last executing test programs:

28.846957274s ago: executing program 2 (id=24):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0)
openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x4810)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}}, 0x0)

28.456343293s ago: executing program 2 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x3b8, 0x0, 0x2e8, 0x3b8, 0x2e8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0xffff, 0xfffe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@dst={{0x48}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)

27.357956979s ago: executing program 3 (id=30):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x84)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

26.432001665s ago: executing program 2 (id=33):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setpriority(0x2, 0x0, 0x0)

26.39796367s ago: executing program 3 (id=34):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = eventfd(0x0)
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r3, 0x92c, 0x2, r2})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)

26.216039575s ago: executing program 2 (id=37):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

25.97161847s ago: executing program 3 (id=38):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x80)
r4 = fcntl$getown(0xffffffffffffffff, 0x9)
ioprio_get$pid(0x3, r4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r7=>0x0})
r8 = getpid()
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r7, @ANYBLOB="08001c00", @ANYRES32=r8], 0x24}}, 0x0)

24.018868833s ago: executing program 2 (id=43):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa0100fe}, {@multicast1, 0x3}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010101, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote, 0xfffffffe}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

24.018304867s ago: executing program 3 (id=44):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x95, &(0x7f0000000140)=""/149, 0x41000, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x0, 0x2}, {0x0, 0x5}], 0x10, 0x40, @void, @value}, 0x90)

21.287983919s ago: executing program 3 (id=47):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

19.737864922s ago: executing program 3 (id=49):
syz_open_dev$vim2m(0x0, 0x100005, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000010c0)={'bond0\x00', &(0x7f0000000fc0)=@ethtool_drvinfo={0x3, "1e44b5bec4946f57feaf593e7675ae1c14a57bfa1a7420b4c7c38815e21bd55d", "7f1eb60c71dc4dcd8bef1108c4ecf87dafc2b7b9ced00d6f36aefe677cd647aa", "05796d26cec5320e44397b89b5d2505866d67aca07d2235916691bb7a53621b1", "feba96d8e88c9896ec52d971f4d134ad5d6d6133cd03282adfbcd356cef6d27d", "16921dff030000000000002e65ee840210e74f8e4e8c083a75c5659aad244826", "bd60a23b3c1ce9cd8e15bac1"}})
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r3 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r3, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

19.595709214s ago: executing program 2 (id=51):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000008100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.416480141s ago: executing program 4 (id=64):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x88, 0xdb5f, 0x40, @loopback, @private1, 0x10, 0x798, 0xb99, 0xfffffffc}})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_4={0x3, 0x0, 0x0, "0577f5d2"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x183200)
close_range(r3, 0xffffffffffffffff, 0x0)

10.949114915s ago: executing program 0 (id=71):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x4}, &(0x7f0000000340)=0x28)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

9.834837665s ago: executing program 0 (id=72):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)})

9.334259839s ago: executing program 4 (id=74):
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair(0x10, 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r3, 0x0, 0xd88d02a0}, 0x38)

9.33364037s ago: executing program 0 (id=75):
syz_usbip_server_init(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
syz_usbip_server_init(0x1)

7.968737564s ago: executing program 4 (id=77):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

6.653683977s ago: executing program 4 (id=78):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4})
close(r3)

6.51055745s ago: executing program 0 (id=79):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0)

5.315223576s ago: executing program 1 (id=80):
io_setup(0x6, &(0x7f00000002c0))
io_setup(0x40, &(0x7f0000000140))
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}})
io_setup(0x40, &(0x7f0000000140))
io_setup(0x2, &(0x7f0000000240))
io_setup(0x4, &(0x7f0000001880))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100", 0x1b)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x1, 0x10, 0x9, 0xce1, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2], 0x24}}, 0x0)

5.106709938s ago: executing program 0 (id=81):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x36}, &(0x7f0000000440)='./file0\x00', 0x18})
io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)

3.886715132s ago: executing program 4 (id=82):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

3.563944673s ago: executing program 0 (id=83):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f0000000280)=',\x00', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
io_setup(0xedf, &(0x7f0000001740)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

2.682820234s ago: executing program 4 (id=84):
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r0, r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r1, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r1, r2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)="03", 0x1}], 0x1}}], 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = fcntl$dupfd(r2, 0x0, r2)
recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/124, 0x7a}], 0x1}}], 0x400000000000358, 0x40000142, 0x0)

2.404359695s ago: executing program 1 (id=85):
r0 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x894c, 0x0)

2.237207418s ago: executing program 1 (id=86):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe09)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
syz_open_procfs(0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0x3}, 0x2)

1.878797969s ago: executing program 1 (id=87):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x101000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000000c0)=0xa)

697.012575ms ago: executing program 1 (id=88):
fsmount(0xffffffffffffffff, 0x0, 0x70)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00')
setns(r3, 0x24020000)
syz_clone(0x5d000120, 0x0, 0x3, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=89):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts.
[   71.202766][   T30] audit: type=1400 audit(1728358597.138:88): avc:  denied  { mounton } for  pid=5211 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   71.208719][ T5211] cgroup: Unknown subsys name 'net'
[   71.230857][   T30] audit: type=1400 audit(1728358597.138:89): avc:  denied  { mount } for  pid=5211 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   71.253238][   T30] audit: type=1400 audit(1728358597.178:90): avc:  denied  { unmount } for  pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   71.410534][ T5211] cgroup: Unknown subsys name 'cpuset'
[   71.419278][ T5211] cgroup: Unknown subsys name 'rlimit'
[   71.551339][   T30] audit: type=1400 audit(1728358597.488:91): avc:  denied  { setattr } for  pid=5211 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   71.574767][   T30] audit: type=1400 audit(1728358597.488:92): avc:  denied  { create } for  pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   71.610808][   T30] audit: type=1400 audit(1728358597.488:93): avc:  denied  { write } for  pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   71.631526][   T30] audit: type=1400 audit(1728358597.488:94): avc:  denied  { read } for  pid=5211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   71.651863][   T30] audit: type=1400 audit(1728358597.518:95): avc:  denied  { mounton } for  pid=5211 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   71.676920][   T30] audit: type=1400 audit(1728358597.518:96): avc:  denied  { mount } for  pid=5211 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   71.700282][   T30] audit: type=1400 audit(1728358597.528:97): avc:  denied  { read } for  pid=4888 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   71.714177][ T5214] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   73.089045][ T5211] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.607257][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   76.607292][   T30] audit: type=1400 audit(1728358602.548:103): avc:  denied  { create } for  pid=5221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.640173][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[   76.646708][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[   76.662063][   T30] audit: type=1400 audit(1728358602.558:104): avc:  denied  { read write } for  pid=5222 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   76.709859][   T30] audit: type=1400 audit(1728358602.558:105): avc:  denied  { open } for  pid=5222 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   76.752264][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.759190][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.762345][   T30] audit: type=1400 audit(1728358602.598:106): avc:  denied  { ioctl } for  pid=5222 comm="syz-executor" path="socket:[4222]" dev="sockfs" ino=4222 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.769507][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.798745][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.806741][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.815003][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.824298][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.832355][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.839984][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.848001][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.856597][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.864868][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.872382][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.880639][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.884073][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.896569][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.904146][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.906529][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.914138][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.925757][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.926351][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.940787][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.947927][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.948571][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.960129][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.966759][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.970894][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.988604][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.997276][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.005855][   T30] audit: type=1400 audit(1728358602.908:107): avc:  denied  { read } for  pid=5225 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   77.028740][   T30] audit: type=1400 audit(1728358602.908:108): avc:  denied  { open } for  pid=5225 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   77.041060][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.052212][   T30] audit: type=1400 audit(1728358602.908:109): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   77.386603][   T30] audit: type=1400 audit(1728358603.318:110): avc:  denied  { module_request } for  pid=5232 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   77.456806][ T5232] chnl_net:caif_netlink_parms(): no params data found
[   77.582657][ T5225] chnl_net:caif_netlink_parms(): no params data found
[   77.633532][ T5230] chnl_net:caif_netlink_parms(): no params data found
[   77.693569][ T5222] chnl_net:caif_netlink_parms(): no params data found
[   77.763957][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.772162][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.781841][ T5232] bridge_slave_0: entered allmulticast mode
[   77.789148][ T5232] bridge_slave_0: entered promiscuous mode
[   77.798147][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.805254][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.812470][ T5232] bridge_slave_1: entered allmulticast mode
[   77.819546][ T5232] bridge_slave_1: entered promiscuous mode
[   77.839242][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.846434][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.853629][ T5225] bridge_slave_0: entered allmulticast mode
[   77.860650][ T5225] bridge_slave_0: entered promiscuous mode
[   77.869055][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.876559][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.883697][ T5225] bridge_slave_1: entered allmulticast mode
[   77.891240][ T5225] bridge_slave_1: entered promiscuous mode
[   77.939867][ T5221] chnl_net:caif_netlink_parms(): no params data found
[   78.002008][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.013630][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.024739][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.049291][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.056640][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.063788][ T5230] bridge_slave_0: entered allmulticast mode
[   78.070851][ T5230] bridge_slave_0: entered promiscuous mode
[   78.082996][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.090636][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.098022][ T5230] bridge_slave_1: entered allmulticast mode
[   78.104694][ T5230] bridge_slave_1: entered promiscuous mode
[   78.129866][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.175634][ T5225] team0: Port device team_slave_0 added
[   78.184125][ T5225] team0: Port device team_slave_1 added
[   78.201194][ T5232] team0: Port device team_slave_0 added
[   78.229117][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.247041][ T5232] team0: Port device team_slave_1 added
[   78.262173][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.269629][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.279755][ T5222] bridge_slave_0: entered allmulticast mode
[   78.287023][ T5222] bridge_slave_0: entered promiscuous mode
[   78.301114][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.336409][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.343401][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.369457][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.382561][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.390228][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.416533][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.433637][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.441628][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.449119][ T5222] bridge_slave_1: entered allmulticast mode
[   78.455873][ T5222] bridge_slave_1: entered promiscuous mode
[   78.475114][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.482412][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.508395][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.557102][ T5230] team0: Port device team_slave_0 added
[   78.563107][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.570330][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.577579][ T5221] bridge_slave_0: entered allmulticast mode
[   78.584273][ T5221] bridge_slave_0: entered promiscuous mode
[   78.592391][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.599511][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.625932][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.665453][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.676586][ T5230] team0: Port device team_slave_1 added
[   78.684019][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.693604][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.701247][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.708714][ T5221] bridge_slave_1: entered allmulticast mode
[   78.715417][ T5221] bridge_slave_1: entered promiscuous mode
[   78.755006][ T5225] hsr_slave_0: entered promiscuous mode
[   78.761508][ T5225] hsr_slave_1: entered promiscuous mode
[   78.805715][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.818093][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.828012][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.834973][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.861329][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.884699][ T5222] team0: Port device team_slave_0 added
[   78.907884][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.914949][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.941474][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.964299][ T5222] team0: Port device team_slave_1 added
[   78.986420][ T5221] team0: Port device team_slave_0 added
[   79.002508][ T5232] hsr_slave_0: entered promiscuous mode
[   79.009206][ T5232] hsr_slave_1: entered promiscuous mode
[   79.015345][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.023601][ T5232] Cannot create hsr debugfs directory
[   79.027277][ T5235] Bluetooth: hci2: command tx timeout
[   79.057147][ T5221] team0: Port device team_slave_1 added
[   79.106469][ T5243] Bluetooth: hci4: command tx timeout
[   79.106738][ T5229] Bluetooth: hci1: command tx timeout
[   79.112183][ T5243] Bluetooth: hci0: command tx timeout
[   79.118004][ T5235] Bluetooth: hci3: command tx timeout
[   79.142299][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.149509][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.175516][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.188298][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.195263][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.221358][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.244921][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.251969][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.278113][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.290637][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.297730][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.323655][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.354855][ T5230] hsr_slave_0: entered promiscuous mode
[   79.361503][ T5230] hsr_slave_1: entered promiscuous mode
[   79.368367][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.375924][ T5230] Cannot create hsr debugfs directory
[   79.463488][ T5222] hsr_slave_0: entered promiscuous mode
[   79.470109][ T5222] hsr_slave_1: entered promiscuous mode
[   79.476980][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.484567][ T5222] Cannot create hsr debugfs directory
[   79.561248][ T5221] hsr_slave_0: entered promiscuous mode
[   79.568352][ T5221] hsr_slave_1: entered promiscuous mode
[   79.574458][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.582299][ T5221] Cannot create hsr debugfs directory
[   79.802897][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.833980][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.858739][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.870203][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.907183][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.923640][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.933258][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.950625][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.018477][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.029383][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.052133][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.078288][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.142007][ T5221] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.155735][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.167749][ T5221] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.178306][ T5221] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.196880][ T5221] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.212841][ T5225] 8021q: adding VLAN 0 to HW filter on device team0
[   80.301699][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.309047][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.325847][ T5222] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.338455][ T5222] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.359997][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.367145][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.393484][ T5222] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.403614][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.454461][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.489575][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.541120][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.558722][ T5232] 8021q: adding VLAN 0 to HW filter on device team0
[   80.573042][   T30] audit: type=1400 audit(1728358606.508:111): avc:  denied  { sys_module } for  pid=5225 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   80.645362][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.652635][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.664370][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.671525][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.695404][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.740864][ T5230] 8021q: adding VLAN 0 to HW filter on device team0
[   80.778444][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.785680][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.803622][ T5221] 8021q: adding VLAN 0 to HW filter on device team0
[   80.822949][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.830116][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.844399][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.851570][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.874443][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.881609][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.972363][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.988528][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.060597][ T5222] 8021q: adding VLAN 0 to HW filter on device team0
[   81.106706][ T5235] Bluetooth: hci2: command tx timeout
[   81.159612][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.166913][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.187431][ T5235] Bluetooth: hci0: command tx timeout
[   81.193006][ T5235] Bluetooth: hci3: command tx timeout
[   81.200935][ T5235] Bluetooth: hci1: command tx timeout
[   81.204429][ T5243] Bluetooth: hci4: command tx timeout
[   81.273807][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.281064][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.303657][ T5225] veth0_vlan: entered promiscuous mode
[   81.354327][ T5225] veth1_vlan: entered promiscuous mode
[   81.370474][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.480070][ T5225] veth0_macvtap: entered promiscuous mode
[   81.490766][ T5225] veth1_macvtap: entered promiscuous mode
[   81.502256][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.530189][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.603002][ T5232] veth0_vlan: entered promiscuous mode
[   81.619310][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.644919][ T5232] veth1_vlan: entered promiscuous mode
[   81.668737][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.702922][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.712570][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.722044][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.731493][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.760194][ T5221] veth0_vlan: entered promiscuous mode
[   81.783628][ T5230] veth0_vlan: entered promiscuous mode
[   81.838332][ T5221] veth1_vlan: entered promiscuous mode
[   81.847175][ T5230] veth1_vlan: entered promiscuous mode
[   81.888599][ T5232] veth0_macvtap: entered promiscuous mode
[   81.901030][ T5232] veth1_macvtap: entered promiscuous mode
[   81.941417][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.975671][ T5230] veth0_macvtap: entered promiscuous mode
[   82.016389][ T5221] veth0_macvtap: entered promiscuous mode
[   82.049736][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.063563][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.077067][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.094219][ T5230] veth1_macvtap: entered promiscuous mode
[   82.117751][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.125769][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.127616][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.145291][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.159666][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.170496][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.182014][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.191191][ T5221] veth1_macvtap: entered promiscuous mode
[   82.232202][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.244282][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.255724][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.263688][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.274594][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.285496][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.297787][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.310400][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.338685][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.349091][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.358121][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.367212][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.385025][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.395664][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.411020][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.423177][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.438884][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.449633][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.462703][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.473848][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.484053][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.494604][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.508093][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.518979][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.531455][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.534579][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.550811][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.560755][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.572422][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.583415][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.594596][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.607774][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.628761][   T30] audit: type=1400 audit(1728358608.568:112): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   82.661295][   T30] audit: type=1400 audit(1728358608.568:113): avc:  denied  { mount } for  pid=5225 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   82.681968][ T5221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.692563][   T30] audit: type=1400 audit(1728358608.568:114): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   82.702390][ T5221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.724381][   T30] audit: type=1400 audit(1728358608.568:115): avc:  denied  { mount } for  pid=5225 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   82.728306][ T5221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.758570][ T5221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.759381][   T30] audit: type=1400 audit(1728358608.568:116): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   82.813965][   T30] audit: type=1400 audit(1728358608.568:117): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/root/syzkaller.xGyk5V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   82.832571][ T5225] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.851607][   T30] audit: type=1400 audit(1728358608.568:118): avc:  denied  { unmount } for  pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   82.887733][   T30] audit: type=1400 audit(1728358608.598:119): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   82.900626][ T5222] veth0_vlan: entered promiscuous mode
[   82.916403][   T30] audit: type=1400 audit(1728358608.598:120): avc:  denied  { mount } for  pid=5225 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   82.939698][   T30] audit: type=1400 audit(1728358608.598:121): avc:  denied  { mounton } for  pid=5225 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   83.025062][ T5222] veth1_vlan: entered promiscuous mode
[   83.111615][ T5310] IPv4: Oversized IP packet from 172.20.20.10
[   83.119327][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   83.126213][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   83.173657][ T5310] IPv4: Oversized IP packet from 172.20.20.10
[   83.180334][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   83.186678][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   83.186895][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.199534][ T5310] IPv4: Oversized IP packet from 172.20.20.10
[   83.201017][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.207272][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   83.214678][ T5243] Bluetooth: hci2: command tx timeout
[   83.220896][    C1] IPv4: Oversized IP packet from 172.20.20.10
[   83.232437][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.240383][ T5222] veth0_macvtap: entered promiscuous mode
[   83.247395][ T5310] IPv4: Oversized IP packet from 172.20.20.10
[   83.253671][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.267237][ T5243] Bluetooth: hci4: command tx timeout
[   83.276393][ T5243] Bluetooth: hci1: command tx timeout
[   83.281842][ T5243] Bluetooth: hci3: command tx timeout
[   83.284120][ T5235] Bluetooth: hci0: command tx timeout
[   83.295979][ T5222] veth1_macvtap: entered promiscuous mode
[   83.371885][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.390735][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.401111][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.411680][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.421539][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.432748][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.442643][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.453372][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.466709][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.475682][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.489482][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.600533][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.611836][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.622319][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.633103][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.643064][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.653577][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.663540][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.665397][ T5314] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   83.677183][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.691580][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.728009][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.737488][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.745354][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.751105][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.755355][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.770838][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.780103][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.790209][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.849792][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.863029][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.052261][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.079611][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.167079][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.175020][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.420720][ T1174] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   84.423169][ T5324] binder: 5323:5324 unknown command 0
[   84.435688][ T5324] binder: 5323:5324 ioctl c0306201 20000a80 returned -22
[   84.506314][ T5326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.633008][ T1174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.676198][ T1174] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[   84.685330][ T1174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.713610][ T1174] usb 3-1: config 0 descriptor??
[   84.842733][ T5330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.174074][ T1174] appletouch 3-1:0.0: Geyser mode initialized.
[   85.334731][ T5344] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   85.344167][ T5344] VFS: Can't find a romfs filesystem on dev nullb0.
[   85.344167][ T5344] 
[   86.139104][ T1174] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[   86.152652][ T5235] Bluetooth: hci2: command tx timeout
[   86.158894][ T5235] Bluetooth: hci3: command tx timeout
[   86.164397][ T5235] Bluetooth: hci1: command tx timeout
[   86.170383][ T5235] Bluetooth: hci4: command tx timeout
[   86.175846][ T5235] Bluetooth: hci0: command tx timeout
[   86.957549][   T25] cfg80211: failed to load regulatory.db
[   88.051116][   T30] kauditd_printk_skb: 45 callbacks suppressed
[   88.051137][   T30] audit: type=1400 audit(1728358613.988:167): avc:  denied  { bind } for  pid=5348 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.335203][   T30] audit: type=1400 audit(1728358613.988:168): avc:  denied  { name_bind } for  pid=5348 comm="syz.0.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   88.357916][   T30] audit: type=1400 audit(1728358613.988:169): avc:  denied  { node_bind } for  pid=5348 comm="syz.0.14" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   88.379990][   T30] audit: type=1400 audit(1728358614.038:170): avc:  denied  { write } for  pid=5348 comm="syz.0.14" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.402307][   T30] audit: type=1400 audit(1728358614.048:171): avc:  denied  { connect } for  pid=5348 comm="syz.0.14" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.423790][   T30] audit: type=1400 audit(1728358614.048:172): avc:  denied  { name_connect } for  pid=5348 comm="syz.0.14" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   90.157829][   T30] audit: type=1400 audit(1728358615.568:173): avc:  denied  { create } for  pid=5355 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.245024][ T5311] usb 3-1: USB disconnect, device number 2
[   91.503058][ T5311] appletouch 3-1:0.0: input: appletouch disconnected
[   91.695038][ T5374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.892552][ T5378] ALSA: mixer_oss: invalid OSS volume '�����Y��{��������U����D��D�'
[   91.901049][ T5378] ALSA: mixer_oss: invalid OSS volume 'ߧ�4c�T���󯆩"�m!l�T.�Π����'
[   91.909520][ T5378] ALSA: mixer_oss: invalid OSS volume 'lg�'
[   91.915455][ T5378] ALSA: mixer_oss: invalid OSS volume '�)n���k�Ki��,r��WY\�ZV����?J`G'
[   91.923914][ T5378] ALSA: mixer_oss: invalid OSS volume 'k�O0���$��g��{�pl{��y;_A�RW��'
[   91.932317][ T5378] ALSA: mixer_oss: invalid OSS volume '�'
[   91.938151][ T5378] ALSA: mixer_oss: invalid OSS volume 'sv��Fu{Qby>��h%w���]'
[   91.945951][ T5378] ALSA: mixer_oss: invalid OSS volume '�E���=�v?��@4��8�@�h����L'
[   91.954378][ T5378] ALSA: mixer_oss: invalid OSS volume '�+���?>3Iq��0:i��q�|��U�D�ř��'
[   91.963871][ T5378] ALSA: mixer_oss: invalid OSS volume 'vӷ*xr��N0�ܗ���c��A�����d�h�'
[   91.972326][ T5378] ALSA: mixer_oss: invalid OSS volume '��JM����%H�J[~S'
[   91.979814][ T5378] ALSA: mixer_oss: invalid OSS volume '������SQF��?���`�*�����]��5S'
[   92.747888][ T5371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.998398][   T30] audit: type=1400 audit(1728358618.918:174): avc:  denied  { read } for  pid=5380 comm="syz.3.23" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   93.065809][   T30] audit: type=1400 audit(1728358618.968:175): avc:  denied  { open } for  pid=5380 comm="syz.3.23" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   93.156376][    T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   93.177353][   T30] audit: type=1400 audit(1728358618.988:176): avc:  denied  { read } for  pid=5382 comm="syz.2.24" name="rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   93.200105][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.207504][   T30] audit: type=1400 audit(1728358618.988:177): avc:  denied  { open } for  pid=5382 comm="syz.2.24" path="/dev/rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   93.234077][   T30] audit: type=1400 audit(1728358618.998:178): avc:  denied  { create } for  pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.254546][   T30] audit: type=1400 audit(1728358619.028:179): avc:  denied  { write } for  pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.332091][   T30] audit: type=1400 audit(1728358619.028:180): avc:  denied  { nlmsg_write } for  pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.352568][    C1] vkms_vblank_simulate: vblank timer overrun
[   94.056537][   T30] audit: type=1400 audit(1728358619.048:181): avc:  denied  { write } for  pid=5382 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   94.078522][   T30] audit: type=1400 audit(1728358619.098:182): avc:  denied  { read write } for  pid=5380 comm="syz.3.23" name="video1" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   94.102540][   T30] audit: type=1400 audit(1728358619.108:183): avc:  denied  { open } for  pid=5380 comm="syz.3.23" path="/dev/video1" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   94.127161][   T30] audit: type=1400 audit(1728358619.158:184): avc:  denied  { ioctl } for  pid=5380 comm="syz.3.23" path="/dev/video1" dev="devtmpfs" ino=848 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   94.168374][    T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   94.176794][    T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   94.184924][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.215436][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   94.224436][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   94.245707][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[   94.278808][    T9] usb 1-1: string descriptor 0 read error: -22
[   94.292777][    T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   94.312210][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.325502][    T9] usb 1-1: config 0 descriptor??
[   94.389194][    T9] hub 1-1:0.0: bad descriptor, ignoring hub
[   94.435971][    T9] hub 1-1:0.0: probe with driver hub failed with error -5
[   94.682267][ T5405] xt_NFQUEUE: number of queues (65534) out of range (got 131068)
[   95.288405][ T5301] usb 1-1: USB disconnect, device number 2
[   95.393898][ T5413] Illegal XDP return value 792442328 on prog  (id 9) dev N/A, expect packet loss!
[   97.702044][ T5301] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.939953][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   98.103002][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   98.172880][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   98.205352][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   98.238658][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.303159][ T5301] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.341170][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.477121][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[   99.354859][ T5301] usb 2-1: config 0 descriptor??
[   99.369227][ T5432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   99.387337][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   99.586344][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   99.946351][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  100.106711][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  100.150025][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.158208][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.176227][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  100.208821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  100.225684][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  100.225702][   T30] audit: type=1400 audit(1728358626.158:228): avc:  denied  { name_bind } for  pid=5447 comm="syz.4.45" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  100.267899][ T5438] bridge0: entered allmulticast mode
[  100.293490][   T30] audit: type=1400 audit(1728358626.218:229): avc:  denied  { node_bind } for  pid=5447 comm="syz.4.45" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  100.347531][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.354282][ T5301] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  100.354646][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.370723][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.371942][ T5301] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  100.377914][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.455825][   T30] audit: type=1400 audit(1728358626.388:230): avc:  denied  { write } for  pid=5445 comm="syz.2.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  100.482028][ T5450] bridge0: entered promiscuous mode
[  100.573589][ T5446] kvm: emulating exchange as write
[  101.550977][   T30] audit: type=1400 audit(1728358626.828:231): avc:  denied  { create } for  pid=5456 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  101.574684][   T30] audit: type=1400 audit(1728358626.838:232): avc:  denied  { bind } for  pid=5456 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  101.594389][   T30] audit: type=1400 audit(1728358626.848:233): avc:  denied  { listen } for  pid=5456 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  101.962253][ T5311] usb 2-1: USB disconnect, device number 2
[  102.037612][   T30] audit: type=1400 audit(1728358627.968:234): avc:  denied  { create } for  pid=5464 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  102.075697][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.130639][   T30] audit: type=1400 audit(1728358628.058:235): avc:  denied  { bind } for  pid=5464 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  102.203395][    C0] net_ratelimit: 86 callbacks suppressed
[  102.203420][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  102.213841][   T30] audit: type=1400 audit(1728358628.068:236): avc:  denied  { setopt } for  pid=5464 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  102.384789][ T5474] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.469522][ T5476] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  102.522673][ T5476] kvm: pic: non byte read
[  105.252313][   T30] audit: type=1400 audit(1728358630.408:237): avc:  denied  { ioctl } for  pid=5492 comm="syz.4.57" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  105.277562][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.691251][   T30] audit: type=1326 audit(1728358631.608:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  105.714398][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.767562][   T30] audit: type=1326 audit(1728358631.608:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  105.824731][   T30] audit: type=1326 audit(1728358631.608:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  105.847927][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.864206][   T30] audit: type=1326 audit(1728358631.608:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  105.898730][   T30] audit: type=1326 audit(1728358631.608:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  105.958257][   T30] audit: type=1326 audit(1728358631.608:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  105.981555][   T30] audit: type=1326 audit(1728358631.608:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  106.005127][   T30] audit: type=1326 audit(1728358631.608:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  106.028738][   T30] audit: type=1326 audit(1728358631.608:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f909f37dff9 code=0x7ffc0000
[  107.158287][ T5514] process 'syz.1.62' launched './file1' with NULL argv: empty string added
[  108.616196][ T5311] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.692379][ T5311] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  109.730610][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  109.827383][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  109.870737][ T5311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.921544][ T5311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.956239][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.015522][ T5311] usb 5-1: config 0 descriptor??
[  110.544028][ T5311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  110.581910][ T5311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  110.607988][ T5311] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  110.814519][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  110.814540][   T30] audit: type=1400 audit(1728358636.748:262): avc:  denied  { write } for  pid=5521 comm="syz.4.64" name="hiddev0" dev="devtmpfs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  112.055952][   T30] audit: type=1400 audit(1728358637.988:263): avc:  denied  { read } for  pid=5554 comm="syz.0.72" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  112.144416][   T30] audit: type=1400 audit(1728358637.988:264): avc:  denied  { open } for  pid=5554 comm="syz.0.72" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  112.201499][   T30] audit: type=1400 audit(1728358637.998:265): avc:  denied  { ioctl } for  pid=5554 comm="syz.0.72" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  112.439878][ T5559] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  112.446736][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  112.462101][   T30] audit: type=1400 audit(1728358637.998:266): avc:  denied  { create } for  pid=5554 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  112.741753][ T5311] usb 5-1: USB disconnect, device number 2
[  113.716692][ T5559] vhci_hcd vhci_hcd.0: Device attached
[  113.899942][ T5278] vhci_hcd: vhci_device speed not set
[  113.907637][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  113.940334][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.966262][ T5278] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  114.098360][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.159704][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.168158][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.175701][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.184388][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.191956][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  114.200664][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.328379][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  114.363657][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  114.372797][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  114.390212][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  114.403694][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  114.412720][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  114.429309][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.440991][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.448631][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  114.455847][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.535147][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.591520][   T30] audit: type=1400 audit(1728358639.868:267): avc:  denied  { setopt } for  pid=5570 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.610641][    C0] vkms_vblank_simulate: vblank timer overrun
[  114.635326][   T30] audit: type=1400 audit(1728358640.408:268): avc:  denied  { mounton } for  pid=5569 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  114.689221][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.705444][ T5559] vhci_hcd vhci_hcd.0: port 0 already used
[  114.816342][   T30] audit: type=1400 audit(1728358640.738:269): avc:  denied  { bind } for  pid=5570 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.865401][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.928467][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'.
[  115.098174][ T5560] vhci_hcd: connection reset by peer
[  115.113064][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.144753][   T81] vhci_hcd: stop threads
[  115.150857][   T81] vhci_hcd: release socket
[  115.180297][   T81] vhci_hcd: disconnect device
[  116.436662][ T5587] tty tty21: ldisc open failed (-12), clearing slot 20
[  116.469900][ T5588] SELinux: selinux_ima_measure_state_locked: failed to read policy -12.
[  116.559165][   T30] audit: type=1400 audit(1728358642.488:270): avc:  denied  { map_create } for  pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  116.578082][    C0] vkms_vblank_simulate: vblank timer overrun
[  116.584519][ T5233] Bluetooth: hci5: command tx timeout
[  116.657215][   T30] audit: type=1400 audit(1728358642.488:271): avc:  denied  { map_read map_write } for  pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  116.677092][   T30] audit: type=1400 audit(1728358642.498:272): avc:  denied  { read } for  pid=4656 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  116.699148][   T30] audit: type=1400 audit(1728358642.498:273): avc:  denied  { search } for  pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.711195][ T5233] Bluetooth: hci6: command tx timeout
[  116.876786][   T30] audit: type=1400 audit(1728358642.498:274): avc:  denied  { append } for  pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  116.899016][    C0] vkms_vblank_simulate: vblank timer overrun
[  117.237743][   T30] audit: type=1400 audit(1728358642.498:275): avc:  denied  { open } for  pid=4656 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.275070][   T30] audit: type=1400 audit(1728358642.498:276): avc:  denied  { getattr } for  pid=4656 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.696815][   T30] audit: type=1400 audit(1728358642.538:277): avc:  denied  { create } for  pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  117.721063][   T30] audit: type=1400 audit(1728358642.538:278): avc:  denied  { write } for  pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  117.742469][   T30] audit: type=1400 audit(1728358642.538:279): avc:  denied  { read } for  pid=5589 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  118.874261][ T5233] Bluetooth: hci5: command tx timeout
[  118.874305][ T5235] Bluetooth: hci6: command tx timeout
[  119.009625][ T5569] chnl_net:caif_netlink_parms(): no params data found
[  119.122457][ T5278] vhci_hcd: vhci_device speed not set
[  119.317057][ T1122] bridge_slave_1: left allmulticast mode
[  119.323078][ T1122] bridge_slave_1: left promiscuous mode
[  119.330311][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.372362][ T1122] bridge_slave_0: left allmulticast mode
[  119.383221][ T1122] bridge_slave_0: left promiscuous mode
[  119.399537][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.986234][ T5235] Bluetooth: hci6: command tx timeout
[  120.991719][ T5235] Bluetooth: hci5: command tx timeout
[  121.367183][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.391258][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.412461][ T1122] bond0 (unregistering): Released all slaves
[  121.623791][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  121.623806][   T30] audit: type=1400 audit(1728358647.558:312): avc:  denied  { search } for  pid=4888 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  121.672341][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.695865][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.716698][   T30] audit: type=1400 audit(1728358647.598:313): avc:  denied  { read } for  pid=4888 comm="dhcpcd" name="n69" dev="tmpfs" ino=1794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  121.760106][ T5569] bridge_slave_0: entered allmulticast mode
[  121.785910][ T5569] bridge_slave_0: entered promiscuous mode
[  121.896623][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.931159][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.549979][ T5235] Bluetooth: hci5: command tx timeout
[  126.988657][ T5233] Bluetooth: hci6: command tx timeout
[  127.196075][    C0] sched: DL replenish lagged too much
[  131.516261][   T30] audit: type=1400 audit(1728358647.598:314): avc:  denied  { open } for  pid=4888 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=1794 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  145.738645][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  250.726012][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  250.733209][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P1102/1:b..l P5626/1:b..l
[  250.742653][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=10241, q=1310984 ncpus=2)
[  250.750736][    C0] task:syz.1.89        state:R  running task     stack:25824 pid:5626  tgid:5626  ppid:5225   flags:0x00004004
[  250.763287][    C0] Call Trace:
[  250.766578][    C0]  <TASK>
[  250.769553][    C0]  __schedule+0xef5/0x5750
[  250.773996][    C0]  ? hlock_class+0x4e/0x130
[  250.778554][    C0]  ? __pfx___schedule+0x10/0x10
[  250.783453][    C0]  ? find_held_lock+0x2d/0x110
[  250.788258][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[  250.793648][    C0]  preempt_schedule_common+0x44/0xc0
[  250.798951][    C0]  preempt_schedule_thunk+0x1a/0x30
[  250.804178][    C0]  _raw_spin_unlock+0x3e/0x50
[  250.808886][    C0]  unmap_page_range+0xb01/0x3cf0
[  250.813852][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  250.819340][    C0]  ? mas_next_slot+0x12d3/0x21b0
[  250.824313][    C0]  ? uprobe_munmap+0x20/0x5c0
[  250.829020][    C0]  unmap_single_vma+0x194/0x2b0
[  250.833895][    C0]  unmap_vmas+0x22f/0x490
[  250.838245][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  250.843111][    C0]  ? __pfx_lock_release+0x10/0x10
[  250.848159][    C0]  ? lock_acquire+0x2f/0xb0
[  250.852675][    C0]  ? mlock_drain_local+0x6f/0x4f0
[  250.857729][    C0]  exit_mmap+0x1c6/0xb30
[  250.861986][    C0]  ? trace_contention_end+0xea/0x140
[  250.867286][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  250.872165][    C0]  ? __mutex_lock+0x1a6/0x9c0
[  250.876886][    C0]  __mmput+0x12a/0x480
[  250.880972][    C0]  mmput+0x62/0x70
[  250.884816][    C0]  do_exit+0x9bf/0x2d70
[  250.889017][    C0]  ? get_signal+0x8f2/0x2770
[  250.893626][    C0]  ? __pfx_do_exit+0x10/0x10
[  250.898253][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  250.903288][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  250.908675][    C0]  do_group_exit+0xd3/0x2a0
[  250.913202][    C0]  get_signal+0x25fb/0x2770
[  250.917721][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  250.922939][    C0]  ? ktime_get+0xd9/0x1a0
[  250.927291][    C0]  ? __pfx_get_signal+0x10/0x10
[  250.932173][    C0]  ? __pfx_do_futex+0x10/0x10
[  250.936880][    C0]  arch_do_signal_or_restart+0x90/0x7e0
[  250.942449][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  250.948642][    C0]  syscall_exit_to_user_mode+0x150/0x2a0
[  250.954320][    C0]  do_syscall_64+0xda/0x250
[  250.958847][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.964779][    C0] RIP: 0033:0x7f909f37dff9
[  250.969212][    C0] RSP: 002b:00007ffce34b73b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  250.977642][    C0] RAX: ffffffffffffff92 RBX: 00007ffce34b74e0 RCX: 00007f909f37dff9
[  250.985641][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f909f536064
[  250.993642][    C0] RBP: 00007f909f536064 R08: 00007f90a0138080 R09: 00007ffce34b76af
[  251.001624][    C0] R10: 00007ffce34b74c0 R11: 0000000000000246 R12: 000000000001dc5a
[  251.009607][    C0] R13: 00007ffce34b74c0 R14: 0000000000000032 R15: 000000000001dc28
[  251.017602][    C0]  </TASK>
[  251.020635][    C0] task:kworker/u8:6    state:R  running task     stack:24912 pid:1102  tgid:1102  ppid:2      flags:0x00004000
[  251.032440][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  251.038705][    C0] Call Trace:
[  251.041979][    C0]  <TASK>
[  251.044916][    C0]  __schedule+0xef5/0x5750
[  251.049350][    C0]  ? hlock_class+0x4e/0x130
[  251.053916][    C0]  ? mark_lock+0xb5/0xc60
[  251.058269][    C0]  ? __pfx_mark_lock+0x10/0x10
[  251.063040][    C0]  ? hlock_class+0x4e/0x130
[  251.067557][    C0]  ? __lock_acquire+0xbdd/0x3ce0
[  251.072520][    C0]  ? __pfx___schedule+0x10/0x10
[  251.077489][    C0]  ? mark_held_locks+0x9f/0xe0
[  251.082277][    C0]  preempt_schedule_irq+0x51/0x90
[  251.087315][    C0]  irqentry_exit+0x36/0x90
[  251.091806][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  251.097820][    C0] RIP: 0010:lock_is_held_type+0x107/0x150
[  251.103677][    C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 ac ca e0 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb
[  251.125297][    C0] RSP: 0018:ffffc90003e67898 EFLAGS: 00000282
[  251.134808][    C0] RAX: 0000000000000046 RBX: ffff8880272be558 RCX: 0000000000000001
[  251.144032][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd340 RDI: ffffffff8bd1a0c0
[  251.153069][    C0] RBP: ffffffff8e1b8340 R08: 0000000000000005 R09: 0000000000000000
[  251.162552][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880272bda00
[  251.170989][    C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000003
[  251.180411][    C0]  ieee80211_bss_info_update+0x5f9/0xab0
[  251.187788][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  251.196219][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x185e/0x2f40
[  251.203077][    C0]  ? ieee80211_mandatory_rates+0x1ab/0x220
[  251.209176][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40
[  251.215810][    C0]  ? hlock_class+0x4e/0x130
[  251.220451][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  251.227378][    C0]  ? lock_acquire.part.0+0x11b/0x380
[  251.232687][    C0]  ? find_held_lock+0x2d/0x110
[  251.237478][    C0]  ? find_held_lock+0x2d/0x110
[  251.242300][    C0]  ? kcov_remote_start+0x370/0x6e0
[  251.247450][    C0]  ? mark_held_locks+0x9f/0xe0
[  251.252316][    C0]  ? kcov_remote_start+0x3cf/0x6e0
[  251.257470][    C0]  ieee80211_iface_work+0xc0b/0xf00
[  251.262705][    C0]  cfg80211_wiphy_work+0x3d9/0x550
[  251.267855][    C0]  process_one_work+0x9c5/0x1ba0
[  251.272816][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  251.278469][    C0]  ? __pfx_process_one_work+0x10/0x10
[  251.283861][    C0]  ? assign_work+0x1a0/0x250
[  251.288474][    C0]  worker_thread+0x6c8/0xf00
[  251.293103][    C0]  ? __pfx_worker_thread+0x10/0x10
[  251.298247][    C0]  kthread+0x2c1/0x3a0
[  251.302331][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.307538][    C0]  ? __pfx_kthread+0x10/0x10
[  251.312141][    C0]  ret_from_fork+0x45/0x80
[  251.316747][    C0]  ? __pfx_kthread+0x10/0x10
[  251.321355][    C0]  ret_from_fork_asm+0x1a/0x30
[  251.326167][    C0]  </TASK>
[  251.329194][    C0] rcu: rcu_preempt kthread starved for 9963 jiffies! g10241 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  251.340316][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  251.350284][    C0] rcu: RCU grace-period kthread stack dump:
[  251.356174][    C0] task:rcu_preempt     state:R  running task     stack:26544 pid:17    tgid:17    ppid:2      flags:0x00004000
[  251.367964][    C0] Call Trace:
[  251.371250][    C0]  <TASK>
[  251.374212][    C0]  __schedule+0xef5/0x5750
[  251.378647][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  251.383856][    C0]  ? _raw_spin_lock_irq+0x41/0x50
[  251.388912][    C0]  ? __pfx___schedule+0x10/0x10
[  251.393794][    C0]  ? schedule+0x298/0x350
[  251.398175][    C0]  ? __pfx_lock_release+0x10/0x10
[  251.403205][    C0]  ? trace_lock_acquire+0x14a/0x1d0
[  251.408429][    C0]  ? lock_acquire+0x2f/0xb0
[  251.412938][    C0]  ? schedule+0x1fd/0x350
[  251.417282][    C0]  schedule+0xe7/0x350
[  251.421382][    C0]  schedule_timeout+0x136/0x2a0
[  251.426259][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  251.431695][    C0]  ? __pfx_process_timeout+0x10/0x10
[  251.437007][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  251.442829][    C0]  ? prepare_to_swait_event+0xf3/0x470
[  251.448300][    C0]  rcu_gp_fqs_loop+0x1eb/0xb00
[  251.453074][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  251.458381][    C0]  ? rcu_gp_init+0xc82/0x1630
[  251.463086][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  251.468297][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  251.474118][    C0]  rcu_gp_kthread+0x271/0x380
[  251.478815][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  251.484023][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  251.489238][    C0]  ? __kthread_parkme+0x148/0x220
[  251.494298][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  251.499505][    C0]  kthread+0x2c1/0x3a0
[  251.503589][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.508797][    C0]  ? __pfx_kthread+0x10/0x10
[  251.513406][    C0]  ret_from_fork+0x45/0x80
[  251.517834][    C0]  ? __pfx_kthread+0x10/0x10
[  251.522439][    C0]  ret_from_fork_asm+0x1a/0x30
[  251.527240][    C0]  </TASK>
[  251.530279][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  251.536620][    C0] Sending NMI from CPU 0 to CPUs 1:
[  251.541850][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20