last executing test programs:

18.833948106s ago: executing program 0 (id=2978):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$ax25(0x3, 0x5, 0x6)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe)
shutdown(r1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

17.653349181s ago: executing program 0 (id=2983):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x80801)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='i2c_read\x00', r3, 0x0, 0xfffffffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
mmap$dsp(&(0x7f00003e2000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, 0xffffffffffffffff, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000088efa09089da345391f3e8430bae75f7e5dedc47aedc69c447bccd1c44b4dd56d48024e79edfe036e047d0ceb4e3446ed636d9d2ee1ef82d18a8dd45394d9a8c187ea437079c7450878394fdcffb11d6a72c96f26e242b6518571b0235a3c8d04f1fcc0990dea2ef6eb2856cdce44cc119185c94166d7903e70734b645321f49652b8d917b222212013c5ac65b61e044a9cb2f282b755d06e1f404223fe7c7ba406ac7ae449ed70a71be4c801d3c610b0940b4bd431a2ebd239b5abbf3d06934e0c51a384fe0d4d181f0aec482a28444531bf8ed99de698843417dd5afe181a6940198e085c82352d1b1562c82b8f2c8ebe3e1", @ANYRES16, @ANYBLOB="01713bbd7000000000000100000005000600af7b0000050005000000000008000300"], 0x2c}}, 0x800)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r9 = socket$kcm(0x29, 0x2, 0x0)
r10 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(r11, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x348f69facbfbfa74, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r10, r8})
sendmmsg(r9, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050)

16.185088635s ago: executing program 0 (id=2991):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f0000000080)={{0x3, @null, 0x3}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x80, 0x0)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="737d337d1c4cf24e27c01f9c5a40466c61d24e1cf045fad4e70ec76cecf580aac78d1a257f8a5b74f821a6364aa389e028c3465eabbf497dd0e6547aa4b7ccc207b7f16679f22ffa13cf88872c8f661dc3086b94304cbe894b161176ebc805b6ea32e5c8c2aa961b1dca72eec56f18a7273a32cc00ad828384e58bbbb06b3b0649d5a7b843bec461af82003ee026811e9aa90a66ff08af7c3dfc29803165baa755e0d993affd8ba421c347b8b7a4b82426899ac2a316d19101e0d59354c11012edf7a3edde291c51a48b45bd759ac2b226ae463ea45bdaeb90e7bd4678", 0xdd}], 0x1)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000280)={{r3}, "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"})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x7c89d000)
sendto$netrom(r2, &(0x7f0000001280)="151c17a2e43a841a461964a4f217b916bbf1caf1e634f610b2d009db2f1957c14078146fb2ad1c66a5e9ce1cb3ecb9af9b9c9c7efd8d34d3d4b03d076bf89f5e54596fe17f25890d075214376bdd906c9c6863c01756666f5ab364363157c34b9a7cfdd7e09266c6a5aabc482df76d1e5d27e0bfddb3dba2a87c86b8cc31fe471c8b06433a24347b0602228bd5c797c43e89bbdc91b6ed009d853e820384b026934036d4241f16d9fe810b1dcca527339d0cc22398f0cd6716b36559839516ca9975195adc", 0xc5, 0x80, &(0x7f0000001380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r4=>r3, {0x0, 0x80}}, './file0\x00'})
r5 = openat(r4, &(0x7f0000001440)='./file0\x00', 0x200, 0x9)
connect$netrom(r5, &(0x7f0000001480)={{0x3, @default, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000001500)={0x1da5bdb4, 0x1, 0x5, 0x100, 0x3ff, 0x2})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x9b099ef11192494}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r6, 0x403, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4014)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000001680)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f00000016c0)={0x8, r7})
syz_genetlink_get_family_id$smc(&(0x7f0000001700), r4)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001780), r5)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000e8}, 0xc, &(0x7f00000018c0)={&(0x7f00000017c0)={0x100, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa997}}]}, 0x100}}, 0x2000c000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
sendmsg(r5, &(0x7f0000001a40)={&(0x7f0000001940)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="15584b1116b6822a97773b3426d9190bd2013e9f965c5d2c9ca94dc0c681c78466ba3b83faa893", 0x27}], 0x1}, 0x80)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r4)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b00)={0xe8, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="0130df"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}], @key_params=[@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "8c89"}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "615381b6a594bc4e95fdaa5c54"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ffb91c1f58"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x313}], @NL80211_ATTR_SSID={0x6, 0x34, @random="16c1"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d4139e005ff9"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001e00)={'tunl0\x00', &(0x7f0000001d40)={'syztnl1\x00', <r10=>0x0, 0x7800, 0x80, 0xfc, 0x6, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x68, 0x0, 0x8, 0x29, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x18, 0xa0, 0x0, 0x2, [0xec36, 0xfffffff6, 0xbeaa, 0xfff, 0x9]}, @rr={0x7, 0x23, 0xc5, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @broadcast, @local, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @lsrr={0x83, 0x17, 0x46, [@multicast1, @multicast2, @loopback, @empty, @loopback]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x4, 0x9, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe170, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x35}, @exit, @generic={0x1, 0x2, 0x5, 0x5, 0x8}, @call={0x85, 0x0, 0x0, 0x39}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000001d00)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r10, @fallback=0x3d, r5, 0x8, &(0x7f0000001e40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x1, &(0x7f0000001e80)=[r5, r5, r4], &(0x7f0000001ec0)=[{0x0, 0x3, 0x6, 0x9}], 0x10, 0x7}, 0x94)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000001fc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)

16.157102114s ago: executing program 0 (id=2992):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = io_uring_setup(0xb, &(0x7f0000000400)={0x0, 0x20c8a0, 0x400, 0x8, 0x14c, 0x0, r0})
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}, @func={0xa, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x401}}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x6a, 0x8}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000200)=""/118, 0x6e, 0x76, 0x0, 0x2, 0x10000, @value=r2}, 0x28)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x55, @empty, @mcast1, 0x1, 0x0, 0x0, 0x20000000}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18)
r5 = getpgrp(0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={r8}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000540)={<r9=>0x0, @in={{0x2, 0x4e21, @multicast1}}, [0xff, 0x3, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x9, 0x4, 0x4, 0x1, 0x200, 0x0, 0x8, 0x7]}, &(0x7f00000002c0)=0x100)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000006c0)={r8, 0x7fff, 0xffff, 0xd6, 0x4, 0xd, 0x8000, 0x0, {r9, @in6={{0xa, 0x4e20, 0x5, @private2, 0x1}}, 0x3, 0x1, 0x7, 0x4, 0x1}}, &(0x7f0000000300)=0xb0)
kcmp(r5, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
rt_sigqueueinfo(0x0, 0x35, &(0x7f0000000380)={0x20, 0x523})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

16.109962929s ago: executing program 0 (id=2993):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$ax25(0x3, 0x5, 0x6)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe)
shutdown(r1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

10.841559573s ago: executing program 3 (id=3014):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000020380000000000000100000009500000000000000564cbd42b4d299a45ebb0007d946f396ec37f5b2b9bd2fd02de03273b350eaacf6cef7d6b32a15a0566878fff69932052cad75e04dc0c71196ea57353d4a891999666fdad924924eeb2643fa4b89fe440ba84285e58919c839e4092567153f3817957579247e60db"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
landlock_create_ruleset(&(0x7f0000000100)={0x200, 0x2, 0x2}, 0x18, 0x1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r3=>0x0})
r4 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x25, 0x5, @val=@netkit}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0x400, 0xb, 0x6, 0x16000, r2, 0x60000000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, @void, @value, @value=r4}, 0x50)
close_range(r1, 0xffffffffffffffff, 0x0)

10.666897563s ago: executing program 3 (id=3015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="00000018110000000000000000000000000000005251fee83aa612b3fad519872e6456efab165c83edc3bd6c2c5dd0614e30e939e5e6a4c41aa3e72f50c0412ae0ae8b47d7aba1289cc39d2134d95cb490c9dc2515a9bb8e89d2f240d70c9a1273f3b7d4dbf7f42967185dadd216f8ae8cec155c40c2b8f011a48907f947330c2a82c3b7087c86e9f5d50ab87eceaea5fe75df003585e90d262aebd7cff871075c478edbad611878e847dce2e32e", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)

7.816033527s ago: executing program 1 (id=3021):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0})
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3)
r3 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x1000000, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408)

6.755340947s ago: executing program 3 (id=3023):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000000040))
close(0x3) (fail_nth: 9)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="608e61697d382ef97f336971ec038a6815cd922bc94206c9459ba6916789129f24d5a557e5a6ed6bae28863bf8efa41bf587848b0d368bf438ad6b591bdd8ef479ca28dac4a501dabac1a0775fab7371e18383d635fc60dbb33374e88de8f12162279a1b95e17408c94ed764c6b5b4e988a4c553bb", 0x75}, {0x0}], 0x2}}], 0x1, 0x400080d)
sendto(r2, &(0x7f0000000140)="ad", 0x1, 0x40040, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x5b07, 0x0)

6.236481823s ago: executing program 4 (id=3025):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_notify(r1, &(0x7f0000001440)={0x0, 0x33, 0x0, @thr={0x0, 0x0}})
mq_notify(r1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r4=>r2, 0x69873e41d121c134, 0xf, 0x7, 0x6, 0x18, @loopback, @empty, 0x7800, 0x80, 0x6, 0x5}})
connect$packet(r0, &(0x7f0000000100)={0x11, 0x1b, r4, 0x1, 0xaa}, 0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'})

5.791258393s ago: executing program 1 (id=3026):
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0)
syz_io_uring_setup(0x2be3, &(0x7f0000000100)={0x0, 0xcfdf, 0x200, 0x3, 0x22a}, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180))
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000)
r2 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x764, 0x0, 0x0, 0x1d2})
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1c, 0x20000048, r3)
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x52, 0x0, 0x7, 0x3, &(0x7f00000001c0)="15cda64c633462d2b1a953c050a10d4433205d73e2058da5a8b2577322de562fe2cf20dbf81f64f29343ac8253f25bfe1a540c48862636f01c66253d01972dc53868936c13f7aaa79873ab929aaba3c16fd0a45ebaf0edd644", 0x7, 0x0, 0x0, {0x2, r3}})

5.674647575s ago: executing program 1 (id=3027):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3effffff1000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="bad66cc84c3abe9e000000000000000a00000000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%-010d \x00'}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x5}}, @struct={0x8, 0x2, 0x0, 0x4, 0x0, 0x7ff, [{0xf, 0x3}, {0xf, 0x0, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/38, 0x63, 0x26}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7ff, '\x00', r3, r4, 0x2, 0x4, 0x4}, 0x50)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000340), 0x8)

5.035084879s ago: executing program 2 (id=3029):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=@deltfilter={0xafc, 0x2d, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x0, 0xd}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0xab0, 0x2, [@TCA_U32_SEL={0x564, 0x5, {0x9, 0x3, 0x5, 0xa1, 0x7f, 0x8, 0x1, 0x3, [{0x2, 0x5, 0x3, 0x8}, {0x2773, 0xc, 0x3, 0x4}, {0x0, 0x4, 0x400, 0x81}, {0x0, 0x4, 0xd, 0x7}, {0x1000, 0x5e0, 0x5, 0x1}, {0xce, 0xfffffff8, 0x2, 0x5}, {0x0, 0x4db9dc39, 0x4, 0xfff}, {0x1, 0x7, 0x1, 0x4b}, {0x9, 0x3, 0x0, 0xee}, {0x5, 0x4, 0x4, 0xfffffffb}, {0x40, 0x2f3, 0x8, 0x6}, {0x0, 0x2, 0x6, 0xf}, {0x8, 0x6d72, 0x9, 0x6fa2}, {0xb3, 0x1, 0x1, 0xd233}, {0xfff, 0x7, 0x8, 0x5}, {0xff, 0x1, 0xff, 0x3}, {0x81, 0x7, 0x22, 0x40}, {0x9, 0x37976800, 0x7, 0x8}, {0x28f645b1, 0x6, 0x4, 0x2}, {0x2, 0x5, 0x5ad, 0x8}, {0x3, 0xbdbc, 0xa9f3, 0x1}, {0x5, 0x0, 0xacf, 0x2}, {0xffffffa2, 0x5, 0x79, 0x5}, {0x10, 0x10000, 0xfffffeff, 0x200}, {0x7fffffff, 0xffffff01, 0x2}, {0x7, 0x8, 0x1, 0x8}, {0x9, 0x9, 0xf22, 0x8000}, {0x2, 0x1000, 0x3bacb2e3, 0x5}, {0x8, 0x5, 0x4, 0x5}, {0x2, 0x0, 0x1, 0x4}, {0x90000, 0x2, 0x8, 0x2}, {0x18ef36b, 0xb1}, {0x10, 0x1000, 0xfffff1a4, 0x5a}, {0x9, 0x1, 0x76, 0x2}, {0x1e, 0x2, 0x8, 0x2d}, {0x6, 0x5, 0x8, 0x800}, {0x30, 0x0, 0x7, 0x8}, {0x8b91, 0x8fc, 0x3, 0x5}, {0x6, 0x0, 0x2}, {0x2, 0xfff, 0x3, 0x3}, {0x3, 0x2, 0xfffffffa, 0xcbb}, {0x452, 0xffffffff, 0x8003, 0x2}, {0x8, 0x200, 0xc, 0x4}, {0x3, 0x8, 0x6, 0x10}, {0x7, 0x100, 0x9, 0xc0000000}, {0x0, 0xc, 0x3, 0x6bf1}, {0x1, 0xe, 0xa3ee}, {0x80, 0xfffffffb, 0x5, 0x9}, {0x2, 0x9, 0x0, 0x101}, {0x6, 0x40, 0x1, 0x1000}, {0x8, 0x73b2, 0xfc, 0x7fffffff}, {0x0, 0xe, 0x6, 0x1}, {0x3, 0x4, 0x9, 0x5}, {0x81, 0x400, 0x8, 0x5}, {0xd8, 0x5, 0x9, 0x1}, {0x8, 0x8, 0x1000, 0x7}, {0xc03b, 0x6, 0x849, 0x3}, {0x6, 0x0, 0x2}, {0x8, 0x4, 0x7ff, 0x2000}, {0x8, 0x401, 0x78957a9e, 0x5}, {0x7, 0x9, 0x7, 0x6}, {0x0, 0xe98, 0x1, 0x5d7f}, {0x0, 0xffffffa4, 0x9, 0x9}, {0x5, 0xf, 0x0, 0x5}, {0x6a1, 0x0, 0x80000001, 0x8}, {0xfffffeff, 0x5, 0x9ee, 0x9}, {0x1, 0x4, 0x0, 0x1}, {0x992, 0x0, 0x3ff, 0xe}, {0x2, 0x9caf, 0x7f, 0x400}, {0xfffffff7, 0xecf, 0x9, 0x7}, {0x9, 0x6, 0x6, 0xffff9a9d}, {0xf5a1, 0xa8, 0x2, 0x8}, {0x78, 0x7fff, 0x2, 0x2}, {0x7, 0x5, 0x10001, 0x6}, {0x3, 0x0, 0xe4c, 0x1}, {0x2, 0x9, 0x8, 0x6}, {0x9, 0x3, 0xfffff800, 0x7f}, {0x1, 0x6, 0x8, 0x7fffffff}, {0x3be, 0x8, 0x4, 0x81}, {0xfffffffe, 0x7, 0x7f, 0x3}, {0x75b73476, 0xb, 0x223b, 0x5}, {0x7, 0xffffffff, 0x9, 0x1}, {0x9aa2, 0x0, 0xef, 0x10000}, {0xfffffff7, 0x1, 0xc, 0x7}, {0x0, 0x50e7, 0x8001, 0x2}]}}, @TCA_U32_SEL={0x524, 0x5, {0x8, 0x81, 0x81, 0x3, 0x22, 0x7f, 0x9, 0xfffffffe, [{0x4, 0x8001, 0x3, 0x10}, {0x1, 0x3820, 0x8, 0x2}, {0xc, 0x1, 0x400, 0x85c}, {0xfffffff8, 0x800, 0xc132, 0x6}, {0xffffffff, 0x2, 0xfffffffb, 0x9}, {0x3, 0x1380d108, 0x1, 0xaa0}, {0x8, 0x91b2ed5, 0x3, 0x5}, {0x5, 0x4, 0x1, 0x4ce7dc44}, {0x9, 0x9, 0x1, 0x3}, {0x1, 0x7, 0x8, 0x400}, {0x3, 0xe36, 0x7, 0x6}, {0x7fffffff, 0xffffffff, 0x1b1b, 0x101}, {0x7ff, 0xf0c, 0x2, 0x400000}, {0x7, 0x7fffffff, 0x5, 0x1}, {0x6f, 0xe, 0x9}, {0x7, 0x0, 0x0, 0x6}, {0xa, 0x7ff, 0x4, 0xebb0}, {0xd6a, 0x9, 0x7f, 0xb0}, {0xfffffffa, 0x2000, 0xcd, 0x7}, {0x6, 0x4000, 0x3, 0xfffffff9}, {0x7f, 0x8001, 0x7fff, 0x9}, {0x3, 0x9, 0x4, 0x80e}, {0x8, 0x7fffffff, 0x5, 0x7}, {0x81, 0x8, 0x5, 0x4}, {0x1, 0x8f, 0x311b022f, 0x1ff}, {0x7, 0xad44, 0x81, 0xd9}, {0x8, 0x9}, {0x6, 0x51e, 0x1, 0x80000000}, {0x7, 0xa3a, 0x68c, 0x7fffffff}, {0x7, 0x200, 0x4, 0x7}, {0x40, 0x9, 0x2ed3, 0x7ff}, {0x3, 0x10001, 0x0, 0xffffffff}, {0x7fff, 0x3ff, 0xff, 0x7}, {0x7, 0x4, 0x1, 0x3}, {0x7, 0xfffffff9, 0x1, 0x56e2}, {0xfff, 0x0, 0x15, 0x5}, {0xcdc5, 0x1, 0x80000001, 0xf84}, {0x40, 0x2, 0x5}, {0x3, 0x1, 0x4, 0xfa82}, {0xbff9, 0x2000000, 0x8, 0x8}, {0x2, 0x9265, 0x66, 0x61}, {0x6, 0xffffffff, 0x49, 0xc}, {0x4f8, 0x6098, 0x9, 0xc12}, {0xfffffff8, 0xb, 0x7, 0xe}, {0x277, 0x7, 0x7}, {0x8, 0x7, 0x5, 0x6}, {0x2, 0x3, 0x0, 0x8}, {0x6, 0x0, 0xb, 0x100000}, {0xffffffff, 0x6, 0x10001, 0x4}, {0x8, 0xffff7fff, 0x1, 0x1}, {0x3, 0x8, 0xd, 0x1}, {0x47b8f799, 0x3, 0x10, 0xffffffff}, {0xffffdc43, 0x10001, 0x101, 0x3}, {0xffffff01, 0x47, 0xe38, 0x1000}, {0x8, 0x5e2c, 0x6, 0x1}, {0x89d, 0x8, 0x6, 0x4}, {0x7, 0x80, 0x3, 0x8}, {0xfff, 0xd, 0x2, 0x8001}, {0x2, 0xc89, 0x6, 0x3}, {0xfff, 0xfffffffa, 0x1, 0x7}, {0x8000, 0x5, 0xff, 0x55}, {0x100, 0x1, 0x17, 0x401}, {0x5, 0x4, 0xf3, 0x6}, {0xf, 0x2, 0xf, 0x2}, {0x4, 0x9, 0x8001}, {0x9, 0x40, 0x9}, {0x10000, 0xee, 0x9, 0x6d1}, {0x401, 0x1, 0x0, 0x9397}, {0x5, 0x2, 0x5, 0xa2b}, {0x8, 0x0, 0x1, 0x9}, {0x9, 0x6, 0x3, 0xffff86ee}, {0x101, 0xffdffffd, 0x0, 0x4}, {0x2, 0x9, 0x5, 0x6}, {0xfffffffa, 0x6, 0x8, 0xb3}, {0x8, 0xffff, 0x2, 0x8d}, {0x8000, 0x7, 0x5, 0xb}, {0x0, 0xb5d0, 0xffffffff, 0x1}, {0xffffffff, 0xffff30d6, 0x5, 0x44e6}, {0x6, 0x0, 0x4, 0x7fffffff}, {0xfb2a, 0x0, 0xa, 0x4}, {0x80000001, 0x800, 0xffffffff, 0x4ccd}]}}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8ac5}]}, @TCA_U32_HASH={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x725c}, @TCA_RATE={0x6, 0x5, {0xfc, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0xafc}}, 0x8000) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
kexec_load(0x0, 0x0, 0x0, 0x0) (async)
r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000121000, 0x0)
r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x2000, 0x1, 0x385}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async)
r11 = accept4(r10, 0x0, 0x0, 0x80800)
sendmmsg$alg(r11, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5", 0x49}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9", 0x8e}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000005000000000000000170100000200000038000000ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad000000001800000000000000170100000300000000000000000000004001000000000000170100000200000028010000526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd84430400f736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ccbc39669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000001000000000000008000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d33060000022831b3a638704fe05ac900000000000000"], 0xb0, 0x7a4e64b47bb0bd6a}], 0x4, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0), 0x0, 0x1e}) (async)
io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0)

4.9595066s ago: executing program 2 (id=3030):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc0200000000003c0000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x0, 0x4800, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r8, r9], &(0x7f0000000480)=[{0x2, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

4.728217867s ago: executing program 3 (id=3031):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x5400, 0x0)

4.056860735s ago: executing program 3 (id=3032):
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000212000107014001090402000000020f8008fe7502e6330dac7dc44e62d761aaa4d0cf3f3dfdc92ef66578ba76a994e5b4a9f8e54c526c9cf2bb72aabc6b6c6dcedd55d3afd8cc70d683663149be2d290b46fc4114a070703ac0018e7d396eb7793bdfe5e921641e00"/123], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4)
r0 = open$dir(0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, r1, 0xd925000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FIONREAD(r2, 0x5453, 0xfffffffffffffffe)
r3 = syz_open_dev$audion(0x0, 0xe3, 0xa0040)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0, <r5=>0x0})
prlimit64(r5, 0xd, &(0x7f0000000200)={0xd4, 0x5}, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
sendmmsg$unix(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000080000f0ffff00c3ee5fa3dfaa6013f04fd9db5cf1e843070000000000477f", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r4], 0x68, 0x20000000}}], 0x1, 0x40)
getdents64(r0, &(0x7f0000000040)=""/83, 0x53)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000212000107014001090402000000020f8008fe7502e6330dac7dc44e62d761aaa4d0cf3f3dfdc92ef66578ba76a994e5b4a9f8e54c526c9cf2bb72aabc6b6c6dcedd55d3afd8cc70d683663149be2d290b46fc4114a070703ac0018e7d396eb7793bdfe5e921641e00"/123], 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) (async)
open$dir(0x0, 0x0, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, r1, 0xd925000) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async)
ioctl$FIONREAD(r2, 0x5453, 0xfffffffffffffffe) (async)
syz_open_dev$audion(0x0, 0xe3, 0xa0040) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bind$inet6(r4, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) (async)
prlimit64(r5, 0xd, &(0x7f0000000200)={0xd4, 0x5}, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) (async)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async)
getpriority(0x1, 0x0) (async)
sendmmsg$unix(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000080000f0ffff00c3ee5fa3dfaa6013f04fd9db5cf1e843070000000000477f", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r4], 0x68, 0x20000000}}], 0x1, 0x40) (async)
getdents64(r0, &(0x7f0000000040)=""/83, 0x53) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)

3.943998955s ago: executing program 2 (id=3033):
syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
syz_open_procfs(0x0, 0x0)
read$FUSE(r0, 0x0, 0x9)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x1, {0x1, 0x1}, {0x4b, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x7, 0xa}, {0x0, 0x6, 0x7ff, 0x3, 0x6, 0x400}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x600, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)

3.256986687s ago: executing program 4 (id=3034):
r0 = socket(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x8, 0x2, 0x10000340}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}})
io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48)

3.087903683s ago: executing program 4 (id=3035):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000500060000000000050002"], 0x3c}}, 0x0)

2.929631704s ago: executing program 2 (id=3036):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0})
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3)
r3 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a8, 0x11c8, 0xc8, 0x8, 0x11c8, 0x5803, 0x12d8, 0x2e8, 0x2e8, 0x12d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0x16, 0xc, 0x2, 0x4b}, 0x0, 0x1198, 0x11c8, 0x0, {0x100000000000000, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5a, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xff, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0xe}, {0xffffffffffffffff, 0x0, 0x1}, 0xffffff68, 0x225}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x3d5, 0x1c, 0xffffff95, 'netbios-ns\x00', 'syz1\x00', {0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1408)

2.281829314s ago: executing program 1 (id=3037):
syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) (async, rerun: 64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) (rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async, rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async, rerun: 64)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x10000}, 0x28) (async, rerun: 64)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x30f3, &(0x7f0000000400)=""/92)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) (async, rerun: 64)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.086744613s ago: executing program 1 (id=3038):
r0 = syz_usb_connect(0x6, 0x5cb, &(0x7f0000000a80)=ANY=[@ANYRES32], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x5933, 0x6000, 0x26, &(0x7f00000000c0)="65236bff06da93e38dc9c6683e5e8685d3f6de6beed67d71c317b38d5487b56bd18529945a59"}, {0x1, 0x0, 0x0, 0x0}], 0x2}) (async)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x5933, 0x6000, 0x26, &(0x7f00000000c0)="65236bff06da93e38dc9c6683e5e8685d3f6de6beed67d71c317b38d5487b56bd18529945a59"}, {0x1, 0x0, 0x0, 0x0}], 0x2})
r2 = socket(0x2c, 0x800, 0x8)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
pread64(r2, 0x0, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008a}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffd23, &(0x7f0000000240)=0x10000008001) (async)
sched_setaffinity(0x0, 0xfffffffffffffd23, &(0x7f0000000240)=0x10000008001)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b240)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff51)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_request_blocks\x00', r4}, 0x18)
socket$caif_stream(0x25, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x62, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0) (async)
syz_open_procfs(0x0, 0x0)

1.943511379s ago: executing program 4 (id=3039):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
r1 = syz_open_procfs(r0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000140000000000"], 0x50) (rerun: 32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, 0x0, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @local}}, {{0x2, 0x0, @loopback}}}, 0x108) (async, rerun: 32)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async, rerun: 32)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 32)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r4, &(0x7f0000000040), 0x0, 0x300, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
r5 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) (rerun: 64)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r6, &(0x7f0000776000/0x4000)=nil, 0x5000) (async)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00003fd000/0x1000)=nil) (async)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000240), 0x0}, 0x20)

1.433113651s ago: executing program 4 (id=3040):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ec1ab48d427ddf0b29492611d98f2ec5", 0x0, <r2=>0x0, {0x3, 0x1000}, {0x7, 0x4}, 0xffffffffffff5745, [0x8, 0x3ff, 0xfff, 0x7, 0xe8, 0x4, 0x110000001, 0x21, 0xcc, 0x9, 0x3ff, 0x2, 0x3, 0xcaf6, 0x79, 0x101]})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xb, 0xe18, 0x172b, 0x3, 0x7, 0x6, 0x3]}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000140)={{r0}, r2, 0x12, @unused=[0x9, 0x9, 0x2, 0x5], @devid})

1.272462814s ago: executing program 4 (id=3041):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000000040))
close(0x3) (fail_nth: 10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="608e61697d382ef97f336971ec038a6815cd922bc94206c9459ba6916789129f24d5a557e5a6ed6bae28863bf8efa41bf587848b0d368bf438ad6b591bdd8ef479ca28dac4a501dabac1a0775fab7371e18383d635fc60dbb33374e88de8f12162279a1b95e17408c94ed764c6b5b4e988a4c553bb", 0x75}, {0x0}], 0x2}}], 0x1, 0x400080d)
sendto(r2, &(0x7f0000000140)="ad", 0x1, 0x40040, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x5b07, 0x0)

1.103236226s ago: executing program 2 (id=3042):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000ffffff840000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x0, 0x4800, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r8, r9], &(0x7f0000000480)=[{0x2, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

1.10090083s ago: executing program 1 (id=3043):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_clone3(&(0x7f0000000180)={0x41288a80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
close(0xffffffffffffffff)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000300)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1)
sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc080)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000800000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)

395.003776ms ago: executing program 3 (id=3044):
r0 = socket(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x8, 0x2, 0x10000340}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}})
io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48)

43.575683ms ago: executing program 2 (id=3045):
syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
syz_open_procfs(0x0, 0x0)
read$FUSE(r0, 0x0, 0x9)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x1, {0x1, 0x1}, {0x4b, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x7, 0xa}, {0x0, 0x6, 0x7ff, 0x3, 0x6, 0x400}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5206a07f0ff00000000850000007d000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212c88e8b687a2446049577c75b76b775c1e301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886eb"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)

0s ago: executing program 0 (id=2995):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
setpgid(0x0, r0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000000c0)={0xe, 0x1, 0x8001, 0x2, 0x9, 0x2})
write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'})

kernel console output (not intermixed with test programs):

ve_skb+0x10/0x10
[  554.778683][T13478]  tun_rx_batched.isra.0+0x3ee/0x740
[  554.778705][T13478]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  554.778730][T13478]  ? tun_get_user+0x1ded/0x3cc0
[  554.778748][T13478]  ? rcu_is_watching+0x12/0xc0
[  554.778765][T13478]  tun_get_user+0x28b2/0x3cc0
[  554.778795][T13478]  ? __pfx_tun_get_user+0x10/0x10
[  554.778813][T13478]  ? file_has_perm+0x27b/0x350
[  554.778829][T13478]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  554.778857][T13478]  ? find_held_lock+0x2b/0x80
[  554.778878][T13478]  ? tun_get+0x191/0x370
[  554.778901][T13478]  tun_chr_write_iter+0xdc/0x210
[  554.778923][T13478]  vfs_write+0x7d3/0x11d0
[  554.778941][T13478]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  554.778963][T13478]  ? __pfx_vfs_write+0x10/0x10
[  554.778978][T13478]  ? find_held_lock+0x2b/0x80
[  554.779011][T13478]  ksys_write+0x12a/0x250
[  554.779028][T13478]  ? __pfx_ksys_write+0x10/0x10
[  554.779052][T13478]  do_syscall_64+0xcd/0xf80
[  554.779071][T13478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.779085][T13478] RIP: 0033:0x7f2aac58e1ff
[  554.779097][T13478] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  554.779111][T13478] RSP: 002b:00007f2aad4b1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  554.779125][T13478] RAX: ffffffffffffffda RBX: 00007f2aac7e5fa0 RCX: 00007f2aac58e1ff
[  554.779134][T13478] RDX: 000000000000003e RSI: 0000200000000700 RDI: 00000000000000c8
[  554.779143][T13478] RBP: 00007f2aad4b1090 R08: 0000000000000000 R09: 0000000000000000
[  554.779151][T13478] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001
[  554.779159][T13478] R13: 00007f2aac7e6038 R14: 00007f2aac7e5fa0 R15: 00007ffe79d1ebb8
[  554.779180][T13478]  </TASK>
[  554.912969][T13480] netlink: 'syz.0.2345': attribute type 21 has an invalid length.
[  555.006508][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  555.009736][T13482] audit: audit_backlog=65 > audit_backlog_limit=64
[  555.044790][ T5484] audit: audit_lost=17718 audit_rate_limit=0 audit_backlog_limit=64
[  555.044810][ T5484] audit: backlog limit exceeded
[  555.044920][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  555.044931][ T5484] audit: audit_lost=17719 audit_rate_limit=0 audit_backlog_limit=64
[  555.044948][ T5484] audit: backlog limit exceeded
[  555.044995][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  555.045005][ T5484] audit: audit_lost=17720 audit_rate_limit=0 audit_backlog_limit=64
[  555.084795][T13480] netlink: 'syz.0.2345': attribute type 6 has an invalid length.
[  555.389473][T13480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2345'.
[  555.679948][T13503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13503 comm=syz.0.2353
[  556.408323][T13516] FAULT_INJECTION: forcing a failure.
[  556.408323][T13516] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  556.446555][T13516] CPU: 0 UID: 0 PID: 13516 Comm: syz.0.2357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  556.446586][T13516] Tainted: [L]=SOFTLOCKUP
[  556.446591][T13516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  556.446601][T13516] Call Trace:
[  556.446607][T13516]  <TASK>
[  556.446614][T13516]  dump_stack_lvl+0x16c/0x1f0
[  556.446640][T13516]  should_fail_ex+0x512/0x640
[  556.446669][T13516]  _copy_from_user+0x2e/0xd0
[  556.446694][T13516]  kstrtouint_from_user+0xd6/0x1d0
[  556.446714][T13516]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  556.446738][T13516]  ? __lock_acquire+0x436/0x2890
[  556.446762][T13516]  ? lock_acquire+0x179/0x330
[  556.446787][T13516]  proc_fail_nth_write+0x83/0x220
[  556.446806][T13516]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  556.446831][T13516]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  556.446847][T13516]  vfs_write+0x2a0/0x11d0
[  556.446870][T13516]  ? __pfx___mutex_lock+0x10/0x10
[  556.446895][T13516]  ? __pfx_vfs_write+0x10/0x10
[  556.446923][T13516]  ? __fget_files+0x20e/0x3c0
[  556.446953][T13516]  ksys_write+0x12a/0x250
[  556.446974][T13516]  ? __pfx_ksys_write+0x10/0x10
[  556.447002][T13516]  do_syscall_64+0xcd/0xf80
[  556.447026][T13516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.447044][T13516] RIP: 0033:0x7f740098e1ff
[  556.447058][T13516] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  556.447074][T13516] RSP: 002b:00007f7401824030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  556.447092][T13516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f740098e1ff
[  556.447103][T13516] RDX: 0000000000000001 RSI: 00007f74018240a0 RDI: 0000000000000003
[  556.447112][T13516] RBP: 00007f7401824090 R08: 0000000000000000 R09: 0000000000000000
[  556.447122][T13516] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001
[  556.447132][T13516] R13: 00007f7400be6038 R14: 00007f7400be5fa0 R15: 00007ffc355a7718
[  556.447156][T13516]  </TASK>
[  557.934199][T13554] veth5: entered promiscuous mode
[  557.969326][T13554] veth5: entered allmulticast mode
[  558.689883][T13579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2376'.
[  559.111266][T13590] sit0: entered promiscuous mode
[  559.130110][T13590] netlink: 'syz.0.2381': attribute type 1 has an invalid length.
[  559.177853][T13590] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2381'.
[  559.363159][T13606] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2384'.
[  559.412180][T13611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  559.418728][T13611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  559.445140][T13611] vhci_hcd vhci_hcd.0: Device attached
[  559.661574][T13615] vhci_hcd: connection closed
[  559.661717][ T6834] vhci_hcd vhci_hcd.2: stop threads
[  559.697094][ T6834] vhci_hcd vhci_hcd.2: release socket
[  559.715351][    T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  559.724295][ T6834] vhci_hcd vhci_hcd.2: disconnect device
[  559.784869][   T30] kauditd_printk_skb: 15028 callbacks suppressed
[  559.784880][   T30] audit: type=1400 audit(559.768:405776): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  559.817856][   T30] audit: type=1400 audit(559.788:405777): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  559.828418][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  559.838932][   T30] audit: type=1400 audit(559.788:405778): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  559.866089][   T30] audit: type=1400 audit(559.788:405779): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  559.877090][T13628] audit: audit_backlog=65 > audit_backlog_limit=64
[  559.887206][   T30] audit: type=1400 audit(559.788:405780): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  559.915574][ T5484] audit: audit_lost=19426 audit_rate_limit=0 audit_backlog_limit=64
[  559.917536][T13628] audit: audit_lost=19427 audit_rate_limit=0 audit_backlog_limit=64
[  559.932380][T13628] audit: backlog limit exceeded
[  561.819840][T13673] netlink: 'syz.3.2404': attribute type 10 has an invalid length.
[  562.458840][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  562.466186][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  562.591559][T13705] netlink: 52 bytes leftover after parsing attributes in process `wg1'.
[  564.794887][   T30] kauditd_printk_skb: 9084 callbacks suppressed
[  564.794902][   T30] audit: type=1400 audit(564.768:413688): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  564.810673][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  564.853199][    T9] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  564.869345][ T5484] audit: audit_lost=19820 audit_rate_limit=0 audit_backlog_limit=64
[  564.882550][T13760] audit: audit_backlog=65 > audit_backlog_limit=64
[  564.885573][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64
[  564.893786][ T5484] audit: backlog limit exceeded
[  564.899436][   T30] audit: type=1400 audit(564.778:413689): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  564.911196][T13760] audit: audit_lost=19821 audit_rate_limit=0 audit_backlog_limit=64
[  564.931382][ T5825] audit: audit_lost=19822 audit_rate_limit=0 audit_backlog_limit=64
[  564.934646][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  565.563935][T13780] netlink: 'syz.0.2437': attribute type 4 has an invalid length.
[  566.202578][T13793] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[13793]
[  569.455174][T13865] batadv_slave_1: entered promiscuous mode
[  569.465444][T13865] batman_adv: batadv0: Adding interface: macvlan0
[  569.472770][T13865] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  569.545293][T13865] batman_adv: batadv0: Interface activated: macvlan0
[  569.807887][   T30] kauditd_printk_skb: 6315 callbacks suppressed
[  569.807901][   T30] audit: type=1400 audit(569.788:420001): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  569.875541][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  569.886099][T13876] audit: audit_backlog=65 > audit_backlog_limit=64
[  569.894543][T13876] audit: audit_lost=19824 audit_rate_limit=0 audit_backlog_limit=64
[  569.906937][T13876] audit: backlog limit exceeded
[  569.912181][T13880] audit: audit_backlog=65 > audit_backlog_limit=64
[  569.920474][ T5484] audit: audit_lost=19825 audit_rate_limit=0 audit_backlog_limit=64
[  569.933988][T13880] audit: audit_lost=19826 audit_rate_limit=0 audit_backlog_limit=64
[  569.942525][T13876] audit: audit_backlog=65 > audit_backlog_limit=64
[  569.950349][T13876] audit: audit_lost=19827 audit_rate_limit=0 audit_backlog_limit=64
[  569.986988][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'.
[  569.998274][T13880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'.
[  571.181184][T13915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.188433][T13915] IPv6: NLM_F_CREATE should be set when creating new route
[  571.195645][T13915] IPv6: NLM_F_CREATE should be set when creating new route
[  571.299908][T13915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.369215][T13944] netlink: 'syz.3.2492': attribute type 4 has an invalid length.
[  573.998357][T13975] Cannot find add_set index 0 as target
[  574.741459][T13999] netlink: 'syz.2.2510': attribute type 5 has an invalid length.
[  574.816456][   T30] kauditd_printk_skb: 9932 callbacks suppressed
[  574.816472][   T30] audit: type=1400 audit(574.798:425554): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  574.845910][   T30] audit: type=1400 audit(574.798:425555): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  574.867015][   T30] audit: type=1400 audit(574.798:425556): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  574.918444][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  574.926514][ T5484] audit: audit_lost=21287 audit_rate_limit=0 audit_backlog_limit=64
[  574.929759][T14006] audit: audit_backlog=65 > audit_backlog_limit=64
[  574.935059][ T5484] audit: backlog limit exceeded
[  574.947937][   T30] audit: type=1400 audit(574.798:425557): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  574.976449][T14006] audit: audit_lost=21288 audit_rate_limit=0 audit_backlog_limit=64
[  574.981767][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  575.978039][T14029] ALSA: seq fatal error: cannot create timer (-16)
[  577.263335][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  577.888601][T14086] xt_cgroup: path and classid specified
[  579.294989][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'.
[  579.827030][   T30] kauditd_printk_skb: 17978 callbacks suppressed
[  579.827044][   T30] audit: type=1400 audit(579.808:438259): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  579.870756][   T30] audit: type=1400 audit(579.808:438260): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  579.895339][   T30] audit: type=1400 audit(579.808:438261): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  579.966446][T14126] audit: audit_backlog=65 > audit_backlog_limit=64
[  579.973047][T14126] audit: audit_lost=23048 audit_rate_limit=0 audit_backlog_limit=64
[  579.992610][T14126] audit: backlog limit exceeded
[  579.994066][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  579.998952][T14128] audit: audit_backlog=65 > audit_backlog_limit=64
[  580.011043][T14128] audit: audit_lost=23049 audit_rate_limit=0 audit_backlog_limit=64
[  580.023506][T14126] audit: audit_backlog=65 > audit_backlog_limit=64
[  580.640064][T14138] xt_cgroup: path and classid specified
[  580.694768][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'.
[  580.773570][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'.
[  581.874619][T14176] ptrace attach of "./syz-executor exec"[5824] was attempted by ""[14176]
[  582.478359][T14170] geneve0: entered promiscuous mode
[  582.493153][   T37] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 43494 - 0
[  582.511699][   T37] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 43494 - 0
[  582.525109][   T37] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 43494 - 0
[  582.536422][   T37] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 43494 - 0
[  583.017737][T14204] xt_cgroup: path and classid specified
[  583.765473][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[  584.655914][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2584'.
[  584.698213][T14231] mkiss: ax0: crc mode is auto.
[  584.848339][   T30] kauditd_printk_skb: 6648 callbacks suppressed
[  584.848400][   T30] audit: type=1400 audit(584.828:444857): avc:  denied  { read write } for  pid=5820 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  584.946414][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.957079][ T5484] audit: audit_lost=23068 audit_rate_limit=0 audit_backlog_limit=64
[  584.964261][ T5812] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.965726][ T5484] audit: backlog limit exceeded
[  584.976656][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.983055][T14245] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.983151][ T5484] audit: audit_lost=23069 audit_rate_limit=0 audit_backlog_limit=64
[  584.991076][T14244] audit: audit_backlog=65 > audit_backlog_limit=64
[  584.997744][ T5484] audit: backlog limit exceeded
[  585.232638][T14260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14260 comm=syz.2.2593
[  586.246775][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'.
[  586.264875][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'.
[  586.786632][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'.
[  588.338321][T14377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2632'.
[  589.856158][   T30] kauditd_printk_skb: 10734 callbacks suppressed
[  589.856174][   T30] audit: type=1400 audit(589.838:454602): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  589.942458][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  589.949237][   T30] audit: type=1400 audit(589.888:454603): avc:  denied  { prog_load } for  pid=14432 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  589.968352][ T5484] audit: audit_lost=23401 audit_rate_limit=0 audit_backlog_limit=64
[  589.993130][ T5484] audit: backlog limit exceeded
[  590.009170][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  590.018170][   T30] audit: type=1400 audit(589.898:454604): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  590.049197][ T5484] audit: audit_lost=23402 audit_rate_limit=0 audit_backlog_limit=64
[  590.072375][ T5484] audit: backlog limit exceeded
[  590.086911][ T5484] audit: audit_backlog=66 > audit_backlog_limit=64
[  592.576754][T14477] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[14477]
[  594.128174][T14510] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  594.134719][T14510] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  594.165810][T14510] vhci_hcd vhci_hcd.0: Device attached
[  594.189262][T14511] vhci_hcd: connection closed
[  594.189413][ T3601] vhci_hcd vhci_hcd.2: stop threads
[  594.224666][ T3601] vhci_hcd vhci_hcd.2: release socket
[  594.230049][ T3601] vhci_hcd vhci_hcd.2: disconnect device
[  594.338847][T14517] netlink: 'syz.4.2680': attribute type 15 has an invalid length.
[  594.357960][T14517] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2680'.
[  594.864799][   T30] kauditd_printk_skb: 12268 callbacks suppressed
[  594.864814][   T30] audit: type=1400 audit(602.848:465458): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  594.878398][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  594.924654][ T5484] audit: audit_lost=23875 audit_rate_limit=0 audit_backlog_limit=64
[  594.942835][ T5484] audit: backlog limit exceeded
[  594.948101][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  594.956976][T14532] audit: audit_backlog=65 > audit_backlog_limit=64
[  594.963659][T14532] audit: audit_lost=23876 audit_rate_limit=0 audit_backlog_limit=64
[  594.971740][ T5484] audit: audit_lost=23877 audit_rate_limit=0 audit_backlog_limit=64
[  594.971761][ T5484] audit: backlog limit exceeded
[  594.971863][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  596.729155][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.896688][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.906515][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.919668][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.936328][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.947386][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.957720][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.978281][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  596.995893][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'.
[  598.151922][ T4092] Bluetooth: Error in BCSP hdr checksum
[  598.405369][   T13] Bluetooth: Error in BCSP hdr checksum
[  599.416663][T14635] netlink: 'syz.4.2719': attribute type 1 has an invalid length.
[  599.478344][T14635] 8021q: adding VLAN 0 to HW filter on device bond4
[  599.546736][T14636] bond4: entered promiscuous mode
[  599.884081][   T30] kauditd_printk_skb: 9774 callbacks suppressed
[  599.884097][   T30] audit: type=1400 audit(607.858:474672): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  599.899485][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  599.925303][T13352] Bluetooth: hci5: command 0x1003 tx timeout
[  599.968340][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  599.972103][ T5813] audit: audit_backlog=65 > audit_backlog_limit=64
[  599.984830][ T5484] audit: audit_lost=24065 audit_rate_limit=0 audit_backlog_limit=64
[  599.991376][ T5813] audit: audit_lost=24066 audit_rate_limit=0 audit_backlog_limit=64
[  600.001397][ T5813] audit: backlog limit exceeded
[  600.001435][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64
[  600.015257][   T30] audit: type=1400 audit(607.878:474673): avc:  denied  { bpf } for  pid=14646 comm="syz.3.2722" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  600.044547][ T5484] audit: backlog limit exceeded
[  600.049754][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  602.663620][T14745] Dead loop on virtual device ip6_vti0, fix it urgently!
[  602.673195][T14745] Dead loop on virtual device ip6_vti0, fix it urgently!
[  602.682906][T14745] Dead loop on virtual device ip6_vti0, fix it urgently!
[  602.710029][T14745] Dead loop on virtual device ip6_vti0, fix it urgently!
[  602.727357][T14745] Dead loop on virtual device ip6_vti0, fix it urgently!
[  602.745410][T14745] Dead loop on virtual device ip6_vti0, fix it urgently!
[  603.527799][T14770] __nla_validate_parse: 24 callbacks suppressed
[  603.527825][T14770] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2760'.
[  604.885751][   T30] kauditd_printk_skb: 16652 callbacks suppressed
[  604.885766][   T30] audit: type=1400 audit(612.858:487506): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  604.932983][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  604.946138][ T5484] audit: audit_lost=25341 audit_rate_limit=0 audit_backlog_limit=64
[  604.957739][   T30] audit: type=1400 audit(612.868:487507): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  604.964557][ T5484] audit: backlog limit exceeded
[  605.002981][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  605.017270][ T5484] audit: audit_lost=25342 audit_rate_limit=0 audit_backlog_limit=64
[  605.024579][   T30] audit: type=1400 audit(612.868:487508): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  605.034217][ T5484] audit: backlog limit exceeded
[  605.065209][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  605.522029][    T9] libceph: connect (1)[c::]:6789 error -101
[  605.528280][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  605.795431][    T9] libceph: connect (1)[c::]:6789 error -101
[  605.815966][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  605.860133][T14803] ceph: No mds server is up or the cluster is laggy
[  606.347512][T13352] Bluetooth: hci5: sending frame failed (-49)
[  606.355417][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  606.795516][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2780'.
[  608.097305][T14866] macsec1: entered allmulticast mode
[  608.114651][T14866] macsec0: entered allmulticast mode
[  608.131258][T14866] veth1_macvtap: entered allmulticast mode
[  608.800265][T14891] netlink: 'syz.0.2798': attribute type 10 has an invalid length.
[  608.861152][T14891] netem: change failed
[  608.893560][T14891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2798'.
[  609.198083][T14903] netlink: 'syz.0.2801': attribute type 39 has an invalid length.
[  609.247172][T14903] syz_tun (unregistering): left allmulticast mode
[  609.272627][T14903] syz_tun (unregistering): left promiscuous mode
[  609.289111][T14903] bridge0: port 3(syz_tun) entered disabled state
[  609.508330][T14917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14917 comm=syz.1.2805
[  609.578730][T14926] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2807'.
[  610.085431][   T44] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  610.128558][   T30] kauditd_printk_skb: 11285 callbacks suppressed
[  610.128572][   T30] audit: type=1400 audit(617.866:496821): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  610.169580][   T30] audit: type=1400 audit(617.904:496822): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  610.192927][   T30] audit: type=1400 audit(617.904:496824): avc:  denied  { read write } for  pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  610.229883][ T5484] audit: audit_backlog=65 > audit_backlog_limit=64
[  610.230415][T14938] audit: audit_backlog=65 > audit_backlog_limit=64
[  610.243118][ T5484] audit: audit_lost=26001 audit_rate_limit=0 audit_backlog_limit=64
[  610.243269][T14938] audit: audit_lost=26002 audit_rate_limit=0 audit_backlog_limit=64
[  610.263695][T14938] audit: backlog limit exceeded
[  610.265387][ T5812] audit: audit_backlog=65 > audit_backlog_limit=64
[  610.273945][T14938] audit: audit_backlog=65 > audit_backlog_limit=64
[  610.493469][   T44] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  610.560441][T14942] netlink: 'syz.0.2812': attribute type 21 has an invalid length.
[  610.580260][T14942] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2812'.
[  612.239467][T14993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2827'.
[  612.319190][   T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  612.642505][   T44] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  612.660874][   T44] usb 4-1: config 0 has no interface number 0
[  612.687132][   T44] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  612.723867][   T44] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  612.774680][   T44] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  612.972278][   T44] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  612.989972][   T44] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  613.004957][   T44] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  613.014199][ T5947] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  613.025255][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.033435][   T44] usb 4-1: Product: syz
[  613.046116][   T44] usb 4-1: Manufacturer: syz
[  613.071277][   T44] usb 4-1: SerialNumber: syz
[  613.092781][   T44] usb 4-1: config 0 descriptor??
[  613.102415][T14989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  613.117313][   T44] iguanair 4-1:0.255: probe with driver iguanair failed with error -12
[  613.254121][ T5947] usb 1-1: device descriptor read/64, error -71
[  613.613143][ T5947] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  614.154250][ T5876] usb 4-1: USB disconnect, device number 10
[  614.211416][ T5947] usb 1-1: device descriptor read/64, error -71
[  614.340122][ T5947] usb usb1-port1: attempt power cycle
[  614.488973][T15034] afs: Unknown parameter 'obj_role'
[  614.619828][    T9] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  614.703157][ T5947] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  614.746762][ T5947] usb 1-1: device descriptor read/8, error -71
[  614.767286][    T9] usb 5-1: device descriptor read/64, error -71
[  615.003291][ T5947] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  615.023938][    T9] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  615.133490][ T5947] usb 1-1: device descriptor read/8, error -71
[  615.248474][    T9] usb 5-1: device descriptor read/64, error -71
[  615.557813][ T5947] usb usb1-port1: unable to enumerate USB device
[  615.564245][   T30] kauditd_printk_skb: 4647 callbacks suppressed
[  615.564257][   T30] audit: type=1400 audit(622.637:500377): avc:  denied  { setopt } for  pid=15048 comm="syz.1.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  615.599116][   T30] audit: type=1400 audit(622.637:500378): avc:  denied  { read } for  pid=15048 comm="syz.1.2841" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  615.621927][   T30] audit: type=1400 audit(622.637:500379): avc:  denied  { open } for  pid=15048 comm="syz.1.2841" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  615.674469][   T30] audit: type=1400 audit(622.646:500380): avc:  denied  { ioctl } for  pid=15048 comm="syz.1.2841" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  615.717497][    T9] usb usb5-port1: attempt power cycle
[  616.155294][   T30] audit: type=1400 audit(623.507:500381): avc:  denied  { write } for  pid=15061 comm="syz.2.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  616.263615][   T30] audit: type=1400 audit(623.535:500382): avc:  denied  { ioctl } for  pid=15061 comm="syz.2.2845" path="socket:[39378]" dev="sockfs" ino=39378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  616.324527][   T30] audit: type=1400 audit(623.535:500383): avc:  denied  { create } for  pid=15061 comm="syz.2.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  616.328076][    T9] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  616.414385][    T9] usb 5-1: device descriptor read/8, error -71
[  616.459494][   T30] audit: type=1400 audit(623.797:500384): avc:  denied  { ioctl } for  pid=15071 comm="syz.3.2847" path="socket:[38393]" dev="sockfs" ino=38393 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  616.628951][ T5876] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  616.639798][   T30] audit: type=1400 audit(623.965:500385): avc:  denied  { read } for  pid=15071 comm="syz.3.2847" dev="sockfs" ino=38393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  616.680950][    T9] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  616.688543][ T9471] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  616.714839][    T9] usb 5-1: device descriptor read/8, error -71
[  616.789169][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.799597][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  616.810714][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.820540][ T5876] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  616.831397][    T9] usb usb5-port1: unable to enumerate USB device
[  616.837778][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.848686][ T5876] usb 2-1: config 0 descriptor??
[  616.854324][ T9471] usb 3-1: Using ep0 maxpacket: 32
[  616.864666][ T9471] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  616.874129][ T9471] usb 3-1: config 0 has no interface number 0
[  616.880373][ T9471] usb 3-1: config 0 interface 184 has no altsetting 0
[  616.889069][ T9471] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  616.898396][ T9471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.906536][ T9471] usb 3-1: Product: syz
[  616.910766][ T9471] usb 3-1: Manufacturer: syz
[  616.915397][ T9471] usb 3-1: SerialNumber: syz
[  616.921958][ T9471] usb 3-1: config 0 descriptor??
[  616.928845][ T9471] smsc75xx v1.0.0
[  617.012318][ T5947] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  617.151575][ T5947] usb 1-1: device descriptor read/64, error -71
[  617.298363][ T5876] waltop 0003:172F:0502.0005: unknown main item tag 0x0
[  617.305559][ T5876] waltop 0003:172F:0502.0005: unknown main item tag 0x0
[  617.312816][ T5876] waltop 0003:172F:0502.0005: unknown main item tag 0x0
[  617.320112][ T5876] waltop 0003:172F:0502.0005: unknown main item tag 0x0
[  617.327179][ T5876] waltop 0003:172F:0502.0005: unknown main item tag 0x0
[  617.336539][ T5876] waltop 0003:172F:0502.0005: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.1-1/input0
[  617.451711][   T30] audit: type=1400 audit(624.723:500386): avc:  denied  { write } for  pid=15078 comm="syz.3.2849" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  617.482700][ T5947] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  617.550957][ T5928] usb 2-1: USB disconnect, device number 8
[  617.646347][ T5947] usb 1-1: device descriptor read/64, error -71
[  617.771682][ T5947] usb usb1-port1: attempt power cycle
[  618.069687][T15069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.121268][T15089] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2850'.
[  618.132212][T15069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.192650][T15089] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  618.338655][ T5947] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  618.359697][ T5947] usb 1-1: device descriptor read/8, error -71
[  618.359954][ T9471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  618.378024][ T9471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  618.390289][ T9471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  618.579459][    T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  618.596201][ T9471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  618.614071][ T9471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  618.629432][ T9471] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  618.656745][ T9471] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  618.669735][ T9471] usb 3-1: USB disconnect, device number 13
[  618.768401][    T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  618.780096][    T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  618.794021][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  618.804128][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  618.808840][ T5947] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  618.816163][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 43530, setting to 64
[  618.861726][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  618.862330][ T5947] usb 1-1: device descriptor read/8, error -71
[  618.906693][    T9] usb 2-1: string descriptor 0 read error: -22
[  618.913053][    T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  618.947357][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.969187][    T9] usb 2-1: config 0 descriptor??
[  618.975665][T15093] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  619.021678][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[  619.034682][ T5947] usb usb1-port1: unable to enumerate USB device
[  619.042783][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[  619.250567][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.268352][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.445604][T15108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2854'.
[  619.521368][ T5947] usb 2-1: USB disconnect, device number 9
[  619.699162][T15096] netlink: 'syz.3.2851': attribute type 4 has an invalid length.
[  619.715965][T15096] veth1_macvtap: left promiscuous mode
[  619.909511][T15113] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  619.916921][T15113] overlayfs: failed to set xattr on upper
[  619.923351][T15113] overlayfs: ...falling back to redirect_dir=nofollow.
[  619.933195][T15113] overlayfs: ...falling back to uuid=null.
[  620.203375][T15119] kvm_intel: kvm [15118]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6
[  620.415724][T15124] syz_tun (unregistering): left allmulticast mode
[  620.476059][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  620.483731][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  620.570440][T15130] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2862'.
[  620.626053][    T9] usb 1-1: device descriptor read/64, error -71
[  620.634137][ T5876] usb 2-1: device descriptor read/64, error -71
[  620.892960][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  620.956680][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  621.260471][ T5876] usb 2-1: device descriptor read/64, error -71
[  621.266938][    T9] usb 1-1: device descriptor read/64, error -71
[  621.747149][ T5876] usb usb2-port1: attempt power cycle
[  621.752911][    T9] usb usb1-port1: attempt power cycle
[  622.053886][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  622.053902][   T30] audit: type=1400 audit(629.026:500420): avc:  denied  { create } for  pid=15163 comm="syz.2.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  622.216950][T15165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2869'.
[  622.446116][   T30] audit: type=1400 audit(629.082:500421): avc:  denied  { create } for  pid=15163 comm="syz.2.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  622.465345][   T30] audit: type=1400 audit(629.213:500422): avc:  denied  { setopt } for  pid=15163 comm="syz.2.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  622.507347][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  622.515061][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  622.540090][    T9] usb 1-1: device descriptor read/8, error -71
[  622.546660][ T5876] usb 2-1: device descriptor read/8, error -71
[  622.672678][   T30] audit: type=1400 audit(629.606:500423): avc:  denied  { name_bind } for  pid=15163 comm="syz.2.2870" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  622.695687][   T30] audit: type=1400 audit(629.624:500424): avc:  denied  { node_bind } for  pid=15163 comm="syz.2.2870" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  622.817289][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  622.824989][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  622.862020][    T9] usb 1-1: device descriptor read/8, error -71
[  622.871859][ T5876] usb 2-1: device descriptor read/8, error -71
[  622.888246][   T30] audit: type=1400 audit(629.802:500425): avc:  denied  { write } for  pid=15169 comm="syz.4.2871" name="fib_trie" dev="proc" ino=4026532934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  622.999587][    T9] usb usb1-port1: unable to enumerate USB device
[  623.006196][ T5876] usb usb2-port1: unable to enumerate USB device
[  623.017598][T15163] delete_channel: no stack
[  623.164907][   T30] audit: type=1400 audit(630.064:500426): avc:  denied  { create } for  pid=15178 comm="syz.2.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  623.186633][   T30] audit: type=1400 audit(630.092:500427): avc:  denied  { write } for  pid=15178 comm="syz.2.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  623.244964][ T5947] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  623.394824][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'.
[  623.743119][   T30] audit: type=1400 audit(630.607:500428): avc:  denied  { bind } for  pid=15179 comm="syz.3.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  623.747429][ T5947] usb 5-1: Using ep0 maxpacket: 32
[  623.844225][ T5947] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  623.869537][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.887187][ T5947] usb 5-1: Product: syz
[  623.895709][ T5947] usb 5-1: Manufacturer: syz
[  623.903742][ T5947] usb 5-1: SerialNumber: syz
[  623.922740][ T5947] usb 5-1: config 0 descriptor??
[  623.949078][ T5947] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  624.223655][T15205] Bluetooth: MGMT ver 1.23
[  624.936718][ T5947] gspca_ov534_9: reg_w failed -110
[  624.945239][   T30] audit: type=1400 audit(631.056:500429): avc:  denied  { bind } for  pid=15197 comm="syz.1.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  625.097168][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  625.103571][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  626.477440][ T5947] gspca_ov534_9: Unknown sensor 0000
[  626.477502][ T5947] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  626.772458][T15221] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2881'.
[  627.108059][ T5947] usb 5-1: USB disconnect, device number 15
[  627.446711][ T5947] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  627.470359][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  627.470373][   T30] audit: type=1400 audit(634.096:500432): avc:  denied  { create } for  pid=15226 comm="syz.2.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  627.528007][   T30] audit: type=1400 audit(634.142:500433): avc:  denied  { append } for  pid=15228 comm="syz.0.2885" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  627.578433][   T30] audit: type=1400 audit(634.199:500434): avc:  denied  { create } for  pid=15230 comm="syz.2.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  627.609103][T15232] overlayfs: failed to resolve './file0': -2
[  627.773600][ T5947] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  627.784573][ T5947] usb 5-1: config 0 has no interface number 0
[  627.791125][ T5947] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  628.083576][    T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  628.109124][ T5947] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  628.135454][ T5947] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  628.164990][ T5947] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  628.191668][ T5947] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  628.203871][   T30] audit: type=1400 audit(634.778:500435): avc:  denied  { read } for  pid=15237 comm="syz.2.2887" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  628.233162][   T30] audit: type=1400 audit(634.807:500436): avc:  denied  { open } for  pid=15237 comm="syz.2.2887" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  628.268812][   T30] audit: type=1400 audit(634.807:500437): avc:  denied  { ioctl } for  pid=15237 comm="syz.2.2887" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  628.303478][ T5947] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  628.303555][T15239] usb usb8: usbfs: process 15239 (syz.2.2887) did not claim interface 0 before use
[  628.312871][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.337422][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  628.355092][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  628.368791][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  628.376456][ T5947] usb 5-1: Product: syz
[  628.385805][   T30] audit: type=1400 audit(634.807:500438): avc:  denied  { set_context_mgr } for  pid=15237 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  628.408740][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.409048][ T5947] usb 5-1: Manufacturer: syz
[  628.441150][ T5947] usb 5-1: SerialNumber: syz
[  628.457657][ T5947] usb 5-1: config 0 descriptor??
[  628.469508][T15223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  628.483047][ T5947] iguanair 5-1:0.255: probe with driver iguanair failed with error -12
[  628.700832][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  628.706351][    T9] usbtmc 2-1:16.0: can't read capabilities
[  628.990875][   T30] audit: type=1400 audit(635.330:500439): avc:  denied  { execute_no_trans } for  pid=15242 comm="syz.3.2888" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  629.006893][    T9] usb 2-1: USB disconnect, device number 14
[  629.341324][   T30] audit: type=1400 audit(635.798:500440): avc:  denied  { accept } for  pid=15247 comm="syz.2.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  629.371203][ T5826] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  629.391142][   T30] audit: type=1400 audit(635.798:500441): avc:  denied  { write } for  pid=15247 comm="syz.2.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  629.557100][ T5826] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.567258][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0
[  629.574444][ T5826] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  629.583632][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.576635][ T5826] usb 1-1: config 0 descriptor??
[  630.808549][T15245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2889'.
[  630.889642][ T5928] usb 5-1: USB disconnect, device number 16
[  631.052428][T15268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2895'.
[  632.109339][ T5826] aquacomputer_d5next 0003:0C70:F0B6.0006: item fetching failed at offset 5/7
[  632.118935][ T5826] aquacomputer_d5next 0003:0C70:F0B6.0006: probe with driver aquacomputer_d5next failed with error -22
[  632.288117][T15286] Invalid logical block size (9)
[  632.919250][ T5947] usb 1-1: USB disconnect, device number 20
[  633.175887][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'.
[  634.439224][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  634.439545][   T30] audit: type=1400 audit(640.615:500458): avc:  denied  { create } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  634.597896][   T30] audit: type=1400 audit(640.634:500459): avc:  denied  { read write } for  pid=15294 comm="syz.3.2901" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  634.793573][   T30] audit: type=1400 audit(640.643:500460): avc:  denied  { open } for  pid=15294 comm="syz.3.2901" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  634.909695][   T30] audit: type=1400 audit(640.643:500461): avc:  denied  { block_suspend } for  pid=15294 comm="syz.3.2901" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  634.955481][   T30] audit: type=1400 audit(640.737:500462): avc:  denied  { bind } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  634.984282][   T30] audit: type=1400 audit(640.793:500463): avc:  denied  { create } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  635.004098][   T30] audit: type=1400 audit(640.812:500464): avc:  denied  { bind } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  635.040226][   T30] audit: type=1400 audit(640.821:500465): avc:  denied  { listen } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  635.068801][ T5876] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  635.077089][   T30] audit: type=1400 audit(640.859:500466): avc:  denied  { accept } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  635.096384][ T5947] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  636.101037][ T5876] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  636.101225][   T30] audit: type=1400 audit(640.961:500467): avc:  denied  { write } for  pid=15294 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  636.111015][ T5876] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  636.143168][ T5876] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  636.782547][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.886269][ T5947] usb 1-1: Using ep0 maxpacket: 8
[  637.167692][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short
[  637.184662][ T5947] usb 1-1: config 4 interface 0 has no altsetting 0
[  637.211315][ T5947] usb 1-1: string descriptor 0 read error: -22
[  637.245776][ T5947] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  637.255691][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.280417][ T5947] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  637.325462][ T5947] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  637.343004][ T5947] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  637.350542][ T5947] usb 1-1: media controller created
[  637.366073][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  637.405002][ T5876] usb 3-1: GET_CAPABILITIES returned 0
[  637.420937][ T5876] usbtmc 3-1:16.0: can't read capabilities
[  637.539721][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.578114][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.716024][T15315] program syz.1.2906 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  638.079813][ T6152] usb 3-1: USB disconnect, device number 14
[  638.137064][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  638.318800][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  638.325567][ T5928] usb 4-1: config 0 has no interfaces?
[  638.334192][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  638.372994][ T5928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  638.381107][ T5928] usb 4-1: Manufacturer: syz
[  638.429517][ T5928] usb 4-1: config 0 descriptor??
[  638.608857][ T5947] zl10353_read_register: readreg error (reg=127, ret==0)
[  638.609062][T15302] usb 1-1: dvb_usb_au6610: wlen=0, aborting
[  638.757059][ T5947] usb 1-1: USB disconnect, device number 21
[  638.789545][ T5928] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  639.068506][ T5928] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  639.076841][ T5928] usb 5-1: config 0 has no interface number 0
[  639.083193][ T5928] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  639.097405][ T5928] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  639.109003][ T5928] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  639.121197][ T5928] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  639.136948][ T5928] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  639.258784][ T5928] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  639.268636][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.279123][ T5928] usb 5-1: Product: syz
[  640.766314][T15340] netlink: 'syz.0.2912': attribute type 21 has an invalid length.
[  640.774290][T15340] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2912'.
[  640.783462][T15340] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2912'.
[  640.874827][ T5928] usb 5-1: Manufacturer: syz
[  640.879862][ T5928] usb 5-1: SerialNumber: syz
[  640.896575][ T5928] usb 5-1: config 0 descriptor??
[  640.901892][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  640.901905][   T30] audit: type=1400 audit(646.658:500479): avc:  denied  { ioctl } for  pid=15342 comm="syz.1.2913" path="socket:[40414]" dev="sockfs" ino=40414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  640.902898][T15326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  641.021271][   T30] audit: type=1400 audit(646.695:500480): avc:  denied  { read write } for  pid=15342 comm="syz.1.2913" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  641.029956][ T5928] iguanair 5-1:0.255: probe with driver iguanair failed with error -12
[  641.051107][   T30] audit: type=1400 audit(646.695:500481): avc:  denied  { open } for  pid=15342 comm="syz.1.2913" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  641.057473][   T44] usb 4-1: USB disconnect, device number 11
[  641.116663][   T30] audit: type=1400 audit(646.695:500482): avc:  denied  { ioctl } for  pid=15342 comm="syz.1.2913" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  641.383754][T15351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2914'.
[  641.645111][   T44] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  641.835844][   T44] usb 4-1: Using ep0 maxpacket: 16
[  641.843154][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.851125][   T30] audit: type=1400 audit(647.537:500483): avc:  denied  { create } for  pid=15352 comm="syz.1.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  641.854845][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  641.885027][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  641.900128][   T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  641.910049][   T30] audit: type=1400 audit(647.584:500484): avc:  denied  { connect } for  pid=15352 comm="syz.1.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  641.910174][   T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  641.994565][   T44] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  641.995913][ T5826] usb 5-1: USB disconnect, device number 17
[  642.004213][   T44] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  642.018699][   T44] usb 4-1: Manufacturer: syz
[  642.029200][   T44] usb 4-1: config 0 descriptor??
[  642.047964][   T30] audit: type=1400 audit(647.593:500485): avc:  denied  { read } for  pid=15352 comm="syz.1.2916" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  642.169650][   T30] audit: type=1400 audit(647.846:500486): avc:  denied  { write } for  pid=15362 comm="syz.2.2918" path="socket:[41099]" dev="sockfs" ino=41099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  642.338734][ T6152] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  642.346508][   T44] rc_core: IR keymap rc-hauppauge not found
[  642.354019][   T44] Registered IR keymap rc-empty
[  642.359179][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.402765][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.426723][   T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  642.440507][   T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  642.455162][   T30] audit: type=1400 audit(648.108:500487): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3475 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  642.456194][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.485042][   T30] audit: type=1400 audit(648.108:500488): avc:  denied  { open } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3475 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  642.498924][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.516819][ T6152] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config
[  642.527629][ T6152] usb 1-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  642.544920][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.552725][ T6152] usb 1-1: config 0 interface 0 has no altsetting 0
[  642.559635][ T6152] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  642.573611][ T5826] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  642.664114][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.676195][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.701919][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.709931][ T6152] usb 1-1: config 0 descriptor??
[  642.735584][ T6152] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  642.742981][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.776949][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.798314][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.828266][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.863860][ T5826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.883674][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  642.894709][ T5826] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  642.904788][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.913070][ T5826] usb 3-1: Product: syz
[  642.914987][   T44] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  642.921410][ T5826] usb 3-1: Manufacturer: syz
[  642.942322][ T5826] usb 3-1: SerialNumber: syz
[  642.957805][   T44] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  642.958956][ T5826] usb 3-1: config 0 descriptor??
[  642.988285][   T44] usb 4-1: USB disconnect, device number 12
[  642.994937][T15361] tipc: Started in network mode
[  643.000343][T15361] tipc: Node identity , cluster identity 4711
[  643.019620][T15361] tipc: Failed to obtain node identity
[  643.028313][T15361] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  643.035180][ T5826] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5
[  643.097485][ T6152] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  643.167424][T13352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  643.178262][T13352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  643.188484][T13352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  643.197071][T13352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  643.204941][T13352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  643.227507][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  643.228893][    T9] usb 3-1: USB disconnect, device number 15
[  643.251793][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  643.262509][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  643.268422][ T6152] usb 2-1: Using ep0 maxpacket: 16
[  643.277098][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  643.278250][ T6152] usb 2-1: unable to read config index 0 descriptor/start: -61
[  643.292361][ T6152] usb 2-1: can't read configurations, error -61
[  643.298927][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  643.439576][ T6152] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  643.539333][T15373] chnl_net:caif_netlink_parms(): no params data found
[  643.602735][T15373] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.609877][T15373] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.617287][T15373] bridge_slave_0: entered allmulticast mode
[  643.624039][T15373] bridge_slave_0: entered promiscuous mode
[  643.632371][ T6152] usb 2-1: Using ep0 maxpacket: 16
[  643.634234][T15373] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.672000][T15373] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.780754][ T6152] usb 2-1: unable to read config index 0 descriptor/start: -61
[  643.788444][ T6152] usb 2-1: can't read configurations, error -61
[  643.795174][T15373] bridge_slave_1: entered allmulticast mode
[  643.795416][ T6152] usb usb2-port1: attempt power cycle
[  643.822229][T15373] bridge_slave_1: entered promiscuous mode
[  643.871225][T15373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  644.548062][T15373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  644.626148][ T6152] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  644.699155][ T6152] usb 2-1: Using ep0 maxpacket: 16
[  644.741204][ T6152] usb 2-1: unable to read config index 0 descriptor/start: -61
[  644.742232][T15373] team0: Port device team_slave_0 added
[  644.749270][ T6152] usb 2-1: can't read configurations, error -61
[  644.773755][T15373] team0: Port device team_slave_1 added
[  644.806307][T15373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  644.818284][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  644.860183][T15373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.876117][T15373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.883313][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  644.904122][ T6152] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  644.909778][T15373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.990602][ T6152] usb 2-1: Using ep0 maxpacket: 16
[  645.016934][ T6152] usb 2-1: unable to read config index 0 descriptor/start: -61
[  645.025277][T15373] hsr_slave_0: entered promiscuous mode
[  645.026016][ T6152] usb 2-1: can't read configurations, error -61
[  645.041806][ T6152] usb usb2-port1: unable to enumerate USB device
[  645.047258][T15373] hsr_slave_1: entered promiscuous mode
[  645.077307][T15399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15399 comm=syz.2.2925
[  645.077685][T15373] debugfs: 'hsr0' already exists in 'hsr'
[  645.115235][T15373] Cannot create hsr debugfs directory
[  645.210307][T15403] binder: 15401:15403 ioctl c0306201 200000000040 returned -14
[  645.535006][ T5828] Bluetooth: hci5: command tx timeout
[  645.665361][    T9] usb 1-1: USB disconnect, device number 22
[  645.849577][T15412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2928'.
[  646.140734][T15373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.274235][T15373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.296994][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  646.297012][   T30] audit: type=1400 audit(651.709:500499): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  646.342803][   T30] audit: type=1400 audit(651.747:500500): avc:  denied  { watch watch_reads } for  pid=15413 comm="syz.1.2930" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  646.397533][T15423] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2932'.
[  646.572359][T15373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.606912][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'.
[  646.859419][T15373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.341617][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  647.455953][T15373] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  647.470355][T15373] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  647.487710][T15373] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  647.501733][T15373] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  647.510583][    T9] usb 4-1: Using ep0 maxpacket: 16
[  647.520676][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.541216][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.569692][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  647.603940][    T9] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  647.689485][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.725213][    T9] usb 4-1: config 0 descriptor??
[  647.734432][T15373] 8021q: adding VLAN 0 to HW filter on device bond0
[  647.758739][ T5828] Bluetooth: hci5: command tx timeout
[  647.799264][T15373] 8021q: adding VLAN 0 to HW filter on device team0
[  647.818077][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.825251][ T6424] bridge0: port 1(bridge_slave_0) entered forwarding state
[  647.848471][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.855666][ T6739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  647.866712][T15451] FAULT_INJECTION: forcing a failure.
[  647.866712][T15451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  647.898345][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.2.2937 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  647.898378][T15451] Tainted: [L]=SOFTLOCKUP
[  647.898394][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  647.898404][T15451] Call Trace:
[  647.898411][T15451]  <TASK>
[  647.898417][T15451]  dump_stack_lvl+0x16c/0x1f0
[  647.898444][T15451]  should_fail_ex+0x512/0x640
[  647.898473][T15451]  _copy_from_user+0x2e/0xd0
[  647.898498][T15451]  do_ipv6_setsockopt+0x91b/0x4680
[  647.898526][T15451]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  647.898547][T15451]  ? avc_has_perm_noaudit+0x117/0x3b0
[  647.898573][T15451]  ? avc_has_perm_noaudit+0x149/0x3b0
[  647.898594][T15451]  ? avc_has_perm+0x144/0x1f0
[  647.898613][T15451]  ? __pfx_avc_has_perm+0x10/0x10
[  647.898633][T15451]  ? get_pid_task+0x106/0x250
[  647.898649][T15451]  ? proc_fail_nth_write+0x9f/0x220
[  647.898665][T15451]  ? sock_has_perm+0x258/0x2f0
[  647.898679][T15451]  ? __pfx_sock_has_perm+0x10/0x10
[  647.898692][T15451]  ? selinux_netlbl_socket_setsockopt+0x183/0x470
[  647.898710][T15451]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  647.898732][T15451]  ? ipv6_setsockopt+0xcb/0x170
[  647.898748][T15451]  ipv6_setsockopt+0xcb/0x170
[  647.898767][T15451]  udpv6_setsockopt+0x7d/0xd0
[  647.898780][T15451]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  647.898798][T15451]  do_sock_setsockopt+0xf3/0x1d0
[  647.898815][T15451]  __sys_setsockopt+0x1a0/0x230
[  647.898830][T15451]  __x64_sys_setsockopt+0xbd/0x160
[  647.898841][T15451]  ? do_syscall_64+0x91/0xf80
[  647.898856][T15451]  ? lockdep_hardirqs_on+0x7c/0x110
[  647.898871][T15451]  do_syscall_64+0xcd/0xf80
[  647.898887][T15451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.898900][T15451] RIP: 0033:0x7f712638f749
[  647.898911][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  647.898924][T15451] RSP: 002b:00007f712729d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  647.898937][T15451] RAX: ffffffffffffffda RBX: 00007f71265e6180 RCX: 00007f712638f749
[  647.898945][T15451] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  647.898952][T15451] RBP: 00007f712729d090 R08: 0000000000001408 R09: 0000000000000000
[  647.898960][T15451] R10: 0000200000001440 R11: 0000000000000246 R12: 0000000000000001
[  647.898967][T15451] R13: 00007f71265e6218 R14: 00007f71265e6180 R15: 00007fff1079d3a8
[  647.898985][T15451]  </TASK>
[  648.209825][T15373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  648.220294][T15373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  648.241426][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  648.247371][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  648.257675][    T9] usb 4-1: USB disconnect, device number 13
[  648.467188][T15460] xt_cgroup: path and classid specified
[  649.021208][T15373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  649.982324][ T5828] Bluetooth: hci5: command tx timeout
[  650.180678][T15482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2942'.
[  650.588263][   T30] audit: type=1400 audit(655.713:500501): avc:  denied  { append } for  pid=15483 comm="syz.0.2943" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  650.835784][   T30] audit: type=1400 audit(655.947:500502): avc:  denied  { read } for  pid=15489 comm="syz.3.2944" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  650.871672][T15498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19220 sclass=netlink_tcpdiag_socket pid=15498 comm=syz.3.2944
[  650.887032][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2944'.
[  650.896193][   T30] audit: type=1400 audit(656.003:500503): avc:  denied  { create } for  pid=15496 comm="syz.1.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  650.924875][T15373] veth0_vlan: entered promiscuous mode
[  650.951424][T15498] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  650.954580][T15373] veth1_vlan: entered promiscuous mode
[  651.005630][   T30] audit: type=1400 audit(656.003:500504): avc:  denied  { name_connect } for  pid=15496 comm="syz.1.2946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  651.125212][T15373] veth0_macvtap: entered promiscuous mode
[  651.146809][T15373] veth1_macvtap: entered promiscuous mode
[  651.208459][T15373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  651.453954][T15373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  651.467242][ T3014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.489644][ T6152] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  651.505004][   T30] audit: type=1400 audit(656.573:500505): avc:  denied  { read } for  pid=15496 comm="syz.1.2946" laddr=fe80::f lport=38944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  651.649995][ T6152] usb 3-1: Using ep0 maxpacket: 32
[  651.692799][ T9471] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  651.730317][ T3014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.748582][ T6152] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  651.760003][ T6152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.786265][ T3014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.795885][ T6152] usb 3-1: Product: syz
[  651.813119][ T3014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  651.851663][ T6152] usb 3-1: Manufacturer: syz
[  651.868091][ T6152] usb 3-1: SerialNumber: syz
[  651.885077][ T9471] usb 4-1: device descriptor read/64, error -71
[  651.890580][ T6152] usb 3-1: config 0 descriptor??
[  651.927450][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.935979][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.993345][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.016534][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.048104][   T30] audit: type=1400 audit(657.088:500506): avc:  denied  { mounton } for  pid=15373 comm="syz-executor" path="/root/syzkaller.RhP7LT/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  652.111672][   T30] audit: type=1400 audit(657.088:500507): avc:  denied  { mount } for  pid=15373 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  652.152311][ T9471] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  652.160731][ T6152] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  652.184902][ T6152] f0 00 00 00 00 00 00 00 
[  652.189474][ T6152] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  652.201369][   T30] audit: type=1400 audit(657.088:500508): avc:  denied  { mounton } for  pid=15373 comm="syz-executor" path="/root/syzkaller.RhP7LT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  652.229153][ T5828] Bluetooth: hci5: command tx timeout
[  652.338570][   T30] audit: type=1400 audit(657.088:500509): avc:  denied  { mounton } for  pid=15373 comm="syz-executor" path="/root/syzkaller.RhP7LT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  652.808665][ T9471] usb 4-1: device descriptor read/64, error -71
[  652.934245][ T9471] usb usb4-port1: attempt power cycle
[  653.328391][ T9471] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  653.403006][ T9471] usb 4-1: device descriptor read/8, error -71
[  653.478506][   T30] audit: type=1400 audit(657.088:500510): avc:  denied  { unmount } for  pid=15373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  653.499281][   T30] audit: type=1400 audit(657.116:500511): avc:  denied  { mounton } for  pid=15373 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  653.522617][   T30] audit: type=1400 audit(657.116:500512): avc:  denied  { mount } for  pid=15373 comm="syz-executor" name="/" dev="gadgetfs" ino=7444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  653.545466][   T30] audit: type=1400 audit(657.116:500513): avc:  denied  { mount } for  pid=15373 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  653.567931][   T30] audit: type=1400 audit(657.116:500514): avc:  denied  { mounton } for  pid=15373 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  653.592251][   T30] audit: type=1400 audit(657.116:500515): avc:  denied  { mount } for  pid=15373 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  653.841560][ T9471] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  653.874405][ T9471] usb 4-1: device descriptor read/8, error -71
[  653.948555][ T5876] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  653.991550][ T9471] usb usb4-port1: unable to enumerate USB device
[  654.091674][T15549] xt_cgroup: path and classid specified
[  654.109358][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  654.125546][ T5876] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  654.134591][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  654.145823][ T5876] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  654.256780][ T5876] usb 5-1: config 1 has no interface number 1
[  654.332484][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  654.375331][ T5876] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  654.410693][ T5876] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  654.420100][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.689073][ T5826] usb 3-1: USB disconnect, device number 16
[  654.702657][ T5876] usb 5-1: Product: syz
[  654.725002][ T5876] usb 5-1: Manufacturer: syz
[  654.741233][ T5876] usb 5-1: SerialNumber: syz
[  655.357127][ T5876] usb 5-1: USB disconnect, device number 18
[  655.402078][T13352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  655.431513][T13352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  655.440164][T13352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  655.448762][T13352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  655.469098][T15018] udevd[15018]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  655.475134][T15556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2957'.
[  655.485253][T13352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  656.148415][T15558] chnl_net:caif_netlink_parms(): no params data found
[  656.288071][T15590] IPVS: Error connecting to the multicast addr
[  656.322769][ T6152] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  656.334872][T15558] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.353917][T15558] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.361114][T15558] bridge_slave_0: entered allmulticast mode
[  656.375411][T15558] bridge_slave_0: entered promiscuous mode
[  656.383240][T15558] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.426902][T15558] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.441314][T15558] bridge_slave_1: entered allmulticast mode
[  656.448582][T15558] bridge_slave_1: entered promiscuous mode
[  656.495019][ T6152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.512118][T15558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  656.516814][ T6152] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  656.541447][T15558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.550071][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.585050][ T6152] usb 1-1: config 0 descriptor??
[  656.598094][T15558] team0: Port device team_slave_0 added
[  656.620803][T15558] team0: Port device team_slave_1 added
[  656.697882][T15558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.704849][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.781317][T15558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.800117][T15558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.807476][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.891002][T15558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.222509][ T6152] usbhid 1-1:0.0: can't add hid device: -71
[  657.242049][ T6152] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  657.286235][ T6152] usb 1-1: USB disconnect, device number 23
[  657.290458][ T5826] IPVS: starting estimator thread 0...
[  657.318208][T15558] hsr_slave_0: entered promiscuous mode
[  657.327972][T15558] hsr_slave_1: entered promiscuous mode
[  657.335661][T15558] debugfs: 'hsr0' already exists in 'hsr'
[  657.343293][T15558] Cannot create hsr debugfs directory
[  657.402037][T15603] IPVS: using max 45 ests per chain, 108000 per kthread
[  657.679440][ T5828] Bluetooth: hci4: command tx timeout
[  657.733159][T15612] xt_socket: unknown flags 0x4
[  657.749270][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  657.749281][   T30] audit: type=1400 audit(662.410:500529): avc:  denied  { ioctl } for  pid=15613 comm="syz.3.2969" path="socket:[43044]" dev="sockfs" ino=43044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  657.799628][T15558] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.972567][T15558] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.146799][   T30] audit: type=1400 audit(662.784:500530): avc:  denied  { connect } for  pid=15623 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  658.179891][T15558] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.197644][   T30] audit: type=1400 audit(662.803:500531): avc:  denied  { shutdown } for  pid=15623 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  658.219331][   T30] audit: type=1400 audit(662.812:500532): avc:  denied  { map } for  pid=15623 comm="syz.4.2971" path="socket:[42348]" dev="sockfs" ino=42348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  658.245794][   T30] audit: type=1400 audit(662.812:500533): avc:  denied  { read accept } for  pid=15623 comm="syz.4.2971" path="socket:[42348]" dev="sockfs" ino=42348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  658.278913][T15558] bond0: (slave netdevsim0): Releasing backup interface
[  658.301923][T15558] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.495160][   T30] audit: type=1400 audit(663.112:500534): avc:  denied  { mount } for  pid=15627 comm="syz.0.2972" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  658.502610][   T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  658.662026][T15558] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  658.949863][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  658.984134][   T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30
[  659.003804][   T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193
[  659.044973][T15558] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  659.056189][   T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  659.067281][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.088113][   T44] usb 4-1: config 0 descriptor??
[  659.096310][T15558] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  659.129342][T15558] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  659.186823][    T9] usb 5-1: device descriptor read/64, error -71
[  659.224000][   T30] audit: type=1400 audit(663.795:500535): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  659.275599][T15558] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.329592][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  659.340286][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  659.367506][   T30] audit: type=1400 audit(663.926:500536): avc:  denied  { nlmsg_read } for  pid=15655 comm="syz.0.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  659.371487][T15558] 8021q: adding VLAN 0 to HW filter on device team0
[  659.440778][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.447903][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.455990][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  659.478938][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.486076][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.599041][   T44] magicmouse 0003:05AC:0269.0007: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0
[  659.614547][    T9] usb 5-1: device descriptor read/64, error -71
[  659.753604][    T9] usb usb5-port1: attempt power cycle
[  659.822923][ T5826] usb 4-1: USB disconnect, device number 18
[  659.903864][ T5828] Bluetooth: hci4: command tx timeout
[  659.930602][T15558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.969251][T15558] veth0_vlan: entered promiscuous mode
[  659.983376][T15558] veth1_vlan: entered promiscuous mode
[  660.011573][T15558] veth0_macvtap: entered promiscuous mode
[  660.023018][T15558] veth1_macvtap: entered promiscuous mode
[  660.045731][T15558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  660.059918][T15558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.077020][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.087967][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.098150][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.108411][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.151753][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  660.192201][    T9] usb 5-1: device descriptor read/8, error -71
[  660.246860][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.279894][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.359557][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.369883][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.428567][   T30] audit: type=1400 audit(664.908:500537): avc:  denied  { connect } for  pid=15670 comm="syz.1.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  660.494707][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  660.528972][    T9] usb 5-1: device descriptor read/8, error -71
[  660.860939][    T9] usb usb5-port1: unable to enumerate USB device
[  660.908277][T15696] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2984'.
[  661.398419][   T30] audit: type=1400 audit(665.824:500538): avc:  denied  { ioctl } for  pid=15690 comm="syz.0.2983" path="socket:[42925]" dev="sockfs" ino=42925 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  661.423651][ T5928] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  661.592141][ T5928] usb 2-1: Using ep0 maxpacket: 8
[  661.621289][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.639312][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0
[  661.666830][ T5928] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  661.687908][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.719689][ T5928] usb 2-1: config 0 descriptor??
[  661.998462][   T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  662.099337][  T976] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  662.126715][ T5828] Bluetooth: hci4: command tx timeout
[  662.158685][   T44] usb 5-1: Using ep0 maxpacket: 32
[  662.165330][   T44] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  662.174050][   T44] usb 5-1: config 0 has no interface number 0
[  662.183391][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.192539][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.202628][   T44] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  662.211775][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.224016][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.231134][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.239512][   T44] usb 5-1: Product: syz
[  662.243730][   T44] usb 5-1: Manufacturer: syz
[  662.248810][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.256250][   T44] usb 5-1: SerialNumber: syz
[  662.261694][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.270603][   T44] usb 5-1: config 0 descriptor??
[  662.275992][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.284870][  T976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  662.295500][   T44] smsc95xx v2.0.0
[  662.299727][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.307418][  T976] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  662.322916][ T5928] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0
[  662.338718][  T976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  662.349672][ T5928] sunplus 0003:04FC:05D8.0008: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0
[  662.362396][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.449705][ T5928] usb 2-1: USB disconnect, device number 19
[  662.478854][T15732] fido_id[15732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  662.597782][  T976] usb 3-1: GET_CAPABILITIES returned 0
[  662.618115][  T976] usbtmc 3-1:16.0: can't read capabilities
[  662.760192][T15737] xt_cgroup: path and classid specified
[  662.859650][T15722] FAULT_INJECTION: forcing a failure.
[  662.859650][T15722] name failslab, interval 1, probability 0, space 0, times 0
[  662.873077][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.2.2990 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  662.873102][T15722] Tainted: [L]=SOFTLOCKUP
[  662.873105][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  662.873112][T15722] Call Trace:
[  662.873115][T15722]  <TASK>
[  662.873119][T15722]  dump_stack_lvl+0x16c/0x1f0
[  662.873136][T15722]  should_fail_ex+0x512/0x640
[  662.873152][T15722]  ? kmem_cache_alloc_noprof+0x62/0x770
[  662.873169][T15722]  should_failslab+0xc2/0x120
[  662.873191][T15722]  kmem_cache_alloc_noprof+0x83/0x770
[  662.873206][T15722]  ? skb_clone+0x190/0x3f0
[  662.873226][T15722]  ? skb_clone+0x190/0x3f0
[  662.873239][T15722]  skb_clone+0x190/0x3f0
[  662.873250][T15722]  netlink_broadcast_filtered+0xb76/0xf90
[  662.873268][T15722]  ? __pfx_netlink_broadcast_filtered+0x10/0x10
[  662.873279][T15722]  ? sprintf+0xcc/0x100
[  662.873297][T15722]  ? netlink_has_listeners+0x20f/0x430
[  662.873315][T15722]  netlink_broadcast+0x39/0x50
[  662.873335][T15722]  kobject_uevent_env+0xcbc/0x1920
[  662.873362][T15722]  ? gadget_unbind_driver+0x376/0x510
[  662.873384][T15722]  ? __pfx_dummy_udc_async_callbacks+0x10/0x10
[  662.873396][T15722]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  662.873412][T15722]  device_remove+0xcb/0x170
[  662.873427][T15722]  device_release_driver_internal+0x44b/0x620
[  662.873440][T15722]  driver_detach+0xd8/0x1b0
[  662.873453][T15722]  ? __pfx_raw_release+0x10/0x10
[  662.873472][T15722]  bus_remove_driver+0x13b/0x2e0
[  662.873494][T15722]  driver_unregister+0x76/0xb0
[  662.873509][T15722]  usb_gadget_unregister_driver+0x49/0x70
[  662.873528][T15722]  raw_release+0x1ae/0x2b0
[  662.873541][T15722]  __fput+0x402/0xb70
[  662.873554][T15722]  fput_close_sync+0x118/0x260
[  662.873564][T15722]  ? __pfx_fput_close_sync+0x10/0x10
[  662.873573][T15722]  ? dnotify_flush+0x79/0x4c0
[  662.873589][T15722]  __x64_sys_close+0x8b/0x120
[  662.873604][T15722]  do_syscall_64+0xcd/0xf80
[  662.873625][T15722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.873640][T15722] RIP: 0033:0x7f16b758f749
[  662.873653][T15722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  662.873666][T15722] RSP: 002b:00007f16b850f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  662.873678][T15722] RAX: ffffffffffffffda RBX: 00007f16b77e5fa0 RCX: 00007f16b758f749
[  662.873685][T15722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  662.873690][T15722] RBP: 00007f16b850f090 R08: 0000000000000000 R09: 0000000000000000
[  662.873696][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  662.873701][T15722] R13: 00007f16b77e6038 R14: 00007f16b77e5fa0 R15: 00007ffd1fe45c18
[  662.873715][T15722]  </TASK>
[  662.944539][T15738] usb 3-1: usbtmc_ioctl_clear_in_halt returned -19
[  663.170699][ T5876] usb 3-1: USB disconnect, device number 17
[  663.321958][T13352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  663.333549][T13352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  663.347083][T13352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  663.355197][T13352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  663.364137][T13352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  663.374416][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  663.374429][   T30] audit: type=1400 audit(1178.682:500543): avc:  denied  { mount } for  pid=15715 comm="syz.4.2989" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  663.379155][T15716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  663.402663][   T30] audit: type=1400 audit(1178.682:500544): avc:  denied  { unlink } for  pid=15715 comm="syz.4.2989" name="#3" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  663.820424][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  663.831370][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  663.875640][   T30] audit: type=1400 audit(1179.122:500545): avc:  denied  { name_bind } for  pid=15747 comm="syz.1.2997" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  663.923277][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  663.972720][   T44] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  664.020575][   T44] usb 5-1: USB disconnect, device number 23
[  664.343655][T15742] chnl_net:caif_netlink_parms(): no params data found
[  664.350662][T13352] Bluetooth: hci4: command tx timeout
[  664.429903][   T30] audit: type=1400 audit(1179.664:500546): avc:  denied  { unmount } for  pid=15373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  664.497487][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3001'.
[  664.518086][T15770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  664.525405][T15770] IPv6: NLM_F_CREATE should be set when creating new route
[  664.532781][T15770] IPv6: NLM_F_CREATE should be set when creating new route
[  664.620271][   T30] audit: type=1326 audit(1179.842:500547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b758f749 code=0x7ffc0000
[  664.621021][T15775] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3003'.
[  664.694917][   T30] audit: type=1326 audit(1179.870:500548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16b758f749 code=0x7ffc0000
[  664.864183][ T3014] team0: Port device netdevsim0 removed
[  664.872514][   T30] audit: type=1326 audit(1179.870:500549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b758f749 code=0x7ffc0000
[  664.896742][   T30] audit: type=1326 audit(1179.870:500550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16b758f749 code=0x7ffc0000
[  664.920717][   T30] audit: type=1326 audit(1179.870:500551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b758f749 code=0x7ffc0000
[  664.944319][   T30] audit: type=1326 audit(1179.870:500552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16b758f749 code=0x7ffc0000
[  664.955319][T15742] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.167200][T15790] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3004'.
[  665.397432][T15742] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.404776][T15742] bridge_slave_0: entered allmulticast mode
[  665.413163][T15742] bridge_slave_0: entered promiscuous mode
[  665.430379][T15742] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.437565][T15742] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.451468][ T5876] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  665.463642][T15742] bridge_slave_1: entered allmulticast mode
[  665.470865][T15742] bridge_slave_1: entered promiscuous mode
[  665.506210][  T932] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  665.544112][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'.
[  665.564881][T15742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.592529][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3008'.
[  665.593196][T15742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.614432][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  665.647697][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  665.675935][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  665.696637][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  665.708318][T13352] Bluetooth: hci2: command tx timeout
[  665.711597][T15795] overlay: ./file0 is not a directory
[  665.723216][  T932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  665.739939][  T932] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  665.754143][  T932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  665.763288][  T932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.784500][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  665.817782][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.844178][ T5876] usb 3-1: config 0 descriptor??
[  665.851093][T15800] netlink: 'syz.4.3010': attribute type 4 has an invalid length.
[  665.852790][T15742] team0: Port device team_slave_0 added
[  665.859330][T15800] netlink: 'syz.4.3010': attribute type 3 has an invalid length.
[  665.872714][T15800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3010'.
[  665.877400][T15742] team0: Port device team_slave_1 added
[  665.949668][T15802] xt_cgroup: path and classid specified
[  666.010913][  T932] usb 4-1: GET_CAPABILITIES returned 0
[  666.017103][  T932] usbtmc 4-1:16.0: can't read capabilities
[  666.064060][ T3014] bridge_slave_1: left allmulticast mode
[  666.081065][ T3014] bridge_slave_1: left promiscuous mode
[  666.104238][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.129449][ T3014] bridge_slave_0: left allmulticast mode
[  666.145779][ T3014] bridge_slave_0: left promiscuous mode
[  666.158215][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.303164][T15805] FAULT_INJECTION: forcing a failure.
[  666.303164][T15805] name failslab, interval 1, probability 0, space 0, times 0
[  666.306718][T15785] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  666.316339][ T5863] usb 4-1: USB disconnect, device number 19
[  666.332032][T15805] CPU: 0 UID: 0 PID: 15805 Comm: syz.3.3007 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  666.332059][T15805] Tainted: [L]=SOFTLOCKUP
[  666.332064][T15805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  666.332073][T15805] Call Trace:
[  666.332090][T15805]  <TASK>
[  666.332096][T15805]  dump_stack_lvl+0x16c/0x1f0
[  666.332121][T15805]  should_fail_ex+0x512/0x640
[  666.332143][T15805]  ? __kmalloc_cache_noprof+0x5f/0x800
[  666.332172][T15805]  should_failslab+0xc2/0x120
[  666.332194][T15805]  __kmalloc_cache_noprof+0x80/0x800
[  666.332217][T15805]  ? kobject_uevent_env+0x265/0x1920
[  666.332242][T15805]  ? kobject_uevent_env+0x265/0x1920
[  666.332260][T15805]  kobject_uevent_env+0x265/0x1920
[  666.332282][T15805]  ? __pfx_dev_uevent_name+0x10/0x10
[  666.332304][T15805]  ? kobject_put+0xaf/0x6f0
[  666.332321][T15805]  ? _raw_spin_unlock+0x28/0x50
[  666.332341][T15805]  device_release_driver_internal+0x51c/0x620
[  666.332361][T15805]  driver_detach+0xd8/0x1b0
[  666.332377][T15805]  ? __pfx_raw_release+0x10/0x10
[  666.332398][T15805]  bus_remove_driver+0x13b/0x2e0
[  666.332423][T15805]  driver_unregister+0x76/0xb0
[  666.332440][T15805]  usb_gadget_unregister_driver+0x49/0x70
[  666.332464][T15805]  raw_release+0x1ae/0x2b0
[  666.332486][T15805]  __fput+0x402/0xb70
[  666.332508][T15805]  fput_close_sync+0x118/0x260
[  666.332525][T15805]  ? __pfx_fput_close_sync+0x10/0x10
[  666.332540][T15805]  ? dnotify_flush+0x79/0x4c0
[  666.332566][T15805]  __x64_sys_close+0x8b/0x120
[  666.332584][T15805]  do_syscall_64+0xcd/0xf80
[  666.332608][T15805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.332625][T15805] RIP: 0033:0x7f1794b8f749
[  666.332639][T15805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  666.332655][T15805] RSP: 002b:00007f1792dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  666.332672][T15805] RAX: ffffffffffffffda RBX: 00007f1794de6090 RCX: 00007f1794b8f749
[  666.332684][T15805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  666.332694][T15805] RBP: 00007f1792dd5090 R08: 0000000000000000 R09: 0000000000000000
[  666.332704][T15805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.332714][T15805] R13: 00007f1794de6128 R14: 00007f1794de6090 R15: 00007ffc090a7bb8
[  666.332739][T15805]  </TASK>
[  666.571731][ T6152] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  666.642104][T15806] usb 4-1: usbtmc_ioctl_clear_in_halt returned -19
[  666.843975][ T5876] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  666.866207][ T5876] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  666.990937][ T6152] usb 5-1: Using ep0 maxpacket: 32
[  666.998410][ T6152] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  667.019858][ T6152] usb 5-1: config 0 has no interface number 0
[  667.054472][ T6152] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  667.076441][ T6152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.084612][ T6152] usb 5-1: Product: syz
[  667.090270][ T3014] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  667.101217][ T3014] gretap1 (unregistering): left allmulticast mode
[  667.124395][ T6152] usb 5-1: Manufacturer: syz
[  667.129068][ T6152] usb 5-1: SerialNumber: syz
[  667.147272][ T6152] usb 5-1: config 0 descriptor??
[  667.167600][ T6152] smsc95xx v2.0.0
[  667.357187][ T5876] usb 3-1: USB disconnect, device number 18
[  667.520904][ T5826] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  667.574535][ T3014] bond0 (unregistering): left promiscuous mode
[  667.581644][ T3014] bond_slave_0: left promiscuous mode
[  667.595663][ T3014] bond_slave_1: left promiscuous mode
[  667.738241][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  667.749047][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  667.758518][ T3014] bond0 (unregistering): Released all slaves
[  667.773432][ T3014] bond1 (unregistering): Released all slaves
[  667.817503][ T5826] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  667.832113][ T5826] usb 2-1: config 0 has no interface number 0
[  667.882822][T13352] Bluetooth: hci2: command tx timeout
[  667.950947][ T3014] bond2 (unregistering): (slave veth3): Releasing active interface
[  667.965973][ T5826] usb 2-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5
[  667.980564][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.994772][ T3014] bond2 (unregistering): Released all slaves
[  668.002727][ T5826] usb 2-1: Product: syz
[  668.016547][ T5826] usb 2-1: Manufacturer: syz
[  668.056875][ T5826] usb 2-1: SerialNumber: syz
[  668.100789][T15742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.123298][ T5826] usb 2-1: config 0 descriptor??
[  668.135842][ T5826] xsens_mt 2-1:0.1: xsens_mt converter detected
[  668.145501][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.193433][ T5826] usb 2-1: xsens_mt converter now attached to ttyUSB0
[  668.205572][T15804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  668.243869][T15742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.272986][T15820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3016'.
[  668.287914][ T3014] : left promiscuous mode
[  668.313846][T15742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.326605][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.380782][ T5826] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  668.381492][  T932] usb 2-1: USB disconnect, device number 20
[  668.399209][T15742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.444523][ T6152] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  668.462008][  T932] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0
[  668.478436][  T932] xsens_mt 2-1:0.1: device disconnected
[  668.484183][ T6152] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  668.527566][ T6152] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  668.560699][ T6152] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  668.575376][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  668.591085][ T5826] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  668.613528][ T6152] usb 5-1: USB disconnect, device number 24
[  668.616943][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.833846][ T5826] usb 4-1: config 0 descriptor??
[  668.839474][T15817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  668.872448][T15742] hsr_slave_0: entered promiscuous mode
[  668.879235][T15742] hsr_slave_1: entered promiscuous mode
[  668.883249][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  668.886579][T15742] debugfs: 'hsr0' already exists in 'hsr'
[  668.898518][T15742] Cannot create hsr debugfs directory
[  668.898949][T15826] binder: 15824:15826 ioctl 402c542d 2000000000c0 returned -22
[  669.084970][ T3014] batadv0: left promiscuous mode
[  669.126419][ T3014] hsr_slave_0: left promiscuous mode
[  669.451109][ T3014] hsr_slave_1: left promiscuous mode
[  669.460846][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.603602][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3018'.
[  669.737291][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  670.421456][T13352] Bluetooth: hci2: command tx timeout
[  670.428837][ T5826] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  670.530097][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  670.530112][   T30] audit: type=1400 audit(1185.361:500577): avc:  denied  { create } for  pid=15829 comm="syz.2.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  670.560537][   T30] audit: type=1400 audit(1185.361:500578): avc:  denied  { listen } for  pid=15829 comm="syz.2.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  671.512678][T15844] xt_cgroup: path and classid specified
[  671.529156][ T9471] usb 4-1: USB disconnect, device number 20
[  671.898045][ T9471] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  672.105461][ T9471] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  672.140265][ T9471] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  672.181645][ T9471] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  672.198461][ T9471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.199248][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'.
[  672.206820][   T30] audit: type=1400 audit(1186.932:500579): avc:  denied  { connect } for  pid=15849 comm="syz.4.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  672.283217][   T30] audit: type=1400 audit(1187.016:500580): avc:  denied  { read } for  pid=15849 comm="syz.4.3025" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  672.335868][   T30] audit: type=1400 audit(1187.035:500581): avc:  denied  { open } for  pid=15849 comm="syz.4.3025" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  672.417098][   T30] audit: type=1400 audit(1187.035:500582): avc:  denied  { ioctl } for  pid=15849 comm="syz.4.3025" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  672.454308][ T9471] usb 4-1: GET_CAPABILITIES returned 0
[  672.459851][ T9471] usbtmc 4-1:16.0: can't read capabilities
[  672.505358][T15854] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  672.609208][   T30] audit: type=1400 audit(1187.316:500583): avc:  denied  { map } for  pid=15855 comm="syz.2.3022" path="socket:[44304]" dev="sockfs" ino=44304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  672.639164][   T30] audit: type=1400 audit(1187.344:500584): avc:  denied  { read accept } for  pid=15855 comm="syz.2.3022" path="socket:[44304]" dev="sockfs" ino=44304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  672.667044][T13352] Bluetooth: hci2: command tx timeout
[  672.718275][T15846] FAULT_INJECTION: forcing a failure.
[  672.718275][T15846] name failslab, interval 1, probability 0, space 0, times 0
[  672.731001][T15846] CPU: 0 UID: 0 PID: 15846 Comm: syz.3.3023 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  672.731019][T15846] Tainted: [L]=SOFTLOCKUP
[  672.731023][T15846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  672.731029][T15846] Call Trace:
[  672.731034][T15846]  <TASK>
[  672.731040][T15846]  dump_stack_lvl+0x16c/0x1f0
[  672.731062][T15846]  should_fail_ex+0x512/0x640
[  672.731078][T15846]  ? __kmalloc_noprof+0xca/0x910
[  672.731095][T15846]  should_failslab+0xc2/0x120
[  672.731110][T15846]  __kmalloc_noprof+0xeb/0x910
[  672.731126][T15846]  ? kobject_get_path+0xd2/0x2d0
[  672.731142][T15846]  ? kobject_get_path+0xd2/0x2d0
[  672.731155][T15846]  kobject_get_path+0xd2/0x2d0
[  672.731170][T15846]  kobject_uevent_env+0x289/0x1920
[  672.731186][T15846]  ? __pfx_dev_uevent_name+0x10/0x10
[  672.731202][T15846]  ? kobject_put+0xaf/0x6f0
[  672.731214][T15846]  ? _raw_spin_unlock+0x28/0x50
[  672.731228][T15846]  device_release_driver_internal+0x51c/0x620
[  672.731242][T15846]  driver_detach+0xd8/0x1b0
[  672.731252][T15846]  ? __pfx_raw_release+0x10/0x10
[  672.731265][T15846]  bus_remove_driver+0x13b/0x2e0
[  672.731281][T15846]  driver_unregister+0x76/0xb0
[  672.731291][T15846]  usb_gadget_unregister_driver+0x49/0x70
[  672.731307][T15846]  raw_release+0x1ae/0x2b0
[  672.731320][T15846]  __fput+0x402/0xb70
[  672.731333][T15846]  fput_close_sync+0x118/0x260
[  672.731343][T15846]  ? __pfx_fput_close_sync+0x10/0x10
[  672.731352][T15846]  ? dnotify_flush+0x79/0x4c0
[  672.731367][T15846]  __x64_sys_close+0x8b/0x120
[  672.731378][T15846]  do_syscall_64+0xcd/0xf80
[  672.731392][T15846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.731403][T15846] RIP: 0033:0x7f1794b8f749
[  672.731412][T15846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.731422][T15846] RSP: 002b:00007f1792df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  672.731433][T15846] RAX: ffffffffffffffda RBX: 00007f1794de5fa0 RCX: 00007f1794b8f749
[  672.731439][T15846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  672.731445][T15846] RBP: 00007f1792df6090 R08: 0000000000000000 R09: 0000000000000000
[  672.731450][T15846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.731456][T15846] R13: 00007f1794de6038 R14: 00007f1794de5fa0 R15: 00007ffc090a7bb8
[  672.731469][T15846]  </TASK>
[  672.833400][T15862] usb 4-1: usbtmc_ioctl_clear_in_halt returned -71
[  672.841132][ T9471] usb 4-1: USB disconnect, device number 21
[  673.106876][   T44] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  673.136931][ T3014] team0 (unregistering): Port device team_slave_1 removed
[  673.195009][ T3014] team0 (unregistering): Port device team_slave_0 removed
[  673.255808][   T30] audit: type=1400 audit(1187.905:500585): avc:  denied  { kexec_image_load } for  pid=15865 comm="syz.2.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  673.275478][   T44] usb 2-1: Invalid ep0 maxpacket: 64
[  673.522893][   T44] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[  673.788072][T15873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3030'.
[  673.944230][T15876] 9pnet_fd: Insufficient options for proto=fd
[  673.972268][   T44] usb 2-1: Invalid ep0 maxpacket: 64
[  673.979889][   T44] usb usb2-port1: attempt power cycle
[  674.359537][   T44] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  674.390056][   T44] usb 2-1: Invalid ep0 maxpacket: 64
[  674.464449][T15850] hsr0: entered promiscuous mode
[  674.485611][T15851] hsr_slave_0: left promiscuous mode
[  674.501331][T15851] hsr_slave_1: left promiscuous mode
[  674.903016][   T44] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  674.910663][  T932] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  674.946651][   T44] usb 2-1: Invalid ep0 maxpacket: 64
[  674.959958][   T44] usb usb2-port1: unable to enumerate USB device
[  675.051681][  T932] usb 4-1: device descriptor read/64, error -71
[  675.308404][  T932] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  675.318234][ T3014] IPVS: stop unused estimator thread 0...
[  675.409646][T15742] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  675.429823][T15742] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  675.445328][T15742] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  675.474489][T15894] xt_cgroup: path and classid specified
[  675.486102][   T30] audit: type=1400 audit(1189.982:500586): avc:  denied  { create } for  pid=15889 comm="syz.4.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  675.927898][  T932] usb 4-1: device descriptor read/64, error -71
[  675.973540][T15742] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  676.049322][  T932] usb usb4-port1: attempt power cycle
[  676.314732][T15742] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.400423][T15742] 8021q: adding VLAN 0 to HW filter on device team0
[  676.513436][  T932] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  676.613389][  T932] usb 4-1: device descriptor read/8, error -71
[  676.727745][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.735146][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.823108][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.830212][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.869022][  T932] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  676.912950][  T932] usb 4-1: device descriptor read/8, error -71
[  677.051102][  T932] usb usb4-port1: unable to enumerate USB device
[  677.214566][T15742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.263910][T15742] veth0_vlan: entered promiscuous mode
[  677.284244][T15742] veth1_vlan: entered promiscuous mode
[  677.316177][T15742] veth0_macvtap: entered promiscuous mode
[  677.331267][T15742] veth1_macvtap: entered promiscuous mode
[  677.352290][T15742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.358721][  T932] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  677.366317][T15742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.388509][ T3428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.410122][ T3428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.652324][T15930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3042'.
[  677.700331][  T932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  677.803139][  T932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  677.819998][ T9471] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  677.843376][ T2949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.867399][ T3500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.882986][  T932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  677.904524][  T932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.952003][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.972189][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.015305][ T9471] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.044424][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.058367][ T9471] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  678.073856][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.087729][ T9471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.120963][ T9471] usb 2-1: config 0 descriptor??
[  678.193389][  T932] usb 5-1: GET_CAPABILITIES returned 0
[  678.212498][  T932] usbtmc 5-1:16.0: can't read capabilities
[  678.870174][T15942] usb 5-1: usbtmc_ioctl_clear_in_halt returned -71
[  678.901601][ T9471] usbhid 2-1:0.0: can't add hid device: -71
[  678.907605][ T9471] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  678.908094][  T932] usb 5-1: USB disconnect, device number 25
[  678.978908][ T9471] usb 2-1: USB disconnect, device number 25
[  678.994117][   T30] audit: type=1400 audit(1193.274:500587): avc:  denied  { mount } for  pid=15935 comm="syz.0.2995" name="/" dev="autofs" ino=44645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  679.032985][T15936] 
[  679.035344][T15936] ======================================================
[  679.042350][T15936] WARNING: possible circular locking dependency detected
[  679.049351][T15936] syzkaller #0 Tainted: G             L     
[  679.055302][T15936] ------------------------------------------------------
[  679.062297][T15936] syz.0.2995/15936 is trying to acquire lock:
[  679.068338][T15936] ffff88805850fc68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0
[  679.077377][T15936] 
[  679.077377][T15936] but task is already holding lock:
[  679.084727][T15936] ffff88814eaa6148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  679.094466][T15936] 
[  679.094466][T15936] which lock already depends on the new lock.
[  679.094466][T15936] 
[  679.105319][T15936] 
[  679.105319][T15936] the existing dependency chain (in reverse order) is:
[  679.114328][T15936] 
[  679.114328][T15936] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  679.122038][T15936]        __mutex_lock+0x1aa/0x1ca0
[  679.127137][T15936]        autofs_notify_daemon+0x4a6/0xd60
[  679.132846][T15936]        autofs_wait+0x10f3/0x1ac0
[  679.137944][T15936]        autofs_mount_wait+0x132/0x3c0
[  679.143391][T15936]        autofs_d_automount+0x4b2/0x960
[  679.148954][T15936]        __traverse_mounts+0x1b9/0x830
[  679.154423][T15936]        step_into_slowpath+0x772/0xf50
[  679.159969][T15936]        path_lookupat+0x627/0xc40
[  679.165069][T15936]        filename_lookup+0x224/0x5f0
[  679.170337][T15936]        kern_path+0x35/0x50
[  679.174918][T15936]        lookup_bdev+0xd8/0x280
[  679.179760][T15936]        resume_store+0x1d6/0x490
[  679.184769][T15936]        kobj_attr_store+0x58/0x80
[  679.189877][T15936]        sysfs_kf_write+0xf2/0x150
[  679.195000][T15936]        kernfs_fop_write_iter+0x3af/0x570
[  679.200796][T15936]        vfs_write+0x7d3/0x11d0
[  679.205627][T15936]        ksys_write+0x12a/0x250
[  679.210462][T15936]        do_syscall_64+0xcd/0xf80
[  679.215466][T15936]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.221947][T15936] 
[  679.221947][T15936] -> #2 (&of->mutex){+.+.}-{4:4}:
[  679.229157][T15936]        __mutex_lock+0x1aa/0x1ca0
[  679.234250][T15936]        kernfs_seq_start+0x4f/0x2a0
[  679.239520][T15936]        seq_read_iter+0x2c1/0x12d0
[  679.244697][T15936]        kernfs_fop_read_iter+0x46c/0x610
[  679.250400][T15936]        copy_splice_read+0x618/0xc20
[  679.255758][T15936]        do_splice_read+0x285/0x370
[  679.260937][T15936]        splice_direct_to_actor+0x2a1/0xa30
[  679.266811][T15936]        do_splice_direct+0x174/0x240
[  679.272209][T15936]        do_sendfile+0xb06/0xe50
[  679.277128][T15936]        __x64_sys_sendfile64+0x1d8/0x220
[  679.282830][T15936]        do_syscall_64+0xcd/0xf80
[  679.287836][T15936]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.294224][T15936] 
[  679.294224][T15936] -> #1 (&p->lock){+.+.}-{4:4}:
[  679.301232][T15936]        __mutex_lock+0x1aa/0x1ca0
[  679.306324][T15936]        seq_read_iter+0xe1/0x12d0
[  679.311424][T15936]        kernfs_fop_read_iter+0x46c/0x610
[  679.317129][T15936]        copy_splice_read+0x618/0xc20
[  679.322503][T15936]        do_splice_read+0x285/0x370
[  679.327679][T15936]        splice_file_to_pipe+0x109/0x120
[  679.333297][T15936]        do_sendfile+0x400/0xe50
[  679.338210][T15936]        __x64_sys_sendfile64+0x1d8/0x220
[  679.343911][T15936]        do_syscall_64+0xcd/0xf80
[  679.348914][T15936]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.355310][T15936] 
[  679.355310][T15936] -> #0 (&pipe->mutex){+.+.}-{4:4}:
[  679.362665][T15936]        __lock_acquire+0x1669/0x2890
[  679.368016][T15936]        lock_acquire+0x179/0x330
[  679.373015][T15936]        __mutex_lock+0x1aa/0x1ca0
[  679.378121][T15936]        anon_pipe_write+0x15d/0x1bd0
[  679.383474][T15936]        __kernel_write_iter+0x720/0xb10
[  679.389089][T15936]        __kernel_write+0xf5/0x140
[  679.394191][T15936]        autofs_notify_daemon+0x4db/0xd60
[  679.399922][T15936]        autofs_wait+0x10f3/0x1ac0
[  679.405012][T15936]        autofs_mount_wait+0x132/0x3c0
[  679.410450][T15936]        autofs_d_automount+0x4b2/0x960
[  679.415971][T15936]        __traverse_mounts+0x1b9/0x830
[  679.421416][T15936]        step_into_slowpath+0x772/0xf50
[  679.426941][T15936]        path_lookupat+0x627/0xc40
[  679.432032][T15936]        filename_lookup+0x224/0x5f0
[  679.437297][T15936]        kern_path+0x35/0x50
[  679.441865][T15936]        lookup_bdev+0xd8/0x280
[  679.446695][T15936]        resume_store+0x1d6/0x490
[  679.451698][T15936]        kobj_attr_store+0x58/0x80
[  679.456789][T15936]        sysfs_kf_write+0xf2/0x150
[  679.461874][T15936]        kernfs_fop_write_iter+0x3af/0x570
[  679.467660][T15936]        vfs_write+0x7d3/0x11d0
[  679.472489][T15936]        ksys_write+0x12a/0x250
[  679.477314][T15936]        do_syscall_64+0xcd/0xf80
[  679.482315][T15936]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.488707][T15936] 
[  679.488707][T15936] other info that might help us debug this:
[  679.488707][T15936] 
[  679.498909][T15936] Chain exists of:
[  679.498909][T15936]   &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex
[  679.498909][T15936] 
[  679.511315][T15936]  Possible unsafe locking scenario:
[  679.511315][T15936] 
[  679.518740][T15936]        CPU0                    CPU1
[  679.524090][T15936]        ----                    ----
[  679.529437][T15936]   lock(&sbi->pipe_mutex);
[  679.533918][T15936]                                lock(&of->mutex);
[  679.540398][T15936]                                lock(&sbi->pipe_mutex);
[  679.547404][T15936]   lock(&pipe->mutex);
[  679.551539][T15936] 
[  679.551539][T15936]  *** DEADLOCK ***
[  679.551539][T15936] 
[  679.559654][T15936] 5 locks held by syz.0.2995/15936:
[  679.564827][T15936]  #0: ffff88807b6da0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  679.573863][T15936]  #1: ffff888034d3c420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  679.582874][T15936]  #2: ffff8880259d1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  679.592627][T15936]  #3: ffff888140e9d4b8 (kn->active#69){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570
[  679.602630][T15936]  #4: ffff88814eaa6148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  679.612793][T15936] 
[  679.612793][T15936] stack backtrace:
[  679.618662][T15936] CPU: 0 UID: 0 PID: 15936 Comm: syz.0.2995 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  679.618681][T15936] Tainted: [L]=SOFTLOCKUP
[  679.618686][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  679.618694][T15936] Call Trace:
[  679.618698][T15936]  <TASK>
[  679.618704][T15936]  dump_stack_lvl+0x116/0x1f0
[  679.618722][T15936]  print_circular_bug+0x275/0x340
[  679.618737][T15936]  check_noncircular+0x146/0x160
[  679.618752][T15936]  __lock_acquire+0x1669/0x2890
[  679.618768][T15936]  ? __kasan_check_byte+0x13/0x50
[  679.618787][T15936]  lock_acquire+0x179/0x330
[  679.618800][T15936]  ? anon_pipe_write+0x15d/0x1bd0
[  679.618819][T15936]  ? __pfx___might_resched+0x10/0x10
[  679.618830][T15936]  ? rcu_is_watching+0x12/0xc0
[  679.618843][T15936]  __mutex_lock+0x1aa/0x1ca0
[  679.618860][T15936]  ? anon_pipe_write+0x15d/0x1bd0
[  679.618876][T15936]  ? is_bpf_text_address+0x94/0x1a0
[  679.618890][T15936]  ? kernel_text_address+0x8d/0x100
[  679.618906][T15936]  ? anon_pipe_write+0x15d/0x1bd0
[  679.618923][T15936]  ? unwind_get_return_address+0x59/0xa0
[  679.618941][T15936]  ? __bfs+0x148/0x290
[  679.618956][T15936]  ? __pfx___mutex_lock+0x10/0x10
[  679.618972][T15936]  ? check_irq_usage+0xe8/0xbc0
[  679.618989][T15936]  ? anon_pipe_write+0x15d/0x1bd0
[  679.619004][T15936]  anon_pipe_write+0x15d/0x1bd0
[  679.619023][T15936]  ? lockdep_unlock+0x64/0xd0
[  679.619040][T15936]  ? __lock_acquire+0x12c2/0x2890
[  679.619054][T15936]  ? __pfx_anon_pipe_write+0x10/0x10
[  679.619073][T15936]  ? lock_acquire+0x179/0x330
[  679.619088][T15936]  ? __pfx_anon_pipe_write+0x10/0x10
[  679.619104][T15936]  __kernel_write_iter+0x720/0xb10
[  679.619120][T15936]  ? __pfx___kernel_write_iter+0x10/0x10
[  679.619135][T15936]  ? __mutex_lock+0x27b/0x1ca0
[  679.619150][T15936]  ? __kernel_text_address+0xd/0x40
[  679.619166][T15936]  ? autofs_notify_daemon+0x45a/0xd60
[  679.619183][T15936]  __kernel_write+0xf5/0x140
[  679.619198][T15936]  ? __pfx___kernel_write+0x10/0x10
[  679.619212][T15936]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  679.619232][T15936]  autofs_notify_daemon+0x4db/0xd60
[  679.619247][T15936]  ? __pfx_autofs_notify_daemon+0x10/0x10
[  679.619261][T15936]  ? kernfs_fop_write_iter+0x3af/0x570
[  679.619279][T15936]  ? vfs_write+0x7d3/0x11d0
[  679.619294][T15936]  ? ksys_write+0x12a/0x250
[  679.619315][T15936]  ? lockdep_init_map_type+0x5c/0x270
[  679.619330][T15936]  ? lockdep_init_map_type+0x5c/0x270
[  679.619346][T15936]  autofs_wait+0x10f3/0x1ac0
[  679.619361][T15936]  ? __pfx_autofs_wait+0x10/0x10
[  679.619374][T15936]  ? __pfx_path_check_mount+0x10/0x10
[  679.619386][T15936]  ? find_held_lock+0x2b/0x80
[  679.619404][T15936]  ? path_has_submounts+0xcf/0x120
[  679.619418][T15936]  ? do_raw_spin_unlock+0x172/0x230
[  679.619436][T15936]  ? find_held_lock+0x2b/0x80
[  679.619455][T15936]  autofs_mount_wait+0x132/0x3c0
[  679.619468][T15936]  autofs_d_automount+0x4b2/0x960
[  679.619484][T15936]  __traverse_mounts+0x1b9/0x830
[  679.619505][T15936]  step_into_slowpath+0x772/0xf50
[  679.619519][T15936]  ? __up_read+0x2d1/0x700
[  679.619535][T15936]  ? __pfx_step_into_slowpath+0x10/0x10
[  679.619551][T15936]  ? __lookup_slow+0x430/0x460
[  679.619567][T15936]  path_lookupat+0x627/0xc40
[  679.619583][T15936]  filename_lookup+0x224/0x5f0
[  679.619599][T15936]  ? __pfx_filename_lookup+0x10/0x10
[  679.619620][T15936]  ? getname_kernel+0x52/0x370
[  679.619639][T15936]  ? __asan_memcpy+0x3c/0x60
[  679.619653][T15936]  kern_path+0x35/0x50
[  679.619668][T15936]  lookup_bdev+0xd8/0x280
[  679.619685][T15936]  ? __pfx_lookup_bdev+0x10/0x10
[  679.619701][T15936]  ? __asan_memcpy+0x3c/0x60
[  679.619714][T15936]  resume_store+0x1d6/0x490
[  679.619733][T15936]  ? __pfx_resume_store+0x10/0x10
[  679.619752][T15936]  ? find_held_lock+0x2b/0x80
[  679.619771][T15936]  ? __pfx_resume_store+0x10/0x10
[  679.619787][T15936]  kobj_attr_store+0x58/0x80
[  679.619804][T15936]  ? __pfx_kobj_attr_store+0x10/0x10
[  679.619819][T15936]  sysfs_kf_write+0xf2/0x150
[  679.619832][T15936]  kernfs_fop_write_iter+0x3af/0x570
[  679.619850][T15936]  ? __pfx_sysfs_kf_write+0x10/0x10
[  679.619863][T15936]  vfs_write+0x7d3/0x11d0
[  679.619878][T15936]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  679.619898][T15936]  ? __pfx_vfs_write+0x10/0x10
[  679.619917][T15936]  ksys_write+0x12a/0x250
[  679.619931][T15936]  ? __pfx_ksys_write+0x10/0x10
[  679.619953][T15936]  do_syscall_64+0xcd/0xf80
[  679.619970][T15936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.619983][T15936] RIP: 0033:0x7f6f93d8f749
[  679.619995][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  679.620007][T15936] RSP: 002b:00007f6f94bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  679.620019][T15936] RAX: ffffffffffffffda RBX: 00007f6f93fe5fa0 RCX: 00007f6f93d8f749
[  679.620027][T15936] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003
[  679.620035][T15936] RBP: 00007f6f93e13f91 R08: 0000000000000000 R09: 0000000000000000
[  679.620043][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.620050][T15936] R13: 00007f6f93fe6038 R14: 00007f6f93fe5fa0 R15: 00007ffd07bc2bb8
[  679.620062][T15936]  </TASK>
[  680.144094][T15936] PM: Image not found (code -22)
[  680.165088][   T30] audit: type=1400 audit(1194.387:500588): avc:  denied  { unmount } for  pid=15742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  680.298937][   T30] audit: type=1400 audit(1194.509:500589): avc:  denied  { write } for  pid=5802 comm="syz-executor" path="pipe:[3929]" dev="pipefs" ino=3929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  680.567953][ T9471] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  681.084882][ T2949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.171644][ T2949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.206725][ T2949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.256307][ T2949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.335867][ T2949] bridge_slave_1: left allmulticast mode
[  681.341655][ T2949] bridge_slave_1: left promiscuous mode
[  681.347320][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.355755][ T2949] bridge_slave_0: left allmulticast mode
[  681.362612][ T2949] bridge_slave_0: left promiscuous mode
[  681.368279][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.435939][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  681.446030][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.456425][ T2949] bond0 (unregistering): Released all slaves
[  681.628393][ T2949] hsr_slave_0: left promiscuous mode
[  681.639010][ T2949] hsr_slave_1: left promiscuous mode
[  681.644686][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  681.655199][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0
[  681.664220][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  681.672271][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1
[  681.682500][ T2949] veth1_macvtap: left promiscuous mode
[  681.688017][ T2949] veth0_macvtap: left promiscuous mode
[  681.694204][ T2949] veth1_vlan: left promiscuous mode
[  681.699778][ T2949] veth0_vlan: left promiscuous mode
[  681.864167][ T2949] team0 (unregistering): Port device team_slave_1 removed
[  681.889533][ T2949] team0 (unregistering): Port device team_slave_0 removed
[  682.329400][ T2949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.349593][ T2949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.403055][ T2949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.453160][ T2949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.519315][ T2949] bridge_slave_1: left allmulticast mode
[  682.526150][ T2949] bridge_slave_1: left promiscuous mode
[  682.531829][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.540289][ T2949] bridge_slave_0: left allmulticast mode
[  682.546141][ T2949] bridge_slave_0: left promiscuous mode
[  682.551802][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.652121][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.662298][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.672156][ T2949] bond0 (unregistering): Released all slaves
[  682.857844][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.865592][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.873487][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  682.881089][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.893390][ T2949] veth1_macvtap: left promiscuous mode
[  682.899081][ T2949] veth0_macvtap: left promiscuous mode
[  682.904954][ T2949] veth1_vlan: left promiscuous mode
[  682.910443][ T2949] veth0_vlan: left promiscuous mode
[  683.053523][ T2949] team0 (unregistering): Port device team_slave_1 removed
[  683.065483][ T2949] team0 (unregistering): Port device team_slave_0 removed
[  683.414371][ T2949] IPVS: stop unused estimator thread 0...
[  683.470229][ T2949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.524034][ T2949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.576787][ T2949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.627707][ T2949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.694286][ T2949] bridge_slave_1: left allmulticast mode
[  683.699961][ T2949] bridge_slave_1: left promiscuous mode
[  683.705948][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.715369][ T2949] bridge_slave_0: left allmulticast mode
[  683.721017][ T2949] bridge_slave_0: left promiscuous mode
[  683.727116][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.829392][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  683.839950][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  683.849551][ T2949] bond0 (unregistering): Released all slaves
[  684.096997][ T2949] hsr_slave_0: left promiscuous mode
[  684.102750][ T2949] hsr_slave_1: left promiscuous mode
[  684.111973][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  684.119555][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0
[  684.127171][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.135208][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.145294][ T2949] veth1_macvtap: left promiscuous mode
[  684.151466][ T2949] veth0_macvtap: left promiscuous mode
[  684.157138][ T2949] veth1_vlan: left promiscuous mode
[  684.162447][ T2949] veth0_vlan: left promiscuous mode
[  684.323841][ T2949] team0 (unregistering): Port device team_slave_1 removed
[  684.346663][ T2949] team0 (unregistering): Port device team_slave_0 removed