last executing test programs:

15.871684087s ago: executing program 1 (id=837):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x302)
getrusage(0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x48842, 0x0)
write$FUSE_IOCTL(r2, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)

14.347213783s ago: executing program 1 (id=840):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000240)=0x3, 0x4)
bind$llc(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0)

13.028181089s ago: executing program 2 (id=844):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
chdir(0x0)
ftruncate(0xffffffffffffffff, 0x81fd)
unlink(0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

11.142373441s ago: executing program 2 (id=846):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x7ffffffe}, 0x48)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, <r1=>0x0], [0x20000, 0x0, 0x10000], [], [0x0, 0x0, 0x0, 0x9]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000})
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000001100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

11.09772165s ago: executing program 1 (id=847):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r3, 0x4, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x425826b85cacf01a, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)

10.694177687s ago: executing program 2 (id=851):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='squashfs\x00', 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00')
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0)

9.743343803s ago: executing program 3 (id=853):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000f030000d5b1f202f10e07d638992b3ac1076da52bf5fc6846b66714430975dbe51a8706bdf61e187d24e3a5d409579b5cfe34b64c63e8a1f4e856626ca6e4eb89d6fa47ddd0d4fb330942774b02409cac81ff48e5fe439ffa1d65a5159084b15791c581c337f400d46a083dc3493f1bef88c62bbbab24a31bbb451c03bd3951d79d32526665f377481f20be2fd9867c46d46714ce74a15c6d59f4397b24dd8c7715482c74c91760d1e059d650e54fadfcd49a20bf101ed421aa8bd16cfb9dcb2827ad316659245eab57e9d7cd4de56f413dd7a6ea8214cd40dfb1deb2d339e242c8c82c9f70544de042329bf70a9d2a862d369484955a36b742ccf36c4c5d83586a4388ee3b8412960d296d37cd7b854b4f234c4db9170343ebd9747f8e3287128c0b509cdf5e8a26b6e43bd3e64295fa47e94f750796e1ce4a0f5df79eb140755f2341f2aef74a5a32c393da4e05cfd1d63e4a016e2a611a271d60e1afe50e073d893b7bed6f976bc7a1f99d7992c6020e62366812a7f31a5372c81394d7c142056d136a0095453a9e834a070528caf461aac43870a6352e998432776a5aa0c2d10b3c3d3be3aa804a022d091706232877f14151de97ab4676007952b335bbf12287f1add6830f272cec22c32bf2b5649a25e27945d5197763cdd6f67b8cd2e2ec9416071fad367922e6c9821a97db87c5b06692295818e02dc47896519c27adc197467eda9e6c45325ac430af6d3782b7eb4c56ed6de0849d287d67ec84d5a97530e076dd9932671f57b8377943ac96b43041f2138e5434c42e381695f8989c3f4c57c82fff0868439d6fb4a94a3f2ca757836ce25f7b46ed381c89a7ced82bf51613fcf4711b7021fd55fa0ce9a61574e2d870b84bb54dd3dce503135577e08a141f2c872a2417fdf846d26a3033c076bbba7653a2892e9100f0f0ecf1b2a0eea987950d6bd93e7111d034b8060622c219f13a81daddc7e6f018bda7c85eb5edf9b57846de6b154fb3c3c292ce2543b74d439dd27a9ecb6c48f0e0fc7cca5397ed8c476cbd1e399822fdb07cf7d3a74901638ba87b1b8f6e5b62ee5fa70ff0cff2242faa0600000003155de6fe99fb47e2"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0xa000200)
semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x7f, 0x1800}], 0x1, 0x0)
unshare(0x60400)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0x108, 0x4)

8.489784333s ago: executing program 3 (id=854):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa4}, 0x1, 0x7a00}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000003580)=<r6=>0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0})
io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000240)=""/55, &(0x7f0000000280)=0x37)

8.432137237s ago: executing program 1 (id=855):
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0xffffff1f, 0x700, 0x0)
sendfile(r2, r1, 0x0, 0x578410eb)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)

8.430614873s ago: executing program 4 (id=856):
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = inotify_init1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1}, 0x20)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r3=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)

7.617063641s ago: executing program 3 (id=858):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
lseek(r3, 0x10001, 0x0)

7.408502531s ago: executing program 4 (id=859):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000100), 0x100000000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
getrlimit(0x3, &(0x7f00000000c0))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045104, 0xfffffffffffffffe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
mount(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "ea70ebf25edeb9a1ef0bc091d9e8d6254f3b4e06f333de58702eccd64a8511e4f47bd0f07d4b94b91516bb47e0ae3ad7b4586927f4eded307507b048"}, 0x47)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

6.658356491s ago: executing program 0 (id=860):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d000000bf0000000000000095000000000000005ecefab8f2e85c6c1ca711fc206bb8ad6ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5f683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891184604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e101d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe151acc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394b9ba1a836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429ba63903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6d6fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f25005798ca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9958fad67ccaba76408da35c9f1534c8bd48bbdf9594e8b4ce73febaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb3b379e221a5318849b6b0679b5d65ab855fc9f1d10022cc20603480ffb1e3392fad690ce56aaa717e56fd55aec3d9d6671f55d7bc33830a4095497586e8d15c2a32d3176d45b783cb27112a69c14134488b6dd302c3e92a7e659351b610ed5ba022f92d4bf26b0a5c10a3c8eb0fabdf0017995ea0c06b41fe6dda769729328d6ee80ab3b4aeeeee7926575d526431184b2034b5cdacc8eaab03cf45af6ec451f65705d8a4375d559e4c3ad80e942d237616d8f2fdd5afe4fdf21478228d9f6299bf67cf1e62fc11c285e18fb65eeb657bc7375401bb175f6d2625195ce8647945dbdfb7eacc06a24832d155059b0f0c36b9433eff190f4c4c160f0484d4d39f5f92e8bd49ad3df23b961fe7bf9e506c5098ca79deb7906257e4ce9035f3a6b29453ee41640ade8b5916f38d19ab6f2fd51a9fd9a2559411967460952acf5c549e5466ee2d8563397a5f028486220fae69611d9bc0f1a68d31ad1a4e387de687ab1537bd46703e4e5ae0f096f731916628bf743a49ea7b7d22c04d738ca439343aaab682d45dc91187e9ff08005358e1f3d864f36ee590fb0da9c958f15f9105c41add43a7c28874e58c31a7acb0467e0bd97f2ccd78615b5144267772381e7498bb98d9e8a3f98b505e5c9645e19d011dd86a1dc134fa4b21ff8ec2d054ae7e0044b4700cd54ce392c2ee515e86070f2df561c15f331a1babfa60504410fa56a848ba1f501c8eb0bd6856451d150cfaf95d6dc889be27e8915bb3670fc76bcbeb390f3cefb5429c84907a92c6eab2b15758194ece4b1461f622510bcff5c0f8354637856f94d71a0841180e78a3a837ae7847c479f5c9c54859cb85393f190042a5dc31197f2c463be8affe29869d71df330b3466fc79b3488b4a2a3e2aae9af6421cd0902347103f2384bf08e5230b37297b668be11b4428b9a8e8c259afa6c73dd87fcc165b2fea66a180bf048530a5849f849d37aca6874cb1d50defdb90b3da04a575db38825db87f6bb0013a5dabcc0e9783aaac0cbb5d6fc437f1e77bf69cae31a213ca2b90ece8cc70fa320c9ffd05618e7a6e6cf8ada6b3e62557174b6d3516cc0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000}, 0x2c)

5.083109619s ago: executing program 3 (id=861):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000001b000000000000000000000000000000000000000000000000000001e000f600000000000000000054"], 0xc0}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.056766974s ago: executing program 0 (id=862):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES8], 0xfe33)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r2 = syz_io_uring_setup(0x1851, &(0x7f0000001400)={0x0, 0x0, 0x40}, &(0x7f0000001480), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0xf7361452b5bbf42a}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0xb4}}, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x41b}}}, 0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
pipe(&(0x7f00000001c0))

4.918288567s ago: executing program 1 (id=863):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0xb11}, 0x14}}, 0x0)

4.761134451s ago: executing program 4 (id=864):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x8, 0x80001)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
write$eventfd(r1, &(0x7f00000000c0), 0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

4.68674011s ago: executing program 0 (id=865):
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="157c9e00650600000000000000397a7a9317"], 0x15)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @private}})
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de)
write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}, {0x20, 'gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x10\xdfH(|\xf4:e\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f'}]}, 0x488)
close(r3)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=[&(0x7f0000002600)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?\xe8\xafLpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$\x0fV\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xdf\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\xa7\x9dN\xaeT\xe2\x96$\x940$+X\x90', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0, 0x0], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000002b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'])

4.659841841s ago: executing program 2 (id=866):
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[], 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}], 0x1, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000001c0)="b8c9c0987656bed57b35dc23b9e416c751bfcc422eacadd0177e5aa4fefa219fb4b4f5c56f08d8435018fdf8a08bcd2d7b447489783d1d7884a2c74f723eccce5cf5f9", 0x43)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/clear_refs\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x3ff, 0x9})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})

2.533640846s ago: executing program 0 (id=867):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0)

2.533376568s ago: executing program 1 (id=868):
socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[], 0x6)
recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.533171543s ago: executing program 2 (id=869):
socket(0x40000000015, 0x5, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000002380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

2.530123193s ago: executing program 3 (id=870):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x13e000, @remote}, 0x0, {[0x0, 0x0, 0xffdffffa, 0x2, 0x40001f]}}, 0x5c)
r1 = socket(0xa, 0x3, 0x3a)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0x4128f000)
clock_gettime(0x3, &(0x7f0000000300)={0x0, <r2=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000380)={0x0, r2/1000+60000}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
accept$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000040)={0x1})
socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000004c0)={0x2, 0x1, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x41, 0xed, &(0x7f0000000740)=""/237, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xd, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x7}, 0xc)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)

2.529679407s ago: executing program 4 (id=871):
mq_open(&(0x7f0000000040)='\xb3(/}/$\x00', 0x80, 0x140, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x1})
socket$packet(0x11, 0x3, 0x300)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000062c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0xb, 0x1, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

2.312359495s ago: executing program 3 (id=872):
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r1=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000)
creat(&(0x7f0000000080)='./file0\x00', 0x1de)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000557000/0x2000)=nil, &(0x7f0000509000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000bff000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000a8b000/0x1000)=nil, &(0x7f00009fe000/0x3000)=nil, 0x0}, 0x68)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0)
madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004000)

1.472223746s ago: executing program 0 (id=873):
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.470579055s ago: executing program 4 (id=874):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffd)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
unshare(0x8000000)
unshare(0x8040080)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x10, r2, 0x737ea000)
r3 = io_uring_setup(0x475, &(0x7f0000000180))
io_uring_enter(r3, 0x0, 0x96a3, 0x3, 0x0, 0x0)

309.348645ms ago: executing program 0 (id=875):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x18a}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x228000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

207.61977ms ago: executing program 2 (id=876):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
iopl(0x3)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000940)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000004d0012"], 0xb4}}, 0x0)
r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7})
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=877):
r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000280), 0x0, 0x0)
r3 = timerfd_create(0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
close(r4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100})
ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

dle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.879618][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.904416][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.914083][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.984713][ T7195] xt_CT: You must specify a L4 protocol and not use inversions on it
[  292.423674][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.063380][ T6825] 8021q: adding VLAN 0 to HW filter on device team0
[  295.211020][ T7115] hsr_slave_0: entered promiscuous mode
[  295.236085][ T7115] hsr_slave_1: entered promiscuous mode
[  295.637330][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.107385][ T7115] Cannot create hsr debugfs directory
[  296.158898][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.166142][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.211523][ T2991] bridge_slave_1: left allmulticast mode
[  296.230508][ T2991] bridge_slave_1: left promiscuous mode
[  296.236341][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.278914][ T2991] bridge_slave_0: left allmulticast mode
[  296.284611][ T2991] bridge_slave_0: left promiscuous mode
[  296.291267][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.338248][ T7208] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  296.407974][ T7208] kvm: pic: level sensitive irq not supported
[  296.408081][ T7208] kvm: pic: non byte read
[  296.434036][ T7208] kvm: pic: non byte read
[  300.518934][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.545987][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.573033][ T2991] bond0 (unregistering): Released all slaves
[  300.680030][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.687393][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.587386][ T7268] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  301.613178][ T7266] IPVS: stopping backup sync thread 7268 ...
[  301.781039][ T2991] hsr_slave_0: left promiscuous mode
[  301.884808][ T2991] hsr_slave_1: left promiscuous mode
[  301.938275][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.945741][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.310152][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.427350][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.098104][ T2991] veth1_macvtap: left promiscuous mode
[  303.103707][ T2991] veth0_macvtap: left promiscuous mode
[  303.127011][ T2991] veth1_vlan: left promiscuous mode
[  303.132445][ T2991] veth0_vlan: left promiscuous mode
[  307.548479][   T29] audit: type=1400 audit(1725828559.153:436): avc:  denied  { write } for  pid=7305 comm="syz.3.386" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  307.688991][   T29] audit: type=1400 audit(1725828559.303:437): avc:  denied  { create } for  pid=7305 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  307.770722][   T29] audit: type=1400 audit(1725828559.333:438): avc:  denied  { write } for  pid=7305 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  307.907179][ T5245] Bluetooth: hci1: sending frame failed (-49)
[  307.915573][   T56] Bluetooth: hci1: Opcode 0x1003 failed: -49
[  308.036940][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.046306][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.057333][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.065725][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.073724][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  308.084184][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.175413][ T5288] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  309.403711][ T2991] team0 (unregistering): Port device team_slave_1 removed
[  309.461778][ T2991] team0 (unregistering): Port device team_slave_0 removed
[  309.480421][ T5288] usb 2-1: Using ep0 maxpacket: 32
[  309.501386][ T5288] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  309.509632][ T5288] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  309.521315][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.532301][ T5288] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  309.542296][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.555863][ T5288] usb 2-1: config 0 descriptor??
[  309.570988][ T5288] hub 2-1:0.0: USB hub found
[  309.793385][ T5288] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  310.030541][ T5288] hid-generic 0003:046D:C314.0004: unknown main item tag 0x0
[  310.047462][ T5288] hid-generic 0003:046D:C314.0004: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0
[  310.166806][ T5245] Bluetooth: hci6: command tx timeout
[  310.194689][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.203910][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.283314][ T7309] bridge0: entered allmulticast mode
[  310.330613][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.337930][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.345559][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.352822][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.365500][ T7311] bridge0: entered promiscuous mode
[  310.437135][   T53] usb 2-1: USB disconnect, device number 3
[  311.368368][ T7316] chnl_net:caif_netlink_parms(): no params data found
[  311.584059][ T7115] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  311.595632][ T7115] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  311.617350][ T7115] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  311.656316][ T7115] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  311.692733][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.701147][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.708537][ T7316] bridge_slave_0: entered allmulticast mode
[  311.715543][ T7316] bridge_slave_0: entered promiscuous mode
[  311.724942][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.732847][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.744389][ T7316] bridge_slave_1: entered allmulticast mode
[  311.751640][ T7316] bridge_slave_1: entered promiscuous mode
[  311.844966][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.860584][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.963165][ T7316] team0: Port device team_slave_0 added
[  311.992609][ T7316] team0: Port device team_slave_1 added
[  312.162762][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.174096][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.202702][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.227365][ T2559] bridge_slave_1: left allmulticast mode
[  312.237998][ T2559] bridge_slave_1: left promiscuous mode
[  312.243921][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.255689][ T5245] Bluetooth: hci6: command tx timeout
[  312.264573][ T2559] bridge_slave_0: left allmulticast mode
[  312.271155][ T2559] bridge_slave_0: left promiscuous mode
[  312.284655][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.943692][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.962143][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.983608][ T2559] bond0 (unregistering): Released all slaves
[  313.010486][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.020529][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.069683][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.228852][ T2559] hsr_slave_0: left promiscuous mode
[  313.235165][ T2559] hsr_slave_1: left promiscuous mode
[  313.250496][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.263487][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.684894][ T2559] team0 (unregistering): Port device team_slave_1 removed
[  313.736652][ T2559] team0 (unregistering): Port device team_slave_0 removed
[  314.217813][ T7316] hsr_slave_0: entered promiscuous mode
[  314.237769][ T7316] hsr_slave_1: entered promiscuous mode
[  314.278912][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.328875][ T5245] Bluetooth: hci6: command tx timeout
[  314.434569][ T7115] 8021q: adding VLAN 0 to HW filter on device team0
[  314.469509][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.476743][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.561022][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.568247][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.121395][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.232533][ T7316] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  315.247925][ T7316] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  315.268624][ T7316] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  315.281461][ T7316] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  315.303411][ T7115] veth0_vlan: entered promiscuous mode
[  315.324082][ T7115] veth1_vlan: entered promiscuous mode
[  315.426050][ T7115] veth0_macvtap: entered promiscuous mode
[  315.453786][ T7115] veth1_macvtap: entered promiscuous mode
[  315.509465][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.521379][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.535349][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.546313][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.566641][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.577462][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.596397][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.620200][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.635401][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.657082][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.673147][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.683499][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.710005][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.722595][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.743311][ T7115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.764568][ T7115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.774284][ T7115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.790307][ T7115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.820998][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.942761][ T7316] 8021q: adding VLAN 0 to HW filter on device team0
[  315.974301][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.981543][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.063817][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.071061][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.101339][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.111184][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.185800][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.195917][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.410428][ T5245] Bluetooth: hci6: command tx timeout
[  317.511823][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.772075][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  317.779280][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  318.593638][ T7316] veth0_vlan: entered promiscuous mode
[  318.642159][ T7316] veth1_vlan: entered promiscuous mode
[  318.782021][ T7316] veth0_macvtap: entered promiscuous mode
[  318.799955][ T7316] veth1_macvtap: entered promiscuous mode
[  318.843803][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.854470][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.865393][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.876479][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.889697][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.900683][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.911451][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.922179][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.935543][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.959801][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.973402][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.983743][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.994714][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.008613][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.019229][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.029277][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.040130][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.057072][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.076807][ T7316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.085636][ T7316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.094816][ T7316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.103806][ T7316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.265068][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.274624][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.338611][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.353183][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.075718][ T7449] ALSA: mixer_oss: invalid OSS volume '�����Y��{��������U����D��D�'
[  320.084242][ T7449] ALSA: mixer_oss: invalid OSS volume 'ߧ�4c�T���󯆩"�m!l�T.�Π����'
[  320.093588][ T7449] ALSA: mixer_oss: invalid OSS volume 'lg�'
[  320.099583][ T7449] ALSA: mixer_oss: invalid OSS volume '�)n���k�Ki��,r��WY\�ZV����?J`G'
[  320.107979][ T7449] ALSA: mixer_oss: invalid OSS volume 'k�O0���$��g��{�pl{��y;_A�RW��'
[  320.116296][ T7449] ALSA: mixer_oss: invalid OSS volume '�'
[  320.122098][ T7449] ALSA: mixer_oss: invalid OSS volume 'sv��Fu{Qby>��h%w���]'
[  320.129930][ T7449] ALSA: mixer_oss: invalid OSS volume '�E���=�v?��@4��8�@�h����L'
[  320.140089][ T7449] ALSA: mixer_oss: invalid OSS volume '�+���?>3Iq��0:i��q�|��U�D�ř��'
[  320.148762][ T7449] ALSA: mixer_oss: invalid OSS volume 'vӷ*xr��N0�ܗ���c��A�����d�h�'
[  320.157294][ T7449] ALSA: mixer_oss: invalid OSS volume '��JM����%H�J[~S'
[  320.164738][ T7449] ALSA: mixer_oss: invalid OSS volume '������SQF��?���`�*�����]��5S'
[  320.275147][   T29] audit: type=1400 audit(1725828571.883:439): avc:  denied  { write } for  pid=7445 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  322.378471][ T7474] xt_connbytes: Forcing CT accounting to be enabled
[  322.793748][ T7471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  323.061225][ T7471] kvm: pic: level sensitive irq not supported
[  323.061316][ T7471] kvm: pic: non byte read
[  323.110311][ T7471] kvm: pic: non byte read
[  323.826787][   T29] audit: type=1400 audit(1725828574.783:440): avc:  denied  { getopt } for  pid=7486 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  323.876685][ T5291] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  324.787198][ T5291] usb 5-1: Using ep0 maxpacket: 8
[  324.847704][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.878137][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.890911][ T5291] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  324.905877][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.949556][ T5291] usb 5-1: config 0 descriptor??
[  324.976948][ T5291] usb 5-1: can't set config #0, error -71
[  324.999147][ T5291] usb 5-1: USB disconnect, device number 5
[  325.127165][ T5243] Bluetooth: hci5: command 0x0406 tx timeout
[  325.133377][ T5256] Bluetooth: hci4: command 0x0406 tx timeout
[  325.486655][   T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  325.917477][   T47] usb 2-1: config index 0 descriptor too short (expected 106, got 36)
[  325.926212][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9
[  325.960428][   T47] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  326.005531][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.094160][   T47] usb 2-1: config 0 descriptor??
[  326.838833][ T7509] ptrace attach of "./syz-executor exec"[7510] was attempted by "./syz-executor exec"[7509]
[  329.628656][   T47] usbhid 2-1:0.0: can't add hid device: -71
[  329.659793][   T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  329.713273][   T47] usb 2-1: USB disconnect, device number 4
[  329.804799][   T29] audit: type=1326 audit(1725828581.413:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.0.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27edd7cef9 code=0x0
[  330.008125][ T7522] Cannot find add_set index 0 as target
[  331.306724][ T5294] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  331.518947][ T5294] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  331.639628][ T7527] xt_TPROXY: Can be used only with -p tcp or -p udp
[  331.811102][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.849990][ T5294] usb 2-1: config 0 descriptor??
[  331.861684][ T5294] cp210x 2-1:0.0: cp210x converter detected
[  332.382171][ T5294] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  332.432888][ T5294] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  332.466628][ T5294] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  332.468519][   T29] audit: type=1326 audit(1725828584.063:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.0.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27edd7cef9 code=0x0
[  332.526460][ T5294] usb 2-1: cp210x converter now attached to ttyUSB0
[  332.593720][ T5294] usb 2-1: USB disconnect, device number 5
[  332.794336][ T5294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  332.811995][ T5294] cp210x 2-1:0.0: device disconnected
[  335.126172][   T29] audit: type=1400 audit(1725828586.733:443): avc:  denied  { write } for  pid=7546 comm="syz.4.421" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  335.356953][   T29] audit: type=1400 audit(1725828586.963:444): avc:  denied  { read } for  pid=7546 comm="syz.4.421" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  336.357155][   T29] audit: type=1400 audit(1725828586.963:445): avc:  denied  { open } for  pid=7546 comm="syz.4.421" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  337.439615][ T7561] ptrace attach of "./syz-executor exec"[7562] was attempted by "./syz-executor exec"[7561]
[  342.388439][ T7583] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  343.016608][   T29] audit: type=1400 audit(1725828594.613:446): avc:  denied  { ioctl } for  pid=7576 comm="syz.4.432" path="socket:[21583]" dev="sockfs" ino=21583 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  343.117648][   T29] audit: type=1400 audit(1725828594.663:447): avc:  denied  { setopt } for  pid=7576 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  345.313243][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  345.338899][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  345.349286][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  345.368437][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  345.376221][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  345.385687][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  346.106947][ T5288] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  346.359288][ T5288] usb 5-1: Using ep0 maxpacket: 16
[  346.390586][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  346.432055][ T5288] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  346.456197][ T7597] chnl_net:caif_netlink_parms(): no params data found
[  346.459829][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.476448][ T5288] usb 5-1: Product: syz
[  346.483176][ T5288] usb 5-1: Manufacturer: syz
[  346.497901][ T5288] usb 5-1: SerialNumber: syz
[  346.558129][ T5288] usb 5-1: config 0 descriptor??
[  346.586826][ T5288] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  346.806762][ T5288] usb 5-1: USB disconnect, device number 6
[  346.889189][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.910489][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.928317][ T7597] bridge_slave_0: entered allmulticast mode
[  346.950337][ T7597] bridge_slave_0: entered promiscuous mode
[  346.973832][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.987713][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.995361][ T7597] bridge_slave_1: entered allmulticast mode
[  347.003072][ T7597] bridge_slave_1: entered promiscuous mode
[  347.114124][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.139258][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.263212][ T7597] team0: Port device team_slave_0 added
[  347.280234][ T7597] team0: Port device team_slave_1 added
[  347.449144][ T5245] Bluetooth: hci1: command tx timeout
[  347.485247][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.515314][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.544473][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.611210][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.618369][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.644509][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.047361][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  349.274946][ T7597] hsr_slave_0: entered promiscuous mode
[  349.359437][ T7641] xt_TPROXY: Can be used only with -p tcp or -p udp
[  349.990281][ T5245] Bluetooth: hci1: command tx timeout
[  350.019891][ T7597] hsr_slave_1: entered promiscuous mode
[  350.086808][   T25] usb 4-1: Using ep0 maxpacket: 16
[  350.103064][   T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00
[  350.117933][   T25] usb 4-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40
[  350.126434][   T25] usb 4-1: Product: syz
[  350.138685][   T25] usb 4-1: Manufacturer: syz
[  350.147356][   T25] usb 4-1: SerialNumber: syz
[  350.155819][   T25] usb 4-1: config 0 descriptor??
[  350.162026][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  350.172285][   T25] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  350.179831][ T7597] Cannot create hsr debugfs directory
[  350.189046][   T25] usb 4-1: Detected FT4232HA
[  350.550624][   T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  350.572143][   T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  350.595764][   T25] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  350.653844][   T25] usb 4-1: USB disconnect, device number 6
[  350.715189][   T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  350.761333][   T25] ftdi_sio 4-1:0.0: device disconnected
[  352.006683][ T5245] Bluetooth: hci1: command tx timeout
[  353.636702][   T29] audit: type=1400 audit(1725828605.233:448): avc:  denied  { connect } for  pid=7657 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  353.871298][ T7597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.087484][ T5245] Bluetooth: hci1: command tx timeout
[  355.311320][ T7597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.498451][ T7597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.167826][ T7597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.503655][   T54] bridge_slave_1: left allmulticast mode
[  359.514201][   T54] bridge_slave_1: left promiscuous mode
[  359.537334][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.363758][   T54] bridge_slave_0: left allmulticast mode
[  360.381492][   T54] bridge_slave_0: left promiscuous mode
[  360.404189][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.570515][   T29] audit: type=1400 audit(1725828612.183:449): avc:  denied  { create } for  pid=7711 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  361.338583][   T29] audit: type=1400 audit(1725828612.423:450): avc:  denied  { create } for  pid=7715 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  361.856709][   T29] audit: type=1400 audit(1725828612.423:451): avc:  denied  { write } for  pid=7715 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  361.887896][ T5321] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  362.176489][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.266647][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.323961][ T5321] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  362.371642][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.393452][ T5321] usb 1-1: config 0 descriptor??
[  362.855058][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0
[  362.869157][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0
[  362.928255][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0
[  362.993916][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0
[  363.001907][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0
[  363.033852][   T29] audit: type=1400 audit(1725828614.633:452): avc:  denied  { read } for  pid=7715 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  363.060651][ T5321] greenasia 0003:0E8F:0012.0005: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0
[  363.129554][ T5321] greenasia 0003:0E8F:0012.0005: no inputs found
[  363.209966][ T5321] usb 1-1: USB disconnect, device number 5
[  364.382087][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.665835][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.032381][   T54] bond0 (unregistering): Released all slaves
[  367.575405][ T7758] trusted_key: syz.1.481 sent an empty control message without MSG_MORE.
[  367.664327][ T7597] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  368.791171][ T7597] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  368.820324][ T7597] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  368.895388][ T7597] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  369.026230][   T54] hsr_slave_0: left promiscuous mode
[  369.063713][   T54] hsr_slave_1: left promiscuous mode
[  369.100896][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.142061][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.167132][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.195804][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.338997][   T54] veth1_macvtap: left promiscuous mode
[  369.354802][   T54] veth0_macvtap: left promiscuous mode
[  369.370849][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'.
[  369.385065][   T54] veth1_vlan: left promiscuous mode
[  369.400141][   T54] veth0_vlan: left promiscuous mode
[  370.383569][   T29] audit: type=1400 audit(1725828621.993:453): avc:  denied  { create } for  pid=7778 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  370.497366][   T29] audit: type=1400 audit(1725828622.023:454): avc:  denied  { getopt } for  pid=7778 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  370.537927][ T7782] Invalid option length (1031570) for dns_resolver key
[  371.553653][   T54] team0 (unregistering): Port device team_slave_1 removed
[  371.664317][ T7788] xt_CT: No such helper "syz0"
[  371.784808][   T54] team0 (unregistering): Port device team_slave_0 removed
[  372.126788][ T5288] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  373.029595][ T5288] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  373.055087][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  373.066899][ T5288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  373.093971][ T5288] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  373.131546][ T5288] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  373.142383][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  373.152243][ T5288] usb 2-1: Product: syz
[  373.177764][ T5288] usb 2-1: Manufacturer: syz
[  373.220967][ T5288] cdc_wdm 2-1:1.0: skipping garbage
[  373.232145][ T5288] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  373.763328][ T5294] usb 2-1: USB disconnect, device number 6
[  374.172479][ T7775] netlink: 'syz.3.486': attribute type 1 has an invalid length.
[  374.196363][ T7775] bond1: entered promiscuous mode
[  374.489045][ T7814] Cannot find add_set index 0 as target
[  375.663508][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.229914][ T7597] 8021q: adding VLAN 0 to HW filter on device team0
[  377.291178][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.298352][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.361057][ T2559] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.368250][ T2559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.978657][   T29] audit: type=1400 audit(1725828630.593:455): avc:  denied  { read } for  pid=7836 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  379.967238][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  379.973601][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  380.077179][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.540262][ T7597] veth0_vlan: entered promiscuous mode
[  380.826976][ T7597] veth1_vlan: entered promiscuous mode
[  380.942663][ T7597] veth0_macvtap: entered promiscuous mode
[  380.987307][ T7597] veth1_macvtap: entered promiscuous mode
[  381.028195][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.063317][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.128402][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.142664][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.172598][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.193467][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.236730][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.262112][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.290583][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.641158][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.664166][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.706592][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.717605][ T7865] kAFS: No cell specified
[  382.735574][   T29] audit: type=1400 audit(1725828634.323:456): avc:  denied  { bind } for  pid=7855 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  382.762267][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.777955][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.788566][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.814050][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.832330][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.845718][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.901726][ T7597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.915768][ T7597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.924695][ T7597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.936724][ T7597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.067631][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.075460][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.117509][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  383.125385][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.213260][   T29] audit: type=1400 audit(1725828634.823:457): avc:  denied  { bind } for  pid=7866 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  384.552284][ T7882] netlink: 'syz.3.520': attribute type 3 has an invalid length.
[  384.913635][ T7892] Cannot find add_set index 0 as target
[  386.384366][ T7901] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  387.330982][   T29] audit: type=1400 audit(1725828638.943:458): avc:  denied  { ioctl } for  pid=7903 comm="syz.1.512" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  387.582757][   T29] audit: type=1400 audit(1725828639.183:459): avc:  denied  { accept } for  pid=7908 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  387.786661][   T53] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  389.733019][   T29] audit: type=1400 audit(1725828640.303:460): avc:  denied  { getopt } for  pid=7910 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  390.066901][   T53] usb 2-1: device not accepting address 7, error -71
[  391.791861][ T7928] IPVS: stopping backup sync thread 7937 ...
[  391.811724][ T7937] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  393.501838][   T29] audit: type=1400 audit(1725828645.113:461): avc:  denied  { bind } for  pid=7942 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  393.608631][   T29] audit: type=1400 audit(1725828645.143:462): avc:  denied  { listen } for  pid=7942 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  394.097614][   T29] audit: type=1400 audit(1725828645.703:463): avc:  denied  { mount } for  pid=7955 comm="syz.3.530" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  395.381741][   T29] audit: type=1400 audit(1725828646.993:464): avc:  denied  { unmount } for  pid=6312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  395.383185][ T7964] loop2: detected capacity change from 0 to 7
[  395.432903][ T7964] Dev loop2: unable to read RDB block 7
[  395.469200][ T7964]  loop2: unable to read partition table
[  395.495928][ T7964] loop2: partition table beyond EOD, truncated
[  395.510644][ T7964] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  396.339805][   T29] audit: type=1400 audit(1725828647.953:465): avc:  denied  { bind } for  pid=7967 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  399.406508][    C1] sched: RT throttling activated
[  405.007205][   T29] audit: type=1400 audit(1725828656.593:466): avc:  denied  { setopt } for  pid=7986 comm="syz.0.540" lport=52418 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  405.136707][   T29] audit: type=1400 audit(1725828656.603:467): avc:  denied  { read } for  pid=7986 comm="syz.0.540" lport=52418 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  407.053980][   T56] Bluetooth: hci3: command 0x0406 tx timeout
[  407.100258][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  407.109580][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  407.118598][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  407.130979][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  407.139385][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  407.147059][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  408.716808][ T2559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.291323][ T5245] Bluetooth: hci2: command tx timeout
[  409.307172][   T29] audit: type=1400 audit(1725828660.923:468): avc:  denied  { ioctl } for  pid=8022 comm="syz.3.550" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  409.360617][ T8024] input: syz0 as /devices/virtual/input/input8
[  409.449136][ T2559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.596970][ T8029] netlink: 'syz.1.552': attribute type 21 has an invalid length.
[  409.604727][ T8029] netlink: 128 bytes leftover after parsing attributes in process `syz.1.552'.
[  409.675010][ T8029] netlink: 'syz.1.552': attribute type 6 has an invalid length.
[  409.759101][ T8029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.552'.
[  410.017283][ T8036] No such timeout policy "syz1"
[  410.925910][ T2559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.369728][ T5245] Bluetooth: hci2: command tx timeout
[  411.439562][ T2559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.978123][ T8009] chnl_net:caif_netlink_parms(): no params data found
[  412.559697][ T2559] bridge_slave_1: left allmulticast mode
[  412.582001][ T2559] bridge_slave_1: left promiscuous mode
[  412.608642][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.666908][ T2559] bridge_slave_0: left allmulticast mode
[  412.676581][ T2559] bridge_slave_0: left promiscuous mode
[  412.685048][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.456685][ T5245] Bluetooth: hci2: command tx timeout
[  414.630538][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.654634][ T8079] 9pnet_fd: Insufficient options for proto=fd
[  414.689606][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.751654][ T2559] bond0 (unregistering): Released all slaves
[  415.527914][ T5245] Bluetooth: hci2: command tx timeout
[  415.994792][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.043798][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.053600][   T29] audit: type=1400 audit(1725828667.663:469): avc:  denied  { setopt } for  pid=8086 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  416.056750][ T8009] bridge_slave_0: entered allmulticast mode
[  416.270664][ T8009] bridge_slave_0: entered promiscuous mode
[  416.280314][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.316231][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.366334][ T8009] bridge_slave_1: entered allmulticast mode
[  417.378042][ T8009] bridge_slave_1: entered promiscuous mode
[  418.916555][   T29] audit: type=1400 audit(1725828669.783:470): avc:  denied  { connect } for  pid=8098 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  419.860050][   T29] audit: type=1400 audit(1725828669.793:471): avc:  denied  { write } for  pid=8098 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  419.936212][   T29] audit: type=1400 audit(1725828669.793:472): avc:  denied  { read } for  pid=8098 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  419.990924][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.052145][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.905889][ T8009] team0: Port device team_slave_0 added
[  421.958893][ T8009] team0: Port device team_slave_1 added
[  422.936609][ T2559] hsr_slave_0: left promiscuous mode
[  423.506837][ T2559] hsr_slave_1: left promiscuous mode
[  424.072220][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  424.082696][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  424.091931][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  424.103728][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  424.113724][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.121561][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.129192][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  424.146828][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  424.200300][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.207921][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.371357][ T2559] veth1_macvtap: left promiscuous mode
[  424.396803][ T2559] veth0_macvtap: left promiscuous mode
[  424.413109][ T2559] veth1_vlan: left promiscuous mode
[  424.448239][ T2559] veth0_vlan: left promiscuous mode
[  426.288932][ T5243] Bluetooth: hci4: command tx timeout
[  426.706691][   T29] audit: type=1804 audit(1725828678.303:473): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.587" name="/newroot/18/file0" dev="fuse" ino=1 res=1 errno=0
[  428.336720][ T5243] Bluetooth: hci4: command tx timeout
[  429.243219][ T2559] team0 (unregistering): Port device team_slave_1 removed
[  429.438080][ T2559] team0 (unregistering): Port device team_slave_0 removed
[  430.408401][ T5243] Bluetooth: hci4: command tx timeout
[  431.038484][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.046703][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.076813][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.243144][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.266660][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.307017][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.479211][ T8009] hsr_slave_0: entered promiscuous mode
[  431.507125][ T8009] hsr_slave_1: entered promiscuous mode
[  432.149226][ T2559] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.358460][ T2559] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.494174][ T2559] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.498476][ T5243] Bluetooth: hci4: command tx timeout
[  432.580970][ T2559] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.750843][ T8150] chnl_net:caif_netlink_parms(): no params data found
[  433.142641][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.150465][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.159994][ T8150] bridge_slave_0: entered allmulticast mode
[  433.170615][ T8150] bridge_slave_0: entered promiscuous mode
[  433.179948][ T2559] bridge_slave_1: left allmulticast mode
[  433.187743][ T2559] bridge_slave_1: left promiscuous mode
[  433.193630][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.203214][ T2559] bridge_slave_0: left allmulticast mode
[  433.209852][ T2559] bridge_slave_0: left promiscuous mode
[  433.215557][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.692735][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.705671][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.718261][ T2559] bond0 (unregistering): Released all slaves
[  433.732116][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.744751][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.757186][ T8150] bridge_slave_1: entered allmulticast mode
[  433.770898][ T8150] bridge_slave_1: entered promiscuous mode
[  433.893745][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.921868][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.155394][ T8150] team0: Port device team_slave_0 added
[  434.263728][ T8150] team0: Port device team_slave_1 added
[  434.311160][ T8009] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  434.323893][ T8009] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  434.394560][ T8009] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  434.409801][ T8009] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  434.438463][ T2559] hsr_slave_0: left promiscuous mode
[  434.444719][ T2559] hsr_slave_1: left promiscuous mode
[  434.451584][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.460472][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.469577][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.478753][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.523806][ T2559] veth1_macvtap: left promiscuous mode
[  434.529712][ T2559] veth0_macvtap: left promiscuous mode
[  434.535435][ T2559] veth1_vlan: left promiscuous mode
[  434.541550][ T2559] veth0_vlan: left promiscuous mode
[  435.093421][ T2559] team0 (unregistering): Port device team_slave_1 removed
[  435.166640][ T2559] team0 (unregistering): Port device team_slave_0 removed
[  435.738827][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.747844][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.775459][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.794003][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.801392][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.828316][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.993033][ T8150] hsr_slave_0: entered promiscuous mode
[  435.999653][ T8150] hsr_slave_1: entered promiscuous mode
[  436.005812][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  436.013828][ T8150] Cannot create hsr debugfs directory
[  436.374203][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.415660][ T8009] 8021q: adding VLAN 0 to HW filter on device team0
[  436.472645][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.479985][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.635497][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.642748][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.805004][ T8009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.032385][ T8150] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  437.057505][ T8150] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  437.081942][ T8150] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  437.100501][ T8150] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  437.184176][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.415020][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.463363][ T8150] 8021q: adding VLAN 0 to HW filter on device team0
[  437.510975][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.518226][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.542789][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.550006][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.830660][ T8009] veth0_vlan: entered promiscuous mode
[  437.870638][ T8009] veth1_vlan: entered promiscuous mode
[  438.013755][ T8009] veth0_macvtap: entered promiscuous mode
[  438.056260][ T8009] veth1_macvtap: entered promiscuous mode
[  438.072915][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.112913][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.132367][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.145300][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.161164][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.174548][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.190846][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.216807][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.256165][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  438.273434][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.284781][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  438.301608][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.317601][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  438.329903][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.342343][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.378752][ T8009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.394391][ T8009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.415936][ T8009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.427688][ T8009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.495371][ T8150] veth0_vlan: entered promiscuous mode
[  438.571095][ T8150] veth1_vlan: entered promiscuous mode
[  438.665973][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.684644][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.785600][ T8150] veth0_macvtap: entered promiscuous mode
[  438.825176][ T8150] veth1_macvtap: entered promiscuous mode
[  438.854300][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.876250][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.896349][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.915496][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.931931][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.943251][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.953634][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  438.965898][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  438.982193][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.001702][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.025722][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.063225][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.073796][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.091586][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.104520][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.115884][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.139024][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.154387][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.171516][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.184387][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.226293][ T8150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.247933][ T8150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.257354][ T8150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.302293][ T8150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.667622][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  440.674115][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  440.699505][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.709042][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.795476][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.829817][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.688566][ T8312] Bluetooth: MGMT ver 1.23
[  442.781632][ T8328] syz.4.592[8328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  442.781840][ T8328] syz.4.592[8328] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  443.112379][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'.
[  444.915490][   T29] audit: type=1400 audit(1725828696.523:474): avc:  denied  { getopt } for  pid=8353 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  446.081081][   T29] audit: type=1400 audit(1725828697.693:475): avc:  denied  { ioctl } for  pid=8361 comm="syz.0.595" path="socket:[25364]" dev="sockfs" ino=25364 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  446.210667][   T29] audit: type=1400 audit(1725828697.763:476): avc:  denied  { create } for  pid=8361 comm="syz.0.595" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  446.276063][   T29] audit: type=1400 audit(1725828697.763:477): avc:  denied  { write } for  pid=8361 comm="syz.0.595" name="file5" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  446.426676][   T29] audit: type=1400 audit(1725828697.763:478): avc:  denied  { open } for  pid=8361 comm="syz.0.595" path="/46/file5" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  446.508568][   T29] audit: type=1400 audit(1725828697.803:479): avc:  denied  { ioctl } for  pid=8361 comm="syz.0.595" path="/46/file5" dev="tmpfs" ino=252 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  447.466783][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'.
[  447.756751][   T29] audit: type=1400 audit(1725828697.993:480): avc:  denied  { unlink } for  pid=7115 comm="syz-executor" name="file5" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  447.785658][   T29] audit: type=1400 audit(1725828699.173:481): avc:  denied  { shutdown } for  pid=8373 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  447.976560][   T29] audit: type=1400 audit(1725828699.583:482): avc:  denied  { setopt } for  pid=8368 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  449.970108][ T8406] netlink: 156 bytes leftover after parsing attributes in process `syz.2.612'.
[  457.800012][ T8462] binder: BINDER_SET_CONTEXT_MGR already set
[  457.830072][ T8462] binder: 8452:8462 ioctl 4018620d 20000100 returned -16
[  457.895404][ T8465] binder: 8452:8465 ioctl c018620c 20000000 returned -1
[  460.505475][ T8475] kvm: kvm [8474]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[  466.986363][ T8534] netlink: 156 bytes leftover after parsing attributes in process `syz.1.645'.
[  467.066719][ T8534] netlink: 'syz.1.645': attribute type 2 has an invalid length.
[  467.107416][ T8534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.645'.
[  468.486834][ T5243] Bluetooth: hci1: command 0x0406 tx timeout
[  468.923428][ T8559] capability: warning: `syz.4.652' uses 32-bit capabilities (legacy support in use)
[  468.996575][   T29] audit: type=1400 audit(468.954:483): avc:  denied  { setopt } for  pid=8557 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  469.090311][   T29] audit: type=1400 audit(469.044:484): avc:  denied  { setopt } for  pid=8562 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  470.233998][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  470.250071][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  470.306673][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  470.340663][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  470.357378][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  470.368938][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  471.596626][   T29] audit: type=1400 audit(471.564:485): avc:  denied  { mount } for  pid=8586 comm="syz.0.661" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  472.649400][ T5245] Bluetooth: hci5: command tx timeout
[  472.871542][ T8573] chnl_net:caif_netlink_parms(): no params data found
[  472.946915][   T29] audit: type=1400 audit(472.904:486): avc:  denied  { unmount } for  pid=7115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  472.966141][    C0] vkms_vblank_simulate: vblank timer overrun
[  473.219204][ T5245] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  473.229617][ T5245] Bluetooth: hci2: Injecting HCI hardware error event
[  473.353872][   T56] Bluetooth: hci2: hardware error 0x00
[  474.253293][   T29] audit: type=1400 audit(474.224:487): avc:  denied  { watch_mount } for  pid=8608 comm="syz.4.667" path="/14/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  474.359898][   T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.371159][   T29] audit: type=1400 audit(474.344:488): avc:  denied  { unmount } for  pid=8009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  474.995618][ T5245] Bluetooth: hci5: command 0x041b tx timeout
[  475.217627][ T5293] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  476.006676][   T56] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  477.296674][   T56] Bluetooth: hci5: command 0x041b tx timeout
[  478.009886][   T29] audit: type=1400 audit(477.974:489): avc:  denied  { connect } for  pid=8620 comm="syz.2.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  479.367855][   T56] Bluetooth: hci5: command 0x041b tx timeout
[  479.565980][   T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.919355][   T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.031882][   T56] Bluetooth: hci5: command 0x041b tx timeout
[  483.890941][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.923398][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.946949][ T8573] bridge_slave_0: entered allmulticast mode
[  483.959197][ T8573] bridge_slave_0: entered promiscuous mode
[  484.040318][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.120927][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.147271][ T8573] bridge_slave_1: entered allmulticast mode
[  484.160650][ T8573] bridge_slave_1: entered promiscuous mode
[  485.850795][   T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.746908][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.810068][ T8680] tipc: Started in network mode
[  486.828192][ T8680] tipc: Node identity fffffff9, cluster identity 4711
[  486.865582][ T8680] tipc: Node number set to 4294967289
[  486.919951][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.152369][ T8573] team0: Port device team_slave_0 added
[  487.217247][ T8573] team0: Port device team_slave_1 added
[  487.377547][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.397056][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.505957][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.598933][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.636734][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.095462][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.561807][ T8573] hsr_slave_0: entered promiscuous mode
[  488.585644][ T8573] hsr_slave_1: entered promiscuous mode
[  488.610194][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  488.625395][ T8573] Cannot create hsr debugfs directory
[  488.635908][   T54] bridge_slave_1: left allmulticast mode
[  488.656949][   T54] bridge_slave_1: left promiscuous mode
[  488.662921][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.673131][   T54] bridge_slave_0: left allmulticast mode
[  488.679710][   T54] bridge_slave_0: left promiscuous mode
[  488.687969][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.313892][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.326755][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.342547][   T54] bond0 (unregistering): Released all slaves
[  489.355403][   T54] bond1 (unregistering): Released all slaves
[  489.842967][   T54] hsr_slave_0: left promiscuous mode
[  489.878849][   T54] hsr_slave_1: left promiscuous mode
[  489.885167][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.893145][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.901416][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.911005][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.946873][   T54] veth1_macvtap: left promiscuous mode
[  489.952661][   T54] veth0_macvtap: left promiscuous mode
[  489.958474][   T54] veth1_vlan: left promiscuous mode
[  489.963840][   T54] veth0_vlan: left promiscuous mode
[  490.760799][   T54] team0 (unregistering): Port device team_slave_1 removed
[  490.826357][   T54] team0 (unregistering): Port device team_slave_0 removed
[  492.106416][ T8573] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  492.120536][ T8573] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  492.142983][ T8573] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  492.178239][ T8573] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  492.357790][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.394837][ T8573] 8021q: adding VLAN 0 to HW filter on device team0
[  492.411601][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.418834][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.443928][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.451203][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.835480][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.974666][ T8573] veth0_vlan: entered promiscuous mode
[  493.015027][ T8573] veth1_vlan: entered promiscuous mode
[  493.092868][ T8573] veth0_macvtap: entered promiscuous mode
[  493.114631][ T8573] veth1_macvtap: entered promiscuous mode
[  493.145393][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.156383][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.167353][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.178730][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.194063][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.206635][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.219097][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.231119][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.248776][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.272186][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.282743][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.296209][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.307642][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.317917][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.328952][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.339260][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.350324][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.362676][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.382130][ T8573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.405896][ T8573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.414919][ T8573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.426521][ T8573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.627507][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.635365][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.683424][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.691639][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.087627][ T8760] syzkaller0: entered promiscuous mode
[  496.154581][ T8760] syzkaller0: entered allmulticast mode
[  497.300982][   T56] Bluetooth: hci1: unexpected event for opcode 0x2060
[  497.316635][ T5294] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  497.516690][ T5294] usb 4-1: Using ep0 maxpacket: 32
[  497.527360][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.558048][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.601594][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  497.646811][ T5293] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  497.654506][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  497.714075][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  497.744786][ T5294] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  497.754603][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.861392][ T5294] usb 4-1: config 0 descriptor??
[  497.890958][ T5293] usb 3-1: Using ep0 maxpacket: 32
[  497.935288][ T5293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  497.993429][ T5293] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  498.025368][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  498.074085][ T5293] usb 3-1: Product: syz
[  498.102807][ T5293] usb 3-1: Manufacturer: syz
[  498.136804][ T5293] usb 3-1: SerialNumber: syz
[  498.171768][ T5293] usb 3-1: config 0 descriptor??
[  498.200507][ T8792] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  498.399345][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[  498.434708][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[  498.459613][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[  498.508853][ T8792] netlink: 'syz.2.693': attribute type 8 has an invalid length.
[  498.522355][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[  498.551177][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0
[  498.571381][ T8792] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.693'.
[  498.602045][ T5294] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0
[  498.630778][ T5291] usb 3-1: USB disconnect, device number 6
[  498.770105][ T5294] usb 4-1: USB disconnect, device number 7
[  500.992131][   T29] audit: type=1400 audit(499.964:490): avc:  denied  { map } for  pid=8819 comm="syz.0.712" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  501.324611][ T8830] debugfs: Directory 'ptm0' with parent 'caif_serial' already present!
[  502.128669][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  502.141920][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  502.546368][ T8837] Bluetooth: MGMT ver 1.23
[  505.898883][   T29] audit: type=1400 audit(505.874:491): avc:  denied  { ioctl } for  pid=8867 comm="syz.3.714" path="socket:[27230]" dev="sockfs" ino=27230 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  506.582423][  T943] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  507.638137][  T943] usb 1-1: not running at top speed; connect to a high speed hub
[  507.697337][  T943] usb 1-1: config 1 interface 0 has no altsetting 0
[  507.726720][  T943] usb 1-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.40
[  507.759907][  T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.790808][  T943] usb 1-1: Product: syz
[  507.795026][  T943] usb 1-1: Manufacturer: 粘殙彥됋ꄧ廀쉛ʉ᭦⍈ꄙ귤寪펱῵혙鳂䦲瀰臰弄૙糠륄䧖뗿￐퓨ힽ眢⮔滸䚵꽠垭᷺℮豾㫏첃餅炇菉弸쎼ᕯ郋鉡塨뙾㦆㶗篿埦择鍧졕卍留ꌲ綊嶷폖뜆㗪橞줃툊헔귗夬鎁紼擮뼔Ꜩ⨋࡟ᔳ㻧辎便ꝉ쩝䛛駪ꖳᗆ╾迗돭ꦯ逳픔
[  507.803778][   T29] audit: type=1400 audit(507.774:492): avc:  denied  { create } for  pid=8884 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  507.865840][  T943] usb 1-1: SerialNumber: syz
[  508.469898][  T943] usbhid 1-1:1.0: can't add hid device: -71
[  508.478932][  T943] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  508.590709][  T943] usb 1-1: USB disconnect, device number 6
[  508.607073][ T8890] syzkaller0: entered promiscuous mode
[  508.620660][ T8890] syzkaller0: entered allmulticast mode
[  511.584839][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  511.604909][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  511.637226][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  511.679043][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  511.701896][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  511.713601][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  513.848902][   T56] Bluetooth: hci0: command tx timeout
[  515.935523][   T56] Bluetooth: hci0: command tx timeout
[  516.146281][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'.
[  516.165089][ T8906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'.
[  516.196989][ T8919] netlink: 76 bytes leftover after parsing attributes in process `syz.3.727'.
[  516.338124][ T8921] Cannot find set identified by id 0 to match
[  516.719826][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.749772][ T8911] chnl_net:caif_netlink_parms(): no params data found
[  516.821993][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.881825][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.889273][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.896793][ T8911] bridge_slave_0: entered allmulticast mode
[  516.906103][ T8911] bridge_slave_0: entered promiscuous mode
[  516.939796][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.954839][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.962849][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.971066][ T8911] bridge_slave_1: entered allmulticast mode
[  516.979142][ T8911] bridge_slave_1: entered promiscuous mode
[  517.046527][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.068268][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.080602][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.125816][ T8911] team0: Port device team_slave_0 added
[  517.141451][ T8911] team0: Port device team_slave_1 added
[  517.186050][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.193793][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.220130][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.236244][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.244593][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.272706][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.364957][ T8911] hsr_slave_0: entered promiscuous mode
[  517.372546][ T8911] hsr_slave_1: entered promiscuous mode
[  517.381142][ T8911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  517.389202][ T8911] Cannot create hsr debugfs directory
[  517.480298][   T12] bridge_slave_1: left allmulticast mode
[  517.486012][   T12] bridge_slave_1: left promiscuous mode
[  517.493906][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.507867][   T12] bridge_slave_0: left allmulticast mode
[  517.513530][   T12] bridge_slave_0: left promiscuous mode
[  517.519823][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.010313][   T56] Bluetooth: hci0: command tx timeout
[  518.076416][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.091118][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.104259][   T12] bond0 (unregistering): Released all slaves
[  518.213212][   T12] tipc: Left network mode
[  518.683603][   T12] hsr_slave_0: left promiscuous mode
[  518.700198][   T12] hsr_slave_1: left promiscuous mode
[  518.708935][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.716397][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.731327][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.739058][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.776045][   T12] veth1_macvtap: left promiscuous mode
[  518.783611][   T12] veth0_macvtap: left promiscuous mode
[  518.801316][   T12] veth1_vlan: left promiscuous mode
[  518.807734][   T12] veth0_vlan: left promiscuous mode
[  519.523394][   T12] team0 (unregistering): Port device team_slave_1 removed
[  519.589372][   T12] team0 (unregistering): Port device team_slave_0 removed
[  520.105273][   T56] Bluetooth: hci0: command tx timeout
[  520.816632][ T8911] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  520.839683][ T8911] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  520.859137][ T8911] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  520.877789][ T8911] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  521.095273][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.163037][ T8911] 8021q: adding VLAN 0 to HW filter on device team0
[  521.179907][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.187179][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.220415][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.227686][ T8619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.570710][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  521.924679][ T8911] veth0_vlan: entered promiscuous mode
[  521.945318][ T8911] veth1_vlan: entered promiscuous mode
[  521.982554][ T8911] veth0_macvtap: entered promiscuous mode
[  521.993886][ T8911] veth1_macvtap: entered promiscuous mode
[  522.015649][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.032965][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.043858][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.056092][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.068301][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.078788][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.089312][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  522.100633][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.113092][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.133158][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.145667][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.158011][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.169372][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.179246][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.191631][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.201622][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.212431][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.224857][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.243799][ T8911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.253385][ T8911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.264926][ T8911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.277023][ T8911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.380562][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.400713][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.434962][ T2559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.443138][ T2559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.610253][   T29] audit: type=1400 audit(522.584:493): avc:  denied  { write } for  pid=8982 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  524.045747][ T8996] tmpfs: Bad value for 'mpol'
[  524.896607][ T5294] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  525.257389][ T5294] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  525.298686][ T5294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  525.338376][ T5294] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  525.359560][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  525.389196][ T5294] usb 1-1: SerialNumber: syz
[  525.809118][ T5294] usb 1-1: 0:2 : does not exist
[  525.830098][ T5294] usb 1-1: unit 5 not found!
[  526.712931][ T5294] usb 1-1: USB disconnect, device number 7
[  527.039514][ T7989] udevd[7989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  529.330329][ T5243] Bluetooth: hci0: command 0x0405 tx timeout
[  531.379064][   T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  531.592109][   T29] audit: type=1400 audit(531.554:494): avc:  denied  { override_creds } for  pid=9044 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  531.625669][   T25] usb 4-1: Using ep0 maxpacket: 16
[  531.653492][   T25] usb 4-1: config index 0 descriptor too short (expected 55488, got 18)
[  531.665719][   T25] usb 4-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config
[  531.677123][   T25] usb 4-1: config 0 has no interfaces?
[  531.688580][   T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  531.699238][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.707754][   T25] usb 4-1: Product: syz
[  531.712201][   T25] usb 4-1: Manufacturer: syz
[  531.717397][   T25] usb 4-1: SerialNumber: syz
[  531.782720][   T25] usb 4-1: config 0 descriptor??
[  531.975318][ T9059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  532.649200][   T25] usb 4-1: USB disconnect, device number 8
[  533.132639][   T29] audit: type=1400 audit(533.104:495): avc:  denied  { mounton } for  pid=9065 comm="syz.4.752" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  533.171936][ T9066] syz.4.752: attempt to access beyond end of device
[  533.171936][ T9066] loop4: rw=0, sector=64, nr_sectors = 1 limit=0
[  533.224745][ T9066] syz.4.752: attempt to access beyond end of device
[  533.224745][ T9066] loop4: rw=0, sector=256, nr_sectors = 1 limit=0
[  533.296703][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  533.335422][ T9066] syz.4.752: attempt to access beyond end of device
[  533.335422][ T9066] loop4: rw=0, sector=512, nr_sectors = 1 limit=0
[  533.446623][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  533.486702][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  533.507569][ T9066] UDF-fs: Scanning with blocksize 512 failed
[  533.642727][ T9066] syz.4.752: attempt to access beyond end of device
[  533.642727][ T9066] loop4: rw=0, sector=64, nr_sectors = 2 limit=0
[  533.696998][ T9066] syz.4.752: attempt to access beyond end of device
[  533.696998][ T9066] loop4: rw=0, sector=512, nr_sectors = 2 limit=0
[  534.159327][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  534.813893][ T9066] syz.4.752: attempt to access beyond end of device
[  534.813893][ T9066] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  534.943605][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  535.004353][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  535.031029][ T9066] UDF-fs: Scanning with blocksize 1024 failed
[  535.050860][ T9066] syz.4.752: attempt to access beyond end of device
[  535.050860][ T9066] loop4: rw=0, sector=64, nr_sectors = 4 limit=0
[  535.071425][ T9066] syz.4.752: attempt to access beyond end of device
[  535.071425][ T9066] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  535.092030][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  535.105913][ T9066] syz.4.752: attempt to access beyond end of device
[  535.105913][ T9066] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  535.156939][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  535.197576][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  535.246905][ T9066] UDF-fs: Scanning with blocksize 2048 failed
[  535.283383][ T9066] syz.4.752: attempt to access beyond end of device
[  535.283383][ T9066] loop4: rw=0, sector=64, nr_sectors = 8 limit=0
[  535.346765][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  535.383771][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  535.410822][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  535.459608][ T9066] UDF-fs: Scanning with blocksize 4096 failed
[  535.503394][ T9066] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  535.750582][ T8293] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  536.766178][ T8293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.851478][ T8293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  537.121048][ T8293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  538.180786][ T8293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.207702][ T8293] usb 2-1: config 0 descriptor??
[  538.377878][ T8293] usbhid 2-1:0.0: can't add hid device: -71
[  538.402170][ T8293] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  538.561948][ T8293] usb 2-1: USB disconnect, device number 10
[  540.285092][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  540.298705][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  540.318053][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  540.339422][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  540.347538][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  540.354881][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  540.563628][   T29] audit: type=1400 audit(540.534:496): avc:  denied  { bind } for  pid=9108 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  545.759781][   T56] Bluetooth: hci2: command tx timeout
[  546.650535][   T29] audit: type=1400 audit(546.614:497): avc:  denied  { write } for  pid=9113 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  546.893795][ T9123] qrtr: Invalid version 0
[  547.886502][ T5243] Bluetooth: hci2: command tx timeout
[  548.299825][   T29] audit: type=1400 audit(548.264:498): avc:  denied  { getopt } for  pid=9126 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  548.443187][ T9104] chnl_net:caif_netlink_parms(): no params data found
[  549.855068][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  549.869446][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  549.878610][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  549.892727][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  549.901718][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  549.926725][ T5245] Bluetooth: hci2: command tx timeout
[  549.933051][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  550.122293][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.155120][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.196714][ T9104] bridge_slave_0: entered allmulticast mode
[  550.216786][ T9104] bridge_slave_0: entered promiscuous mode
[  550.246757][ T9142] Bluetooth: hci4: command 0x0406 tx timeout
[  550.285402][ T9144] syzkaller0: entered allmulticast mode
[  550.294234][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.324943][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.356634][ T9104] bridge_slave_1: entered allmulticast mode
[  550.380108][ T9104] bridge_slave_1: entered promiscuous mode
[  551.174702][ T9149] Bluetooth: MGMT ver 1.23
[  552.647685][ T5243] Bluetooth: hci2: command tx timeout
[  552.653246][ T5243] Bluetooth: hci6: command tx timeout
[  553.623608][ T1294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.695081][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  553.960123][ T1294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.009409][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.269870][ T1294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.387755][   T29] audit: type=1400 audit(554.364:499): avc:  denied  { map } for  pid=9159 comm="syz.4.777" path="socket:[29580]" dev="sockfs" ino=29580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  554.581181][ T1294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.648068][ T9104] team0: Port device team_slave_0 added
[  554.707715][ T9104] team0: Port device team_slave_1 added
[  554.726667][ T5243] Bluetooth: hci6: command tx timeout
[  554.918543][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.926089][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.009795][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.042192][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.099577][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.222610][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.709801][ T9104] hsr_slave_0: entered promiscuous mode
[  556.734599][ T9104] hsr_slave_1: entered promiscuous mode
[  556.806658][ T5243] Bluetooth: hci6: command tx timeout
[  557.101782][ T9140] chnl_net:caif_netlink_parms(): no params data found
[  558.858503][ T1294] bridge_slave_1: left allmulticast mode
[  558.865485][ T1294] bridge_slave_1: left promiscuous mode
[  558.886608][ T5243] Bluetooth: hci6: command tx timeout
[  558.905385][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.094321][ T1294] bridge_slave_0: left allmulticast mode
[  559.119468][ T1294] bridge_slave_0: left promiscuous mode
[  559.149445][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.576294][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.786'.
[  561.117229][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.156269][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.186255][ T1294] bond0 (unregistering): Released all slaves
[  561.706143][ T9225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.788'.
[  563.430996][   T29] audit: type=1400 audit(563.394:500): avc:  denied  { read } for  pid=9230 comm="syz.1.792" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  563.489769][   T29] audit: type=1400 audit(563.394:501): avc:  denied  { open } for  pid=9230 comm="syz.1.792" path="/48/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  563.537471][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  563.543843][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  563.678089][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.687896][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.695200][ T9140] bridge_slave_0: entered allmulticast mode
[  563.699133][   T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  563.704121][ T9140] bridge_slave_0: entered promiscuous mode
[  563.754360][ T9241] block device autoloading is deprecated and will be removed.
[  563.930550][   T25] usb 5-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config
[  563.932450][   T29] audit: type=1400 audit(563.904:502): avc:  denied  { getopt } for  pid=9246 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  563.950893][   T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  563.993230][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  564.025981][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.039979][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.041783][   T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  564.056095][ T9140] bridge_slave_1: entered allmulticast mode
[  564.075187][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.077506][ T9140] bridge_slave_1: entered promiscuous mode
[  564.091214][   T25] usb 5-1: Product: syz
[  564.100341][   T25] usb 5-1: Manufacturer: syz
[  564.113137][   T25] usb 5-1: SerialNumber: syz
[  564.209965][   T25] cdc_ncm 5-1:1.0: skipping garbage
[  564.236137][   T25] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  564.277447][   T25] cdc_ncm 5-1:1.0: bind() failure
[  564.291471][ T1294] hsr_slave_0: left promiscuous mode
[  564.350465][ T1294] hsr_slave_1: left promiscuous mode
[  564.358463][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.371120][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.442469][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.477538][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.028841][ T1294] veth1_macvtap: left promiscuous mode
[  565.038571][ T1294] veth0_macvtap: left promiscuous mode
[  565.044576][ T1294] veth1_vlan: left promiscuous mode
[  565.052895][ T1294] veth0_vlan: left promiscuous mode
[  565.397783][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.464865][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.487648][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.516841][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.596028][  T943] usb 5-1: USB disconnect, device number 7
[  566.742872][ T1294] team0 (unregistering): Port device team_slave_1 removed
[  566.831989][ T1294] team0 (unregistering): Port device team_slave_0 removed
[  567.902042][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.932943][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.036411][ T9260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.216108][ T9140] team0: Port device team_slave_0 added
[  568.251030][ T9140] team0: Port device team_slave_1 added
[  568.399773][ T9260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.278453][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.285431][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.522016][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.559573][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.577676][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.620937][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.708693][ T9260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.769411][   T29] audit: type=1400 audit(569.674:503): avc:  denied  { read } for  pid=9292 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  569.920865][ T9260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.057105][ T9140] hsr_slave_0: entered promiscuous mode
[  570.067207][ T9140] hsr_slave_1: entered promiscuous mode
[  570.081149][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.094044][ T9140] Cannot create hsr debugfs directory
[  570.106322][   T29] audit: type=1804 audit(570.074:504): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.806" name="/newroot/53/file0" dev="fuse" ino=1 res=1 errno=0
[  570.236689][ T9104] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  570.253387][ T9104] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  570.296203][ T9104] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  570.587070][ T1294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.623087][ T9104] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  570.753462][ T1294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.959721][ T9260] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.089258][ T1294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.152731][ T9260] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.293718][ T1294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.436862][ T9260] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.494916][ T9260] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.866219][ T1294] bridge_slave_1: left allmulticast mode
[  572.879911][ T1294] bridge_slave_1: left promiscuous mode
[  572.888277][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.905958][ T1294] bridge_slave_0: left allmulticast mode
[  572.936593][ T1294] bridge_slave_0: left promiscuous mode
[  572.946053][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.246966][ T5243] Bluetooth: hci6: command 0x0405 tx timeout
[  575.112921][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.146041][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.176218][ T1294] bond0 (unregistering): Released all slaves
[  575.331771][ T9335] syzkaller0: entered promiscuous mode
[  575.352963][ T9335] syzkaller0: entered allmulticast mode
[  575.883327][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.184825][ T9104] 8021q: adding VLAN 0 to HW filter on device team0
[  576.264665][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.271908][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.606776][ T1294] hsr_slave_0: left promiscuous mode
[  576.619986][ T1294] hsr_slave_1: left promiscuous mode
[  576.636798][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  576.645514][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  576.689501][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  576.706093][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  576.805711][ T1294] veth1_macvtap: left promiscuous mode
[  576.822840][ T1294] veth0_macvtap: left promiscuous mode
[  576.838245][ T1294] veth1_vlan: left promiscuous mode
[  576.854044][ T1294] veth0_vlan: left promiscuous mode
[  579.211925][ T9400] netlink: 156 bytes leftover after parsing attributes in process `syz.3.816'.
[  580.440212][ T9408] netlink: 'syz.1.819': attribute type 2 has an invalid length.
[  580.485050][ T1294] team0 (unregistering): Port device team_slave_1 removed
[  580.496599][  T943] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  580.691093][  T943] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90
[  580.692395][ T1294] team0 (unregistering): Port device team_slave_0 removed
[  580.714050][  T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.763597][  T943] usb 4-1: config 0 descriptor??
[  580.781302][  T943] bfusb 4-1:0.0: probe with driver bfusb failed with error -5
[  580.841856][ T9142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  580.869198][ T9142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  580.878159][ T9142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  580.889426][ T9142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  580.907174][ T9142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  580.915854][ T9142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  581.193912][ T5321] usb 4-1: USB disconnect, device number 9
[  582.996378][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.003545][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.058940][ T9142] Bluetooth: hci1: command tx timeout
[  583.401914][ T9140] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  583.415567][ T9140] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  583.503711][ T9140] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  583.534604][ T9140] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  583.912711][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.932686][ T9409] chnl_net:caif_netlink_parms(): no params data found
[  583.970773][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.072051][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.079388][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.088683][ T9409] bridge_slave_0: entered allmulticast mode
[  584.095742][ T9409] bridge_slave_0: entered promiscuous mode
[  584.104720][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.113621][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.121326][ T9409] bridge_slave_1: entered allmulticast mode
[  584.129729][ T9409] bridge_slave_1: entered promiscuous mode
[  584.174869][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.199334][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.263560][ T9140] 8021q: adding VLAN 0 to HW filter on device team0
[  584.282650][ T9409] team0: Port device team_slave_0 added
[  584.293802][ T9409] team0: Port device team_slave_1 added
[  584.349982][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.357511][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.384689][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.409312][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.416581][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.430748][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.438814][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.471371][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.483072][ T9104] veth0_vlan: entered promiscuous mode
[  584.512007][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.519315][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.577513][ T9409] hsr_slave_0: entered promiscuous mode
[  584.584548][ T9409] hsr_slave_1: entered promiscuous mode
[  584.591267][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  584.599400][ T9409] Cannot create hsr debugfs directory
[  584.612832][ T9104] veth1_vlan: entered promiscuous mode
[  584.863951][ T9409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.893395][ T9104] veth0_macvtap: entered promiscuous mode
[  584.923251][ T9104] veth1_macvtap: entered promiscuous mode
[  584.991720][ T9409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.073225][ T9409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.094004][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.108414][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.118354][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.129274][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.139270][ T9142] Bluetooth: hci1: command tx timeout
[  585.146339][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.156978][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.169236][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  585.180930][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.200928][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.213463][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.224463][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.235456][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.254575][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.270353][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.318399][ T9409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.344984][ T9104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.355578][ T9104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.365115][ T9104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.374516][ T9104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.533589][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.594852][ T1294] bridge_slave_1: left allmulticast mode
[  585.601111][ T1294] bridge_slave_1: left promiscuous mode
[  585.607505][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.620604][ T1294] bridge_slave_0: left allmulticast mode
[  585.626280][ T1294] bridge_slave_0: left promiscuous mode
[  585.632502][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.139346][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.150621][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.164224][ T1294] bond0 (unregistering): Released all slaves
[  586.216589][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.224445][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.364868][ T9409] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  586.433087][ T9140] veth0_vlan: entered promiscuous mode
[  586.445250][ T9409] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  586.462818][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.464339][ T9409] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  586.481435][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.510134][ T9409] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  586.541526][ T9140] veth1_vlan: entered promiscuous mode
[  586.709873][ T1294] hsr_slave_0: left promiscuous mode
[  586.733929][ T1294] hsr_slave_1: left promiscuous mode
[  586.745671][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.765752][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.788045][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.795509][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.838756][ T1294] veth1_macvtap: left promiscuous mode
[  586.852584][ T1294] veth0_macvtap: left promiscuous mode
[  586.860138][ T1294] veth1_vlan: left promiscuous mode
[  586.865721][ T1294] veth0_vlan: left promiscuous mode
[  587.227275][ T9142] Bluetooth: hci1: command tx timeout
[  588.260171][ T1294] team0 (unregistering): Port device team_slave_1 removed
[  588.325812][ T1294] team0 (unregistering): Port device team_slave_0 removed
[  589.022907][ T9140] veth0_macvtap: entered promiscuous mode
[  589.066324][ T9140] veth1_macvtap: entered promiscuous mode
[  589.129878][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.144256][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.159450][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.170916][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.182586][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.193436][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.224708][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.258819][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.272759][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.283050][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.296369][ T9142] Bluetooth: hci1: command tx timeout
[  589.304414][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.314522][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.325425][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.352314][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.375447][ T9140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.384805][ T9140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.394477][ T9140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.403583][ T9140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.528689][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.597062][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.604208][ T9409] 8021q: adding VLAN 0 to HW filter on device team0
[  589.610248][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.633465][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.640697][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.664730][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.671970][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.718797][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.730742][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.171207][   T29] audit: type=1400 audit(591.134:505): avc:  denied  { connect } for  pid=9445 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  591.257308][   T29] audit: type=1400 audit(591.184:506): avc:  denied  { write } for  pid=9445 comm="syz.2.833" path="socket:[32870]" dev="sockfs" ino=32870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  592.723735][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.505780][ T9409] veth0_vlan: entered promiscuous mode
[  594.549175][ T9409] veth1_vlan: entered promiscuous mode
[  594.707395][ T9409] veth0_macvtap: entered promiscuous mode
[  594.722888][ T9409] veth1_macvtap: entered promiscuous mode
[  594.969533][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.986253][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.005948][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.164444][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.756632][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.779640][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.832692][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.865581][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.892797][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  596.366665][ T5256] Bluetooth: hci5: command 0x041b tx timeout
[  596.902891][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.942942][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.978261][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.002981][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.064231][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.080555][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.106566][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  597.125958][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  597.161652][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  597.206537][ T9142] Bluetooth: hci1: command 0x0405 tx timeout
[  598.182081][ T9409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.206316][ T9409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.236004][ T9409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.252054][ T9409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.630629][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.663098][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.628863][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.656345][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  601.303660][   T29] audit: type=1400 audit(601.254:507): avc:  denied  { map } for  pid=9532 comm="syz.2.844" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  604.506328][   T29] audit: type=1400 audit(604.424:508): avc:  denied  { unmount } for  pid=8150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  604.816583][ T9572] ptrace attach of "./syz-executor exec"[9409] was attempted by ""[9572]
[  608.051224][ T5243] Bluetooth: hci6: unexpected event for opcode 0x041b
[  608.950908][ T8293] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  609.265048][ T8293] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  609.310768][ T8293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.331904][ T8293] usb 1-1: config 0 descriptor??
[  609.681196][ T8293] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  609.691743][ T8293] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  609.700249][ T8293] [drm:udl_init] *ERROR* Selecting channel failed
[  609.731649][ T8293] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  609.739315][ T8293] [drm] Initialized udl on minor 2
[  609.749215][ T8293] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  609.761585][ T8293] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  609.771942][ T5291] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  609.792498][ T5291] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  609.801450][ T8293] usb 1-1: USB disconnect, device number 8
[  609.822233][ T5291] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  610.504860][   T29] audit: type=1400 audit(610.474:509): avc:  denied  { accept } for  pid=9619 comm="syz.3.870" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  611.437787][   T29] audit: type=1400 audit(611.414:510): avc:  denied  { ioctl } for  pid=9618 comm="syz.2.869" path="socket:[33197]" dev="sockfs" ino=33197 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  611.812534][   T29] audit: type=1400 audit(611.784:511): avc:  denied  { write } for  pid=9635 comm="syz.4.874" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  612.311731][ T5243] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  612.539596][ T5243] Bluetooth: hci6: Injecting HCI hardware error event
[  612.552005][ T9142] Bluetooth: hci6: hardware error 0x00
[  612.916362][  T943] ==================================================================
[  612.924448][  T943] BUG: KASAN: slab-use-after-free in __mutex_lock+0x8e6/0x9c0
[  612.931911][  T943] Read of size 8 at addr ffff8880313cfb20 by task kworker/0:2/943
[  612.939730][  T943] 
[  612.942072][  T943] CPU: 0 UID: 0 PID: 943 Comm: kworker/0:2 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0
[  612.952766][  T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  612.962840][  T943] Workqueue: events l2cap_chan_timeout
[  612.968335][  T943] Call Trace:
[  612.971626][  T943]  <TASK>
[  612.974566][  T943]  dump_stack_lvl+0x116/0x1f0
[  612.979273][  T943]  print_report+0xc3/0x620
[  612.983703][  T943]  ? __virt_addr_valid+0x5e/0x590
[  612.988748][  T943]  ? __phys_addr+0xc6/0x150
[  612.993270][  T943]  kasan_report+0xd9/0x110
[  612.997703][  T943]  ? __mutex_lock+0x8e6/0x9c0
[  613.002417][  T943]  ? __mutex_lock+0x8e6/0x9c0
[  613.007125][  T943]  __mutex_lock+0x8e6/0x9c0
[  613.011663][  T943]  ? l2cap_chan_timeout+0x6d/0x310
[  613.016803][  T943]  ? __pfx___mutex_lock+0x10/0x10
[  613.021846][  T943]  ? __pfx_lock_release+0x10/0x10
[  613.026880][  T943]  ? l2cap_chan_timeout+0x6d/0x310
[  613.031990][  T943]  l2cap_chan_timeout+0x6d/0x310
[  613.036930][  T943]  process_one_work+0x9c5/0x1b40
[  613.041867][  T943]  ? __pfx_delayed_vfree_work+0x10/0x10
[  613.047400][  T943]  ? __pfx_process_one_work+0x10/0x10
[  613.052766][  T943]  ? assign_work+0x1a0/0x250
[  613.057347][  T943]  worker_thread+0x6c8/0xed0
[  613.061935][  T943]  ? __kthread_parkme+0x148/0x220
[  613.066959][  T943]  ? __pfx_worker_thread+0x10/0x10
[  613.072107][  T943]  kthread+0x2c1/0x3a0
[  613.076195][  T943]  ? _raw_spin_unlock_irq+0x23/0x50
[  613.081418][  T943]  ? __pfx_kthread+0x10/0x10
[  613.086038][  T943]  ret_from_fork+0x45/0x80
[  613.090483][  T943]  ? __pfx_kthread+0x10/0x10
[  613.095096][  T943]  ret_from_fork_asm+0x1a/0x30
[  613.099895][  T943]  </TASK>
[  613.102916][  T943] 
[  613.105242][  T943] Allocated by task 9325:
[  613.109571][  T943]  kasan_save_stack+0x33/0x60
[  613.114270][  T943]  kasan_save_track+0x14/0x30
[  613.118968][  T943]  __kasan_kmalloc+0xaa/0xb0
[  613.123582][  T943]  l2cap_conn_add.part.0+0x60/0xa60
[  613.128801][  T943]  l2cap_chan_connect+0x15fa/0x2040
[  613.134047][  T943]  lowpan_control_write+0x3dc/0x730
[  613.139368][  T943]  full_proxy_write+0x127/0x1a0
[  613.144253][  T943]  vfs_write+0x29a/0x1140
[  613.148601][  T943]  ksys_write+0x12f/0x260
[  613.152945][  T943]  do_syscall_64+0xcd/0x250
[  613.157479][  T943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.163393][  T943] 
[  613.165720][  T943] Freed by task 9142:
[  613.169706][  T943]  kasan_save_stack+0x33/0x60
[  613.174405][  T943]  kasan_save_track+0x14/0x30
[  613.179104][  T943]  kasan_save_free_info+0x3b/0x60
[  613.184151][  T943]  poison_slab_object+0xf7/0x160
[  613.189113][  T943]  __kasan_slab_free+0x32/0x50
[  613.193905][  T943]  kfree+0x12a/0x3b0
[  613.197821][  T943]  l2cap_conn_del+0x59d/0x730
[  613.202516][  T943]  l2cap_disconn_cfm+0x96/0xd0
[  613.207304][  T943]  hci_conn_hash_flush+0x114/0x260
[  613.212435][  T943]  hci_dev_close_sync+0x59e/0x1110
[  613.217565][  T943]  hci_dev_do_close+0x2e/0x90
[  613.222257][  T943]  hci_error_reset+0xbf/0x320
[  613.226950][  T943]  process_one_work+0x9c5/0x1b40
[  613.231922][  T943]  worker_thread+0x6c8/0xed0
[  613.236538][  T943]  kthread+0x2c1/0x3a0
[  613.240624][  T943]  ret_from_fork+0x45/0x80
[  613.245072][  T943]  ret_from_fork_asm+0x1a/0x30
[  613.249862][  T943] 
[  613.252183][  T943] The buggy address belongs to the object at ffff8880313cf800
[  613.252183][  T943]  which belongs to the cache kmalloc-1k of size 1024
[  613.266256][  T943] The buggy address is located 800 bytes inside of
[  613.266256][  T943]  freed 1024-byte region [ffff8880313cf800, ffff8880313cfc00)
[  613.280161][  T943] 
[  613.282488][  T943] The buggy address belongs to the physical page:
[  613.288915][  T943] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x313c8
[  613.297694][  T943] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  613.306217][  T943] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  613.313786][  T943] page_type: 0xfdffffff(slab)
[  613.318486][  T943] raw: 00fff00000000040 ffff88801ac41dc0 ffffea00018e2000 dead000000000002
[  613.327075][  T943] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  613.335746][  T943] head: 00fff00000000040 ffff88801ac41dc0 ffffea00018e2000 dead000000000002
[  613.344412][  T943] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  613.353076][  T943] head: 00fff00000000003 ffffea0000c4f201 ffffffffffffffff 0000000000000000
[  613.361744][  T943] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  613.370409][  T943] page dumped because: kasan: bad access detected
[  613.376840][  T943] page_owner tracks the page as allocated
[  613.382537][  T943] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5175, tgid 5175 (dhcpcd), ts 64883669433, free_ts 64825828818
[  613.403386][  T943]  post_alloc_hook+0x2d1/0x350
[  613.408168][  T943]  get_page_from_freelist+0x1351/0x2e50
[  613.413707][  T943]  __alloc_pages_noprof+0x22b/0x2460
[  613.418995][  T943]  alloc_slab_page+0x4e/0xf0
[  613.423587][  T943]  new_slab+0x84/0x260
[  613.427752][  T943]  ___slab_alloc+0xdac/0x1870
[  613.432429][  T943]  __slab_alloc.constprop.0+0x56/0xb0
[  613.437898][  T943]  __kmalloc_noprof+0x367/0x400
[  613.442753][  T943]  load_elf_phdrs+0x103/0x210
[  613.447420][  T943]  load_elf_binary+0x14ab/0x4d90
[  613.452348][  T943]  bprm_execve+0x703/0x1960
[  613.456863][  T943]  do_execveat_common.isra.0+0x4f1/0x630
[  613.462497][  T943]  __x64_sys_execve+0x8c/0xb0
[  613.467171][  T943]  do_syscall_64+0xcd/0x250
[  613.471690][  T943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.477571][  T943] page last free pid 5172 tgid 5172 stack trace:
[  613.483890][  T943]  free_unref_page+0x64a/0xe40
[  613.488647][  T943]  __put_partials+0x14c/0x170
[  613.493322][  T943]  qlist_free_all+0x4e/0x140
[  613.497915][  T943]  kasan_quarantine_reduce+0x192/0x1e0
[  613.503370][  T943]  __kasan_slab_alloc+0x69/0x90
[  613.508221][  T943]  kmem_cache_alloc_noprof+0x121/0x2f0
[  613.513687][  T943]  vm_area_alloc+0x1f/0x230
[  613.518207][  T943]  mmap_region+0x3a5/0x2760
[  613.522707][  T943]  do_mmap+0xbfb/0xfb0
[  613.526762][  T943]  vm_mmap_pgoff+0x1ba/0x360
[  613.531337][  T943]  ksys_mmap_pgoff+0x332/0x5d0
[  613.536091][  T943]  __x64_sys_mmap+0x125/0x190
[  613.540839][  T943]  do_syscall_64+0xcd/0x250
[  613.545332][  T943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.551225][  T943] 
[  613.553529][  T943] Memory state around the buggy address:
[  613.559157][  T943]  ffff8880313cfa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.567212][  T943]  ffff8880313cfa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.575261][  T943] >ffff8880313cfb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.583300][  T943]                                ^
[  613.588404][  T943]  ffff8880313cfb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  613.596478][  T943]  ffff8880313cfc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  613.604543][  T943] ==================================================================
[  613.612682][    C0] vkms_vblank_simulate: vblank timer overrun
[  613.627841][  T943] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  613.635055][  T943] CPU: 0 UID: 0 PID: 943 Comm: kworker/0:2 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0
[  613.645713][  T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  613.655778][  T943] Workqueue: events l2cap_chan_timeout
[  613.661233][  T943] Call Trace:
[  613.664495][  T943]  <TASK>
[  613.667410][  T943]  dump_stack_lvl+0x3d/0x1f0
[  613.671993][  T943]  panic+0x6dc/0x7c0
[  613.675873][  T943]  ? mark_held_locks+0x9f/0xe0
[  613.680621][  T943]  ? __pfx_panic+0x10/0x10
[  613.685023][  T943]  ? irqentry_exit+0x3b/0x90
[  613.689602][  T943]  ? lockdep_hardirqs_on+0x7c/0x110
[  613.694798][  T943]  ? check_panic_on_warn+0x1f/0xb0
[  613.699910][  T943]  check_panic_on_warn+0xab/0xb0
[  613.704858][  T943]  end_report+0x117/0x180
[  613.709173][  T943]  kasan_report+0xe9/0x110
[  613.713572][  T943]  ? __mutex_lock+0x8e6/0x9c0
[  613.718240][  T943]  ? __mutex_lock+0x8e6/0x9c0
[  613.722906][  T943]  __mutex_lock+0x8e6/0x9c0
[  613.727398][  T943]  ? l2cap_chan_timeout+0x6d/0x310
[  613.732499][  T943]  ? __pfx___mutex_lock+0x10/0x10
[  613.737525][  T943]  ? __pfx_lock_release+0x10/0x10
[  613.742584][  T943]  ? l2cap_chan_timeout+0x6d/0x310
[  613.747684][  T943]  l2cap_chan_timeout+0x6d/0x310
[  613.752610][  T943]  process_one_work+0x9c5/0x1b40
[  613.757541][  T943]  ? __pfx_delayed_vfree_work+0x10/0x10
[  613.763086][  T943]  ? __pfx_process_one_work+0x10/0x10
[  613.768449][  T943]  ? assign_work+0x1a0/0x250
[  613.773049][  T943]  worker_thread+0x6c8/0xed0
[  613.777632][  T943]  ? __kthread_parkme+0x148/0x220
[  613.782640][  T943]  ? __pfx_worker_thread+0x10/0x10
[  613.787748][  T943]  kthread+0x2c1/0x3a0
[  613.791815][  T943]  ? _raw_spin_unlock_irq+0x23/0x50
[  613.797011][  T943]  ? __pfx_kthread+0x10/0x10
[  613.801593][  T943]  ret_from_fork+0x45/0x80
[  613.806010][  T943]  ? __pfx_kthread+0x10/0x10
[  613.810599][  T943]  ret_from_fork_asm+0x1a/0x30
[  613.815369][  T943]  </TASK>
[  613.818585][  T943] Kernel Offset: disabled
[  613.822892][  T943] Rebooting in 86400 seconds..