last executing test programs:

44.344885385s ago: executing program 4 (id=871):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010400010902"], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x77)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x4, 0xf1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10)

40.290610221s ago: executing program 4 (id=873):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
unshare(0x4000400)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x64000600)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000001840)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000000000002400000000000000290000003200"/50, @ANYRES32], 0x40}}], 0x1, 0x0)

36.999889397s ago: executing program 4 (id=882):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
getrandom(0x0, 0x0, 0x0)

36.748218327s ago: executing program 4 (id=883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}]}, 0x18}}, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000010c0)={'tunl0\x00', &(0x7f0000000fc0)={'sit0\x00', <r6=>0x0, 0x80, 0x80, 0xe, 0x81, {{0x1f, 0x4, 0x3, 0x3e, 0x7c, 0x64, 0x0, 0xfb, 0x29, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0xc, 0xb9, 0x3, 0xe, [{@loopback, 0x2}]}, @cipso={0x86, 0x6, 0x3}, @rr={0x7, 0x7, 0x97, [@empty]}, @noop, @generic={0x44, 0xe, "7de6b8870ffa5ba78e7bd4f1"}, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0x8, [{@multicast1, 0x8}, {@multicast2}, {@broadcast, 0xfffffffc}, {@broadcast}, {@private=0xa010102, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x12}, {@empty}]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'syztnl2\x00', <r7=>0x0, 0x40, 0x40, 0x3c, 0x3, {{0xd, 0x4, 0x1, 0x2e, 0x34, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x1f, 0x7c, [@remote, @broadcast, @multicast1, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}})
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="712f1b4f3b4e21315b7f8ee15b478e73bd5c08434aca382102509e993ad625d2ca0208a05ec1", 0x26}, {&(0x7f0000000380)="f73a95f240945760c9b85934e686ca97df5535e7647028a6abbbb3b6448da7a9abd6cc31abcce64560c4becfd466c83bccedf390864b14ea666d25b67187cebed8b3ba4523e5cda38eb53cbfc33ccf8d66978fc7af8b1fbff2adb4e5e79f8c376a451376d339d64601286eaffbf964b407d807c4e9f91d811b677883bdb0b692a654f0bdcff371bd145a9e4dbf3abe4d663e8f6703384a1243e11e", 0x9b}, {&(0x7f0000000440)="2663417f387cd0f029958b10c14569c61f9688cc4f15b55ab87389b3c7911013d43b0d0726ae268c8ec98b768403e3f247c4a544fdd57d38aad2b3ce4ad3d74910faf10a6681cb91eb7ea13155a665d35aa132051e0afa25c6c931be14160b981a3293566f0e4a40147c209ed2487491fc9ca8ab67a84dd237e0c44021b1cfe4c466bf17ad4420b30a8062000a53aa0e7336c822fceefa4e46586638ae9e18070dc974b44a164b08", 0xa8}], 0x3, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)="6e0ca360a98278d739095e670def213b1ed34d6288b09b68badf95a71f65d41abbe1920868e99e05841bbaa9ed88ce3f0519d0f0f73fea824420e7a9a4d481daadfc17f07b2d8a1a902716609ad31e405d97ec2a342644ba285b5dbee2da5b7a00330e8fed2ba82c48c088a904bb67d57f6d01ac2d31dc0639274e3f", 0x7c}, {&(0x7f0000000680)="fc77530a78ee6a6c2688a8c4aa507bb7df121b008b24173d42f41f2db43b321ceb199b037fb19a1bec497e084f1e5bc41540d088e316f6007c0434e101b0f7b45215275d1bca36627e86a4694822af6db5381ce6bbf0ad40cde904e903cd", 0x5e}], 0x3, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xb3, 0x3, 0x1, [{@local, 0xe7}, {@multicast1, 0x37}]}, @timestamp_prespec={0x44, 0x4, 0x2b, 0x3, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x90}}, {{&(0x7f0000000800)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000840)="92cfd02106634f9e1a4592285a9ccbaab01e278bb77e3e04e40a875995e6d052683edd435043c3476ce62b079c782813d398dafab4b18a5122cd54420b00f115997016b3a310692ea2325970fa4e074245c46466d02a715e5871dac7ff47c2ecd066ac6cf34c6f63a1134e0e5bf3fc0767ba72243f4ad4d87ca3f05ffeab148c7498c15b65a718", 0x87}, {&(0x7f0000000900)="063c3a6f99e21e79aec285e75ec0e7807aba003e05f4b3a5b9ca1ef823cfb865a9c0b00d4b5036b03d3422c64a605a912fd557eded13df5f803ccc603e6aa1121011b4b2da2a7e8b777ba9d80af8ae2b7e8c39ca80dc3892ec60efa784222e0d54c0c562e83f9388e90e3ddcc4660dd217f17f9c86c1aabbccec3dfad81906ef9f4dc566ef3c06362782fabfd659abace6726a47c24666b1e2139ef3cba4a9c93ba5117529b5a4c596731e13ca948b97b9bcc381875be9db618521fb52fa5f97", 0xc0}, {&(0x7f00000009c0)="3624be2a9d484a67e07b833a9b0bce5c0e9605f7b86e3c39df25eb7705b583dc17ae3d36beeb71101466de9582f91de2fe01013d9bcde7b8239be8ee927ac4e1ec81fd8b916cb1b14928512171dbf385b978e801793ec403567042d6dd80f7bf341f06a4ab590be046563e9aefc7274654769473e61df36d3fac065108d2fdbf5bd7f0e1d02fb6ea29eba3bf521cdd9907dd93fb4a5219d872", 0x99}, {&(0x7f0000000b40)="8b5a1d0fb5044134171e1478b46ff01487af809143fee02247005351741b25dcce6028e2eb393b98c7f52e3cd8eec44fd614ccb21cee304acfe8ced59664aa83c566693c5622939d995a655d246f9da0f5b3349b8c5e335b3695679424771a32a5dc4be41d1d53069af98811d87991ff44a22a6c2e1df51092db258eb7233ecba78137d6f887bf19cb514837ed91af3d9ad209c5e8189f53cf2e0224b324", 0x9e}], 0x4, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @remote}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x9, [{@multicast1, 0x6}, {@broadcast, 0x10001}]}, @rr={0x7, 0x13, 0x3b, [@dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0xc2, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x4}, {@remote, 0x366b}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010102, 0x1}]}, @timestamp={0x44, 0xc, 0x54, 0x0, 0xc, [0x7fffffff, 0x5]}, @lsrr={0x83, 0x27, 0x32, [@private=0xa010102, @remote, @multicast1, @private=0xa010100, @rand_addr=0x64010102, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ssrr={0x89, 0x1f, 0xe9, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @multicast1, @local, @empty]}, @generic={0x89, 0x6, "8231b947"}]}}}], 0x128}}, {{&(0x7f0000000ac0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000d40)="05bb7bca4e3589bb9ed650af760e6bf04b4f59a0ef896cba523a5963bacfba057a049afe5bb09c96eca860505c001fe0f89b5cc518afbcafd5fd10bb50092bfd33fa9e8475c1d56c837bd8545dd24a984f001f064fc5bec7e29e6e4cf950cddf1d60e1a43a19df973b3318be2214f602e5bbadc65aeb7057bb8f6f8697b999c2e38871b67fc4fba3c29d0ed9", 0x8c}, {&(0x7f0000000e00)="c97a31ce747b6c8208c4436b2e4e63b7240fd6049cb0ff7fde3472b6482129836a8839727ea20bc70c43e40ac563ba1baa0d35cab159e87a41cf3d0e9b31b280fea86b6431ceaf728acb027eff3276da0bbaea6f6aa2c4c70579fc44bf87457b10c52e8ff88fd56709912008a7f308b189cfbef1e70d3cb3af30c2b2c73eb6a866897912ee233e55b3c5d2c1f7fc95f450a6ff466ecb05bd9d90710ce0a3b83fc855587069515f9fe8457625b277cda81a2f78cf", 0xb4}, {&(0x7f0000000ec0)="416693e8e485e678ff6c9af3529ec9579e8ba9a451a5da9614e2b33c403704b7", 0x20}, {&(0x7f0000000f00)="0ae1a9ef60e576ebf7a932442c119c6a2c28706c2f73c5a72b326767be8bc645becdddc5740f8b10633caebb9c885cf52cd3d2205a017b8d721e142217188bec794d50b28b7f0e6cacc7faf79b40fc7923d2a52463a5d1db285ef05fa3a5c0af145ecc12bab3980ef1bd1d15f3aee3", 0x6f}], 0x4, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x38}}, {{&(0x7f0000001140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001180)="19", 0x1}, {&(0x7f00000011c0)="2c18635d8d2bddb5320f3d9035cac5cab4d17aa604c540cb7e3ec03e8f1b82b24443ab6cd84196ef5c62ace41b807f83ce21530f0999a7b9aab2955c0964a0108e7e3904e1e02a05d81023f0505da8962d60787ca8367e0d01c67737a1af", 0x5e}], 0x2, &(0x7f00000013c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @ssrr={0x89, 0x7, 0x41, [@broadcast]}, @rr={0x7, 0x17, 0x13, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @remote]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x1, [{@private=0xa010101, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0xb0}}, {{&(0x7f0000001480)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x4, 0xde, 0x1, 0x5}, @timestamp_prespec={0x44, 0x24, 0x1f, 0x3, 0xe, [{@private=0xa010100, 0xa1b}, {@private=0xa010102, 0x5}, {@private=0xa010101, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @private=0xa010100}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001600)="bcae96d055814444f3080253d8f8f65211b38e32c815657218cbe04dc27a4803f94841a2da0c621c0fc63f343ab9fe4abf5e6ac2f472d255abfe04721641d94ce89e70938a233f8cb3a389a097910662dbbd2596c51a16c0f8859c1a6b2cbd710f2e3089c7443133cb3d7a67aad3e44ce18e9ea0cbc0d57765b5e5e3dbfad0610fcf", 0x82}, {&(0x7f00000016c0)="f04474be7c744e1ca6a8b710794213fda2f30ae719878da2ee4c93156982807c5115530cee7b345ed945dd9f42dc3c23d226e707aa8c708d741a8fc444f7e46705de79500e86ebc49b860dda5e61f1d4c99b254bb83d4ce8c3e0f005e74599e87f6d177cf5151514e92f503c9e9b00bea7e81a9717f530e6d956c6bf4502709e7c9faace4d57564396a258f610b67cb3151bfc3d77b7bfeffea53054f621e4c2fc0ea5f8fc6b7e1d5483ad6cafc5d01c661f50efdd7e15771d4a3f1ed5144a0a2c74672565676f25c96b301135026adb882ba7c32873ea5096a1a09b62270ee3d4d553756791e4", 0xe7}, {&(0x7f00000017c0)="d0e8eb3d871968adf3adc0abb5273354b39a20d0cc2f75fefb3a41dcca5b7bff545123d658102094de64b75a5ca3e8255c79072eceab849597c6d77edb3bf00d2a66f599995138a1aa98f58b4d52328332ccc680d234458b9bb1b58abfe6773edc3efb546c8a48be867f3a4243a968aef5c85afd25ffc495a26b6a6e050f71ac5fe215da54f627633131e7e99c6bf99bf8ad0588f8", 0x95}, {&(0x7f0000001880)="c6f6760e331d5079489421911bd95905fccbfd9d5991a4855338cabd2f5b7d137fefae8e1930e74f40f50c73b0b669d447890ce92553212f91b86543b03221b82d0d1a54ca302dce37a42e465a77525db3f023346f46d84c27dea70657ec20cc1fb0c57b4ce347e8b3532995f0244947ee1e56b5535e9b338e182a8e18937b85bcb9ecf5e56e267e131204", 0x8b}, {&(0x7f0000001940)="c2b7607c50ad4881ee57f2eea94b011a9e9df3e8c1448e1c63f2e907f8611d58967e60de826b6de7125d3521377e65c16b674c920abcf050969865b9b6d84dac42ee3b5ccebc7d02f3895fea5120bf6e0b6efbc7f3ce7dbbf3f711f35c05c1c9649657a60b7b6f20ac1c4875b1d63a3b8942abcbc67f9e7082e69ca738e03d8d8b06f820b8d2550b52e861f417b260b199bb92f9f6a25e372cfb77dd10d854273aa55b2f2480503c9f21fe0f82726c30536502581b3c4f44024a3ba387f38d7ca79ee4d717fc2c01477a7705e83042389424b96d081d0a9668846a4a88783da9750e57ec32ef3fea8ad4d2a8e2499f3ddefaaa", 0xf3}, {&(0x7f0000001b40)="e132c65236678b1ccf88af0dc2773ddc13c8299ea10b1c8b3c690df6c47f3680870cb92482b45299c96d491d25c5c0c07a794bd4af28f4d8740104808e2dcb36e0d98eef02329ad2f00bca2f82c64050675a1443d1f4b2089e4381234d19b2b6c7a835eb42bdf071439e10f931d1cb0eac3410ab02a6e04d2be27497afb1144e482f06237837abe788fd1d695777998d3b0036e61f6c28a9a0feeb28e3174f09392e0f8b4f3ed69311c9386490c2dbc3eba7f94623d62b631ee00236c3dd6afbb49d26c3e01ba6fa5ea50f6808ef81ad47b2c7ec60fb83eb33c160271d545efc5c404519ad80e3e9627c8628aa87ae", 0xef}, {&(0x7f0000001c40)="00c0b72567ee4a391f005935a7fe03765e546fb13ecee6b6a9b46417cc198e52b4adefdda06b5a5d13b506e23010321f1a12009623ceebed03c888bd75d9debe39b59c5fc42aeef0a8ef7855ea4111b7186dd3bf", 0x54}], 0x7, &(0x7f0000001d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}}], 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)={0x24, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x24}}, 0x0)

36.082350892s ago: executing program 4 (id=886):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', <r2=>0x0})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @dev}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)

34.110435836s ago: executing program 4 (id=891):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x6a040000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

17.647241923s ago: executing program 3 (id=930):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879bde9ab3b114cca01d5595df98c7ee87ad4addf15645ba13c7ba07fff86217b25afaea809398a3bca505b5920766e3aad747a6726c6b383d080300331a00588f1c4128e371acb756d9c7627ecd8059d5def7692c79ea1d94", 0x90}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87627ec5dd5f81b76d17515400000000000000", 0x30}, {&(0x7f0000000d40)="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", 0x1bb}], 0x3}}], 0x1, 0x40440c1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

16.39040909s ago: executing program 3 (id=932):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x42202)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
getpgid(0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(0xffffffffffffffff, 0x2)
futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000080)=0x6)
futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2)
futex(0x0, 0x4, 0xffffffbe, &(0x7f0000000280)={0x77359400}, 0x0, 0x4000001)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x10010, r1, 0xe5050000)
r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000000001d0063110c000000000085ba10000002feff0085e40000000500000095e35d93f0acb5b8454df76ac9c8762e77cecce7fe30e82c80bd01c64d25db37292600661b0783f8c24330ef85b45abdf605cb2accad3a5320e5427183f5433487c97e99fd15d0d8196b9d339c625ce1f4e2b7b1198b491db9dfb46b93d521f2649ededa4eab43587985c6a73faba68232c21b5c2326bfa8e7216e375e19900f746cee987484d032b2584647f69c18887b3bc2d835c5253856ff738c43c5a9f80c1cbe0c8bb079321ce07ff721b65fd41498102780a0604ac3267485c2ded5ff87d5a65945a954ea89583c2b1e51f6b52cea214bb72985f8ae164445b981ddf6164527429f06cb132687bb4fb9853b8e625967fa82dd8d62525f8b8214765d3879f001636dac1c125432d96da0d97784d999cdc15adab5accbd14708e09078c4cd1ed0340609c986fbc5b344"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)

13.426242138s ago: executing program 0 (id=938):
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="0000000000000000200051229d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0/file0', [], 0xa, "49fa6cd76629564cb0ea3f15cd01a214073a9fbd4834ec9b2940f3dc76"}, 0x2e)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pipe(&(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
read(r1, &(0x7f0000000340)=""/254, 0xfe)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0)

11.312991897s ago: executing program 3 (id=941):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879bde9ab3b114cca01d5595df98c7ee87ad4addf15645ba13c7ba07fff86217b25afaea809398a3bca505b5920766e3aad747a6726c6b383d080300331a00588f1c4128e371acb756d9c7627ecd8059d5def7692c79ea1d94", 0x90}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87627ec5dd5f81b76d17515400000000000000", 0x30}, {&(0x7f0000000d40)="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", 0x1bb}], 0x3}}], 0x1, 0x40440c1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

10.147254171s ago: executing program 1 (id=942):
socket$igmp(0x2, 0x3, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

10.015841828s ago: executing program 0 (id=943):
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000"], 0x1c}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4)

9.698026961s ago: executing program 1 (id=944):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r1, &(0x7f0000000240)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x90)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2})
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vcan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

9.631359414s ago: executing program 3 (id=946):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1})
r0 = socket$rxrpc(0x21, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = openat$ppp(0xffffff9c, &(0x7f0000000240), 0x400, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000002c0))
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
read(r5, &(0x7f00000000c0)=""/29, 0x1d)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x156})
r6 = socket$inet(0x2, 0x4, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
close_range(r0, r7, 0x2)

9.617904886s ago: executing program 0 (id=947):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x4b66, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0)
r4 = accept$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001a40)=[{0x0, 0x0, 0x0}], 0x4924924924925f4, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
open(0x0, 0x141042, 0x100)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0), 0xb)
fallocate(r6, 0x20, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x10001}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0)
memfd_secret(0x7f80cdbbf47a267b)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4010000ecffffff6111a4000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00'], 0x28}, 0x0)

8.43512205s ago: executing program 2 (id=948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
shutdown(r2, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0xe48f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'macvlan0\x00'})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000013400)={0x2020}, 0x2020)

7.759780221s ago: executing program 1 (id=949):
syz_emit_vhci(&(0x7f0000000ac0)=ANY=[@ANYBLOB="04ffffffffffff00"], 0x1d)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
getpgid(0xffffffffffffffff)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000091414fdffffffffffffff"], 0x10}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xb}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000001240), 0x2, 0x3)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23)
fcntl$getownex(r0, 0x10, &(0x7f0000000340))
recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/137, 0x89}, {&(0x7f0000000dc0)=""/34, 0x22}, {&(0x7f0000000ec0)=""/113, 0x71}, {&(0x7f0000001500)=""/189, 0xbd}, {&(0x7f00000025c0)=""/4082, 0xff2}, {&(0x7f0000006a80)=""/4096, 0x1000}], 0x6}}, {{&(0x7f00000002c0)=@generic, 0x80, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000600)=""/22, 0x16}, 0x2}, {{&(0x7f0000000640)=@ax25={{0x3, @netrom}, [@default, @bcast, @null, @default, @bcast, @null, @bcast, @default]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000c00)=""/118, 0x76}, {&(0x7f0000000740)=""/240, 0xf0}, {&(0x7f0000000840)=""/175, 0xaf}, {&(0x7f0000000900)=""/30, 0x1e}, {&(0x7f0000000940)=""/172, 0xac}], 0x5, &(0x7f0000000b00)=""/239, 0xef}, 0x2}], 0x6, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
futex(&(0x7f00000011c0)=0x1, 0x5, 0x40000002, 0x0, &(0x7f0000048000), 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_allocate_blocks\x00'}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000040)}, {&(0x7f0000001040)}, {&(0x7f00000004c0)="e334c70c0e19eb78ae21bc6e25b8cb058040e9a519f48b7601ca1ed876a1e714b89389d7ff839d90a1c378d8dc37e597ef706a856ac0164e6ea66ade7b061eeb232fb3940b67e76ad06cc462f3f6a382d79f80ef4b98a35f6e18e882b196c45b448d665c77278883ab8e6194e1703f873df5afc3fe8f008c8181bc769afecdba733b71edb82b79a0b253cc0c44baa51a1ee80d3f06676498014ff8b86882bd476be99486583b03bc0c5b0d495d15254d42a2bf4b52e57e1a4d8d7267af0d3538b0b3a8f438754cdc33400def54c55a14c03f", 0xd2}], 0x3)

7.298766153s ago: executing program 2 (id=950):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x42202)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
getpgid(0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(0xffffffffffffffff, 0x2)
futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000080)=0x6)
futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2)
futex(0x0, 0x4, 0xffffffbe, &(0x7f0000000280)={0x77359400}, 0x0, 0x4000001)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x10010, r1, 0xe5050000)
r4 = syz_clone(0x0, 0x0, 0x5a, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x18, r4, 0x0, &(0x7f00000000c0)={0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)

6.931125379s ago: executing program 0 (id=951):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="31830000000000000000190000fd04000180"], 0x18}}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004", @ANYRES32=r2, @ANYRES16=r4, @ANYRES8=r0, @ANYRES8], 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d000000"], 0x58}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r10, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r9, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0)

6.919752489s ago: executing program 3 (id=952):
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="0000000000000000200051229d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0/file0', [], 0xa, "49fa6cd76629564cb0ea3f15cd01a214073a9fbd4834ec9b2940f3dc76"}, 0x2e)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pipe(&(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
read(r1, &(0x7f0000000340)=""/254, 0xfe)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0)

6.075787672s ago: executing program 1 (id=953):
socket$igmp(0x2, 0x3, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

5.729357279s ago: executing program 1 (id=954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x43)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800050100000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r10=>0x0})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000130a010200000000000000000100000008000340000056f56a6f3300040900020073c98b271858ced6c3000e0073797a8e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={<r11=>0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc)
sendto$packet(r1, &(0x7f0000000340)="bdc1bfd0f82f0941b5b5d48cb5555c14de9cb2eda43089a0392a6fefa804f41cdf672cc31502c73b5ee139a01d2c28665badb4e47bffd7a487523b5ed3a5640f4ad488898969c3d9aa2fa950fd19381b2933d2170a42b8e60d7d9b7bca3fa1f080f86c523bf21dbb3713c30ee4aaa9923439cbf9657e106522f5d7392b572fded69b2938a8e47a860dc93540df993d37cef26d0b94a391682407870a8b6e099816df3e8f0432e7f7ec", 0xa9, 0x20040005, &(0x7f0000000500)={0x11, 0xd, r11, 0x1, 0x67, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x400, 0x703d28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff2, 0xe}, {0xfffa, 0x9}, {0xffe0, 0xfff2}}}, 0x24}}, 0x2000c010)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)

3.994682947s ago: executing program 2 (id=955):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="8557fba58fc0e2252453d84f8230cc96659d0e4458e818b02b45ec882ed49305fd6a8bbf97ee86aba2872b72a7d93e714516be85372a95879bde9ab3b114cca01d5595df98c7ee87ad4addf15645ba13c7ba07fff86217b25afaea809398a3bca505b5920766e3aad747a6726c6b383d080300331a00588f1c4128e371acb756d9c7627ecd8059d5def7692c79ea1d94", 0x90}, {&(0x7f0000000140)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe882ea140e87627ec5dd5f81b76d17515400000000000000", 0x30}, {&(0x7f0000000d40)="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", 0x1bb}], 0x3}}], 0x1, 0x40440c1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

3.748214103s ago: executing program 2 (id=956):
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000"], 0x1c}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4)

3.338631155s ago: executing program 2 (id=957):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "34a6caf58d"}]}]}}}}})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0)
write$P9_RWSTAT(r4, &(0x7f00000003c0)={0x7}, 0x7)

2.170282064s ago: executing program 2 (id=958):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffffff9c, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @hyper}, 0x10)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
write$ppp(r1, &(0x7f0000000480)="00004de3bf7f46665617cb8c9eca6d509ef4f35e0851ca8ec6ae15b270b75c8b5c04a2a08ac937dc9e402d80b194edbcdb70621eb283c52b05188aa9696b89e1f4a2d984a8aa8a904d1bb01a80b1b5a3e349f1017de5373be1efc05bbdd5ca8642e30fca0ea6ca7bd4c1501680c9698b589314b38e59d288", 0x78)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet(0x2, 0x0, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38)
r4 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x800)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009000100e5559c1973797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000038000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000000400038008000740000000011c0000000b0a0103000000000000000005000004080008400000000114000000100001000000000000000000"], 0xf4}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

301.142328ms ago: executing program 3 (id=959):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0], 0xf4240})

270.475516ms ago: executing program 0 (id=960):
r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

122.654443ms ago: executing program 1 (id=961):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioprio_get$pid(0x0, r0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x200001, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = syz_io_uring_setup(0x13e2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xff}, &(0x7f00000000c0), &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>r3, {0xc, 0xff6}}, './file0\x00'})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000500)=r7, 0x1)

0s ago: executing program 0 (id=962):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

kernel console output (not intermixed with test programs):

as invalid maxpacket 59391, setting to 1024
[  418.119259][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  418.192353][ T1149] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  418.203475][ T8015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.236922][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  418.305462][ T8015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.321265][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  418.408684][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  418.477838][ T1149] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  418.497774][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  418.559728][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  418.593007][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  418.646155][ T1149] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  418.706500][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  418.801288][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  418.911818][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  418.990652][ T1149] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.032612][ T8015] team0: Port device team_slave_0 added
[  419.060586][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  419.089372][ T8015] team0: Port device team_slave_1 added
[  419.111171][ T5139] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  419.117662][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  419.241236][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  419.297311][ T1149] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.324779][ T5085] Bluetooth: hci4: command tx timeout
[  419.339743][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  419.357630][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  419.394910][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  419.397907][ T5139] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  419.405731][ T1149] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.454727][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  419.496984][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.547975][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'.
[  419.561191][ T1149] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  419.565750][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.600218][ T1149] usb 1-1: config 0 interface 0 has no altsetting 0
[  419.631784][ T5139] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  419.634926][ T1149] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  419.722693][ T5139] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  419.773148][ T1149] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  419.783209][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.785222][ T5139] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  419.790435][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.833269][ T1149] usb 1-1: Product: syz
[  419.851068][ T1149] usb 1-1: Manufacturer: syz
[  419.861164][ T1149] usb 1-1: SerialNumber: syz
[  419.882736][ T1149] usb 1-1: config 0 descriptor??
[  419.902456][ T8052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  419.923716][ T1149] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  419.925154][ T5139] usb 2-1: Manufacturer: syz
[  419.963712][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.016194][ T5139] usb 2-1: config 0 descriptor??
[  420.106021][ T5151] usb 1-1: USB disconnect, device number 10
[  420.185786][ T5151] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  420.206777][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.262915][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.456527][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.650102][ T5139] usbhid 2-1:0.0: can't add hid device: -71
[  420.698785][ T5139] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  420.812724][ T5139] usb 2-1: USB disconnect, device number 10
[  421.219388][ T8015] hsr_slave_0: entered promiscuous mode
[  421.401784][ T8015] hsr_slave_1: entered promiscuous mode
[  421.546255][ T8015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  421.581231][ T8015] Cannot create hsr debugfs directory
[  422.531628][ T5139] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  422.831599][ T5139] usb 5-1: Using ep0 maxpacket: 16
[  422.868539][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'.
[  422.942611][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  423.001675][ T5139] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  423.056754][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.147959][ T5139] usb 5-1: config 0 descriptor??
[  423.613703][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.697054][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.012587][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.085168][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.400666][ T8015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.783910][ T5139] hid (null): report_id 2838798905 is invalid
[  424.820171][ T5139] hid (null): unknown global tag 0xc
[  424.838355][ T5139] hid (null): unknown global tag 0xa5
[  424.940309][ T5139] hid (null): unknown global tag 0xd
[  424.977946][ T8109] netlink: 64 bytes leftover after parsing attributes in process `syz.3.576'.
[  425.049959][ T8015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.064743][ T5139] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1
[  425.131375][ T5139] hid-generic 0003:0158:0100.0008: unexpected long global item
[  425.179681][ T5139] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22
[  425.600745][ T8015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.871313][ T5139] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  426.037887][ T8015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.092546][ T5139] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  426.248188][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.351213][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  426.490007][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  426.525947][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  426.555549][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.580880][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  426.623381][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  426.673348][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  426.718352][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  426.778740][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  426.839042][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  426.911110][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  426.954212][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.031543][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  427.106645][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  427.186957][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  427.226480][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.272869][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  427.391153][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  427.439745][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  427.468113][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.513386][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  427.632331][ T8015] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  427.649352][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  427.700309][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  427.798203][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.831165][ T1149] usb 5-1: USB disconnect, device number 9
[  427.961902][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  427.980691][ T8015] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  428.011498][ T8122] netlink: 100 bytes leftover after parsing attributes in process `syz.0.579'.
[  428.024064][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  428.191420][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  428.224051][ T5139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  428.234599][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  428.376570][ T5139] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  428.390425][ T5139] usb 4-1: config 0 interface 0 has no altsetting 0
[  428.458995][ T5139] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  428.465013][ T8015] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  428.471028][ T5139] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  428.572300][ T8015] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  428.632129][ T5139] usb 4-1: Product: syz
[  428.636386][ T5139] usb 4-1: Manufacturer: syz
[  428.661063][ T5139] usb 4-1: SerialNumber: syz
[  428.682716][ T8133] fuse: Bad value for 'fd'
[  428.700359][ T5139] usb 4-1: config 0 descriptor??
[  428.753821][ T5139] usb 4-1: can't set config #0, error -71
[  428.788302][ T5139] usb 4-1: USB disconnect, device number 11
[  429.594745][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'.
[  429.927679][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.606683][ T8015] 8021q: adding VLAN 0 to HW filter on device team0
[  431.631643][ T8159] libceph: resolve '400' (ret=-3): failed
[  431.696103][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.703546][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.895075][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.902455][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.016620][ T8162] fuse: Bad value for 'fd'
[  432.381277][ T5077] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  432.467764][   T29] bridge_slave_1: left allmulticast mode
[  432.481408][   T29] bridge_slave_1: left promiscuous mode
[  432.507952][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.564496][   T29] bridge_slave_0: left allmulticast mode
[  432.585200][   T29] bridge_slave_0: left promiscuous mode
[  432.611353][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.655032][ T5077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.676724][ T5136] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  432.686888][ T5077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.726804][ T5077] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  432.766852][ T5077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.798767][ T5077] usb 2-1: config 0 descriptor??
[  432.839076][ T5077] usbhid 2-1:0.0: can't add hid device: -22
[  432.851440][ T5077] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  432.903432][ T5136] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  432.938397][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  432.969269][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.005622][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.038660][ T5077] usb 2-1: USB disconnect, device number 11
[  433.043013][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.080684][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.118259][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.140578][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.174754][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.186271][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.233469][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.251090][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.272540][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.291348][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.310621][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.351030][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.372555][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.385422][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.400091][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.462738][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.491064][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.503500][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.531214][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.551081][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.581032][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.602280][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.621184][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.661111][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.719058][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.752416][ T5136] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  433.791260][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  433.813352][ T5136] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  433.845710][ T5136] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.864972][ T5136] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  433.881486][ T5136] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  433.918298][ T5136] usb 1-1: Product: syz
[  433.941128][ T5136] usb 1-1: Manufacturer: syz
[  433.946211][ T5136] usb 1-1: SerialNumber: syz
[  434.002674][ T5136] usb 1-1: config 0 descriptor??
[  434.040275][ T8166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  434.104957][ T5136] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  434.847894][ T8174] fuse: Bad value for 'fd'
[  435.135093][    T8] usb 1-1: USB disconnect, device number 11
[  435.145122][    T8] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  435.562518][   T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.633886][   T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.739978][   T29] bond0 (unregistering): Released all slaves
[  437.124772][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'.
[  437.151840][ T8202] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.599'.
[  438.816208][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.142212][ T8215] fuse: Bad value for 'fd'
[  439.267759][ T8220] libceph: resolve '400' (ret=-3): failed
[  439.385314][ T8015] veth0_vlan: entered promiscuous mode
[  439.445072][ T8015] veth1_vlan: entered promiscuous mode
[  439.655405][ T8015] veth0_macvtap: entered promiscuous mode
[  439.749032][ T8015] veth1_macvtap: entered promiscuous mode
[  439.978540][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.065365][ T8227] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.602'.
[  440.079796][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.149419][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.209233][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.258844][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.300742][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.331081][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.375137][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.426769][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.437536][ T5138] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  440.477546][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.501177][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.541927][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.593565][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.653639][ T5138] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  440.670913][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  440.704026][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  440.731398][   T29] hsr_slave_0: left promiscuous mode
[  440.741045][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  440.761298][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  440.777660][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  440.797251][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  440.818596][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  440.824119][   T29] hsr_slave_1: left promiscuous mode
[  440.851125][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  440.868026][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  440.881350][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  440.902958][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.923517][   T29] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.934438][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  440.974149][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  440.985171][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  440.999272][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  441.032494][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.044662][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  441.071415][   T29] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.087180][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  441.123213][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  441.143329][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  441.208224][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  441.269648][   T29] veth1_macvtap: left promiscuous mode
[  441.282913][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  441.310039][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  441.331256][   T29] veth0_macvtap: left promiscuous mode
[  441.348613][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  441.371809][   T29] veth1_vlan: left promiscuous mode
[  441.378774][   T29] veth0_vlan: left promiscuous mode
[  441.413550][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  441.448970][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  441.473063][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  441.503444][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  441.555411][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  441.593626][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  441.621448][ T5138] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  441.635391][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  441.649573][ T5138] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xFF has invalid maxpacket 59391, setting to 1024
[  441.690453][ T5138] usb 4-1: config 0 interface 0 has no altsetting 0
[  441.725963][ T5138] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  441.743611][ T5138] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  441.778496][ T5138] usb 4-1: Product: syz
[  441.794782][ T5138] usb 4-1: Manufacturer: syz
[  441.829372][ T5138] usb 4-1: SerialNumber: syz
[  441.884529][ T5138] usb 4-1: config 0 descriptor??
[  441.903054][ T8229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  441.957271][ T5138] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  442.098259][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'.
[  442.158307][ T5138] usb 4-1: USB disconnect, device number 12
[  442.209718][ T5138] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  443.839059][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'.
[  444.006608][   T29] team0 (unregistering): Port device team_slave_1 removed
[  444.145252][   T29] team0 (unregistering): Port device team_slave_0 removed
[  445.435099][ T8232] netlink: 'syz.4.608': attribute type 4 has an invalid length.
[  445.547656][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  445.579182][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.623455][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  445.646418][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.670775][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  445.705465][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.747806][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  445.766404][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.791529][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  445.814564][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.877947][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.967030][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  445.973623][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  446.100553][ T8015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.154271][ T8015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.194387][ T8015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.265375][ T8015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.113758][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.148977][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.290247][   T30] audit: type=1400 audit(1720503889.130:290): avc:  denied  { read } for  pid=8278 comm="syz.0.617" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  447.384351][   T30] audit: type=1400 audit(1720503889.130:291): avc:  denied  { open } for  pid=8278 comm="syz.0.617" path="/dev/rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  447.471622][ T8282] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.615'.
[  447.553986][   T30] audit: type=1400 audit(1720503889.210:292): avc:  denied  { ioctl } for  pid=8278 comm="syz.0.617" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  447.592518][ T3864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.656712][ T3864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.574003][ T8300] libceph: resolve '400' (ret=-3): failed
[  451.011242][ T5136] IPVS: starting estimator thread 0...
[  451.121153][ T8307] IPVS: using max 16 ests per chain, 38400 per kthread
[  455.977672][ T8332] binder: 8330:8332 ioctl 5514 0 returned -22
[  456.149975][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  456.164953][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  456.174719][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  456.186548][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  456.196744][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  456.206304][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  456.429337][ T8336] lo speed is unknown, defaulting to 1000
[  458.351151][ T5085] Bluetooth: hci5: command tx timeout
[  459.342851][ T8341] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.631'.
[  459.958236][ T8336] chnl_net:caif_netlink_parms(): no params data found
[  460.184813][ T8358] fuse: Invalid rootmode
[  460.373731][ T5085] Bluetooth: hci5: command tx timeout
[  461.196431][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.252843][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.260358][ T8336] bridge_slave_0: entered allmulticast mode
[  461.417710][ T8336] bridge_slave_0: entered promiscuous mode
[  461.505814][ T8368] netlink: 'syz.2.637': attribute type 4 has an invalid length.
[  461.795104][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.821491][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.941463][ T8336] bridge_slave_1: entered allmulticast mode
[  462.021465][ T8336] bridge_slave_1: entered promiscuous mode
[  462.441430][ T5085] Bluetooth: hci5: command tx timeout
[  462.638524][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.972116][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.055643][ T5095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  463.066685][ T5095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  463.134840][ T5095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  463.145520][ T5095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  463.164076][ T5095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  463.172192][ T5095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  463.838259][ T8336] team0: Port device team_slave_0 added
[  463.930923][ T8336] team0: Port device team_slave_1 added
[  464.523187][ T5095] Bluetooth: hci5: command tx timeout
[  464.552764][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.559832][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.721743][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.823723][ T8374] lo speed is unknown, defaulting to 1000
[  464.842364][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.849359][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.041024][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.339705][ T5095] Bluetooth: hci6: command tx timeout
[  465.806280][ T8336] hsr_slave_0: entered promiscuous mode
[  465.813651][ T8336] hsr_slave_1: entered promiscuous mode
[  465.820395][ T8336] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  465.828898][ T8336] Cannot create hsr debugfs directory
[  465.923099][ T8380] libceph: resolve '400' (ret=-3): failed
[  467.262464][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  467.300578][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.361525][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.391194][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.401959][ T5085] Bluetooth: hci6: command tx timeout
[  467.422572][ T8384] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.431646][ T8384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  468.249689][ T8336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.653916][ T8336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.767642][ T8382] lo speed is unknown, defaulting to 1000
[  469.236330][ T8336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.481386][ T8384] Bluetooth: hci6: command tx timeout
[  469.561440][ T8384] Bluetooth: hci1: command tx timeout
[  469.635768][ T8336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.305471][ T8374] chnl_net:caif_netlink_parms(): no params data found
[  470.709101][ T8390] netlink: 100 bytes leftover after parsing attributes in process `syz.2.640'.
[  471.488778][ T8336] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  471.565637][ T8336] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  471.586334][ T8384] Bluetooth: hci6: command tx timeout
[  471.641162][ T8384] Bluetooth: hci1: command tx timeout
[  471.953078][ T8336] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  472.016886][ T8336] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  472.121514][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.172359][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.179878][ T8374] bridge_slave_0: entered allmulticast mode
[  472.276061][ T8374] bridge_slave_0: entered promiscuous mode
[  472.323204][   T25] IPVS: starting estimator thread 0...
[  472.337497][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.392428][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.431520][ T8374] bridge_slave_1: entered allmulticast mode
[  472.461134][ T8402] IPVS: using max 17 ests per chain, 40800 per kthread
[  472.483566][ T8374] bridge_slave_1: entered promiscuous mode
[  472.637392][ T5095] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  472.649924][ T5095] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  472.659516][ T5095] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  472.670512][ T5095] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  472.692332][ T5095] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  472.700200][ T5095] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  473.134174][ T8407] fuse: Invalid rootmode
[  473.388029][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.844944][ T8403] lo speed is unknown, defaulting to 1000
[  473.861087][ T5095] Bluetooth: hci1: command tx timeout
[  474.203176][ T5095] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  474.223009][ T5095] Bluetooth: hci4: Injecting HCI hardware error event
[  474.273461][ T5095] Bluetooth: hci4: hardware error 0x00
[  474.606750][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.826587][ T8384] Bluetooth: hci4: unexpected event for opcode 0x080c
[  474.841325][ T8384] Bluetooth: hci7: command tx timeout
[  475.523829][ T8374] team0: Port device team_slave_0 added
[  475.726345][ T8374] team0: Port device team_slave_1 added
[  475.899662][ T8384] Bluetooth: hci1: command tx timeout
[  475.981325][ T8416] netlink: 100 bytes leftover after parsing attributes in process `syz.2.646'.
[  476.761823][ T5095] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  476.921279][ T5095] Bluetooth: hci7: command tx timeout
[  476.950278][ T8423] libceph: resolve '400' (ret=-3): failed
[  476.974536][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.028899][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.121284][ T8374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.204100][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.221144][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.281432][ T8374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.230091][ T8374] hsr_slave_0: entered promiscuous mode
[  478.269040][ T8374] hsr_slave_1: entered promiscuous mode
[  478.331219][ T8374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  478.369741][ T8374] Cannot create hsr debugfs directory
[  478.445055][ T8382] chnl_net:caif_netlink_parms(): no params data found
[  479.001571][ T5095] Bluetooth: hci7: command tx timeout
[  479.082832][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.085534][ T8336] 8021q: adding VLAN 0 to HW filter on device team0
[  480.349741][ T8433] rdma_rxe: rxe_newlink: failed to add lo
[  480.660237][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.668069][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.007388][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.026271][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.056187][ T8382] bridge_slave_0: entered allmulticast mode
[  481.072174][ T8382] bridge_slave_0: entered promiscuous mode
[  481.091149][ T5095] Bluetooth: hci7: command tx timeout
[  481.120259][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.127575][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.230232][   T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.357079][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.369019][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.377422][ T8382] bridge_slave_1: entered allmulticast mode
[  481.387093][ T8382] bridge_slave_1: entered promiscuous mode
[  481.505139][   T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.585486][ T8403] chnl_net:caif_netlink_parms(): no params data found
[  481.618526][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.636081][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.733810][   T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.799391][ T8441] fuse: Invalid rootmode
[  481.968554][ T8374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.996648][ T8443] loop7: detected capacity change from 0 to 16384
[  482.052064][ T8443] loop7: detected capacity change from 16384 to 16383
[  482.088146][   T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.133816][ T8443] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  482.145142][ T8443] Buffer I/O error on dev loop7, logical block 0, async page read
[  482.157936][ T8443] ldm_validate_partition_table(): Disk read failed.
[  482.173051][ T8443] Dev loop7: unable to read RDB block 0
[  482.196515][ T8443]  loop7: unable to read partition table
[  482.208626][ T8443] loop7: partition table beyond EOD, truncated
[  482.225394][ T8443] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  482.324826][ T8374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.408944][ T8382] team0: Port device team_slave_0 added
[  482.629296][ T8374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.674032][ T8382] team0: Port device team_slave_1 added
[  482.803722][ T8451] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.653'.
[  482.900791][ T8374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.980563][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.012115][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.019540][ T8403] bridge_slave_0: entered allmulticast mode
[  483.031101][ T8403] bridge_slave_0: entered promiscuous mode
[  483.044016][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.062210][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.069579][ T8403] bridge_slave_1: entered allmulticast mode
[  483.109852][ T8403] bridge_slave_1: entered promiscuous mode
[  483.121658][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.128766][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.155631][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.171984][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.179173][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.219164][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.607263][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.672807][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.776037][ T8382] hsr_slave_0: entered promiscuous mode
[  483.784058][ T8382] hsr_slave_1: entered promiscuous mode
[  483.792726][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.803746][ T8382] Cannot create hsr debugfs directory
[  484.060667][ T8403] team0: Port device team_slave_0 added
[  484.161286][   T61] bridge_slave_1: left allmulticast mode
[  484.169469][   T61] bridge_slave_1: left promiscuous mode
[  484.191491][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.235242][   T61] bridge_slave_0: left allmulticast mode
[  484.251768][   T61] bridge_slave_0: left promiscuous mode
[  484.257896][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.573197][ T8462] libceph: resolve '400' (ret=-3): failed
[  485.318809][ T8465] rdma_rxe: rxe_newlink: failed to add lo
[  485.398400][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.416441][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.435590][   T61] bond0 (unregistering): Released all slaves
[  485.503317][ T8403] team0: Port device team_slave_1 added
[  486.065083][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.081058][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.119462][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.212288][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.219542][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.273527][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.308781][ T8374] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  486.485668][ T8374] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  486.627352][ T8336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.731706][ T8374] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  486.808053][ T8374] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  486.992975][ T8487] syz.2.657: attempt to access beyond end of device
[  486.992975][ T8487] nbd2: rw=0, sector=16, nr_sectors = 8 limit=0
[  487.012034][ T8487] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 2, size 4096)
[  487.031420][ T8487] syz.2.657: attempt to access beyond end of device
[  487.031420][ T8487] nbd2: rw=0, sector=128, nr_sectors = 8 limit=0
[  487.053360][ T8487] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 16, size 4096)
[  487.085526][ T8487] REISERFS warning (device nbd2): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd2
[  487.404534][ T8403] hsr_slave_0: entered promiscuous mode
[  487.437183][ T8403] hsr_slave_1: entered promiscuous mode
[  487.447102][ T8403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  487.455155][ T8403] Cannot create hsr debugfs directory
[  487.572332][   T61] hsr_slave_0: left promiscuous mode
[  487.579520][   T61] hsr_slave_1: left promiscuous mode
[  487.663898][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.681193][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.714415][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.731474][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.813125][   T61] veth1_macvtap: left promiscuous mode
[  487.861608][   T61] veth0_macvtap: left promiscuous mode
[  487.867472][   T61] veth1_vlan: left promiscuous mode
[  487.881628][   T61] veth0_vlan: left promiscuous mode
[  487.947626][ T8492] fuse: Bad value for 'rootmode'
[  488.432211][ T8494] netlink: 100 bytes leftover after parsing attributes in process `syz.2.659'.
[  489.342571][   T61] team0 (unregistering): Port device team_slave_1 removed
[  489.525680][   T61] team0 (unregistering): Port device team_slave_0 removed
[  491.063360][ T8509] rdma_rxe: rxe_newlink: failed to add lo
[  491.504505][ T8336] veth0_vlan: entered promiscuous mode
[  491.675905][   T61] IPVS: stop unused estimator thread 0...
[  491.766272][ T8336] veth1_vlan: entered promiscuous mode
[  492.021932][ T8403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.066135][ T8382] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  492.150467][ T8382] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  492.213756][ T8382] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  492.359016][ T8403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.427668][ T8382] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  492.597569][ T8403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.726132][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.836009][ T8403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.937796][ T8336] veth0_macvtap: entered promiscuous mode
[  493.070128][ T8374] 8021q: adding VLAN 0 to HW filter on device team0
[  493.107330][ T8336] veth1_macvtap: entered promiscuous mode
[  493.154030][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.161458][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.204072][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.211530][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.313918][   T61] bridge_slave_1: left allmulticast mode
[  493.322338][   T61] bridge_slave_1: left promiscuous mode
[  493.402288][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.472501][   T61] bridge_slave_0: left allmulticast mode
[  493.478206][   T61] bridge_slave_0: left promiscuous mode
[  493.511511][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.656772][ T8541] fuse: Bad value for 'rootmode'
[  493.853658][   T30] audit: type=1400 audit(1720503935.700:293): avc:  denied  { ioctl } for  pid=8543 comm="syz.2.666" path="socket:[22201]" dev="sockfs" ino=22201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  494.510298][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.530755][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.549475][   T61] bond0 (unregistering): Released all slaves
[  494.631749][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.645928][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.680790][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.721412][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.742374][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.753613][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.775280][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.796026][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.807174][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.823309][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.837794][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.899626][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.911877][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.926369][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.941592][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.951776][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.964042][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.974254][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.985060][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.995165][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.007887][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.020862][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.051270][ T1793] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  495.224895][ T8336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.233979][ T8336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.246105][ T8336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.258184][ T1793] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  495.264318][ T8336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.274637][ T1793] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  495.294121][ T1793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.312914][ T1793] usb 3-1: config 0 descriptor??
[  495.336395][ T1793] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  495.519707][ T8403] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  495.542426][ T8403] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  495.592213][ T8403] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  495.642655][ T8403] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  495.797039][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.934184][   T61] hsr_slave_0: left promiscuous mode
[  495.942177][   T61] hsr_slave_1: left promiscuous mode
[  495.948649][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.957173][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.981833][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.993000][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.020453][   T61] veth1_macvtap: left promiscuous mode
[  496.026555][   T61] veth0_macvtap: left promiscuous mode
[  496.032772][   T61] veth1_vlan: left promiscuous mode
[  496.038268][   T61] veth0_vlan: left promiscuous mode
[  496.926364][   T61] team0 (unregistering): Port device team_slave_1 removed
[  496.992363][   T61] team0 (unregistering): Port device team_slave_0 removed
[  497.812131][ T5077] usb 3-1: USB disconnect, device number 11
[  498.078645][ T8382] 8021q: adding VLAN 0 to HW filter on device team0
[  498.221999][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.231666][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.239191][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.264251][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.319877][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.327241][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.540166][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'.
[  498.631916][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.644046][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.716636][   T61] IPVS: stop unused estimator thread 0...
[  498.812880][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.212550][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.350250][ T8403] 8021q: adding VLAN 0 to HW filter on device team0
[  499.381943][    T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  499.396366][ T8374] veth0_vlan: entered promiscuous mode
[  499.434439][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.441912][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.517604][ T8374] veth1_vlan: entered promiscuous mode
[  499.559599][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.566953][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.623690][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.669463][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  499.735088][    T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  499.792230][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.834178][    T8] usb 4-1: config 0 descriptor??
[  499.847664][    T8] usbhid 4-1:0.0: can't add hid device: -22
[  499.873557][ T8374] veth0_macvtap: entered promiscuous mode
[  499.879809][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  499.945972][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.975319][ T8374] veth1_macvtap: entered promiscuous mode
[  500.050697][    T8] usb 4-1: USB disconnect, device number 13
[  500.190737][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.217209][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.239282][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.268166][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.283099][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.300160][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.310782][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.321923][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.332283][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.357395][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.388146][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.482886][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.513000][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.545965][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.578995][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.607970][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.661020][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.688568][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.733771][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.760049][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.772595][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.796690][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.864213][ T8374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.875276][ T8374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.887755][ T8374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.899258][ T8374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.146295][ T5151] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  501.236983][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.263906][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.342281][ T5151] usb 4-1: Using ep0 maxpacket: 16
[  501.354712][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  501.382230][ T5151] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  501.396225][ T8403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.406165][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.442470][ T5151] usb 4-1: config 0 descriptor??
[  501.572488][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.609331][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.677417][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.692437][ T8382] veth0_vlan: entered promiscuous mode
[  501.702024][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.743998][ T8403] veth0_vlan: entered promiscuous mode
[  501.784680][ T8382] veth1_vlan: entered promiscuous mode
[  501.867283][ T8403] veth1_vlan: entered promiscuous mode
[  501.981805][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.019561][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.178230][ T8382] veth0_macvtap: entered promiscuous mode
[  502.200900][ T8597] Cannot find set identified by id 0 to match
[  502.304514][ T8403] veth0_macvtap: entered promiscuous mode
[  502.363645][ T8382] veth1_macvtap: entered promiscuous mode
[  502.571177][ T8403] veth1_macvtap: entered promiscuous mode
[  503.171642][ T5151] hid (null): report_id 2838798905 is invalid
[  503.216731][ T5151] hid (null): unknown global tag 0xc
[  503.250750][ T5151] hid (null): unknown global tag 0xa5
[  503.263972][ T5151] hid (null): unknown global tag 0xd
[  503.323879][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.341388][ T5151] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1
[  503.361540][ T5151] hid-generic 0003:0158:0100.0009: unexpected long global item
[  503.372926][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.392487][ T5151] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22
[  503.411021][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.454459][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.491135][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.536032][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.563495][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.608159][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.666035][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.720036][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.821259][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.889463][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.992786][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.040792][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.081654][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.160548][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.229721][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.302366][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.370410][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.419889][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.518614][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.587500][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.663379][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.696790][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.754169][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.791096][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.912339][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.003305][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.212270][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.271690][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.319464][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.381436][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.409627][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.455902][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.488678][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.526775][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.539249][ T5077] usb 4-1: USB disconnect, device number 14
[  505.601406][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.667410][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.718795][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.769218][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.835717][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.896720][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.945595][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.003309][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.031180][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.051101][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.067307][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.088484][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.129549][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.201965][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.230728][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.271416][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.335154][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.381928][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.414910][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.484054][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.494680][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'.
[  506.683690][ T8382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.740290][ T8382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.746094][ T8624] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.677'.
[  506.758723][ T8382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.758783][ T8382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.890048][ T8403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.908439][ T8403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.953843][ T8403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.989521][ T8403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.625540][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  507.632384][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  507.843368][ T8634] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.678'.
[  509.383712][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.406282][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.855962][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.103608][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.728111][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.833838][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.136811][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.201387][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.707549][ T5095] Bluetooth: Wrong link type (-22)
[  511.938101][ T8659] netlink: 100 bytes leftover after parsing attributes in process `syz.4.639'.
[  512.001690][ T8655] netlink: 100 bytes leftover after parsing attributes in process `syz.3.682'.
[  512.928674][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'.
[  513.110451][ T8674] syz.4.686: attempt to access beyond end of device
[  513.110451][ T8674] nbd4: rw=0, sector=16, nr_sectors = 8 limit=0
[  513.158274][ T8674] REISERFS warning (device nbd4): sh-2006 read_super_block: bread failed (dev nbd4, block 2, size 4096)
[  513.313262][ T8674] syz.4.686: attempt to access beyond end of device
[  513.313262][ T8674] nbd4: rw=0, sector=128, nr_sectors = 8 limit=0
[  513.374591][ T8674] REISERFS warning (device nbd4): sh-2006 read_super_block: bread failed (dev nbd4, block 16, size 4096)
[  513.391862][ T8674] REISERFS warning (device nbd4): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd4
[  513.421260][ T5151] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  513.664449][ T5151] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  513.725202][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  513.761142][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  513.825172][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  513.874194][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  513.916907][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  513.948740][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  513.977597][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  514.037280][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  514.098385][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  514.134547][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  514.173516][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  514.250846][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  514.285287][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  514.322034][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  514.371086][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  514.412539][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  514.475274][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  514.508880][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  514.568202][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  514.596791][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  514.691990][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  514.716441][ T5151] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  514.744213][ T5151] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  514.809692][ T5151] usb 4-1: config 0 interface 0 has no altsetting 0
[  514.861577][ T5151] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  514.901112][ T5151] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  514.909637][ T5151] usb 4-1: Product: syz
[  514.954308][ T5151] usb 4-1: Manufacturer: syz
[  514.971360][ T5151] usb 4-1: SerialNumber: syz
[  514.996464][ T5151] usb 4-1: config 0 descriptor??
[  515.028700][ T5151] yurex 4-1:0.0: Could not find endpoints
[  515.361093][ T5138] usb 4-1: USB disconnect, device number 15
[  515.402005][ T5095] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  515.411417][ T5095] Bluetooth: hci5: Injecting HCI hardware error event
[  515.420735][ T5095] Bluetooth: hci5: hardware error 0x00
[  515.561838][ T8384] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  515.572112][ T8384] Bluetooth: hci1: Injecting HCI hardware error event
[  515.581519][ T5085] Bluetooth: hci1: hardware error 0x00
[  515.992616][ T5172] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  516.205773][ T5172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.261021][ T5172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.291351][ T8384] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  516.321052][ T5172] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  516.339866][ T5172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.357171][ T5172] usb 1-1: config 0 descriptor??
[  516.377689][ T5172] usbhid 1-1:0.0: can't add hid device: -22
[  516.406020][ T5172] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  516.638117][ T5172] usb 1-1: USB disconnect, device number 12
[  516.703289][ T8702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  516.724543][ T8702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  516.734487][ T8702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  516.751394][ T8702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  516.787302][ T8702] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  516.795939][ T8702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  516.991653][ T8705] syz.3.695: attempt to access beyond end of device
[  516.991653][ T8705] nbd3: rw=0, sector=16, nr_sectors = 8 limit=0
[  517.063976][ T8705] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 2, size 4096)
[  517.077763][ T8705] syz.3.695: attempt to access beyond end of device
[  517.077763][ T8705] nbd3: rw=0, sector=128, nr_sectors = 8 limit=0
[  517.096049][ T8705] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 16, size 4096)
[  517.107893][ T8705] REISERFS warning (device nbd3): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd3
[  517.179281][ T8701] lo speed is unknown, defaulting to 1000
[  517.585395][ T5095] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  517.881198][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  518.361865][ T8711] netlink: 100 bytes leftover after parsing attributes in process `syz.0.696'.
[  518.997125][ T5085] Bluetooth: hci0: command tx timeout
[  520.939469][ T8723] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.699'.
[  521.084627][ T5085] Bluetooth: hci0: command tx timeout
[  521.360572][ T8732] warning: `syz.4.701' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  521.551504][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'.
[  521.633471][ T5085] Bluetooth: Wrong link type (-22)
[  521.762928][   T30] audit: type=1400 audit(1720503963.590:294): avc:  denied  { read } for  pid=8731 comm="syz.4.701" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  521.881846][ T5085] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[  521.892109][ T5085] Bluetooth: hci7: Injecting HCI hardware error event
[  521.906485][ T5085] Bluetooth: hci7: hardware error 0x00
[  521.947226][   T30] audit: type=1400 audit(1720503963.590:295): avc:  denied  { open } for  pid=8731 comm="syz.4.701" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  521.981345][ T5172] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  522.141090][ T5172] usb 4-1: device descriptor read/64, error -71
[  522.270231][ T8701] chnl_net:caif_netlink_parms(): no params data found
[  522.413840][ T8746] netlink: 'syz.1.705': attribute type 4 has an invalid length.
[  522.451274][ T5172] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  522.621125][ T5172] usb 4-1: device descriptor read/64, error -71
[  522.770518][ T5172] usb usb4-port1: attempt power cycle
[  523.161802][ T5095] Bluetooth: hci0: command tx timeout
[  523.261085][ T5172] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  523.322534][ T5172] usb 4-1: device descriptor read/8, error -71
[  523.621558][ T5172] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  523.688423][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.713254][ T5172] usb 4-1: device descriptor read/8, error -71
[  523.761295][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.817186][ T8701] bridge_slave_0: entered allmulticast mode
[  523.846685][ T5172] usb usb4-port1: unable to enumerate USB device
[  523.863973][ T8701] bridge_slave_0: entered promiscuous mode
[  523.916347][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.962965][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.019982][ T8701] bridge_slave_1: entered allmulticast mode
[  524.126771][ T5085] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  524.138032][ T8701] bridge_slave_1: entered promiscuous mode
[  524.613923][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.739258][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.846117][ T8764] netlink: 100 bytes leftover after parsing attributes in process `syz.4.707'.
[  525.242088][ T5085] Bluetooth: hci0: command tx timeout
[  526.723440][ T8701] team0: Port device team_slave_0 added
[  526.787705][ T8701] team0: Port device team_slave_1 added
[  527.331377][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.369671][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.504834][ T8701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.574391][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.663924][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.811045][ T8701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.361838][   T30] audit: type=1326 audit(1720503970.200:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8776 comm="syz.4.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5868d75bd9 code=0x0
[  528.429338][   T30] audit: type=1400 audit(1720503970.250:297): avc:  denied  { create } for  pid=8801 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  529.699592][ T8701] hsr_slave_0: entered promiscuous mode
[  529.792021][ T8701] hsr_slave_1: entered promiscuous mode
[  531.257902][   T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.435634][ T8817] netlink: 'syz.4.718': attribute type 4 has an invalid length.
[  533.523677][   T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.785413][   T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.125287][   T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.251693][ T8850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  534.258747][ T8850] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  534.321338][ T8850] vhci_hcd vhci_hcd.0: Device attached
[  534.381775][ T8850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8850 comm=syz.1.725
[  534.612592][ T1793] usb 11-1: new high-speed USB device number 7 using vhci_hcd
[  534.912826][ T8851] vhci_hcd: connection reset by peer
[  534.963327][ T1039] vhci_hcd: stop threads
[  534.991338][ T1039] vhci_hcd: release socket
[  535.043564][ T1039] vhci_hcd: disconnect device
[  535.845116][   T61] bridge_slave_1: left allmulticast mode
[  535.919413][   T61] bridge_slave_1: left promiscuous mode
[  535.953111][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.072033][   T61] bridge_slave_0: left allmulticast mode
[  536.098101][   T61] bridge_slave_0: left promiscuous mode
[  536.124857][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.365571][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'.
[  536.378412][ T5138] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  536.490849][   T30] audit: type=1400 audit(1720503978.330:298): avc:  denied  { map } for  pid=8869 comm="syz.4.729" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  536.584154][ T5138] usb 4-1: Using ep0 maxpacket: 16
[  536.597254][ T5138] usb 4-1: config 0 has no interfaces?
[  536.603035][ T5138] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  536.629669][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.664885][ T5138] usb 4-1: config 0 descriptor??
[  536.987760][ T8881] rdma_rxe: rxe_newlink: failed to add lo
[  538.947829][ T1149] usb 4-1: USB disconnect, device number 20
[  539.088177][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.143323][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.181539][   T61] bond0 (unregistering): Released all slaves
[  539.812918][ T1793] vhci_hcd: vhci_device speed not set
[  539.846111][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'.
[  539.902460][ T5151] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  540.134035][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.161905][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.205295][ T5151] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  540.264082][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.358640][ T5151] usb 1-1: config 0 descriptor??
[  540.472809][ T5151] usbhid 1-1:0.0: can't add hid device: -22
[  540.505842][ T5151] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  541.456527][ T5151] usb 1-1: USB disconnect, device number 13
[  541.527596][ T8902] netlink: 100 bytes leftover after parsing attributes in process `syz.3.736'.
[  542.048948][ T8701] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  542.187719][ T8701] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  543.547617][   T61] hsr_slave_0: left promiscuous mode
[  543.614723][   T61] hsr_slave_1: left promiscuous mode
[  543.691098][ T8941] rdma_rxe: rxe_newlink: failed to add lo
[  543.701533][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.724206][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.787412][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.814553][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.829800][ T8935] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.739'.
[  544.010659][   T61] veth1_macvtap: left promiscuous mode
[  544.065094][   T61] veth0_macvtap: left promiscuous mode
[  544.081435][   T61] veth1_vlan: left promiscuous mode
[  544.103469][   T61] veth0_vlan: left promiscuous mode
[  545.159033][ T1793] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  545.371222][ T1793] usb 5-1: Using ep0 maxpacket: 16
[  545.409095][ T1793] usb 5-1: config 0 has no interfaces?
[  545.460367][ T1793] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  545.489404][ T1793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.527332][ T1793] usb 5-1: config 0 descriptor??
[  546.708422][ T5077] usb 5-1: USB disconnect, device number 10
[  546.919303][   T61] team0 (unregistering): Port device team_slave_1 removed
[  547.055292][   T61] team0 (unregistering): Port device team_slave_0 removed
[  547.149564][ T5085] Bluetooth: Wrong link type (-22)
[  547.929540][ T8981] netlink: 100 bytes leftover after parsing attributes in process `syz.4.752'.
[  548.893817][ T8701] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  549.043576][ T8701] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  549.978558][ T9011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=9011 comm=syz.1.758
[  550.129378][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.136765][ T9011] netlink: 292 bytes leftover after parsing attributes in process `syz.1.758'.
[  550.168029][   T61] IPVS: stop unused estimator thread 0...
[  550.241095][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  550.267483][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'.
[  550.278858][ T9007] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.756'.
[  550.388483][ T8701] 8021q: adding VLAN 0 to HW filter on device team0
[  550.608385][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.615936][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.711757][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.719185][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.568406][ T9032] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.760'.
[  552.391908][ T9029] rdma_rxe: rxe_newlink: failed to add lo
[  553.391470][ T9047] netlink: 100 bytes leftover after parsing attributes in process `syz.1.763'.
[  553.858996][ T8701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.953243][ T9057] netlink: 100 bytes leftover after parsing attributes in process `syz.4.765'.
[  554.214099][ T5136] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  554.227283][ T8701] veth0_vlan: entered promiscuous mode
[  554.365163][ T8701] veth1_vlan: entered promiscuous mode
[  554.627590][ T8701] veth0_macvtap: entered promiscuous mode
[  554.669768][ T8701] veth1_macvtap: entered promiscuous mode
[  554.704588][ T5136] usb 1-1: Using ep0 maxpacket: 16
[  554.846653][ T9078] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=9078 comm=syz.4.770
[  554.908473][ T5136] usb 1-1: config 0 has no interfaces?
[  554.923107][ T5136] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  554.962998][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.004933][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.020309][ T9078] netlink: 292 bytes leftover after parsing attributes in process `syz.4.770'.
[  555.056122][ T5136] usb 1-1: config 0 descriptor??
[  555.086308][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.115988][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.151062][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.171137][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.222977][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.246319][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.265752][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.300537][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.343795][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.373952][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.410854][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.446943][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.479551][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.604060][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.614941][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'.
[  555.631755][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'.
[  555.703921][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.746704][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.814207][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.875608][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.902847][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.940751][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.964701][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.000184][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.014593][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.025604][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.037878][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.058096][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.081397][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  556.098191][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  556.129163][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.131734][ T9091] rdma_rxe: rxe_newlink: failed to add lo
[  556.188554][ T8701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.236874][ T8701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.261612][ T8701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.301685][ T8701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.498248][ T5138] usb 1-1: USB disconnect, device number 14
[  556.761801][ T5085] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  556.771644][ T5085] Bluetooth: hci6: Injecting HCI hardware error event
[  556.783305][ T5095] Bluetooth: hci6: hardware error 0x00
[  556.914205][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.931659][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.154355][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.179247][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.534580][ T9099] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.774'.
[  559.261296][ T5095] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  560.281633][ T9135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=9135 comm=syz.1.781
[  560.364760][ T9130] netlink: 292 bytes leftover after parsing attributes in process `syz.1.781'.
[  560.417837][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  560.476214][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'.
[  561.885391][ T9141] Cannot find set identified by id 0 to match
[  562.381621][ T9149] rdma_rxe: rxe_newlink: failed to add lo
[  565.351138][   T30] audit: type=1400 audit(1720504007.180:299): avc:  denied  { execute } for  pid=9169 comm="syz.1.789" path="/35/cpu.stat" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  565.450018][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  565.463437][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  565.484450][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  565.503293][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  565.512564][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  565.561028][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  565.863072][ T9175] lo speed is unknown, defaulting to 1000
[  566.481081][ T5136] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  566.562288][   T29] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.713878][   T30] audit: type=1400 audit(1720504008.560:300): avc:  denied  { accept } for  pid=9190 comm="syz.0.797" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  566.735349][    C1] vkms_vblank_simulate: vblank timer overrun
[  566.763281][ T5136] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  566.986718][ T5136] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  567.227567][ T5136] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  567.275731][   T29] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.286943][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.444320][ T9180] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  567.740110][   T29] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.801352][ T5095] Bluetooth: hci2: command tx timeout
[  567.894436][   T30] audit: type=1400 audit(1720504009.740:301): avc:  denied  { mount } for  pid=9201 comm="syz.0.801" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  567.970848][ T5136] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  568.016057][ T5136] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5
[  568.057992][   T29] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.113957][   T30] audit: type=1400 audit(1720504009.960:302): avc:  denied  { read } for  pid=4521 comm="acpid" name="mouse1" dev="devtmpfs" ino=2441 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  568.136546][    C1] vkms_vblank_simulate: vblank timer overrun
[  568.224597][   T30] audit: type=1400 audit(1720504009.960:303): avc:  denied  { open } for  pid=4521 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2441 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  568.303342][    C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  568.345244][ T5136] usb 5-1: USB disconnect, device number 11
[  568.370262][   T30] audit: type=1400 audit(1720504009.960:304): avc:  denied  { ioctl } for  pid=4521 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2441 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  568.493817][   T30] audit: type=1400 audit(1720504010.260:305): avc:  denied  { unmount } for  pid=8403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  568.855115][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  568.862582][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  568.953300][ T9213] veth1_macvtap: left promiscuous mode
[  569.117924][   T30] audit: type=1400 audit(1720504010.960:306): avc:  denied  { create } for  pid=9216 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  569.171930][   T30] audit: type=1400 audit(1720504010.990:307): avc:  denied  { connect } for  pid=9216 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  569.195983][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  569.433503][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'.
[  569.558004][   T30] audit: type=1400 audit(1720504011.390:308): avc:  denied  { name_bind } for  pid=9221 comm="syz.2.805" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  569.756931][ T9234] Cannot find set identified by id 0 to match
[  569.882786][ T5095] Bluetooth: hci2: command tx timeout
[  569.951056][   T29] bridge_slave_1: left allmulticast mode
[  569.956788][   T29] bridge_slave_1: left promiscuous mode
[  570.009212][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.093055][   T29] bridge_slave_0: left allmulticast mode
[  570.098791][   T29] bridge_slave_0: left promiscuous mode
[  570.141501][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.183190][   T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.209535][   T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.233720][   T29] bond0 (unregistering): Released all slaves
[  571.481845][ T9261] dummy0: entered promiscuous mode
[  571.539077][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  571.539101][   T30] audit: type=1400 audit(1720504013.380:317): avc:  denied  { ioctl } for  pid=9266 comm="syz.1.820" path="socket:[28062]" dev="sockfs" ino=28062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  571.623794][ T9261] dummy0: left promiscuous mode
[  571.667589][   T30] audit: type=1400 audit(1720504013.420:318): avc:  denied  { connect } for  pid=9266 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  571.727753][   T30] audit: type=1400 audit(1720504013.440:319): avc:  denied  { write } for  pid=9266 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  571.768999][ T9175] chnl_net:caif_netlink_parms(): no params data found
[  571.785933][   T30] audit: type=1400 audit(1720504013.440:320): avc:  denied  { bind } for  pid=9266 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  571.844737][   T30] audit: type=1400 audit(1720504013.690:321): avc:  denied  { write } for  pid=9262 comm="syz.0.818" name="video36" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  571.973199][ T5095] Bluetooth: hci2: command tx timeout
[  572.299009][   T30] audit: type=1400 audit(1720504014.140:322): avc:  denied  { read write } for  pid=9282 comm="syz.1.822" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  572.388538][   T30] audit: type=1400 audit(1720504014.140:323): avc:  denied  { open } for  pid=9282 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  572.494061][   T30] audit: type=1400 audit(1720504014.150:324): avc:  denied  { ioctl } for  pid=9282 comm="syz.1.822" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  573.072651][ T9293] loop0: detected capacity change from 0 to 7
[  573.119697][ T9293] Dev loop0: unable to read RDB block 7
[  573.135560][ T9293]  loop0: unable to read partition table
[  573.162496][ T9293] loop0: partition table beyond EOD, truncated
[  573.168892][ T9293] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  573.168892][ T9293] 
) failed (rc=-5)
[  573.240182][ T4536] Dev loop0: unable to read RDB block 7
[  573.291201][ T4536]  loop0: unable to read partition table
[  573.297352][ T4536] loop0: partition table beyond EOD, truncated
[  573.381226][   T30] audit: type=1400 audit(1720504015.220:325): avc:  denied  { bind } for  pid=9294 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  573.561917][   T30] audit: type=1400 audit(1720504015.220:326): avc:  denied  { name_bind } for  pid=9294 comm="syz.1.824" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  573.949821][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.027095][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.041444][ T5095] Bluetooth: hci2: command tx timeout
[  574.101371][ T9175] bridge_slave_0: entered allmulticast mode
[  574.155249][ T9175] bridge_slave_0: entered promiscuous mode
[  574.224394][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.251936][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.282044][ T9175] bridge_slave_1: entered allmulticast mode
[  574.330557][ T9175] bridge_slave_1: entered promiscuous mode
[  574.721757][   T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  574.782770][   T29] hsr_slave_0: left promiscuous mode
[  574.795950][   T29] hsr_slave_1: left promiscuous mode
[  574.827839][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.863969][   T29] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.897929][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.917903][   T25] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  574.951268][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.959459][   T29] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.000794][   T25] usb 5-1: config 0 descriptor??
[  575.033794][   T25] gspca_main: spca508-2.14.0 probing 8086:0110
[  575.093581][   T29] veth1_macvtap: left promiscuous mode
[  575.104418][   T29] veth0_macvtap: left promiscuous mode
[  575.135252][   T29] veth1_vlan: left promiscuous mode
[  575.160018][   T29] veth0_vlan: left promiscuous mode
[  575.595412][   T25] gspca_spca508: reg_read err -110
[  575.609742][   T25] gspca_spca508: reg_read err -32
[  575.626050][   T25] gspca_spca508: reg_read err -32
[  575.648668][   T25] gspca_spca508: reg_read err -32
[  575.684734][   T25] gspca_spca508: reg_read err -32
[  575.696135][   T25] gspca_spca508: reg write: error -32
[  575.715409][   T25] spca508 5-1:0.0: probe with driver spca508 failed with error -32
[  576.426912][ T5138] usb 5-1: USB disconnect, device number 12
[  576.940608][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  576.940633][   T30] audit: type=1400 audit(1720504018.780:330): avc:  denied  { write } for  pid=9338 comm="syz.0.834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  577.203326][   T29] team0 (unregistering): Port device team_slave_1 removed
[  577.324318][   T29] team0 (unregistering): Port device team_slave_0 removed
[  578.279446][ T9175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.492407][   T30] audit: type=1400 audit(1720504020.330:331): avc:  denied  { getopt } for  pid=9348 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  578.558186][ T9175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.725350][ T9354] sctp: [Deprecated]: syz.1.838 (pid 9354) Use of int in max_burst socket option deprecated.
[  578.725350][ T9354] Use struct sctp_assoc_value instead
[  578.855630][   T30] audit: type=1400 audit(1720504020.700:332): avc:  denied  { setopt } for  pid=9355 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  578.941473][   T30] audit: type=1400 audit(1720504020.720:333): avc:  denied  { write } for  pid=9355 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  578.961512][ T9175] team0: Port device team_slave_0 added
[  579.007879][ T9175] team0: Port device team_slave_1 added
[  579.362337][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.399977][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.493429][ T9175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.526581][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.540709][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.656661][ T9175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.087024][ T9175] hsr_slave_0: entered promiscuous mode
[  580.163431][ T9175] hsr_slave_1: entered promiscuous mode
[  580.170658][ T9175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  580.201302][ T9175] Cannot create hsr debugfs directory
[  580.383773][    T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  580.623067][    T8] usb 1-1: Using ep0 maxpacket: 16
[  580.649429][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  580.721034][    T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  580.771088][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.823262][    T8] usb 1-1: config 0 descriptor??
[  581.065999][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.120483][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.406298][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.463841][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.007027][   T30] audit: type=1400 audit(1720504023.840:334): avc:  denied  { name_bind } for  pid=9392 comm="syz.1.847" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  582.492430][   T30] audit: type=1400 audit(1720504024.280:335): avc:  denied  { map } for  pid=9394 comm="syz.4.848" path="socket:[29065]" dev="sockfs" ino=29065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  584.027787][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  584.078271][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  584.152119][    T8] usb 1-1: USB disconnect, device number 15
[  584.405491][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'.
[  585.025267][ T9175] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  585.100132][ T9175] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  585.203811][ T9175] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  585.316630][ T9175] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  586.338717][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0
[  586.412290][ T9452] syz.2.863[9452] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  586.412549][ T9452] syz.2.863[9452] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  586.624625][ T9175] 8021q: adding VLAN 0 to HW filter on device team0
[  587.151158][ T5172] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  587.361008][ T5172] usb 1-1: Using ep0 maxpacket: 16
[  587.369548][ T5172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  587.413300][ T5172] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  587.454681][ T5172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.492777][ T5172] usb 1-1: config 0 descriptor??
[  587.729643][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.771693][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.035941][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.087509][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.659015][ T5172] hid (null): report_id 2838798905 is invalid
[  589.687547][ T5172] hid (null): unknown global tag 0xc
[  589.694887][ T5172] hid (null): unknown global tag 0xa5
[  589.700378][ T5172] hid (null): unknown global tag 0xd
[  589.719394][   T30] audit: type=1400 audit(1720504031.550:336): avc:  denied  { bind } for  pid=9478 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  589.765878][ T5172] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  589.779244][ T5172] hid-generic 0003:0158:0100.000A: unexpected long global item
[  589.832366][ T5172] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22
[  591.520420][ T5138] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  591.762283][ T5138] usb 5-1: Using ep0 maxpacket: 16
[  591.826050][ T5138] usb 5-1: config 0 has no interfaces?
[  591.867955][ T5138] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  591.886531][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  591.905414][ T5138] usb 5-1: Product: syz
[  591.913585][ T5138] usb 5-1: Manufacturer: syz
[  592.034446][ T5138] r8152-cfgselector 5-1: Unknown version 0x0000
[  592.055560][ T5138] r8152-cfgselector 5-1: config 0 descriptor??
[  592.117066][   T25] usb 1-1: USB disconnect, device number 16
[  594.865190][ T5138] r8152-cfgselector 5-1: USB disconnect, device number 13
[  595.135955][ T9506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.872'.
[  595.205827][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.213335][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.236952][ T9510] lo speed is unknown, defaulting to 1000
[  595.257205][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.264563][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state
[  597.040656][ T9175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.710685][ T9175] veth0_vlan: entered promiscuous mode
[  597.793432][ T9175] veth1_vlan: entered promiscuous mode
[  597.973070][ T9175] veth0_macvtap: entered promiscuous mode
[  598.022368][ T9175] veth1_macvtap: entered promiscuous mode
[  598.115690][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.149668][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.194324][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.241233][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.273352][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.326514][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.347548][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.368017][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.399455][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.417697][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.433977][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.445689][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.466401][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.487335][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.515115][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.548188][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.569113][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.603920][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.645274][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.686532][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.749937][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.770728][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.804349][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.815200][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.834236][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.847514][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.858726][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.869545][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  598.880629][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.944165][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.013002][ T9547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.884'.
[  599.729739][   T30] audit: type=1400 audit(1720504041.510:337): avc:  denied  { read } for  pid=9549 comm="syz.0.885" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  599.770714][ T9175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.191352][ T9175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.467174][ T9175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.467826][   T30] audit: type=1400 audit(1720504041.510:338): avc:  denied  { open } for  pid=9549 comm="syz.0.885" path="/dev/input/event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  600.505472][ T9175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.541702][   T30] audit: type=1400 audit(1720504041.550:339): avc:  denied  { ioctl } for  pid=9549 comm="syz.0.885" path="/dev/input/event0" dev="devtmpfs" ino=834 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  600.576273][ T9553] hsr0: entered promiscuous mode
[  600.658255][ T9555] hsr_slave_0: left promiscuous mode
[  600.673668][ T9555] hsr_slave_1: left promiscuous mode
[  600.769673][   T30] audit: type=1400 audit(1720504042.160:340): avc:  denied  { search } for  pid=4518 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  600.807706][   T30] audit: type=1400 audit(1720504042.650:341): avc:  denied  { ioctl } for  pid=9558 comm="syz.2.888" path="socket:[29291]" dev="sockfs" ino=29291 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  602.675231][ T9568] lo speed is unknown, defaulting to 1000
[  602.686012][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.747452][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.824433][   T30] audit: type=1400 audit(1720504044.660:342): avc:  denied  { read } for  pid=9578 comm="syz.0.894" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  602.994184][   T30] audit: type=1400 audit(1720504044.660:343): avc:  denied  { open } for  pid=9578 comm="syz.0.894" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  603.066734][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.088032][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.177049][ T9586] syz.0.896 uses obsolete (PF_INET,SOCK_PACKET)
[  606.064090][ T9601] team0: Device ipvlan2 is already an upper device of the team interface
[  606.181080][    T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  606.403316][    T8] usb 1-1: Using ep0 maxpacket: 32
[  606.415959][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.451247][    T8] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  606.491185][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.537296][   T30] audit: type=1400 audit(1720504048.380:344): avc:  denied  { accept } for  pid=9604 comm="syz.3.901" path="socket:[29523]" dev="sockfs" ino=29523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  606.539475][    T8] usb 1-1: config 0 descriptor??
[  606.654508][    T8] rndis_host 1-1:0.0: skipping garbage
[  606.660138][    T8] usb 1-1: bad CDC descriptors
[  606.885082][ T9614] MTD: Couldn't look up 'mountinfo': -2
[  607.012678][    T8] usb 1-1: USB disconnect, device number 17
[  608.146292][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'.
[  608.176387][ T9616] IPv6: NLM_F_REPLACE set, but no existing node found!
[  608.209994][ T5077] IPVS: starting estimator thread 0...
[  608.249217][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'.
[  608.341453][ T9624] IPVS: using max 18 ests per chain, 43200 per kthread
[  609.003137][ T9633] 9pnet_virtio: no channels available for device 
[  611.590241][ T9659] MTD: Couldn't look up 'mountinfo': -2
[  613.191301][ T5142] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  613.391150][ T5142] usb 1-1: Using ep0 maxpacket: 16
[  613.413839][ T5142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  613.487517][ T5142] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  613.537991][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.597745][ T5142] usb 1-1: config 0 descriptor??
[  613.823806][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  613.835592][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  613.854368][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  613.882666][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  613.892978][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.911615][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  613.928587][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  613.943664][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.221833][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.242002][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.543816][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.757521][ T5142] hid (null): report_id 2838798905 is invalid
[  614.832940][ T5142] hid (null): unknown global tag 0xc
[  614.839930][ T9667] lo speed is unknown, defaulting to 1000
[  614.860554][ T9678] overlayfs: failed to resolve './file0': -2
[  614.910388][ T5142] hid (null): unknown global tag 0xa5
[  614.949062][ T5142] hid (null): unknown global tag 0xd
[  615.128727][ T5142] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1
[  615.200215][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.241454][ T5142] hid-generic 0003:0158:0100.000B: unexpected long global item
[  615.250468][ T5142] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22
[  615.762549][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.042707][ T5095] Bluetooth: hci1: command tx timeout
[  616.068031][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.570292][ T9703] MTD: Couldn't look up 'mountinfo': -2
[  618.697827][ T5095] Bluetooth: hci1: command tx timeout
[  618.712159][   T11] bridge_slave_1: left allmulticast mode
[  618.728287][   T11] bridge_slave_1: left promiscuous mode
[  618.736663][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.821231][   T11] bridge_slave_0: left allmulticast mode
[  618.827081][   T11] bridge_slave_0: left promiscuous mode
[  618.842858][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.090736][ T5142] usb 1-1: USB disconnect, device number 18
[  620.201316][ T1793] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  620.422943][ T1793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.469602][ T1793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.491763][ T1793] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  620.501978][ T1793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.641861][ T1793] usb 3-1: config 0 descriptor??
[  620.697962][ T1793] usbhid 3-1:0.0: can't add hid device: -22
[  620.744487][ T1793] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  620.761259][ T5095] Bluetooth: hci1: command tx timeout
[  620.901817][ T1793] usb 3-1: USB disconnect, device number 12
[  621.873528][ T9735] MTD: Couldn't look up 'mountinfo': -2
[  622.841162][ T5095] Bluetooth: hci1: command tx timeout
[  622.913550][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  623.026220][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  623.104455][   T11] bond0 (unregistering): Released all slaves
[  625.306562][ T9755] binder_alloc: 9754: binder_alloc_buf, no vma
[  627.022036][ T9781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.944'.
[  627.150565][ T9786] MTD: Couldn't look up 'mountinfo': -2
[  627.789352][ T9667] chnl_net:caif_netlink_parms(): no params data found
[  628.844697][   T30] audit: type=1400 audit(1720504070.680:345): avc:  denied  { setopt } for  pid=9803 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  629.042200][ T9806] netlink: 'syz.0.951': attribute type 11 has an invalid length.
[  629.113226][ T9806] netlink: 'syz.0.951': attribute type 11 has an invalid length.
[  629.165007][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.191239][ T9806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.951'.
[  629.200852][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.262311][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.320476][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.462072][   T11] veth1_macvtap: left promiscuous mode
[  629.467831][   T11] veth0_macvtap: left promiscuous mode
[  629.494851][   T11] veth1_vlan: left promiscuous mode
[  629.510743][   T11] veth0_vlan: left promiscuous mode
[  629.783660][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  629.843517][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'.
[  630.305828][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  630.312512][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  631.700014][   T11] team0 (unregistering): Port device team_slave_1 removed
[  631.935327][   T11] team0 (unregistering): Port device team_slave_0 removed
[  634.873975][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'.
[  634.916915][ T9822] IPv6: NLM_F_REPLACE set, but no existing node found!
[  635.560631][ T9848] ------------[ cut here ]------------
[  635.567345][ T9848] WARNING: CPU: 1 PID: 9848 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x1fce/0x2460
[  635.577957][ T9848] Modules linked in:
[  635.582761][ T9848] CPU: 1 PID: 9848 Comm: syz.3.959 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  635.593477][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  635.604188][ T9848] RIP: 0010:__alloc_pages_noprof+0x1fce/0x2460
[  635.610510][ T9848] Code: ef e8 06 71 0b 00 e9 ef f2 ff ff e8 fc 70 0b 00 e9 1b f3 ff ff 4c 89 f7 e8 ef 70 0b 00 e9 f6 f2 ff ff c6 05 50 7c ef 0d 01 90 <0f> 0b 90 e9 81 e4 ff ff 49 8d bc 24 48 09 00 00 48 b8 00 00 00 00
[  635.630539][ T9848] RSP: 0018:ffffc9000316f818 EFLAGS: 00010246
[  635.637131][ T9848] RAX: 0000000000000000 RBX: 00000000007a1200 RCX: 0000000000000000
[  635.645672][ T9848] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0
[  635.653883][ T9848] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  635.664051][ T9848] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000040dc0
[  635.673548][ T9848] R13: 1ffff9200062df17 R14: 00000000007a1200 R15: ffffffff8517314d
[  635.682127][ T9848] FS:  00007f3b7862d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  635.691356][ T9848] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  635.697996][ T9848] CR2: 00000000203d0000 CR3: 000000001e9de000 CR4: 00000000003506f0
[  635.706489][ T9848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  635.714570][ T9848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  635.722817][ T9848] Call Trace:
[  635.726161][ T9848]  <TASK>
[  635.729231][ T9848]  ? show_regs+0x8c/0xa0
[  635.733845][ T9848]  ? __warn+0xe5/0x3c0
[  635.737988][ T9848]  ? __alloc_pages_noprof+0x1fce/0x2460
[  635.743715][ T9848]  ? report_bug+0x3c0/0x580
[  635.748284][ T9848]  ? handle_bug+0x3d/0x70
[  635.752736][ T9848]  ? exc_invalid_op+0x17/0x50
[  635.757597][ T9848]  ? asm_exc_invalid_op+0x1a/0x20
[  635.764556][ T9848]  ? drm_mode_create_lease_ioctl+0x4bd/0x1f70
[  635.772238][ T9848]  ? __alloc_pages_noprof+0x1fce/0x2460
[  635.777959][ T9848]  ? count_memcg_event_mm.part.0+0x12c/0x340
[  635.784159][ T9848]  ? __pfx_lock_release+0x10/0x10
[  635.789260][ T9848]  ? find_held_lock+0x2d/0x110
[  635.794165][ T9848]  ? __up_read+0x1fb/0x760
[  635.798650][ T9848]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  635.804569][ T9848]  ? irqentry_exit+0x3b/0x90
[  635.809248][ T9848]  ? lockdep_hardirqs_on+0x7c/0x110
[  635.814631][ T9848]  ? drm_mode_create_lease_ioctl+0x4bd/0x1f70
[  635.820858][ T9848]  __kmalloc_large_node+0x7f/0x1a0
[  635.826153][ T9848]  __kmalloc_noprof.cold+0xc/0x61
[  635.831354][ T9848]  ? _copy_from_user+0x5d/0xf0
[  635.836188][ T9848]  drm_mode_create_lease_ioctl+0x4bd/0x1f70
[  635.843045][ T9848]  ? __pfx___lock_acquire+0x10/0x10
[  635.848413][ T9848]  ? __pfx___lock_acquire+0x10/0x10
[  635.854000][ T9848]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[  635.860404][ T9848]  ? lock_acquire+0x1b1/0x560
[  635.867121][ T9848]  ? find_held_lock+0x2d/0x110
[  635.873312][ T9848]  ? drm_is_current_master+0x2c/0x40
[  635.878691][ T9848]  ? do_raw_spin_unlock+0x172/0x230
[  635.884081][ T9848]  drm_ioctl_kernel+0x1ec/0x3e0
[  635.889003][ T9848]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[  635.895497][ T9848]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  635.901035][ T9848]  drm_ioctl+0x5dc/0xc00
[  635.905351][ T9848]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[  635.912008][ T9848]  ? __pfx_drm_ioctl+0x10/0x10
[  635.916850][ T9848]  ? selinux_file_ioctl+0xb4/0x270
[  635.922113][ T9848]  ? __pfx_drm_ioctl+0x10/0x10
[  635.926938][ T9848]  __x64_sys_ioctl+0x193/0x220
[  635.931865][ T9848]  do_syscall_64+0xcd/0x250
[  635.936617][ T9848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.942696][ T9848] RIP: 0033:0x7f3b77775bd9
[  635.947258][ T9848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  635.967485][ T9848] RSP: 002b:00007f3b7862d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  635.978141][ T9848] RAX: ffffffffffffffda RBX: 00007f3b77903f60 RCX: 00007f3b77775bd9
[  635.987843][ T9848] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003
[  635.996067][ T9848] RBP: 00007f3b777e4e60 R08: 0000000000000000 R09: 0000000000000000
[  636.004224][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  636.012371][ T9848] R13: 000000000000000b R14: 00007f3b77903f60 R15: 00007ffe1f818d18
[  636.020428][ T9848]  </TASK>
[  636.023619][ T9848] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  636.031023][ T9848] CPU: 1 PID: 9848 Comm: syz.3.959 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  636.041157][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  636.051261][ T9848] Call Trace:
[  636.054590][ T9848]  <TASK>
[  636.057559][ T9848]  dump_stack_lvl+0x3d/0x1f0
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  636.062220][ T9848]  panic+0x6f5/0x7a0
[  636.066188][ T9848]  ? __pfx_panic+0x10/0x10
[  636.070680][ T9848]  ? show_trace_log_lvl+0x363/0x500
[  636.076042][ T9848]  ? __alloc_pages_noprof+0x1fce/0x2460
[  636.081657][ T9848]  check_panic_on_warn+0xab/0xb0
[  636.086676][ T9848]  __warn+0xf1/0x3c0
[  636.090655][ T9848]  ? __alloc_pages_noprof+0x1fce/0x2460
[  636.096277][ T9848]  report_bug+0x3c0/0x580
[  636.100678][ T9848]  handle_bug+0x3d/0x70
[  636.104907][ T9848]  exc_invalid_op+0x17/0x50
[  636.109492][ T9848]  asm_exc_invalid_op+0x1a/0x20
[  636.114428][ T9848] RIP: 0010:__alloc_pages_noprof+0x1fce/0x2460
[  636.120654][ T9848] Code: ef e8 06 71 0b 00 e9 ef f2 ff ff e8 fc 70 0b 00 e9 1b f3 ff ff 4c 89 f7 e8 ef 70 0b 00 e9 f6 f2 ff ff c6 05 50 7c ef 0d 01 90 <0f> 0b 90 e9 81 e4 ff ff 49 8d bc 24 48 09 00 00 48 b8 00 00 00 00
[  636.140322][ T9848] RSP: 0018:ffffc9000316f818 EFLAGS: 00010246
[  636.146427][ T9848] RAX: 0000000000000000 RBX: 00000000007a1200 RCX: 0000000000000000
[  636.154434][ T9848] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0
[  636.162531][ T9848] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  636.170534][ T9848] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000040dc0
[  636.178640][ T9848] R13: 1ffff9200062df17 R14: 00000000007a1200 R15: ffffffff8517314d
[  636.186737][ T9848]  ? drm_mode_create_lease_ioctl+0x4bd/0x1f70
[  636.193036][ T9848]  ? count_memcg_event_mm.part.0+0x12c/0x340
[  636.199244][ T9848]  ? __pfx_lock_release+0x10/0x10
[  636.204397][ T9848]  ? find_held_lock+0x2d/0x110
[  636.209197][ T9848]  ? __up_read+0x1fb/0x760
[  636.213651][ T9848]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  636.219419][ T9848]  ? irqentry_exit+0x3b/0x90
[  636.224135][ T9848]  ? lockdep_hardirqs_on+0x7c/0x110
[  636.229372][ T9848]  ? drm_mode_create_lease_ioctl+0x4bd/0x1f70
[  636.235575][ T9848]  __kmalloc_large_node+0x7f/0x1a0
[  636.240740][ T9848]  __kmalloc_noprof.cold+0xc/0x61
[  636.245895][ T9848]  ? _copy_from_user+0x5d/0xf0
[  636.250781][ T9848]  drm_mode_create_lease_ioctl+0x4bd/0x1f70
[  636.256721][ T9848]  ? __pfx___lock_acquire+0x10/0x10
[  636.262022][ T9848]  ? __pfx___lock_acquire+0x10/0x10
[  636.267414][ T9848]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[  636.273790][ T9848]  ? lock_acquire+0x1b1/0x560
[  636.278520][ T9848]  ? find_held_lock+0x2d/0x110
[  636.283437][ T9848]  ? drm_is_current_master+0x2c/0x40
[  636.288789][ T9848]  ? do_raw_spin_unlock+0x172/0x230
[  636.294124][ T9848]  drm_ioctl_kernel+0x1ec/0x3e0
[  636.299023][ T9848]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[  636.305498][ T9848]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  636.311002][ T9848]  drm_ioctl+0x5dc/0xc00
[  636.315557][ T9848]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[  636.321928][ T9848]  ? __pfx_drm_ioctl+0x10/0x10
[  636.326735][ T9848]  ? selinux_file_ioctl+0xb4/0x270
[  636.331888][ T9848]  ? __pfx_drm_ioctl+0x10/0x10
[  636.336783][ T9848]  __x64_sys_ioctl+0x193/0x220
[  636.341594][ T9848]  do_syscall_64+0xcd/0x250
[  636.346154][ T9848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.352184][ T9848] RIP: 0033:0x7f3b77775bd9
[  636.356628][ T9848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  636.376372][ T9848] RSP: 002b:00007f3b7862d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  636.384841][ T9848] RAX: ffffffffffffffda RBX: 00007f3b77903f60 RCX: 00007f3b77775bd9
[  636.392946][ T9848] RDX: 00000000200003c0 RSI: 00000000c01864c6 RDI: 0000000000000003
[  636.400949][ T9848] RBP: 00007f3b777e4e60 R08: 0000000000000000 R09: 0000000000000000
[  636.409038][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  636.417046][ T9848] R13: 000000000000000b R14: 00007f3b77903f60 R15: 00007ffe1f818d18
[  636.425053][ T9848]  </TASK>
[  636.428394][ T9848] Kernel Offset: disabled
[  636.432744][ T9848] Rebooting in 86400 seconds..