last executing test programs:

47.36971646s ago: executing program 4 (id=726):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xf4, 0xf, 0x2, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x51, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xf, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xfff, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x0, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x8, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x40008, 0x2, 0xfffffffe, 0x40], [0x3, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x294, 0xc9, 0xf9, 0xb, 0x2, 0x5, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x30f, 0x10, 0xea4, 0xffffffff, 0x4, 0x7ba, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x5, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0xf, 0x9, 0x8, 0x9, 0xd, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0xfffffffe, 0x4, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0xd], [0x4, 0x408, 0x8000, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xb25, 0x20000008, 0x4, 0x6d01, 0x5, 0x2, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x8005, 0x9, 0xac8, 0xa, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x3, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x5, 0xfffffff9, 0x10000, 0x2000a620, 0x8, 0x5, 0x4, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000007, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x223, 0x2, 0x5, 0x8, 0x30b1d693, 0x4a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, &(0x7f0000000100)="07000000010040", 0x7)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x121402)
ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0)
r3 = epoll_create(0x802)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x60000005})
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000180)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x9ea, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xffffffff, 0x43c2, 0x8000, 0x5e6a})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x4e23, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}}, 0x5c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20c82, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a01"])

45.239408604s ago: executing program 4 (id=734):
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$kvm(0x0, 0x0, 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0x980929, 0x3})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1800, @void, @value}, 0x52)

43.654228564s ago: executing program 4 (id=740):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
socket(0x28, 0x5, 0x0)
syz_open_dev$sg(0x0, 0x2, 0x4ce681)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280))
ioctl$KDGKBSENT(r3, 0x5602, &(0x7f0000000000)={0x0, "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"})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x80)
r7 = syz_open_dev$usbfs(&(0x7f0000000300), 0x4000077, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)

42.766701803s ago: executing program 4 (id=742):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x12, 0x800)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0)
ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f00000006c0)="70feac56728d3cfa3e7520bc13942d0f12bee7d88ee2eb03e6cbfe94b0bb100625842e87a0f66c706c991dbaf99f48b35c0d86bd1e466a4dda377d425b632d85c839b86c5e42bf65c3d384d63e907eaf1af0bf22")
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000040), 0x5d)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

39.852731612s ago: executing program 4 (id=749):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000064b1e1f1ff000000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) (async)
userfaultfd(0x80001) (async)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100)
r2 = socket(0x1e, 0x800, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) (async)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000001200090002000000", 0x24)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
socket(0xa, 0x3, 0x3a) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
timer_gettime(0x0, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r4, r5+60000000}}, &(0x7f0000000400)) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r7, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
close(r6)

39.221627498s ago: executing program 0 (id=752):
socket(0xa, 0x3, 0x3a)
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r1, &(0x7f0000000200)=""/208, 0xd0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x15, @time={0x80, 0xff}})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r2, 0x4008af25, &(0x7f00000003c0))
mkdir(&(0x7f0000000040)='./file0\x00', 0xe4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x0, 0x3000})
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r7, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10)
listen(r7, 0x0)
accept4$x25(r7, 0x0, 0x0, 0x80800)
poll(&(0x7f0000000080)=[{r6, 0x200}], 0x1, 0x6)

37.565118092s ago: executing program 0 (id=757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r1, 0x0, 0xff, 0xffffffffffff79b6})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
time(0xfffffffffffffffc)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
socket(0x10, 0x3, 0x0)
r6 = socket(0x2, 0x2, 0x1)
bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
read$FUSE(r7, &(0x7f0000000940)={0x2020}, 0x2020)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000005}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'})

35.171343036s ago: executing program 0 (id=760):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xa6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
syz_io_uring_setup(0x20c9, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f00001b5000/0x2000)=nil)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0)
read$FUSE(r5, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, r6)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000080)=ANY=[])
write$qrtrtun(r0, &(0x7f0000000180)="024dfc7b58623401", 0x8)

35.074319783s ago: executing program 4 (id=762):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r0, 0x10000, 0x0, 0x33b, 0x5})
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32)
r3 = syz_io_uring_setup(0x67f9, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x1, 0x3}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
pselect6(0x40, &(0x7f0000003d00)={0xa, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x2, 0xf5, 0x40, 0x8}, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) (async)
r6 = dup2(r2, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) (async, rerun: 64)
r7 = getpid() (rerun: 64)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0x7f52a000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6)
setrlimit(0x3, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x5}}, 0x20) (async)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x5)

33.953215366s ago: executing program 0 (id=763):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002ffffffffffffffef000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
connect$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x6, {0x4e24, 0x1}}, 0x10)
ftruncate(0xffffffffffffffff, 0x200000000000)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet6(r4, 0x0, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x50)
r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

31.918521812s ago: executing program 0 (id=766):
socket$kcm(0x21, 0x2, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x339}, 0x0)

31.639001854s ago: executing program 0 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r1, 0x0, 0xff, 0xffffffffffff79b6})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
time(0xfffffffffffffffc)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x2, 0x2, 0x1)
bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
read$FUSE(r8, &(0x7f0000000940)={0x2020}, 0x2020)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000005}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0)

19.601929593s ago: executing program 32 (id=762):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r0, 0x10000, 0x0, 0x33b, 0x5})
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32)
r3 = syz_io_uring_setup(0x67f9, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x1, 0x3}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
pselect6(0x40, &(0x7f0000003d00)={0xa, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x2, 0xf5, 0x40, 0x8}, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) (async)
r6 = dup2(r2, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) (async, rerun: 64)
r7 = getpid() (rerun: 64)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0x7f52a000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6)
setrlimit(0x3, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x5}}, 0x20) (async)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x5)

16.092208913s ago: executing program 33 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r1, 0x0, 0xff, 0xffffffffffff79b6})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
time(0xfffffffffffffffc)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x2, 0x2, 0x1)
bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
read$FUSE(r8, &(0x7f0000000940)={0x2020}, 0x2020)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000005}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0)

12.484717616s ago: executing program 1 (id=779):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r2=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, 0x0, &(0x7f0000000740)=""/46, 0x0, 0x1})
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r4 = socket$key(0xf, 0x3, 0x2)
recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10042)
r5 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r5})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000120001000000001000000000000000b57dec405a442b3eb20bb75f849428461d0e01324bca5fb7759d337e0bac82930722c5faca85ed18f911d11e51befd700e86f0866bd9503944b8cc1a5b92db60f67577af0c5f06b75a91466684167891f5863e66efa1bd42c95603a70b954eb1904bef0761705c68", @ANYRES32=r2, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x2d, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x100}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}, @TCA_U32_CLASSID={0x0, 0x1, {0xfff1, 0xb}}]}}]}, 0x4c}}, 0x20040054)

12.149625792s ago: executing program 2 (id=780):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e23, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7d}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000000000000000000000c6d85f83cb23687d"], 0x28}, 0x4)
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020202000900030073797a3000000000090001"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0xfffffffe, {{{@in=@empty, @in=@remote, 0x0, 0xfb, 0x4e21, 0x0, 0x0, 0x20, 0x0, 0x6}, {@in=@broadcast, 0x4d3, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, {0x9, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa}, 0x4, 0x5}}, 0xf8}}, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) (async, rerun: 32)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
mlock(&(0x7f0000007000/0x3000)=nil, 0x3000) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12)
mlock(&(0x7f0000007000/0x2000)=nil, 0x2000) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xf8}}, 0x0) (async)
syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

10.902176328s ago: executing program 3 (id=781):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000380), 0x4da3, 0x580)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000003c0)={0xb10, 0x3})
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x2000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb)
r4 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r4, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
ioctl$FS_IOC_GETFSLABEL(r3, 0x541b, &(0x7f0000000100))
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x1, 0x6000, 0x3, &(0x7f00000001c0)="52f881"}, {0x222, 0x1c00, 0x0, 0x0}], 0x2})
r5 = syz_usb_connect(0x6, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12f0000003005740ed0b0011c3ec000000fe8000000009040000000000d93919966191ecad6d8d07444c95ebd949866afc482bd82966aab55b76f16f83ff95df88ddfdad8660a7c17fbfb53fd63cceee7871e8afcc3724c453aae365393d4d2f9e46e2dca9ab9e9a8743ca2d6214434e7b3b6a9e73f8234ec050b8b45302fece3f828e610ebf342f867e1a4d07fe8efba9bfcd86991e9f420c9c0970364724abb6358af794f70fb4df8bbd5e4eee927b83e0c73e423d"], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="003100010000423f0dfb18872083e44c0e4547"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r9, 0x401054d5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES16=r6, @ANYBLOB="cfc5aa61e17de7e292a4896b3e3e7610a41d5c05d42518cc095f6139a908af7a11c24025fc068b4402b68a9b5292ced7fd180c807a8087d6798ec753a936f895a7f727a10a5446582a071faf16c3eeb4925a83dd70e67aff7e838d45725b38c51e5fbde5ee181c1f72ae9d3496466ece9e5b1cf8b264197e79f8e6cbc2cdd4de8cf5"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4)
sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0xfffffffffffffdde, 0x0}, 0x0)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)

9.363702182s ago: executing program 2 (id=782):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
timer_create(0x4, &(0x7f0000000000)={0x0, 0x40, 0x2}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0))
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000003c0))

9.195344334s ago: executing program 2 (id=783):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002fffffffffffffff9000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
connect$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x6, {0x4e24, 0x1}}, 0x10)
ftruncate(0xffffffffffffffff, 0x200000000000)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet6(r4, 0x0, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x50)
r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

8.755107838s ago: executing program 1 (id=784):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300ff8000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)

8.674579259s ago: executing program 3 (id=785):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="b7edf6019f267ed434b7c83e03", 0xd}, {&(0x7f0000000340)="c842702d09e9ba6fc498ae681a98e68093b7a82bf64d1358ffe7a2e82363e9183288b5b030e58c30cfe75788a6fdfaa3ee3abaf7560752532b5881b56f137f3cc508f074a80613de6b3e2e6f8973a7fa8c80c5dc10e3f4f0696b57e4b620970329ba0fd4e5c74e1bbf67808ab0dffa5d99cb88d9213d37ba03722d860cd0a3478a1c38aad6aca38dd973ad4390437c92bfef577288d22e746da9873e0624de2c8e714c67a201687129d9a10ec614ab98770319e82ff2a1612d673740b491139be651433bc0e4696e25fc9d81", 0xcc}, {&(0x7f0000000180)="6890e47ac1161a58790755c85c4b85376b9e61ade684c7ad4a6c863e2c9d1cbe44452d4756248b90c2eba48367d8f843375820729d68c94a5dff9130d1c0d6c62586ccc3f4dc13d87b256f204d4a49029ebe97c798d4c752e57b5bf36425d8e87950506e3328feb6911cb547ce234595ce1c33a9e462728f91a2d582f054bafca4f0cac120dc0bfbdc8e9ace2279c4d18052476eb8eae262c777f0286eb3143073d8d5ba272f", 0xa6}], 0x3)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x6, 0x10001, 0x4, 0x0, 0x0, [{{r0}, 0x6}, {{r0}, 0xa0f}, {{r0}, 0xfffffffffffff801}, {{r0}, 0xfffffffffffffff9}]})

8.313386989s ago: executing program 3 (id=786):
r0 = mq_open(&(0x7f00000003c0)='filter\x00\xd9\x83\xda\x88v|\bu\x90\xdf\x88\'\xcf\xa4\x06\xd0\x87\b\xff\xa0\xc6jB\x1fE\x9c\xea', 0x40, 0x9d, 0x0)
clock_gettime(0x0, &(0x7f0000000340))
mq_timedreceive(r0, &(0x7f0000000240)=""/58, 0x3a, 0x4, &(0x7f0000000380))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x2)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000280)=0x2)
close(0x3)
socket$inet(0x2, 0x80000, 0x4)
r5 = syz_io_uring_setup(0x22f, &(0x7f00000001c0)={0x0, 0x5325, 0x10000, 0x0, 0x259}, &(0x7f0000000000), &(0x7f0000000040))
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r6, 0x5414, &(0x7f0000000040))
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50)

7.073273344s ago: executing program 3 (id=787):
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x801)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
prctl$PR_MCE_KILL(0x43, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xc6, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7bfd777b1c012b3a6ca2f68f080c26a04883ad5c0900", "584cbf2649a50f2dbc437ad3c045942824251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f3bcb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)

5.822549179s ago: executing program 2 (id=788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x10, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0x1f}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000400)="5aee41dea43e9e", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.573109371s ago: executing program 1 (id=789):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x2, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xf, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xfff, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x0, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x8, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x40008, 0x2, 0xfffffffe, 0x40], [0x3, 0xf0000000, 0x7f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc9, 0xf9, 0xb, 0x2, 0x5, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x30f, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0xfffffffe, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0xf, 0x9, 0x8, 0x9, 0xd, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x4, 0x408, 0x8000, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x6, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xb25, 0x20000008, 0x4, 0x6d01, 0x5, 0x2, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x8005, 0x9, 0xac8, 0xa, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x3, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x5, 0xfffffff9, 0x10000, 0x2000a620, 0x8, 0x5, 0x4, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000007, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x223, 0x2, 0x5, 0x8, 0x30b1d693, 0x4a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, &(0x7f0000000100)="07000000010040", 0x7)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080))
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000880)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x6, 0x400], 0x3})
r3 = epoll_create(0x802)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x60000005})
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x1)
ppoll(&(0x7f0000000180)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x9ea, 0x8ba, 0x2, {0x6, @vbi={0x8, 0x6, 0x401, 0x31324d4e, [0x7], [0x40, 0x2], 0x1}}, 0x40004})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xffffffff, 0x43c2, 0x8000, 0x5e6a})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x20c82, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.024078002s ago: executing program 2 (id=790):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_open_dev$vim2m(0x0, 0xaa, 0x2)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x15)
r6 = dup(r5)
write$binfmt_script(r6, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b1e7"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000500)={0x0, 0xa, 0x1, "d5"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

3.818617849s ago: executing program 3 (id=791):
socket$kcm(0x21, 0x2, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1, 0x0, 0x1f}, 0x0)

3.719399441s ago: executing program 3 (id=792):
r0 = socket$inet(0x2, 0x1, 0x100)
syz_usb_connect(0x6, 0x1cb, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8, @ANYBLOB="5c7b0474bcfcbfff4f428c11f248c41921ee322bfa6da8c1d1e39c2e05f4bd81ac6e60bdead49e327c3b0053a8390e3d98101921cdc8e8a096510f0fed87b434c260181bc0f578256ae108ec5e417abbec2889e3b1e085314c04dcc0b3f91514c82309570fe936cfe16d798fc1bf061285011a8afb41b0578d9394dbbd714cfe04d6eb8f944563fc7fb20e5c1c129a2cacd9977a11c746f1dfbb501b843738935cec82841ba6c85d2911fa88e9c64ed06960bd58a5e433b01c7d8ccf94b7bd4c3aff593bf8090ae8", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x1, &(0x7f0000000240)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000fde80001dd0000040d0018", 0x1f}], 0x1)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
ioperm(0x3, 0x4, 0x1000009)
r4 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000340)="8e", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r4, r4}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0)
socket$unix(0x1, 0x5, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fb0000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="201008"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.467070019s ago: executing program 1 (id=793):
socket(0x2, 0x80805, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000004200817a00000000000000000000002e87"], 0x14}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847b5, 0x0, 0x38, 0x0, 0x0)

1.274641097s ago: executing program 1 (id=794):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000ffffff00000200000000000000000000000000000a030000000000000000000013", @ANYRES64=r0], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

379.65066ms ago: executing program 1 (id=795):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabb6c2fbc45c8c808060001080006040002aaaaaaaaaabb64010102aaaaaaaaaaaa000000d0de00"], &(0x7f0000000240)={0x1, 0x2, [0xcc8, 0xa79, 0x63, 0x694]})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "31c53b"}})
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400120e2)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
gettid()
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28)
syz_open_dev$MSR(&(0x7f0000000000), 0x9d77, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x70})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 2 (id=796):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c)
sendfile(r2, r2, 0x0, 0xb)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
ioctl$SG_IO(r1, 0x2285, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aef", 0x10}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x18, 0x0)
fanotify_mark(r7, 0x1, 0x23, r6, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000080), 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

kernel console output (not intermixed with test programs):

: auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1fb8e969 code=0x7ffc0000
[  214.978160][   T30] audit: type=1326 audit(1746900052.064:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1a1fb8e969 code=0x7ffc0000
[  215.057437][   T30] audit: type=1326 audit(1746900052.064:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1fb8e969 code=0x7ffc0000
[  215.170627][   T30] audit: type=1326 audit(1746900052.064:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1fb8e969 code=0x7ffc0000
[  215.193809][    C0] vkms_vblank_simulate: vblank timer overrun
[  215.210587][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  215.231575][   T30] audit: type=1326 audit(1746900052.074:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1a1fb8e969 code=0x7ffc0000
[  215.285179][   T30] audit: type=1326 audit(1746900052.074:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1fb8e969 code=0x7ffc0000
[  215.308463][    C0] vkms_vblank_simulate: vblank timer overrun
[  215.472343][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  215.486460][ T5905] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  215.514485][ T7885] netlink: 1 bytes leftover after parsing attributes in process `syz.2.492'.
[  215.588993][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.741982][ T5905] usb 5-1: config 0 descriptor??
[  216.074043][    T9] usbhid 1-1:0.1: can't add hid device: -71
[  216.079996][    T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  216.149279][    T9] usb 1-1: USB disconnect, device number 17
[  216.242170][ T5905] aquacomputer_d5next 0003:0C70:F0BD.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0
[  216.384642][ T7900] ref_ctr_offset mismatch. inode: 0x203 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  216.559406][ T7900] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  216.687411][ T7900] ref_ctr decrement failed for inode: 0x203 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880470a5a00
[  216.917349][ T7900] uprobe: syz.3.495:7900 failed to unregister, leaking uprobe
[  217.190087][ T7900] uprobe: syz.3.495:7900 failed to unregister, leaking uprobe
[  217.319090][ T7900] uprobe: syz.3.495:7900 failed to unregister, leaking uprobe
[  217.585338][ T7930] Cannot find add_set index 0 as target
[  218.821846][   T24] usb 5-1: USB disconnect, device number 14
[  218.961601][ T5904] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  219.378952][ T5904] usb 1-1: Using ep0 maxpacket: 32
[  219.419862][ T5904] usb 1-1: config 0 has an invalid interface number: 28 but max is 0
[  219.430588][ T5905] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  219.432321][ T5904] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config
[  219.472608][ T5904] usb 1-1: config 0 has no interface number 0
[  219.648101][ T5904] usb 1-1: config 0 interface 28 has no altsetting 0
[  219.657606][ T5904] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=a3.a1
[  219.667789][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.723604][ T5904] usb 1-1: Product: syz
[  219.733894][ T5904] usb 1-1: Manufacturer: syz
[  219.738603][ T5904] usb 1-1: SerialNumber: syz
[  219.763029][ T5905] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  219.763959][ T5904] usb 1-1: config 0 descriptor??
[  219.780630][ T5861] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  219.784191][ T5904] em28xx 1-1:0.28: New device syz syz @ 480 Mbps (eb1a:e357, interface 28, class 28)
[  219.806349][ T5904] em28xx 1-1:0.28: Video interface 28 found: bulk
[  219.833147][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.852081][ T5905] usb 2-1: Product: syz
[  219.856684][ T5905] usb 2-1: Manufacturer: syz
[  219.862415][ T5905] usb 2-1: SerialNumber: syz
[  219.878227][ T5905] r8152-cfgselector 2-1: Unknown version 0x0000
[  219.890568][ T5905] r8152-cfgselector 2-1: config 0 descriptor??
[  220.107547][ T5905] r8152-cfgselector 2-1: Unknown version 0x0000
[  220.114563][ T5905] r8152-cfgselector 2-1: bad CDC descriptors
[  220.291765][ T5813] Bluetooth: hci4: command 0x0405 tx timeout
[  220.307173][ T5861] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  220.318704][ T5861] usb 4-1: config 0 has no interface number 0
[  220.339070][ T5861] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.379621][ T5861] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.401725][ T5861] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  220.411135][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.412401][ T5904] em28xx 1-1:0.28: unknown em28xx chip ID (232)
[  220.428934][ T5861] usb 4-1: config 0 descriptor??
[  220.451334][   T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  221.116526][   T24] usb 3-1: config 0 has no interfaces?
[  221.135127][   T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  221.149570][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.159468][   T24] usb 3-1: Product: syz
[  221.167975][   T24] usb 3-1: Manufacturer: syz
[  221.175295][   T24] usb 3-1: SerialNumber: syz
[  221.195349][   T24] usb 3-1: config 0 descriptor??
[  221.262276][ T5861] usbhid 4-1:0.1: can't add hid device: -71
[  221.348973][ T5861] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[  221.350780][ T5904] em28xx 1-1:0.28: reading from i2c device at 0xa0 failed (error=-5)
[  221.383174][ T5905] r8152-cfgselector 2-1: USB disconnect, device number 20
[  221.427091][ T5861] usb 4-1: USB disconnect, device number 15
[  221.497410][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[  221.512193][ T5904] em28xx 1-1:0.28: board has no eeprom
[  221.661054][ T5904] em28xx 1-1:0.28: Identified as Kworld 355 U DVB-T (card=42)
[  221.669292][ T5904] em28xx 1-1:0.28: 
[  221.669292][ T5904] 
[  221.669292][ T5904] The support for this board weren't valid yet.
[  221.669292][ T5904] Please send a report of having this working
[  221.669292][ T5904] not to V4L mailing list (and/or to other addresses)
[  221.669292][ T5904] 
[  221.697619][ T5904] em28xx 1-1:0.28: Currently, V4L2 is not supported on this model
[  221.705939][ T5863] em28xx 1-1:0.28: Binding DVB extension
[  221.712981][ T5863] em28xx 1-1:0.28: no endpoint for DVB mode and transfer type 0
[  221.721424][ T5863] em28xx 1-1:0.28: failed to pre-allocate USB transfer buffers for DVB.
[  221.735138][ T5904] usb 1-1: USB disconnect, device number 18
[  221.741801][ T5863] em28xx 1-1:0.28: Remote control support is not available for this card.
[  221.752105][ T5904] em28xx 1-1:0.28: Disconnecting em28xx
[  221.757822][ T5904] em28xx 1-1:0.28: Closing input extension
[  221.791820][ T5904] em28xx 1-1:0.28: Freeing device
[  221.841180][ T5860] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  221.851190][ T5905] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  221.892413][ T7976] 9pnet: Unknown protocol version 9p20\++}
[  221.939941][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'.
[  221.950971][ T7978] overlayfs: failed to resolve './file0': -2
[  221.993177][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[  222.022972][ T5860] usb 5-1: Using ep0 maxpacket: 16
[  222.030497][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  222.279450][ T5860] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  222.309531][ T5860] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.321278][ T5905] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  222.351642][ T5860] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.361604][ T5905] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.391522][ T5860] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  222.442179][ T5905] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.662931][ T5905] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  222.696292][ T5860] usb 5-1: config 7 interface 0 has no altsetting 0
[  222.740084][ T5860] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  222.756806][ T5905] usb 2-1: config 7 interface 0 has no altsetting 0
[  222.770382][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.798852][ T5905] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  222.846156][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.584356][ T5860] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0018/input/input30
[  224.087886][ T8000] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  224.241610][ T5860] kye 0003:0458:5010.0018: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0
[  224.325878][ T5860] usb 5-1: USB disconnect, device number 15
[  224.349741][ T5905] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0019/input/input31
[  224.390265][   T10] usb 3-1: USB disconnect, device number 19
[  224.451192][ T5905] kye 0003:0458:5010.0019: input,hiddev1,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0
[  224.494636][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  224.494650][   T30] audit: type=1400 audit(1746900062.764:529): avc:  denied  { append } for  pid=8012 comm="syz.2.523" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  224.523910][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.844138][ T8008] fido_id[8008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  224.920834][ T8025] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  226.448344][ T5812] Bluetooth: hci0: command tx timeout
[  226.475580][ T5812] Bluetooth: hci1: command 0x0406 tx timeout
[  226.655573][ T8036] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  226.967425][ T8039] Lens B: =================  START STATUS  =================
[  226.976137][ T8039] Lens B: Focus, Absolute: 0
[  226.981169][ T8039] Lens B: ==================  END STATUS  ==================
[  227.112773][ T8039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  227.410770][ T5813] Bluetooth: hci4: command 0x0405 tx timeout
[  227.919960][ T5906] usb 2-1: USB disconnect, device number 21
[  228.190703][   T30] audit: type=1400 audit(1746900066.414:530): avc:  denied  { getopt } for  pid=8061 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  228.449014][   T30] audit: type=1400 audit(1746900066.474:531): avc:  denied  { read } for  pid=8061 comm="syz.0.534" path="socket:[15130]" dev="sockfs" ino=15130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  228.770790][ T5813] Bluetooth: hci0: command tx timeout
[  229.103275][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.0.538
[  229.847025][ T8101] overlayfs: failed to resolve './file1': -2
[  230.006562][   T30] audit: type=1400 audit(1746900068.274:532): avc:  denied  { open } for  pid=8102 comm="syz.3.540" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  230.291660][   T30] audit: type=1400 audit(1746900068.314:533): avc:  denied  { ioctl } for  pid=8102 comm="syz.3.540" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  230.319604][   T30] audit: type=1400 audit(1746900068.374:534): avc:  denied  { mount } for  pid=8105 comm="syz.0.541" name="/" dev="ramfs" ino=15747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  230.407335][   T30] audit: type=1400 audit(1746900068.674:535): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  230.623587][ T8118] netlink: 1 bytes leftover after parsing attributes in process `syz.3.542'.
[  231.140368][   T30] audit: type=1400 audit(1746900069.414:536): avc:  denied  { create } for  pid=8120 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  231.225344][   T30] audit: type=1400 audit(1746900069.474:537): avc:  denied  { ioctl } for  pid=8120 comm="syz.0.543" path="socket:[15769]" dev="sockfs" ino=15769 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  231.570667][   T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  231.801599][   T24] usb 1-1: Using ep0 maxpacket: 8
[  231.874890][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.058973][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  232.177842][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.260368][   T24] usb 1-1: config 0 descriptor??
[  232.307315][   T24] gspca_main: vc032x-2.14.0 probing 046d:0892
[  232.387065][ T8142] FAULT_INJECTION: forcing a failure.
[  232.387065][ T8142] name failslab, interval 1, probability 0, space 0, times 0
[  232.445624][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.1.547 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  232.445651][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  232.445661][ T8142] Call Trace:
[  232.445666][ T8142]  <TASK>
[  232.445676][ T8142]  dump_stack_lvl+0x16c/0x1f0
[  232.445701][ T8142]  should_fail_ex+0x512/0x640
[  232.445719][ T8142]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  232.445751][ T8142]  should_failslab+0xc2/0x120
[  232.445767][ T8142]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  232.445792][ T8142]  ? __alloc_skb+0x2b2/0x380
[  232.445811][ T8142]  __alloc_skb+0x2b2/0x380
[  232.445826][ T8142]  ? __pfx___alloc_skb+0x10/0x10
[  232.445849][ T8142]  qdisc_notify.isra.0+0xde/0x3f0
[  232.445877][ T8142]  qdisc_graft+0xdc6/0x17c0
[  232.445897][ T8142]  ? __pfx_gred_init+0x10/0x10
[  232.445922][ T8142]  ? __pfx_qdisc_graft+0x10/0x10
[  232.445946][ T8142]  ? rcu_is_watching+0x12/0xc0
[  232.445966][ T8142]  ? qdisc_create+0x5b3/0xfa0
[  232.445990][ T8142]  tc_modify_qdisc+0xf14/0x2100
[  232.446019][ T8142]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  232.446063][ T8142]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  232.446086][ T8142]  rtnetlink_rcv_msg+0x3c6/0xe90
[  232.446106][ T8142]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.446121][ T8142]  ? __pfx_avc_has_perm+0x10/0x10
[  232.446146][ T8142]  netlink_rcv_skb+0x16a/0x440
[  232.446165][ T8142]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.446183][ T8142]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.446212][ T8142]  ? netlink_deliver_tap+0x1ae/0xd30
[  232.446233][ T8142]  netlink_unicast+0x53a/0x7f0
[  232.446254][ T8142]  ? __pfx_netlink_unicast+0x10/0x10
[  232.446279][ T8142]  netlink_sendmsg+0x8d1/0xdd0
[  232.446301][ T8142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.446329][ T8142]  ____sys_sendmsg+0xa95/0xc70
[  232.446351][ T8142]  ? copy_msghdr_from_user+0x10a/0x160
[  232.446367][ T8142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.446399][ T8142]  ___sys_sendmsg+0x134/0x1d0
[  232.446417][ T8142]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.446479][ T8142]  __sys_sendmsg+0x16d/0x220
[  232.446496][ T8142]  ? __pfx___sys_sendmsg+0x10/0x10
[  232.446519][ T8142]  ? rcu_is_watching+0x12/0xc0
[  232.446543][ T8142]  do_syscall_64+0xcd/0x260
[  232.446568][ T8142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.446583][ T8142] RIP: 0033:0x7f1ae978e969
[  232.446597][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.446612][ T8142] RSP: 002b:00007f1aea668038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.446629][ T8142] RAX: ffffffffffffffda RBX: 00007f1ae99b5fa0 RCX: 00007f1ae978e969
[  232.446639][ T8142] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003
[  232.446649][ T8142] RBP: 00007f1aea668090 R08: 0000000000000000 R09: 0000000000000000
[  232.446658][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.446667][ T8142] R13: 0000000000000000 R14: 00007f1ae99b5fa0 R15: 00007ffe79147fb8
[  232.446690][ T8142]  </TASK>
[  233.276790][   T24] gspca_vc032x: reg_r err -110
[  233.282125][   T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -110
[  233.405996][ T8158] hub 9-0:1.0: USB hub found
[  233.431909][ T8167] netlink: 'syz.2.551': attribute type 10 has an invalid length.
[  233.438268][ T5860] usb 1-1: USB disconnect, device number 19
[  233.440831][ T8158] hub 9-0:1.0: 1 port detected
[  233.507835][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'.
[  233.508492][   T30] audit: type=1400 audit(1746900071.784:538): avc:  denied  { lock } for  pid=8157 comm="syz.1.550" path="socket:[15833]" dev="sockfs" ino=15833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  233.530684][ T8174] netlink: 'syz.4.552': attribute type 10 has an invalid length.
[  233.566827][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'.
[  233.583222][ T8174] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  233.629146][ T8174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.730426][ T8183] netlink: 1 bytes leftover after parsing attributes in process `syz.2.555'.
[  234.300559][ T5860] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  234.345311][   T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  235.075764][ T5860] usb 2-1: Using ep0 maxpacket: 16
[  235.973362][   T24] usb 3-1: Using ep0 maxpacket: 16
[  235.980134][ T5860] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  235.985331][   T24] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  236.000685][ T5860] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.000714][ T5860] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.000739][ T5860] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  236.000762][ T5860] usb 2-1: config 7 interface 0 has no altsetting 0
[  236.000790][ T5860] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  236.000809][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.251725][   T24] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.423250][   T24] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.483571][   T24] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  236.496757][   T24] usb 3-1: config 7 interface 0 has no altsetting 0
[  236.503430][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  236.512811][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.642882][ T5860] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.001A/input/input35
[  236.842957][ T8221] blktrace: Concurrent blktraces are not allowed on loop2
[  237.526225][   T24] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.001B/input/input36
[  237.564015][ T5860] kye 0003:0458:5010.001A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0
[  237.632744][   T24] kye 0003:0458:5010.001B: input,hiddev1,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  237.687964][ T5860] usb 2-1: USB disconnect, device number 22
[  237.897996][ T5862] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  237.906495][ T8228] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  238.341743][ T8174] syz.4.552 (8174): drop_caches: 2
[  238.386018][   T24] usb 3-1: USB disconnect, device number 20
[  238.421875][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.519331][ T5862] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  238.532335][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.540549][ T5862] usb 1-1: Product: syz
[  238.544725][ T5862] usb 1-1: Manufacturer: syz
[  238.549316][ T5862] usb 1-1: SerialNumber: syz
[  238.602459][ T5862] usb 1-1: config 0 descriptor??
[  238.628254][ T8226] fido_id[8226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  238.654377][ T5862] usb 1-1: bad CDC descriptors
[  238.844303][ T5862] usb 1-1: unsupported MDLM descriptors
[  238.865872][ T5862] usb 1-1: USB disconnect, device number 20
[  239.305536][ T8249] netlink: 1 bytes leftover after parsing attributes in process `syz.4.569'.
[  239.627836][ T8245] kvm: pic: non byte read
[  239.671231][ T8245] kvm: pic: level sensitive irq not supported
[  239.671314][ T8245] kvm: pic: non byte read
[  239.699140][ T8245] kvm: pic: level sensitive irq not supported
[  239.699201][ T8245] kvm: pic: non byte read
[  239.724718][ T8245] kvm: pic: level sensitive irq not supported
[  239.724777][ T8245] kvm: pic: non byte read
[  239.770879][ T8245] kvm: pic: level sensitive irq not supported
[  239.770939][ T8245] kvm: pic: non byte read
[  239.791063][ T8245] kvm: pic: level sensitive irq not supported
[  239.791122][ T8245] kvm: pic: non byte read
[  239.841047][ T8245] kvm: pic: level sensitive irq not supported
[  239.841107][ T8245] kvm: pic: non byte read
[  240.004342][ T5813] Bluetooth: hci0: command tx timeout
[  240.429682][   T30] audit: type=1400 audit(1746900078.704:539): avc:  denied  { getopt } for  pid=8271 comm="syz.0.574" lport=45686 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  240.528787][   T30] audit: type=1400 audit(1746900078.804:540): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  240.705372][ T8285] netlink: 'syz.0.576': attribute type 10 has an invalid length.
[  240.900060][ T8285] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  241.154997][ T8285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.363560][ T8288] binder: BINDER_SET_CONTEXT_MGR already set
[  241.409611][ T8288] binder: 8286:8288 ioctl 4018620d 200000000040 returned -16
[  242.994525][   T30] audit: type=1400 audit(1746900081.224:541): avc:  denied  { getopt } for  pid=8304 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  243.033508][ T8306] lo speed is unknown, defaulting to 1000
[  243.423996][ T8292] syz.0.576 (8292): drop_caches: 2
[  243.765883][ T8327] input: syz1 as /devices/virtual/input/input37
[  244.328441][ T5860] IPVS: starting estimator thread 0...
[  244.528607][ T8333] IPVS: using max 39 ests per chain, 93600 per kthread
[  245.068939][ T8306] lo speed is unknown, defaulting to 1000
[  246.382129][ T8347] netlink: 1 bytes leftover after parsing attributes in process `syz.2.593'.
[  246.516357][ T8351] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm
[  247.562366][ T5863] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  247.616055][   T30] audit: type=1400 audit(1746900085.894:542): avc:  denied  { bind } for  pid=8373 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  247.643631][   T30] audit: type=1400 audit(1746900085.924:543): avc:  denied  { listen } for  pid=8373 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  247.663956][   T30] audit: type=1400 audit(1746900085.924:544): avc:  denied  { accept } for  pid=8373 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  247.942582][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  248.254214][ T5863] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  248.270826][ T5863] usb 1-1: config 0 has no interface number 0
[  248.281036][ T5863] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  248.300506][ T5863] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  248.360574][ T5863] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  248.403022][ T5863] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  248.420613][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.438856][ T5863] usb 1-1: Product: syz
[  248.448934][ T5863] usb 1-1: Manufacturer: syz
[  248.459054][ T5863] usb 1-1: SerialNumber: syz
[  248.471168][ T5863] usb 1-1: config 0 descriptor??
[  248.490029][ T8366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  248.810744][ T5863] usb 1-1: USB disconnect, device number 21
[  249.244431][ T8375] fuse: Bad value for 'fd'
[  249.345696][ T8388] warning: `syz.4.605' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  249.369523][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'.
[  249.550377][   T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  249.619236][ T8392] FAULT_INJECTION: forcing a failure.
[  249.619236][ T8392] name failslab, interval 1, probability 0, space 0, times 0
[  249.635282][ T8392] CPU: 0 UID: 0 PID: 8392 Comm: syz.2.607 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  249.635308][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  249.635318][ T8392] Call Trace:
[  249.635324][ T8392]  <TASK>
[  249.635335][ T8392]  dump_stack_lvl+0x16c/0x1f0
[  249.635363][ T8392]  should_fail_ex+0x512/0x640
[  249.635384][ T8392]  ? fs_reclaim_acquire+0xae/0x150
[  249.635407][ T8392]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  249.635431][ T8392]  should_failslab+0xc2/0x120
[  249.635448][ T8392]  __kmalloc_noprof+0xd2/0x510
[  249.635480][ T8392]  tomoyo_realpath_from_path+0xc2/0x6e0
[  249.635505][ T8392]  ? tomoyo_profile+0x47/0x60
[  249.635522][ T8392]  tomoyo_path_number_perm+0x245/0x580
[  249.635541][ T8392]  ? tomoyo_path_number_perm+0x237/0x580
[  249.635563][ T8392]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  249.635584][ T8392]  ? find_held_lock+0x2b/0x80
[  249.635626][ T8392]  ? find_held_lock+0x2b/0x80
[  249.635645][ T8392]  ? hook_file_ioctl_common+0x145/0x410
[  249.635668][ T8392]  ? __fget_files+0x20e/0x3c0
[  249.635697][ T8392]  security_file_ioctl+0x9b/0x240
[  249.635722][ T8392]  __x64_sys_ioctl+0xb7/0x200
[  249.635746][ T8392]  do_syscall_64+0xcd/0x260
[  249.635770][ T8392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.635786][ T8392] RIP: 0033:0x7fdd04d8e969
[  249.635800][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.635816][ T8392] RSP: 002b:00007fdd05b4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  249.635832][ T8392] RAX: ffffffffffffffda RBX: 00007fdd04fb5fa0 RCX: 00007fdd04d8e969
[  249.635843][ T8392] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000d
[  249.635853][ T8392] RBP: 00007fdd05b4a090 R08: 0000000000000000 R09: 0000000000000000
[  249.635863][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.635873][ T8392] R13: 0000000000000000 R14: 00007fdd04fb5fa0 R15: 00007ffe05018288
[  249.635896][ T8392]  </TASK>
[  249.635903][ T8392] ERROR: Out of memory at tomoyo_realpath_from_path.
[  249.851076][   T24] usb 2-1: device descriptor read/64, error -71
[  250.662185][ T8399] input: syz1 as /devices/virtual/input/input38
[  250.931425][   T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  251.178019][ T8396] netlink: 1 bytes leftover after parsing attributes in process `syz.0.608'.
[  251.191330][   T24] usb 2-1: device descriptor read/64, error -71
[  251.384478][   T24] usb usb2-port1: attempt power cycle
[  252.012137][   T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  252.082099][ T8417] FAULT_INJECTION: forcing a failure.
[  252.082099][ T8417] name failslab, interval 1, probability 0, space 0, times 0
[  252.707853][   T30] audit: type=1400 audit(1746900090.964:545): avc:  denied  { bind } for  pid=8411 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  252.708318][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.4.615 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  252.708338][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  252.708346][ T8417] Call Trace:
[  252.708351][ T8417]  <TASK>
[  252.708356][ T8417]  dump_stack_lvl+0x16c/0x1f0
[  252.708380][ T8417]  should_fail_ex+0x512/0x640
[  252.708398][ T8417]  ? fs_reclaim_acquire+0xae/0x150
[  252.708418][ T8417]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  252.708437][ T8417]  should_failslab+0xc2/0x120
[  252.708452][ T8417]  __kmalloc_noprof+0xd2/0x510
[  252.708479][ T8417]  tomoyo_realpath_from_path+0xc2/0x6e0
[  252.708499][ T8417]  ? tomoyo_profile+0x47/0x60
[  252.708514][ T8417]  tomoyo_path_number_perm+0x245/0x580
[  252.708529][ T8417]  ? tomoyo_path_number_perm+0x237/0x580
[  252.708547][ T8417]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  252.708565][ T8417]  ? find_held_lock+0x2b/0x80
[  252.708600][ T8417]  ? find_held_lock+0x2b/0x80
[  252.708615][ T8417]  ? hook_file_ioctl_common+0x145/0x410
[  252.708634][ T8417]  ? __fget_files+0x20e/0x3c0
[  252.708657][ T8417]  security_file_ioctl+0x9b/0x240
[  252.708677][ T8417]  __x64_sys_ioctl+0xb7/0x200
[  252.708696][ T8417]  do_syscall_64+0xcd/0x260
[  252.708715][ T8417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.708728][ T8417] RIP: 0033:0x7f1a1fb8e969
[  252.708740][ T8417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.708753][ T8417] RSP: 002b:00007f1a1d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  252.708767][ T8417] RAX: ffffffffffffffda RBX: 00007f1a1fdb5fa0 RCX: 00007f1a1fb8e969
[  252.708775][ T8417] RDX: 0000200000004b00 RSI: 00000000c0d05605 RDI: 0000000000000003
[  252.708784][ T8417] RBP: 00007f1a1d9f6090 R08: 0000000000000000 R09: 0000000000000000
[  252.708791][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.708799][ T8417] R13: 0000000000000000 R14: 00007f1a1fdb5fa0 R15: 00007fff09c95d18
[  252.708819][ T8417]  </TASK>
[  252.708824][ T8417] ERROR: Out of memory at tomoyo_realpath_from_path.
[  252.761367][   T30] audit: type=1400 audit(1746900090.964:546): avc:  denied  { node_bind } for  pid=8411 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  252.966988][   T24] usb 2-1: device descriptor read/8, error -71
[  253.736950][ T8437] netlink: 'syz.1.621': attribute type 10 has an invalid length.
[  253.800170][ T8437] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  253.830731][ T8437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.846113][   T30] audit: type=1400 audit(1746900092.124:547): avc:  denied  { module_request } for  pid=8435 comm="syz.3.622" kmod="crypto-echainiv(authencesn(cmac(aes),cbc(aes)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  253.870861][    C0] vkms_vblank_simulate: vblank timer overrun
[  253.889724][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[  253.899213][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[  254.142972][ T8441] syz.1.621 (8441): drop_caches: 2
[  254.363995][ T8441] syz.1.621 (8441): drop_caches: 2
[  254.755989][   T30] audit: type=1400 audit(1746900092.494:548): avc:  denied  { create } for  pid=8447 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  254.924338][   T30] audit: type=1400 audit(1746900093.194:549): avc:  denied  { write } for  pid=8447 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  255.254412][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.260955][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  255.887076][ T8475] input: syz1 as /devices/virtual/input/input39
[  256.310529][ T5860] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  256.536773][   T30] audit: type=1400 audit(1746900094.814:550): avc:  denied  { connect } for  pid=8465 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  256.564356][ T5860] usb 4-1: Using ep0 maxpacket: 32
[  256.580058][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short
[  256.589672][ T5860] usb 4-1: config 69 has an invalid interface number: 11 but max is 3
[  257.194744][ T5860] usb 4-1: config 69 contains an unexpected descriptor of type 0x2, skipping
[  257.220529][ T5860] usb 4-1: config 69 has an invalid descriptor of length 0, skipping remainder of the config
[  257.231986][ T5860] usb 4-1: config 69 has 2 interfaces, different from the descriptor's value: 4
[  257.288080][   T30] audit: type=1400 audit(1746900095.564:551): avc:  denied  { watch watch_reads } for  pid=8486 comm="syz.4.635" path="/127" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  257.317295][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'.
[  257.347139][ T5860] usb 4-1: config 69 has no interface number 0
[  257.462473][ T5860] usb 4-1: config 69 has no interface number 1
[  257.468704][ T5860] usb 4-1: config 69 interface 11 altsetting 16 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  257.482368][ T5860] usb 4-1: config 69 interface 11 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 32
[  257.537661][ T8491] netlink: 44 bytes leftover after parsing attributes in process `syz.2.637'.
[  257.566037][ T5860] usb 4-1: config 69 interface 11 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 12
[  257.679884][ T5860] usb 4-1: config 69 interface 2 has no altsetting 0
[  257.687806][ T5860] usb 4-1: config 69 interface 11 has no altsetting 0
[  258.016017][ T5860] usb 4-1: New USB device found, idVendor=2001, idProduct=3311, bcdDevice=b6.aa
[  258.037546][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.046260][ T5860] usb 4-1: Product: syz
[  258.053572][ T5860] usb 4-1: Manufacturer: syz
[  258.058236][ T5860] usb 4-1: SerialNumber: syz
[  258.103891][ T8502] netlink: 'syz.0.640': attribute type 10 has an invalid length.
[  258.127969][ T8502] syz_tun: entered promiscuous mode
[  258.203166][ T8506] bridge0: port 3(veth0_to_bridge) entered blocking state
[  258.219447][ T8506] bridge0: port 3(veth0_to_bridge) entered disabled state
[  258.384127][ T8506] veth0_to_bridge: entered allmulticast mode
[  258.387111][ T8474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  258.408929][ T8506] veth0_to_bridge: entered promiscuous mode
[  258.919414][ T8506] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  258.963329][ T8506] bridge0: port 3(veth0_to_bridge) entered blocking state
[  258.970614][ T8506] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  259.782929][ T5860] usb 4-1: USB disconnect, device number 16
[  259.840741][   T30] audit: type=1400 audit(1746900098.114:552): avc:  denied  { ioctl } for  pid=8524 comm="syz.2.647" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  260.240226][ T8532] netlink: 136 bytes leftover after parsing attributes in process `syz.0.649'.
[  260.430509][ T8532] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  261.197551][ T8545] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  261.464970][   T30] audit: type=1400 audit(1746900099.744:553): avc:  denied  { name_bind } for  pid=8548 comm="syz.4.654" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  261.841979][ T8558] overlayfs: failed to resolve './file0': -2
[  263.307751][ T8576] netlink: 152 bytes leftover after parsing attributes in process `syz.0.663'.
[  263.318023][ T8576] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  264.406452][ T8585] netlink: 1 bytes leftover after parsing attributes in process `syz.2.664'.
[  264.746843][ T8597] netlink: 1 bytes leftover after parsing attributes in process `syz.1.667'.
[  265.573042][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'.
[  265.585645][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'.
[  265.598386][ T8606] netlink: 'syz.3.671': attribute type 3 has an invalid length.
[  265.606117][ T8606] netlink: 'syz.3.671': attribute type 1 has an invalid length.
[  265.861108][   T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  266.011056][   T24] usb 2-1: Using ep0 maxpacket: 8
[  266.032981][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.196324][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  266.212068][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.233804][   T24] usb 2-1: config 0 descriptor??
[  266.243164][   T24] gspca_main: vc032x-2.14.0 probing 046d:0892
[  266.251881][ T5863] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  266.561652][ T5863] usb 1-1: Using ep0 maxpacket: 32
[  266.625523][ T5863] usb 1-1: config 0 has an invalid interface number: 9 but max is 0
[  266.747787][ T5863] usb 1-1: config 0 has no interface number 0
[  266.782141][   T24] gspca_vc032x: reg_r err -110
[  266.786995][   T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -110
[  266.802966][ T5863] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  266.818083][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.852430][ T5863] usb 1-1: Product: syz
[  266.856699][ T5863] usb 1-1: Manufacturer: syz
[  267.377320][ T5863] usb 1-1: SerialNumber: syz
[  267.392201][ T5863] usb 1-1: config 0 descriptor??
[  267.418487][ T5863] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  267.643336][ T8639] netlink: 1 bytes leftover after parsing attributes in process `syz.4.680'.
[  268.248529][ T8641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  268.259148][ T8641] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  268.268969][ T8641] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  268.343193][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'.
[  268.544176][ T8650] netlink: 1 bytes leftover after parsing attributes in process `syz.4.683'.
[  269.102344][ T5863] gspca_topro: Sensor cx0342
[  269.176145][ T5863] usb 1-1: USB disconnect, device number 22
[  269.202326][ T5862] usb 2-1: USB disconnect, device number 27
[  269.966457][ T8672] netlink: 'syz.2.694': attribute type 10 has an invalid length.
[  270.443680][ T8680] netlink: 1 bytes leftover after parsing attributes in process `syz.1.693'.
[  270.806587][ T8688] Cannot find add_set index 0 as target
[  272.214200][ T8687] netlink: 'syz.0.698': attribute type 23 has an invalid length.
[  273.073356][ T8715] input: syz1 as /devices/virtual/input/input42
[  275.491005][ T5863] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  275.850504][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  276.356800][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  276.373774][ T5863] usb 4-1: config 0 has no interface number 0
[  276.399248][ T5863] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  276.427101][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.466472][ T5863] usb 4-1: Product: syz
[  276.542979][ T5863] usb 4-1: Manufacturer: syz
[  276.553409][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  276.557904][ T5863] usb 4-1: SerialNumber: syz
[  276.561562][   T10] usb 3-1: config 0 has no interface number 0
[  276.610037][   T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.620887][ T5863] usb 4-1: config 0 descriptor??
[  276.664635][   T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.686964][   T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  276.722709][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.767515][   T10] usb 3-1: config 0 descriptor??
[  277.394321][   T30] audit: type=1400 audit(1746900115.674:554): avc:  denied  { create } for  pid=8737 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  277.421885][   T30] audit: type=1400 audit(1746900115.694:555): avc:  denied  { accept } for  pid=8737 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  277.651343][ T5863] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  277.756543][   T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.001C/input/input43
[  278.601227][ T8788] netlink: 1 bytes leftover after parsing attributes in process `syz.1.723'.
[  279.377440][   T30] audit: type=1400 audit(1746900117.634:556): avc:  denied  { recv } for  pid=5797 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.25 dest=36802 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  279.402813][    C0] vkms_vblank_simulate: vblank timer overrun
[  279.431263][   T10] holtek_kbd 0003:04D9:A055.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1
[  279.497197][   T10] usb 3-1: USB disconnect, device number 21
[  279.525685][ T5861] usb 4-1: USB disconnect, device number 17
[  279.630353][ T8798] binder: BINDER_SET_CONTEXT_MGR already set
[  279.636410][ T8798] binder: 8793:8798 ioctl 4018620d 200000000040 returned -16
[  279.658352][ T8795] fido_id[8795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  280.006180][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'.
[  280.018585][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'.
[  280.032037][ T8804] netlink: 'syz.2.728': attribute type 3 has an invalid length.
[  280.039706][ T8804] netlink: 'syz.2.728': attribute type 1 has an invalid length.
[  281.240238][   T30] audit: type=1400 audit(1746900119.514:557): avc:  denied  { write } for  pid=8812 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  281.262117][   T30] audit: type=1326 audit(1746900119.544:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cfd8e969 code=0x7ffc0000
[  281.266988][   T30] audit: type=1326 audit(1746900119.544:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cfd8e969 code=0x7ffc0000
[  281.267396][   T30] audit: type=1326 audit(1746900119.544:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd1cfd8e969 code=0x7ffc0000
[  281.267509][   T30] audit: type=1326 audit(1746900119.544:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cfd8e969 code=0x7ffc0000
[  281.267621][   T30] audit: type=1326 audit(1746900119.544:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1cfd8e969 code=0x7ffc0000
[  281.267736][   T30] audit: type=1326 audit(1746900119.544:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd1cfd8e969 code=0x7ffc0000
[  281.369375][    C0] vkms_vblank_simulate: vblank timer overrun
[  281.457182][    C0] vkms_vblank_simulate: vblank timer overrun
[  283.356982][ T8847] erofs (device nullb0): cannot find valid erofs superblock
[  283.988741][ T8849] netlink: 'syz.0.741': attribute type 10 has an invalid length.
[  284.111831][ T8849] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  284.160551][ T8851] netlink: 'syz.4.742': attribute type 10 has an invalid length.
[  284.180943][ T8849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.216496][ T8851] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  284.226334][ T8851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.347963][ T8852] syz.0.741 (8852): drop_caches: 2
[  284.354988][ T8852] syz.0.741 (8852): drop_caches: 2
[  284.808595][ T8853] syz.4.742 (8853): drop_caches: 2
[  284.869481][ T8853] syz.4.742 (8853): drop_caches: 2
[  284.895212][ T5813] block nbd2: Receive control failed (result -104)
[  285.783866][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  285.783897][   T30] audit: type=1326 audit(1746900123.854:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  286.540577][   T30] audit: type=1326 audit(1746900123.854:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  286.564171][   T30] audit: type=1326 audit(1746900123.854:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  286.587300][    C0] vkms_vblank_simulate: vblank timer overrun
[  286.601173][ T5862] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  286.836698][   T30] audit: type=1326 audit(1746900123.854:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  286.874223][   T30] audit: type=1326 audit(1746900123.854:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  286.970668][   T30] audit: type=1326 audit(1746900123.854:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  287.040571][ T5862] usb 2-1: Using ep0 maxpacket: 8
[  287.066804][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  287.136727][   T30] audit: type=1326 audit(1746900123.854:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  287.211020][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  287.314362][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  287.363872][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  287.386180][   T30] audit: type=1326 audit(1746900123.854:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  287.418741][   T30] audit: type=1326 audit(1746900123.854:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  287.465268][ T8881] netlink: 136 bytes leftover after parsing attributes in process `syz.0.750'.
[  287.474745][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  287.493598][ T8881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  287.514394][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.515230][   T30] audit: type=1326 audit(1746900123.854:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd04d8e969 code=0x7ffc0000
[  287.630672][ T5905] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  287.735523][ T5862] usb 2-1: GET_CAPABILITIES returned 0
[  287.741137][ T5862] usbtmc 2-1:16.0: can't read capabilities
[  287.774625][ T5905] usb 5-1: device descriptor read/64, error -71
[  287.912426][ T5861] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  287.991931][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  288.003975][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  288.018367][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  288.028693][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  288.052167][ T5862] usb 2-1: USB disconnect, device number 28
[  288.078855][ T5905] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  288.101325][ T5861] usb 4-1: Using ep0 maxpacket: 16
[  288.143798][ T5861] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  288.157744][ T5861] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.173033][ T5861] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.184349][ T5861] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  288.197279][ T5861] usb 4-1: config 7 interface 0 has no altsetting 0
[  288.205442][ T5861] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  288.214921][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.270549][ T5905] usb 5-1: device descriptor read/64, error -71
[  288.380858][ T5905] usb usb5-port1: attempt power cycle
[  288.664773][ T8901] netlink: 1 bytes leftover after parsing attributes in process `syz.2.755'.
[  289.115674][ T5861] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.001D/input/input44
[  289.249063][ T8903] blktrace: Concurrent blktraces are not allowed on loop6
[  289.334641][ T8906] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  290.102913][ T5905] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  290.128616][ T5861] kye 0003:0458:5010.001D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0
[  290.158307][ T5861] usb 4-1: USB disconnect, device number 18
[  290.165729][ T5905] usb 5-1: device descriptor read/8, error -71
[  291.093204][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.107703][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.120961][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.133416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.145841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.158181][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.170519][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.182901][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.195319][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.207755][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  291.225447][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  291.225460][   T30] audit: type=1400 audit(1746900129.394:601): avc:  denied  { egress } for  pid=8908 comm="syz.0.757" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  291.254781][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.674969][ T5813] Bluetooth: hci0: command tx timeout
[  291.850647][   T30] audit: type=1400 audit(1746900129.394:602): avc:  denied  { sendto } for  pid=8908 comm="syz.0.757" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  291.873682][    C0] vkms_vblank_simulate: vblank timer overrun
[  292.368157][ T8919] fido_id[8919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  292.420630][   T30] audit: type=1326 audit(1746900129.624:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  292.527682][   T30] audit: type=1326 audit(1746900129.624:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  292.892308][ T8936] netlink: 1 bytes leftover after parsing attributes in process `syz.2.759'.
[  292.960627][   T30] audit: type=1326 audit(1746900129.624:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  293.160588][   T30] audit: type=1326 audit(1746900129.624:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  293.263491][   T30] audit: type=1326 audit(1746900129.624:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  293.286740][    C0] vkms_vblank_simulate: vblank timer overrun
[  293.424448][   T30] audit: type=1326 audit(1746900129.624:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  293.533822][   T30] audit: type=1326 audit(1746900129.774:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  293.557023][    C0] vkms_vblank_simulate: vblank timer overrun
[  293.641615][   T30] audit: type=1326 audit(1746900129.774:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8914 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae978e969 code=0x7ffc0000
[  296.100471][    C1] net_ratelimit: 11933 callbacks suppressed
[  296.100485][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.118656][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.130889][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.143078][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.155223][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.167390][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.179679][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.191969][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.204145][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.216312][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.110715][    C1] net_ratelimit: 17520 callbacks suppressed
[  301.110728][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.129164][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.141486][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.153683][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.165898][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.178261][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.190532][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.202717][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  301.214939][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.227111][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.759364][ T8980] netlink: 'syz.1.772': attribute type 10 has an invalid length.
[  304.131883][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  304.260611][ T5905] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  304.290649][   T10] usb 4-1: Using ep0 maxpacket: 16
[  304.301905][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  304.316726][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  304.326177][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.337242][   T10] usb 4-1: Product: syz
[  304.343084][   T10] usb 4-1: Manufacturer: syz
[  304.347826][   T10] usb 4-1: SerialNumber: syz
[  304.358952][   T10] usb 4-1: config 0 descriptor??
[  304.375821][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  304.393040][   T10] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  304.423171][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  304.434192][ T5905] usb 3-1: config 0 has no interface number 0
[  304.440369][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.460587][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.475836][ T5905] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  304.489043][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.507093][ T5905] usb 3-1: config 0 descriptor??
[  304.979521][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  305.007282][ T5905] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.001E/input/input45
[  305.621355][   T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  305.629519][   T10] em28xx 4-1:0.0: board has no eeprom
[  305.700479][   T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  305.708399][   T10] em28xx 4-1:0.0: dvb set to bulk mode.
[  305.718478][    T9] em28xx 4-1:0.0: Binding DVB extension
[  305.733738][   T10] usb 4-1: USB disconnect, device number 19
[  305.773872][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  305.844761][    T9] em28xx 4-1:0.0: Registering input extension
[  305.853702][   T10] em28xx 4-1:0.0: Closing input extension
[  305.874023][   T10] em28xx 4-1:0.0: Freeing device
[  306.120599][    C1] net_ratelimit: 16980 callbacks suppressed
[  306.120612][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.138972][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  306.151904][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.164555][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.177102][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  306.189621][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.199523][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  306.199536][   T30] audit: type=1326 audit(1746900144.474:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94918e969 code=0x7ffc0000
[  306.202092][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.210053][   T30] audit: type=1326 audit(1746900144.474:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94918e969 code=0x7ffc0000
[  306.231273][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  306.245814][   T30] audit: type=1326 audit(1746900144.484:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa94918e969 code=0x7ffc0000
[  306.266664][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.308898][   T30] audit: type=1326 audit(1746900144.484:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94918e969 code=0x7ffc0000
[  306.313873][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  306.336716][    C0] vkms_vblank_simulate: vblank timer overrun
[  306.393594][   T30] audit: type=1326 audit(1746900144.484:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94918e969 code=0x7ffc0000
[  306.449242][   T30] audit: type=1326 audit(1746900144.484:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa94918e969 code=0x7ffc0000
[  306.472457][    C0] vkms_vblank_simulate: vblank timer overrun
[  309.660428][    C1] sched: DL replenish lagged too much
[  311.130518][    C1] net_ratelimit: 17594 callbacks suppressed
[  311.130537][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.148897][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  311.161227][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.173726][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.186009][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  311.198294][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.210595][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.222866][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  311.235115][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.247295][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.926956][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.965300][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.988489][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.018445][ T8980] syz_tun: entered promiscuous mode
[  314.049268][ T8980] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  314.160214][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.168309][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.239588][ T8997] lo speed is unknown, defaulting to 1000
[  314.313344][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.324681][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.336437][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.344554][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.352439][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.365199][ T5905] holtek_kbd 0003:04D9:A055.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1
[  314.812999][ T5905] usb 3-1: USB disconnect, device number 22
[  315.259671][ T9016] netlink: 1 bytes leftover after parsing attributes in process `syz.1.779'.
[  315.702625][ T5124] block nbd3: Receive control failed (result -104)
[  315.764423][ T9010] fido_id[9010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  316.140606][    C1] net_ratelimit: 15428 callbacks suppressed
[  316.140626][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.159026][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  316.171457][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.183962][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.196443][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  316.208866][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.223297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.230682][ T5124] Bluetooth: hci5: command tx timeout
[  316.235674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  316.253210][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.265663][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  316.461163][ T5124] Bluetooth: hci6: command tx timeout
[  316.674098][ T5905] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  316.716466][ T6615] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.754139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.773882][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  316.842051][ T8997] lo speed is unknown, defaulting to 1000
[  316.847838][ T8999] lo speed is unknown, defaulting to 1000
[  316.869111][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short
[  316.891742][ T5905] usb 3-1: config 6 has an invalid interface number: 200 but max is 0
[  316.910192][ T5905] usb 3-1: config 6 has no interface number 0
[  316.929420][ T5905] usb 3-1: config 6 interface 200 has no altsetting 0
[  316.958443][ T5905] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  316.971654][ T6615] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.990832][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.016394][ T5905] usb 3-1: Product: syz
[  317.037348][ T5905] usb 3-1: Manufacturer: syz
[  317.045143][ T5905] usb 3-1: SerialNumber: syz
[  317.228199][ T6615] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.286518][ T8999] lo speed is unknown, defaulting to 1000
[  317.474852][ T5905] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  317.512728][ T5905] dvb-usb: bulk message failed: -71 (3/0)
[  317.522094][ T6615] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.544863][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  317.594612][ T5905] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  317.644885][ T5905] usb 3-1: media controller created
[  317.728966][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  318.246169][ T5905] dvb-usb: bulk message failed: -71 (6/0)
[  318.302285][ T5124] Bluetooth: hci5: command tx timeout
[  318.326666][ T5905] dvb-usb: bulk message failed: -71 (6/0)
[  318.340742][   T30] audit: type=1400 audit(1746900156.604:629): avc:  denied  { ioctl } for  pid=9036 comm="syz.3.785" path="socket:[19991]" dev="sockfs" ino=19991 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  318.424543][ T5905] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  318.550183][ T5124] Bluetooth: hci6: command tx timeout
[  318.564159][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48
[  318.652737][ T5905] dvb-usb: schedule remote query interval to 150 msecs.
[  318.702559][ T5905] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  318.863271][    T9] dvb-usb: bulk message failed: -71 (1/0)
[  318.869180][    T9] dvb-usb: error while querying for an remote control event.
[  319.202622][ T5905] usb 3-1: USB disconnect, device number 23
[  319.843268][ T5905] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  320.139231][ T8999] chnl_net:caif_netlink_parms(): no params data found
[  320.176422][ T6615] bridge_slave_1: left allmulticast mode
[  320.223066][ T6615] bridge_slave_1: left promiscuous mode
[  320.254918][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.386286][ T5124] Bluetooth: hci5: command tx timeout
[  320.526698][ T6615] bridge_slave_0: left allmulticast mode
[  320.570743][ T6615] bridge_slave_0: left promiscuous mode
[  320.599882][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.612344][ T5124] Bluetooth: hci6: command tx timeout
[  321.150860][    C1] net_ratelimit: 13874 callbacks suppressed
[  321.150880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.169409][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  321.181836][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.194306][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.206821][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  321.219233][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.231709][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.244200][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  321.256622][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.270655][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  321.472443][ T9072] binder: BINDER_SET_CONTEXT_MGR already set
[  321.510683][ T9072] binder: 9065:9072 ioctl 4018620d 200000000040 returned -16
[  322.470451][ T5124] Bluetooth: hci5: command tx timeout
[  322.691014][ T5124] Bluetooth: hci6: command tx timeout
[  323.083897][ T5861] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  323.241721][ T5861] usb 3-1: Using ep0 maxpacket: 8
[  323.259959][ T5861] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  323.278681][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.301452][ T5861] usb 3-1: config 0 descriptor??
[  323.919786][ T8997] chnl_net:caif_netlink_parms(): no params data found
[  323.926847][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  324.279978][ T5861] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  324.289718][   T30] audit: type=1400 audit(1746900162.364:630): avc:  denied  { setopt } for  pid=9082 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  324.453334][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  324.511546][    T9] usb 4-1: config 0 has no interface number 0
[  324.526903][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.564810][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.579243][    T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  324.588915][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.659319][    T9] usb 4-1: config 0 descriptor??
[  325.221824][    T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.001F/input/input49
[  325.636368][    T9] holtek_kbd 0003:04D9:A055.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1
[  326.160610][    C1] net_ratelimit: 11794 callbacks suppressed
[  326.160629][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.178809][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.191097][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  326.203304][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.215569][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.227929][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  326.240144][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.252410][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.265347][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  326.277635][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.484385][   T10] usb 4-1: reset high-speed USB device number 20 using dummy_hcd
[  326.817136][ T5861] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  326.817168][ T5861] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  326.817356][ T5861] asix 3-1:0.0: probe with driver asix failed with error -71
[  326.841505][ T5861] usb 3-1: USB disconnect, device number 24
[  327.946638][   T30] audit: type=1400 audit(1746900165.394:631): avc:  denied  { write } for  pid=9108 comm="syz.2.796" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  327.946693][   T30] audit: type=1400 audit(1746900165.414:632): avc:  denied  { open } for  pid=9108 comm="syz.2.796" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  327.946751][   T30] audit: type=1400 audit(1746900165.484:633): avc:  denied  { ioctl } for  pid=9108 comm="syz.2.796" path="/dev/sg0" dev="devtmpfs" ino=750 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  328.068552][    C0] vkms_vblank_simulate: vblank timer overrun
[  328.522611][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.522702][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.522872][ T8997] bridge_slave_0: entered allmulticast mode
[  328.528666][ T8997] bridge_slave_0: entered promiscuous mode
[  328.531963][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.532059][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.532179][ T8997] bridge_slave_1: entered allmulticast mode
[  328.533760][ T8997] bridge_slave_1: entered promiscuous mode
[  328.534644][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.534727][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.534840][ T8999] bridge_slave_0: entered allmulticast mode
[  328.536424][ T8999] bridge_slave_0: entered promiscuous mode
[  328.538455][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.538529][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.538645][ T8999] bridge_slave_1: entered allmulticast mode
[  328.540103][ T8999] bridge_slave_1: entered promiscuous mode
[  328.589814][    C0] vkms_vblank_simulate: vblank timer overrun
[  331.170496][    C1] net_ratelimit: 17020 callbacks suppressed
[  331.170516][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  331.170839][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  331.171120][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  331.171350][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  331.171601][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  331.171876][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  331.172103][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  331.172338][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  331.172616][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  331.172869][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  336.180619][    C1] net_ratelimit: 21110 callbacks suppressed
[  336.180633][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  336.180840][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.181042][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.181217][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  336.181404][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.181610][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.181807][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  336.182011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.182287][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.182495][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  341.190744][    C0] net_ratelimit: 16995 callbacks suppressed
[  341.190763][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  341.190997][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  341.191379][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  341.191814][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  341.192000][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  341.192150][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  341.192531][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  341.192958][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  341.193205][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  341.193290][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  344.265679][   T10] usb 4-1: device descriptor read/64, error -110
[  346.200448][    C1] net_ratelimit: 14587 callbacks suppressed
[  346.200474][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  346.200811][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  346.201182][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  346.201481][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  346.201611][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  346.201941][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  346.202305][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  346.202681][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  346.202721][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  346.203048][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  351.211005][    C1] net_ratelimit: 13744 callbacks suppressed
[  351.211026][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  351.211458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  351.211487][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  351.211797][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  351.212172][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  351.212603][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  351.212687][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  351.212939][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  351.213325][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  351.213735][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  353.737911][   T30] audit: type=1400 audit(1746900192.014:634): avc:  denied  { recv } for  pid=54 comm="kworker/u8:3" saddr=10.128.0.169 src=36806 daddr=10.128.1.25 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  356.221001][    C1] net_ratelimit: 13687 callbacks suppressed
[  356.221020][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  356.221448][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  356.221577][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  356.221788][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  356.222183][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  356.222608][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  356.222896][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  356.222944][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  356.223324][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  356.223736][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  361.230659][    C1] net_ratelimit: 14457 callbacks suppressed
[  361.230679][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  361.230738][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  361.231029][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  361.231415][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  361.231837][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  361.231963][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  361.232196][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  361.232880][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  361.233493][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  361.234097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  366.240634][    C1] net_ratelimit: 13796 callbacks suppressed
[  366.240661][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.241043][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  366.241440][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  366.241449][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.241901][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.242267][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  366.242674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.242826][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  366.243140][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.243518][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  371.251027][    C1] net_ratelimit: 14181 callbacks suppressed
[  371.251047][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.251144][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  371.251486][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.251840][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  371.252235][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.252392][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  371.252647][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.252982][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  371.253375][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.253629][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  376.260495][    C1] net_ratelimit: 13838 callbacks suppressed
[  376.260516][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  376.260750][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  376.260907][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.261340][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.261674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  376.262004][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  376.262047][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.262465][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.263014][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  376.263617][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  378.791449][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.804378][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  381.270799][    C1] net_ratelimit: 15549 callbacks suppressed
[  381.270819][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.271156][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  381.271541][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.271568][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  381.271954][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.272283][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  381.272665][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.272815][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  381.273078][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.273390][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.280544][    C1] net_ratelimit: 15714 callbacks suppressed
[  386.280562][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.280949][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  386.280961][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.281413][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.281771][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.282166][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  386.282178][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.282649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.283011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.283397][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  391.290701][    C1] net_ratelimit: 17628 callbacks suppressed
[  391.290727][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.291074][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  391.291458][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.291511][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  391.291874][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.292205][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  391.292574][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.292937][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  391.292987][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.293324][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  396.300587][    C1] net_ratelimit: 18370 callbacks suppressed
[  396.300605][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.300938][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  396.301302][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.301359][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  396.301703][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.302036][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  396.302424][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.302765][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  396.302825][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.303156][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.310531][    C0] net_ratelimit: 18378 callbacks suppressed
[  401.310553][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  401.310662][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.311022][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.311441][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.311774][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.311998][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  401.312134][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.312547][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.312878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.313256][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.320435][    C0] net_ratelimit: 18235 callbacks suppressed
[  406.320454][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  406.320557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.320973][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.321309][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  406.321704][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.321863][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  406.322135][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.322472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  406.322855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.323292][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  411.330738][    C0] net_ratelimit: 16260 callbacks suppressed
[  411.330758][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  411.330884][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.331217][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  411.331593][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.332014][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.332109][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  411.332357][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  411.332729][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.333134][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.333431][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  416.340501][    C1] net_ratelimit: 13910 callbacks suppressed
[  416.340521][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.340943][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.341021][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  416.341280][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  416.341674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.342086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.342262][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  416.342433][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  416.343157][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  416.343763][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  421.350464][    C0] net_ratelimit: 13841 callbacks suppressed
[  421.350486][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  421.350837][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.351267][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.351608][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  421.351747][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  421.351983][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.352421][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.352798][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  421.352941][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  421.353171][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.360656][    C1] net_ratelimit: 13926 callbacks suppressed
[  426.360677][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  426.361083][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.361152][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  426.361501][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.361838][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  426.362303][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  426.362887][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  426.363476][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  426.364057][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  426.364665][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  431.370418][    C0] net_ratelimit: 13951 callbacks suppressed
[  431.370438][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  431.370977][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  431.371358][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.371598][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  431.371789][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.372126][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  431.372519][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.372791][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  431.372951][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.373287][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  436.380477][    C1] net_ratelimit: 13888 callbacks suppressed
[  436.380497][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  436.380889][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.381315][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.381518][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  436.381657][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  436.382031][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.382447][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.382826][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  436.383473][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  436.384136][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  437.388478][ T5124] Bluetooth: hci6: command 0x0406 tx timeout
[  437.388537][ T5124] Bluetooth: hci5: command 0x0406 tx timeout
[  440.234629][   T10] usb 4-1: reset high-speed USB device number 20 using dummy_hcd
[  441.390764][    C1] net_ratelimit: 14553 callbacks suppressed
[  441.390785][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.390841][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  441.391148][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  441.391529][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.391935][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.392255][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  441.392271][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  441.392665][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.393091][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.393432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  441.996496][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  442.005116][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  446.400595][    C1] net_ratelimit: 15348 callbacks suppressed
[  446.400615][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.401021][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.401355][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  446.401380][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  446.401725][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.402148][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.402466][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  446.402799][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  446.402855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.403262][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.410640][    C1] net_ratelimit: 17417 callbacks suppressed
[  451.410659][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.410680][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  451.411086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.411418][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  451.411788][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.412131][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  451.412200][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.412529][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  451.412901][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.413310][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.420982][    C1] net_ratelimit: 15410 callbacks suppressed
[  456.421003][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.421236][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  456.421395][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.421811][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.422147][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.422466][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  456.422543][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.422957][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.423313][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.423683][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  461.430660][    C1] net_ratelimit: 13897 callbacks suppressed
[  461.430680][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.431034][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  461.431310][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  461.431414][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.431827][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.432162][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  461.432508][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  461.433131][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  461.433716][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  461.434298][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  466.440476][    C1] net_ratelimit: 13675 callbacks suppressed
[  466.440494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.440712][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  466.440889][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.441304][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.441639][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.441930][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  466.442020][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.442460][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.442790][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.443169][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.450664][    C1] net_ratelimit: 13377 callbacks suppressed
[  471.450684][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  471.450891][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  471.451067][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.451508][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.451850][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  471.452234][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  471.452907][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  471.453564][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  471.454240][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  471.454899][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  476.460466][    C1] net_ratelimit: 14398 callbacks suppressed
[  476.460487][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.460911][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.461245][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  476.461439][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  476.461619][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.462051][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.462400][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  476.462649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  476.463335][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  476.463943][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  478.565712][   T10] usb 4-1: device descriptor read/64, error -32
[  481.470629][    C0] net_ratelimit: 13962 callbacks suppressed
[  481.470649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  481.470750][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.471176][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.471516][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  481.471905][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.472038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  481.472896][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  481.473571][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  481.474230][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  481.474891][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  486.480454][    C1] net_ratelimit: 14277 callbacks suppressed
[  486.480474][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.480824][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  486.481200][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.481350][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  486.481612][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.481954][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  486.482329][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  486.482742][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  486.483438][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  486.488838][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:07:f9:3d:24:a2, vlan:0)
[  487.592749][   T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  487.592773][   T31]       Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0
[  487.592785][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  487.592793][   T31] task:kworker/0:0     state:D stack:21848 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
[  487.592847][   T31] Workqueue: usb_hub_wq hub_event
[  487.592872][   T31] Call Trace:
[  487.592878][   T31]  <TASK>
[  487.592891][   T31]  __schedule+0x116f/0x5de0
[  487.592918][   T31]  ? __lock_acquire+0x9f1/0x1ba0
[  487.592954][   T31]  ? __pfx___schedule+0x10/0x10
[  487.592981][   T31]  ? find_held_lock+0x2b/0x80
[  487.593002][   T31]  ? schedule+0x2d7/0x3a0
[  487.593025][   T31]  schedule+0xe7/0x3a0
[  487.593046][   T31]  schedule_preempt_disabled+0x13/0x30
[  487.593067][   T31]  __mutex_lock+0x6c7/0xb90
[  487.593092][   T31]  ? hub_event+0x5bd/0x4fa0
[  487.593114][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  487.593136][   T31]  ? __pfx___pm_runtime_barrier+0x10/0x10
[  487.593165][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  487.593187][   T31]  ? mark_held_locks+0x49/0x80
[  487.593211][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  487.593234][   T31]  ? hub_event+0x5bd/0x4fa0
[  487.593253][   T31]  hub_event+0x5bd/0x4fa0
[  487.593278][   T31]  ? find_held_lock+0x2b/0x80
[  487.593302][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  487.593324][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  487.593352][   T31]  ? __pfx_hub_event+0x10/0x10
[  487.593372][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[  487.593409][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.593433][   T31]  process_one_work+0x9cc/0x1b70
[  487.593463][   T31]  ? __pfx_process_one_work+0x10/0x10
[  487.593489][   T31]  ? assign_work+0x1a0/0x250
[  487.593509][   T31]  worker_thread+0x6c8/0xf10
[  487.593538][   T31]  ? __pfx_worker_thread+0x10/0x10
[  487.593556][   T31]  kthread+0x3c2/0x780
[  487.593574][   T31]  ? __pfx_kthread+0x10/0x10
[  487.593589][   T31]  ? __pfx_kthread+0x10/0x10
[  487.593604][   T31]  ? __pfx_kthread+0x10/0x10
[  487.593619][   T31]  ? __pfx_kthread+0x10/0x10
[  487.593634][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.593659][   T31]  ? __pfx_kthread+0x10/0x10
[  487.593677][   T31]  ret_from_fork+0x45/0x80
[  487.593695][   T31]  ? __pfx_kthread+0x10/0x10
[  487.593711][   T31]  ret_from_fork_asm+0x1a/0x30
[  487.593748][   T31]  </TASK>
[  487.593850][   T31] INFO: task kworker/u8:8:5900 blocked for more than 143 seconds.
[  487.593863][   T31]       Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0
[  487.593874][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  487.593881][   T31] task:kworker/u8:8    state:D stack:22664 pid:5900  tgid:5900  ppid:2      task_flags:0x4208060 flags:0x00004000
[  487.593931][   T31] Workqueue: events_unbound linkwatch_event
[  487.593955][   T31] Call Trace:
[  487.593960][   T31]  <TASK>
[  487.593970][   T31]  __schedule+0x116f/0x5de0
[  487.593990][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  487.594014][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  487.594045][   T31]  ? __pfx___schedule+0x10/0x10
[  487.594070][   T31]  ? find_held_lock+0x2b/0x80
[  487.594091][   T31]  ? schedule+0x2d7/0x3a0
[  487.594114][   T31]  schedule+0xe7/0x3a0
[  487.594134][   T31]  schedule_preempt_disabled+0x13/0x30
[  487.594155][   T31]  __mutex_lock+0x6c7/0xb90
[  487.594180][   T31]  ? linkwatch_event+0x51/0xc0
[  487.594203][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  487.594225][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  487.594256][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[  487.594289][   T31]  ? linkwatch_event+0x51/0xc0
[  487.594310][   T31]  ? rtnl_lock+0x9/0x20
[  487.594331][   T31]  linkwatch_event+0x51/0xc0
[  487.594353][   T31]  ? __pfx_linkwatch_event+0x10/0x10
[  487.594376][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.594396][   T31]  process_one_work+0x9cc/0x1b70
[  487.594421][   T31]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  487.594443][   T31]  ? __pfx_process_one_work+0x10/0x10
[  487.594469][   T31]  ? assign_work+0x1a0/0x250
[  487.594488][   T31]  worker_thread+0x6c8/0xf10
[  487.594518][   T31]  ? __pfx_worker_thread+0x10/0x10
[  487.594536][   T31]  kthread+0x3c2/0x780
[  487.594554][   T31]  ? __pfx_kthread+0x10/0x10
[  487.594568][   T31]  ? __pfx_kthread+0x10/0x10
[  487.594584][   T31]  ? __pfx_kthread+0x10/0x10
[  487.594599][   T31]  ? __pfx_kthread+0x10/0x10
[  487.594614][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.594634][   T31]  ? __pfx_kthread+0x10/0x10
[  487.594658][   T31]  ret_from_fork+0x45/0x80
[  487.594674][   T31]  ? __pfx_kthread+0x10/0x10
[  487.594690][   T31]  ret_from_fork_asm+0x1a/0x30
[  487.594725][   T31]  </TASK>
[  487.594736][   T31] INFO: task kworker/u8:13:6615 blocked for more than 143 seconds.
[  487.594747][   T31]       Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0
[  487.594757][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  487.594764][   T31] task:kworker/u8:13   state:D stack:23512 pid:6615  tgid:6615  ppid:2      task_flags:0x4208160 flags:0x00004000
[  487.594814][   T31] Workqueue: netns cleanup_net
[  487.594835][   T31] Call Trace:
[  487.594840][   T31]  <TASK>
[  487.594850][   T31]  __schedule+0x116f/0x5de0
[  487.594870][   T31]  ? try_to_wake_up+0x157/0x1680
[  487.594903][   T31]  ? __pfx___schedule+0x10/0x10
[  487.594930][   T31]  ? find_held_lock+0x2b/0x80
[  487.594951][   T31]  ? schedule+0x2d7/0x3a0
[  487.594974][   T31]  schedule+0xe7/0x3a0
[  487.594995][   T31]  schedule_preempt_disabled+0x13/0x30
[  487.595015][   T31]  __mutex_lock+0x6c7/0xb90
[  487.595039][   T31]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  487.595065][   T31]  ? ieee80211_unregister_hw+0x4d/0x3a0
[  487.595095][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  487.595133][   T31]  ? ieee80211_unregister_hw+0x4d/0x3a0
[  487.595158][   T31]  ieee80211_unregister_hw+0x4d/0x3a0
[  487.595184][   T31]  hwsim_exit_net+0x3ac/0x7d0
[  487.595208][   T31]  ? __pfx_hwsim_exit_net+0x10/0x10
[  487.595228][   T31]  ? ip_vs_sync_net_cleanup+0x72/0xb0
[  487.595248][   T31]  ? __ip_vs_dev_cleanup_batch+0xb1/0x290
[  487.595275][   T31]  ? __pfx_hwsim_exit_net+0x10/0x10
[  487.595296][   T31]  ops_exit_list+0xb0/0x180
[  487.595317][   T31]  cleanup_net+0x5c1/0xb30
[  487.595339][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  487.595358][   T31]  ? lock_acquire+0x62/0x350
[  487.595387][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.595410][   T31]  process_one_work+0x9cc/0x1b70
[  487.595436][   T31]  ? __pfx_batadv_nc_worker+0x10/0x10
[  487.595458][   T31]  ? __pfx_process_one_work+0x10/0x10
[  487.595484][   T31]  ? assign_work+0x1a0/0x250
[  487.595504][   T31]  worker_thread+0x6c8/0xf10
[  487.595530][   T31]  ? __kthread_parkme+0x19e/0x250
[  487.595555][   T31]  ? __pfx_worker_thread+0x10/0x10
[  487.595573][   T31]  kthread+0x3c2/0x780
[  487.595590][   T31]  ? __pfx_kthread+0x10/0x10
[  487.595604][   T31]  ? __pfx_kthread+0x10/0x10
[  487.595619][   T31]  ? __pfx_kthread+0x10/0x10
[  487.595634][   T31]  ? __pfx_kthread+0x10/0x10
[  487.595653][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.595673][   T31]  ? __pfx_kthread+0x10/0x10
[  487.595690][   T31]  ret_from_fork+0x45/0x80
[  487.595706][   T31]  ? __pfx_kthread+0x10/0x10
[  487.595722][   T31]  ret_from_fork_asm+0x1a/0x30
[  487.595758][   T31]  </TASK>
[  487.595767][   T31] INFO: task syz-executor:8999 blocked for more than 143 seconds.
[  487.595778][   T31]       Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0
[  487.595788][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  487.595795][   T31] task:syz-executor    state:D stack:24648 pid:8999  tgid:8999  ppid:8998   task_flags:0x400140 flags:0x00000000
[  487.595845][   T31] Call Trace:
[  487.595850][   T31]  <TASK>
[  487.595860][   T31]  __schedule+0x116f/0x5de0
[  487.595880][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  487.595909][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  487.595940][   T31]  ? __pfx___schedule+0x10/0x10
[  487.595966][   T31]  ? find_held_lock+0x2b/0x80
[  487.595987][   T31]  ? schedule+0x2d7/0x3a0
[  487.596011][   T31]  schedule+0xe7/0x3a0
[  487.596031][   T31]  schedule_preempt_disabled+0x13/0x30
[  487.596052][   T31]  __mutex_lock+0x6c7/0xb90
[  487.596076][   T31]  ? rtnl_newlink+0x600/0x2000
[  487.596096][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  487.596118][   T31]  ? cap_capable+0xb3/0x250
[  487.596144][   T31]  ? ns_capable+0xd7/0x110
[  487.596169][   T31]  ? rtnl_newlink+0x600/0x2000
[  487.596187][   T31]  rtnl_newlink+0x600/0x2000
[  487.596214][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  487.596230][   T31]  ? find_held_lock+0x2b/0x80
[  487.596250][   T31]  ? avc_has_perm_noaudit+0x117/0x3b0
[  487.596272][   T31]  ? avc_has_perm_noaudit+0x149/0x3b0
[  487.596312][   T31]  ? find_held_lock+0x2b/0x80
[  487.596331][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  487.596349][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  487.596365][   T31]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  487.596385][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[  487.596403][   T31]  rtnetlink_rcv_msg+0x95b/0xe90
[  487.596425][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  487.596443][   T31]  ? __pfx_avc_has_perm+0x10/0x10
[  487.596471][   T31]  netlink_rcv_skb+0x16a/0x440
[  487.596492][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  487.596513][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  487.596548][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  487.596572][   T31]  netlink_unicast+0x53a/0x7f0
[  487.596596][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  487.596624][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  487.596667][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.596698][   T31]  __sys_sendto+0x495/0x510
[  487.596725][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  487.596760][   T31]  ? __pfx_task_mm_cid_work+0x10/0x10
[  487.596790][   T31]  ? xfd_validate_state+0x5d/0x180
[  487.596810][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.596832][   T31]  __x64_sys_sendto+0xe0/0x1c0
[  487.596857][   T31]  ? do_syscall_64+0x91/0x260
[  487.596880][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  487.596901][   T31]  do_syscall_64+0xcd/0x260
[  487.596926][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.596945][   T31] RIP: 0033:0x7f4d351907fc
[  487.596960][   T31] RSP: 002b:00007fff36e9ac90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  487.596977][   T31] RAX: ffffffffffffffda RBX: 00007f4d35ee4620 RCX: 00007f4d351907fc
[  487.596989][   T31] RDX: 0000000000000068 RSI: 00007f4d35ee4670 RDI: 0000000000000003
[  487.597000][   T31] RBP: 0000000000000000 R08: 00007fff36e9ace4 R09: 000000000000000c
[  487.597010][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  487.597021][   T31] R13: 0000000000000000 R14: 00007f4d35ee4670 R15: 0000000000000000
[  487.597045][   T31]  </TASK>
[  487.597061][   T31] 
[  487.597061][   T31] Showing all locks held in the system:
[  487.597068][   T31] 1 lock held by kthreadd/2:
[  487.597080][   T31] 4 locks held by kworker/0:0/9:
[  487.597090][   T31]  #0: ffff88801f2d1d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.597135][   T31]  #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.597178][   T31]  #2: ffff888029155198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  487.597221][   T31]  #3: ffff888145320510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x5bd/0x4fa0
[  487.597265][   T31] 7 locks held by kworker/0:1/10:
[  487.597276][   T31] 4 locks held by kworker/u8:0/12:
[  487.597286][   T31] 4 locks held by kworker/u8:1/13:
[  487.597297][   T31] 1 lock held by khungtaskd/31:
[  487.597307][   T31]  #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  487.597357][   T31] 4 locks held by kworker/u8:2/36:
[  487.597368][   T31] 4 locks held by kworker/u8:3/54:
[  487.597379][   T31] 5 locks held by kworker/u8:4/70:
[  487.597395][   T31] 4 locks held by kworker/u8:5/1101:
[  487.597405][   T31] 4 locks held by kworker/u8:6/1154:
[  487.597426][   T31] 3 locks held by kworker/u8:7/3014:
[  487.597436][   T31] 3 locks held by kworker/R-ipv6_/3164:
[  487.597446][   T31]  #0: ffff8880316e5948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.597490][   T31]  #1: ffffc9000bea7cb0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.597534][   T31]  #2: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30
[  487.597579][   T31] 2 locks held by kworker/R-bat_e/3394:
[  487.597590][   T31] 2 locks held by klogd/5173:
[  487.597600][   T31] 3 locks held by udevd/5184:
[  487.597609][   T31] 2 locks held by getty/5572:
[  487.597619][   T31]  #0: ffff888035c6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  487.597676][   T31]  #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  487.597723][   T31] 3 locks held by syz-executor/5797:
[  487.597733][   T31] 5 locks held by kworker/u9:2/5812:
[  487.597743][   T31]  #0: ffff88801203b148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.597786][   T31]  #1: ffffc90002e1fd18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.597825][   T31]  #2: ffff88804d1b8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430
[  487.597868][   T31]  #3: ffff88804d1b8078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40
[  487.597908][   T31]  #4: ffffffff90392848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330
[  487.597951][   T31] 6 locks held by kworker/u9:3/5813:
[  487.597960][   T31]  #0: ffff888055b2a148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.598003][   T31]  #1: ffffc90003f67d18 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.598047][   T31]  #2: ffff88804d1bcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430
[  487.598087][   T31]  #3: ffff88804d1bc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x146/0xb40
[  487.598128][   T31]  #4: ffffffff90392848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330
[  487.598168][   T31]  #5: ffff8880333adb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  487.598221][   T31] 3 locks held by kworker/0:4/5860:
[  487.598230][   T31]  #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.598274][   T31]  #1: ffffc9000447fd18 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.598316][   T31]  #2: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  487.598365][   T31] 3 locks held by kworker/0:5/5861:
[  487.598374][   T31]  #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.598418][   T31]  #1: ffffc9000448fd18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.598460][   T31]  #2: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170
[  487.598512][   T31] 3 locks held by kworker/u8:8/5900:
[  487.598522][   T31]  #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.598565][   T31]  #1: ffffc900030dfd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.598607][   T31]  #2: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  487.598658][   T31] 2 locks held by kworker/1:7/5906:
[  487.598669][   T31] 4 locks held by kworker/u8:9/5984:
[  487.598679][   T31] 4 locks held by kworker/u8:10/6077:
[  487.598689][   T31] 3 locks held by kworker/u8:11/6612:
[  487.598699][   T31] 5 locks held by kworker/u8:12/6614:
[  487.598709][   T31] 4 locks held by kworker/u8:13/6615:
[  487.598718][   T31]  #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  487.598761][   T31]  #1: ffffc90010067d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  487.598803][   T31]  #2: ffffffff9010ef50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30
[  487.598847][   T31]  #3: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0
[  487.598897][   T31] 4 locks held by syz-executor/8997:
[  487.598908][   T31] 2 locks held by syz-executor/8999:
[  487.598917][   T31]  #0: ffffffff8f4ee7a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[  487.598963][   T31]  #1: ffffffff90124de8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000
[  487.599008][   T31] 6 locks held by syz.1.795/9106:
[  487.599018][   T31] 1 lock held by syz.1.795/9107:
[  487.599028][   T31] 2 locks held by syz.1.795/9113:
[  487.599038][   T31] 2 locks held by syz.2.796/9108:
[  487.599047][   T31]  #0: ffff888047742008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[  487.599095][   T31]  #1: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  487.599143][   T31] 3 locks held by sed/9116:
[  487.599152][   T31] 2 locks held by kworker/0:3/9118:
[  487.599162][   T31] 
[  487.599166][   T31] =============================================
[  487.599166][   T31] 
[  487.599173][   T31] NMI backtrace for cpu 1
[  487.599184][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  487.599204][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  487.599213][   T31] Call Trace:
[  487.599219][   T31]  <TASK>
[  487.599224][   T31]  dump_stack_lvl+0x116/0x1f0
[  487.599244][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  487.599262][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  487.599279][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  487.599297][   T31]  watchdog+0xf70/0x12c0
[  487.599318][   T31]  ? __pfx_watchdog+0x10/0x10
[  487.599332][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  487.599353][   T31]  ? __kthread_parkme+0x19e/0x250
[  487.599377][   T31]  ? __pfx_watchdog+0x10/0x10
[  487.599392][   T31]  kthread+0x3c2/0x780
[  487.599407][   T31]  ? __pfx_kthread+0x10/0x10
[  487.599421][   T31]  ? __pfx_kthread+0x10/0x10
[  487.599434][   T31]  ? __pfx_kthread+0x10/0x10
[  487.599448][   T31]  ? __pfx_kthread+0x10/0x10
[  487.599462][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.599480][   T31]  ? __pfx_kthread+0x10/0x10
[  487.599495][   T31]  ret_from_fork+0x45/0x80
[  487.599509][   T31]  ? __pfx_kthread+0x10/0x10
[  487.599524][   T31]  ret_from_fork_asm+0x1a/0x30
[  487.599557][   T31]  </TASK>
[  487.599564][   T31] Sending NMI from CPU 1 to CPUs 0:
[  487.599586][    C0] NMI backtrace for cpu 0
[  487.599598][    C0] CPU: 0 UID: 0 PID: 6614 Comm: kworker/u8:12 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  487.599615][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  487.599622][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
[  487.599639][    C0] RIP: 0010:__lock_acquire+0x6f2/0x1ba0
[  487.599659][    C0] Code: ff ff 89 dd 0f 87 ba 0e 00 00 49 8b 44 eb 08 48 85 c0 0f 85 cc f9 ff ff e9 9e f9 ff ff 48 63 44 24 10 48 0f a3 05 5e b7 12 14 <0f> 82 b7 fd ff ff 90 e8 72 cf 35 03 85 c0 74 0e 8b 05 98 3b ed 0e
[  487.599671][    C0] RSP: 0018:ffffc90000006c80 EFLAGS: 00000047
[  487.599680][    C0] RAX: 0000000000000007 RBX: ffff8880488d0b90 RCX: 0000000000000020
[  487.599689][    C0] RDX: 0000000000000000 RSI: ffff8880488d0b90 RDI: ffff8880488d0000
[  487.599696][    C0] RBP: ffff8880488d0af0 R08: 0000000000000000 R09: 0000000000000000
[  487.599705][    C0] R10: 0000000000000000 R11: ffffffff8e3bf5c0 R12: 0000000000000003
[  487.599712][    C0] R13: 0000000000000001 R14: ffff8880488d0000 R15: 0000000000000000
[  487.599720][    C0] FS:  0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000
[  487.599734][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  487.599743][    C0] CR2: 00007f2731e6db4c CR3: 0000000040f43000 CR4: 00000000003526f0
[  487.599761][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  487.599769][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  487.599777][    C0] Call Trace:
[  487.599781][    C0]  <IRQ>
[  487.599787][    C0]  ? lock_acquire+0x179/0x350
[  487.599806][    C0]  lock_acquire+0x179/0x350
[  487.599822][    C0]  ? unwind_next_frame+0xbd/0x20a0
[  487.599838][    C0]  ? unwind_next_frame+0x3f4/0x20a0
[  487.599852][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  487.599869][    C0]  unwind_next_frame+0xd1/0x20a0
[  487.599883][    C0]  ? unwind_next_frame+0xbd/0x20a0
[  487.599901][    C0]  ? br_nf_pre_routing_ipv6+0x3cd/0x8c0
[  487.599916][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  487.599932][    C0]  arch_stack_walk+0x94/0x100
[  487.599948][    C0]  ? br_nf_pre_routing_ipv6+0x3cd/0x8c0
[  487.599962][    C0]  stack_trace_save+0x8e/0xc0
[  487.599976][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  487.599991][    C0]  ? stack_trace_save+0x8e/0xc0
[  487.600006][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  487.600020][    C0]  ? stack_depot_save_flags+0x28/0xa50
[  487.600037][    C0]  kasan_save_stack+0x33/0x60
[  487.600055][    C0]  ? kasan_save_stack+0x33/0x60
[  487.600071][    C0]  ? kasan_save_track+0x14/0x30
[  487.600088][    C0]  ? __kasan_slab_alloc+0x89/0x90
[  487.600099][    C0]  ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  487.600118][    C0]  ? kmalloc_reserve+0x18b/0x2c0
[  487.600133][    C0]  ? __alloc_skb+0x166/0x380
[  487.600143][    C0]  ? fdb_notify+0xa4/0x1a0
[  487.600157][    C0]  ? br_fdb_update+0x32b/0x7d0
[  487.600172][    C0]  ? br_handle_frame_finish+0xd21/0x1c20
[  487.600182][    C0]  ? br_nf_hook_thresh+0x301/0x410
[  487.600193][    C0]  ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0
[  487.600206][    C0]  ? br_nf_pre_routing_ipv6+0x3cd/0x8c0
[  487.600229][    C0]  kasan_save_track+0x14/0x30
[  487.600246][    C0]  __kasan_slab_alloc+0x89/0x90
[  487.600258][    C0]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  487.600276][    C0]  ? kmalloc_reserve+0x18b/0x2c0
[  487.600291][    C0]  ? trace_kmem_cache_alloc+0x28/0xc0
[  487.600306][    C0]  kmalloc_reserve+0x18b/0x2c0
[  487.600322][    C0]  __alloc_skb+0x166/0x380
[  487.600333][    C0]  ? __pfx___alloc_skb+0x10/0x10
[  487.600351][    C0]  fdb_notify+0xa4/0x1a0
[  487.600366][    C0]  br_fdb_update+0x32b/0x7d0
[  487.600384][    C0]  ? __pfx_br_fdb_update+0x10/0x10
[  487.600401][    C0]  ? br_allowed_ingress+0xdd/0x11b0
[  487.600425][    C0]  br_handle_frame_finish+0xd21/0x1c20
[  487.600441][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  487.600467][    C0]  ? ip6t_do_table+0xc20/0x1be0
[  487.600487][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  487.600504][    C0]  ? nf_hook_slow+0x132/0x200
[  487.600527][    C0]  br_nf_hook_thresh+0x301/0x410
[  487.600541][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  487.600566][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  487.600582][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  487.600605][    C0]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  487.600626][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  487.600648][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  487.600672][    C0]  br_nf_pre_routing_finish_ipv6+0x76a/0xfb0
[  487.600687][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  487.600713][    C0]  br_nf_pre_routing_ipv6+0x3cd/0x8c0
[  487.600729][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  487.600744][    C0]  ? lock_acquire+0x179/0x350
[  487.600767][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  487.600783][    C0]  ? net_generic+0xea/0x2a0
[  487.600807][    C0]  br_nf_pre_routing+0x860/0x15b0
[  487.600825][    C0]  br_handle_frame+0xad5/0x14a0
[  487.600841][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  487.600857][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  487.600883][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  487.600902][    C0]  __netif_receive_skb_core.constprop.0+0xa23/0x4a00
[  487.600927][    C0]  ? kasan_quarantine_put+0xc0/0x240
[  487.600951][    C0]  ? kmem_cache_free+0x2d4/0x4d0
[  487.600974][    C0]  ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10
[  487.600998][    C0]  ? kfree_skbmem+0x1a4/0x1f0
[  487.601018][    C0]  ? sk_skb_reason_drop+0x136/0x1a0
[  487.601037][    C0]  ? ip6_mc_input+0x46c/0xfd0
[  487.601057][    C0]  ? __pfx_ip6_mc_input+0x10/0x10
[  487.601078][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  487.601102][    C0]  ? process_backlog+0x3f0/0x15e0
[  487.601123][    C0]  __netif_receive_skb_one_core+0xb0/0x1e0
[  487.601145][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  487.601169][    C0]  ? lock_acquire+0x179/0x350
[  487.601193][    C0]  ? process_backlog+0x3f0/0x15e0
[  487.601214][    C0]  __netif_receive_skb+0x1d/0x160
[  487.601235][    C0]  process_backlog+0x442/0x15e0
[  487.601259][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  487.601282][    C0]  net_rx_action+0xa97/0x1010
[  487.601308][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  487.601330][    C0]  ? mark_held_locks+0x49/0x80
[  487.601351][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  487.601369][    C0]  ? tmigr_handle_remote+0x132/0x380
[  487.601391][    C0]  ? run_timer_base+0x121/0x190
[  487.601411][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  487.601433][    C0]  handle_softirqs+0x216/0x8e0
[  487.601453][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  487.601472][    C0]  ? kernel_fpu_end+0x59/0x70
[  487.601490][    C0]  do_softirq+0xb2/0xf0
[  487.601506][    C0]  </IRQ>
[  487.601511][    C0]  <TASK>
[  487.601517][    C0]  __local_bh_enable_ip+0x100/0x120
[  487.601535][    C0]  kernel_fpu_end+0x5e/0x70
[  487.601552][    C0]  blake2s_compress+0x7f/0xe0
[  487.601574][    C0]  blake2s_update+0x28b/0x360
[  487.601593][    C0]  ? __blake2s_init+0x357/0x480
[  487.601615][    C0]  blake2s.constprop.0+0xb1/0x100
[  487.601636][    C0]  ? __pfx_blake2s.constprop.0+0x10/0x10
[  487.601659][    C0]  ? __pfx_down_write+0x10/0x10
[  487.601683][    C0]  wg_cookie_add_mac_to_packet+0x52/0x1c0
[  487.601706][    C0]  wg_packet_send_handshake_initiation+0x1c4/0x360
[  487.601726][    C0]  ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10
[  487.601745][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  487.601774][    C0]  wg_packet_handshake_send_worker+0x1c/0x30
[  487.601792][    C0]  process_one_work+0x9cc/0x1b70
[  487.601812][    C0]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  487.601831][    C0]  ? __pfx_process_one_work+0x10/0x10
[  487.601850][    C0]  ? assign_work+0x1a0/0x250
[  487.601866][    C0]  worker_thread+0x6c8/0xf10
[  487.601887][    C0]  ? __pfx_worker_thread+0x10/0x10
[  487.601908][    C0]  kthread+0x3c2/0x780
[  487.601922][    C0]  ? __pfx_kthread+0x10/0x10
[  487.601935][    C0]  ? __pfx_kthread+0x10/0x10
[  487.601949][    C0]  ? __pfx_kthread+0x10/0x10
[  487.601962][    C0]  ? __pfx_kthread+0x10/0x10
[  487.601976][    C0]  ? rcu_is_watching+0x12/0xc0
[  487.601994][    C0]  ? __pfx_kthread+0x10/0x10
[  487.602008][    C0]  ret_from_fork+0x45/0x80
[  487.602022][    C0]  ? __pfx_kthread+0x10/0x10
[  487.602036][    C0]  ret_from_fork_asm+0x1a/0x30
[  487.602061][    C0]  </TASK>
[  487.612169][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  487.612197][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  487.612219][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  487.612229][   T31] Call Trace:
[  487.612236][   T31]  <TASK>
[  487.612243][   T31]  dump_stack_lvl+0x3d/0x1f0
[  487.612268][   T31]  panic+0x71c/0x800
[  487.612293][   T31]  ? __pfx_panic+0x10/0x10
[  487.612317][   T31]  ? tick_nohz_tick_stopped+0x6c/0xa0
[  487.612342][   T31]  ? irq_work_queue+0xce/0x100
[  487.612360][   T31]  ? watchdog+0xdda/0x12c0
[  487.612375][   T31]  ? watchdog+0xdcd/0x12c0
[  487.612394][   T31]  watchdog+0xdeb/0x12c0
[  487.612414][   T31]  ? __pfx_watchdog+0x10/0x10
[  487.612429][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  487.612452][   T31]  ? __kthread_parkme+0x19e/0x250
[  487.612476][   T31]  ? __pfx_watchdog+0x10/0x10
[  487.612492][   T31]  kthread+0x3c2/0x780
[  487.612509][   T31]  ? __pfx_kthread+0x10/0x10
[  487.612522][   T31]  ? __pfx_kthread+0x10/0x10
[  487.612536][   T31]  ? __pfx_kthread+0x10/0x10
[  487.612550][   T31]  ? __pfx_kthread+0x10/0x10
[  487.612564][   T31]  ? rcu_is_watching+0x12/0xc0
[  487.612583][   T31]  ? __pfx_kthread+0x10/0x10
[  487.612613][   T31]  ret_from_fork+0x45/0x80
[  487.612629][   T31]  ? __pfx_kthread+0x10/0x10
[  487.612645][   T31]  ret_from_fork_asm+0x1a/0x30
[  487.612679][   T31]  </TASK>
[  487.612905][   T31] Kernel Offset: disabled