last executing test programs:

2m39.482063148s ago: executing program 0 (id=26):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mkdir(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x9)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x1001, 0x103)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=<r7=>0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0/file0\x00'})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

2m13.195811954s ago: executing program 0 (id=26):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mkdir(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x9)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x1001, 0x103)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=<r7=>0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0/file0\x00'})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

1m49.823078002s ago: executing program 2 (id=256):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000198c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x51f}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000003c0)}, {&(0x7f00000194c0)="5b064b4f3630a028931669553311406428d7723dccde52d8402f0455a9038b39f77c0c91a0c3d78d655e0896ae8855e1392502dc7bc1f8fb1500b22ca55bac683a7ad26e776021628b3ccb696d231dfcae1b7817d6b40db08f75a5b242ac67e9905482e840319657d48c484f50", 0x6d}, {&(0x7f0000019580)="05aeff1c8c78871ca691fc7f9e45092dc9168ea207bfd4411057b242281b9ddd2725b4f076e8732a3dc8953c33ed1cd54c906663ed09ea960d6fe76d49b1bead7f0fc984136952eedd4d91b77977308f6cfa081d47493b74685893ef4996c8461d64e3162e62ce71ccd6436970f3af76a525fb2b82d807c927f9ba2af4a5a473785f6dc7767f82296a", 0x89}], 0x3, &(0x7f0000019640)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hopopts_2292={{0x90, 0x29, 0x36, {0xc7, 0xe, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x6, [0xfffffffffffff10c, 0x7, 0xd4]}}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0xee9e, [0xb, 0x2, 0x7fff, 0x6, 0x922]}}, @pad1, @pad1, @generic={0x5}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0xff}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x0, 0x0, 0x0, 0x6}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}], 0xd8}}], 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
listen(r2, 0x0)
listen(r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24000000)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2)
ioperm(0x5, 0x2, 0x3ff)
mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001)

1m48.848660793s ago: executing program 2 (id=259):
r0 = socket$inet(0x2, 0x4000000000000000, 0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}], 0x1, 0xc0)
sendto$inet(r0, &(0x7f0000001340)="1b1bccfa4484aca2216be07e823002a7b3ae2747eb529adf14e2e7f0e394a0305349faa69474a7ec1fae69095352d0def56f95b9ba6a4e8beef813df0d899bfe01c788d3ebac015dd96e747317c55b7f22e69f90d82000478151bd91aa8c794646c87f6b2f91010cb135338036d2671ed954f80a4d0e7a24304ba5fb567daf60bb1570da7a0b17d719cda32cc47fc23ad1a7595744d863093406b684a482caf992f05925ecbeed9eb9ac9fc531c786057f1beb6b2eeec50ecfcaa56501d82564eea7904176702efcd1e19229fec8c016c79ead53bb3470a5d617848c6f04aa792ff87c093e9f502f0e015087d0b4152c1fba6fde773cc817b98f1cb782248bde12f2e2924cbb6d7abd68bc7995381e0e9292cc5f7ebda910329d5caf4d3631c10b5de49ab909b9a0876df525f7fea2bddd97c5ba2f71ec4a987d7a5d2b66f51e95c4a1c2aa65be99e0aa20d5407b84367e718472a575ddfbfc4f979a001f0eff0fbd24d6e4c16299421db3d4c1859f925e4a43d830c0ccf5a93e35b99c76889b8efbc78b0b39c2f137fd1ae68b1a17a63a9044f47570bf9413d46e38c9a8ed6254db3f7582bbfe7e52a95a160c3bcf96fe88425af623f7d40cc225c3bd42e429b8a6b09b1f4dd9b941f064d14df9271a54e2ac56d1bae4bd2552dcb4f1fd8e8977c8a40eafcf7fd7437425a185056ad040d6ea0dd2a8db133b3660d6b12a28ad0542e2706ffe5476792785b2a10ec71674ed3d2670eeac826561f5464358df79284ca0df7dec46298689f0c2ee69c7b5263b05e88495c6a4f3c486faf73d449c78065566c6856e76c6755ae9e14872b2d87cc12fcb24fe03ce7507825e0ad7a0514a6bc8f65218fe67dcce19ca02c7c2ae36040f297fa1777c290d966961b6f3db59f0d74dd7adeba31347880b6c547e0b24b481f659c4b1ea4add286f2619196ec36330a177ce9903874786fe25281048f36c1796830280d0103a04a38582165e7ef471ebf830a80940435b952560be7db1b1fdaa9a720904e6ecbb4ffd5ae32fc4bd2761e891fe8bc97ea033b4376030d120e9e713d9b3def9f9ca2450fefcc19afcd6ccbf4794bfdbfb929d3830a8c8f0ad105f340d24401e8d878ac772b5bd042fb4969fea7d64f78bf40f036ea717d69f5c14ed911c410b1560c699e3f7aea3454387d4c5d4a5444c56af0d6a6457e7e5cda28e9c2805e32ddd0d6c2684a5ba0f0dea389fbb6c8aee9cba7d186a321eaaea86a0624a9cc38c1c4ffcc4d32092d1be18e31f28e4714f05940c1f938aa1142048392245691e7073ef008ae942ace65fe7b5f3a55b0b201da3f35d978bf23609a67e72cbe89a2247a50d2437cd6dca50d9f81c449d83e4fb8a4217e160a2562432b7eed9e63ef9dfd21ec1efba453cbc376d8ca9071fcd77d567a3957374b93398217da5d3f902484921168c3c6f46a2a4e6912b5c38100606f3e6fd8503f4f2fac4945357e49fb9d48261e84f788ccd5d38ee4e14a5f0db81b2e1c698695b006f7b5c10cf40ab7df19e8ce66fbce54e2b94c5d49166ac9a65316a24ce98b117eb62e7010a061bfe81d8ba70a7395854cbf70515508b96ceebd4829b72e3e17ffb96ba051d61d132f499f741b6d3fd28d6ccc9e9d38d867b8617b2ea0e257a5653df8713ed6b6c4642d9a8979ae007dba5b7afe8bbc40852bc62b3636604dbb284e5b9c11a628d7f287b94afe2f7bb2c5bbe7dd9a8b6b3ed4a6dd0d36ed27cf4cf7a6f986eab1a4e5d4036f33a5179a4fcdfa392ed2ec7054b269ccc146ec73315fb1e76f3e5473c9eee801259d7a55aaa67ba802d1a80016d72315f80a887dd26a666613b973cb38b8809457b7975dfeb2b6c9d949a4035df3541df9900763667cf42f235016040d8db95118b5591bde9007ae8d94ee1df3129ffbdb78fa6cc620547a3ce8a31d0eb632d2bbeca6f7ed732f7a7dd0698b936b1808261554ab788d81b4634dd1221955e8a40a0a297781ee6141ffda956e13563400f17562f121667e90af4e9ed4d15690f608e5468022a19b42d5739c11b54ad3e007f7faeaa6942e0b5cce8a115bfe2e7581e7511c6ea24a0254b09ff47fc40e5c6cd8de142cdbe09199d35d203e90e40f165409095d7efa3540abdb0af5a7cd3c1944f71c2de1e250db15ea2b706d610df79fbceaee909a07a811402ea2ffb860b048fe04bd91c32a31a4f61260f91aafecc4bf861d543eb04e52093c7f6a3696ae7d29da797da0453db8e791254a024fb24d6bcada3f3784912027836a77c71098645882adf66a54de2dc962b0048b63b2dfe324bb2f330a4dbde9037c3d161b32fb2bd6a426b864e8c7dc06d3b989acffbed23a7f0762630eb25b994d3772522aafba306f37bf6e45fa826477fc24ab0cbfda45ba6db3c7a71a183537e7f8eddf93f6b5464121bbf33723743f30e1ee53ad8d379a16f58304062b78dea427d593bfff50d5ca529be871d3bf4e1f3829c99cbb6b70e96a8dda723b1591b9bf94f16e096e4755e0290bf7604f38803146ea19c2a177a8d07e0d1b9b05e19b93a76e455ad5293a2cabbdd0e932b65c3aa6902c0bc3c0a56f6da5ace3cab93df6518d0493fc7dc45db5aafff6ef0072d97a4bc61769a873a6cf282a393c539f16c386aeb0ad2a9c26a6c2e593e1624278ecae02b9f33919ae7d26762dd039d31a736e3b4db59f219556c3c18921cc0cd17dc2ca592a995af081be9cdb29fa27d7834cf72248b7732695c314c65916f6989", 0x79f, 0x20000000, 0x0, 0x0)

1m48.538506333s ago: executing program 2 (id=260):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x11, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x5, 0x6, @dev}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000)
mbind(&(0x7f0000460000/0x4000)=nil, 0x4000, 0x4, 0x0, 0xc0, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r3 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
move_pages(r4, 0x0, 0x0, 0x0, 0x0, 0x2)
capset(0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1m47.726010239s ago: executing program 0 (id=26):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mkdir(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x9)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x1001, 0x103)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=<r7=>0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0/file0\x00'})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

1m43.412844019s ago: executing program 2 (id=270):
syz_io_uring_setup(0x6e11, &(0x7f0000000640)={0x0, 0xec27, 0x4000, 0x1, 0x153}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
semget$private(0x0, 0x7, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r4, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050)

1m42.561254532s ago: executing program 2 (id=272):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xb51094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r2, 0x0, 0x2, 0x100006dd})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r2, 0x0, &(0x7f00005c6000/0x2000)=nil, 0x2000, 0x9})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r2, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2})
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180))
write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffc, 0x2, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0xfffffffc, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0xfffffffc], [0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x8000, 0xed0, 0x4000000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c)
syz_io_uring_setup(0x110, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000004b000/0x1000)=nil, 0x400000, 0x3, 0x2})

1m41.458625127s ago: executing program 2 (id=277):
r0 = userfaultfd(0x80000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
syz_open_dev$MSR(&(0x7f0000000080), 0x7, 0x0)
sched_setscheduler(0x0, 0x2, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) (async)
creat(&(0x7f0000000040)='./file0\x00', 0x140)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=<r6=>0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x2)

1m26.189210777s ago: executing program 32 (id=277):
r0 = userfaultfd(0x80000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async)
syz_open_dev$MSR(&(0x7f0000000080), 0x7, 0x0)
sched_setscheduler(0x0, 0x2, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) (async)
creat(&(0x7f0000000040)='./file0\x00', 0x140)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
removexattr(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=<r6=>0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x2)

1m7.988967488s ago: executing program 0 (id=26):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mkdir(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x9)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x1001, 0x103)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=<r7=>0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0/file0\x00'})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

43.255717272s ago: executing program 0 (id=26):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mkdir(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x9)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x1001, 0x103)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=<r7=>0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0/file0\x00'})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

37.95843124s ago: executing program 4 (id=382):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

36.833635771s ago: executing program 4 (id=385):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x3000d041)
r1 = socket$kcm(0x10, 0x2, 0x4)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
shmctl$SHM_LOCK(0x0, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x891e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
rseq(0x0, 0x0, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

36.470413275s ago: executing program 4 (id=386):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000380)='./bus\x00', 0x48)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000100)=ANY=[], 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x31f}, &(0x7f0000000040), &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18, 0x20040801}}], 0x1, 0x0)
accept4$unix(r3, 0x0, 0x0, 0x80800)

35.845575577s ago: executing program 4 (id=387):
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={{0x0, 0xea60}, {0x0, 0xea60}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="280000000850e55fe7bc25250a0000000700400105000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x400a000)
recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000002780)=""/59, 0x3b, 0xf27b)

33.290514898s ago: executing program 4 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xb51094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x4, 0x4be7)
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x90, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

32.280573349s ago: executing program 4 (id=397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x80, 0x8, 0x2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

31.230612085s ago: executing program 5 (id=399):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x0, 0x184)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x6000001f})
read$char_usb(r4, &(0x7f00000004c0)=""/185, 0xb9)

30.241796316s ago: executing program 5 (id=400):
r0 = syz_io_uring_setup(0x6e11, &(0x7f0000000640)={0x0, 0xec27, 0x4000, 0x1, 0x153}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
semget$private(0x0, 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r4}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0x76e547c)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x2000001, 0x400, 0x0, 0x3bd})

30.223439658s ago: executing program 1 (id=401):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x500, 0x5}, 0x8)
unshare(0x22020400)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/psched\x00')
r4 = fanotify_init(0x200, 0x0)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f00000001c0)=0x200)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@hyper}, 0x1, 0x2, 0x1})
fanotify_mark(r4, 0x409, 0x40001003, r3, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000040)="050000000100", 0x6)

29.297254259s ago: executing program 1 (id=402):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
membarrier(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
setgid(0x0)
setresgid(0xee01, 0x0, 0x0)

28.830904427s ago: executing program 5 (id=403):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000880))
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket(0x25, 0x5, 0x0)
r6 = syz_open_pts(0xffffffffffffffff, 0x28803)
ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0x800, 0x5, 0x4, 0xffffffff, 0x0, "fb32950e70792bafdbea8e1abda8b22cba9faf"})
connect$inet(r5, &(0x7f0000000200)={0x25, 0x4e20, @loopback}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13)
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003c000000000006907864010102ac1414aa40010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001312623eebe039a1f617fd02722e3486ebd9000096e704a6e1fded8f90c38c2b5d71c9e8b74b93df9fa86ee75947c6b9a04f572aa40ff43fe14dc10cad45da91898a28a0405342f1cab5097aee4ff131034baf841c6d5f40fd09589d767daffaa77989e1d149e27852fad71deb9f9ee544491d61cae86a179980328803e293eae8d31a46396429b2363636264d02c6edae2fde8aaec94b118bd52aa470"], 0x0)

28.719731342s ago: executing program 1 (id=404):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (async)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60)

28.278239053s ago: executing program 1 (id=405):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000180)={0x0, 0x10, 0x1})
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x2, 0x4}, {0x67, 0x7}}}}, 0x11)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x16d, 0x8, &(0x7f00000004c0)="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", &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10)
r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806825, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

27.312906087s ago: executing program 1 (id=407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x9, 0xffe0}, {0xb, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x50)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x1}, @local=@item_4={0x3, 0x2, 0xa, "8b937825"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x38}}, 0x0)

27.045127285s ago: executing program 3 (id=408):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x54}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
eventfd2(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000002d000100000000000000000008080000", @ANYRES64, @ANYBLOB="0c00d50001"], 0x28}], 0x1, 0x0, 0x0, 0x20040110}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

26.248897165s ago: executing program 3 (id=409):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfe}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000a80)=""/37, 0x53}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001840)=""/105, 0x69}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6)
io_setup(0x7, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4)
ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000240)={0x7355, 0x3, 0x3})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000640), 0x4)
sendfile(0xffffffffffffffff, r3, 0x0, 0x9)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000005c0)="a07356209c7c57c023035a536076bd3e8736b2eaf21f0a8f937d41561e156eb4c55529a1b820dbaee533f961ac39fc00873aa61b3f7b8a2c90b6cd3d398d38ec7616b59caaea1ed361adfeffb4881863dfbb88fd1d62bc1737188b5cc337ba3fcf", 0x0, 0x5, 0x1000000}, 0x4c)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, &(0x7f00000002c0)={0xa7, 0x2, 0x1, 0x5, 0x2, [0xfffffffb, 0x8, 0x1000, 0xffff3d31]})

25.451142457s ago: executing program 5 (id=410):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7ffe, 0x6c})
r1 = io_uring_setup(0x6db7, &(0x7f0000000180))
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$x25(r5, &(0x7f0000000540)="10cd22", 0x3, 0x20008880, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x33, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e08000111ea78cd83c352435b811ce1c019078000000000000000000000000986220f304ff46d008d4a13632e344d62016188b4f6cd01d0eca7e041a1318d353db43e768a5a040fdee0546c4327fb7306cb089319ca5f083ac474ef5c6d344090000009723e474d4f90766592134b732c7575f0dbd02789e7093f649a892fdd9f09907c28983f2"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x80, 0x3}}}}}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x808)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(r1, 0xffffffffffffffff, 0x0)

25.365119332s ago: executing program 3 (id=411):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x0, 0x184)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x6000001f})
read$char_usb(r4, &(0x7f00000004c0)=""/185, 0xb9)

24.098249376s ago: executing program 5 (id=412):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x11, 0x0, 0x8, 0x615, 0x3, 0x4, 0x22, 0xa, '\x00', 0x7, 0x3})
openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x52)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xaf, 0xae, 0x99, 0x10, 0x867, 0x9812, 0xce16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfd, 0x0, 0x0, 0xa, 0xbd, 0x64}}]}}]}}, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x33, 0x1, 0x7, 0x1, 0x3, 0x38, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x94, 0x8, 0x7}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xb, 0x8, 0x5, 0xff, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42a}}, {0x6, &(0x7f0000000140)=@string={0x6, 0x3, "d26d0bd7"}}, {0xd6, &(0x7f0000000280)=ANY=[@ANYBLOB="d603071b219531f27c8c1ab62a111fa0246ae995b9416bddf7563d024bf33477bc25e568f781627cf953e92dd85416490ce368a7bc03577c8bb3c263cdd56206940c6f537dde3ec161deebc5f07473ac6471c004702db33ea4a0d7abd285772010064be3ac"]}, {0x0, 0x0}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1404}}]})

23.595448555s ago: executing program 3 (id=413):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

22.312693478s ago: executing program 3 (id=414):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2391, 0x0, 0x1, 0x16c, 0x0, r0}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
sendfile(r0, r0, 0x0, 0xfffffffffffffffd)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(r4, 0x6, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x69c780})
io_uring_enter(r1, 0x3516, 0x4, 0x0, 0x0, 0x0)

22.243897847s ago: executing program 0 (id=26):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mkdir(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x9)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0)
mknodat$null(r2, &(0x7f00000002c0)='./file0\x00', 0x1001, 0x103)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)=<r7=>0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file0/file0\x00'})
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

20.687681595s ago: executing program 1 (id=415):
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4a22, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="ab", 0x1}], 0x1}}], 0x2, 0x0)

20.687315698s ago: executing program 3 (id=416):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

20.522053436s ago: executing program 5 (id=417):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 33 (id=397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x80, 0x8, 0x2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ect_r:dri_device_t tclass=chr_file permissive=1
[  120.269042][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.280754][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.318731][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.331857][   T30] audit: type=1400 audit(1741678453.195:502): avc:  denied  { ioctl } for  pid=6621 comm="syz.1.130" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  120.387082][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.404043][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.578325][   T30] audit: type=1400 audit(1741678453.635:503): avc:  denied  { connect } for  pid=6626 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  120.810963][ T6641] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  121.198252][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.393552][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.418998][   T30] audit: type=1326 audit(1741678454.115:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  121.451851][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.458397][   T30] audit: type=1326 audit(1741678454.115:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  121.465013][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.490763][   T30] audit: type=1326 audit(1741678454.125:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  121.777307][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  121.785326][   T30] audit: type=1326 audit(1741678454.125:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  121.808851][   T30] audit: type=1326 audit(1741678454.125:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  121.867757][ T6647] netlink: 'syz.3.134': attribute type 4 has an invalid length.
[  121.905117][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  121.949717][ T6648] netlink: 'syz.3.134': attribute type 4 has an invalid length.
[  121.964344][ T6632] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  122.028351][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.040254][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.063104][   T30] audit: type=1326 audit(1741678454.125:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6636 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  122.122427][ T6640] lo speed is unknown, defaulting to 1000
[  122.171652][ T6640] lo speed is unknown, defaulting to 1000
[  122.178565][ T6640] lo speed is unknown, defaulting to 1000
[  122.288999][ T6640] infiniband s
z1: set active
[  122.294027][ T6640] infiniband s
z1: added lo
[  122.303282][ T6640] s
z1: rxe_create_cq: returned err = -12
[  122.309269][ T6640] infiniband s
z1: Couldn't create ib_mad CQ
[  122.315422][ T6640] infiniband s
z1: Couldn't open port 1
[  122.331534][ T6640] RDS/IB: s
z1: added
[  122.335867][ T6640] smc: adding ib device s
z1 with port count 1
[  122.343741][ T6640] smc:    ib device s
z1 port 1 has pnetid 
[  122.352048][ T6640] lo speed is unknown, defaulting to 1000
[  122.408035][ T6640] lo speed is unknown, defaulting to 1000
[  122.477691][ T6640] lo speed is unknown, defaulting to 1000
[  122.478299][ T6403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.562538][ T6403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.571392][ T6403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.581145][ T6403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.594595][   T26] lo speed is unknown, defaulting to 1000
[  122.616771][ T5909] lo speed is unknown, defaulting to 1000
[  122.888146][ T6640] lo speed is unknown, defaulting to 1000
[  122.995679][ T6640] lo speed is unknown, defaulting to 1000
[  123.269195][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.547631][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.863521][ T5828] Bluetooth: hci0: command 0x0401 tx timeout
[  124.116646][ T6675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  125.843517][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.871796][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.964707][ T6690] kernel read not supported for file /eth0 (pid: 6690 comm: syz.1.141)
[  125.982710][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  125.982724][   T30] audit: type=1400 audit(1741678459.455:534): avc:  denied  { setopt } for  pid=6691 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  126.112618][   T30] audit: type=1800 audit(1741678459.455:533): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.141" name="eth0" dev="mqueue" ino=11762 res=0 errno=0
[  126.271585][   T30] audit: type=1400 audit(1741678459.485:535): avc:  denied  { write } for  pid=6691 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  126.343957][ T5828] Bluetooth: hci0: command 0x0401 tx timeout
[  126.457285][ T6707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  126.511311][ T6707] serio: Serial port ptm0
[  126.779375][   T30] audit: type=1400 audit(1741678460.245:536): avc:  denied  { ioctl } for  pid=6712 comm="syz.4.145" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  127.585432][ T6184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.680830][ T6184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.833376][ T6184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.881934][   T30] audit: type=1326 audit(1741678461.345:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x0
[  127.904638][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.398705][ T6734] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  128.409089][ T6734] cramfs: wrong magic
[  128.808138][ T6184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.883946][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.901311][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.912105][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.921506][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.929175][ T5818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  128.936562][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.026276][ T6736] lo speed is unknown, defaulting to 1000
[  129.129997][ T6184] bridge_slave_1: left allmulticast mode
[  129.146339][ T6184] bridge_slave_1: left promiscuous mode
[  129.156576][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.225214][ T6184] bridge_slave_0: left allmulticast mode
[  129.259913][ T6184] bridge_slave_0: left promiscuous mode
[  129.267464][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.268961][ T6742] netlink: 256 bytes leftover after parsing attributes in process `syz.3.153'.
[  129.349575][   T30] audit: type=1400 audit(1741678462.815:538): avc:  denied  { bind } for  pid=6741 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  129.368705][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.419918][ T6743] mmap: syz.3.153 (6743) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  129.471851][   T30] audit: type=1400 audit(1741678462.815:539): avc:  denied  { name_bind } for  pid=6741 comm="syz.3.153" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  129.560196][   T30] audit: type=1400 audit(1741678462.815:540): avc:  denied  { node_bind } for  pid=6741 comm="syz.3.153" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  129.657508][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'.
[  130.086333][   T30] audit: type=1400 audit(1741678463.505:541): avc:  denied  { bind } for  pid=6739 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  130.147399][ T6741] ALSA: mixer_oss: invalid OSS volume ''
[  130.242383][ T6754] ALSA: mixer_oss: invalid OSS volume 'L'
[  130.381760][   T30] audit: type=1400 audit(1741678463.805:542): avc:  denied  { create } for  pid=6751 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  130.402295][    C0] vkms_vblank_simulate: vblank timer overrun
[  130.557764][ T6757] FAULT_INJECTION: forcing a failure.
[  130.557764][ T6757] name failslab, interval 1, probability 0, space 0, times 0
[  130.586697][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.3.157 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  130.586727][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  130.586737][ T6757] Call Trace:
[  130.586740][ T6757]  <TASK>
[  130.586745][ T6757]  dump_stack_lvl+0x16c/0x1f0
[  130.586765][ T6757]  should_fail_ex+0x50a/0x650
[  130.586798][ T6757]  ? fs_reclaim_acquire+0xae/0x150
[  130.586815][ T6757]  ? tomoyo_encode2+0x100/0x3e0
[  130.586830][ T6757]  should_failslab+0xc2/0x120
[  130.586844][ T6757]  __kmalloc_noprof+0xcb/0x510
[  130.586855][ T6757]  ? d_absolute_path+0x137/0x1b0
[  130.586872][ T6757]  tomoyo_encode2+0x100/0x3e0
[  130.586888][ T6757]  tomoyo_encode+0x29/0x50
[  130.586902][ T6757]  tomoyo_realpath_from_path+0x19d/0x720
[  130.586921][ T6757]  tomoyo_path_number_perm+0x248/0x590
[  130.586934][ T6757]  ? tomoyo_path_number_perm+0x235/0x590
[  130.586947][ T6757]  ? lockdep_hardirqs_on_prepare+0x351/0x420
[  130.586963][ T6757]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  130.586991][ T6757]  ? do_raw_spin_unlock+0x172/0x230
[  130.587001][ T6757]  ? _raw_spin_unlock+0x28/0x50
[  130.587013][ T6757]  ? d_add+0x43c/0x730
[  130.587028][ T6757]  ? do_raw_spin_unlock+0x172/0x230
[  130.587040][ T6757]  ? simple_lookup+0x12c/0x180
[  130.587056][ T6757]  ? get_current_fs_domain+0x184/0x1f0
[  130.587070][ T6757]  tomoyo_path_mkdir+0x9c/0xe0
[  130.587081][ T6757]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  130.587095][ T6757]  security_path_mkdir+0x154/0x2f0
[  130.587112][ T6757]  do_mkdirat+0x176/0x3a0
[  130.587123][ T6757]  ? __pfx_do_mkdirat+0x10/0x10
[  130.587135][ T6757]  ? getname_flags.part.0+0x1c5/0x550
[  130.587151][ T6757]  __x64_sys_mkdir+0xef/0x140
[  130.587162][ T6757]  do_syscall_64+0xcd/0x250
[  130.587177][ T6757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.587192][ T6757] RIP: 0033:0x7fd52bf8d169
[  130.587201][ T6757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.587211][ T6757] RSP: 002b:00007fd52ce91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  130.587221][ T6757] RAX: ffffffffffffffda RBX: 00007fd52c1a6080 RCX: 00007fd52bf8d169
[  130.587228][ T6757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000400
[  130.587234][ T6757] RBP: 00007fd52ce91090 R08: 0000000000000000 R09: 0000000000000000
[  130.587240][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.587246][ T6757] R13: 0000000000000000 R14: 00007fd52c1a6080 R15: 00007ffd359667d8
[  130.587260][ T6757]  </TASK>
[  130.587291][ T6757] ERROR: Out of memory at tomoyo_realpath_from_path.
[  130.994470][ T5828] Bluetooth: hci4: command tx timeout
[  131.047646][ T6184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.113763][ T6184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.170714][ T6184] bond0 (unregistering): Released all slaves
[  132.527571][ T6736] chnl_net:caif_netlink_parms(): no params data found
[  133.073056][ T5828] Bluetooth: hci4: command tx timeout
[  133.082506][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.088843][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.411858][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  133.411877][   T30] audit: type=1400 audit(1741678466.845:546): avc:  denied  { read write } for  pid=6788 comm="syz.2.161" dev="sockfs" ino=12183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.552486][   T30] audit: type=1400 audit(1741678466.845:547): avc:  denied  { nlmsg_write } for  pid=6788 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  133.643089][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.733612][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.740932][ T6736] bridge_slave_0: entered allmulticast mode
[  133.774221][ T6736] bridge_slave_0: entered promiscuous mode
[  133.809315][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.351352][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.371896][ T6736] bridge_slave_1: entered allmulticast mode
[  134.379948][ T6736] bridge_slave_1: entered promiscuous mode
[  134.531489][ T6184] hsr_slave_0: left promiscuous mode
[  134.675818][ T6800] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  134.719761][ T6800] serio: Serial port ptm0
[  135.056718][ T6184] hsr_slave_1: left promiscuous mode
[  135.167820][ T5828] Bluetooth: hci4: command tx timeout
[  135.218331][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.321672][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.349373][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.439985][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.527616][ T6184] veth1_macvtap: left promiscuous mode
[  135.539968][ T6184] veth0_macvtap: left promiscuous mode
[  135.574634][ T6184] veth1_vlan: left promiscuous mode
[  135.633549][ T6184] veth0_vlan: left promiscuous mode
[  136.594311][ T6184] team0 (unregistering): Port device team_slave_1 removed
[  136.631661][ T6184] team0 (unregistering): Port device team_slave_0 removed
[  137.222144][ T5828] Bluetooth: hci4: command tx timeout
[  137.450845][ T6736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.498009][ T6736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.592193][   T30] audit: type=1326 audit(1741678471.045:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  137.677280][   T30] audit: type=1326 audit(1741678471.045:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  137.707990][ T6736] team0: Port device team_slave_0 added
[  137.726293][   T30] audit: type=1326 audit(1741678471.055:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  137.772902][ T6736] team0: Port device team_slave_1 added
[  137.776226][   T30] audit: type=1326 audit(1741678471.055:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  137.842218][   T30] audit: type=1326 audit(1741678471.055:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  137.867284][  T118] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.889381][   T30] audit: type=1326 audit(1741678471.055:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64e498bad0 code=0x7ffc0000
[  137.916693][   T30] audit: type=1326 audit(1741678471.055:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  137.940310][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  138.004339][   T30] audit: type=1326 audit(1741678471.055:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  138.104485][  T118] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  138.105295][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.145937][  T118] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.270498][  T118] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  138.280141][ T5909] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  138.327895][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.329248][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.393824][  T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.393999][ T6736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.500740][  T118] usb 5-1: config 0 descriptor??
[  138.507449][ T5909] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  138.552021][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  138.552036][   T30] audit: type=1326 audit(1741678472.025:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e498cd6b code=0x7ffc0000
[  138.554680][  T118] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  138.558205][   T30] audit: type=1326 audit(1741678472.025:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e498cd6b code=0x7ffc0000
[  138.591872][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.612091][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.723257][ T5909] usb 4-1: config 0 descriptor??
[  138.740302][ T5909] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  138.973024][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.980093][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.007341][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.288544][   T30] audit: type=1326 audit(1741678472.025:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e498cd6b code=0x7ffc0000
[  139.311697][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.661873][   T30] audit: type=1326 audit(1741678472.025:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64e49bfa25 code=0x7ffc0000
[  139.715310][ T6736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.859455][   T30] audit: type=1326 audit(1741678472.205:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52bf8cd6b code=0x7ffc0000
[  139.882822][   T30] audit: type=1326 audit(1741678472.205:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52bf8cd6b code=0x7ffc0000
[  139.928049][   T30] audit: type=1326 audit(1741678472.205:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd52bf8cd6b code=0x7ffc0000
[  140.396513][   T30] audit: type=1326 audit(1741678472.205:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6827 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd52bfbfa25 code=0x7ffc0000
[  140.420507][   T30] audit: type=1326 audit(1741678472.225:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  140.443787][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.955524][   T30] audit: type=1326 audit(1741678472.225:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e498d169 code=0x7ffc0000
[  141.048920][ T6736] hsr_slave_0: entered promiscuous mode
[  141.074714][ T6736] hsr_slave_1: entered promiscuous mode
[  141.094132][ T6736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.156611][ T6736] Cannot create hsr debugfs directory
[  141.365273][ T5869] usb 4-1: USB disconnect, device number 8
[  141.392039][   T26] usb 5-1: USB disconnect, device number 4
[  142.583164][ T5898] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  142.693603][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[  142.702791][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[  142.886572][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  142.986532][ T5898] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  143.020277][ T5898] usb 4-1: config 179 has no interface number 0
[  143.067407][ T6889] 9pnet_fd: Insufficient options for proto=fd
[  143.089661][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  143.160371][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  143.217835][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  143.637441][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  143.659441][ T5898] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  143.701202][ T5898] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  143.770386][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.786443][ T6881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  144.213976][ T5898] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10
[  144.259181][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  144.259245][   T30] audit: type=1400 audit(1741678477.725:695): avc:  denied  { read } for  pid=5178 comm="acpid" name="js0" dev="devtmpfs" ino=2795 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  144.288706][ T6894] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  144.297755][   T30] audit: type=1400 audit(1741678477.725:696): avc:  denied  { open } for  pid=5178 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2795 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  144.297792][   T30] audit: type=1400 audit(1741678477.725:697): avc:  denied  { ioctl } for  pid=5178 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2795 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  144.347059][ T6894] audit: out of memory in audit_log_start
[  144.390807][ T5898] usb 4-1: USB disconnect, device number 9
[  144.396730][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  144.396777][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  144.472758][ T5898] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  144.580790][ T6736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  144.620917][ T6736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  144.659482][ T6736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  144.705499][ T6736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  144.909674][ T6736] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.987269][ T6736] 8021q: adding VLAN 0 to HW filter on device team0
[  145.243670][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.250791][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.525037][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.532272][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.450501][ T6736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.624820][ T6736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.861382][   T30] audit: type=1400 audit(1741678480.325:698): avc:  denied  { write } for  pid=6926 comm="syz.3.188" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  147.075318][ T6736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.727437][ T6943] lo speed is unknown, defaulting to 1000
[  147.847555][ T5898] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  147.997206][   T30] audit: type=1400 audit(1741678481.465:699): avc:  denied  { ioctl } for  pid=6926 comm="syz.3.188" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13624 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  148.025754][ T6736] veth0_vlan: entered promiscuous mode
[  148.040753][ T6736] veth1_vlan: entered promiscuous mode
[  148.131088][ T5898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  148.146828][ T5898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  148.156890][ T5898] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  148.236184][ T5898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  148.258979][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.309511][ T6736] veth0_macvtap: entered promiscuous mode
[  148.320122][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  148.386130][ T6736] veth1_macvtap: entered promiscuous mode
[  148.472919][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.526991][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.610828][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.616198][ T5898] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  148.639501][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.652220][ T5898] usb 2-1: USB disconnect, device number 8
[  148.659051][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.679142][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.690944][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.714307][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.854087][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.884378][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.967279][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.115625][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.129128][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.140036][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.150333][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.161920][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.180079][ T6965] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  149.187525][ T6965] cramfs: wrong magic
[  149.298634][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.311655][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.627511][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.917997][ T6930] bond_slave_0: entered promiscuous mode
[  149.924044][ T6930] bond_slave_1: entered promiscuous mode
[  150.595983][ T6930] macvlan2: entered promiscuous mode
[  150.638968][ T6930] bond0: entered promiscuous mode
[  150.662906][ T6930] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  150.678588][ T6736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.719220][ T6736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.741882][ T6736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.813263][ T6974] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  150.856050][ T6736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.903668][ T6974] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  151.712352][ T5826] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  151.912649][ T5826] usb 5-1: Using ep0 maxpacket: 8
[  152.013518][ T5826] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  152.077886][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.081806][ T5826] usb 5-1: config 179 has no interface number 0
[  152.108542][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.133625][ T5826] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  152.151442][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.161421][ T6988] SET target dimension over the limit!
[  152.169763][ T5826] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  152.187114][ T5826] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  152.201844][ T5826] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  152.214911][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.238770][ T5826] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  152.292245][ T5826] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  152.333630][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.412325][ T6980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  152.482920][ T6998] &È: renamed from macvlan0 (while UP)
[  152.488759][   T30] audit: type=1400 audit(1741678485.935:700): avc:  denied  { create } for  pid=6997 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  152.508120][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.661625][ T5909] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11
[  152.880383][ T5869] usb 5-1: USB disconnect, device number 5
[  152.880431][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  152.894580][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  152.940587][ T5869] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  152.954663][   T30] audit: type=1400 audit(1741678485.955:701): avc:  denied  { ioctl } for  pid=6997 comm="syz.1.201" path="socket:[13793]" dev="sockfs" ino=13793 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  152.979258][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.992755][ T5826] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  153.165601][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.187309][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.199691][ T5826] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  153.253377][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.283553][ T5826] usb 2-1: config 0 descriptor??
[  153.334488][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.442458][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  153.547533][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.619661][    T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  153.629983][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.664983][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.680232][    T9] usb 3-1: Product: syz
[  153.693773][    T9] usb 3-1: Manufacturer: syz
[  153.709667][    T9] usb 3-1: SerialNumber: syz
[  153.736546][    T9] usb 3-1: config 0 descriptor??
[  153.737645][ T5826] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0
[  153.788295][ T5826] hid-led 0003:0FC5:B080.0004: item fetching failed at offset 2/3
[  153.805966][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.818350][ T5826] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -22
[  153.995805][   T36] bridge_slave_1: left allmulticast mode
[  154.012592][   T36] bridge_slave_1: left promiscuous mode
[  154.018346][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.029508][ T5869] usb 3-1: USB disconnect, device number 5
[  154.264056][   T36] bridge_slave_0: left allmulticast mode
[  154.288808][   T36] bridge_slave_0: left promiscuous mode
[  154.312962][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.638219][   T30] audit: type=1400 audit(1741678488.105:702): avc:  denied  { create } for  pid=7025 comm="syz.3.203" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  154.658735][    C0] vkms_vblank_simulate: vblank timer overrun
[  154.691063][   T30] audit: type=1400 audit(1741678488.145:703): avc:  denied  { setattr } for  pid=7025 comm="syz.3.203" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  154.734620][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  154.752037][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  154.773595][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  154.785255][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  154.794104][ T5818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  154.801297][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.409650][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.421234][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.432634][   T36] bond0 (unregistering): Released all slaves
[  155.450686][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'.
[  155.540584][ T7043] lo speed is unknown, defaulting to 1000
[  155.800444][ T7052] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  155.807580][ T7052] cramfs: wrong magic
[  155.845680][   T30] audit: type=1400 audit(1741678489.295:704): avc:  denied  { ioctl } for  pid=7051 comm="syz.2.207" path="socket:[13924]" dev="sockfs" ino=13924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  155.914565][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[  155.994738][ T5869] usb 2-1: USB disconnect, device number 9
[  156.011045][ T7053] bridge_slave_1: left allmulticast mode
[  156.031834][ T7053] bridge_slave_1: left promiscuous mode
[  156.045907][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.219425][ T7053] bridge_slave_0: left allmulticast mode
[  156.238692][ T7053] bridge_slave_0: left promiscuous mode
[  156.267637][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.390732][   T30] audit: type=1400 audit(1741678489.825:705): avc:  denied  { create } for  pid=7061 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  156.743685][   T30] audit: type=1400 audit(1741678489.835:706): avc:  denied  { setopt } for  pid=7061 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  156.822276][ T5818] Bluetooth: hci4: command tx timeout
[  156.823552][   T30] audit: type=1326 audit(1741678489.965:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x0
[  157.998820][ T7087] syz.1.213 uses obsolete (PF_INET,SOCK_PACKET)
[  158.878296][   T36] hsr_slave_0: left promiscuous mode
[  158.888684][   T36] hsr_slave_1: left promiscuous mode
[  158.911849][ T5818] Bluetooth: hci4: command tx timeout
[  158.917686][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.941831][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.995004][ T7101] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  159.006051][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.050010][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.448978][   T36] veth1_macvtap: left promiscuous mode
[  159.465475][   T36] veth0_macvtap: left promiscuous mode
[  159.471084][   T36] veth1_vlan: left promiscuous mode
[  159.481545][   T36] veth0_vlan: left promiscuous mode
[  159.528456][ T7113] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  159.558974][ T7113] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  160.201856][   T30] audit: type=1400 audit(1741678493.655:708): avc:  denied  { listen } for  pid=7122 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  160.901778][ T5828] Bluetooth: hci0: command 0x0401 tx timeout
[  160.908622][ T5818] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  160.982193][ T5818] Bluetooth: hci4: command tx timeout
[  161.396355][ T7138] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.415366][ T7138] serio: Serial port ptm0
[  162.711352][   T36] team0 (unregistering): Port device team_slave_1 removed
[  162.757575][ T7148] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  162.765291][ T7148] cramfs: wrong magic
[  162.817287][   T36] team0 (unregistering): Port device team_slave_0 removed
[  162.993850][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  163.068890][ T5818] Bluetooth: hci4: command tx timeout
[  163.866866][ T7043] chnl_net:caif_netlink_parms(): no params data found
[  164.955550][ T7159] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  165.823106][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.087670][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.101894][ T5828] Bluetooth: hci0: command 0x0401 tx timeout
[  166.110803][ T5818] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  166.157797][ T7043] bridge_slave_0: entered allmulticast mode
[  166.173835][ T7043] bridge_slave_0: entered promiscuous mode
[  166.271402][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.291261][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.307124][ T7043] bridge_slave_1: entered allmulticast mode
[  166.387757][ T7183] Cannot find add_set index 0 as target
[  166.459490][ T7043] bridge_slave_1: entered promiscuous mode
[  166.773719][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.833418][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.451443][ T7043] team0: Port device team_slave_0 added
[  167.519999][ T7043] team0: Port device team_slave_1 added
[  167.602549][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.628789][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.751540][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.774850][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.798228][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.923682][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.946634][ T7209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  167.955340][ T7209] serio: Serial port ptm0
[  168.197950][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  168.630344][ T7043] hsr_slave_0: entered promiscuous mode
[  168.662695][ T7043] hsr_slave_1: entered promiscuous mode
[  168.686194][ T7043] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.720070][ T7043] Cannot create hsr debugfs directory
[  168.756969][ T7181] netlink: 72 bytes leftover after parsing attributes in process `syz.3.232'.
[  168.777093][   T30] audit: type=1400 audit(1741678502.245:709): avc:  denied  { read } for  pid=7180 comm="syz.3.232" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  168.812282][   T30] audit: type=1400 audit(1741678502.245:710): avc:  denied  { open } for  pid=7180 comm="syz.3.232" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  168.836298][    C0] vkms_vblank_simulate: vblank timer overrun
[  168.923399][   T30] audit: type=1400 audit(1741678502.285:711): avc:  denied  { ioctl } for  pid=7180 comm="syz.3.232" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  168.948904][    C0] vkms_vblank_simulate: vblank timer overrun
[  169.027551][ T7219] overlayfs: missing 'lowerdir'
[  171.587502][ T7260] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  171.594899][ T7260] cramfs: wrong magic
[  171.760839][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'.
[  171.769853][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'.
[  172.022779][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  172.034974][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  172.807352][ T7271] Cannot find del_set index 0 as target
[  173.903154][ T7043] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  174.042792][ T7043] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  174.287548][ T7281] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  174.294872][ T7281] cramfs: wrong magic
[  174.356008][ T7043] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  174.388708][ T7043] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  174.499165][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'.
[  174.697189][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.752756][ T7043] 8021q: adding VLAN 0 to HW filter on device team0
[  174.793559][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.800723][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.880869][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.888087][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.101946][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  175.281783][ T5826] usb 4-1: Using ep0 maxpacket: 8
[  175.305840][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  175.342663][ T5826] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  175.375372][ T5826] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  175.410005][ T5826] usb 4-1: Product: syz
[  175.429126][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.436328][ T5826] usb 4-1: Manufacturer: syz
[  175.436352][ T5826] usb 4-1: SerialNumber: syz
[  175.541873][ T5871] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  175.554566][ T7043] veth0_vlan: entered promiscuous mode
[  175.592055][ T7043] veth1_vlan: entered promiscuous mode
[  175.646048][   T30] audit: type=1400 audit(1741678509.115:712): avc:  denied  { create } for  pid=7291 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  175.647668][ T5826] usb 4-1: Invalid connection information received from device
[  175.666513][ T7043] veth0_macvtap: entered promiscuous mode
[  175.691448][ T7043] veth1_macvtap: entered promiscuous mode
[  175.700405][   T30] audit: type=1400 audit(1741678509.115:713): avc:  denied  { write } for  pid=7291 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  175.752025][ T5871] usb 2-1: Using ep0 maxpacket: 32
[  175.753318][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.768833][ T5871] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  175.778808][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.790130][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.798602][ T5871] usb 2-1: config 0 has no interface number 0
[  175.820952][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.837283][ T5871] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  175.841223][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.855198][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.882546][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.892488][ T5871] usb 2-1: Product: syz
[  175.896794][ T5871] usb 2-1: Manufacturer: syz
[  175.904347][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.910177][ T5871] usb 2-1: SerialNumber: syz
[  175.928090][ T5871] usb 2-1: config 0 descriptor??
[  175.928297][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.939985][ T5871] hub 2-1:0.89: bad descriptor, ignoring hub
[  175.948947][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.959510][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.970700][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.982053][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.999000][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.008198][ T5871] hub 2-1:0.89: probe with driver hub failed with error -5
[  176.016056][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.016075][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.016161][ T7043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.016175][ T7043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.017054][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.035282][ T5871] option 2-1:0.89: GSM modem (1-port) converter detected
[  176.182952][ T5871] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[  176.332868][ T7310] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  176.333775][ T7043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.518300][ T5871] usb 2-1: USB disconnect, device number 10
[  176.525408][ T7043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.546622][ T7043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.556945][ T5871] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  176.563069][ T7043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.591640][ T5871] option 2-1:0.89: device disconnected
[  176.693444][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.730149][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.136292][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.409344][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[  177.422855][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[  177.474501][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.551364][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  177.753888][ T7349] netlink: 64 bytes leftover after parsing attributes in process `syz.4.258'.
[  177.953800][ T5871] usb 4-1: USB disconnect, device number 10
[  179.101262][   T30] audit: type=1400 audit(1741678512.565:714): avc:  denied  { getopt } for  pid=7371 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  179.744373][ T1077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.904170][ T1077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.923564][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  180.007848][ T1077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.102164][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  180.140711][ T1077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.167377][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  180.192827][   T30] audit: type=1400 audit(1741678513.665:715): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  180.250219][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  180.298975][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  180.341511][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  180.361060][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.389576][ T5869] usb 4-1: Product: syz
[  180.402851][ T5869] usb 4-1: Manufacturer: syz
[  180.407490][ T5869] usb 4-1: SerialNumber: syz
[  180.434275][ T5869] usb 4-1: config 0 descriptor??
[  180.439612][ T1077] bridge_slave_1: left allmulticast mode
[  180.447354][ T1077] bridge_slave_1: left promiscuous mode
[  180.454381][ T5869] appledisplay 4-1:0.0: Submitting URB failed
[  180.471429][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.479039][ T5869] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5
[  180.546849][ T1077] bridge_slave_0: left allmulticast mode
[  180.552905][ T1077] bridge_slave_0: left promiscuous mode
[  180.572943][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.747728][ T5869] usb 4-1: USB disconnect, device number 11
[  181.148855][ T5834] Bluetooth: hci0: command 0x0401 tx timeout
[  181.167777][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  181.174501][ T5132] Bluetooth: hci3: command 0x0406 tx timeout
[  181.181060][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  182.820544][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.833909][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.856081][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.865443][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.874698][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  182.882100][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.985916][ T7400] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  183.915998][ T7437] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.977021][   T30] audit: type=1400 audit(1741678517.445:716): avc:  denied  { mounton } for  pid=7436 comm="syz.2.272" path="/65/file1/file0" dev="autofs" ino=16221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  184.217115][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.227798][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.237911][ T1077] bond0 (unregistering): Released all slaves
[  184.381797][ T7421] lo speed is unknown, defaulting to 1000
[  184.489264][   T30] audit: type=1326 audit(1741678517.955:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.549608][   T30] audit: type=1326 audit(1741678517.955:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.578054][   T30] audit: type=1326 audit(1741678517.955:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.608183][   T30] audit: type=1326 audit(1741678517.955:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.734844][   T30] audit: type=1326 audit(1741678517.955:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.760644][   T30] audit: type=1326 audit(1741678517.955:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa25898bad0 code=0x7ffc0000
[  184.801847][ T5826] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  184.840616][   T30] audit: type=1326 audit(1741678517.995:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.932956][   T30] audit: type=1326 audit(1741678517.995:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  184.997672][ T5818] Bluetooth: hci4: command tx timeout
[  185.013859][ T5826] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  185.027716][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  185.099593][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  185.131799][   T30] audit: type=1326 audit(1741678517.995:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25898d169 code=0x7ffc0000
[  185.157478][ T5826] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  185.167579][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.195681][ T5826] usb 2-1: config 0 descriptor??
[  185.209092][ T5826] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  187.063873][ T5818] Bluetooth: hci4: command tx timeout
[  187.589200][ T1077] hsr_slave_0: left promiscuous mode
[  187.611576][ T1077] hsr_slave_1: left promiscuous mode
[  187.633496][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.668544][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.807885][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.889593][ T5826] usb 2-1: USB disconnect, device number 11
[  188.806736][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.861820][ T1077] veth1_macvtap: left promiscuous mode
[  188.867378][ T1077] veth0_macvtap: left promiscuous mode
[  188.873600][ T1077] veth1_vlan: left promiscuous mode
[  188.878909][ T1077] veth0_vlan: left promiscuous mode
[  189.154727][ T5818] Bluetooth: hci4: command tx timeout
[  190.129179][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'.
[  190.138071][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'.
[  191.221857][ T5818] Bluetooth: hci4: command tx timeout
[  191.894725][ T1077] team0 (unregistering): Port device team_slave_1 removed
[  191.950647][ T1077] team0 (unregistering): Port device team_slave_0 removed
[  192.751759][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'.
[  192.790988][ T7421] chnl_net:caif_netlink_parms(): no params data found
[  193.640606][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.690224][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.762054][ T7421] bridge_slave_0: entered allmulticast mode
[  193.823646][ T7421] bridge_slave_0: entered promiscuous mode
[  193.921282][ T7421] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.960171][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.010024][ T7421] bridge_slave_1: entered allmulticast mode
[  194.047744][ T7421] bridge_slave_1: entered promiscuous mode
[  194.143419][ T7421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.160789][   T30] kauditd_printk_skb: 68 callbacks suppressed
[  194.160805][   T30] audit: type=1400 audit(1741678527.625:794): avc:  denied  { create } for  pid=7533 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  194.224839][ T7421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.460949][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.512217][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.998532][ T7421] team0: Port device team_slave_0 added
[  195.023530][ T7421] team0: Port device team_slave_1 added
[  195.173008][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.201992][ T5898] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  195.514977][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.560577][ T7421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.592340][ T7421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.599334][ T7421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.628237][ T7421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.672014][ T7421] hsr_slave_0: entered promiscuous mode
[  195.692897][ T7421] hsr_slave_1: entered promiscuous mode
[  195.711583][ T7421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.721178][ T5898] usb 5-1: not running at top speed; connect to a high speed hub
[  195.732706][ T5898] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  195.755181][ T5898] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  195.770646][ T7421] Cannot create hsr debugfs directory
[  195.808022][ T5898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.854188][ T5898] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.863687][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.895025][ T5898] usb 5-1: Product: syz
[  195.899243][ T5898] usb 5-1: Manufacturer: syz
[  195.921348][ T5898] usb 5-1: SerialNumber: syz
[  197.544980][ T5898] usb 5-1: 0:2 : does not exist
[  197.617996][ T5898] usb 5-1: USB disconnect, device number 6
[  198.387225][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.475784][ T5869] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  200.671921][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  200.685641][ T5869] usb 4-1: config 0 has an invalid interface number: 253 but max is 0
[  200.722174][ T5869] usb 4-1: config 0 has no interface number 0
[  200.747711][ T5869] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=ce.16
[  200.827910][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.271768][ T5869] usb 4-1: Product: syz
[  201.281985][ T5869] usb 4-1: Manufacturer: syz
[  201.298910][ T5869] usb 4-1: SerialNumber: syz
[  201.402272][ T5869] usb 4-1: config 0 descriptor??
[  201.485690][ T5869] comedi comedi0: Wrong number of endpoints
[  201.538812][ T5869] dt9812 4-1:0.253: driver 'dt9812' failed to auto-configure device.
[  201.757291][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'.
[  201.766647][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'.
[  201.876011][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.884572][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.931432][ T5869] usb 4-1: USB disconnect, device number 12
[  202.043492][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.063351][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.079187][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.088003][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.097925][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  202.106401][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.138438][ T7600] lo speed is unknown, defaulting to 1000
[  202.157144][ T7596] 9pnet_fd: Insufficient options for proto=fd
[  203.118415][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.769153][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.181913][ T5818] Bluetooth: hci2: command tx timeout
[  204.251758][ T7421] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  204.278051][ T7421] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  204.328713][ T7421] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  204.441510][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.526918][ T7421] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  204.594826][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.737689][ T7600] chnl_net:caif_netlink_parms(): no params data found
[  205.617408][   T30] audit: type=1400 audit(1741678539.075:795): avc:  denied  { bind } for  pid=7635 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  205.676176][   T30] audit: type=1400 audit(1741678539.115:796): avc:  denied  { node_bind } for  pid=7635 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  205.695728][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.723856][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.744349][ T7600] bridge_slave_0: entered allmulticast mode
[  205.765351][   T30] audit: type=1400 audit(1741678539.235:797): avc:  denied  { append } for  pid=7635 comm="syz.3.308" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  205.765696][ T7600] bridge_slave_0: entered promiscuous mode
[  205.835132][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.857718][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.878169][ T7600] bridge_slave_1: entered allmulticast mode
[  206.035955][ T7600] bridge_slave_1: entered promiscuous mode
[  206.275146][ T5818] Bluetooth: hci2: command tx timeout
[  207.768217][ T7659] openvswitch: netlink: Actions may not be safe on all matching packets
[  208.020769][ T7659] netlink: 'syz.3.312': attribute type 1 has an invalid length.
[  208.145892][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.168986][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.323908][   T13] bond0 (unregistering): Released all slaves
[  208.389935][ T5818] Bluetooth: hci2: command tx timeout
[  208.611652][ T7421] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.689388][ T7659] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  208.701050][ T7421] 8021q: adding VLAN 0 to HW filter on device team0
[  208.754491][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.290016][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.391824][ T5869] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  209.415617][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.422808][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.463973][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.471108][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.585403][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  209.593733][ T7600] team0: Port device team_slave_0 added
[  209.604515][ T5869] usb 4-1: config 0 has an invalid interface number: 253 but max is 0
[  209.641818][ T5869] usb 4-1: config 0 has no interface number 0
[  209.987727][ T7600] team0: Port device team_slave_1 added
[  210.002021][ T5869] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=ce.16
[  210.011098][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.034887][ T5869] usb 4-1: Product: syz
[  210.039096][ T5869] usb 4-1: Manufacturer: syz
[  210.047097][ T5869] usb 4-1: SerialNumber: syz
[  210.072389][ T5869] usb 4-1: config 0 descriptor??
[  210.214189][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.221165][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.231952][ T5869] comedi comedi0: Wrong number of endpoints
[  210.409037][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.422351][ T5818] Bluetooth: hci2: command tx timeout
[  210.456278][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.465682][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.482807][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.587968][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.929520][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.177084][   T13] hsr_slave_0: left promiscuous mode
[  211.190775][   T13] hsr_slave_1: left promiscuous mode
[  211.199431][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.214866][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.226336][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.237279][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.266506][   T13] veth1_macvtap: left promiscuous mode
[  211.275984][   T13] veth0_macvtap: left promiscuous mode
[  211.320436][   T13] veth1_vlan: left promiscuous mode
[  211.336465][   T13] veth0_vlan: left promiscuous mode
[  211.411759][ T5869] dt9812 4-1:0.253: driver 'dt9812' failed to auto-configure device.
[  212.221311][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'.
[  212.230644][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'.
[  212.354142][ T5869] usb 4-1: USB disconnect, device number 13
[  212.741764][ T5898] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  212.821933][ T5869] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  212.894366][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.921479][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.931591][ T5898] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  212.958511][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.994087][ T5898] usb 2-1: config 0 descriptor??
[  213.001772][ T5869] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  213.018251][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.033423][ T5869] usb 4-1: Product: syz
[  213.037620][ T5869] usb 4-1: Manufacturer: syz
[  213.042633][ T5869] usb 4-1: SerialNumber: syz
[  213.056644][ T5869] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  213.084100][ T5871] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  213.092925][   T13] team0 (unregistering): Port device team_slave_1 removed
[  213.177562][   T13] team0 (unregistering): Port device team_slave_0 removed
[  213.428322][ T5898] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  213.450235][ T5898] hid-led 0003:0FC5:B080.0005: item fetching failed at offset 2/3
[  213.469052][ T5898] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -22
[  213.589904][   T30] audit: type=1400 audit(1741678547.055:798): avc:  denied  { name_bind } for  pid=7716 comm="syz.3.320" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  213.756923][ T5898] usb 4-1: USB disconnect, device number 14
[  214.115717][ T7600] hsr_slave_0: entered promiscuous mode
[  214.132686][ T5871] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  214.168801][ T5871] ath9k_htc: Failed to initialize the device
[  214.175853][ T7600] hsr_slave_1: entered promiscuous mode
[  214.216165][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.242125][ T5898] usb 4-1: ath9k_htc: USB layer deinitialized
[  214.276255][ T7760] Cannot find add_set index 0 as target
[  214.344198][ T7600] Cannot create hsr debugfs directory
[  214.661334][ T7421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.300468][ T7421] veth0_vlan: entered promiscuous mode
[  215.380518][ T7421] veth1_vlan: entered promiscuous mode
[  215.457951][ T7600] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.479447][ T7600] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  215.496206][ T7421] veth0_macvtap: entered promiscuous mode
[  215.513358][ T7421] veth1_macvtap: entered promiscuous mode
[  215.520796][ T7600] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  215.530581][ T7600] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  215.579131][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.602612][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.628546][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.651834][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.671856][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.689667][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.700755][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.749786][    T9] usb 2-1: USB disconnect, device number 12
[  215.869949][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.901858][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.007106][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.017935][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.028939][ T7421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.039803][ T7421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.050988][ T7421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.178713][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.224999][ T7600] 8021q: adding VLAN 0 to HW filter on device team0
[  216.266953][ T7421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.277385][ T7421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.301788][ T7421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.546855][ T7421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.929386][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.936554][ T6184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.056410][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.063564][ T6184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.568714][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.619185][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.697776][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.720951][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.100089][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.775675][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.994413][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.109642][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.212717][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.270577][ T7600] veth0_vlan: entered promiscuous mode
[  219.289323][ T7600] veth1_vlan: entered promiscuous mode
[  219.356673][ T7600] veth0_macvtap: entered promiscuous mode
[  219.381351][ T7600] veth1_macvtap: entered promiscuous mode
[  219.414920][   T53] bridge_slave_1: left allmulticast mode
[  219.420613][   T53] bridge_slave_1: left promiscuous mode
[  219.426546][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.437655][   T53] bridge_slave_0: left allmulticast mode
[  219.444364][   T53] bridge_slave_0: left promiscuous mode
[  219.450058][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.104597][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'.
[  220.162740][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  220.201979][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'.
[  220.210787][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'.
[  220.351979][ T7859] 9pnet_fd: Insufficient options for proto=fd
[  220.382669][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.401890][   T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  220.412983][   T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  220.423476][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  220.426035][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.434052][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.450474][ T7860] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  220.458320][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.460754][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  220.493524][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.502318][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  220.509523][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.732698][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.749678][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.760090][   T53] bond0 (unregistering): Released all slaves
[  220.778583][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.794015][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.806321][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.821390][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.845801][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.868619][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.881803][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.892507][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.909131][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.165052][   T30] audit: type=1400 audit(1741678554.615:799): avc:  denied  { getopt } for  pid=7852 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  221.497196][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.524795][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.535442][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.546455][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.569560][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.612515][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.689563][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.714962][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.754330][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.066452][ T7865] lo speed is unknown, defaulting to 1000
[  222.067244][ T7600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.103125][ T7600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.119508][ T7600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.135911][ T7600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.357313][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.454259][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.596947][ T5818] Bluetooth: hci4: command tx timeout
[  223.232339][   T53] hsr_slave_0: left promiscuous mode
[  223.302330][   T53] hsr_slave_1: left promiscuous mode
[  223.309813][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.332202][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.347192][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.366661][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.425051][   T53] veth1_macvtap: left promiscuous mode
[  223.430626][   T53] veth0_macvtap: left promiscuous mode
[  223.438152][   T53] veth1_vlan: left promiscuous mode
[  223.443575][   T53] veth0_vlan: left promiscuous mode
[  224.085287][ T7903] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  224.102475][ T7903] cramfs: wrong magic
[  224.662874][ T5818] Bluetooth: hci4: command tx timeout
[  225.977393][   T53] team0 (unregistering): Port device team_slave_1 removed
[  226.025704][   T53] team0 (unregistering): Port device team_slave_0 removed
[  226.749251][ T5818] Bluetooth: hci4: command tx timeout
[  227.010296][  T118] usb 5-1: USB disconnect, device number 7
[  227.118995][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.163209][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.020386][ T7865] chnl_net:caif_netlink_parms(): no params data found
[  228.166511][   T30] audit: type=1400 audit(1741678561.635:800): avc:  denied  { create } for  pid=7934 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  228.197264][   T30] audit: type=1400 audit(1741678561.665:801): avc:  denied  { ioctl } for  pid=7934 comm="syz.3.342" path="socket:[19941]" dev="sockfs" ino=19941 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  228.198254][ T7935] tmpfs: Bad value for 'mpol'
[  228.221772][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.487623][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.495609][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.521449][ T7865] bridge_slave_0: entered allmulticast mode
[  228.529133][ T7865] bridge_slave_0: entered promiscuous mode
[  228.564851][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.592016][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.599973][ T7865] bridge_slave_1: entered allmulticast mode
[  228.607746][ T7865] bridge_slave_1: entered promiscuous mode
[  228.942223][ T5818] Bluetooth: hci4: command tx timeout
[  229.135532][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.389677][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[  229.447727][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.789161][ T7865] team0: Port device team_slave_0 added
[  229.811587][ T7865] team0: Port device team_slave_1 added
[  229.971964][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'.
[  229.981245][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'.
[  230.164559][ T7974] 9pnet_fd: Insufficient options for proto=fd
[  230.295270][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.326263][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.356420][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.443960][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.483981][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.523541][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.545687][ T7966] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  230.952918][ T7865] hsr_slave_0: entered promiscuous mode
[  231.161974][ T7865] hsr_slave_1: entered promiscuous mode
[  231.167841][ T7865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.181823][ T7865] Cannot create hsr debugfs directory
[  231.522050][ T7982] netlink: 72 bytes leftover after parsing attributes in process `syz.4.347'.
[  231.791070][ T5898] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  231.902039][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  232.071928][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  232.090585][ T5898] usb 4-1: config 0 has an invalid interface number: 253 but max is 0
[  232.691810][ T5898] usb 4-1: config 0 has no interface number 0
[  232.710180][ T5898] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=ce.16
[  232.724889][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.747536][ T5898] usb 4-1: Product: syz
[  232.832201][ T5898] usb 4-1: Manufacturer: syz
[  232.856924][ T5898] usb 4-1: SerialNumber: syz
[  232.898086][ T5898] usb 4-1: config 0 descriptor??
[  233.030080][ T5898] comedi comedi0: Wrong number of endpoints
[  233.045704][ T5898] dt9812 4-1:0.253: driver 'dt9812' failed to auto-configure device.
[  233.239485][ T7992] netlink: 72 bytes leftover after parsing attributes in process `syz.1.349'.
[  233.257394][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.266003][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.282273][ T5898] usb 4-1: USB disconnect, device number 15
[  233.674060][ T8017] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  233.743806][ T8017] cramfs: wrong magic
[  234.146803][ T7865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  234.162709][ T7865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  234.174890][ T7865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  234.198861][ T7865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  234.317111][ T8025] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  234.392898][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.355'.
[  234.808955][ T8025] cramfs: wrong magic
[  234.927032][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'.
[  235.030631][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'.
[  235.123528][   T30] audit: type=1400 audit(1741678568.595:802): avc:  denied  { sqpoll } for  pid=8030 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  235.160860][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.179224][ T8036] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  235.188328][ T8036] overlayfs: missing 'lowerdir'
[  235.309918][ T7865] 8021q: adding VLAN 0 to HW filter on device team0
[  235.334089][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.341207][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.375764][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.382920][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.637820][ T7865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  235.653371][ T7865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  236.721451][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.867699][ T7865] veth0_vlan: entered promiscuous mode
[  236.930192][ T7865] veth1_vlan: entered promiscuous mode
[  237.038032][ T7865] veth0_macvtap: entered promiscuous mode
[  237.066323][ T7865] veth1_macvtap: entered promiscuous mode
[  237.134759][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.361'.
[  237.155581][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.276151][ T8072] vivid-007: =================  START STATUS  =================
[  237.286096][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.299764][   T30] audit: type=1400 audit(1741678570.555:803): avc:  denied  { open } for  pid=8062 comm="syz.1.359" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  237.814517][   T30] audit: type=1400 audit(1741678570.565:804): avc:  denied  { ioctl } for  pid=8062 comm="syz.1.359" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  237.846006][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.868662][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.926476][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.959677][ T8072] vivid-007: Enable Output Cropping: true
[  238.011834][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.059353][ T8072] vivid-007: Enable Output Composing: true
[  238.070585][ T8072] vivid-007: Enable Output Scaler: true
[  238.080822][ T8072] vivid-007: Tx RGB Quantization Range: Automatic
[  238.091877][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.101768][   T30] audit: type=1400 audit(1741678570.605:805): avc:  denied  { read } for  pid=8071 comm="syz.4.361" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  238.231758][ T8072] vivid-007: Transmit Mode: HDMI
[  238.236854][ T8072] vivid-007: Hotplug Present: 0x00000000
[  238.452369][   T30] audit: type=1400 audit(1741678570.605:806): avc:  denied  { open } for  pid=8071 comm="syz.4.361" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  238.477129][ T8072] vivid-007: RxSense Present: 0x00000000
[  238.483133][ T8072] vivid-007: EDID Present: 0x00000000
[  238.490147][ T8072] vivid-007: ==================  END STATUS  ==================
[  238.698185][ T8086] netlink: 64 bytes leftover after parsing attributes in process `syz.4.363'.
[  238.708555][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.729746][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.907196][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.054302][ T8093] Cannot find add_set index 0 as target
[  239.281922][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.339559][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.349155][   T30] audit: type=1400 audit(1741678570.875:807): avc:  denied  { ioctl } for  pid=8071 comm="syz.4.361" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  239.350284][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.740796][ T8097] netlink: 72 bytes leftover after parsing attributes in process `syz.5.365'.
[  239.779999][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.819437][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.888099][ T7865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.935911][ T7865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.032675][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.150034][ T7865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.223066][ T7865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.242096][ T7865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.251070][ T7865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.352170][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  240.561812][ T5909] usb 4-1: Using ep0 maxpacket: 16
[  240.587104][ T5909] usb 4-1: config 0 has an invalid interface number: 253 but max is 0
[  240.672900][ T5909] usb 4-1: config 0 has no interface number 0
[  240.700092][ T5909] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=ce.16
[  240.713197][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.722182][ T5909] usb 4-1: Product: syz
[  240.726506][ T5909] usb 4-1: Manufacturer: syz
[  240.734115][ T5909] usb 4-1: SerialNumber: syz
[  240.810772][ T5909] usb 4-1: config 0 descriptor??
[  240.836396][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.858909][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.862100][ T5909] comedi comedi0: Wrong number of endpoints
[  240.892342][ T5909] dt9812 4-1:0.253: driver 'dt9812' failed to auto-configure device.
[  241.201876][ T5871] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  241.379460][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.388136][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.429786][   T30] audit: type=1400 audit(1741678574.895:808): avc:  denied  { sys_chroot } for  pid=8108 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  241.570359][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  241.588549][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0
[  241.588855][ T5899] usb 4-1: USB disconnect, device number 16
[  241.599126][   T30] audit: type=1400 audit(1741678574.915:809): avc:  denied  { setgid } for  pid=8108 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  241.710104][ T8113] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  241.732201][ T8113] serio: Serial port ptm0
[  242.183424][   T30] audit: type=1400 audit(1741678574.915:810): avc:  denied  { setrlimit } for  pid=8108 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  242.209651][ T5871] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  242.225550][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.238856][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.254835][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.262770][ T5871] usb 6-1: Product: syz
[  242.267904][ T5871] usb 6-1: Manufacturer: syz
[  242.275338][ T5871] usb 6-1: SerialNumber: syz
[  242.384508][ T5871] usb 6-1: config 0 descriptor??
[  242.807187][ T5871] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  243.008629][ T5871] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  243.019383][ T5871] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22
[  243.216284][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.252791][ T8117] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  243.434743][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.571215][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.779529][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.981937][   T53] bridge_slave_1: left allmulticast mode
[  244.002283][   T53] bridge_slave_1: left promiscuous mode
[  244.008046][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.049207][   T53] bridge_slave_0: left allmulticast mode
[  244.057174][   T53] bridge_slave_0: left promiscuous mode
[  244.072001][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.494087][   T30] audit: type=1400 audit(1741678577.965:811): avc:  denied  { create } for  pid=8152 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  244.523065][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  244.910004][ T5909] usb 6-1: USB disconnect, device number 2
[  245.032147][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  245.110377][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'.
[  245.128151][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'.
[  245.151928][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  245.226402][ T5871] usb 2-1: Using ep0 maxpacket: 32
[  245.242371][ T5871] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  245.250597][ T5871] usb 2-1: config 0 has no interface number 0
[  245.268927][ T5871] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67
[  245.281757][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.292007][ T5871] usb 2-1: Product: syz
[  245.296206][ T5871] usb 2-1: Manufacturer: syz
[  245.300980][ T5871] usb 2-1: SerialNumber: syz
[  245.307988][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.318703][ T5871] usb 2-1: config 0 descriptor??
[  245.326713][ T5871] spcp8x5 2-1:0.191: SPCP8x5 converter detected
[  245.339816][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.339829][ T5871] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  245.340509][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.386104][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.397790][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.398421][   T53] bond0 (unregistering): Released all slaves
[  245.411834][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.421972][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.430961][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.439103][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  245.446518][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.457838][ T5898] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  245.471991][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.483648][ T5898] usb 5-1: config 0 descriptor??
[  245.506263][ T8159] &È: renamed from macvlan0 (while UP)
[  245.663987][ T8161] lo speed is unknown, defaulting to 1000
[  246.061212][ T5898] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  246.092163][ T5898] hid-led 0003:0FC5:B080.0006: item fetching failed at offset 2/3
[  246.101384][   T30] audit: type=1400 audit(1741678579.565:812): avc:  denied  { append } for  pid=8169 comm="syz.3.377" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  246.172233][ T5898] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -22
[  247.028935][ T8182] netlink: 72 bytes leftover after parsing attributes in process `syz.5.378'.
[  247.472960][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  247.482155][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'.
[  247.553431][ T5828] Bluetooth: hci4: command tx timeout
[  247.861509][   T53] hsr_slave_0: left promiscuous mode
[  247.884380][   T53] hsr_slave_1: left promiscuous mode
[  247.977154][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.380'.
[  248.019350][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.380'.
[  248.087278][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.095198][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.189024][   T30] audit: type=1400 audit(1741678581.655:813): avc:  denied  { bind } for  pid=8204 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  248.211443][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.221991][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.327040][   T53] veth1_macvtap: left promiscuous mode
[  248.332720][   T53] veth0_macvtap: left promiscuous mode
[  248.338419][   T53] veth1_vlan: left promiscuous mode
[  248.344144][   T53] veth0_vlan: left promiscuous mode
[  248.351878][ T5909] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  248.436178][   T10] usb 5-1: USB disconnect, device number 8
[  248.532071][ T5909] usb 4-1: device descriptor read/64, error -71
[  248.626109][ T5871] usb 2-1: USB disconnect, device number 13
[  248.650183][ T5871] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  248.787602][ T5871] spcp8x5 2-1:0.191: device disconnected
[  248.922029][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  249.081735][ T5909] usb 4-1: device descriptor read/64, error -71
[  249.192280][ T5909] usb usb4-port1: attempt power cycle
[  249.411295][ T8222] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  249.526752][ T8222] cramfs: wrong magic
[  249.623001][ T5828] Bluetooth: hci4: command tx timeout
[  249.671799][ T5909] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  249.713043][ T5909] usb 4-1: device descriptor read/8, error -71
[  249.731024][   T30] audit: type=1400 audit(1741678583.185:814): avc:  denied  { create } for  pid=8224 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  249.888532][   T30] audit: type=1400 audit(1741678583.195:815): avc:  denied  { ioctl } for  pid=8224 comm="syz.4.385" path="socket:[20816]" dev="sockfs" ino=20816 ioctlcmd=0x891e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  249.951828][   T30] audit: type=1400 audit(1741678583.395:816): avc:  denied  { write } for  pid=8224 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  249.980962][   T30] audit: type=1400 audit(1741678583.395:817): avc:  denied  { nlmsg_read } for  pid=8224 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  250.014043][ T5909] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  250.082487][ T5909] usb 4-1: device descriptor read/8, error -71
[  250.082874][   T53] team0 (unregistering): Port device team_slave_1 removed
[  250.352940][ T5909] usb usb4-port1: unable to enumerate USB device
[  250.551399][   T53] team0 (unregistering): Port device team_slave_0 removed
[  250.804287][   T30] audit: type=1400 audit(1741678584.275:818): avc:  denied  { read } for  pid=8230 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  251.707307][ T5828] Bluetooth: hci4: command tx timeout
[  253.120064][ T8161] chnl_net:caif_netlink_parms(): no params data found
[  253.278280][   T30] audit: type=1400 audit(1741678586.735:819): avc:  denied  { ioctl } for  pid=8247 comm="syz.1.391" path="socket:[22037]" dev="sockfs" ino=22037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  253.781971][ T5828] Bluetooth: hci4: command tx timeout
[  253.855491][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.885877][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.900705][ T8161] bridge_slave_0: entered allmulticast mode
[  253.908310][ T8161] bridge_slave_0: entered promiscuous mode
[  253.924733][ T8265] lo speed is unknown, defaulting to 1000
[  253.936011][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.960509][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.005033][ T8161] bridge_slave_1: entered allmulticast mode
[  254.038316][ T8161] bridge_slave_1: entered promiscuous mode
[  254.147776][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.699033][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.760668][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.396'.
[  254.812284][ T8275] rdma_rxe: rxe_newlink: failed to add lo
[  254.857919][ T8277] lo speed is unknown, defaulting to 1000
[  254.864496][ T8277] lo speed is unknown, defaulting to 1000
[  254.871976][ T8277] lo speed is unknown, defaulting to 1000
[  254.881118][ T8277] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  254.894814][ T8277] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98
[  254.916025][ T8277] lo speed is unknown, defaulting to 1000
[  254.925320][ T8277] lo speed is unknown, defaulting to 1000
[  254.965494][ T8161] team0: Port device team_slave_0 added
[  254.973102][ T8277] lo speed is unknown, defaulting to 1000
[  255.056145][ T8161] team0: Port device team_slave_1 added
[  255.066898][ T8277] lo speed is unknown, defaulting to 1000
[  255.073767][ T8277] lo speed is unknown, defaulting to 1000
[  255.080475][ T8277] lo speed is unknown, defaulting to 1000
[  255.291792][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  255.320256][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.337156][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.374703][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.396823][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.404143][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.430620][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.444967][   T10] usb 4-1: device descriptor read/64, error -71
[  255.475580][ T8161] hsr_slave_0: entered promiscuous mode
[  255.482006][ T8161] hsr_slave_1: entered promiscuous mode
[  255.487870][ T8161] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.495737][ T8161] Cannot create hsr debugfs directory
[  255.867446][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  255.873912][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.189097][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  256.399971][   T10] usb 4-1: device descriptor read/64, error -71
[  256.551985][   T10] usb usb4-port1: attempt power cycle
[  257.001842][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  257.063013][   T10] usb 4-1: device descriptor read/8, error -71
[  257.069285][ T8304] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  257.245220][ T8161] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  257.564067][ T8161] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  257.621167][ T8161] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  257.621864][   T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  257.646552][ T8161] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  257.697870][   T10] usb 4-1: device descriptor read/8, error -71
[  257.814494][   T10] usb usb4-port1: unable to enumerate USB device
[  257.835364][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.855988][ T8161] 8021q: adding VLAN 0 to HW filter on device team0
[  257.878096][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.878208][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.886168][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.886225][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.203557][ T5828] Bluetooth: Wrong link type (-57)
[  258.236150][ T8161] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.284716][ T8161] veth0_vlan: entered promiscuous mode
[  258.296600][ T8161] veth1_vlan: entered promiscuous mode
[  258.382853][ T5828] Bluetooth: hci0: command 0x0401 tx timeout
[  259.007926][ T8161] veth0_macvtap: entered promiscuous mode
[  259.030100][ T8161] veth1_macvtap: entered promiscuous mode
[  259.046105][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.056774][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.067177][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.077962][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.088130][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.321783][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.331986][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.344729][   T30] audit: type=1400 audit(1741678592.645:820): avc:  denied  { append } for  pid=8346 comm="syz.3.406" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  259.377483][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.389183][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.399721][   T30] audit: type=1400 audit(1741678592.875:821): avc:  denied  { ioctl } for  pid=8357 comm="syz.1.407" path="socket:[22314]" dev="sockfs" ino=22314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  259.471839][   T30] audit: type=1400 audit(1741678592.875:822): avc:  denied  { bind } for  pid=8357 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  259.588013][   T30] audit: type=1400 audit(1741678592.875:823): avc:  denied  { write } for  pid=8357 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  259.953323][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'.
[  259.956475][   T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  260.017933][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.056731][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.096838][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.137916][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.191678][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.226785][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.257753][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.288362][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.314726][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.385492][ T8161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.404552][ T8161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.432710][ T8161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.468133][ T8161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.485936][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  260.522445][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  260.572008][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  260.696598][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.721608][   T30] audit: type=1400 audit(1741678594.185:824): avc:  denied  { read } for  pid=8363 comm="syz.3.409" path="socket:[21491]" dev="sockfs" ino=21491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  260.769737][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.842608][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.868294][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.163944][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.197144][   T10] usb 2-1: config 0 descriptor??
[  261.232505][ T8358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  261.413071][ T8371] netlink: 'syz.5.410': attribute type 2 has an invalid length.
[  261.424482][ T8371] netlink: 'syz.5.410': attribute type 1 has an invalid length.
[  262.471137][   T10] microsoft 0003:045E:009D.0007: unknown main item tag 0x1
[  262.493688][   T10] microsoft 0003:045E:009D.0007: unbalanced delimiter at end of report description
[  262.512094][   T10] microsoft 0003:045E:009D.0007: parse failed
[  262.518268][   T10] microsoft 0003:045E:009D.0007: probe with driver microsoft failed with error -22
[  264.049449][ T5871] usb 2-1: USB disconnect, device number 14
[  264.443964][ T5871] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  264.638055][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.677000][ T5871] usb 6-1: Using ep0 maxpacket: 16
[  264.707669][ T5871] usb 6-1: config 0 has an invalid interface number: 253 but max is 0
[  264.783862][ T5871] usb 6-1: config 0 has no interface number 0
[  264.831182][ T5871] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=ce.16
[  264.850586][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.895760][ T5871] usb 6-1: Product: syz
[  264.899966][ T5871] usb 6-1: Manufacturer: syz
[  264.939522][ T5871] usb 6-1: SerialNumber: syz
[  264.958996][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.993418][ T5871] usb 6-1: config 0 descriptor??
[  265.035546][ T5871] comedi comedi0: Wrong number of endpoints
[  265.041497][ T5871] dt9812 6-1:0.253: driver 'dt9812' failed to auto-configure device.
[  265.245239][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.253998][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.296692][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.316168][ T5869] usb 6-1: USB disconnect, device number 3
[  265.479084][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.835463][   T53] bridge_slave_1: left allmulticast mode
[  265.841148][   T53] bridge_slave_1: left promiscuous mode
[  266.249650][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.633049][ T8416] sched: DL replenish lagged too much
[  286.242663][ T5871] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  287.968351][   T53] bridge_slave_0: left allmulticast mode
[  288.083041][   T53] bridge_slave_0: left promiscuous mode
[  288.269163][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.592368][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.615255][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  330.144585][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  333.613941][ T8412] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  334.741780][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  334.741808][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  334.741819][ T8412] Call Trace:
[  334.741825][ T8412]  <TASK>
[  334.741833][ T8412]  dump_stack_lvl+0x16c/0x1f0
[  334.741864][ T8412]  warn_alloc+0x24d/0x3a0
[  334.741886][ T8412]  ? __pfx_warn_alloc+0x10/0x10
[  334.741916][ T8412]  ? __get_vm_area_node+0x1b0/0x2f0
[  334.741940][ T8412]  ? __get_vm_area_node+0x1dc/0x2f0
[  334.741972][ T8412]  __vmalloc_node_range_noprof+0x1102/0x1530
[  334.741998][ T8412]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  334.742030][ T8412]  ? kcov_ioctl+0x4c/0x730
[  334.742059][ T8412]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  334.742093][ T8412]  ? kcov_ioctl+0x4c/0x730
[  334.742120][ T8412]  vmalloc_user_noprof+0x6b/0x90
[  334.742146][ T8412]  ? kcov_ioctl+0x4c/0x730
[  334.742171][ T8412]  kcov_ioctl+0x4c/0x730
[  334.742197][ T8412]  ? __pfx_kcov_ioctl+0x10/0x10
[  334.742224][ T8412]  __x64_sys_ioctl+0x190/0x200
[  334.742251][ T8412]  do_syscall_64+0xcd/0x250
[  334.742277][ T8412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.742302][ T8412] RIP: 0033:0x7f4ef0b8cd6b
[  334.742318][ T8412] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  334.742335][ T8412] RSP: 002b:00007fff3549c540 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  334.742352][ T8412] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f4ef0b8cd6b
[  334.742365][ T8412] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db
[  334.742376][ T8412] RBP: 00007f4ef0da62d8 R08: 00000000000000da R09: 0000000000000000
[  334.742387][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.742398][ T8412] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  334.742422][ T8412]  </TASK>
[  334.742428][ T8412] Mem-Info:
[  391.462288][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  391.472507][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  394.535305][ T8412] active_anon:5595 inactive_anon:0 isolated_anon:0
[  394.535305][ T8412]  active_file:13433 inactive_file:38465 isolated_file:0
[  394.535305][ T8412]  unevictable:768 dirty:0 writeback:0
[  394.535305][ T8412]  slab_reclaimable:11202 slab_unreclaimable:697652
[  394.535305][ T8412]  mapped:22194 shmem:1422 pagetables:864
[  394.535305][ T8412]  sec_pagetables:0 bounce:0
[  394.535305][ T8412]  kernel_misc_reclaimable:0
[  394.535305][ T8412]  free:737350 free_pcp:8103 free_cma:0
[  398.810235][ T8412] Node 0 active_anon:21516kB inactive_anon:0kB active_file:53732kB inactive_file:153788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88776kB dirty:0kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11200kB pagetables:3440kB sec_pagetables:0kB all_unreclaimable? no
[  399.341734][ T8412] Node 1 active_anon:864kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:20kB sec_pagetables:0kB all_unreclaimable? no
[  399.773324][ T8412] Node 0 DMA free:13036kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:72kB free_cma:0kB
[  400.021840][ T8412] lowmem_reserve[]: 0 2487 2487 2487 2487
[  400.027661][ T8412] Node 0 DMA32 free:281852kB boost:12288kB min:46440kB low:54976kB high:63512kB reserved_highatomic:0KB active_anon:21516kB inactive_anon:0kB active_file:53732kB inactive_file:153688kB unevictable:1536kB writepending:4kB present:3129332kB managed:2547364kB mlocked:0kB bounce:0kB free_pcp:3948kB local_pcp:2000kB free_cma:0kB
[  400.432842][ T8412] lowmem_reserve[]: 0 0 0 0 0
[  400.437604][ T8412] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  400.781805][ T8412] lowmem_reserve[]: 0 0 0 0 0
[  400.786581][ T8412] Node 1 Normal free:2862320kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:864kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10488kB local_pcp:0kB free_cma:0kB
[  401.251730][ T8412] lowmem_reserve[]: 0 0 0 0 0
[  401.256510][ T8412] Node 0 DMA: 16*4kB (U) 14*8kB (U) 12*16kB (U) 8*32kB (U) 8*64kB (U) 9*128kB (U) 5*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 13808kB
[  401.524532][ T8412] Node 0 DMA32: 6925*4kB (UME) 5532*8kB (UME) 4179*16kB (UME) 4168*32kB (UME) 1942*64kB (UME) 734*128kB (UM) 224*256kB (UM) 39*512kB (UM) 13*1024kB (UM) 2*2048kB (U) 0*4096kB = 585156kB
[  401.741720][ T8412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  401.866430][ T8412] Node 1 Normal: 285*4kB (UE) 143*8kB (UME) 121*16kB (UME) 241*32kB (UME) 142*64kB (UME) 68*128kB (UME) 39*256kB (UME) 15*512kB (UME) 9*1024kB (UME) 2*2048kB (M) 684*4096kB (M) = 2862364kB
[  402.079876][ T8412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  402.205187][ T8412] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  402.293224][ T8412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  402.378805][ T8412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  402.451952][ T8412] 53323 total pagecache pages
[  402.456677][ T8412] 0 pages in swap cache
[  402.460836][ T8412] Free swap  = 124996kB
[  402.581930][ T8412] Total swap = 124996kB
[  402.586139][ T8412] 2097051 pages RAM
[  402.589942][ T8412] 0 pages HighMem/MovableOnly
[  402.712232][ T8412] 428552 pages reserved
[  402.716435][ T8412] 0 pages cma reserved
[  416.692991][   T31] INFO: task kworker/u8:6:1152 blocked for more than 140 seconds.
[  416.700866][   T31]       Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  417.106590][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  417.241795][   T31] task:kworker/u8:6    state:D stack:23440 pid:1152  tgid:1152  ppid:2      task_flags:0x4208060 flags:0x00004000
[  417.381705][   T31] Workqueue: events_unbound linkwatch_event
[  417.387672][   T31] Call Trace:
[  417.390953][   T31]  <TASK>
[  417.477820][   T31]  __schedule+0xf43/0x5890
[  417.505233][   T31]  ? __pfx___lock_acquire+0x10/0x10
[  417.510491][   T31]  ? __pfx___lock_acquire+0x10/0x10
[  417.655465][   T31]  ? __pfx___schedule+0x10/0x10
[  417.684757][   T31]  ? schedule+0x298/0x350
[  417.689151][   T31]  ? __pfx_lock_release+0x10/0x10
[  417.801765][   T31]  ? __mutex_trylock_common+0x78/0x250
[  417.807294][   T31]  ? lock_acquire+0x2f/0xb0
[  417.878947][   T31]  ? schedule+0x1fd/0x350
[  417.911685][   T31]  schedule+0xe7/0x350
[  417.915808][   T31]  schedule_preempt_disabled+0x13/0x30
[  417.921277][   T31]  __mutex_lock+0x6bd/0xb10
[  418.021857][   T31]  ? __pfx_lock_release+0x10/0x10
[  418.026953][   T31]  ? linkwatch_event+0x51/0xc0
[  418.101828][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  418.106927][   T31]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  418.180592][   T31]  ? rcu_is_watching+0x12/0xc0
[  418.211696][   T31]  ? linkwatch_event+0x51/0xc0
[  418.216509][   T31]  linkwatch_event+0x51/0xc0
[  418.221107][   T31]  ? __pfx_linkwatch_event+0x10/0x10
[  418.333312][   T31]  ? rcu_is_watching+0x12/0xc0
[  418.338100][   T31]  process_one_work+0x9c5/0x1ba0
[  418.363332][   T31]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  418.453555][   T31]  ? __pfx_process_one_work+0x10/0x10
[  418.501753][   T31]  ? assign_work+0x1a0/0x250
[  418.506414][   T31]  worker_thread+0x6c8/0xf00
[  418.511026][   T31]  ? __kthread_parkme+0x148/0x220
[  418.581714][   T31]  ? __pfx_worker_thread+0x10/0x10
[  418.586889][   T31]  kthread+0x3af/0x750
[  418.590969][   T31]  ? __pfx_kthread+0x10/0x10
[  418.651800][   T31]  ? lock_acquire+0x2f/0xb0
[  418.656434][   T31]  ? __pfx_kthread+0x10/0x10
[  418.661037][   T31]  ret_from_fork+0x45/0x80
[  418.711969][   T31]  ? __pfx_kthread+0x10/0x10
[  418.716627][   T31]  ret_from_fork_asm+0x1a/0x30
[  418.721416][   T31]  </TASK>
[  418.836465][   T31] INFO: task kworker/1:8:5909 blocked for more than 142 seconds.
[  418.901740][   T31]       Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0
[  418.909422][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  419.075962][   T31] task:kworker/1:8     state:D stack:24960 pid:5909  tgid:5909  ppid:2      task_flags:0x4208060 flags:0x00004000
[  419.157622][   T31] Workqueue: events switchdev_deferred_process_work
[  419.218258][   T31] Call Trace:
[  419.231426][   T31]  <TASK>
[  419.281851][   T31]  __schedule+0xf43/0x5890
[  419.311715][   T31]  ? __pfx_mark_lock+0x10/0x10
[  419.316543][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  419.381874][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  419.431820][   T31]  ? find_held_lock+0x2d/0x110
[  419.436642][   T31]  ? __pfx___schedule+0x10/0x10
[  419.441506][   T31]  ? schedule+0x298/0x350
[  419.502953][   T31]  ? __pfx_lock_release+0x10/0x10
[  419.508102][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.572413][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  419.577678][   T31]  schedule+0xe7/0x350
[  419.641709][   T31]  schedule_preempt_disabled+0x13/0x30
[  419.647228][   T31]  __mutex_lock+0x6bd/0xb10
[  419.711726][   T31]  ? lock_acquire+0x2f/0xb0
[  419.716295][   T31]  ? switchdev_deferred_process_work+0xe/0x20
[  419.783502][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  419.788594][   T31]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  419.851848][   T31]  ? trace_lock_acquire+0x14e/0x1f0
[  419.857105][   T31]  ? process_one_work+0x921/0x1ba0
[  419.923826][   T31]  ? switchdev_deferred_process_work+0xe/0x20
[  419.929950][   T31]  switchdev_deferred_process_work+0xe/0x20
[  420.041686][   T31]  process_one_work+0x9c5/0x1ba0
[  420.051720][   T31]  ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10
[  420.079528][   T31]  ? __pfx_process_one_work+0x10/0x10
[  420.117644][   T31]  ? assign_work+0x1a0/0x250
[  420.151778][   T31]  worker_thread+0x6c8/0xf00
[  420.156435][   T31]  ? __kthread_parkme+0x148/0x220
[  420.161472][   T31]  ? __pfx_worker_thread+0x10/0x10
[  420.541709][   T31]  kthread+0x3af/0x750
[  420.545842][   T31]  ? __pfx_kthread+0x10/0x10
[  420.550529][   T31]  ? lock_acquire+0x2f/0xb0
[  420.628116][   T31]  ? __pfx_kthread+0x10/0x10
[  420.646554][   T31]  ret_from_fork+0x45/0x80
[  420.651095][   T31]  ? __pfx_kthread+0x10/0x10
[  420.689414][   T31]  ret_from_fork_asm+0x1a/0x30
[  420.718587][   T31]  </TASK>
[  420.740960][   T31] 
[  420.740960][   T31] Showing all locks held in the system:
[  420.791226][   T31] 1 lock held by khungtaskd/31:
[  420.835104][   T31]  #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  420.876499][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  420.887914][   T31] 8 locks held by kworker/u8:2/36:
[  420.904494][   T31] 5 locks held by kworker/u8:3/53:
[  421.154033][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  421.165206][   T31]  #0: ffff88801beeb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  421.706603][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  421.752377][   T31]  #1: ffffc90000be7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  421.782219][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  421.792221][ T5818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  422.844466][   T31]  #2: ffffffff8fee2250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30
[  424.979481][ T5828] Bluetooth: hci1: Opcode 0x0c38 failed: -110