last executing test programs:

6m36.800945426s ago: executing program 32 (id=74):
socket$nl_route(0x10, 0x3, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaa01f8ff1600ffffff00000000ac1414"], 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[], 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0)
close(r2)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x5, 0x7b, 0x8, 0x82d, 0x300, 0xc34b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0x8, 0x1, 0xb8, 0x8}}]}}]}}, 0x0)

5m51.586622934s ago: executing program 2 (id=166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup(r3)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x1d, 0x0, &(0x7f00000000c0)="61df712bc89459bf3a86372e93ec88be1546fde684fed5722780b6c2a7", 0x0, 0x106, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x7}, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0xfd32)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000280)=0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hci(r5, 0x400448cb, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
preadv(r6, &(0x7f0000002740)=[{&(0x7f0000002580)=""/79, 0x4f}], 0x1, 0x3, 0x0)

5m49.58215291s ago: executing program 2 (id=169):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0xa, 0x0, &(0x7f0000000380))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f00000000c0)={0xfe, 0x1, 0xff00})
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)

5m47.674305708s ago: executing program 2 (id=170):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
wait4(r2, &(0x7f0000001340), 0x8, &(0x7f0000001440))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$media(&(0x7f0000000200), 0x20000080000005, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, &(0x7f0000001900))
getpid()
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28)
ioctl$FS_IOC_SETFLAGS(r6, 0xc0606610, &(0x7f0000000040)=0x60)

5m46.354169085s ago: executing program 2 (id=173):
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
r4 = memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2)
pwrite64(r4, &(0x7f00000000c0)="a0", 0x1, 0x5b63)
fcntl$addseals(r4, 0x409, 0x7)
r5 = dup(r3)
r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000})
r7 = syz_io_uring_setup(0x6908, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_setup(0x1e45, &(0x7f00000003c0), &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r9, r8, &(0x7f00000005c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0})
io_uring_enter(r7, 0x184c, 0x20000000, 0x0, 0x0, 0x0)

5m45.567186503s ago: executing program 33 (id=151):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0x40008, 0x9, 0x89, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, 0x0}, 0x20)
bind$bt_hci(r0, &(0x7f0000001ac0)={0x1f, 0x4, 0x1}, 0xfffffffffffffdc9)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r2, 0x8b2a, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001d00)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x5f, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xe1, &(0x7f00000001c0)={@local, @random="1a0e2c5ffd4d", @void, {@mpls_uc={0x8847, {[{0x4f, 0x0, 0x1}], @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0xcf, 0x68, 0x0, 0x7, 0x2f, 0x0, @loopback, @remote}, "de356b8e4e0b6174023a671bdeb20169805729ea23cddca77668d3d38a1e6ae52ea0a5f22742401367f60f97b444ede76c9fe2d0f1e5d53649f39ce9d45be1305777008b2c3dab3c67e6528d55a208d851357e39a831a0065e86099c11931031c5c526cf7a9676aae2d45c116e0d436d56ebe6e154e808435fbff37603c11a68d55c43321ce08970e57822ba8c9b5b7ff52c181845aa0a557ebe09fd141d776c39284874b41d960eb87a425f5f1975f51bca7690d4a32c1d278f25"}}}}}, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000))
bind$bt_hci(r0, 0x0, 0x0)
syz_clone(0x80000000, &(0x7f00000002c0)="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", 0x1000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000012c0)="003f86b5f710e7fe5d1b8fc1ff17c6072c7c315e7b8c712f883cedd0caef35ac54632c8d2a0941edc2acbe0b3aef819ba94ca9d9d683e235a053d10016351cacfd00699cdb4201f9738830015c63fa6c16fca000faf32a2be63dbd59816be6530b5787f14fbff1f1f428fc4208d322bbcb8a7f6f8e42aa4afdb94bee156cfa7b786af100368f3b92db503724")

5m44.585423736s ago: executing program 2 (id=177):
r0 = socket(0x200000000000011, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffff6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
clock_gettime(0x9, 0x0)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0xe5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r1, &(0x7f00000004c0)=""/251, 0xfb, 0x2)

5m29.450413782s ago: executing program 34 (id=177):
r0 = socket(0x200000000000011, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffff6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
clock_gettime(0x9, 0x0)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0xe5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
pread64(r1, &(0x7f00000004c0)=""/251, 0xfb, 0x2)

4m20.5434057s ago: executing program 1 (id=294):
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
personality(0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x44}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0a00, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10d942, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
io_setup(0xff, &(0x7f00000000c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000080)='\x00\x00', 0x2}])
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000680)={r7, 0x4559, {0x0, 0x0, 0x0, 0x2, 0xfffffffeffffffff, 0x0, 0x6, 0x0, 0x4, "bdaab75a7b9113327c1409d6577330aac2e5dad4d29e23f806105874953aab4fe3c7d54171cf8555ae62efd2318b1ce045f19bc72fdce12b82203d571eb693df", "0ab9b9942f3bb8e258357ae26dd7fd6f3b7d1f7b52be9c16c1825a98aa76fc031b6c4683dd704656a5fffff8da312c9712ce2bc9fe14886c7940decee3fed1ee", "19da0d472cf9b5da868b15f4c761b816b00bfb90b27bfb9720509a0488a558bc", [0x8, 0x81]}})
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022240000009b36afad5391"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0xb71}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)={0x20, 0x8, 0x2, "aa8e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x1, 0xe5, "0579294a742c877f4373cf579c9289c86379c66d4a7f054208c51b45516c0b03d40a3a1d79f9c0b7e5a2236f9c19a1972283e3f3acd6fd423cf691ca9ba1af56bcbc37fc1d1265c46ee01e2536c00033bf3220f7feb0c42bac69a858f12bda544af4ad3f0f23ef7bab797719d6b334e4c663efe9b806aecd52d737741e4ac1a9b96a97280a2e81580bed57d2cd553dc4e802802ebea7a488cb7fa241acfaea6566b85b9570890cfe9231727b16da1ae67ad9be269c177c5d2fbc32ad8026d63f7477c62237b21ae4b2feb452aa108541b23ea74337610c6437407e080ec743a074dd6b3b2b"}, &(0x7f0000000600)={0x20, 0x3, 0x1}})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

4m8.822637601s ago: executing program 1 (id=311):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000540)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fstat(0xffffffffffffffff, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x0, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000180)=0x1bff)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380))
socket$inet6(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4m7.508833331s ago: executing program 1 (id=313):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc0445624, &(0x7f0000000040)={0xf0f000, 0x0, @name="6e250a95061d0ee1eabc85356c1279e6c0126424ce306c8c5366619601c70bba"})
r2 = userfaultfd(0x801)
syz_io_uring_submit(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xd, 0xbca4, 0xe, 0x2800, 0x1, 0xa0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x9, @void, @value, @void, @value}, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0xfffffffffffffd9f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f00000004c0)="afeb75bd172e85524f46516230967080c0cd95e9dc4cf8cdb9bdbcef0447bd6198a54b398ac2657c1100000000000000000000000000f5174aca768244b3e3ebe05a3f844aefd93c0fd11de56ae0662535124a65672475d539d1ee3eef9582abb1512f744440de79d222", 0xa7c, r3}, 0x38)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01011801000000000000100000001000000e00"/38], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000018", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
syz_open_dev$char_usb(0xc, 0xb4, 0x8)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

4m7.060902575s ago: executing program 1 (id=316):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000e6", @ANYRES32=0x0, @ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10042})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r5, 0x0, 0x2, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r5}]}, 0x24}}, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[<r8=>0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r8, 0x0, '\x00', 0x56, 0x3})
socket$inet(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

4m4.648939359s ago: executing program 1 (id=320):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc)
r1 = mq_open(&(0x7f0000000a40)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\xe2\xbd\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xaa\xe2\xb0\xe7\xe6\xabh(\xf6\x1c\x83\xb1\xa0B\xae|\x00\x86q\xf3\"Ig\x8c\xaeY\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
mq_timedreceive(r1, 0x0, 0x0, 0xf0ffffffffffff, 0x0)
ioctl$SIOCAX25GETUID(r0, 0x89ed, 0xfffffffffffffffe)

3m57.61346876s ago: executing program 1 (id=331):
prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0xffffff7f})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
r4 = gettid()
mq_notify(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x14, 0x0, @tid=r4})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

3m49.46488873s ago: executing program 6 (id=349):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x8683)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xfffe, 0x0, 0x0, 0x0, 0x0, "018000"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}})
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10)
ioctl$TCFLSH(r5, 0x404c4701, 0x20000000)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xe)

3m47.720093178s ago: executing program 6 (id=352):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000003500)={0x0, 0xfe, '\x00', [@generic={0x0, 0x7ef, "48542c448318ae1d2b7f30500822377d2a65da79553f4a331a8f3a793c893e26feccd585b114ea8687bffebd09b096630f811173054e6406933579ff2f32399ec27a17e1a9acee98571aed2c4da0fcd7b65316a6fa3277bd2e5e4eb6325bf38357df4eea88e8868238d7f5a4389681ce3b5e2470125e1aba4d6a1fb6c4c5b041b0c2295f1b4538a6cca290b87561e25ec46bd9335260e132a6943edf377905302a37cec0538e300b339741ec102f172dccf1e41b26f64b5ef876be14d1c21caaf78558ac531e9d291875b1fa4b87f75ec0ab2b215d6e52076ee04e97764e523bbc3bfdb98975319d72945bc81ad76af03baa2bb34d44a4dd59a10a7652d33722b6d7f8b56b59ba3231996fab771aefd8d63419e65d8653d9c20671191e9bb9ebcca53cf9cd013ad90b23fe4de474b983475aa8ea8edad81458f1bf78e06fd97ed0d94a744dfd4443f1264e148148336b0db59baa84fbee9bacc045f9de892e656d13b9c4f7089d428fa6011d682af8754d3a995b66a710fad83720066813b25fbafdcb46295b95dc93b6c2420cb6b3d609f03766ace826f832418a02303318a4b68547770ba648a6d3a5e448c8dfbb8cf21c3925a473a9376e5b8bad553360b4b60580fd02d2e78512f1e50409baff52f62dc2630c7c43ecbbdf853ed89a5e627bd7a557e52990b2f28217b5498b94f126f71361f07342ccbd54de66fcb689d92a1d5f55841bf1f6d166420401bd1be1fc93ae72cdd77fbceb4b7468da1bae5f5a8a91cc328e5093279ab8bed8c314416a6c60653326253ebb69a79a51454c5e74949b48c34e7f3aaf3f653aab2dc49320f43f5e531d658f042c9a148c85537cbf3af91ec23219191bdc114d1b160759cb488d0f03413bb7d1c9203ea6a750f74223c04b6f502e97bad6f529b7fe77c1e0cb71d0948e6229110cb6f2754654755021d2e0139b807d121f6ed7a32c0bcff7cc2c42a982647704225c16a4bc62136b4006c10d2bf6e10f63ffc343d6029c12da76925b1d8d34f031a7aac9b9fbaf151f8ddea844230f8e4c98faa0baf823cd550bf7b8c75b374731614f2e4fbbbf29f4b767f0207e7563ff41ee9614e356ca0f38864cd079ea6d907b14c71e681266553f01916b0198319d45bff0d17a6f0a86acee3a8495be7375322e0d2affd17d6825eada65c397d21731c171bb368809a048e88d682bd9dcb9b5b80ee3507a6a18aaabb70d50972973d8112e7c5e29b0d82057a4160bdc1f8df630e8d502d3ff07415a103d1b46dad01705b2602b9852ea0d4e2548648689794fd599907d489b2b40becdd9d1544f6021383aa9b1622aebcb56dc02362c3e58194d61d29179e2b090234a47c5f31e0540c5419d31b04e059c6c691d26ce192f6a68d7f536bd99dd209feef1f920eab373b4607d90059f4c863ac6ce3c5551184fc82eb85faea815cc169e016d2fdd2c7a292eeadcaedb62195bda9957edd1eeac9621f7c8995b4a0d3b5833568bdb539484cec6715e4029b84c7ed457bd77b6db1e5a4e34f647afdd9118cb3788418b2b7cb9a11b26c891c9165d1d3181ecb07d2e77fb9560a568f6cc047e5ffd3f1ebeb7752ac44c0d198a788336ca3be29ddbb32ddddbb9b442a553e5f4a93377d74ccef4fd166c40606c7580367cd7b0826a694affbe9f2ced33d19da58314c6eeb4fa035d239d3cda8993db3369d580e974adbd8e25719c240a8e89f51c52094fa53463682b5cc170c0936586fe97bd3e44e66c929473d30e500cbd97b5e0a40f5921674eb716890aadb52e511a0b2ca1a5e8fab5f2e126722d9ad6464b4f75bff0f2f43a88567bd55776990278725139431fe691fe47eee2232687d07b6751d0b2ef6c2493da74d2dd6858e56746bd83fd5e3eca75867dce076190a1e4e60910b17bd85372024b52a7965873027ebaa2db59cc7561451a7ff8ba36db9395802d9f14425b526070ddee429c7e68cc8dbb3286d6de3d2ba14d1b1ce484cefbd8285dcb84a74ce63f6031dfd87bb31da8a90659f8f3cf94d4664a47da44ce4feee244dc258087c84074d6c139c97e5fce7ba6c2de53d88eb5e78540a12ccb924959fba3291cb8d64abd7baea595d23bdfff7f8e09653c2b6403cbd1d180cdd967d443f646982ae75ee15c7654211e3e5af3e5f2b2e4965241c9c97b8fffa5696c4ed9e091ac181dcdf2c9099c0c7389a78e0c51c486b36b070cf9a2bd5ef6967892ff84bc17414c4c8b4e8d44ad9f9597bb3889e5a3e12db79571cc59520652f930385edbcfcf15d30409cd2fcdf735ff58d8df3438021b1817684698c6a2e0aa34cc0944a8233da734dbd2538ec964842cc3c10b0af5aeaa7d184775f20a44202240014d473c7e545a9999f03c4146b2b346b71ab99d93951df249ab0f04f4a8d426c0fa141997259e7ca7650cc5bbff6c10bcd8bae12c303641db3f98c6be7e8c331ceca2a0e6a8405f09776b67ae30250c288004d56c19ef1061a34ec849132bcd738c20d27c8bd0784c074d577d5bd23d8ef5053756d492b3fa1bd736e42c0eeee950d582d32dcb5da5aef9d52553e0fb976eb71db442d78152ffb85f7cd94dc370b9f0e375dbc79f5e28bcf6b3d5bc786c16518b155a9d970b25f98e43a4f1dca0d89cb96a37654ba01d745e33f49e193314cdb0f688009edf147b1c6df5ef4acd1abc8e7df0708e02491038f419ed53b29b42f0121fcb5b62a3cff51a35361c30e59fe5698088e6712ddd38c7c81d807ecbc3cdba4c5bbb2a3bd5224a57632f1f0b8cbce8e63db44bbdae8dbe97832df3355c5934171d58b383f8a146e99f8053172a1a520a1f78dd59a8655479b01309fa29cd4234c35c448d46673fd68ef091d0cdea"}]}, 0x800)
r1 = getpid()
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
lseek(r2, 0x40, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)

3m43.308993349s ago: executing program 6 (id=357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x5)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000300060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x0)

3m42.598714095s ago: executing program 35 (id=331):
prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'})
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0xffffff7f})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
r4 = gettid()
mq_notify(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x14, 0x0, @tid=r4})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

3m40.986467s ago: executing program 6 (id=361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
getpid()
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000005580)={0x2020}, 0x2020)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000380)={0x2})
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex')
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x49, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8)
sendto$inet(r7, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x0, @empty}, 0x10)
keyctl$describe(0x6, r4, &(0x7f0000000080)=""/72, 0x48)

3m38.655191149s ago: executing program 6 (id=362):
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10}}, './file0\x00'})
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x1, "2a3786775faa18825d2ea526db4c92f6d19a868ccc4ab50c259821ce69d9155c", 0x4, 0x200, 0x90, 0x10000}, 0x3c)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x0, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}})
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x22cf443812a6ab15, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x5, 0x0, 0x2, 0x7d788778, 0x100000000}, {0x8000000000000, 0x8, 0xfffffffffffffffd, 0x10000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x4, 0x1, 0x1, 0x0, 0x10000, 0x4000}}, 0xe8)

3m34.60461825s ago: executing program 6 (id=370):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
rmdir(&(0x7f0000000700)='./cgroup/../file0\x00')
syz_open_procfs(0x0, &(0x7f00000002c0)='fd/4\x00')
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000b66899685d0340"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
r5 = semget(0x1, 0x2, 0x10)
semctl$IPC_RMID(r5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0))

3m18.686322248s ago: executing program 36 (id=370):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
rmdir(&(0x7f0000000700)='./cgroup/../file0\x00')
syz_open_procfs(0x0, &(0x7f00000002c0)='fd/4\x00')
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000b66899685d0340"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
r5 = semget(0x1, 0x2, 0x10)
semctl$IPC_RMID(r5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0))

2m43.460451004s ago: executing program 7 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x21, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000380), &(0x7f0000000040)=@udp=r5}, 0x20)
recvmmsg(r5, 0x0, 0x0, 0x40, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
io_setup(0x2007, &(0x7f0000000200)=<r8=>0x0)
r9 = eventfd2(0x0, 0x0)
io_submit(r8, 0x2, &(0x7f0000000480)=[0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f00000001c0)="5f18ab32505b", 0x6}])
shutdown(r7, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000200)={0x200000000000001}, 0x8)
sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

2m42.483905377s ago: executing program 7 (id=432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
r4 = request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x0)
syz_open_dev$sndpcmp(0x0, 0xc, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$update(0x2, r4, 0x0, 0x0)

2m41.302953424s ago: executing program 7 (id=433):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
listen(0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = io_uring_setup(0x497c, &(0x7f0000000400)={0x0, 0x0, 0x20})
syz_open_dev$sg(0x0, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

2m40.315711738s ago: executing program 7 (id=434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020400)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2m39.22583656s ago: executing program 7 (id=435):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket(0x1, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, 0x0)
sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xb0d}, {0x6}]}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

2m38.65264969s ago: executing program 7 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0x801c581f, &(0x7f0000001100))
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x80000)

2m38.437986687s ago: executing program 37 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff2d440100000000009500000000000000050000000000000095000700000000000172dbabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6355cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe6fd599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f712e522aad0f13b0e5b43d837d040f813d011538"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0x801c581f, &(0x7f0000001100))
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x80000)

1m37.745094126s ago: executing program 3 (id=517):
msgsnd(0x0, 0x0, 0x8, 0x800)
read(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), 0x0, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)

1m33.062353307s ago: executing program 3 (id=526):
fstat(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000300)={[], [{@appraise_type}]})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fanotify_init(0x200, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0])

1m31.06344802s ago: executing program 9 (id=530):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00')
chdir(&(0x7f0000000140)='./bus\x00')
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setrlimit(0x1, &(0x7f0000000080)={0x3, 0x80000001})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002a00090000000000000014000400002c45"], 0x5c}, 0x1, 0x3000000}, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)

1m28.154271802s ago: executing program 3 (id=537):
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x800)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$inet(0x2, 0x0, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000280), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x3})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000b40)="f30f09ba6100b8c400ef66b9eb0a00000f3266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f0066b98004000066b8532ebe1866ba0bffd3710f3066b9830500000f32", 0x53}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
readahead(0xffffffffffffffff, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)

1m27.48941676s ago: executing program 9 (id=538):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xa4, 0x8}, {0x7, 0x8b, 0x1f, 0x5e02}}}}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x3, 0xf1a1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
r4 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x3f}})

1m19.60025886s ago: executing program 9 (id=541):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r8 = dup3(r7, r6, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0984124, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000004000000000000040000000000950000001b6da2a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1m17.533140225s ago: executing program 9 (id=552):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x0, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0)
unshare(0x62040200)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', <r5=>0x0, 0x29, 0x9, 0x0, 0x800, 0x12, @private2, @local, 0x40, 0x7800, 0x1000, 0x7}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r5, 0xe, 0x0, 0x1, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)

1m15.441066085s ago: executing program 9 (id=545):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x0)
r4 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x40000020, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r5, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0)
socket$packet(0x11, 0x3, 0x300)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r6, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0)

1m15.248080924s ago: executing program 3 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020400)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m13.595965444s ago: executing program 3 (id=550):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)

1m13.564252328s ago: executing program 9 (id=551):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000e6", @ANYRES32=0x0, @ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000440)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10042})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r6, 0x0, 0x2, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r6}]}, 0x24}}, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[<r9=>0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r9, 0x0, '\x00', 0x56, 0x3})
socket$inet(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1m11.800645326s ago: executing program 3 (id=554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdc01, 0x10000900}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x3, 0x10000}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

1m10.389307579s ago: executing program 38 (id=554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdc01, 0x10000900}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x3, 0x10000}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

57.72354797s ago: executing program 39 (id=551):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000e6", @ANYRES32=0x0, @ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000440)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10042})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r6, 0x0, 0x2, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r6}]}, 0x24}}, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[<r9=>0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000600)=[{}, {}, {}], r9, 0x0, '\x00', 0x56, 0x3})
socket$inet(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

25.803272053s ago: executing program 4 (id=608):
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
setreuid(0xee01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300))
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000003d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), 0x0}, 0x20)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

25.000576341s ago: executing program 4 (id=610):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = getpid()
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000480)={'mangle\x00', 0xa2, "af45b0fe119c2f959260cf438cb8e1e4a697cd20cf94857089ee0b4b0ca8c6b56f8e77b7e0bf644d75a6fcae36ea0171f1887811825e8975db61f599784522e1801d3c4b1e65134c7952a97c93a4829ae63737baaed4cd87f4587bd43fb1feccb20a1994e1649dbaa48f72a6659ce44d4f3822c0637aa55f4377b7aa89b3a6695a2a6061b911f9cd43484973c8a2c225084be3da8f342ac41128f3276eaf97f26923"}, &(0x7f0000000580)=0xc6)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000000)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}}}, 0x7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000", 0xcb}], 0x1}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400"], 0x7)

19.142824471s ago: executing program 4 (id=614):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x44)
memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r2, 0x0, 0x0)
rt_sigpending(0x0, 0x1000000)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

14.335424061s ago: executing program 0 (id=615):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x3}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0)
renameat2(r6, &(0x7f0000000000)='./bus\x00', r7, 0x0, 0x2)
ioperm(0xf636, 0xff, 0x5)
setrlimit(0xc, 0x0)
connect$ax25(r6, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

14.329672302s ago: executing program 8 (id=625):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0185502, &(0x7f0000000340)={0x1, 0x1})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
lseek(r5, 0x7fffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xa)

13.153652851s ago: executing program 0 (id=616):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_open_procfs(r1, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

12.981981585s ago: executing program 8 (id=617):
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)
ioctl$RTC_AIE_ON(r3, 0x7001)
ioctl$RTC_SET_TIME(r3, 0x40247007, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfffffffe, 0x4, 0x1, 0x20, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xd, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
listxattr(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@remote}, {@in=@multicast2, 0x0, 0x32}, @in=@multicast2, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x20}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x1000c080)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f00000001c0))

11.094841425s ago: executing program 8 (id=618):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)

11.063354765s ago: executing program 0 (id=619):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x26})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "3789ba6e77f78b9177d49d759eaef85888b8e983f37ec515878e504afe0750d8f9796267af6d9403ad4b51cfbdfa82e8c27475b7de05edd43d006dc3d6675958", 0x2c}, 0x48, 0x0)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$unlink(0xb, r4, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r4}, &(0x7f0000000240)=""/74, 0x4a, &(0x7f0000000400)={&(0x7f0000000300)={'sha384-arm64\x00'}})
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000001280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000012c0)=0x1c, 0x80800)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',r', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0])
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905df030002"], 0x0)
lsetxattr$security_capability(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x9c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
socket$packet(0x11, 0x2, 0x300)

10.945556524s ago: executing program 5 (id=567):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000005c0))
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r5 = dup(r4)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0x5})
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f00000000c0)={0x8})
r7 = dup(r6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9beb010018000000000000001c0000001c00000004000000000000000000009302000000b36e000000000000000f02000000ddc600000000"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendfile(r7, r5, 0x0, 0x89ffc)
socket$inet_sctp(0x2, 0x0, 0x84)
r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="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", 0x189, 0xfffffffffffffffe)
r9 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff)
r10 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="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", 0x101, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r9, r8, r10}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}})

10.831333066s ago: executing program 8 (id=620):
syz_emit_ethernet(0x5e, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0)
r6 = gettid()
r7 = getpid()
rt_tgsigqueueinfo(r7, r6, 0x1f, &(0x7f0000000140)={0x0, 0x0, 0x1})
read$FUSE(r5, &(0x7f0000001a00)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000096ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb746000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
rt_sigpending(0x0, 0x0)

9.626897573s ago: executing program 5 (id=622):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=ANY=[@ANYBLOB="54010000100001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000025a9e6490000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000001c0017000000000000000000000000000000000000000000000000004800010073"], 0x154}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x20000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
getdents(r6, &(0x7f00000001c0)=""/29, 0xd6a3f5562bf1b036)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)

8.3832909s ago: executing program 5 (id=624):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
rename(0x0, &(0x7f0000001080)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {<r0=>0x0}, {}, 0x4, 0xfffffffffffffffd})
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x1405, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x80000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x48}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x1})
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x400000001ffffffd)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r5, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0)

7.459453813s ago: executing program 5 (id=626):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
flock(0xffffffffffffffff, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0)

7.459168654s ago: executing program 4 (id=627):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r5, 0x0, 0x20003)
keyctl$set_timeout(0xf, 0x0, 0xe000)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15)
read$FUSE(r0, 0x0, 0x0)

5.889629007s ago: executing program 0 (id=628):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0xb)
close_range(r5, 0xffffffffffffffff, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r6, 0x0, r6, &(0x7f0000000100)='./file1\x00', 0x0)

4.848402238s ago: executing program 8 (id=629):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
mount(0x0, 0x0, &(0x7f0000000100)='mqueue\x00', 0x42000, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b6a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1d, 0x100, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x26e1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

4.791865163s ago: executing program 5 (id=638):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[], &(0x7f0000000440)=""/84, 0x83, 0x54, 0x1, 0xffffffff, 0x10000, @value}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000bd00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r7, 0x851, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x11, 0x6}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839}, 0x24}}, 0x0)

4.47405957s ago: executing program 0 (id=630):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
add_key(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020400)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

4.444871376s ago: executing program 4 (id=631):
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000000010006fba126840ecda761d63100009cf57d4b8d404cb6cbded09309a732137719a3c5bc27f077ab9fc0000000000000000000000000000000000000000000000000000000000f21013d3cb84ccb9d4848a780e497b7c184b01db4474edb3c10b2ec7b51d7ebf151b48689e4c29bbd95826bb5cb39055eeb7d2c1c4be8888ca1410ac4312f101f878acc54c8d50c3ce67af1e792086978ea5db49b2f672649ad4d89e56d6eb9d210e3ea4de43236ca8e7184bedf5c6deee064cf0e837c257f0dccb589bc938c4e9e315a8ca306db0bae22a402c0f59f819d34d3acb63917eadbd73977928e65df71699238282f517b6bf4c83fef60dfb33cc246b969b0768805f69353c4525e703f60b88776d5dbcd99e373d6c7609e7cf9f200056cda80b", @ANYRESHEX, @ANYRESDEC], 0x98}}, 0x40008)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$getregset(0x4207, r8, 0x0, 0x0)
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="100000000b1405022bbd5d00fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4)

921.553357ms ago: executing program 8 (id=632):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
capset(0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x3, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/21, 0x15}, {0x0}]}, &(0x7f0000000240)="0d01ffffa0b6", 0x0, 0x0, 0x0, 0x0, 0x0})

403.157518ms ago: executing program 5 (id=633):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x1, 0x2, 0x1}, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$unix(0x1, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448ca, 0x0)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "97dded"})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x10)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}})
unshare(0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

199.901774ms ago: executing program 0 (id=634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
add_key(0x0, 0x0, &(0x7f0000000300)='0>0', 0x3, 0xfffffffffffffffc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

196.886657ms ago: executing program 4 (id=635):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x44)
memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r2, 0x0, 0x0)
rt_sigpending(0x0, 0x1000000)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

0s ago: executing program 2 (id=572):
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r5, 0xb05}, 0x14}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}}, 0x0)
listen(0xffffffffffffffff, 0x20000005)

kernel console output (not intermixed with test programs):

:  denied  { create } for  pid=7790 comm="syz.7.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  296.680520][   T29] audit: type=1400 audit(1729794453.921:687): avc:  denied  { name_bind } for  pid=7798 comm="syz.7.350" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  297.114731][   T29] audit: type=1400 audit(1729794453.921:688): avc:  denied  { node_bind } for  pid=7798 comm="syz.7.350" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  297.273341][   T29] audit: type=1400 audit(1729794453.971:689): avc:  denied  { setopt } for  pid=7798 comm="syz.7.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  298.284121][   T29] audit: type=1400 audit(1729794453.971:690): avc:  denied  { bind } for  pid=7798 comm="syz.7.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  298.315269][   T29] audit: type=1400 audit(1729794453.971:691): avc:  denied  { node_bind } for  pid=7798 comm="syz.7.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  298.335722][   T29] audit: type=1400 audit(1729794453.981:692): avc:  denied  { read } for  pid=7798 comm="syz.7.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  298.356401][   T29] audit: type=1400 audit(1729794454.181:693): avc:  denied  { read write } for  pid=7793 comm="syz.6.349" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  298.789425][ T7828] tmpfs: Bad value for 'mpol'
[  299.621356][ T7838] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.352'.
[  299.630941][ T7837] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.352'.
[  301.484180][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  301.484199][   T29] audit: type=1400 audit(1729794456.991:716): avc:  denied  { name_bind } for  pid=7805 comm="syz.6.352" src=3617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  301.699551][   T29] audit: type=1400 audit(1729794458.471:717): avc:  denied  { name_bind } for  pid=7825 comm="syz.4.355" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  301.721005][   T29] audit: type=1400 audit(1729794459.021:718): avc:  denied  { getopt } for  pid=7832 comm="syz.7.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  301.744441][   T29] audit: type=1400 audit(1729794459.031:719): avc:  denied  { connect } for  pid=7832 comm="syz.7.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  301.764164][   T29] audit: type=1400 audit(1729794459.031:720): avc:  denied  { name_connect } for  pid=7832 comm="syz.7.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  301.895759][   T29] audit: type=1400 audit(1729794459.071:721): avc:  denied  { setopt } for  pid=7832 comm="syz.7.356" laddr=::ffff:172.20.20.170 lport=35278 faddr=::ffff:172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  303.094793][ T7857] netlink: 'syz.6.357': attribute type 29 has an invalid length.
[  303.102663][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.357'.
[  303.244283][   T29] audit: type=1400 audit(1729794459.791:722): avc:  denied  { ioctl } for  pid=7841 comm="syz.4.358" path="socket:[16270]" dev="sockfs" ino=16270 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  303.860886][   T29] audit: type=1400 audit(1729794461.111:723): avc:  denied  { read write } for  pid=7858 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  304.862980][   T29] audit: type=1400 audit(1729794461.131:724): avc:  denied  { open } for  pid=7858 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  304.874834][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  304.900426][   T29] audit: type=1400 audit(1729794461.151:725): avc:  denied  { sys_chroot } for  pid=7848 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  304.946425][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  304.954556][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  304.962532][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  304.970473][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  304.978846][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.434109][ T7881] ax25_connect(): syz.4.364 uses autobind, please contact jreuter@yaina.de
[  307.084724][   T54] Bluetooth: hci2: command tx timeout
[  307.095492][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  307.095512][   T29] audit: type=1400 audit(1729794463.841:731): avc:  denied  { create } for  pid=7875 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  307.224184][   T29] audit: type=1400 audit(1729794463.861:732): avc:  denied  { connect } for  pid=7875 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  308.722035][ T7899] misc userio: Invalid payload size
[  309.174545][   T54] Bluetooth: hci2: command tx timeout
[  310.121921][ T7858] chnl_net:caif_netlink_parms(): no params data found
[  310.935839][   T29] audit: type=1400 audit(1729794468.291:733): avc:  denied  { bind } for  pid=7909 comm="syz.7.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  311.244376][ T5837] Bluetooth: hci2: command tx timeout
[  311.362235][   T29] audit: type=1400 audit(1729794468.301:734): avc:  denied  { setopt } for  pid=7909 comm="syz.7.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  311.510190][   T29] audit: type=1400 audit(1729794468.311:735): avc:  denied  { connect } for  pid=7909 comm="syz.7.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  311.651893][   T29] audit: type=1400 audit(1729794468.891:736): avc:  denied  { setopt } for  pid=7918 comm="syz.6.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  311.698987][   T29] audit: type=1400 audit(1729794468.981:737): avc:  denied  { create } for  pid=7917 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  311.743329][   T29] audit: type=1400 audit(1729794469.001:738): avc:  denied  { write } for  pid=7917 comm="syz.4.371" path="socket:[17427]" dev="sockfs" ino=17427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  311.840192][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.847636][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.856125][ T7858] bridge_slave_0: entered allmulticast mode
[  311.912823][ T7858] bridge_slave_0: entered promiscuous mode
[  313.354251][   T29] audit: type=1400 audit(1729794469.571:739): avc:  denied  { mount } for  pid=7935 comm="syz.5.372" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  313.541989][ T5837] Bluetooth: hci2: command 0x0419 tx timeout
[  313.659404][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.666983][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.712663][ T7858] bridge_slave_1: entered allmulticast mode
[  313.716733][   T29] audit: type=1400 audit(1729794471.111:740): avc:  denied  { unmount } for  pid=6356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  313.719795][ T7858] bridge_slave_1: entered promiscuous mode
[  314.304967][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.7.374'.
[  316.018716][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  317.981824][   T29] audit: type=1400 audit(1729794472.531:741): avc:  denied  { read } for  pid=7946 comm="syz.7.374" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  318.004506][    C0] vkms_vblank_simulate: vblank timer overrun
[  318.024125][   T29] audit: type=1400 audit(1729794472.531:742): avc:  denied  { open } for  pid=7946 comm="syz.7.374" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  318.985904][   T29] audit: type=1400 audit(1729794472.721:743): avc:  denied  { ioctl } for  pid=7946 comm="syz.7.374" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  319.011707][   T29] audit: type=1400 audit(1729794473.821:744): avc:  denied  { connect } for  pid=7950 comm="syz.4.376" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  319.032707][   T29] audit: type=1400 audit(1729794474.021:745): avc:  denied  { write } for  pid=7950 comm="syz.4.376" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  319.054469][    C0] vkms_vblank_simulate: vblank timer overrun
[  319.111936][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  320.353903][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.383211][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.538003][ T3006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.670187][ T7858] team0: Port device team_slave_0 added
[  320.728325][ T7858] team0: Port device team_slave_1 added
[  320.880292][   T29] audit: type=1400 audit(1729794478.311:746): avc:  denied  { read } for  pid=7978 comm="syz.5.379" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  320.902844][   T29] audit: type=1400 audit(1729794478.311:747): avc:  denied  { open } for  pid=7978 comm="syz.5.379" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  320.926078][   T29] audit: type=1400 audit(1729794478.321:748): avc:  denied  { ioctl } for  pid=7978 comm="syz.5.379" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  320.981537][ T3006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.038179][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.074182][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.264099][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.346266][   T29] audit: type=1400 audit(1729794478.761:749): avc:  denied  { create } for  pid=7981 comm="syz.7.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  322.015298][   T29] audit: type=1400 audit(1729794478.771:750): avc:  denied  { write } for  pid=7981 comm="syz.7.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  322.328112][ T7994] sctp: [Deprecated]: syz.7.381 (pid 7994) Use of int in maxseg socket option.
[  322.328112][ T7994] Use struct sctp_assoc_value instead
[  322.509083][   T29] audit: type=1400 audit(1729794479.631:751): avc:  denied  { create } for  pid=7978 comm="syz.5.379" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  322.531812][   T29] audit: type=1400 audit(1729794479.631:752): avc:  denied  { ioctl } for  pid=7978 comm="syz.5.379" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16589 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  322.655268][ T3006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.920096][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.471097][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.894148][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.757377][ T3006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.935328][ T7858] hsr_slave_0: entered promiscuous mode
[  324.948493][ T7858] hsr_slave_1: entered promiscuous mode
[  324.957219][ T7858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.970459][ T7858] Cannot create hsr debugfs directory
[  324.984286][ T5880] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  326.524518][  T972] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  326.559006][ T3006] bridge_slave_1: left allmulticast mode
[  326.579258][ T3006] bridge_slave_1: left promiscuous mode
[  326.593015][ T5880] usb 8-1: device descriptor read/all, error -71
[  326.598535][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.639771][ T3006] bridge_slave_0: left allmulticast mode
[  326.650968][ T3006] bridge_slave_0: left promiscuous mode
[  326.701848][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.724277][  T972] usb 6-1: Using ep0 maxpacket: 8
[  326.731456][  T972] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  326.780811][  T972] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  326.813532][  T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.859591][  T972] usb 6-1: config 0 descriptor??
[  326.904842][  T972] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  328.244193][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  328.244213][   T29] audit: type=1400 audit(1729794485.411:756): avc:  denied  { checkpoint_restore } for  pid=8019 comm="syz.5.386" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  328.573699][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  328.583050][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  328.591844][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  328.600327][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  328.608865][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  328.616564][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.882049][  T972] usb 6-1: USB disconnect, device number 4
[  330.149071][   T29] audit: type=1400 audit(1729794487.581:757): avc:  denied  { create } for  pid=8053 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  330.205328][   T29] audit: type=1400 audit(1729794487.621:758): avc:  denied  { getopt } for  pid=8053 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  330.374617][   T29] audit: type=1400 audit(1729794487.801:759): avc:  denied  { create } for  pid=8056 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  330.394636][   T29] audit: type=1400 audit(1729794487.821:760): avc:  denied  { ioctl } for  pid=8056 comm="syz.5.390" path="socket:[16770]" dev="sockfs" ino=16770 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  330.419566][   T29] audit: type=1400 audit(1729794487.821:761): avc:  denied  { connect } for  pid=8056 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  330.639080][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.649767][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.660359][ T3006] bond0 (unregistering): Released all slaves
[  330.685329][ T5837] Bluetooth: hci1: command tx timeout
[  330.827652][   T29] audit: type=1400 audit(1729794488.161:762): avc:  denied  { create } for  pid=8056 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  330.910767][   T29] audit: type=1400 audit(1729794488.171:763): avc:  denied  { write } for  pid=8056 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  331.010988][ T3006] bond1 (unregistering): Released all slaves
[  332.567931][   T29] audit: type=1400 audit(1729794490.001:764): avc:  denied  { create } for  pid=8068 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  332.799667][ T5837] Bluetooth: hci1: command tx timeout
[  333.698839][   T29] audit: type=1400 audit(1729794491.121:765): avc:  denied  { map } for  pid=8068 comm="syz.4.392" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  333.722854][    C0] vkms_vblank_simulate: vblank timer overrun
[  333.788666][   T29] audit: type=1400 audit(1729794491.121:766): avc:  denied  { read write } for  pid=8068 comm="syz.4.392" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  334.902028][ T7858] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  334.922895][ T5837] Bluetooth: hci1: command tx timeout
[  335.819620][   T29] audit: type=1400 audit(1729794493.241:767): avc:  denied  { setopt } for  pid=8086 comm="syz.5.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  336.291383][   T29] audit: type=1400 audit(1729794493.471:768): avc:  denied  { read } for  pid=8088 comm="syz.7.397" name="usbmon0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  336.634943][   T29] audit: type=1400 audit(1729794493.481:769): avc:  denied  { open } for  pid=8088 comm="syz.7.397" path="/dev/usbmon0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  336.851394][   T29] audit: type=1400 audit(1729794494.281:770): avc:  denied  { write } for  pid=8100 comm="syz.7.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  337.010248][ T5837] Bluetooth: hci1: command tx timeout
[  337.104646][ T7858] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  337.159694][ T7858] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  337.188582][ T7858] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  338.169168][ T3006] hsr_slave_0: left promiscuous mode
[  338.202647][ T3006] hsr_slave_1: left promiscuous mode
[  338.455391][   T29] audit: type=1400 audit(1729794495.831:771): avc:  denied  { create } for  pid=8110 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  338.516449][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.565269][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.665043][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.730182][   T29] audit: type=1800 audit(1729794495.981:772): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.401" name="/" dev="fuse" ino=1 res=0 errno=0
[  338.897331][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.982795][ T3006] veth1_macvtap: left promiscuous mode
[  339.030192][ T3006] veth0_macvtap: left promiscuous mode
[  339.044817][ T3006] veth1_vlan: left promiscuous mode
[  339.057307][ T3006] veth0_vlan: left promiscuous mode
[  339.174663][   T29] audit: type=1400 audit(1729794496.611:773): avc:  denied  { create } for  pid=8100 comm="syz.7.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  339.221530][   T29] audit: type=1400 audit(1729794496.631:774): avc:  denied  { name_connect } for  pid=8100 comm="syz.7.398" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  339.283025][   T29] audit: type=1400 audit(1729794496.681:775): avc:  denied  { shutdown } for  pid=8100 comm="syz.7.398" lport=53462 faddr=fc01:: fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  339.305696][    C0] vkms_vblank_simulate: vblank timer overrun
[  339.589422][ T8130] syz.4.402 uses obsolete (PF_INET,SOCK_PACKET)
[  339.672840][   T29] audit: type=1400 audit(1729794497.101:776): avc:  denied  { ioctl } for  pid=8128 comm="syz.4.402" path="socket:[16975]" dev="sockfs" ino=16975 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  339.744253][   T29] audit: type=1400 audit(1729794497.171:777): avc:  denied  { sys_module } for  pid=8128 comm="syz.4.402" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  340.136670][ T3006] team0 (unregistering): Port device team_slave_1 removed
[  340.277611][ T3006] team0 (unregistering): Port device team_slave_0 removed
[  341.173094][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.189435][ T7858] 8021q: adding VLAN 0 to HW filter on device team0
[  341.275556][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.282650][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.316885][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.323978][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.535712][ T7858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  341.546431][   T29] audit: type=1400 audit(1729794498.951:778): avc:  denied  { create } for  pid=8145 comm="syz.7.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  341.588914][ T7858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.660231][   T29] audit: type=1400 audit(1729794498.961:779): avc:  denied  { setopt } for  pid=8145 comm="syz.7.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  341.873841][ T8042] chnl_net:caif_netlink_parms(): no params data found
[  342.574779][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  342.695252][   T29] audit: type=1400 audit(1729794500.111:780): avc:  denied  { read } for  pid=8167 comm="syz.5.406" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  342.730755][   T29] audit: type=1400 audit(1729794500.151:781): avc:  denied  { open } for  pid=8167 comm="syz.5.406" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  345.314504][ T3006] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.362777][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.370718][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.386720][ T8042] bridge_slave_0: entered allmulticast mode
[  345.395665][ T8042] bridge_slave_0: entered promiscuous mode
[  345.417772][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.463541][ T3006] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.496442][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.518691][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.526921][ T8042] bridge_slave_1: entered allmulticast mode
[  345.535749][ T8042] bridge_slave_1: entered promiscuous mode
[  345.610041][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  345.610059][   T29] audit: type=1400 audit(1729794503.041:788): avc:  denied  { create } for  pid=8187 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  345.689786][ T3006] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.700768][   T29] audit: type=1400 audit(1729794503.071:789): avc:  denied  { connect } for  pid=8187 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  345.752583][   T29] audit: type=1400 audit(1729794503.101:790): avc:  denied  { read } for  pid=8187 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  345.838227][   T29] audit: type=1400 audit(1729794503.201:791): avc:  denied  { write } for  pid=8187 comm="syz.4.409" path="socket:[17945]" dev="sockfs" ino=17945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  345.927385][   T29] audit: type=1400 audit(1729794503.361:792): avc:  denied  { getopt } for  pid=8187 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  346.003186][   T29] audit: type=1400 audit(1729794503.381:793): avc:  denied  { ioctl } for  pid=8187 comm="syz.4.409" path="socket:[17085]" dev="sockfs" ino=17085 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  346.041996][ T3006] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.093271][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.209327][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.438812][ T8042] team0: Port device team_slave_0 added
[  346.611961][ T8042] team0: Port device team_slave_1 added
[  347.951805][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.974810][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.054340][ T8226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  348.077484][   T29] audit: type=1400 audit(1729794505.501:794): avc:  denied  { bind } for  pid=8221 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  348.809877][   T29] audit: type=1400 audit(1729794505.511:795): avc:  denied  { create } for  pid=8221 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  348.874221][   T29] audit: type=1400 audit(1729794505.511:796): avc:  denied  { getopt } for  pid=8221 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  348.895702][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.918933][ T3006] bridge_slave_1: left allmulticast mode
[  348.931100][ T3006] bridge_slave_1: left promiscuous mode
[  348.983973][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.418335][   T29] audit: type=1400 audit(1729794506.711:797): avc:  denied  { ioctl } for  pid=8227 comm="syz.4.413" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  349.453835][ T3006] bridge_slave_0: left allmulticast mode
[  349.460540][ T3006] bridge_slave_0: left promiscuous mode
[  349.470032][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.717430][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  350.717448][   T29] audit: type=1400 audit(1729794508.151:799): avc:  denied  { create } for  pid=8238 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  350.725821][ T8240] netlink: 148 bytes leftover after parsing attributes in process `syz.4.415'.
[  350.789221][   T29] audit: type=1400 audit(1729794508.151:800): avc:  denied  { bind } for  pid=8238 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  350.814194][   T29] audit: type=1400 audit(1729794508.161:801): avc:  denied  { ioctl } for  pid=8238 comm="syz.4.415" path="socket:[18136]" dev="sockfs" ino=18136 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  350.978817][   T29] audit: type=1400 audit(1729794508.401:802): avc:  denied  { create } for  pid=8238 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  351.232517][ T8244] misc userio: No port type given on /dev/userio
[  351.523604][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.541852][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.552342][ T3006] bond0 (unregistering): Released all slaves
[  351.569934][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.577310][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.605610][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.813291][ T8247] fuse: Bad value for 'fd'
[  351.839258][ T8247] netlink: 2300 bytes leftover after parsing attributes in process `syz.5.417'.
[  351.877547][   T29] audit: type=1400 audit(1729794509.291:803): avc:  denied  { listen } for  pid=8246 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  351.960661][ T3006] hsr_slave_0: left promiscuous mode
[  351.978418][ T3006] hsr_slave_1: left promiscuous mode
[  351.985680][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.993142][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.001042][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.009279][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.025832][ T3006] veth1_macvtap: left promiscuous mode
[  352.031431][ T3006] veth0_macvtap: left promiscuous mode
[  352.037294][ T3006] veth1_vlan: left promiscuous mode
[  352.042618][ T3006] veth0_vlan: left promiscuous mode
[  353.727868][   T29] audit: type=1400 audit(1729794511.031:804): avc:  denied  { map } for  pid=8252 comm="syz.5.419" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  353.999614][   T29] audit: type=1400 audit(1729794511.031:805): avc:  denied  { execute } for  pid=8252 comm="syz.5.419" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  355.049904][   T29] audit: type=1400 audit(1729794512.061:806): avc:  denied  { getopt } for  pid=8262 comm="syz.5.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  355.572541][   T29] audit: type=1400 audit(1729794512.441:807): avc:  denied  { write } for  pid=8264 comm="syz.7.421" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  356.184266][ T5882] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  356.385530][   T29] audit: type=1400 audit(1729794513.241:808): avc:  denied  { mount } for  pid=8270 comm="syz.5.422" name="/" dev="gadgetfs" ino=17148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  356.502370][   T29] audit: type=1400 audit(1729794513.851:809): avc:  denied  { create } for  pid=8272 comm="syz.7.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  356.567223][ T5882] usb 6-1: Using ep0 maxpacket: 8
[  356.578637][ T5882] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.895812][   T29] audit: type=1400 audit(1729794513.881:810): avc:  denied  { bind } for  pid=8272 comm="syz.7.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  356.941285][   T29] audit: type=1400 audit(1729794513.891:811): avc:  denied  { write } for  pid=8272 comm="syz.7.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  356.945234][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  357.000988][ T5882] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  357.015723][ T5882] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  357.024958][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.130567][ T8281] fuse: Unknown parameter '00000000000000000000'
[  357.141089][   T29] audit: type=1400 audit(1729794514.541:812): avc:  denied  { create } for  pid=8278 comm="syz.7.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  357.766652][   T29] audit: type=1400 audit(1729794514.551:813): avc:  denied  { bind } for  pid=8278 comm="syz.7.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  357.786036][   T29] audit: type=1400 audit(1729794514.551:814): avc:  denied  { listen } for  pid=8278 comm="syz.7.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  357.791395][ T3006] team0 (unregistering): Port device team_slave_1 removed
[  357.929823][ T5882] hub 6-1:1.0: bad descriptor, ignoring hub
[  357.942027][ T5882] hub 6-1:1.0: probe with driver hub failed with error -5
[  357.953347][ T5882] cdc_wdm 6-1:1.0: skipping garbage
[  357.960074][ T5882] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  358.016885][ T3006] team0 (unregistering): Port device team_slave_0 removed
[  359.540984][   T29] audit: type=1400 audit(1729794516.311:815): avc:  denied  { validate_trans } for  pid=8286 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  359.662055][ T5882] usb 6-1: USB disconnect, device number 5
[  359.788908][ T8294] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  359.865705][   T29] audit: type=1400 audit(1729794517.201:816): avc:  denied  { watch watch_reads } for  pid=8290 comm="syz.4.427" path="/119/file1" dev="tmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  360.710898][   T29] audit: type=1400 audit(1729794518.121:817): avc:  denied  { connect } for  pid=8292 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  361.125145][ T8300] netlink: 'syz.4.430': attribute type 16 has an invalid length.
[  361.237770][ T8042] hsr_slave_0: entered promiscuous mode
[  361.299620][ T8042] hsr_slave_1: entered promiscuous mode
[  361.332066][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.384110][ T8042] Cannot create hsr debugfs directory
[  361.393603][ T7858] veth0_vlan: entered promiscuous mode
[  361.499952][ T7858] veth1_vlan: entered promiscuous mode
[  363.605944][ T7858] veth0_macvtap: entered promiscuous mode
[  363.652674][ T3006] IPVS: stop unused estimator thread 0...
[  364.979491][ T8327] =======================================================
[  364.979491][ T8327] WARNING: The mand mount option has been deprecated and
[  364.979491][ T8327]          and is ignored by this kernel. Remove the mand
[  364.979491][ T8327]          option from the mount to silence this warning.
[  364.979491][ T8327] =======================================================
[  365.014385][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.652713][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  365.652732][   T29] audit: type=1400 audit(1729794522.371:819): avc:  denied  { mount } for  pid=8324 comm="syz.7.434" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  365.680930][   T29] audit: type=1400 audit(1729794522.391:820): avc:  denied  { mounton } for  pid=8324 comm="syz.7.434" path="/48/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  365.703229][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.749085][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.796973][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.812354][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.837733][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.845515][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  365.865512][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.986338][ T8042] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  365.995564][ T8042] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  366.008395][ T8042] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  366.050202][ T8042] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  367.297515][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.385020][ T8042] 8021q: adding VLAN 0 to HW filter on device team0
[  367.490193][ T8342] program syz.4.439 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  367.500212][ T8342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  367.966109][   T54] Bluetooth: hci2: command tx timeout
[  368.092322][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.099531][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.341936][ T3006] bridge_slave_1: left allmulticast mode
[  368.356537][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.375578][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.384378][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.392223][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  368.400759][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  368.410638][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  368.430744][ T3006] bridge_slave_1: left promiscuous mode
[  368.437302][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.479501][ T3006] bridge_slave_0: left allmulticast mode
[  368.487657][ T3006] bridge_slave_0: left promiscuous mode
[  368.493477][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.371672][   T29] audit: type=1400 audit(1729794526.211:821): avc:  denied  { mount } for  pid=8343 comm="syz.4.440" name="/" dev="ramfs" ino=17353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  369.394176][   T29] audit: type=1400 audit(1729794526.271:822): avc:  denied  { execute } for  pid=8343 comm="syz.4.440" name="file0" dev="ramfs" ino=17357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  369.416683][   T29] audit: type=1400 audit(1729794526.271:823): avc:  denied  { execute_no_trans } for  pid=8343 comm="syz.4.440" path="/123/file0/file0" dev="ramfs" ino=17357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  369.440457][   T29] audit: type=1400 audit(1729794526.821:824): avc:  denied  { unmount } for  pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  369.754132][   T29] audit: type=1400 audit(1729794527.181:825): avc:  denied  { ioctl } for  pid=8350 comm="syz.4.441" path="socket:[18662]" dev="sockfs" ino=18662 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  370.029286][ T8356] (syz.4.441,8356,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  370.044264][ T5837] Bluetooth: hci2: command tx timeout
[  370.080810][ T8356] (syz.4.441,8356,0):ocfs2_fill_super:1178 ERROR: status = -22
[  370.288060][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.365340][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.403874][ T3006] bond0 (unregistering): Released all slaves
[  370.447468][ T5837] Bluetooth: hci0: command tx timeout
[  370.487726][ T8328] chnl_net:caif_netlink_parms(): no params data found
[  370.534803][   T29] audit: type=1400 audit(1729794527.971:826): avc:  denied  { sqpoll } for  pid=8357 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  370.569179][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.576337][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.649974][ T3006] hsr_slave_0: left promiscuous mode
[  370.659650][ T3006] hsr_slave_1: left promiscuous mode
[  370.676146][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.696501][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.738287][ T3006] veth0_macvtap: left promiscuous mode
[  370.743953][ T3006] veth1_vlan: left promiscuous mode
[  370.751183][ T3006] veth0_vlan: left promiscuous mode
[  371.623980][ T3006] team0 (unregistering): Port device team_slave_1 removed
[  371.692372][ T5837] Bluetooth: hci3: unexpected event 0x09 length: 10 > 3
[  371.921933][ T3006] team0 (unregistering): Port device team_slave_0 removed
[  372.133194][ T5837] Bluetooth: hci2: command tx timeout
[  372.544542][ T5837] Bluetooth: hci0: command tx timeout
[  372.729521][   T29] audit: type=1400 audit(1729794530.121:827): avc:  denied  { create } for  pid=8365 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  373.069358][   T29] audit: type=1400 audit(1729794530.431:828): avc:  denied  { write } for  pid=8365 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  373.815266][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.822534][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.830451][ T8328] bridge_slave_0: entered allmulticast mode
[  373.837825][ T8328] bridge_slave_0: entered promiscuous mode
[  373.846139][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.853340][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.861032][ T8328] bridge_slave_1: entered allmulticast mode
[  373.879288][ T8328] bridge_slave_1: entered promiscuous mode
[  373.905599][   T29] audit: type=1400 audit(1729794531.331:829): avc:  denied  { create } for  pid=8373 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  373.933006][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'.
[  374.009477][ T8374] Unsupported ieee802154 address type: 0
[  374.017578][   T29] audit: type=1400 audit(1729794531.441:830): avc:  denied  { bind } for  pid=8373 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  374.566034][ T5837] Bluetooth: hci2: command tx timeout
[  374.639363][   T54] Bluetooth: hci0: command tx timeout
[  374.704301][   T29] audit: type=1400 audit(1729794531.891:831): avc:  denied  { ioctl } for  pid=8379 comm="syz.4.446" path="socket:[18775]" dev="sockfs" ino=18775 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  374.831552][   T29] audit: type=1400 audit(1729794532.261:832): avc:  denied  { ioctl } for  pid=8388 comm="syz.4.447" path="socket:[19492]" dev="sockfs" ino=19492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  375.234289][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.377797][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.424682][   T29] audit: type=1400 audit(1729794532.841:833): avc:  denied  { read write } for  pid=8393 comm="syz.5.448" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  375.493762][   T29] audit: type=1400 audit(1729794532.841:834): avc:  denied  { open } for  pid=8393 comm="syz.5.448" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  375.525509][   T29] audit: type=1400 audit(1729794532.881:835): avc:  denied  { ioctl } for  pid=8393 comm="syz.5.448" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  375.666556][ T8328] team0: Port device team_slave_0 added
[  375.756572][ T8328] team0: Port device team_slave_1 added
[  376.584171][   T29] audit: type=1400 audit(1729794533.591:836): avc:  denied  { bind } for  pid=8395 comm="syz.5.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  376.686530][   T54] Bluetooth: hci0: command tx timeout
[  376.709551][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.848492][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.874284][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.922538][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.975312][ T8345] chnl_net:caif_netlink_parms(): no params data found
[  376.998564][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.013283][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.046672][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.120584][ T8400] 9pnet_virtio: no channels available for device syz
[  377.136784][ T3006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.524282][  T970] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  377.783316][ T3006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.795462][  T970] usb 6-1: Using ep0 maxpacket: 8
[  377.824398][  T970] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  377.867119][  T970] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  377.895760][  T970] usb 6-1: config 0 has no interface number 0
[  377.915284][  T970] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  377.944057][  T970] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  377.957715][  T970] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  377.967683][  T970] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  377.976776][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.000788][  T970] usb 6-1: config 0 descriptor??
[  378.098159][ T3006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.172651][ T8328] hsr_slave_0: entered promiscuous mode
[  378.181217][ T8328] hsr_slave_1: entered promiscuous mode
[  378.190935][ T8328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  378.198877][ T8328] Cannot create hsr debugfs directory
[  378.664783][ T8412] Cannot find set identified by id 0 to match
[  378.691086][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  378.691129][   T29] audit: type=1400 audit(1729794536.091:840): avc:  denied  { setopt } for  pid=8408 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  378.853904][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  378.967677][ T3006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.186007][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.193241][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.203573][ T8345] bridge_slave_0: entered allmulticast mode
[  379.210989][ T8345] bridge_slave_0: entered promiscuous mode
[  379.238342][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.245806][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.253092][ T8345] bridge_slave_1: entered allmulticast mode
[  379.260357][ T8345] bridge_slave_1: entered promiscuous mode
[  379.302201][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.331711][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.435826][ T8345] team0: Port device team_slave_0 added
[  379.470216][ T8345] team0: Port device team_slave_1 added
[  379.541900][ T3006] bridge_slave_1: left allmulticast mode
[  379.551578][ T3006] bridge_slave_1: left promiscuous mode
[  379.557808][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.567758][ T3006] bridge_slave_0: left allmulticast mode
[  379.573421][ T3006] bridge_slave_0: left promiscuous mode
[  379.579829][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.759235][   T29] audit: type=1400 audit(1729794537.191:841): avc:  denied  { bind } for  pid=8430 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  379.778651][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'.
[  380.097937][  T970] usb 6-1: USB disconnect, device number 6
[  380.175645][ T8435] netlink: 'syz.5.455': attribute type 2 has an invalid length.
[  380.206883][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.221965][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.235557][ T3006] bond0 (unregistering): Released all slaves
[  380.249434][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.257744][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.288740][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.342981][ T8435] : entered promiscuous mode
[  380.439057][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.449330][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.477343][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.133356][ T8445] (syz.5.457,8445,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  382.143091][ T8445] (syz.5.457,8445,1):ocfs2_fill_super:1178 ERROR: status = -22
[  382.396087][   T29] audit: type=1400 audit(1729794539.451:842): avc:  denied  { bind } for  pid=8438 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  382.415852][   T29] audit: type=1400 audit(1729794539.561:843): avc:  denied  { connect } for  pid=8438 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  382.492487][ T8042] veth0_vlan: entered promiscuous mode
[  382.599120][ T8042] veth1_vlan: entered promiscuous mode
[  383.607479][   T29] audit: type=1400 audit(1729794541.041:844): avc:  denied  { read } for  pid=8448 comm="syz.5.458" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  383.633474][   T29] audit: type=1400 audit(1729794541.061:845): avc:  denied  { open } for  pid=8448 comm="syz.5.458" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  383.660237][   T29] audit: type=1400 audit(1729794541.091:846): avc:  denied  { ioctl } for  pid=8448 comm="syz.5.458" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  383.752271][ T8345] hsr_slave_0: entered promiscuous mode
[  383.763313][ T8345] hsr_slave_1: entered promiscuous mode
[  383.792216][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  383.800110][ T8345] Cannot create hsr debugfs directory
[  383.836697][ T3006] hsr_slave_0: left promiscuous mode
[  383.851350][ T3006] hsr_slave_1: left promiscuous mode
[  383.858547][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.875835][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.883397][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.891856][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.065518][ T3006] veth1_macvtap: left promiscuous mode
[  384.071026][ T3006] veth0_macvtap: left promiscuous mode
[  384.076697][ T3006] veth1_vlan: left promiscuous mode
[  384.082290][ T3006] veth0_vlan: left promiscuous mode
[  385.491354][   T29] audit: type=1400 audit(1729794542.891:847): avc:  denied  { write } for  pid=8459 comm="syz.4.461" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  386.006039][   T29] audit: type=1400 audit(1729794542.891:848): avc:  denied  { open } for  pid=8459 comm="syz.4.461" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  386.274183][ T3006] team0 (unregistering): Port device team_slave_1 removed
[  386.327149][ T3006] team0 (unregistering): Port device team_slave_0 removed
[  387.069714][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.085857][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.098560][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.117157][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.126878][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  387.136350][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.503354][   T29] audit: type=1400 audit(1729794544.931:849): avc:  denied  { create } for  pid=8466 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  387.864963][ T8328] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  387.905934][ T8328] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  388.585923][ T8328] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  389.043103][   T29] audit: type=1400 audit(1729794546.471:850): avc:  denied  { read } for  pid=8475 comm="syz.5.464" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  389.248004][   T54] Bluetooth: hci4: command tx timeout
[  390.123963][ T8328] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  390.549318][ T8486] binder: 8482:8486 ioctl c0306201 0 returned -14
[  390.562971][   T29] audit: type=1400 audit(1729794547.981:851): avc:  denied  { call } for  pid=8482 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  390.629787][   T29] audit: type=1400 audit(1729794547.981:852): avc:  denied  { transfer } for  pid=8482 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  391.324823][   T54] Bluetooth: hci4: command tx timeout
[  391.638536][   T29] audit: type=1400 audit(1729794549.071:853): avc:  denied  { view } for  pid=8489 comm="syz.5.468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  392.253929][ T8497] binder: BINDER_SET_CONTEXT_MGR already set
[  392.273712][ T8497] binder: 8496:8497 ioctl 4018620d 20000140 returned -16
[  392.935256][ T8464] chnl_net:caif_netlink_parms(): no params data found
[  394.269833][   T54] Bluetooth: hci4: command tx timeout
[  394.271345][   T29] audit: type=1400 audit(1729794551.121:854): avc:  denied  { watch watch_reads } for  pid=8499 comm="syz.5.470" path="/proc/364/net/udplite6" dev="proc" ino=4026534162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  394.690104][ T8507] input: syz0 as /devices/virtual/input/input10
[  395.281763][ T8345] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  395.312181][   T29] audit: type=1400 audit(1729794552.121:855): avc:  denied  { ioctl } for  pid=8501 comm="syz.4.471" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  395.352033][ T8345] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  395.622226][ T8345] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  395.641043][ T8345] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  395.657514][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.884232][   T29] audit: type=1400 audit(1729794553.201:856): avc:  denied  { mount } for  pid=8512 comm="syz.5.472" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  396.116606][   T29] audit: type=1400 audit(1729794553.231:857): avc:  denied  { remount } for  pid=8512 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  396.376759][   T54] Bluetooth: hci4: command tx timeout
[  396.418450][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.434651][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.462316][ T8464] bridge_slave_0: entered allmulticast mode
[  396.472600][   T29] audit: type=1400 audit(1729794553.901:858): avc:  denied  { unmount } for  pid=6356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  396.476012][ T8464] bridge_slave_0: entered promiscuous mode
[  396.515769][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.523748][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.531044][ T5924] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  396.545462][ T8464] bridge_slave_1: entered allmulticast mode
[  396.552530][ T8464] bridge_slave_1: entered promiscuous mode
[  396.562198][ T3006] bridge_slave_1: left allmulticast mode
[  396.568251][ T3006] bridge_slave_1: left promiscuous mode
[  396.574940][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.591883][ T3006] bridge_slave_0: left allmulticast mode
[  396.598066][ T3006] bridge_slave_0: left promiscuous mode
[  396.604532][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.658397][   T29] audit: type=1400 audit(1729794554.091:859): avc:  denied  { write } for  pid=8520 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  396.711531][ T5924] usb 5-1: config 0 has no interfaces?
[  396.717940][ T5924] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  396.746348][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.781203][ T5924] usb 5-1: config 0 descriptor??
[  397.146383][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.162215][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.180864][ T3006] bond0 (unregistering): Released all slaves
[  397.214611][ T8328] 8021q: adding VLAN 0 to HW filter on device team0
[  397.351693][ T8517] kvm: pic: non byte read
[  397.356590][ T8517] kvm: pic: non byte read
[  397.362997][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.408496][ T3006] hsr_slave_0: left promiscuous mode
[  397.415335][ T3006] hsr_slave_1: left promiscuous mode
[  397.425174][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.439508][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.480549][ T3006] veth1_vlan: left promiscuous mode
[  397.519336][ T3006] veth0_vlan: left promiscuous mode
[  398.719341][ T3006] team0 (unregistering): Port device team_slave_1 removed
[  398.918111][   T29] audit: type=1400 audit(1729794556.251:860): avc:  denied  { bind } for  pid=8537 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  399.049426][   T29] audit: type=1400 audit(1729794556.251:861): avc:  denied  { name_bind } for  pid=8537 comm="syz.5.476" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  399.095456][ T3006] team0 (unregistering): Port device team_slave_0 removed
[  399.245585][   T29] audit: type=1400 audit(1729794556.251:862): avc:  denied  { node_bind } for  pid=8537 comm="syz.5.476" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  399.396264][   T29] audit: type=1400 audit(1729794556.301:863): avc:  denied  { setopt } for  pid=8537 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  400.742740][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.749917][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.761142][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.795236][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.802388][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.916970][ T5879] usb 5-1: USB disconnect, device number 8
[  401.191558][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.000374][   T29] audit: type=1400 audit(1729794558.711:864): avc:  denied  { mount } for  pid=8548 comm="syz.5.478" name="/" dev="autofs" ino=20268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  402.184900][   T29] audit: type=1400 audit(1729794559.451:865): avc:  denied  { unmount } for  pid=6356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  402.195519][ T8328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  402.296371][ T8328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  402.386591][ T8464] team0: Port device team_slave_0 added
[  402.447171][ T8464] team0: Port device team_slave_1 added
[  403.516220][ T8345] 8021q: adding VLAN 0 to HW filter on device team0
[  403.567844][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.575035][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.582549][   T29] audit: type=1400 audit(1729794561.011:866): avc:  denied  { connect } for  pid=8561 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  403.594800][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.609086][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.687338][ T8345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  403.700566][ T8345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  403.731646][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.741701][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.808254][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.851269][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.876562][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.904658][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  403.937559][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.063537][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.179952][ T8464] hsr_slave_0: entered promiscuous mode
[  404.203192][ T8464] hsr_slave_1: entered promiscuous mode
[  404.244157][ T5862] usb 6-1: Using ep0 maxpacket: 32
[  404.260964][ T5862] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  404.270689][ T5862] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  404.638224][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.720723][ T5862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  404.778165][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.875967][ T5862] usb 6-1: Product: syz
[  404.910273][ T5862] usb 6-1: Manufacturer: syz
[  404.980297][ T5862] usb 6-1: SerialNumber: syz
[  405.040530][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.180956][ T8345] veth0_vlan: entered promiscuous mode
[  405.293287][ T8345] veth1_vlan: entered promiscuous mode
[  405.416393][ T8345] veth0_macvtap: entered promiscuous mode
[  405.436984][ T8345] veth1_macvtap: entered promiscuous mode
[  405.475613][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.502586][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.521254][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.532766][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.545417][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.557066][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.569136][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.579507][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  405.590708][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.602150][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.619512][ T8345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.637216][ T8345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.647470][ T8345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.656835][ T8345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.670156][ T5862] usb 6-1: 0:2 : does not exist
[  405.736342][ T5862] usb 6-1: USB disconnect, device number 7
[  405.888299][ T8464] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  405.920363][ T8464] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  405.938336][ T8328] veth0_vlan: entered promiscuous mode
[  405.957530][ T8464] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  405.972053][ T8464] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  405.996962][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.005087][ T8328] veth1_vlan: entered promiscuous mode
[  406.011385][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.091682][ T6975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.108998][ T6975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.124124][   T29] audit: type=1400 audit(1729794563.551:867): avc:  denied  { write } for  pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  406.140675][ T8328] veth0_macvtap: entered promiscuous mode
[  406.156515][   T29] audit: type=1400 audit(1729794563.551:868): avc:  denied  { remove_name } for  pid=5184 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  406.180150][   T29] audit: type=1400 audit(1729794563.551:869): avc:  denied  { rename } for  pid=5184 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  406.203902][   T29] audit: type=1400 audit(1729794563.551:870): avc:  denied  { add_name } for  pid=5184 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  406.229838][   T29] audit: type=1400 audit(1729794563.551:871): avc:  denied  { unlink } for  pid=5184 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  406.231077][ T8328] veth1_macvtap: entered promiscuous mode
[  406.266593][   T29] audit: type=1400 audit(1729794563.591:872): avc:  denied  { create } for  pid=5184 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  406.333236][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.377919][   T29] audit: type=1400 audit(1729794563.641:873): avc:  denied  { mounton } for  pid=8345 comm="syz-executor" path="/root/syzkaller.IPFrUV/syz-tmp" dev="sda1" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  406.378150][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.457023][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.468331][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.478444][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.489022][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.518096][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.623077][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.659557][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.678444][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.690227][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.700104][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  406.710758][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.735646][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.760747][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.779930][ T8328] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.789281][ T8328] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.798971][ T8328] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.854058][ T8328] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.017774][ T8464] 8021q: adding VLAN 0 to HW filter on device team0
[  407.056981][ T8464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  407.069421][ T8464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  407.914165][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  407.914188][   T29] audit: type=1400 audit(1729794564.771:882): avc:  denied  { read } for  pid=8609 comm="syz.5.485" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  409.090586][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.097749][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.144086][   T29] audit: type=1400 audit(1729794564.771:883): avc:  denied  { open } for  pid=8609 comm="syz.5.485" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  409.247262][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.254465][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.404142][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.447856][ T8624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.535694][ T8631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.419933][   T29] audit: type=1400 audit(1729794567.841:884): avc:  denied  { create } for  pid=8623 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  410.483319][   T29] audit: type=1400 audit(1729794567.851:885): avc:  denied  { ioctl } for  pid=8623 comm="syz.5.487" path="socket:[21306]" dev="sockfs" ino=21306 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  411.284067][ T8641] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  411.554196][ T8635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.580796][ T8635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.614168][ T8641] usb 4-1: device descriptor read/64, error -71
[  411.658564][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.660586][   T29] audit: type=1400 audit(1729794569.091:886): avc:  denied  { create } for  pid=8647 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  411.711163][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.732204][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.949552][ T8656] usb usb1: usbfs: process 8656 (syz.5.491) did not claim interface 0 before use
[  411.962640][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'.
[  412.010234][   T29] audit: type=1400 audit(1729794569.371:887): avc:  denied  { append } for  pid=8647 comm="syz.5.491" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  412.466988][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.896400][ T8641] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  413.197088][ T8641] usb 4-1: device descriptor read/64, error -71
[  413.314285][ T8641] usb usb4-port1: attempt power cycle
[  413.757187][   T29] audit: type=1400 audit(1729794571.191:888): avc:  denied  { create } for  pid=8668 comm="syz.8.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  414.250287][   T29] audit: type=1400 audit(1729794571.671:889): avc:  denied  { setopt } for  pid=8662 comm="syz.5.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  415.163924][   T29] audit: type=1400 audit(1729794572.591:890): avc:  denied  { accept } for  pid=8680 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  415.767901][ T8464] veth0_vlan: entered promiscuous mode
[  415.790217][ T8464] veth1_vlan: entered promiscuous mode
[  415.812470][ T8464] veth0_macvtap: entered promiscuous mode
[  415.821596][ T8464] veth1_macvtap: entered promiscuous mode
[  415.837623][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.848297][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.858155][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.868727][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.879144][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.890177][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.900038][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.910502][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.921748][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.931756][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.942255][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.952116][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.962612][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.972485][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.981629][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  415.984730][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.016762][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.027404][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.044358][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.057808][ T8464] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.074207][ T8464] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.083862][ T8464] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.086941][   T29] audit: type=1400 audit(1729794573.521:891): avc:  denied  { read write } for  pid=8689 comm="syz.5.497" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  416.095928][ T8464] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.374136][    T9] usb 5-1: Using ep0 maxpacket: 32
[  416.381174][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314
[  416.467880][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  416.471674][   T29] audit: type=1400 audit(1729794573.521:892): avc:  denied  { open } for  pid=8689 comm="syz.5.497" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  416.525672][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.582752][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.591185][    T9] usb 5-1: Product: syz
[  416.600654][    T9] usb 5-1: Manufacturer: syz
[  416.612196][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.635055][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.642442][    T9] usb 5-1: SerialNumber: syz
[  416.648690][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.666352][ T8681] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  416.900009][ T8706] ubi0: attaching mtd0
[  417.080749][ T8706] ubi0: scanning is finished
[  417.089779][    T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  418.095109][ T8706] ubi0: empty MTD device detected
[  418.850471][ T5919] usb 5-1: USB disconnect, device number 9
[  418.860538][ T5919] usblp0: removed
[  419.196592][   T29] audit: type=1400 audit(1729794576.601:893): avc:  denied  { read } for  pid=8720 comm="syz.5.499" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  419.405224][ T8706] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  420.024485][  T970] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  420.303470][ T8743] fuse: Unknown parameter 'ff'
[  420.464066][  T970] usb 5-1: Using ep0 maxpacket: 8
[  420.470954][  T970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.492927][ T8742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57222 sclass=netlink_route_socket pid=8742 comm=syz.5.503
[  420.527638][   T29] audit: type=1400 audit(1729794577.961:894): avc:  denied  { ioctl } for  pid=8745 comm="syz.3.504" path="socket:[22331]" dev="sockfs" ino=22331 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  420.537692][  T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  420.581348][ T8742] geneve2: entered promiscuous mode
[  420.593552][   T29] audit: type=1400 audit(1729794577.961:895): avc:  denied  { write } for  pid=8745 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  420.617366][ T8742] geneve2: entered allmulticast mode
[  420.622829][  T970] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  420.678092][  T970] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  420.731817][  T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.903465][  T970] hub 5-1:1.0: bad descriptor, ignoring hub
[  420.909596][  T970] hub 5-1:1.0: probe with driver hub failed with error -5
[  420.918022][  T970] cdc_wdm 5-1:1.0: skipping garbage
[  420.923312][  T970] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  422.670575][ T8766] tmpfs: Unknown parameter 'usrq'
[  422.683004][ T8768] tmpfs: Unknown parameter 'usrq'
[  422.884348][  T970] usb 5-1: USB disconnect, device number 10
[  424.217563][   T29] audit: type=1400 audit(1729794581.191:896): avc:  denied  { ioctl } for  pid=8780 comm="syz.5.511" path="socket:[22574]" dev="sockfs" ino=22574 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  428.202357][   T29] audit: type=1400 audit(1729794585.631:897): avc:  denied  { listen } for  pid=8834 comm="syz.4.519" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  428.895954][   T29] audit: type=1400 audit(1729794586.261:898): avc:  denied  { read } for  pid=8834 comm="syz.4.519" laddr=127.0.0.1 lport=59150 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  431.714076][ T8641] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  432.153676][ T8641] usb 10-1: Using ep0 maxpacket: 8
[  432.185077][ T8641] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  432.198851][ T8641] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  432.212586][ T8641] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  432.951145][ T8641] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  432.960421][ T8641] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.991594][ T8641] usb 10-1: can't set config #1, error -71
[  433.025276][ T8641] usb 10-1: USB disconnect, device number 2
[  436.003134][   T29] audit: type=1400 audit(1729794593.431:899): avc:  denied  { mounton } for  pid=8870 comm="syz.3.526" path="/14/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  437.137729][ T8904] tty tty39: ldisc open failed (-12), clearing slot 38
[  437.147381][ T8906] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  437.495652][   T54] Bluetooth: Wrong link type (-22)
[  437.502980][   T54] Bluetooth: hci4: link tx timeout
[  437.508584][   T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  437.893950][   T29] audit: type=1400 audit(1729794595.321:900): avc:  denied  { setopt } for  pid=8914 comm="syz.8.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  437.954166][ T8641] IPVS: starting estimator thread 0...
[  440.055728][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  444.942156][   T29] audit: type=1400 audit(1729794595.601:901): avc:  denied  { write } for  pid=8926 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  444.974579][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  445.074153][ T8929] IPVS: using max 17 ests per chain, 40800 per kthread
[  446.198673][ T8949] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  446.600949][   T29] audit: type=1400 audit(1729794603.901:902): avc:  denied  { ioctl } for  pid=8942 comm="syz.9.541" path="socket:[23614]" dev="sockfs" ino=23614 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  447.227157][ T8941] evm: overlay not supported
[  447.891189][ T8974] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  449.663117][   T29] audit: type=1400 audit(1729794607.091:903): avc:  denied  { bind } for  pid=8985 comm="syz.9.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  449.815957][   T29] audit: type=1400 audit(1729794607.131:904): avc:  denied  { listen } for  pid=8985 comm="syz.9.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  449.835653][   T29] audit: type=1400 audit(1729794607.161:905): avc:  denied  { write } for  pid=8985 comm="syz.9.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  449.882528][   T29] audit: type=1400 audit(1729794607.161:906): avc:  denied  { accept } for  pid=8985 comm="syz.9.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  449.902516][   T29] audit: type=1400 audit(1729794607.291:907): avc:  denied  { read } for  pid=8985 comm="syz.9.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  453.284875][  T970] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  454.757191][   T29] audit: type=1400 audit(1729794612.191:908): avc:  denied  { mount } for  pid=9033 comm="syz.4.558" name="/" dev="configfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  454.932820][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.974418][   T29] audit: type=1400 audit(1729794612.381:909): avc:  denied  { search } for  pid=9033 comm="syz.4.558" name="/" dev="configfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  455.474175][   T29] audit: type=1400 audit(1729794612.791:910): avc:  denied  { mounton } for  pid=9033 comm="syz.4.558" path="/" dev="configfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  455.774733][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  455.824123][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  455.840643][   T29] audit: type=1400 audit(1729794612.801:911): avc:  denied  { read } for  pid=9033 comm="syz.4.558" name="/" dev="configfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  455.884821][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  455.892512][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  455.900109][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  456.212005][   T29] audit: type=1400 audit(1729794612.801:912): avc:  denied  { open } for  pid=9033 comm="syz.4.558" path="/" dev="configfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  456.233888][    C0] vkms_vblank_simulate: vblank timer overrun
[  457.186578][ T5932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.358361][   T29] audit: type=1400 audit(1729794614.791:913): avc:  denied  { unmount } for  pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  457.432852][   T29] audit: type=1400 audit(1729794614.821:914): avc:  denied  { unmount } for  pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  458.477827][ T5932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.491106][   T54] Bluetooth: hci0: command tx timeout
[  459.281004][ T5932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.348931][   T54] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  459.567657][ T5932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.531912][   T54] Bluetooth: hci0: command tx timeout
[  461.037798][ T9041] chnl_net:caif_netlink_parms(): no params data found
[  462.307321][ T5932] bridge_slave_1: left allmulticast mode
[  463.050435][ T5932] bridge_slave_1: left promiscuous mode
[  463.084133][   T54] Bluetooth: hci0: command tx timeout
[  463.400672][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.394081][   T29] audit: type=1400 audit(1729794620.911:915): avc:  denied  { write } for  pid=9094 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  464.419171][ T5932] bridge_slave_0: left allmulticast mode
[  464.433189][   T29] audit: type=1400 audit(1729794620.911:916): avc:  denied  { nlmsg_read } for  pid=9094 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  464.454250][ T5932] bridge_slave_0: left promiscuous mode
[  464.460691][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.197578][   T54] Bluetooth: hci0: command tx timeout
[  465.403031][   T29] audit: type=1400 audit(1729794622.831:917): avc:  denied  { read write } for  pid=9111 comm="syz.4.571" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  465.497208][   T29] audit: type=1400 audit(1729794622.831:918): avc:  denied  { open } for  pid=9111 comm="syz.4.571" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  465.507665][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  465.520552][    C1] vkms_vblank_simulate: vblank timer overrun
[  466.157543][ T9119] VFS: could not find a valid V7 on nullb0.
[  467.198355][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.211693][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.220147][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.229367][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.236879][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  468.033629][ T9131] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock
[  468.478018][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  468.526532][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  468.534933][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  468.845220][   T29] audit: type=1400 audit(1729794626.171:919): avc:  denied  { mount } for  pid=9125 comm="syz.8.574" name="/" dev="rpc_pipefs" ino=23792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  468.868210][    C1] vkms_vblank_simulate: vblank timer overrun
[  469.196227][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  469.233309][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  469.251900][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  469.280541][   T29] audit: type=1400 audit(1729794626.601:920): avc:  denied  { unmount } for  pid=8328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  469.324395][   T54] Bluetooth: hci1: command tx timeout
[  471.327859][ T9144] tty tty4: ldisc open failed (-12), clearing slot 3
[  471.405162][   T54] Bluetooth: hci1: command tx timeout
[  471.410601][   T54] Bluetooth: hci5: command tx timeout
[  471.964403][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.014960][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.045425][ T5932] bond0 (unregistering): Released all slaves
[  472.094308][ T9130] syzkaller1: entered promiscuous mode
[  472.099781][ T9130] syzkaller1: entered allmulticast mode
[  472.785138][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.804211][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.817300][ T9041] bridge_slave_0: entered allmulticast mode
[  473.033882][ T9041] bridge_slave_0: entered promiscuous mode
[  473.546160][ T5837] Bluetooth: hci5: command tx timeout
[  473.551608][ T5837] Bluetooth: hci1: command tx timeout
[  473.614035][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.621114][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.654720][ T9041] bridge_slave_1: entered allmulticast mode
[  473.661820][ T9041] bridge_slave_1: entered promiscuous mode
[  474.666052][   T29] audit: type=1400 audit(1729794631.481:921): avc:  denied  { write } for  pid=9161 comm="syz.8.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  474.755957][ T9175] ufs: You didn't specify the type of your ufs filesystem
[  474.755957][ T9175] 
[  474.755957][ T9175] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  474.755957][ T9175] 
[  474.755957][ T9175] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  474.787532][ T9175] ufs: ufstype=old is supported read-only
[  474.798269][ T9175] ufs: ufs_fill_super(): bad magic number
[  475.570874][ T9182] input: syz0 as /devices/virtual/input/input12
[  475.636969][   T54] Bluetooth: hci1: command tx timeout
[  475.642529][   T54] Bluetooth: hci5: command tx timeout
[  477.724366][ T5837] Bluetooth: hci5: command tx timeout
[  477.818180][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.883419][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.342417][ T9113] chnl_net:caif_netlink_parms(): no params data found
[  478.453654][ T9041] team0: Port device team_slave_0 added
[  478.485295][ T9041] team0: Port device team_slave_1 added
[  478.540806][ T5932] hsr_slave_0: left promiscuous mode
[  478.564418][ T5932] hsr_slave_1: left promiscuous mode
[  478.579460][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.600267][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.620532][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.629172][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.680009][ T5932] veth1_macvtap: left promiscuous mode
[  478.733870][ T5932] veth0_macvtap: left promiscuous mode
[  478.744469][ T5932] veth1_vlan: left promiscuous mode
[  478.750773][ T5932] veth0_vlan: left promiscuous mode
[  479.478761][ T9218] xt_connbytes: Forcing CT accounting to be enabled
[  479.479082][ T9218] Cannot find add_set index 0 as target
[  479.758695][   T29] audit: type=1400 audit(1729794637.191:922): avc:  denied  { create } for  pid=9219 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  479.760823][   T29] audit: type=1400 audit(1729794637.191:923): avc:  denied  { setopt } for  pid=9219 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  480.822954][ T5932] team0 (unregistering): Port device team_slave_1 removed
[  480.939160][ T5932] team0 (unregistering): Port device team_slave_0 removed
[  481.061577][   T29] audit: type=1400 audit(1729794638.481:924): avc:  denied  { map } for  pid=9226 comm="syz.8.587" path="socket:[23429]" dev="sockfs" ino=23429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  481.995188][ T9220] 
@ÿ: renamed from veth0_vlan (while UP)
[  482.053138][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.075184][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.120021][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.204066][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.211049][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.258889][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.242064][ T9123] chnl_net:caif_netlink_parms(): no params data found
[  483.271082][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.291695][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.302214][   T29] audit: type=1400 audit(1729794640.731:925): avc:  denied  { getopt } for  pid=9249 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  483.322698][ T9113] bridge_slave_0: entered allmulticast mode
[  483.334440][ T9113] bridge_slave_0: entered promiscuous mode
[  483.365374][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.372492][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.431368][ T9113] bridge_slave_1: entered allmulticast mode
[  483.618965][ T9113] bridge_slave_1: entered promiscuous mode
[  483.954055][ T9041] hsr_slave_0: entered promiscuous mode
[  483.982002][ T9041] hsr_slave_1: entered promiscuous mode
[  483.988803][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.996879][ T9041] Cannot create hsr debugfs directory
[  484.190229][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.216174][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.237641][   T29] audit: type=1400 audit(1729794641.661:926): avc:  denied  { setopt } for  pid=9260 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  484.745776][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.779167][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.799896][ T9123] bridge_slave_0: entered allmulticast mode
[  484.812915][ T9123] bridge_slave_0: entered promiscuous mode
[  484.826628][ T9113] team0: Port device team_slave_0 added
[  484.961198][ T5932] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.007349][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.030524][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.039152][ T9123] bridge_slave_1: entered allmulticast mode
[  485.065826][ T9123] bridge_slave_1: entered promiscuous mode
[  485.124061][ T9113] team0: Port device team_slave_1 added
[  485.223805][ T5932] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.235322][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.384232][   T29] audit: type=1400 audit(1729794643.811:927): avc:  denied  { mount } for  pid=9277 comm="syz.8.591" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  486.411385][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.418906][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.446020][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.579311][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.698284][ T5932] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.714669][   T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  486.727762][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.739071][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.774233][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.873858][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.894045][   T46] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  486.913367][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.141866][   T46] usb 5-1: config 0 descriptor??
[  487.196116][ T5932] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.612662][ T9123] team0: Port device team_slave_0 added
[  487.630511][   T29] audit: type=1400 audit(1729794645.061:928): avc:  denied  { ioctl } for  pid=9292 comm="syz.4.593" path="socket:[24057]" dev="sockfs" ino=24057 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  487.639959][ T9123] team0: Port device team_slave_1 added
[  487.852126][ T9113] hsr_slave_0: entered promiscuous mode
[  487.858801][ T9113] hsr_slave_1: entered promiscuous mode
[  487.882271][ T9113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  487.886169][   T46] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  487.922347][ T9113] Cannot create hsr debugfs directory
[  487.935434][   T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input13
[  488.055037][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.084250][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.121362][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.155364][   T46] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  488.203359][   T29] audit: type=1400 audit(1729794645.601:929): avc:  denied  { ioctl } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2853 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  488.445057][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  488.926827][   T46] usb 5-1: USB disconnect, device number 11
[  488.945627][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.952606][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.982779][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.149741][ T9123] hsr_slave_0: entered promiscuous mode
[  489.165557][ T9123] hsr_slave_1: entered promiscuous mode
[  489.181524][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.194773][ T9123] Cannot create hsr debugfs directory
[  489.349690][ T9041] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  489.390540][ T9113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.422805][ T9041] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  489.452414][ T9041] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  489.463066][ T9041] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  489.492843][ T9113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.587763][ T9113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.968333][ T9113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.646279][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.715989][ T9041] 8021q: adding VLAN 0 to HW filter on device team0
[  491.958525][ T9332] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  491.962933][ T9041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  491.982509][ T9041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  492.006399][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.013503][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.045716][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.052847][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.140332][ T5932] bridge_slave_1: left allmulticast mode
[  492.146210][ T5932] bridge_slave_1: left promiscuous mode
[  492.151930][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.175856][ T5932] bridge_slave_0: left allmulticast mode
[  492.185912][ T5932] bridge_slave_0: left promiscuous mode
[  492.191644][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.229782][ T5932] bridge_slave_1: left allmulticast mode
[  492.263258][ T5932] bridge_slave_1: left promiscuous mode
[  492.272187][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.307277][ T5932] bridge_slave_0: left allmulticast mode
[  492.312933][ T5932] bridge_slave_0: left promiscuous mode
[  492.332626][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.994091][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  493.173006][    T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  493.197126][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.220188][    T9] usb 9-1: Product: syz
[  493.225068][    T9] usb 9-1: Manufacturer: syz
[  493.234018][    T9] usb 9-1: SerialNumber: syz
[  493.281316][    T9] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  493.443077][ T5919] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  493.886083][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.919359][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.958169][ T5932] bond0 (unregistering): Released all slaves
[  494.145833][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.169354][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.181656][ T5932] bond0 (unregistering): Released all slaves
[  494.349232][ T5932] Êü: left promiscuous mode
[  494.487155][ T5932] : left promiscuous mode
[  494.528339][ T5919] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  494.540068][ T5919] ath9k_htc: Failed to initialize the device
[  494.670192][ T5919] usb 9-1: ath9k_htc: USB layer deinitialized
[  494.696907][ T9113] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  494.720348][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.751753][ T9113] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  494.980941][ T5919] usb 9-1: USB disconnect, device number 3
[  494.990865][ T9113] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  495.015346][ T9113] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  496.208896][ T9358] binder: 9355:9358 ioctl 4018620d 0 returned -22
[  496.252150][   T29] audit: type=1400 audit(1729794653.651:930): avc:  denied  { name_bind } for  pid=9355 comm="syz.4.603" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  496.933879][ T9041] veth0_vlan: entered promiscuous mode
[  497.030877][ T9041] veth1_vlan: entered promiscuous mode
[  497.125950][ T9363] MTD: Couldn't look up '': -22
[  497.967879][ T9369] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  498.026068][ T9113] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.065850][ T9113] 8021q: adding VLAN 0 to HW filter on device team0
[  498.222899][ T9374] overlayfs: failed to resolve './file1': -2
[  498.848146][   T29] audit: type=1400 audit(1729794655.601:931): avc:  denied  { ioctl } for  pid=9366 comm="syz.4.607" path="socket:[25071]" dev="sockfs" ino=25071 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  498.901657][ T9041] veth0_macvtap: entered promiscuous mode
[  498.910255][ T9041] veth1_macvtap: entered promiscuous mode
[  499.038567][   T29] audit: type=1400 audit(1729794656.471:932): avc:  denied  { getopt } for  pid=9364 comm="syz.8.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  499.077895][ T9123] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  499.088897][ T9123] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  499.101755][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.108883][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.133570][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.140723][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.231520][ T9123] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  499.245548][ T9123] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  499.280099][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.291022][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.330386][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.350025][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.366432][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.377523][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.391911][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.432060][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.459296][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.526192][ T5932] hsr_slave_0: left promiscuous mode
[  499.595707][ T5932] hsr_slave_1: left promiscuous mode
[  499.639002][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.682119][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.730577][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.743183][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.778237][ T5932] hsr_slave_0: left promiscuous mode
[  499.791425][ T5932] hsr_slave_1: left promiscuous mode
[  499.802289][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.810397][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.830892][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.839085][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.046882][ T5932] veth1_macvtap: left promiscuous mode
[  500.052809][ T5932] veth0_macvtap: left promiscuous mode
[  500.190974][ T9390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9390 comm=syz.4.610
[  500.728425][ T5932] veth1_vlan: left promiscuous mode
[  500.734106][ T5932] veth0_vlan: left promiscuous mode
[  500.743842][ T5932] veth1_macvtap: left promiscuous mode
[  500.749976][ T5932] veth0_macvtap: left promiscuous mode
[  500.755748][ T5932] veth1_vlan: left promiscuous mode
[  500.761060][ T5932] veth0_vlan: left promiscuous mode
[  501.620616][ T5932] team0 (unregistering): Port device team_slave_1 removed
[  501.683581][ T5932] team0 (unregistering): Port device team_slave_0 removed
[  501.736733][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  503.390318][ T5932] team0 (unregistering): Port device team_slave_1 removed
[  503.501753][ T5932] team0 (unregistering): Port device team_slave_0 removed
[  504.372712][ T5837] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  504.544012][ T5837] Bluetooth: hci3: Injecting HCI hardware error event
[  504.555531][   T54] Bluetooth: hci3: hardware error 0x00
[  505.536743][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'.
[  505.734855][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.774112][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.793913][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.824096][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.538747][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.614290][   T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  506.623509][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.641811][ T9123] 8021q: adding VLAN 0 to HW filter on device team0
[  506.869364][   T29] audit: type=1400 audit(1729794663.701:933): avc:  denied  { setopt } for  pid=9406 comm="syz.8.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  507.420641][ T9041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.438867][ T9041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.450242][ T9041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.463009][ T9041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.631239][ T9113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.640749][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.647859][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.725543][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.732678][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.900064][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.919058][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.088649][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.112710][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.672653][ T9113] veth0_vlan: entered promiscuous mode
[  509.696817][ T9113] veth1_vlan: entered promiscuous mode
[  509.978535][ T9113] veth0_macvtap: entered promiscuous mode
[  510.003605][ T9113] veth1_macvtap: entered promiscuous mode
[  510.059940][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.070605][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.080784][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.091641][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.102087][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.112801][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.131244][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.153560][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.164329][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.174758][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.185910][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.196200][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.206863][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.222490][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.252984][ T9113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.261847][ T9113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.270654][ T9113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.279452][ T9113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.500639][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.312628][ T9444] usb usb8: usbfs: process 9444 (syz.8.625) did not claim interface 0 before use
[  511.861713][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.875648][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.228709][ T9123] veth0_vlan: entered promiscuous mode
[  513.242374][ T9123] veth1_vlan: entered promiscuous mode
[  513.664251][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.672555][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.800329][ T9123] veth0_macvtap: entered promiscuous mode
[  513.847841][ T9456] input: syz0 as /devices/virtual/input/input14
[  513.851858][ T9123] veth1_macvtap: entered promiscuous mode
[  513.890714][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.956909][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.996347][ T9457] fuse: Unknown parameter '0x0000000000000006'
[  514.094094][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.136317][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.166990][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.242866][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.274134][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.487013][  T972] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  514.609943][   T29] audit: type=1400 audit(1729794671.881:934): avc:  denied  { read } for  pid=9460 comm="syz.5.567" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  514.632424][    C0] vkms_vblank_simulate: vblank timer overrun
[  514.779340][ T9456] could not allocate digest TFM handle sha384-arm64
[  514.794653][  T972] usb 1-1: Using ep0 maxpacket: 16
[  515.012171][  T972] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  515.034087][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  515.034270][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.055349][   T29] audit: type=1400 audit(1729794671.881:935): avc:  denied  { open } for  pid=9460 comm="syz.5.567" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  515.152055][  T972] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  515.161310][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.212228][  T972] usb 1-1: Product: syz
[  515.225988][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.239952][   T29] audit: type=1400 audit(1729794671.881:936): avc:  denied  { write } for  pid=9460 comm="syz.5.567" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  515.240001][  T972] usb 1-1: Manufacturer: syz
[  515.329656][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.369813][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.390289][  T972] usb 1-1: SerialNumber: syz
[  515.395900][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.504054][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.516098][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.545118][  T972] usb 1-1: config 0 descriptor??
[  515.581248][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.602736][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  516.414949][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  516.445555][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.493128][ T9123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.506392][  T972] powermate: Expected payload of 3--6 bytes, found 512 bytes!
[  516.529700][  T972] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15
[  516.536337][ T9123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.571586][ T9123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.601806][ T9123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.133050][    C0] powermate: config urb returned -71
[  517.139016][    C0] powermate: config urb returned -71
[  517.144671][    C0] powermate: config urb returned -71
[  517.150261][    C0] powermate: config urb returned -71
[  517.215716][  T972] usb 1-1: USB disconnect, device number 2
[  517.215774][    C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  519.428862][ T9488] mkiss: ax0: crc mode is auto.
[  520.454847][ T9502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9502 comm=syz.4.631
[  522.707212][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'.
[  524.565010][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.579230][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.587511][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.595733][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.687494][   T29] audit: type=1400 audit(1729794682.101:937): avc:  denied  { create } for  pid=9515 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  524.853234][ T9520] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  524.859892][ T9520] ------------[ cut here ]------------
[  524.865549][ T9520] ODEBUG: free active (active state 0) object: ffff888028b5c978 object type: timer_list hint: hci_cmd_timeout+0x0/0x260
[  524.881880][ T9520] WARNING: CPU: 0 PID: 9520 at lib/debugobjects.c:514 debug_print_object+0x1a3/0x2b0
[  524.891958][ T9520] Modules linked in:
[  524.896504][ T9520] CPU: 0 UID: 0 PID: 9520 Comm: syz.5.633 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  524.907698][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  524.920427][ T9520] RIP: 0010:debug_print_object+0x1a3/0x2b0
[  524.927066][ T9520] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 bc d1 8b 41 56 4c 89 e6 48 c7 c7 e0 af d1 8b e8 fe 25 b9 fc 90 <0f> 0b 90 90 58 83 05 4d 34 ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  524.947163][ T9520] RSP: 0018:ffffc9000b62f818 EFLAGS: 00010282
[  524.954612][ T9520] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc900042b1000
[  524.963368][ T9520] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001
[  524.971773][ T9520] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  524.979961][ T9520] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1b680
[  524.988111][ T9520] R13: ffffffff8b6f77c0 R14: ffffffff8a120070 R15: ffffc9000b62f928
[  524.996215][ T9520] FS:  00007f296583a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  525.005310][ T9520] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  525.012026][ T9520] CR2: 00007fd8a6f37a8c CR3: 000000002755c000 CR4: 00000000003526f0
[  525.020111][ T9520] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  525.028217][ T9520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  525.036840][ T9520] Call Trace:
[  525.040787][ T9520]  <TASK>
[  525.043785][ T9520]  ? __warn+0xea/0x3d0
[  525.048000][ T9520]  ? preempt_schedule_notrace+0x62/0xe0
[  525.053588][ T9520]  ? debug_print_object+0x1a3/0x2b0
[  525.058956][ T9520]  ? report_bug+0x3c0/0x580
[  525.063548][ T9520]  ? handle_bug+0x54/0xa0
[  525.068109][ T9520]  ? exc_invalid_op+0x17/0x50
[  525.072829][ T9520]  ? asm_exc_invalid_op+0x1a/0x20
[  525.078055][ T9520]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  525.083386][ T9520]  ? __warn_printk+0x1a6/0x350
[  525.088282][ T9520]  ? debug_print_object+0x1a3/0x2b0
[  525.093546][ T9520]  ? debug_print_object+0x1a2/0x2b0
[  525.099036][ T9520]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  525.104540][ T9520]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  525.110400][ T9520]  debug_check_no_obj_freed+0x4b8/0x600
[  525.116143][ T9520]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  525.122279][ T9520]  ? kmem_cache_free+0x152/0x4b0
[  525.127533][ T9520]  ? kfree_skbmem+0x1a4/0x1f0
[  525.132286][ T9520]  kfree+0x2b3/0x4b0
[  525.136842][ T9520]  ? hci_release_dev+0x4d9/0x600
[  525.142319][ T9520]  hci_release_dev+0x4d9/0x600
[  525.147290][ T9520]  ? __pfx_hci_release_dev+0x10/0x10
[  525.152626][ T9520]  ? rcu_is_watching+0x12/0xc0
[  525.157516][ T9520]  ? kfree+0x274/0x4b0
[  525.161634][ T9520]  bt_host_release+0x6a/0xb0
[  525.166842][ T9520]  ? __pfx_bt_host_release+0x10/0x10
[  525.172173][ T9520]  device_release+0xa1/0x240
[  525.176905][ T9520]  kobject_put+0x1e4/0x5a0
[  525.181364][ T9520]  put_device+0x1f/0x30
[  525.185729][ T9520]  hci_inquiry+0x1f4/0x970
[  525.190179][ T9520]  ? __pfx_lock_release+0x10/0x10
[  525.195300][ T9520]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  525.200702][ T9520]  ? __pfx_hci_inquiry+0x10/0x10
[  525.205738][ T9520]  ? hci_sock_recvmsg+0x8e0/0x13c0
[  525.210878][ T9520]  ? __local_bh_enable_ip+0xa4/0x120
[  525.216280][ T9520]  hci_sock_ioctl+0x2bb/0x880
[  525.220990][ T9520]  ? __pfx_hci_sock_ioctl+0x10/0x10
[  525.226304][ T9520]  sock_do_ioctl+0x116/0x280
[  525.230927][ T9520]  ? __pfx_sock_do_ioctl+0x10/0x10
[  525.236121][ T9520]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[  525.243217][ T9520]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[  525.250186][ T9520]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  525.257136][ T9520]  sock_ioctl+0x228/0x6c0
[  525.261501][ T9520]  ? __pfx_sock_ioctl+0x10/0x10
[  525.266453][ T9520]  ? selinux_file_ioctl+0x180/0x270
[  525.271679][ T9520]  ? selinux_file_ioctl+0xb4/0x270
[  525.276930][ T9520]  ? __pfx_sock_ioctl+0x10/0x10
[  525.281814][ T9520]  __x64_sys_ioctl+0x18f/0x220
[  525.286670][ T9520]  do_syscall_64+0xcd/0x250
[  525.291208][ T9520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.297205][ T9520] RIP: 0033:0x7f296497e719
[  525.301648][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  525.321371][ T9520] RSP: 002b:00007f296583a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  525.329870][ T9520] RAX: ffffffffffffffda RBX: 00007f2964b36058 RCX: 00007f296497e719
[  525.337940][ T9520] RDX: 0000000020000000 RSI: 00000000800448f0 RDI: 000000000000000a
[  525.346520][ T9520] RBP: 00007f29649f12be R08: 0000000000000000 R09: 0000000000000000
[  525.354916][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.362908][ T9520] R13: 0000000000000001 R14: 00007f2964b36058 R15: 00007fffdbd507c8
[  525.370963][ T9520]  </TASK>
[  525.374099][ T9520] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  525.381388][ T9520] CPU: 0 UID: 0 PID: 9520 Comm: syz.5.633 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[  525.392000][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  525.402065][ T9520] Call Trace:
[  525.405333][ T9520]  <TASK>
[  525.408254][ T9520]  dump_stack_lvl+0x3d/0x1f0
[  525.412840][ T9520]  panic+0x71d/0x800
[  525.416729][ T9520]  ? __pfx_panic+0x10/0x10
[  525.421136][ T9520]  ? show_trace_log_lvl+0x29d/0x3d0
[  525.426339][ T9520]  ? debug_print_object+0x1a3/0x2b0
[  525.431531][ T9520]  check_panic_on_warn+0xab/0xb0
[  525.436483][ T9520]  __warn+0xf6/0x3d0
[  525.440413][ T9520]  ? preempt_schedule_notrace+0x62/0xe0
[  525.446000][ T9520]  ? debug_print_object+0x1a3/0x2b0
[  525.451226][ T9520]  report_bug+0x3c0/0x580
[  525.455594][ T9520]  handle_bug+0x54/0xa0
[  525.459783][ T9520]  exc_invalid_op+0x17/0x50
[  525.464310][ T9520]  asm_exc_invalid_op+0x1a/0x20
[  525.469192][ T9520] RIP: 0010:debug_print_object+0x1a3/0x2b0
[  525.475027][ T9520] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 bc d1 8b 41 56 4c 89 e6 48 c7 c7 e0 af d1 8b e8 fe 25 b9 fc 90 <0f> 0b 90 90 58 83 05 4d 34 ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  525.494653][ T9520] RSP: 0018:ffffc9000b62f818 EFLAGS: 00010282
[  525.500742][ T9520] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc900042b1000
[  525.508726][ T9520] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001
[  525.516710][ T9520] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  525.524693][ T9520] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1b680
[  525.532682][ T9520] R13: ffffffff8b6f77c0 R14: ffffffff8a120070 R15: ffffc9000b62f928
[  525.540670][ T9520]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  525.545995][ T9520]  ? __warn_printk+0x1a6/0x350
[  525.550933][ T9520]  ? debug_print_object+0x1a2/0x2b0
[  525.556167][ T9520]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  525.561482][ T9520]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  525.567321][ T9520]  debug_check_no_obj_freed+0x4b8/0x600
[  525.572902][ T9520]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  525.579002][ T9520]  ? kmem_cache_free+0x152/0x4b0
[  525.583959][ T9520]  ? kfree_skbmem+0x1a4/0x1f0
[  525.588662][ T9520]  kfree+0x2b3/0x4b0
[  525.592573][ T9520]  ? hci_release_dev+0x4d9/0x600
[  525.597535][ T9520]  hci_release_dev+0x4d9/0x600
[  525.602321][ T9520]  ? __pfx_hci_release_dev+0x10/0x10
[  525.607628][ T9520]  ? rcu_is_watching+0x12/0xc0
[  525.612416][ T9520]  ? kfree+0x274/0x4b0
[  525.616511][ T9520]  bt_host_release+0x6a/0xb0
[  525.621131][ T9520]  ? __pfx_bt_host_release+0x10/0x10
[  525.626444][ T9520]  device_release+0xa1/0x240
[  525.631062][ T9520]  kobject_put+0x1e4/0x5a0
[  525.635503][ T9520]  put_device+0x1f/0x30
[  525.639679][ T9520]  hci_inquiry+0x1f4/0x970
[  525.644117][ T9520]  ? __pfx_lock_release+0x10/0x10
[  525.649163][ T9520]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  525.654562][ T9520]  ? __pfx_hci_inquiry+0x10/0x10
[  525.659522][ T9520]  ? hci_sock_recvmsg+0x8e0/0x13c0
[  525.664653][ T9520]  ? __local_bh_enable_ip+0xa4/0x120
[  525.669960][ T9520]  hci_sock_ioctl+0x2bb/0x880
[  525.674664][ T9520]  ? __pfx_hci_sock_ioctl+0x10/0x10
[  525.679895][ T9520]  sock_do_ioctl+0x116/0x280
[  525.684526][ T9520]  ? __pfx_sock_do_ioctl+0x10/0x10
[  525.689667][ T9520]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[  525.696189][ T9520]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[  525.702727][ T9520]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  525.709611][ T9520]  sock_ioctl+0x228/0x6c0
[  525.713988][ T9520]  ? __pfx_sock_ioctl+0x10/0x10
[  525.718874][ T9520]  ? selinux_file_ioctl+0x180/0x270
[  525.724103][ T9520]  ? selinux_file_ioctl+0xb4/0x270
[  525.729247][ T9520]  ? __pfx_sock_ioctl+0x10/0x10
[  525.734128][ T9520]  __x64_sys_ioctl+0x18f/0x220
[  525.738922][ T9520]  do_syscall_64+0xcd/0x250
[  525.743458][ T9520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.749381][ T9520] RIP: 0033:0x7f296497e719
[  525.753814][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  525.773445][ T9520] RSP: 002b:00007f296583a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  525.781890][ T9520] RAX: ffffffffffffffda RBX: 00007f2964b36058 RCX: 00007f296497e719
[  525.789879][ T9520] RDX: 0000000020000000 RSI: 00000000800448f0 RDI: 000000000000000a
[  525.797865][ T9520] RBP: 00007f29649f12be R08: 0000000000000000 R09: 0000000000000000
[  525.805855][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.813837][ T9520] R13: 0000000000000001 R14: 00007f2964b36058 R15: 00007fffdbd507c8
[  525.821843][ T9520]  </TASK>
[  525.825112][ T9520] Kernel Offset: disabled
[  525.829432][ T9520] Rebooting in 86400 seconds..