: type=1326 audit(1755233991.589:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  187.078826][   T30] audit: type=1326 audit(1755233991.589:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  187.125926][   T30] audit: type=1326 audit(1755233991.589:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf78ebe9 code=0x7ffc0000
[  187.296250][    T9] usb 5-1: USB disconnect, device number 2
[  187.865583][ T7137] pim6reg1: entered allmulticast mode
[  188.455111][ T7144] binder: BINDER_SET_CONTEXT_MGR already set
[  188.461385][ T7144] binder: 7141:7144 ioctl 4018620d 200000000040 returned -16
[  188.504469][ T7144] binder: 7141:7144 ioctl c0306201 0 returned -14
[  188.689368][ T7145] bridge3: the hash_elasticity option has been deprecated and is always 16
[  188.698695][ T7145] bridge3: entered allmulticast mode
[  189.401319][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'.
[  189.410334][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'.
[  190.137847][ T7169] lo speed is unknown, defaulting to 1000
[  190.677450][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.334009][ T7188] mkiss: ax0: crc mode is auto.
[  191.764333][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  191.963529][    T9] usb 3-1: config 0 has no interfaces?
[  191.969044][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  192.240681][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.281682][    T9] usb 3-1: config 0 descriptor??
[  192.441827][ T7200] pim6reg1: entered allmulticast mode
[  192.821532][   T30] kauditd_printk_skb: 35 callbacks suppressed
[  192.821574][   T30] audit: type=1400 audit(1755233998.769:483): avc:  denied  { ioctl } for  pid=7198 comm="syz.1.225" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  193.490261][   T30] audit: type=1800 audit(1755233999.419:484): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.227" name="bus" dev="ramfs" ino=12705 res=0 errno=0
[  194.060681][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.067003][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.094291][   T30] audit: type=1800 audit(1755234000.069:485): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.228" name="bus" dev="ramfs" ino=12716 res=0 errno=0
[  194.149809][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'.
[  194.158815][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'.
[  194.545276][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'.
[  194.554334][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'.
[  195.089383][   T92] usb 3-1: USB disconnect, device number 3
[  195.421434][ T7239] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  195.586593][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'.
[  195.711559][ T7248] lo speed is unknown, defaulting to 1000
[  195.739609][   T30] audit: type=1400 audit(1755234001.629:486): avc:  denied  { ioctl } for  pid=7231 comm="syz.1.233" path="socket:[12758]" dev="sockfs" ino=12758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  195.801435][   T30] audit: type=1400 audit(1755234001.639:487): avc:  denied  { setopt } for  pid=7231 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  195.855120][   T30] audit: type=1400 audit(1755234001.649:488): avc:  denied  { connect } for  pid=7231 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  195.980548][   T92] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  196.581147][ T7249] ksmbd: Unknown IPC event: 3, ignore.
[  196.862561][   T92] usb 2-1: config 0 has no interfaces?
[  196.875832][   T92] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  197.025122][   T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.054742][   T92] usb 2-1: Product: syz
[  197.069164][   T92] usb 2-1: Manufacturer: syz
[  197.093447][   T92] usb 2-1: SerialNumber: syz
[  197.117805][   T92] usb 2-1: config 0 descriptor??
[  199.136824][  T920] usb 2-1: USB disconnect, device number 2
[  199.288657][ T7277] bridge4: the hash_elasticity option has been deprecated and is always 16
[  199.307558][ T7277] bridge4: entered allmulticast mode
[  199.782222][ T5917] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  199.791963][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'.
[  199.800856][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'.
[  201.357940][ T5917] usb 3-1: config 0 has no interfaces?
[  201.363522][ T5917] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  201.372641][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.389609][ T5917] usb 3-1: config 0 descriptor??
[  202.418301][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'.
[  203.847327][   T30] audit: type=1400 audit(1755234009.629:489): avc:  denied  { name_bind } for  pid=7321 comm="syz.1.249" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  204.175547][   T30] audit: type=1800 audit(1755234010.149:490): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.250" name="bus" dev="ramfs" ino=13669 res=0 errno=0
[  204.351769][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'.
[  204.584796][ T5961] usb 3-1: USB disconnect, device number 4
[  205.101411][ T7351] ksmbd: Unknown IPC event: 3, ignore.
[  205.403098][ T7354] usb usb8: usbfs: process 7354 (syz.1.253) did not claim interface 0 before use
[  205.520779][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'.
[  205.529656][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'.
[  205.590159][   T30] audit: type=1800 audit(1755234011.489:491): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.254" name="bus" dev="ramfs" ino=13054 res=0 errno=0
[  206.517606][ T7373] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  207.132418][ T7381] tc_dump_action: action bad kind
[  207.939377][ T7392] ipvlan2: entered promiscuous mode
[  208.600238][ T5924] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  208.792395][ T7400] lo speed is unknown, defaulting to 1000
[  208.820220][   T30] audit: type=1800 audit(1755234014.789:492): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.264" name="bus" dev="ramfs" ino=13903 res=0 errno=0
[  208.840822][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.073825][ T5924] usb 5-1: config 0 has no interfaces?
[  209.100353][ T5924] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.100382][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.174175][ T5924] usb 5-1: config 0 descriptor??
[  209.539170][ T7395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.122199][   T30] audit: type=1400 audit(1755234016.059:493): avc:  denied  { create } for  pid=7411 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  210.963567][ T7422] pim6reg1: entered allmulticast mode
[  211.459229][   T30] audit: type=1400 audit(1755234017.429:494): avc:  denied  { watch } for  pid=7426 comm="syz.2.270" path="/50/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  211.692077][ T7429] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  211.721507][ T5924] usb 5-1: USB disconnect, device number 3
[  211.813148][   T30] audit: type=1400 audit(1755234017.429:495): avc:  denied  { watch_reads } for  pid=7426 comm="syz.2.270" path="/50/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  211.973190][   T30] audit: type=1400 audit(1755234017.489:496): avc:  denied  { create } for  pid=7426 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  212.042127][   T30] audit: type=1400 audit(1755234017.839:497): avc:  denied  { ioctl } for  pid=7426 comm="syz.2.270" path="socket:[13203]" dev="sockfs" ino=13203 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  212.264932][ T7444] tc_dump_action: action bad kind
[  212.275795][ T7444] netlink: 'syz.0.271': attribute type 10 has an invalid length.
[  212.283629][ T7444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'.
[  212.292848][ T7444] dummy0: entered promiscuous mode
[  212.300917][ T7444] bridge0: port 3(dummy0) entered blocking state
[  212.308173][ T7444] bridge0: port 3(dummy0) entered disabled state
[  212.317941][ T7444] dummy0: entered allmulticast mode
[  212.395065][ T7444] bridge0: port 3(dummy0) entered blocking state
[  212.401682][ T7444] bridge0: port 3(dummy0) entered forwarding state
[  213.099603][ T7460] tc_dump_action: action bad kind
[  213.524577][ T7464] ipvlan0: entered promiscuous mode
[  214.313095][ T7474] overlayfs: failed to resolve './file0': -2
[  214.471764][ T7476] libceph: resolve '4' (ret=-3): failed
[  214.632257][ T7476] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  215.804716][   T30] audit: type=1400 audit(1755234021.779:498): avc:  denied  { read write } for  pid=7482 comm="syz.2.279" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  215.829213][    C0] vkms_vblank_simulate: vblank timer overrun
[  216.213378][   T30] audit: type=1400 audit(1755234021.779:499): avc:  denied  { open } for  pid=7482 comm="syz.2.279" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  216.257101][ T7499] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  217.314915][ T7509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7509 comm=syz.1.282
[  217.624998][   T30] audit: type=1400 audit(1755234023.209:500): avc:  denied  { create } for  pid=7506 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  217.743558][   T30] audit: type=1400 audit(1755234023.219:501): avc:  denied  { ioctl } for  pid=7506 comm="syz.1.282" path="socket:[14364]" dev="sockfs" ino=14364 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  217.767989][    C0] vkms_vblank_simulate: vblank timer overrun
[  217.807371][   T30] audit: type=1400 audit(1755234023.229:502): avc:  denied  { create } for  pid=7506 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  217.857213][   T30] audit: type=1400 audit(1755234023.239:503): avc:  denied  { ioctl } for  pid=7506 comm="syz.1.282" path="socket:[14365]" dev="sockfs" ino=14365 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  217.881837][    C0] vkms_vblank_simulate: vblank timer overrun
[  217.910199][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  217.979962][   T30] audit: type=1400 audit(1755234023.319:504): avc:  denied  { shutdown } for  pid=7506 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  218.120292][ T5917] usb 2-1: Using ep0 maxpacket: 32
[  218.128456][ T5917] usb 2-1: config 4 has an invalid interface number: 8 but max is 0
[  218.175019][ T5917] usb 2-1: config 4 has no interface number 0
[  218.266755][ T5917] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  218.320354][   T92] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  218.332211][ T5917] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  218.403345][   T30] audit: type=1400 audit(1755234024.369:505): avc:  denied  { write } for  pid=7527 comm="syz.4.285" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  218.426076][ T5917] usb 2-1: config 4 interface 8 has no altsetting 0
[  218.476144][ T5917] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  218.490264][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.626335][ T7533] netlink: 'syz.4.285': attribute type 1 has an invalid length.
[  218.675774][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.706456][ T7533] vlan3: entered allmulticast mode
[  218.714434][ T7533] veth1: entered allmulticast mode
[  218.723247][   T92] usb 4-1: config 0 has no interfaces?
[  218.728766][   T92] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  218.826390][ T5917] usb 2-1: Product: syz
[  218.873653][ T5917] usb 2-1: Manufacturer: syz
[  218.878606][ T5917] usb 2-1: SerialNumber: syz
[  218.886859][   T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.923561][ T7533] bond1: (slave vlan3): making interface the new active one
[  218.959615][   T92] usb 4-1: config 0 descriptor??
[  219.164747][ T7533] bond1: (slave vlan3): Enslaving as an active interface with an up link
[  219.188220][ T7535] tc_dump_action: action bad kind
[  219.216868][ T7530] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  220.098954][ T7553] sctp: [Deprecated]: syz.0.287 (pid 7553) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.098954][ T7553] Use struct sctp_sack_info instead
[  220.213923][ T5917] opticon 2-1:4.8: opticon converter detected
[  220.601963][ T5917] usb 2-1: opticon converter now attached to ttyUSB0
[  220.782061][ T5917] usb 2-1: USB disconnect, device number 3
[  220.815339][ T5917] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  220.834107][ T5917] opticon 2-1:4.8: device disconnected
[  221.125937][ T5886] usb 4-1: USB disconnect, device number 7
[  221.493159][ T7568] overlayfs: failed to resolve './file0': -2
[  221.541618][ T7568] libceph: resolve '4' (ret=-3): failed
[  221.766359][ T7568] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  222.080258][ T5846] Bluetooth: hci3: command 0x0405 tx timeout
[  222.481172][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  222.515838][ T7551] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  223.016713][ T7551] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  223.024190][ T7551] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  223.031383][ T7551] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  223.420553][   T30] audit: type=1800 audit(1755234029.389:506): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.293" name="bus" dev="ramfs" ino=14495 res=0 errno=0
[  223.445028][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.452113][ T7575] ------------[ cut here ]------------
[  223.457783][ T7575] kernel BUG at ./include/linux/pagemap.h:1398!
[  223.503990][ T7575] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  223.510416][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.2.292 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) 
[  223.522292][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  223.532331][ T7575] RIP: 0010:mpage_readahead+0x399/0x590
[  223.537900][ T7575] Code: 24 84 c0 74 08 3c 03 0f 8e 61 01 00 00 44 8b 7b 20 89 ef 44 89 fe e8 16 ae 72 ff 41 39 ef 0f 83 9f fd ff ff e8 88 b3 72 ff 90 <0f> 0b e8 80 b3 72 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1
[  223.557504][ T7575] RSP: 0000:ffffc900033f7310 EFLAGS: 00010246
[  223.563554][ T7575] RAX: 0000000000080000 RBX: ffffc900033f7800 RCX: ffffc9000f043000
[  223.571506][ T7575] RDX: 0000000000080000 RSI: ffffffff8248dfb8 RDI: 0000000000000004
[  223.579466][ T7575] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000004
[  223.587412][ T7575] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  223.595361][ T7575] R13: ffffc900033f7824 R14: fffff5200067ef04 R15: 0000000000000001
[  223.603310][ T7575] FS:  00007f3e7c2946c0(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000
[  223.612220][ T7575] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  223.618786][ T7575] CR2: 00007fe17d0e56c0 CR3: 000000005154a000 CR4: 00000000003526f0
[  223.626736][ T7575] Call Trace:
[  223.629999][ T7575]  <TASK>
[  223.632910][ T7575]  ? __pfx_mpage_readahead+0x10/0x10
[  223.638189][ T7575]  ? __pfx_blkdev_get_block+0x10/0x10
[  223.643545][ T7575]  ? folio_batch_move_lru+0x2c3/0x3b0
[  223.648907][ T7575]  ? __pfx_lru_add+0x10/0x10
[  223.653474][ T7575]  ? __pfx_blkdev_readahead+0x10/0x10
[  223.658880][ T7575]  read_pages+0x1c4/0xc70
[  223.663188][ T7575]  ? __pfx_read_pages+0x10/0x10
[  223.668019][ T7575]  page_cache_ra_unbounded+0x421/0x7d0
[  223.673456][ T7575]  force_page_cache_ra+0x246/0x340
[  223.678546][ T7575]  page_cache_sync_ra+0x110/0xa00
[  223.683549][ T7575]  filemap_get_pages+0xb62/0x1c20
[  223.688555][ T7575]  ? __pfx_filemap_get_pages+0x10/0x10
[  223.693994][ T7575]  ? __pfx___might_resched+0x10/0x10
[  223.699258][ T7575]  ? lockdep_hardirqs_on+0x7c/0x110
[  223.704434][ T7575]  filemap_splice_read+0x5cb/0xd60
[  223.709530][ T7575]  ? __pfx_filemap_splice_read+0x10/0x10
[  223.715154][ T7575]  ? __pfx_filemap_splice_read+0x10/0x10
[  223.720767][ T7575]  do_splice_read+0x282/0x370
[  223.725420][ T7575]  splice_direct_to_actor+0x2a1/0xa30
[  223.730770][ T7575]  ? __pfx_direct_splice_actor+0x10/0x10
[  223.736382][ T7575]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  223.742253][ T7575]  do_splice_direct+0x174/0x240
[  223.747081][ T7575]  ? __pfx_do_splice_direct+0x10/0x10
[  223.752429][ T7575]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  223.758299][ T7575]  ? bpf_lsm_file_permission+0x9/0x10
[  223.763650][ T7575]  ? security_file_permission+0x71/0x210
[  223.769270][ T7575]  ? rw_verify_area+0xcf/0x6c0
[  223.774019][ T7575]  do_sendfile+0xb06/0xe50
[  223.778413][ T7575]  ? __pfx_do_sendfile+0x10/0x10
[  223.783337][ T7575]  ? __pfx___schedule+0x10/0x10
[  223.788171][ T7575]  ? rcu_is_watching+0x12/0xc0
[  223.792915][ T7575]  __x64_sys_sendfile64+0x1d8/0x220
[  223.798094][ T7575]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  223.803797][ T7575]  do_syscall_64+0xcd/0x4c0
[  223.808281][ T7575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.814151][ T7575] RIP: 0033:0x7f3e7b38ebe9
[  223.818541][ T7575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.838126][ T7575] RSP: 002b:00007f3e7c294038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  223.846531][ T7575] RAX: ffffffffffffffda RBX: 00007f3e7b5b6180 RCX: 00007f3e7b38ebe9
[  223.854482][ T7575] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  223.862430][ T7575] RBP: 00007f3e7b411e19 R08: 0000000000000000 R09: 0000000000000000
[  223.870377][ T7575] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000
[  223.878325][ T7575] R13: 00007f3e7b5b6218 R14: 00007f3e7b5b6180 R15: 00007ffea8485088
[  223.886279][ T7575]  </TASK>
[  223.889295][ T7575] Modules linked in:
[  223.893214][    C1] vkms_vblank_simulate: vblank timer overrun
[  223.899555][ T7575] ---[ end trace 0000000000000000 ]---
[  223.909582][ T7575] RIP: 0010:mpage_readahead+0x399/0x590
[  223.915380][ T7575] Code: 24 84 c0 74 08 3c 03 0f 8e 61 01 00 00 44 8b 7b 20 89 ef 44 89 fe e8 16 ae 72 ff 41 39 ef 0f 83 9f fd ff ff e8 88 b3 72 ff 90 <0f> 0b e8 80 b3 72 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1
[  223.936546][ T7575] RSP: 0000:ffffc900033f7310 EFLAGS: 00010246
[  224.008315][ T7575] RAX: 0000000000080000 RBX: ffffc900033f7800 RCX: ffffc9000f043000
[  224.026979][ T7575] RDX: 0000000000080000 RSI: ffffffff8248dfb8 RDI: 0000000000000004
[  224.037645][ T7575] RBP: 0000000000000004 R08: 0000000000000004 R09: 0000000000000004
[  224.046330][ T7575] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000
[  224.116342][ T7591] ipvlan3: entered promiscuous mode
[  224.361885][ T7575] R13: ffffc900033f7824 R14: fffff5200067ef04 R15: 0000000000000001
[  224.373204][ T7575] FS:  00007f3e7c2946c0(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000
[  224.382405][ T7575] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.390836][ T7575] CR2: 000055557a1f65c8 CR3: 000000005154a000 CR4: 00000000003526f0
[  224.398876][ T7575] Kernel panic - not syncing: Fatal exception
[  224.405143][ T7575] Kernel Offset: disabled
[  224.409441][ T7575] Rebooting in 86400 seconds..