last executing test programs:

19m28.404199652s ago: executing program 3 (id=32):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket(0x10, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
write$cgroup_devices(r5, 0x0, 0x8)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0)

19m23.667760486s ago: executing program 3 (id=40):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110, 0xe}}], 0x18}, 0x20044800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00k$\x00'/30], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x2000000, 0x2e, 0x0, &(0x7f0000000180)="493c13000000000000000000000060b06c743f10614df45a95ba68c4c6dd7ee9cc5a16eddbb030a4adc3053344d1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x200)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0)

19m22.573113359s ago: executing program 3 (id=44):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x40}})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
socket(0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
ftruncate(r6, 0x200004)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x5327)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSPTLCK(r7, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCGETS(r7, 0x5401, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x402, 0x0, 0x2}, 0x0, 0x0)
setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000000)=[{0x1, 0x3, {0x2, 0xff, 0x2}, {0x2, 0xff}, 0xfe}], 0x20)
setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)

19m20.292141919s ago: executing program 3 (id=49):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='bcache_alloc\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)

19m19.274035602s ago: executing program 3 (id=51):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000000d72"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
pipe(0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x1d})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}})
close_range(r0, r0, 0x2)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@polexpire={0xc0, 0x1b, 0x103, 0x70bd28, 0x0, {{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x8}, {0x20000000000, 0x100000001}}}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x80)

19m13.953467915s ago: executing program 3 (id=60):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x9ffffe, 0x0, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r7, r1})
r8 = socket(0x840000000002, 0x3, 0x100)
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100))

18m58.281499485s ago: executing program 32 (id=60):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x9ffffe, 0x0, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r7, r1})
r8 = socket(0x840000000002, 0x3, 0x100)
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100))

3m42.972475309s ago: executing program 2 (id=3781):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000f3000040"])

3m42.687292312s ago: executing program 2 (id=3785):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

3m42.621789018s ago: executing program 2 (id=3786):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setfsuid(0xee01)

3m41.507678011s ago: executing program 2 (id=3792):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0)
mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)

3m41.176312617s ago: executing program 2 (id=3794):
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)={0x20, r0, 0x1, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0)

3m40.907685226s ago: executing program 2 (id=3799):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0)

3m40.804001725s ago: executing program 33 (id=3799):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0)

2m57.178707113s ago: executing program 0 (id=4249):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0xacc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000001c0), &(0x7f0000000200)=""/16}, 0x20)

2m57.04339502s ago: executing program 0 (id=4253):
mkdirat(0xffffffffffffffff, 0x0, 0x10)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000a008b2"], 0x0}, 0x0)

2m55.161968644s ago: executing program 0 (id=4277):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x1, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="4d7e00000000000000002000000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32, @ANYBLOB="06000600000000000600040000"], 0x50}, 0x4, 0x700000000000000}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)="654a90ab7f0293ea790671ce6af97b06979b42577a5fac069397cc791d43600e746a806cdb85265767b604368b286522c4b604bd87ac3716ce1f45fd35fc0180", &(0x7f0000000180), 0xa7c, r4}, 0x38)

2m54.206573759s ago: executing program 0 (id=4285):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)

2m54.148136699s ago: executing program 0 (id=4287):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x3bf, {}, {}, @note={0x4}}], 0x38)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)

2m53.848032692s ago: executing program 0 (id=4294):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r2 = io_uring_setup(0x24cc, &(0x7f0000000140))
r3 = dup3(r1, r2, 0x0)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)

2m53.647369892s ago: executing program 34 (id=4294):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r2 = io_uring_setup(0x24cc, &(0x7f0000000140))
r3 = dup3(r1, r2, 0x0)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0)

2m44.576372882s ago: executing program 5 (id=4354):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040))

2m43.667298898s ago: executing program 5 (id=4357):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x1, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x18})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r5, 0x1)
write(r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32, @ANYBLOB="06000600000000000600040000"], 0x50}, 0x4, 0x700000000000000}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)="654a90ab7f0293ea790671ce6af97b06979b42577a5fac069397cc791d43600e746a806cdb85265767b604368b286522c4b604bd87ac3716ce1f45fd35fc0180", &(0x7f0000000180), 0xa7c, r6}, 0x38)

2m42.739738308s ago: executing program 5 (id=4360):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000600)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x68, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x5, 0xf989, "05"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ce]}, @fastopen={0x22, 0x7, "ce2781a9df"}]}}}}}}}}, 0x0)

2m42.64897568s ago: executing program 5 (id=4361):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2m41.712266287s ago: executing program 5 (id=4362):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2})

2m41.499021586s ago: executing program 5 (id=4364):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)

2m26.113541685s ago: executing program 35 (id=4364):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)

1m39.821352387s ago: executing program 4 (id=4292):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0x61, 0x3, 0x1, 0x80, 0x3, 0xb, 0x7, "", 0x1a, 0x7, 0x4, 0x10, 0x1, '%'}}, 0x10)

1m30.317126421s ago: executing program 4 (id=4292):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0x61, 0x3, 0x1, 0x80, 0x3, 0xb, 0x7, "", 0x1a, 0x7, 0x4, 0x10, 0x1, '%'}}, 0x10)

1m23.301595704s ago: executing program 4 (id=4292):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0x61, 0x3, 0x1, 0x80, 0x3, 0xb, 0x7, "", 0x1a, 0x7, 0x4, 0x10, 0x1, '%'}}, 0x10)

1m10.087357443s ago: executing program 4 (id=4292):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0x61, 0x3, 0x1, 0x80, 0x3, 0xb, 0x7, "", 0x1a, 0x7, 0x4, 0x10, 0x1, '%'}}, 0x10)

52.367739516s ago: executing program 4 (id=4292):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0x61, 0x3, 0x1, 0x80, 0x3, 0xb, 0x7, "", 0x1a, 0x7, 0x4, 0x10, 0x1, '%'}}, 0x10)

27.876469891s ago: executing program 4 (id=4292):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @a_listen={0x61, 0x3, 0x1, 0x80, 0x3, 0xb, 0x7, "", 0x1a, 0x7, 0x4, 0x10, 0x1, '%'}}, 0x10)

12.111923717s ago: executing program 8 (id=5154):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_submit(0x0, 0x1, &(0x7f0000005100)=[0x0])
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = gettid()
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r4, &(0x7f0000000340)=""/215, 0xb5)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335})
getpid()
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0xc058534b, &(0x7f0000000180))
tkill(r3, 0x7)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000e40))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="0fa5e8ea8977a5e131018fc850cc34553a00000001c7442400218f0d41c7442402be1775e3c7442406000000000f011424660f3880130f01dfc4e2e5b783538c0a030f080f01df0f212b"}], 0x1, 0x0, 0x0, 0xf)

11.228347188s ago: executing program 8 (id=5156):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00450022000000fcffffffffff"], 0x1c}}, 0x800)
inotify_init1(0x0)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0xb0, 0xf6, 0x8, 0x3f0, 0x2101, 0xe2cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x7e}}]}}]}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x29, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0)

11.206326857s ago: executing program 1 (id=5157):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, 0x0)
syz_io_uring_setup(0x7adc, &(0x7f0000000240)={0x0, 0x29c5, 0x4, 0x0, 0x81}, &(0x7f00000002c0), &(0x7f0000000300))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="93e24a327200"/17, 0x11}, {&(0x7f0000000440)="bcc9b1590200de9e5de63a46ef5d84ff3ca4f7cfd6c5bd0380b5408b61548ab173f26bd12d5f6a4606c67a52f258e7756a7e36bce705c4354564268813be3162244a146c5405f2ab59095babd7559589b1ba33374687a36402408e79ab988edef88fc338", 0x64}, {&(0x7f0000001680)="094fb143daa9baa36aaa2c", 0xb}], 0x3}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x81, 0x181, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

9.058023225s ago: executing program 1 (id=5160):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0), 0x4)
bind$tipc(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x290, 0x0, 0x5002004a, 0x0, 0x128, 0x0, 0x1f8, 0x3c8, 0x3c8, 0x1f8, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20000}}}, {{@uncond, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0)

7.158651691s ago: executing program 7 (id=5162):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600400030009000300ff3582c137153e3702480180ffff0700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x18ff5}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1}}], 0x48}, 0x0)

6.414670544s ago: executing program 1 (id=5163):
socket(0x29, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140))
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.410761669s ago: executing program 6 (id=5164):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x45, 0x2, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x10006, 0x401f, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

6.408708107s ago: executing program 8 (id=5165):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB])
read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r3}, 0x50)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/231, 0xe7}], 0x1, 0x2000000, 0x0)

6.247596878s ago: executing program 7 (id=5166):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x260ebf7eeac15603, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r3, &(0x7f00000000c0)=""/81, 0x51)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

5.463896592s ago: executing program 8 (id=5167):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x5, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r4, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r5, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{}, "ee6a8e64a9f4d496", "2742cd9e1a7dee0a5709069c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28)
listen(r5, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})

5.392681988s ago: executing program 7 (id=5168):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_open_dev$video4linux(0x0, 0x20, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x22, 0x2, 0x3)
recvfrom$phonet(r3, 0x0, 0x0, 0x3, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8065}, 0x40000)
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xb02c7}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x4c}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd30102030b0902440001000000000904000000020a0000052406000105240000000d240f010000000000000000000624693e81d14980f434fc6f811bd55dba1a00000015"], 0x0)
write$binfmt_script(r5, 0x0, 0x0)

4.548144467s ago: executing program 6 (id=5169):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @remote})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r5, &(0x7f0000000080)=""/42, 0xffffff9b)

4.532967666s ago: executing program 1 (id=5170):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$dri(0x0, 0x1f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$rds(0x15, 0x5, 0x0)
kexec_load(0x7, 0x0, 0x0, 0x1)
bind$rds(r1, 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f00000007c0)='./file0\x00', 0x0)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)

4.463453322s ago: executing program 8 (id=5171):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0x3, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071})

3.301368798s ago: executing program 6 (id=5172):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000340))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x10001, 0x16)

2.502773166s ago: executing program 1 (id=5173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
keyctl$set_reqkey_keyring(0xe, 0x0)
munmap(&(0x7f00004fb000/0x4000)=nil, 0x4000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f00000002c0))
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000180)='2\x00', 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0x7400000000000000, 0x9})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x13)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x11)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x80, 0xe92b, 0xff, {{0x5, 0x4, 0x2, 0x34, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast2}}}})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xe4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x8, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x5, 0x5, 0xe, 0xb}, {0x0, 0x2, 0xb, 0xb}, {0x3, 0x2, 0x0, 0x4}, {0x2, 0x1, 0xd, 0x2}], 0x10, 0x0, @void, @value}, 0x90)
write$sysctl(r2, &(0x7f0000000200)='1\x00', 0x2)

2.484371968s ago: executing program 6 (id=5174):
unshare(0x8000000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0x3, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
lseek(r4, 0x38, 0x1)

2.072527623s ago: executing program 7 (id=5175):
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
write(r6, &(0x7f0000000300)='(', 0x1)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7fffffff, @remote, 0x533}, {0xa, 0x4e22, 0xff, @empty, 0x8}, 0xffffffffffffffff, 0x9}}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB], 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0)

999.914011ms ago: executing program 6 (id=5176):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = openat$audio1(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
memfd_secret(0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80444d1a, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0)

815.837668ms ago: executing program 7 (id=5177):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$inet6(0xa, 0x80002, 0x8a)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
recvmmsg(r0, &(0x7f0000000540), 0x0, 0x42, 0x0)
mkdir(0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
socket(0x21, 0x5, 0x5)
socket(0x15, 0x1, 0x8)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-pids tY\r'], 0x6)
write$cgroup_subtree(r3, &(0x7f00000061c0)=ANY=[@ANYBLOB='+pids'], 0x6)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0)

273.87688ms ago: executing program 1 (id=5178):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x8d, &(0x7f0000000540)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109027b00020108b0260904000001020d00000724060001db9705240003000d24c30100010000a70009000506241a0000110424020008241c0d0020ff0305241501000c241b090004000bd20e005a09058103ff030748090904010000020d00000904010102020400000000000000003a08f309050302300006400fe58731dd2d0581baf35392e9ec6b1b0cbfdae884d3fe3959a84af7c649291b275d239f495c2aa7bd9bf0ddbae8b4ecccca76e4178ea8ab24bc185e"], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x2, 0x7d, 0x5, 0x8, 0x6}, 0x25, &(0x7f0000000440)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x1, 0x0, 0x6, [0xf, 0xff3f00, 0xc0c0, 0xff0000, 0x30]}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2409}}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x58}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x40400000, 0x0, {<r1=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x49c5, 0xffffffff})
sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0xd6cc)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x0, 0x0, &(0x7f0000000100))
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
recvfrom(r2, 0x0, 0x0, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

142.740561ms ago: executing program 8 (id=5179):
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0xb, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x40, 0x95}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x40004)
sendfile(r2, r1, 0x0, 0x3fffff)

49.813528ms ago: executing program 6 (id=5180):
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x57}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, <r8=>0xffffffffffffffff})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x4})
bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x3, 0xfe, 0x6, 0x81, 0xa9, @random="fd074696a03d"}, 0x10)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0x48, 0x81, 0x20, 0x4f1, 0x1001, 0x1963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0x49, 0xab, 0x6b}}]}}]}}, 0x0)

0s ago: executing program 7 (id=5181):
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x2}}}, 0xd)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
dup(r1)
r2 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r3, 0x1000006)
fcntl$addseals(r3, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000})
read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)

kernel console output (not intermixed with test programs):

adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.113964][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.124203][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.134751][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.145775][T19469] usb 9-1: Using ep0 maxpacket: 32
[ 1118.223811][T19469] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1118.240024][T19469] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1118.249552][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.261496][T19469] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1118.336119][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.361059][    T8] hid (null): bogus close delimiter
[ 1118.388426][T19469] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1118.451745][T21744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.483369][T19469] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1118.539767][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.552833][T19469] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1118.575155][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.585442][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.596053][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.599991][T19469] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1118.606006][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.625644][T19469] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.627211][T19469] usb 9-1: config 0 descriptor??
[ 1118.634495][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.649439][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.660153][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.670282][T21744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.680774][T21744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.691628][T21744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.703210][T21744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.717706][T21744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.731256][T21744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.772371][    T8] usb 2-1: string descriptor 0 read error: -71
[ 1118.779250][    T8] uclogic 0003:256C:006D.003B: failed retrieving string descriptor #200: -71
[ 1118.788773][    T8] uclogic 0003:256C:006D.003B: failed retrieving pen parameters: -71
[ 1118.800057][T21744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.808989][    T8] uclogic 0003:256C:006D.003B: failed probing pen v2 parameters: -71
[ 1118.809051][    T8] uclogic 0003:256C:006D.003B: failed probing parameters: -71
[ 1118.809105][    T8] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71
[ 1118.839287][    T8] usb 2-1: USB disconnect, device number 57
[ 1118.850665][T21873] netlink: 'syz.7.4633': attribute type 10 has an invalid length.
[ 1118.865879][T21873] syz_tun: entered promiscuous mode
[ 1118.866417][   T29] audit: type=1326 audit(1731163451.520:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.8.4627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f850577e719 code=0x0
[ 1118.878942][T21873] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1118.914849][T19469] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1118.984684][T19469] usb 9-1: USB disconnect, device number 7
[ 1119.001739][T19469] usblp0: removed
[ 1119.086576][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.104702][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.159868][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.170535][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.880834][   T29] audit: type=1400 audit(1731163452.530:953): avc:  denied  { bind } for  pid=21890 comm="syz.6.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1119.920153][   T29] audit: type=1400 audit(1731163452.560:954): avc:  denied  { name_bind } for  pid=21891 comm="syz.1.4642" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[ 1120.461280][   T29] audit: type=1326 audit(1731163453.110:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.486432][   T29] audit: type=1326 audit(1731163453.140:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.512258][   T29] audit: type=1326 audit(1731163453.160:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.536606][   T29] audit: type=1326 audit(1731163453.160:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.560254][   T29] audit: type=1326 audit(1731163453.160:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.587303][   T29] audit: type=1326 audit(1731163453.190:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.611869][   T29] audit: type=1326 audit(1731163453.190:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21920 comm="syz.7.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1120.801417][ T7538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1121.595110][T21936] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1121.824583][ T9599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1121.836445][ T9599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1121.852569][ T9599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1121.863178][ T9599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1121.877945][ T9599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1121.892854][ T9599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1121.986787][ T7538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.064275][T21952] ������ speed is unknown, defaulting to 1000
[ 1122.127071][ T7538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.255748][ T7538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.440857][T21952] chnl_net:caif_netlink_parms(): no params data found
[ 1122.456034][ T5913] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1122.592072][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4678'.
[ 1122.713520][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1122.758890][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1122.772874][ T5913] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1122.782334][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.994653][ T5913] usb 2-1: config 0 descriptor??
[ 1123.168569][T21952] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.180832][T21952] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.189624][ T5149] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[ 1123.209605][T21952] bridge_slave_0: entered allmulticast mode
[ 1123.230498][T21952] bridge_slave_0: entered promiscuous mode
[ 1123.247638][T21952] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.254775][T21952] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.269458][T21952] bridge_slave_1: entered allmulticast mode
[ 1123.289839][T21952] bridge_slave_1: entered promiscuous mode
[ 1123.452174][ T7538] bridge_slave_1: left allmulticast mode
[ 1123.465285][ T7538] bridge_slave_1: left promiscuous mode
[ 1123.470996][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.528520][ T7538] bridge_slave_0: left allmulticast mode
[ 1123.536278][ T7538] bridge_slave_0: left promiscuous mode
[ 1123.542801][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.588220][ T5913] kovaplus 0003:1E7D:2D50.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[ 1124.001043][ T5149] Bluetooth: hci4: command tx timeout
[ 1124.061023][ T7538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1124.071817][ T7538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1124.082860][ T7538] bond0 (unregistering): Released all slaves
[ 1124.092775][T21952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1124.107313][T22019] team0: entered promiscuous mode
[ 1124.112339][T22019] team_slave_0: entered promiscuous mode
[ 1124.119022][T22019] team_slave_1: entered promiscuous mode
[ 1124.145991][T22023] vlan2: entered promiscuous mode
[ 1124.151050][T22023] geneve1: entered promiscuous mode
[ 1124.172568][T22023] team0: Port device vlan2 added
[ 1124.211881][T21952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1124.241831][T22016] team0: left promiscuous mode
[ 1124.253804][T22016] team_slave_0: left promiscuous mode
[ 1124.261431][T22016] team_slave_1: left promiscuous mode
[ 1124.269143][T22016] vlan2: left promiscuous mode
[ 1124.273911][T22016] geneve1: left promiscuous mode
[ 1124.370068][T21952] team0: Port device team_slave_0 added
[ 1124.390858][T21952] team0: Port device team_slave_1 added
[ 1124.467282][T21952] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1124.474791][T21952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1124.519238][T21952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1124.571649][T21952] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1124.605382][T21952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1124.632382][ T5913] kovaplus 0003:1E7D:2D50.003C: couldn't init struct kovaplus_device
[ 1124.641097][ T5913] kovaplus 0003:1E7D:2D50.003C: couldn't install mouse
[ 1124.645317][T21952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1124.649094][T22051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4700'.
[ 1124.674931][ T5913] kovaplus 0003:1E7D:2D50.003C: probe with driver kovaplus failed with error -71
[ 1124.686275][ T5913] usb 2-1: USB disconnect, device number 58
[ 1124.708820][ T7538] hsr_slave_0: left promiscuous mode
[ 1124.730232][ T7538] hsr_slave_1: left promiscuous mode
[ 1124.748147][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1124.760360][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1124.769939][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1124.780299][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1124.793537][ T5149] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[ 1124.811947][ T7538] veth1_macvtap: left promiscuous mode
[ 1124.817936][ T7538] veth0_macvtap: left promiscuous mode
[ 1124.823459][ T7538] veth1_vlan: left promiscuous mode
[ 1124.828956][ T7538] veth0_vlan: left promiscuous mode
[ 1125.027366][ T5149] Bluetooth: hci2: unexpected event for opcode 0x080c
[ 1125.217256][T22063] input: syz0 as /devices/virtual/input/input63
[ 1125.471590][ T7538] team0 (unregistering): Port device team_slave_1 removed
[ 1125.545930][ T7538] team0 (unregistering): Port device team_slave_0 removed
[ 1126.088334][ T5149] Bluetooth: hci4: command tx timeout
[ 1126.262572][T21952] hsr_slave_0: entered promiscuous mode
[ 1126.271954][T21952] hsr_slave_1: entered promiscuous mode
[ 1126.295433][T21952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1126.303149][T21952] Cannot create hsr debugfs directory
[ 1126.336480][   T29] kauditd_printk_skb: 16 callbacks suppressed
[ 1126.336510][   T29] audit: type=1400 audit(1731163458.980:978): avc:  denied  { read write } for  pid=21417 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1126.448324][   T29] audit: type=1400 audit(1731163458.980:979): avc:  denied  { open } for  pid=21417 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1126.499371][   T29] audit: type=1400 audit(1731163458.980:980): avc:  denied  { ioctl } for  pid=21417 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1126.835372][T22098] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1127.432413][   T29] audit: type=1400 audit(1731163460.080:981): avc:  denied  { cmd } for  pid=22103 comm="syz.8.4716" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1
[ 1127.841443][T21952] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1127.896358][T21952] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1127.917757][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4725'.
[ 1127.935578][T21952] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1127.952866][T21952] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1128.015709][T22142] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.4726'.
[ 1128.025623][T22142] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4726'.
[ 1128.155875][ T5149] Bluetooth: hci4: command tx timeout
[ 1128.195960][T21952] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1128.222650][T21952] 8021q: adding VLAN 0 to HW filter on device team0
[ 1128.279374][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1128.286491][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1128.324691][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1128.331841][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1128.422255][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.462327][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.504821][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.534510][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.545085][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.558843][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.579879][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.595310][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.603108][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.617626][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.635328][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.644470][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.657815][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.666344][T21952] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1128.674709][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.697489][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.716396][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.724166][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.732498][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.740721][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.769597][    T8] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1128.786174][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.793958][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.804313][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.824944][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.833343][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.841409][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.852950][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.874042][T10265] hid-generic 0000:FFFFFFFE:0000.003D: unknown main item tag 0x0
[ 1128.900494][T10265] hid-generic 0000:FFFFFFFE:0000.003D: hidraw0: <UNKNOWN> HID vffffff.fb Device [syz0] on syz0
[ 1128.932099][   T29] audit: type=1400 audit(1731163461.580:982): avc:  denied  { setattr } for  pid=22183 comm="syz.7.4733" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1128.944204][T21952] veth0_vlan: entered promiscuous mode
[ 1128.979554][T21952] veth1_vlan: entered promiscuous mode
[ 1128.990749][   T29] audit: type=1400 audit(1731163461.640:983): avc:  denied  { unmount } for  pid=20898 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1129.007984][T21952] veth0_macvtap: entered promiscuous mode
[ 1129.029719][T21952] veth1_macvtap: entered promiscuous mode
[ 1129.037193][ T5149] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1129.042521][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.055338][ T5149] Bluetooth: hci2: Injecting HCI hardware error event
[ 1129.057349][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.071265][ T5149] Bluetooth: hci2: hardware error 0x00
[ 1129.074117][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.123797][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.135643][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.146661][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.156605][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.167277][    T8] usb 2-1: device not accepting address 59, error -71
[ 1129.180296][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.200283][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.226695][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.254586][T21952] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1129.278498][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.294338][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.306204][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.318423][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.328456][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.338905][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.348926][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.359512][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.369337][T21952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.382489][T21952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.405399][T21952] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1129.423777][T21952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.443756][T21952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.452781][T21952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.461552][T21952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.604462][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4739'.
[ 1129.622427][T22202] netlink: 'syz.8.4739': attribute type 11 has an invalid length.
[ 1129.664360][T22202] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1129.673836][T22202] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1129.682917][T22202] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1129.691901][T22202] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1129.863095][T22202] vxlan0: entered promiscuous mode
[ 1130.230412][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1130.238640][ T9599] Bluetooth: hci4: command tx timeout
[ 1130.244688][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.265171][T22212] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4743'.
[ 1130.308550][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1130.330241][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.575195][T22224] sd 0:0:1:0: PR command failed: 1026
[ 1130.588846][T22224] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1130.589448][T22226] input: syz1 as /devices/virtual/input/input64
[ 1130.602561][T22224] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1130.886272][   T29] audit: type=1400 audit(1731163463.540:984): avc:  denied  { write } for  pid=22244 comm="syz.7.4757" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1131.183184][T22264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1131.261465][   T29] audit: type=1400 audit(1731163463.910:985): avc:  denied  { read } for  pid=22267 comm="syz.1.4765" name="file1" dev="tmpfs" ino=5144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1131.275575][ T5149] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1131.655950][   T29] audit: type=1400 audit(1731163464.310:986): avc:  denied  { name_bind } for  pid=22276 comm="syz.6.4769" src=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[ 1132.013040][ T3504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.367978][ T3504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.441483][ T3504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.491569][ T3504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.583977][ T3504] bridge_slave_1: left allmulticast mode
[ 1132.590332][ T3504] bridge_slave_1: left promiscuous mode
[ 1132.596642][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.604622][ T3504] bridge_slave_0: left allmulticast mode
[ 1132.610484][ T3504] bridge_slave_0: left promiscuous mode
[ 1132.616627][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.964605][   T29] audit: type=1400 audit(1731163465.610:987): avc:  denied  { read } for  pid=22287 comm="syz.8.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1132.995674][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.024810][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.042033][ T3504] bond0 (unregistering): Released all slaves
[ 1133.062119][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4771'.
[ 1133.081517][T22290] netlink: 'syz.1.4771': attribute type 15 has an invalid length.
[ 1133.138339][ T9599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1133.150411][ T9599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1133.160228][ T9599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1133.168742][ T9599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1133.177616][ T9599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1133.184844][ T9599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1133.289362][   T29] audit: type=1400 audit(1731163465.940:988): avc:  denied  { shutdown } for  pid=22302 comm="syz.8.4778" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1133.303305][T22296] ������ speed is unknown, defaulting to 1000
[ 1133.339723][   T29] audit: type=1400 audit(1731163465.970:989): avc:  denied  { getattr } for  pid=22302 comm="syz.8.4778" path="socket:[84872]" dev="sockfs" ino=84872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1133.398214][   T29] audit: type=1400 audit(1731163466.050:990): avc:  denied  { module_load } for  pid=22307 comm="syz.8.4779" path="/sys/power/wakeup_count" dev="sysfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[ 1133.710399][T22296] chnl_net:caif_netlink_parms(): no params data found
[ 1133.735615][ T3504] hsr_slave_0: left promiscuous mode
[ 1133.741293][ T3504] hsr_slave_1: left promiscuous mode
[ 1133.749142][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1133.756797][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1133.767769][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1133.777778][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1133.800256][ T3504] veth1_macvtap: left promiscuous mode
[ 1133.807743][ T3504] veth0_macvtap: left promiscuous mode
[ 1133.813565][ T3504] veth1_vlan: left promiscuous mode
[ 1133.819865][ T3504] veth0_vlan: left promiscuous mode
[ 1134.231443][ T3504] team0 (unregistering): Port device team_slave_1 removed
[ 1134.279814][ T3504] team0 (unregistering): Port device team_slave_0 removed
[ 1134.672859][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4785'.
[ 1134.716072][T22328] netlink: 'syz.7.4785': attribute type 5 has an invalid length.
[ 1134.739926][T22328] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1134.748859][T22328] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1134.757738][T22328] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1134.766829][T22328] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1134.776796][   T29] audit: type=1400 audit(1731163467.410:991): avc:  denied  { cmd } for  pid=22331 comm="syz.1.4787" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[ 1134.801205][T22328] vxlan0: entered promiscuous mode
[ 1134.929477][T22296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1134.937308][T22296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1134.944457][T22296] bridge_slave_0: entered allmulticast mode
[ 1134.951464][T22296] bridge_slave_0: entered promiscuous mode
[ 1134.961751][T22296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.969309][T22296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.976693][T22296] bridge_slave_1: entered allmulticast mode
[ 1134.983494][T22296] bridge_slave_1: entered promiscuous mode
[ 1135.078847][T22296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1135.117547][T22296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1135.186764][T22296] team0: Port device team_slave_0 added
[ 1135.215047][T22296] team0: Port device team_slave_1 added
[ 1135.275698][ T5149] Bluetooth: hci4: command tx timeout
[ 1135.293540][T22296] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1135.311225][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1135.420809][T22296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1135.474395][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'.
[ 1135.498053][T22296] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1135.585419][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1136.029995][T22296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1136.079931][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'.
[ 1136.197549][T22296] hsr_slave_0: entered promiscuous mode
[ 1136.206625][T22296] hsr_slave_1: entered promiscuous mode
[ 1136.220005][T22296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1136.228327][T22296] Cannot create hsr debugfs directory
[ 1136.445485][T10265] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1136.542453][T22389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4808'.
[ 1136.617034][T10265] usb 2-1: Using ep0 maxpacket: 16
[ 1136.626509][T10265] usb 2-1: config 0 has an invalid interface number: 180 but max is 0
[ 1136.634981][T10265] usb 2-1: config 0 has no interface number 0
[ 1136.644662][T10265] usb 2-1: config 0 interface 180 has no altsetting 0
[ 1136.654263][T10265] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f
[ 1136.663625][T10265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.672234][T10265] usb 2-1: Product: syz
[ 1136.676919][T10265] usb 2-1: Manufacturer: syz
[ 1136.689766][T10265] usb 2-1: SerialNumber: syz
[ 1136.714493][T10265] usb 2-1: config 0 descriptor??
[ 1137.355351][ T5149] Bluetooth: hci4: command tx timeout
[ 1137.378531][T22296] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1137.388341][T22296] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1137.401090][T22296] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1137.411892][T22296] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1137.520503][T10265] viperboard 2-1:0.180: version 0.9e found at bus 002 address 061
[ 1137.537976][T10265] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[ 1137.546950][T10265] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 1137.564926][T10265] usb 2-1: USB disconnect, device number 61
[ 1137.567616][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4817'.
[ 1137.633352][T22296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1137.647841][T22296] 8021q: adding VLAN 0 to HW filter on device team0
[ 1137.676619][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1137.683706][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1137.693443][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1137.700556][ T7538] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1137.954924][T22296] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1138.611086][T22436] Failed to get privilege flags for destination (handle=0x2:0x0)
[ 1138.724459][T22444] input: syz1 as /devices/virtual/input/input65
[ 1138.774794][T22440] sd 0:0:1:0: PR command failed: 1026
[ 1138.796022][T22440] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1138.811821][T22440] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1138.862974][   T29] audit: type=1400 audit(1731163471.510:992): avc:  denied  { accept } for  pid=22454 comm="syz.8.4829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1138.932603][T22296] veth0_vlan: entered promiscuous mode
[ 1138.963478][T22296] veth1_vlan: entered promiscuous mode
[ 1139.027988][T22296] veth0_macvtap: entered promiscuous mode
[ 1139.131238][T22296] veth1_macvtap: entered promiscuous mode
[ 1139.147643][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.159776][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.172495][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.213574][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.245320][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.264375][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.282073][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.297495][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.310521][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1139.321408][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.336080][T22296] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1139.363990][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1139.376924][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.393182][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1139.431148][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.441301][ T5149] Bluetooth: hci4: command tx timeout
[ 1139.452745][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1139.463785][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.478912][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1139.490884][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.501435][T22296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1139.512057][T22296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1139.524199][T22296] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1139.540629][T22296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.551616][T22296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.563609][T22296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.584347][T22296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.770511][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.790918][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.872329][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.900762][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1141.276595][T16854] libceph: connect (1)[c::]:6789 error -22
[ 1141.282787][T16854] libceph: mon0 (1)[c::]:6789 connect error
[ 1141.296579][T10265] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1141.488652][T10265] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1141.556152][T16854] libceph: connect (1)[c::]:6789 error -22
[ 1141.560732][T10265] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1141.565517][T16854] libceph: mon0 (1)[c::]:6789 connect error
[ 1141.577770][T10265] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1141.577797][T10265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.633468][T22520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1141.654912][T10265] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1141.829813][ T1103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1141.917386][T10265] usb 2-1: USB disconnect, device number 62
[ 1142.010593][ T1103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.092191][T22533] ceph: No mds server is up or the cluster is laggy
[ 1142.096231][ T1103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.189306][ T1103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.272150][ T1103] bridge_slave_1: left allmulticast mode
[ 1142.280208][ T1103] bridge_slave_1: left promiscuous mode
[ 1142.286631][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.294654][ T1103] bridge_slave_0: left allmulticast mode
[ 1142.301151][ T1103] bridge_slave_0: left promiscuous mode
[ 1142.307356][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.632683][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1142.643282][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1142.653464][ T1103] bond0 (unregistering): Released all slaves
[ 1142.823319][T22561] input: syz0 as /devices/virtual/input/input66
[ 1143.043507][ T9599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1143.054883][ T9599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1143.063062][ T9599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1143.070441][ T1103] hsr_slave_0: left promiscuous mode
[ 1143.071934][ T9599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1143.076084][ T5961] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1143.083985][ T9599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1143.100963][ T9599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1143.112032][ T1103] hsr_slave_1: left promiscuous mode
[ 1143.126351][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1143.138636][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1143.160342][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1143.169458][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1143.193740][ T1103] veth1_macvtap: left promiscuous mode
[ 1143.202629][ T1103] veth0_macvtap: left promiscuous mode
[ 1143.213350][ T1103] veth1_vlan: left promiscuous mode
[ 1143.233778][ T1103] veth0_vlan: left promiscuous mode
[ 1143.255477][ T5961] usb 2-1: Using ep0 maxpacket: 16
[ 1143.266692][ T5961] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1143.287840][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.310393][ T5961] usb 2-1: config 0 descriptor??
[ 1143.327377][ T5961] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1143.924074][ T1103] team0 (unregistering): Port device team_slave_1 removed
[ 1144.008082][ T1103] team0 (unregistering): Port device team_slave_0 removed
[ 1144.079463][T22593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1144.281772][T22598] netlink: 'syz.8.4881': attribute type 1 has an invalid length.
[ 1144.353265][ T5961] usb 2-1: USB disconnect, device number 63
[ 1144.552964][T22600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1144.564042][T22600] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1144.572536][T22600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1144.580270][T22600] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1144.615009][T22568] ������ speed is unknown, defaulting to 1000
[ 1144.633041][    T8] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1144.786296][    T8] usb 9-1: Using ep0 maxpacket: 16
[ 1144.802607][    T8] usb 9-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1144.822921][    T8] usb 9-1: config 0 has an invalid interface number: 125 but max is 1
[ 1144.843473][T22568] chnl_net:caif_netlink_parms(): no params data found
[ 1144.852555][    T8] usb 9-1: config 0 has an invalid interface number: 125 but max is 1
[ 1144.872317][    T8] usb 9-1: config 0 has an invalid interface number: 125 but max is 1
[ 1144.885615][    T8] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1144.894493][    T8] usb 9-1: config 0 has no interface number 0
[ 1144.901683][    T8] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1144.913756][    T8] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1144.926860][    T8] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1144.966996][    T8] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1144.982619][    T8] usb 9-1: config 0 interface 125 has no altsetting 0
[ 1144.989525][    T8] usb 9-1: config 0 interface 125 has no altsetting 2
[ 1144.998445][    T8] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1145.008137][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.016279][    T8] usb 9-1: Product: syz
[ 1145.020510][    T8] usb 9-1: Manufacturer: syz
[ 1145.025126][    T8] usb 9-1: SerialNumber: syz
[ 1145.031421][    T8] usb 9-1: config 0 descriptor??
[ 1145.039934][T22568] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.044902][    T8] usb 9-1: selecting invalid altsetting 2
[ 1145.052839][   T29] audit: type=1400 audit(1731163733.709:993): avc:  denied  { read } for  pid=22617 comm="syz.6.4887" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1145.052865][T22568] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.079927][   T29] audit: type=1400 audit(1731163733.709:994): avc:  denied  { open } for  pid=22617 comm="syz.6.4887" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1145.087924][T22568] bridge_slave_0: entered allmulticast mode
[ 1145.113539][   T29] audit: type=1400 audit(1731163733.769:995): avc:  denied  { ioctl } for  pid=22617 comm="syz.6.4887" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1145.119179][T22568] bridge_slave_0: entered promiscuous mode
[ 1145.155622][T22619] netlink: 'syz.1.4886': attribute type 4 has an invalid length.
[ 1145.176234][T22619] infiniband syz0: set down
[ 1145.181212][T22568] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.193339][T22568] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.201748][T22568] bridge_slave_1: entered allmulticast mode
[ 1145.205947][ T9599] Bluetooth: hci4: command tx timeout
[ 1145.218429][T22568] bridge_slave_1: entered promiscuous mode
[ 1145.232212][T19469] ������ speed is unknown, defaulting to 1000
[ 1145.273460][T19469] ������ speed is unknown, defaulting to 1000
[ 1145.277268][T22568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1145.292829][T22568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1145.354981][T22568] team0: Port device team_slave_0 added
[ 1145.367463][   T29] audit: type=1400 audit(1731163734.019:996): avc:  denied  { cmd } for  pid=22626 comm="syz.6.4890" path="socket:[87532]" dev="sockfs" ino=87532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1145.387509][T22568] team0: Port device team_slave_1 added
[ 1145.423252][T22568] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1145.431135][T22568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1145.457001][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1145.463615][T22568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1145.476171][T22568] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1145.483321][T22568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1145.509181][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1145.516062][T22568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1145.552209][T22568] hsr_slave_0: entered promiscuous mode
[ 1145.562332][T22568] hsr_slave_1: entered promiscuous mode
[ 1145.568657][T22568] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1145.576474][T22568] Cannot create hsr debugfs directory
[ 1145.941771][T22568] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1145.954334][T22568] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1145.968034][T22568] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1145.983917][T22568] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1146.092700][T22568] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1146.126845][T22568] 8021q: adding VLAN 0 to HW filter on device team0
[ 1146.161902][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1146.165969][T19469] usb 9-1: USB disconnect, device number 8
[ 1146.169049][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1146.196686][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1146.203745][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1146.402148][T22568] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1146.598881][T22568] veth0_vlan: entered promiscuous mode
[ 1146.618744][T22568] veth1_vlan: entered promiscuous mode
[ 1146.659037][T22568] veth0_macvtap: entered promiscuous mode
[ 1146.673214][T22568] veth1_macvtap: entered promiscuous mode
[ 1146.708301][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1146.721394][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.732104][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1146.742280][   T29] audit: type=1400 audit(1731163735.389:997): avc:  denied  { create } for  pid=22647 comm="syz.8.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1146.742675][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.773280][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1146.773459][   T29] audit: type=1400 audit(1731163735.429:998): avc:  denied  { listen } for  pid=22647 comm="syz.8.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1146.784095][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.814328][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1146.818234][   T29] audit: type=1400 audit(1731163735.469:999): avc:  denied  { accept } for  pid=22647 comm="syz.8.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1146.824917][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.862351][T22568] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1146.888673][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1146.919546][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.934113][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1146.946681][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.957322][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1147.287185][ T9599] Bluetooth: hci4: command tx timeout
[ 1147.301237][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1147.332683][T22568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1147.353824][T22568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1147.388129][T22568] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1147.418019][T22568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.432656][T22568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.442074][T22568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.451278][T22568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.562204][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.578662][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.619489][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.627887][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.778159][T22659] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4898'.
[ 1147.787481][T22659] netlink: 108 bytes leftover after parsing attributes in process `syz.8.4898'.
[ 1148.695481][ T5961] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1148.871697][ T5961] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[ 1148.879893][ T5961] usb 2-1: config 0 has no interface number 0
[ 1148.886160][ T5961] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1148.897292][ T5961] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1148.907170][ T5961] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[ 1148.916504][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1148.934117][ T5961] usb 2-1: config 0 descriptor??
[ 1149.361557][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.369765][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.379442][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.387689][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.396213][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.404355][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.413448][ T5961] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0
[ 1149.429600][ T5961] logitech-djreceiver 0003:046D:C71B.003E: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.1-1/input32
[ 1149.598697][    T8] usb 2-1: USB disconnect, device number 64
[ 1149.718520][   T29] audit: type=1400 audit(1731163738.379:1000): avc:  denied  { map } for  pid=22695 comm="syz.6.4910" path="socket:[88762]" dev="sockfs" ino=88762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1149.745971][   T29] audit: type=1400 audit(1731163738.379:1001): avc:  denied  { read accept } for  pid=22695 comm="syz.6.4910" path="socket:[88762]" dev="sockfs" ino=88762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1150.736990][    T8] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1150.919739][    T8] usb 2-1: config 0 has an invalid interface number: 165 but max is 0
[ 1150.932036][    T8] usb 2-1: config 0 has no interface number 0
[ 1150.940279][    T8] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=3b.5b
[ 1150.952229][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.960818][    T8] usb 2-1: Product: syz
[ 1150.965073][    T8] usb 2-1: Manufacturer: syz
[ 1150.969707][    T8] usb 2-1: SerialNumber: syz
[ 1150.976315][    T8] usb 2-1: config 0 descriptor??
[ 1151.190894][    T8] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[ 1151.201661][ T6066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.210505][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1151.236142][    T8] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[ 1151.243981][    T8] usb 2-1: media controller created
[ 1151.256013][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1151.281897][    T8] DVB: Unable to find symbol dib7000p_attach()
[ 1151.288620][    T8] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[ 1151.336383][    T8] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1151.342451][    T8] Registered IR keymap rc-empty
[ 1151.350738][    T8] dvb-usb: could not initialize remote control.
[ 1151.361520][    T8] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[ 1151.393922][T22704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1151.404443][    T8] usb 2-1: USB disconnect, device number 65
[ 1151.420383][    T8] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[ 1151.537413][ T6066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.615175][ T6066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.680444][ T6066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.752985][ T6066] bridge_slave_1: left allmulticast mode
[ 1151.759093][ T6066] bridge_slave_1: left promiscuous mode
[ 1151.764727][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1151.773350][ T6066] bridge_slave_0: left allmulticast mode
[ 1151.779246][ T6066] bridge_slave_0: left promiscuous mode
[ 1151.784865][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1152.111282][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1152.121882][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1152.131907][ T6066] bond0 (unregistering): Released all slaves
[ 1152.282517][   T29] audit: type=1400 audit(1731163740.939:1002): avc:  denied  { write } for  pid=22727 comm="syz.1.4922" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1152.364906][T22731] kvm: pic: non byte read
[ 1152.367133][   T29] audit: type=1400 audit(1731163740.969:1003): avc:  denied  { open } for  pid=22727 comm="syz.1.4922" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1152.372633][T22731] kvm: pic: level sensitive irq not supported
[ 1152.423816][T22731] kvm: pic: non byte read
[ 1152.435585][   T29] audit: type=1400 audit(1731163740.979:1004): avc:  denied  { read } for  pid=22727 comm="syz.1.4922" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1152.459250][T22731] kvm: pic: level sensitive irq not supported
[ 1152.459309][T22731] kvm: pic: non byte read
[ 1152.522176][   T29] audit: type=1800 audit(1731163741.179:1005): pid=22728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4922" name="/" dev="9p" ino=2 res=0 errno=0
[ 1152.586052][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1152.604985][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1152.614716][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1152.633695][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1152.642753][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1152.650206][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1152.701305][ T6066] hsr_slave_0: left promiscuous mode
[ 1152.708455][ T6066] hsr_slave_1: left promiscuous mode
[ 1152.714203][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1152.726203][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1152.734539][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1152.753841][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1152.779687][ T6066] veth1_macvtap: left promiscuous mode
[ 1152.786746][ T6066] veth0_macvtap: left promiscuous mode
[ 1152.792459][ T6066] veth1_vlan: left promiscuous mode
[ 1152.805992][ T6066] veth0_vlan: left promiscuous mode
[ 1152.832986][   T29] audit: type=1400 audit(1731163741.489:1006): avc:  denied  { getopt } for  pid=22745 comm="syz.1.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1152.885624][   T29] audit: type=1400 audit(1731163741.509:1007): avc:  denied  { connect } for  pid=22745 comm="syz.1.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1152.913245][   T29] audit: type=1400 audit(1731163741.519:1008): avc:  denied  { append } for  pid=22745 comm="syz.1.4929" name="file0" dev="tmpfs" ino=5311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1152.925362][ T5913] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1152.954497][   T29] audit: type=1400 audit(1731163741.519:1009): avc:  denied  { open } for  pid=22745 comm="syz.1.4929" path="/1002/file0" dev="tmpfs" ino=5311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1153.108268][ T5913] usb 9-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[ 1153.118363][ T5913] usb 9-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[ 1153.126660][ T5913] usb 9-1: Manufacturer: syz
[ 1153.132977][ T5913] usb 9-1: config 0 descriptor??
[ 1153.348653][ T6066] team0 (unregistering): Port device team_slave_1 removed
[ 1153.394139][ T6066] team0 (unregistering): Port device team_slave_0 removed
[ 1153.546256][ T5913] gs_usb 9-1:0.0: Couldn't get device config: (err=-32)
[ 1153.554903][ T5913] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32
[ 1153.567787][ T9599] Bluetooth: hci1: unexpected event for opcode 0x2042
[ 1153.590580][ T5833] usb 9-1: USB disconnect, device number 9
[ 1153.858824][T22749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4930'.
[ 1153.873633][T22736] ������ speed is unknown, defaulting to 1000
[ 1154.047805][T22736] chnl_net:caif_netlink_parms(): no params data found
[ 1154.080578][T22736] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.094557][T22736] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.107886][T22736] bridge_slave_0: entered allmulticast mode
[ 1154.115650][T22736] bridge_slave_0: entered promiscuous mode
[ 1154.140461][T22736] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.158107][T22736] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1154.171691][T22736] bridge_slave_1: entered allmulticast mode
[ 1154.175873][ T5914] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1154.182352][T22736] bridge_slave_1: entered promiscuous mode
[ 1154.226850][T22736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1154.251149][T22736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1154.283974][T22736] team0: Port device team_slave_0 added
[ 1154.292255][T22736] team0: Port device team_slave_1 added
[ 1154.316075][T22736] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1154.323361][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1154.345347][ T5914] usb 2-1: Using ep0 maxpacket: 16
[ 1154.349840][T22736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1154.359129][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1154.367529][T22736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1154.379765][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1154.383609][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1154.393109][ T5914] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[ 1154.393136][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.395056][ T5914] usb 2-1: config 0 descriptor??
[ 1154.419076][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1154.455031][T22736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1154.521593][T22736] hsr_slave_0: entered promiscuous mode
[ 1154.536078][T22736] hsr_slave_1: entered promiscuous mode
[ 1154.545340][T22736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1154.552906][T22736] Cannot create hsr debugfs directory
[ 1154.715809][ T9599] Bluetooth: hci4: command tx timeout
[ 1154.877141][ T5914] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0
[ 1154.895927][ T5914] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0
[ 1154.910225][ T5914] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0
[ 1154.935359][ T5914] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0
[ 1154.942344][ T5914] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0
[ 1154.981101][ T5914] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 1155.041776][T22736] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1155.051007][T22736] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1155.066849][T22736] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1155.079709][ T5914] cp2112 0003:10C4:EA90.003F: Part Number: 0x00 Device Version: 0x00
[ 1155.082529][T22736] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1155.177694][T22736] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1155.199691][T22736] 8021q: adding VLAN 0 to HW filter on device team0
[ 1155.214082][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1155.221213][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1155.245189][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1155.252322][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1155.389063][T22736] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1155.484110][ T5914] cp2112 0003:10C4:EA90.003F: error setting SMBus config
[ 1155.508679][ T5914] cp2112 0003:10C4:EA90.003F: probe with driver cp2112 failed with error -71
[ 1155.548143][ T5914] usb 2-1: USB disconnect, device number 66
[ 1155.641312][T22787] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.4936'.
[ 1155.658495][T22787] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4936'.
[ 1155.674229][T22736] veth0_vlan: entered promiscuous mode
[ 1155.694538][T22736] veth1_vlan: entered promiscuous mode
[ 1155.770986][T22736] veth0_macvtap: entered promiscuous mode
[ 1155.788703][T22736] veth1_macvtap: entered promiscuous mode
[ 1155.818301][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1155.830997][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.843557][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1155.855893][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.865971][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1155.876560][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.886859][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1155.915970][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.931384][T22736] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1155.942415][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.959078][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.970057][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1155.984808][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1155.996016][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1156.029373][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1156.043700][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1156.056523][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1156.073752][T22736] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1156.093522][T22736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.111153][T22736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.121519][T22736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.132551][T22736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.202040][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.215718][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1156.248599][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.248618][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1156.585469][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4946'.
[ 1156.655009][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4947'.
[ 1156.751050][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4949'.
[ 1157.052828][T22833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4950'.
[ 1157.607425][ T9599] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1157.618914][ T9599] Bluetooth: hci1: Injecting HCI hardware error event
[ 1157.668037][ T9599] Bluetooth: hci1: hardware error 0x00
[ 1157.946751][T19469] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1158.124654][T19469] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1158.166389][T19469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1158.190249][T19469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1158.203990][T19469] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1158.219524][T19469] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1158.228947][T19469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.233708][ T7538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.249547][T19469] usb 2-1: config 0 descriptor??
[ 1158.665937][T19469] plantronics 0003:047F:FFFF.0040: ignoring exceeding usage max
[ 1158.674592][T19469] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving
[ 1158.683258][T19469] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1158.950813][    T8] usb 2-1: USB disconnect, device number 67
[ 1159.629351][T21609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1159.640708][T21609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1159.649715][T21609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1159.660298][T21609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1159.670982][T21609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1159.689177][T21609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1159.721490][T22858] ������ speed is unknown, defaulting to 1000
[ 1159.755395][ T9599] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1159.807864][ T7538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.835376][ T5961] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1159.910229][ T7538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.953387][T22858] chnl_net:caif_netlink_parms(): no params data found
[ 1159.998056][ T7538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1160.006498][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1160.036338][ T5961] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1160.050768][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1160.064783][ T5961] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1160.074819][ T5961] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1160.084055][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.093649][ T5961] usb 2-1: config 0 descriptor??
[ 1160.190610][T22858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1160.228548][T22858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1160.245507][T22858] bridge_slave_0: entered allmulticast mode
[ 1160.252623][T22858] bridge_slave_0: entered promiscuous mode
[ 1160.292786][T22858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1160.309118][ T5961] hdpvr 2-1:0.0: firmware version 0x0 dated 
[ 1160.323928][T22858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1160.324673][ T5961] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[ 1160.369704][T22858] bridge_slave_1: entered allmulticast mode
[ 1160.394248][T22858] bridge_slave_1: entered promiscuous mode
[ 1160.482586][T22858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1160.568615][T22858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1160.606724][ T7538] bridge_slave_1: left allmulticast mode
[ 1160.625424][ T7538] bridge_slave_1: left promiscuous mode
[ 1160.643346][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1160.673085][ T5961] hdpvr 2-1:0.0: device init failed
[ 1160.679173][ T5961] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[ 1160.689441][ T5961] usb 2-1: USB disconnect, device number 68
[ 1160.704854][ T7538] bridge_slave_0: left allmulticast mode
[ 1160.811031][T22884] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4965'.
[ 1160.896826][ T7538] bridge_slave_0: left promiscuous mode
[ 1161.038943][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1161.604356][   T29] audit: type=1400 audit(1731163750.259:1010): avc:  denied  { set_context_mgr } for  pid=22892 comm="syz.7.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1161.655721][   T29] audit: type=1400 audit(1731163750.279:1011): avc:  denied  { call } for  pid=22892 comm="syz.7.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1161.675371][   T29] audit: type=1400 audit(1731163750.279:1012): avc:  denied  { transfer } for  pid=22892 comm="syz.7.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1161.746736][   T29] audit: type=1326 audit(1731163750.409:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.6.4971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe36017e719 code=0x0
[ 1161.775532][ T9599] Bluetooth: hci4: command tx timeout
[ 1161.783184][T22899] overlayfs: failed to get inode (-116)
[ 1161.791648][T22899] overlayfs: failed to get inode (-116)
[ 1161.845903][T19469] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0
[ 1161.860715][T19469] hid-generic 0000:0000:0000.0041: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1162.058847][ T7538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1162.069219][ T7538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1162.079974][ T7538] bond0 (unregistering): Released all slaves
[ 1162.095404][ T5913] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[ 1162.108691][T22858] team0: Port device team_slave_0 added
[ 1162.117406][T22858] team0: Port device team_slave_1 added
[ 1162.146989][T22858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1162.153988][T22858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1162.190614][T22858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1162.224740][T22858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1162.232146][T22858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1162.259524][T22858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1162.272999][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1162.289744][ T5913] usb 2-1: no configurations
[ 1162.294372][ T5913] usb 2-1: can't read configurations, error -22
[ 1162.322523][T22858] hsr_slave_0: entered promiscuous mode
[ 1162.329935][T22858] hsr_slave_1: entered promiscuous mode
[ 1162.336739][T22858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1162.344321][T22858] Cannot create hsr debugfs directory
[ 1162.553619][ T7538] hsr_slave_0: left promiscuous mode
[ 1162.570060][ T7538] hsr_slave_1: left promiscuous mode
[ 1162.667775][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1162.767151][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1162.950023][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1162.985309][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1163.021684][ T7538] veth1_macvtap: left promiscuous mode
[ 1163.029848][ T7538] veth0_macvtap: left promiscuous mode
[ 1163.038218][ T7538] veth1_vlan: left promiscuous mode
[ 1163.043502][ T7538] veth0_vlan: left promiscuous mode
[ 1163.396688][T22925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4978'.
[ 1164.045759][ T9599] Bluetooth: hci4: command tx timeout
[ 1164.624814][T22930] binder: 22929:22930 ioctl c0306201 20000140 returned -14
[ 1164.661949][   T29] audit: type=1804 audit(1731163753.319:1014): pid=22932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.4982" name="/newroot/271/file1" dev="fuse" ino=1 res=1 errno=0
[ 1165.129298][   T29] audit: type=1400 audit(1731163753.789:1015): avc:  denied  { mounton } for  pid=22940 comm="syz.6.4985" path="/272/file0/bus" dev="ramfs" ino=90559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1165.133721][T22941] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1165.180307][T22941] overlayfs: failed to set xattr on upper
[ 1165.188441][T22941] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1165.201008][T22941] overlayfs: ...falling back to index=off.
[ 1165.208985][   T29] audit: type=1400 audit(1731163753.869:1016): avc:  denied  { execute } for  pid=22942 comm="syz.1.4986" path="/dev/sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1165.209994][T22941] overlayfs: ...falling back to uuid=null.
[ 1165.233249][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1165.913419][T22961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer.
[ 1166.065130][ T7538] team0 (unregistering): Port device team_slave_1 removed
[ 1166.083698][ T9599] Bluetooth: hci4: command tx timeout
[ 1166.139776][ T7538] team0 (unregistering): Port device team_slave_0 removed
[ 1167.668028][ T5913] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1167.867452][ T5913] usb 2-1: Using ep0 maxpacket: 8
[ 1167.910945][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1167.968728][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.024836][ T5913] usb 2-1: Product: syz
[ 1168.043413][ T5913] usb 2-1: Manufacturer: syz
[ 1168.066213][ T5913] usb 2-1: SerialNumber: syz
[ 1168.122499][ T5913] usb 2-1: config 0 descriptor??
[ 1168.155373][ T9599] Bluetooth: hci4: command tx timeout
[ 1168.359023][T19469] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1168.367445][T22858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1168.383346][T22858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1168.391444][ T5913] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1168.401750][T22858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1168.412899][T22858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1168.468703][T22858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1168.485016][T22858] 8021q: adding VLAN 0 to HW filter on device team0
[ 1168.498624][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1168.505743][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1168.517053][T19469] usb 9-1: Using ep0 maxpacket: 16
[ 1168.525983][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1168.528178][T19469] usb 9-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba
[ 1168.533082][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1168.553447][T19469] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.565931][T19469] usb 9-1: Product: syz
[ 1168.573143][T19469] usb 9-1: Manufacturer: syz
[ 1168.580729][T19469] usb 9-1: SerialNumber: syz
[ 1168.589472][T19469] usb 9-1: config 0 descriptor??
[ 1168.732810][T22858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1168.766031][   T29] audit: type=1800 audit(1731163757.419:1017): pid=23010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5002" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1168.813097][T19469] snd-usb-hiface 9-1:0.0: probe with driver snd-usb-hiface failed with error -22
[ 1168.835854][T19469] usb 9-1: USB disconnect, device number 10
[ 1168.923202][T22858] veth0_vlan: entered promiscuous mode
[ 1168.951470][T22858] veth1_vlan: entered promiscuous mode
[ 1168.972507][T22858] veth0_macvtap: entered promiscuous mode
[ 1168.981070][T22858] veth1_macvtap: entered promiscuous mode
[ 1168.994439][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1169.004921][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.016926][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1169.027394][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.037361][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1169.050360][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.060210][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1169.071031][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.082484][T22858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1169.093616][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1169.104155][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.114539][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1169.124990][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.134833][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1169.145621][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.155511][T22858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1169.165946][T22858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1169.177497][T22858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1169.188016][T22858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.197132][T22858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.206288][T22858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.215193][T22858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.280113][ T7538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.292470][ T7538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.311040][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.319780][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1170.026811][ T5913] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1170.052472][ T5913] usb 2-1: USB disconnect, device number 71
[ 1170.317125][   T29] audit: type=1804 audit(1731163758.969:1018): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.5004" name="/newroot/133/bus/bus" dev="overlay" ino=745 res=1 errno=0
[ 1170.329773][T23020] Invalid ELF header magic: != ELF
[ 1170.396490][T19780] page_pool_release_retry() stalled pool shutdown: id 86, 1 inflight 60 sec
[ 1170.812091][T23030] random: crng reseeded on system resumption
[ 1171.284182][   T29] audit: type=1400 audit(1731163759.939:1019): avc:  denied  { listen } for  pid=23035 comm="syz.7.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1171.309593][   T29] audit: type=1400 audit(1731163759.959:1020): avc:  denied  { accept } for  pid=23035 comm="syz.7.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1172.042929][ T3504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.264456][ T5914] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0
[ 1173.333888][ T5914] hid-generic 0000:0000:0000.0042: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1173.512345][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1173.526058][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1173.595624][T19780] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1173.682288][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1173.695399][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1173.705129][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1173.713824][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1173.950074][T19780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1173.966344][T19780] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1173.977420][T19780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.978728][ T3504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.997933][T19780] usb 2-1: config 0 descriptor??
[ 1174.007148][T19780] pwc: Askey VC010 type 2 USB webcam detected.
[ 1174.018199][T23051] ������ speed is unknown, defaulting to 1000
[ 1174.312590][ T3504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.691491][T19780] pwc: send_video_command error -71
[ 1174.699570][T19780] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1174.707262][T19780] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 1174.717901][T19780] usb 2-1: USB disconnect, device number 72
[ 1174.730443][ T3504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.962590][T23051] chnl_net:caif_netlink_parms(): no params data found
[ 1175.165458][T19780] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1175.318416][ T3504] bridge_slave_1: left allmulticast mode
[ 1175.331320][T19780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1175.393876][ T3504] bridge_slave_1: left promiscuous mode
[ 1175.421592][T19780] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1175.468817][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1175.480932][T19780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.492461][T19780] usb 2-1: config 0 descriptor??
[ 1175.498102][ T3504] bridge_slave_0: left allmulticast mode
[ 1175.507566][T19780] pwc: Askey VC010 type 2 USB webcam detected.
[ 1175.508840][ T3504] bridge_slave_0: left promiscuous mode
[ 1175.520385][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.761867][ T5149] Bluetooth: hci4: command tx timeout
[ 1175.785517][T16854] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1175.937035][T16854] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1175.946485][T16854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.956424][T16854] usb 9-1: config 0 descriptor??
[ 1175.961554][T19780] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1175.971930][T19780] pwc: recv_control_msg error -32 req 02 val 2700
[ 1175.979954][T16854] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1175.987068][T19780] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1175.994035][T19780] pwc: recv_control_msg error -32 req 04 val 1000
[ 1176.001096][T19780] pwc: recv_control_msg error -32 req 04 val 1300
[ 1176.011712][T19780] pwc: recv_control_msg error -32 req 04 val 1400
[ 1176.021334][T19780] pwc: recv_control_msg error -32 req 02 val 2000
[ 1176.073364][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1176.084317][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1176.094519][ T3504] bond0 (unregistering): Released all slaves
[ 1176.161073][T23051] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1176.168525][T23051] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.176484][T23051] bridge_slave_0: entered allmulticast mode
[ 1176.183600][T23051] bridge_slave_0: entered promiscuous mode
[ 1176.191177][T23051] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1176.198752][T23051] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.209152][T23051] bridge_slave_1: entered allmulticast mode
[ 1176.216131][T23051] bridge_slave_1: entered promiscuous mode
[ 1176.229615][T19780] pwc: recv_control_msg error -71 req 04 val 1500
[ 1176.237149][T19780] pwc: recv_control_msg error -71 req 02 val 2500
[ 1176.243952][T19780] pwc: recv_control_msg error -71 req 02 val 2400
[ 1176.251526][T19780] pwc: recv_control_msg error -71 req 02 val 2600
[ 1176.265678][T19780] pwc: recv_control_msg error -71 req 02 val 2900
[ 1176.278986][T19780] pwc: recv_control_msg error -71 req 02 val 2800
[ 1176.296080][T19780] pwc: recv_control_msg error -71 req 04 val 1100
[ 1176.301949][T23051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1176.311952][T19780] pwc: recv_control_msg error -71 req 04 val 1200
[ 1176.317027][T23051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1176.323621][T19780] pwc: Registered as video103.
[ 1176.334056][T19780] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68
[ 1176.347651][T19780] usb 2-1: USB disconnect, device number 73
[ 1176.440527][T23051] team0: Port device team_slave_0 added
[ 1176.493942][T23051] team0: Port device team_slave_1 added
[ 1176.603669][T23051] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1176.725280][T23051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1176.756212][T23051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1176.768864][T23051] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1177.175562][T23051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1177.201700][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1177.232019][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.425670][T23051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1177.694317][ T3504] hsr_slave_0: left promiscuous mode
[ 1177.700471][ T3504] hsr_slave_1: left promiscuous mode
[ 1177.731586][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1177.747793][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1177.756256][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1177.763872][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1177.787327][ T3504] veth1_macvtap: left promiscuous mode
[ 1177.792883][ T3504] veth0_macvtap: left promiscuous mode
[ 1177.801466][ T3504] veth1_vlan: left promiscuous mode
[ 1177.807049][ T3504] veth0_vlan: left promiscuous mode
[ 1177.835489][ T5149] Bluetooth: hci4: command tx timeout
[ 1178.377160][T16854] usb 9-1: USB disconnect, device number 11
[ 1178.451537][ T3504] team0 (unregistering): Port device team_slave_1 removed
[ 1178.512043][ T3504] team0 (unregistering): Port device team_slave_0 removed
[ 1179.064382][   T29] audit: type=1326 audit(1731163767.719:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23098 comm="syz.8.5027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f850577e719 code=0x0
[ 1179.117762][T23051] hsr_slave_0: entered promiscuous mode
[ 1179.140034][T23051] hsr_slave_1: entered promiscuous mode
[ 1179.156538][T23051] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1179.164768][T23051] Cannot create hsr debugfs directory
[ 1179.347173][T23104] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.355131][T23104] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.386019][T23104] bridge_slave_1: left allmulticast mode
[ 1179.392013][T23104] bridge_slave_1: left promiscuous mode
[ 1179.406080][T23104] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.426257][T23104] bridge_slave_0: left allmulticast mode
[ 1179.432439][T23104] bridge_slave_0: left promiscuous mode
[ 1179.438322][T23104] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.780951][T23113] ALSA: mixer_oss: invalid OSS volume '00000000000000000000'
[ 1179.788551][T23113] ALSA: mixer_oss: invalid OSS volume 'OGAINW��1��'
[ 1179.797555][T23113] ALSA: mixer_oss: invalid OSS volume 'DI�IT'
[ 1179.960719][ T5149] Bluetooth: hci4: command tx timeout
[ 1180.835131][T23051] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1180.847190][T23051] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1180.867191][T23051] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1180.887136][T23051] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1180.897431][T23127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1181.037046][T23127] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1181.242779][T23051] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1181.264449][T23051] 8021q: adding VLAN 0 to HW filter on device team0
[ 1181.283464][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1181.290584][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1181.314917][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1181.322032][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1182.075662][ T5149] Bluetooth: hci4: command tx timeout
[ 1182.084633][T23051] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1182.488738][T23155] syzkaller0: entered allmulticast mode
[ 1182.593926][T23051] veth0_vlan: entered promiscuous mode
[ 1182.602937][T23051] veth1_vlan: entered promiscuous mode
[ 1182.648208][T23051] veth0_macvtap: entered promiscuous mode
[ 1182.758754][T23051] veth1_macvtap: entered promiscuous mode
[ 1182.770775][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1182.781869][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.791714][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1183.289709][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.300086][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1183.310806][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.340285][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1183.354242][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.369398][T23051] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1183.387238][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1183.417233][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.437120][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1183.459544][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.485356][T23051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1183.536718][T23051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1183.558996][T23051] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1183.580931][T23051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.601656][T23051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.620203][T23051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.171237][T23051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.874779][ T7538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1184.881210][T23164] kvm: kvm [23163]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[ 1184.898262][ T7538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.271960][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.285321][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.477064][   T29] audit: type=1326 audit(1731163774.119:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1185.500580][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1185.538816][   T29] audit: type=1326 audit(1731163774.119:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1185.583114][   T29] audit: type=1326 audit(1731163774.119:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1185.630546][   T29] audit: type=1326 audit(1731163774.119:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1185.654007][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1185.667406][   T29] audit: type=1326 audit(1731163774.119:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1185.695011][   T29] audit: type=1326 audit(1731163774.119:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1185.718553][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1186.318594][   T29] audit: type=1326 audit(1731163774.119:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1186.347838][   T29] audit: type=1326 audit(1731163774.119:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1186.377532][   T29] audit: type=1326 audit(1731163774.119:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1186.404292][   T29] audit: type=1326 audit(1731163774.129:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23188 comm="syz.7.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efd0e17e719 code=0x7ffc0000
[ 1190.196698][ T3504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.286504][ T3504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.373379][ T3504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.432494][ T3504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1190.520858][ T3504] bridge_slave_1: left allmulticast mode
[ 1190.526692][ T3504] bridge_slave_1: left promiscuous mode
[ 1190.532336][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1190.540397][ T3504] bridge_slave_0: left allmulticast mode
[ 1190.546216][ T3504] bridge_slave_0: left promiscuous mode
[ 1190.551832][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1190.888188][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1190.899019][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1190.909985][ T3504] bond0 (unregistering): Released all slaves
[ 1191.193349][ T3504] hsr_slave_0: left promiscuous mode
[ 1191.216621][ T3504] hsr_slave_1: left promiscuous mode
[ 1191.222344][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1191.232235][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1191.239779][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1191.247363][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1191.264430][ T3504] veth1_macvtap: left promiscuous mode
[ 1191.270070][ T3504] veth0_macvtap: left promiscuous mode
[ 1191.275742][ T3504] veth1_vlan: left promiscuous mode
[ 1191.280979][ T3504] veth0_vlan: left promiscuous mode
[ 1192.958264][   T29] kauditd_printk_skb: 34 callbacks suppressed
[ 1192.958280][   T29] audit: type=1400 audit(1731163781.609:1066): avc:  denied  { listen } for  pid=23262 comm="syz.7.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1193.074543][   T29] audit: type=1400 audit(1731163781.609:1067): avc:  denied  { accept } for  pid=23262 comm="syz.7.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1193.124077][ T9599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1193.134222][ T9599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1193.142734][ T9599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1193.152720][ T9599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1193.166199][ T9599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1193.177089][ T9599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1193.284562][ T3504] team0 (unregistering): Port device team_slave_1 removed
[ 1193.360188][ T3504] team0 (unregistering): Port device team_slave_0 removed
[ 1194.635078][T23252] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1194.642913][T23254] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5066'.
[ 1194.727468][T23269] ������ speed is unknown, defaulting to 1000
[ 1195.276787][ T9599] Bluetooth: hci4: command tx timeout
[ 1195.523144][T23269] chnl_net:caif_netlink_parms(): no params data found
[ 1195.909026][T23269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1195.924019][T23269] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.056084][T23269] bridge_slave_0: entered allmulticast mode
[ 1196.090619][T23269] bridge_slave_0: entered promiscuous mode
[ 1196.113310][T23269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1196.129403][T23269] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.142761][T23269] bridge_slave_1: entered allmulticast mode
[ 1196.219916][   T29] audit: type=1400 audit(1731163784.849:1068): avc:  denied  { map } for  pid=23300 comm="syz.7.5077" path="socket:[94258]" dev="sockfs" ino=94258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1196.269218][   T29] audit: type=1400 audit(1731163784.849:1069): avc:  denied  { accept } for  pid=23300 comm="syz.7.5077" path="socket:[94258]" dev="sockfs" ino=94258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1196.276090][T23269] bridge_slave_1: entered promiscuous mode
[ 1196.742683][T23269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1197.755522][ T9599] Bluetooth: hci4: command tx timeout
[ 1197.936987][T23269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1197.988397][T23269] team0: Port device team_slave_0 added
[ 1198.372141][T23269] team0: Port device team_slave_1 added
[ 1198.587420][T23269] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1198.594463][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1198.620462][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1198.778299][T23269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1198.847069][T23269] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1198.995295][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1199.539553][T23269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1199.883016][ T9599] Bluetooth: hci4: command tx timeout
[ 1200.560411][T23269] hsr_slave_0: entered promiscuous mode
[ 1200.591422][T23269] hsr_slave_1: entered promiscuous mode
[ 1200.624740][T23269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1200.634990][T23269] Cannot create hsr debugfs directory
[ 1201.816567][T23370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1201.826147][T23370] overlayfs: missing 'lowerdir'
[ 1201.925425][ T9599] Bluetooth: hci4: command tx timeout
[ 1202.191803][T23269] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1202.210599][T23269] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1202.223366][T23269] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1202.243743][T23269] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1202.612944][T23381] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1203.634415][T23269] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1203.663032][T23269] 8021q: adding VLAN 0 to HW filter on device team0
[ 1203.684878][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.692049][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1203.957134][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.964271][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1204.263885][T23393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1204.280392][T23393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1204.402830][T23388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1204.646366][T23269] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1205.083730][T23406] cifs: Unknown parameter 'mode'
[ 1205.100466][T23406] syz.1.5098: attempt to access beyond end of device
[ 1205.100466][T23406] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1205.118422][T23406] SQUASHFS error: Failed to read block 0x0: -5
[ 1205.124702][T23406] unable to read squashfs_super_block
[ 1207.799859][T23269] veth0_vlan: entered promiscuous mode
[ 1207.811625][T23269] veth1_vlan: entered promiscuous mode
[ 1207.851257][T23269] veth0_macvtap: entered promiscuous mode
[ 1207.859655][T23269] veth1_macvtap: entered promiscuous mode
[ 1207.875755][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.886277][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.896472][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.906944][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.917009][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.927972][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.938089][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1207.948652][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.959223][T23269] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1207.967617][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1207.978052][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1207.987998][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1207.998509][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1208.008340][T23269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1208.018918][T23269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1208.029497][T23269] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1208.038046][T23269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.046900][T23269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.055585][T23269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.064234][T23269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.131363][T23438] usb usb1: usbfs: process 23438 (syz.1.5105) did not claim interface 23 before use
[ 1208.139459][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1208.141041][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1208.180910][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1208.192297][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1208.545836][    T8] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1208.706839][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1208.725327][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1208.742784][    T8] usb 9-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[ 1208.754110][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.781212][    T8] usb 9-1: config 0 descriptor??
[ 1209.544065][    T8] belkin 0003:1020:0006.0043: item fetching failed at offset 2/5
[ 1209.683912][ T5149] Bluetooth: hci4: command 0x0405 tx timeout
[ 1209.692321][    T8] belkin 0003:1020:0006.0043: parse failed
[ 1209.775262][    T8] belkin 0003:1020:0006.0043: probe with driver belkin failed with error -22
[ 1209.788802][   T29] audit: type=1400 audit(1731163798.449:1070): avc:  denied  { setattr } for  pid=23439 comm="syz.8.5108" name="PACKET" dev="sockfs" ino=95880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1209.843632][    T8] usb 9-1: USB disconnect, device number 12
[ 1213.926054][ T6062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.722781][ T6062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.802896][ T6062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.850205][ T6062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.914865][ T6062] bridge_slave_1: left allmulticast mode
[ 1214.920809][ T6062] bridge_slave_1: left promiscuous mode
[ 1214.927837][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1214.939397][ T6062] bridge_slave_0: left allmulticast mode
[ 1214.945027][ T6062] bridge_slave_0: left promiscuous mode
[ 1214.950669][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.432622][ T6062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.445659][ T6062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.460092][ T6062] bond0 (unregistering): Released all slaves
[ 1216.598055][T23524] ebtables: ebtables: counters copy to user failed while replacing table
[ 1217.062234][ T9599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1217.072188][ T9599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1217.080455][ T9599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1217.089871][ T9599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1217.112897][ T9599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1217.215485][ T9599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1217.841064][T23533] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1217.871033][T23527] ������ speed is unknown, defaulting to 1000
[ 1217.893864][T23478] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1219.355925][ T9599] Bluetooth: hci4: command tx timeout
[ 1219.605747][ T5149] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1220.315348][ T6062] hsr_slave_0: left promiscuous mode
[ 1220.336143][ T6062] hsr_slave_1: left promiscuous mode
[ 1220.352720][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1221.308197][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.334665][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1221.343022][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.372468][ T6062] veth1_macvtap: left promiscuous mode
[ 1221.378197][ T6062] veth0_macvtap: left promiscuous mode
[ 1221.384247][ T6062] veth1_vlan: left promiscuous mode
[ 1221.390001][ T6062] veth0_vlan: left promiscuous mode
[ 1221.577898][ T5149] Bluetooth: hci4: command tx timeout
[ 1222.445702][    T8] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1222.455875][   T25] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1222.605468][    T8] usb 9-1: Using ep0 maxpacket: 8
[ 1222.619402][    T8] usb 9-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[ 1222.628815][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1222.634235][   T25] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1222.648452][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.649071][    T8] usb 9-1: config 0 descriptor??
[ 1222.659562][   T25] usb 2-1: Product: syz
[ 1222.677978][   T25] usb 2-1: Manufacturer: syz
[ 1222.700544][   T25] usb 2-1: SerialNumber: syz
[ 1222.738988][   T25] usb 2-1: config 0 descriptor??
[ 1223.065061][   T25] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 1223.585806][T23581] loop7: detected capacity change from 0 to 16384
[ 1223.607054][ T5149] Bluetooth: hci4: command tx timeout
[ 1223.625936][ T6062] team0 (unregistering): Port device team_slave_1 removed
[ 1223.658478][T23581] loop7: detected capacity change from 16384 to 16383
[ 1223.742436][ T6062] team0 (unregistering): Port device team_slave_0 removed
[ 1223.832176][   T25] usb 2-1: USB disconnect, device number 74
[ 1224.419397][T23527] chnl_net:caif_netlink_parms(): no params data found
[ 1224.662560][T23527] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1224.677167][T23527] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1225.211169][T23527] bridge_slave_0: entered allmulticast mode
[ 1225.224397][T23527] bridge_slave_0: entered promiscuous mode
[ 1225.251455][T16854] usb 9-1: USB disconnect, device number 13
[ 1225.261656][T23527] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1225.286731][T23527] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1225.303339][T23527] bridge_slave_1: entered allmulticast mode
[ 1225.409835][T23527] bridge_slave_1: entered promiscuous mode
[ 1225.887926][ T5149] Bluetooth: hci4: command tx timeout
[ 1226.523334][   T29] audit: type=1400 audit(1731163814.369:1071): avc:  denied  { execute } for  pid=23609 comm="syz.1.5147" name="file0" dev="ramfs" ino=96255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[ 1226.545360][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1226.718637][   T29] audit: type=1400 audit(1731163814.369:1072): avc:  denied  { execute_no_trans } for  pid=23609 comm="syz.1.5147" path="/1059/file0/file0" dev="ramfs" ino=96255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[ 1228.128592][T23527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1228.283677][T23527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1228.481023][T23527] team0: Port device team_slave_0 added
[ 1228.497893][T23527] team0: Port device team_slave_1 added
[ 1228.982996][T23527] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1229.041384][T23527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1229.067391][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1229.101976][T23527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1229.132247][T23527] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1229.149832][T23527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1229.253002][T23527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1229.282726][T23634] kvm_intel: kvm [23633]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0x1d9) = 0x8ff
[ 1229.310333][T23641] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[ 1229.317249][T23641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1229.327889][T23641] vhci_hcd vhci_hcd.0: Device attached
[ 1229.349266][T23527] hsr_slave_0: entered promiscuous mode
[ 1229.363121][T23527] hsr_slave_1: entered promiscuous mode
[ 1229.373799][T23527] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1229.387495][T23527] Cannot create hsr debugfs directory
[ 1229.597389][   T25] usb 48-1: SetAddress Request (2) to port 0
[ 1229.605761][   T25] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1229.738622][T23654] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5155'.
[ 1229.748541][T23654] openvswitch: netlink: VXLAN extension 11 out of range max 1
[ 1229.922000][T23645] vhci_hcd: connection reset by peer
[ 1230.055947][   T11] vhci_hcd: stop threads
[ 1230.077766][   T11] vhci_hcd: release socket
[ 1230.195479][   T11] vhci_hcd: disconnect device
[ 1231.932183][T23664] QAT: failed to copy from user cfg_data.
[ 1232.292105][T23527] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1232.485399][ T5913] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1232.635509][ T5913] usb 9-1: Using ep0 maxpacket: 8
[ 1232.662270][ T5913] usb 9-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=e2.cd
[ 1232.692318][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.713794][ T5913] usb 9-1: Product: syz
[ 1232.740692][ T5913] usb 9-1: Manufacturer: syz
[ 1232.797310][ T5913] usb 9-1: SerialNumber: syz
[ 1232.804395][ T5913] usb 9-1: config 0 descriptor??
[ 1232.814142][T23527] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1232.822394][ T5913] safe_serial 9-1:0.0: safe_serial converter detected
[ 1232.832938][T23527] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1232.839867][ T5913] safe_serial 9-1:0.0: probe with driver safe_serial failed with error -22
[ 1232.853577][T23527] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1234.282066][T23682] netlink: 'syz.7.5162': attribute type 1 has an invalid length.
[ 1234.289991][T23682] netlink: 112860 bytes leftover after parsing attributes in process `syz.7.5162'.
[ 1234.299397][T23682] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5162'.
[ 1234.303707][T23527] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1234.365868][ T5913] usb 9-1: USB disconnect, device number 14
[ 1234.431081][T23684] rdma_op ffff88806129c1f0 conn xmit_rdma 0000000000000000
[ 1234.878271][   T25] usb 48-1: device descriptor read/8, error -110
[ 1234.887797][T23527] 8021q: adding VLAN 0 to HW filter on device team0
[ 1234.930433][ T9599] Bluetooth: hci4: command 0x0405 tx timeout
[ 1234.953552][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1234.960689][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1234.972060][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1234.979167][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1235.192505][T23527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1235.218152][T23527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1235.291333][T23695] fuse: Bad value for 'fd'
[ 1235.368632][   T25] usb usb48-port1: attempt power cycle
[ 1235.926888][T23686] kvm: kvm [23685]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0xf7ff
[ 1235.946039][   T25] usb usb48-port1: unable to enumerate USB device
[ 1236.000717][T23686] kvm: kvm [23685]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc2) = 0xf7ff
[ 1236.054100][T23686] kvm: kvm [23685]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0xf7ff
[ 1236.069238][T23686] kvm: kvm [23685]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc2) = 0xf7ff
[ 1236.094564][T23527] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1236.198839][   T29] audit: type=1400 audit(1731163824.859:1073): avc:  denied  { read } for  pid=23705 comm="syz.7.5168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1236.226336][T23686] kvm: kvm [23685]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0xf7ff
[ 1236.249306][T23686] kvm: kvm [23685]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc2) = 0xf7ff
[ 1238.233847][T23726] ������ speed is unknown, defaulting to 1000
[ 1238.405300][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.503239][T23527] veth0_vlan: entered promiscuous mode
[ 1238.515458][T23527] veth1_vlan: entered promiscuous mode
[ 1238.769396][T23527] veth0_macvtap: entered promiscuous mode
[ 1238.802591][T23527] veth1_macvtap: entered promiscuous mode
[ 1238.847834][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1238.863246][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1238.875004][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.125332][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.146795][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.164617][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.299060][   T29] audit: type=1400 audit(1731163827.889:1074): avc:  denied  { mount } for  pid=23734 comm="syz.6.5174" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1239.405699][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1239.513268][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.675843][T23527] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1239.758425][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1239.779199][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1239.790027][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1240.383170][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.394412][T23527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1240.405756][T23527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1240.426187][   T29] audit: type=1400 audit(1731163829.079:1075): avc:  denied  { unmount } for  pid=19658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1240.463629][T23527] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1240.619337][T23527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.144103][T23527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.155296][T23527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.164066][T23527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.357112][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1241.389610][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1241.501143][ T5914] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1242.040043][   T30] INFO: task syz.5.4364:21090 blocked for more than 144 seconds.
[ 1242.069466][   T30]       Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[ 1242.112619][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1242.158946][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1242.170186][ T5914] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1242.214219][   T30] task:syz.5.4364      state:D stack:27856 pid:21090 tgid:21090 ppid:6457   flags:0x00000004
[ 1242.303230][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1242.368810][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.381024][T23756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1242.388400][   T30] Call Trace:
[ 1242.394004][   T30]  <TASK>
[ 1242.400285][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1242.407461][   T30]  __schedule+0xe55/0x5740
[ 1242.412017][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1242.420748][   T30]  ? __pfx___schedule+0x10/0x10
[ 1242.430209][   T30]  ? schedule+0x298/0x350
[ 1242.435589][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1242.442302][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[ 1242.447563][   T30]  ? lock_acquire+0x2f/0xb0
[ 1242.452062][   T30]  ? schedule+0x1fd/0x350
[ 1242.458614][   T30]  schedule+0xe7/0x350
[ 1242.462711][   T30]  schedule_timeout+0x258/0x2a0
[ 1242.467934][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1242.473332][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1242.479305][   T30]  __wait_for_common+0x3e1/0x600
[ 1242.484255][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1242.489641][   T30]  ? __pfx___wait_for_common+0x10/0x10
[ 1242.495217][   T30]  ? lockdep_init_map_type+0x16d/0x7d0
[ 1242.500672][   T30]  ? __pfx_vhost_net_release+0x10/0x10
[ 1242.506329][   T30]  __vhost_worker_flush+0x1aa/0x1e0
[ 1242.511508][   T30]  ? __pfx___vhost_worker_flush+0x10/0x10
[ 1242.517247][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1242.522266][   T30]  ? __pfx_vhost_flush_work+0x10/0x10
[ 1242.527686][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1242.533927][   T30]  vhost_dev_flush+0xad/0x120
[ 1242.538763][   T30]  ? __pfx_vhost_dev_flush+0x10/0x10
[ 1242.544031][   T30]  vhost_net_flush+0x1d/0x1b0
[ 1242.548733][   T30]  vhost_net_release+0xa3/0x260
[ 1242.553574][   T30]  ? __pfx_vhost_net_release+0x10/0x10
[ 1242.559303][   T30]  ? __pfx_locks_remove_file+0x10/0x10
[ 1242.564753][   T30]  ? __pfx___might_resched+0x10/0x10
[ 1242.571259][   T30]  ? evm_file_release+0xd0/0x1d0
[ 1242.576255][   T30]  __fput+0x3f6/0xb60
[ 1242.580237][   T30]  task_work_run+0x14e/0x250
[ 1242.584805][   T30]  ? __pfx_task_work_run+0x10/0x10
[ 1242.589929][   T30]  syscall_exit_to_user_mode+0x27b/0x2a0
[ 1242.595860][   T30]  do_syscall_64+0xda/0x250
[ 1242.600373][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.606330][   T30] RIP: 0033:0x7fede037e719
[ 1242.610745][   T30] RSP: 002b:00007ffc200140a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1242.619201][   T30] RAX: 0000000000000000 RBX: 00007fede0537a80 RCX: 00007fede037e719
[ 1242.627493][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1242.635158][T23756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1242.639045][   T30] RBP: 00007fede0537a80 R08: 0000000000000006 R09: 00007ffc2001439f
[ 1242.644120][T23756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1242.651861][   T30] R10: 00000000003ffd04 R11: 0000000000000246 R12: 0000000000107da4
[ 1242.667967][   T30] R13: 00007ffc200141b0 R14: 0000000000000032 R15: ffffffffffffffff
[ 1242.678423][   T30]  </TASK>
[ 1242.690343][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1242.795415][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1242.974888][   T30] 
[ 1242.974888][   T30] Showing all locks held in the system:
[ 1242.990096][   T30] 1 lock held by khungtaskd/30:
[ 1242.995409][   T30]  #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390
[ 1243.005304][   T30] 2 locks held by kworker/u8:4/66:
[ 1243.010400][   T30]  #0: ffff888147e91148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[ 1243.021904][   T30]  #1: ffffc900015c7d80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 1243.037086][   T30] 3 locks held by kworker/u8:7/3504:
[ 1243.043727][   T30] 2 locks held by getty/5578:
[ 1243.048828][   T30]  #0: ffff8880362c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1243.058722][   T30]  #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480
[ 1243.068885][   T30] 3 locks held by kworker/0:5/19469:
[ 1243.074148][   T30] 1 lock held by syz-executor/23527:
[ 1243.079741][   T30]  #0: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0
[ 1243.089954][   T30] 
[ 1243.092418][   T30] =============================================
[ 1243.092418][   T30] 
[ 1243.101005][   T30] NMI backtrace for cpu 0
[ 1243.105333][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[ 1243.115822][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1243.125860][   T30] Call Trace:
[ 1243.129123][   T30]  <TASK>
[ 1243.132039][   T30]  dump_stack_lvl+0x116/0x1f0
[ 1243.136704][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 1243.141626][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1243.147596][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1243.153563][   T30]  watchdog+0xf0c/0x1240
[ 1243.157792][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1243.162455][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1243.167641][   T30]  ? __kthread_parkme+0x148/0x220
[ 1243.172652][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1243.177308][   T30]  kthread+0x2c1/0x3a0
[ 1243.181360][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1243.186548][   T30]  ? __pfx_kthread+0x10/0x10
[ 1243.191119][   T30]  ret_from_fork+0x45/0x80
[ 1243.195515][   T30]  ? __pfx_kthread+0x10/0x10
[ 1243.200091][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1243.204846][   T30]  </TASK>
[ 1243.207988][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1243.213193][    C1] NMI backtrace for cpu 1
[ 1243.213203][    C1] CPU: 1 UID: 0 PID: 6149 Comm: kworker/u8:10 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[ 1243.213219][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1243.213228][    C1] Workqueue: ipv6_addrconf addrconf_dad_work
[ 1243.213248][    C1] RIP: 0010:stack_access_ok+0x7e/0x200
[ 1243.213264][    C1] Code: 85 52 01 00 00 48 89 da 48 8b 4b 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 0b 01 00 00 <8b> 13 85 d2 74 23 49 39 ef 77 1e 48 39 e9 76 19 4a 8d 54 25 00 49
[ 1243.213276][    C1] RSP: 0018:ffffc9000b07f2e8 EFLAGS: 00000246
[ 1243.213286][    C1] RAX: 0000000000000000 RBX: ffffc9000b07f398 RCX: ffffc9000b080000
[ 1243.213295][    C1] RDX: 1ffff9200160fe73 RSI: ffffc9000b07f4c0 RDI: ffffc9000b07f398
[ 1243.213304][    C1] RBP: ffffc9000b07f4c0 R08: ffffffff90f5c8e6 R09: ffffffff90f5c8ae
[ 1243.213313][    C1] R10: ffffc9000b07f398 R11: 0000000000007949 R12: 0000000000000008
[ 1243.213322][    C1] R13: ffffc9000b07f3a8 R14: ffffc9000b07f3a0 R15: ffffc9000b078000
[ 1243.213331][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1243.213345][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1243.213354][    C1] CR2: 00007ffec229fa50 CR3: 000000004e3b2000 CR4: 00000000003526f0
[ 1243.213363][    C1] Call Trace:
[ 1243.213367][    C1]  <NMI>
[ 1243.213372][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1243.213390][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1243.213408][    C1]  ? nmi_handle+0x1a9/0x5c0
[ 1243.213422][    C1]  ? stack_access_ok+0x7e/0x200
[ 1243.213435][    C1]  ? default_do_nmi+0x6a/0x160
[ 1243.213451][    C1]  ? exc_nmi+0x170/0x1e0
[ 1243.213465][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1243.213481][    C1]  ? stack_access_ok+0x7e/0x200
[ 1243.213494][    C1]  ? stack_access_ok+0x7e/0x200
[ 1243.213507][    C1]  ? stack_access_ok+0x7e/0x200
[ 1243.213520][    C1]  </NMI>
[ 1243.213524][    C1]  <TASK>
[ 1243.213531][    C1]  unwind_next_frame+0xac7/0x20c0
[ 1243.213544][    C1]  ? stack_trace_save+0x95/0xd0
[ 1243.213560][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1243.213576][    C1]  arch_stack_walk+0x95/0x100
[ 1243.213592][    C1]  ? stack_trace_save+0x95/0xd0
[ 1243.213608][    C1]  stack_trace_save+0x95/0xd0
[ 1243.213622][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1243.213636][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 1243.213650][    C1]  ? lock_acquire.part.0+0x11b/0x380
[ 1243.213662][    C1]  kasan_save_stack+0x33/0x60
[ 1243.213690][    C1]  kasan_save_track+0x14/0x30
[ 1243.213702][    C1]  kasan_save_free_info+0x3b/0x60
[ 1243.213720][    C1]  __kasan_slab_free+0x51/0x70
[ 1243.213734][    C1]  kmem_cache_free+0x152/0x4b0
[ 1243.213748][    C1]  ? skb_free_head+0x18a/0x1d0
[ 1243.213762][    C1]  skb_free_head+0x18a/0x1d0
[ 1243.213774][    C1]  skb_release_data+0x560/0x730
[ 1243.213794][    C1]  ? netlink_broadcast_filtered+0x3d5/0xef0
[ 1243.213812][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1243.213828][    C1]  consume_skb+0xbf/0x100
[ 1243.213843][    C1]  netlink_broadcast_filtered+0x3d5/0xef0
[ 1243.213863][    C1]  ? __asan_memcpy+0x3c/0x60
[ 1243.213875][    C1]  ? __pfx_netlink_broadcast_filtered+0x10/0x10
[ 1243.213896][    C1]  ? __pfx_inet6_fill_ifaddr+0x10/0x10
[ 1243.213908][    C1]  ? __timer_delete+0x53/0x1c0
[ 1243.213924][    C1]  nlmsg_notify+0x9e/0x220
[ 1243.213938][    C1]  __ipv6_ifa_notify+0x26b/0xe20
[ 1243.213950][    C1]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[ 1243.213964][    C1]  ? __pfx___cancel_work+0x10/0x10
[ 1243.213977][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 1243.213988][    C1]  ? trace_contention_end+0xea/0x140
[ 1243.214003][    C1]  ? addrconf_dad_completed+0x19d/0x1060
[ 1243.214018][    C1]  addrconf_dad_completed+0x19d/0x1060
[ 1243.214035][    C1]  ? __pfx_addrconf_dad_completed+0x10/0x10
[ 1243.214050][    C1]  ? mark_held_locks+0x9f/0xe0
[ 1243.214061][    C1]  ? addrconf_dad_work+0x7dc/0x14d0
[ 1243.214077][    C1]  ? addrconf_dad_work+0x7fb/0x14d0
[ 1243.214092][    C1]  addrconf_dad_work+0x7fb/0x14d0
[ 1243.214108][    C1]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1243.214122][    C1]  ? trace_lock_acquire+0x14a/0x1d0
[ 1243.214138][    C1]  ? process_one_work+0x921/0x1ba0
[ 1243.214151][    C1]  ? lock_acquire+0x2f/0xb0
[ 1243.214162][    C1]  ? process_one_work+0x921/0x1ba0
[ 1243.214175][    C1]  process_one_work+0x9c5/0x1ba0
[ 1243.214190][    C1]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1243.214205][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1243.214219][    C1]  ? assign_work+0x1a0/0x250
[ 1243.214238][    C1]  worker_thread+0x6c8/0xf00
[ 1243.214253][    C1]  ? __kthread_parkme+0x148/0x220
[ 1243.214268][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1243.214280][    C1]  kthread+0x2c1/0x3a0
[ 1243.214294][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1243.214311][    C1]  ? __pfx_kthread+0x10/0x10
[ 1243.214326][    C1]  ret_from_fork+0x45/0x80
[ 1243.214337][    C1]  ? __pfx_kthread+0x10/0x10
[ 1243.214352][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1243.214373][    C1]  </TASK>
[ 1243.215978][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1243.215989][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0
[ 1243.216007][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1243.216017][   T30] Call Trace:
[ 1243.216022][   T30]  <TASK>
[ 1243.216028][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 1243.216047][   T30]  panic+0x71d/0x800
[ 1243.216069][   T30]  ? __pfx_panic+0x10/0x10
[ 1243.216089][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1243.216107][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1243.216128][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1243.216145][   T30]  ? watchdog+0xd76/0x1240
[ 1243.216159][   T30]  ? watchdog+0xd69/0x1240
[ 1243.216175][   T30]  watchdog+0xd87/0x1240
[ 1243.216193][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1243.216206][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1243.216229][   T30]  ? __kthread_parkme+0x148/0x220
[ 1243.216249][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1243.216263][   T30]  kthread+0x2c1/0x3a0
[ 1243.216279][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1243.216299][   T30]  ? __pfx_kthread+0x10/0x10
[ 1243.216317][   T30]  ret_from_fork+0x45/0x80
[ 1243.216331][   T30]  ? __pfx_kthread+0x10/0x10
[ 1243.216348][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1243.216377][   T30]  </TASK>
[ 1243.807312][   T30] Kernel Offset: disabled
[ 1243.811621][   T30] Rebooting in 86400 seconds..