last executing test programs:

6m18.168729825s ago: executing program 0 (id=196):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

6m11.179945974s ago: executing program 0 (id=212):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a310000000009000100"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a310000000009000100"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

6m9.30154723s ago: executing program 0 (id=216):
io_setup(0x7ed, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
io_setup(0xeb0, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = fsmount(r1, 0x0, 0x0)
fchdir(r6)
open(&(0x7f00000003c0)='.\x00', 0x800, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m7.06008095s ago: executing program 0 (id=219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

6m5.577268836s ago: executing program 0 (id=223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000100)=""/19, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)

6m4.311001859s ago: executing program 0 (id=225):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)

5m49.061193775s ago: executing program 32 (id=225):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)

2m24.025447592s ago: executing program 4 (id=931):
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f00000000c0)='z', 0x1, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m23.230520443s ago: executing program 4 (id=933):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24044880)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0xb)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103381)
getdents64(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
epoll_create1(0x0)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xff1)
unshare(0x64000600)

2m21.849436124s ago: executing program 4 (id=938):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
getresgid(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
getrusage(0x1, &(0x7f0000000300))
sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x377}], 0x1}, 0x20000044)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000b596"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r7}, 0x20)
shutdown(r7, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000004c0)=0x15)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

2m20.329441539s ago: executing program 4 (id=943):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
getresgid(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
getrusage(0x1, &(0x7f0000000300))
sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x377}], 0x1}, 0x20000044)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000b596"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r7}, 0x20)
shutdown(r7, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000004c0)=0x15)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

2m18.932357766s ago: executing program 4 (id=945):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
brk(0x75555ede6001)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r6, 0x1, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2m17.349598824s ago: executing program 4 (id=950):
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f00000000c0)='z', 0x1, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m2.290998322s ago: executing program 33 (id=950):
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f00000000c0)='z', 0x1, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

18.127305971s ago: executing program 6 (id=1255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2c203, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r5, 0x2)
r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
flock(r6, 0x1)

16.432629383s ago: executing program 6 (id=1261):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
shutdown(r0, 0x1)

14.904726743s ago: executing program 6 (id=1268):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2c203, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r5, 0x2)
r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
flock(r6, 0x1)
flock(r6, 0x2)
close(r5)
syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), 0x0)

13.967260858s ago: executing program 1 (id=1271):
syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)

12.837182198s ago: executing program 3 (id=1273):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
memfd_create(0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000200", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="10000400000000002000010000000000"], 0x7c, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$TCSETA(r2, 0x8910, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffa, @remote, 0x2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20005404)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000200)='}\x82),%\xe1}\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff)
close(r2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000a, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})

12.796934178s ago: executing program 6 (id=1274):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
read(0xffffffffffffffff, 0x0, 0x0)

11.717198407s ago: executing program 3 (id=1276):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)

11.354307724s ago: executing program 3 (id=1278):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @random="265184c2e6ea"})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x1)
shutdown(r3, 0x0)

10.758900729s ago: executing program 2 (id=1280):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000800000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.662362696s ago: executing program 2 (id=1281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r7, 0x1, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)

10.660897139s ago: executing program 5 (id=1282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x2, 0xf, 0x2b, 0x5, 0x42, 0x4, 0xfffffffd, 0xf, 0x6, 0x1, 0x56a, 0x7fffffff, 0x967d, 0x401, 0x7, 0xe36, 0x101, 0x1, 0xe8c, 0x2, 0x7e, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db", 0xd}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f0000000000)={0x0, 0x6})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket(0x2c, 0x3, 0x10000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

10.598405338s ago: executing program 1 (id=1283):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)

10.388826548s ago: executing program 5 (id=1284):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

9.357407234s ago: executing program 3 (id=1285):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [<r8=>0x0], [0x7, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x4, 0x4]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r8, 0x80000, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r11}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r11, r10, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r11, r10, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)

9.322517679s ago: executing program 2 (id=1286):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r6)

9.044562809s ago: executing program 1 (id=1287):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
getresgid(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
getrusage(0x1, &(0x7f0000000300))
sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x371}], 0x1}, 0x20000044)
r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000b596"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r8}, 0x20)
shutdown(r8, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000004c0)=0x15)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000))

6.908161143s ago: executing program 6 (id=1288):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800)
keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2)
add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c81, 0x9)
r1 = dup(r0)
unshare(0x2010000)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0)
listen(r3, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f00000000c0)={0x0, 0x40})
syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a0102030109022407000000000009040000026048fe0009050b000000000000090503030000000000"], 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

6.705405084s ago: executing program 5 (id=1289):
getpid()
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

6.676562191s ago: executing program 1 (id=1290):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

6.657284706s ago: executing program 2 (id=1291):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000800000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.655434594s ago: executing program 3 (id=1292):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
memfd_create(0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000200", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="10000400000000002000010000000000"], 0x7c, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$TCSETA(r2, 0x8910, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffa, @remote, 0x2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x5, @mcast2, 0xadb7}, 0x1c, 0x0}}], 0x8, 0x20005404)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000200)='}\x82),%\xe1}\x00', 0x0, 0xffffffffffffffff)
close(r2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000a, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})

6.600113302s ago: executing program 5 (id=1293):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

5.05464525s ago: executing program 1 (id=1294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

4.973699401s ago: executing program 5 (id=1295):
bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.782822016s ago: executing program 2 (id=1296):
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

4.78169558s ago: executing program 3 (id=1297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2c203, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r5, 0x2)
r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
flock(r6, 0x1)
flock(r6, 0x2)
close(r5)
syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), 0x0)

4.604855217s ago: executing program 1 (id=1298):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800)
keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2)
add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9)
r2 = dup(r0)
unshare(0x2010000)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0)
listen(r4, 0x8)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f00000000c0)={0x0, 0x40})
syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a0102030109022407000000000009040000026048fe0009050b000000000000090503030000000000"], 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

3.308405506s ago: executing program 6 (id=1299):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setpriority(0x2, 0x0, 0x400)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108)

3.155722513s ago: executing program 5 (id=1300):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='7\x00'], 0x20)

0s ago: executing program 2 (id=1301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r6)

kernel console output (not intermixed with test programs):

d solve the problem.
[   60.934853][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.946020][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.953371][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.979408][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.003910][ T5807] team0: Port device team_slave_1 added
[   61.023384][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.030388][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.056421][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.070717][ T5808] hsr_slave_0: entered promiscuous mode
[   61.076680][ T5808] hsr_slave_1: entered promiscuous mode
[   61.100464][ T5819] hsr_slave_0: entered promiscuous mode
[   61.106406][ T5819] hsr_slave_1: entered promiscuous mode
[   61.112386][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.120166][ T5819] Cannot create hsr debugfs directory
[   61.139737][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.146883][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.173240][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.206002][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.212991][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.238913][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.241042][ T5825] Bluetooth: hci1: command tx timeout
[   61.310185][ T5825] Bluetooth: hci2: command tx timeout
[   61.314891][ T5816] Bluetooth: hci3: command tx timeout
[   61.316142][ T5821] Bluetooth: hci4: command tx timeout
[   61.321807][ T5816] Bluetooth: hci0: command tx timeout
[   61.336039][ T5811] hsr_slave_0: entered promiscuous mode
[   61.342181][ T5811] hsr_slave_1: entered promiscuous mode
[   61.347970][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.355636][ T5811] Cannot create hsr debugfs directory
[   61.364147][ T5807] hsr_slave_0: entered promiscuous mode
[   61.370273][ T5807] hsr_slave_1: entered promiscuous mode
[   61.376078][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.383799][ T5807] Cannot create hsr debugfs directory
[   61.402914][ T5815] hsr_slave_0: entered promiscuous mode
[   61.408833][ T5815] hsr_slave_1: entered promiscuous mode
[   61.414976][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.422796][ T5815] Cannot create hsr debugfs directory
[   61.747005][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.756989][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.772324][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.781932][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.821309][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.830082][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.851408][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.861121][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.911834][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.934911][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.943525][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.958628][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.026119][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.036581][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.047838][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.067105][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.108443][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.147479][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.158110][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.169379][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.186515][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.193981][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.218545][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   62.228686][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.248623][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.255833][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.277812][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.284896][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.302024][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   62.318613][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   62.333790][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.340895][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.365649][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.372747][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.399613][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.407287][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.439027][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.466099][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.473200][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.496388][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   62.509055][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.516123][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.564980][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.576367][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   62.576379][   T30] audit: type=1400 audit(1746923193.281:90): avc:  denied  { sys_module } for  pid=5819 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   62.603584][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.611088][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.666204][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.759787][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   62.797242][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.804376][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.856191][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.863341][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.908710][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.986820][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.019734][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.106783][ T5819] veth0_vlan: entered promiscuous mode
[   63.132183][ T5808] veth0_vlan: entered promiscuous mode
[   63.152365][ T5819] veth1_vlan: entered promiscuous mode
[   63.163627][ T5808] veth1_vlan: entered promiscuous mode
[   63.202278][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.218842][ T5819] veth0_macvtap: entered promiscuous mode
[   63.237415][ T5819] veth1_macvtap: entered promiscuous mode
[   63.257388][ T5811] veth0_vlan: entered promiscuous mode
[   63.267494][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.287831][ T5808] veth0_macvtap: entered promiscuous mode
[   63.305185][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.320439][ T5816] Bluetooth: hci1: command tx timeout
[   63.333314][ T5808] veth1_macvtap: entered promiscuous mode
[   63.343224][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.369061][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.381440][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.390197][ T5816] Bluetooth: hci0: command tx timeout
[   63.392546][ T5825] Bluetooth: hci2: command tx timeout
[   63.396589][ T5816] Bluetooth: hci4: command tx timeout
[   63.402473][ T5821] Bluetooth: hci3: command tx timeout
[   63.413354][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.422326][ T5811] veth1_vlan: entered promiscuous mode
[   63.434011][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.445001][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.454168][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.463047][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.499684][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.511623][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.523286][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.535647][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.547039][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.556557][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.565467][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.577019][ T5815] veth0_vlan: entered promiscuous mode
[   63.614155][ T5815] veth1_vlan: entered promiscuous mode
[   63.667457][ T5811] veth0_macvtap: entered promiscuous mode
[   63.677226][ T5811] veth1_macvtap: entered promiscuous mode
[   63.738136][ T5815] veth0_macvtap: entered promiscuous mode
[   63.763565][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.775997][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.783529][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.802348][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.816697][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.827993][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.838129][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.849260][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.860675][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.875754][ T5807] veth0_vlan: entered promiscuous mode
[   63.888938][ T5815] veth1_macvtap: entered promiscuous mode
[   63.897412][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.908042][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.917943][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.928433][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.939048][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.953013][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.960330][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.969465][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.978707][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.979645][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.997731][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.013808][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.018793][ T5807] veth1_vlan: entered promiscuous mode
[   64.021759][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.031480][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.047753][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.057887][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.068736][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.078577][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.089228][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.099768][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.120720][   T30] audit: type=1400 audit(1746923194.831:91): avc:  denied  { mounton } for  pid=5819 comm="syz-executor" path="/root/syzkaller.2Beg7x/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   64.144976][   T30] audit: type=1400 audit(1746923194.841:92): avc:  denied  { mount } for  pid=5819 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.167485][   T30] audit: type=1400 audit(1746923194.841:93): avc:  denied  { mounton } for  pid=5819 comm="syz-executor" path="/root/syzkaller.2Beg7x/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   64.177802][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.204122][   T30] audit: type=1400 audit(1746923194.841:94): avc:  denied  { mount } for  pid=5819 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   64.226140][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.226154][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.226167][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.240316][   T30] audit: type=1400 audit(1746923194.841:95): avc:  denied  { mounton } for  pid=5819 comm="syz-executor" path="/root/syzkaller.2Beg7x/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   64.256611][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.283648][   T30] audit: type=1400 audit(1746923194.841:96): avc:  denied  { mounton } for  pid=5819 comm="syz-executor" path="/root/syzkaller.2Beg7x/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   64.328291][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.331662][   T30] audit: type=1400 audit(1746923194.841:97): avc:  denied  { unmount } for  pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.343612][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.368683][   T30] audit: type=1400 audit(1746923194.871:98): avc:  denied  { mounton } for  pid=5819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   64.377636][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.395906][   T30] audit: type=1400 audit(1746923194.871:99): avc:  denied  { mount } for  pid=5819 comm="syz-executor" name="/" dev="gadgetfs" ino=6675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   64.451843][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.467307][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.476806][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.489633][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.561213][ T5807] veth0_macvtap: entered promiscuous mode
[   64.597393][ T5807] veth1_macvtap: entered promiscuous mode
[   64.777172][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.787903][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.801374][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.813365][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.823891][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.843375][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.968393][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.169131][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.188285][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.816636][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.842253][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.847134][ T5825] Bluetooth: hci1: command tx timeout
[   65.857504][ T5825] Bluetooth: hci4: command tx timeout
[   65.858309][ T5813] Bluetooth: hci2: command tx timeout
[   65.864279][ T5825] Bluetooth: hci3: command tx timeout
[   65.870867][ T5821] Bluetooth: hci0: command tx timeout
[   65.879581][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.879596][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.879605][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.879616][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.879623][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.932843][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.946407][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.968917][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.992098][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.062259][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.084857][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.093918][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.103549][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.116204][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.138686][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.551530][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.677262][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.715307][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.730653][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.802875][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.830687][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.178192][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.334268][ T5928] syz.2.3: attempt to access beyond end of device
[   67.334268][ T5928] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[   67.347182][ T5928] FAT-fs (loop5): unable to read boot sector
[   67.427693][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.530147][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   67.689974][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.699060][   T30] kauditd_printk_skb: 19 callbacks suppressed
[   67.699073][   T30] audit: type=1400 audit(2000000001.920:119): avc:  denied  { create } for  pid=5919 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   67.867644][ T5927] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   67.876513][ T5821] Bluetooth: hci2: command tx timeout
[   67.878358][ T5825] Bluetooth: hci4: command tx timeout
[   67.882030][ T5824] Bluetooth: hci1: command tx timeout
[   67.890414][ T5927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'.
[   67.902456][   T30] audit: type=1400 audit(2000000002.120:120): avc:  denied  { unlink } for  pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.938161][   T30] audit: type=1400 audit(2000000002.150:121): avc:  denied  { connect } for  pid=5922 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.963765][ T5825] Bluetooth: hci0: command tx timeout
[   67.963771][ T5821] Bluetooth: hci3: command tx timeout
[   67.975309][   T30] audit: type=1400 audit(2000000002.150:122): avc:  denied  { read write } for  pid=5922 comm="syz.1.10" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   68.123933][   T30] audit: type=1400 audit(2000000002.150:123): avc:  denied  { open } for  pid=5922 comm="syz.1.10" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   68.151253][   T30] audit: type=1400 audit(2000000002.150:124): avc:  denied  { ioctl } for  pid=5922 comm="syz.1.10" path="/dev/video1" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   68.178470][   T30] audit: type=1400 audit(2000000002.160:125): avc:  denied  { ioctl } for  pid=5919 comm="syz.0.9" path="socket:[7157]" dev="sockfs" ino=7157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   68.214537][   T30] audit: type=1400 audit(2000000002.160:126): avc:  denied  { setopt } for  pid=5919 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   68.249741][ T5927] team0: Port device geneve0 added
[   68.272912][ T5920] batadv_slave_1: entered promiscuous mode
[   68.278939][ T5920] batadv_slave_1: left promiscuous mode
[   68.866091][   T30] audit: type=1400 audit(2000000003.090:127): avc:  denied  { read write } for  pid=5934 comm="syz.0.12" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   69.057050][   T30] audit: type=1400 audit(2000000003.090:128): avc:  denied  { open } for  pid=5934 comm="syz.0.12" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   71.010705][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   71.017616][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[   71.410988][ T5955] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   71.450048][ T5955] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   71.622031][ T5963] Zero length message leads to an empty skb
[   72.774655][ T5977] block device autoloading is deprecated and will be removed.
[   72.785040][ T5977] syz.3.22: attempt to access beyond end of device
[   72.785040][ T5977] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   72.854946][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   72.877442][   T30] kauditd_printk_skb: 25 callbacks suppressed
[   72.877461][   T30] audit: type=1400 audit(2000000001.990:154): avc:  denied  { ioctl } for  pid=5973 comm="syz.3.22" path="socket:[7629]" dev="sockfs" ino=7629 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   72.957347][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   72.990122][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.060096][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   73.243056][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   73.264493][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   73.290100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   73.537488][   T30] audit: type=1400 audit(2000000002.680:155): avc:  denied  { create } for  pid=5978 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   73.582621][   T30] audit: type=1400 audit(2000000002.680:156): avc:  denied  { read } for  pid=5978 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   73.656738][ T5982] netlink: 'syz.2.24': attribute type 10 has an invalid length.
[   73.665726][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24'.
[   73.681404][   T30] audit: type=1400 audit(2000000002.760:157): avc:  denied  { setopt } for  pid=5978 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   73.704173][ T5982] team0: Port device geneve0 added
[   73.739179][   T30] audit: type=1400 audit(2000000002.760:158): avc:  denied  { write } for  pid=5978 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   73.773547][   T30] audit: type=1400 audit(2000000002.920:159): avc:  denied  { read } for  pid=5985 comm="syz.4.27" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   73.795923][    C1] vkms_vblank_simulate: vblank timer overrun
[   73.815405][   T30] audit: type=1400 audit(2000000002.920:160): avc:  denied  { open } for  pid=5985 comm="syz.4.27" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   73.839067][   T30] audit: type=1400 audit(2000000002.960:161): avc:  denied  { ioctl } for  pid=5985 comm="syz.4.27" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   73.863374][    C1] vkms_vblank_simulate: vblank timer overrun
[   73.992584][ T5989] overlayfs: missing 'lowerdir'
[   74.761496][ T5997] syz.4.28: attempt to access beyond end of device
[   74.761496][ T5997] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[   74.774427][ T5997] FAT-fs (loop9): unable to read boot sector
[   75.275950][ T6004] netlink: 'syz.4.30': attribute type 4 has an invalid length.
[   75.625091][ T6014] =======================================================
[   75.625091][ T6014] WARNING: The mand mount option has been deprecated and
[   75.625091][ T6014]          and is ignored by this kernel. Remove the mand
[   75.625091][ T6014]          option from the mount to silence this warning.
[   75.625091][ T6014] =======================================================
[   75.659945][    C1] vkms_vblank_simulate: vblank timer overrun
[   75.667135][ T6014] new mount options do not match the existing superblock, will be ignored
[   75.710912][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.729702][ T6015] x_tables: duplicate underflow at hook 1
[   76.047065][   T80] cfg80211: failed to load regulatory.db
[   76.460294][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.530598][   T30] audit: type=1400 audit(2000000005.660:162): avc:  denied  { bind } for  pid=6018 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   76.593590][   T30] audit: type=1400 audit(2000000005.710:163): avc:  denied  { ioctl } for  pid=6021 comm="syz.3.34" path="socket:[8322]" dev="sockfs" ino=8322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   77.429275][ T6028] syz.0.39: attempt to access beyond end of device
[   77.429275][ T6028] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   78.043354][ T6041] netlink: 'syz.0.42': attribute type 10 has an invalid length.
[   78.051071][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.42'.
[   78.081467][ T6041] team0: Port device geneve0 added
[   78.825466][   T30] audit: type=1400 audit(2000000007.920:164): avc:  denied  { wake_alarm } for  pid=6035 comm="syz.2.41" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.950053][ T6053] syz.4.44: attempt to access beyond end of device
[   79.950053][ T6053] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[   79.962919][ T6053] FAT-fs (loop9): unable to read boot sector
[   80.369132][   T30] audit: type=1400 audit(2000000009.510:165): avc:  denied  { setopt } for  pid=6055 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.687919][   T30] audit: type=1400 audit(2000000009.510:166): avc:  denied  { bind } for  pid=6055 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.714020][   T30] audit: type=1400 audit(2000000009.510:167): avc:  denied  { write } for  pid=6055 comm="syz.3.47" path="socket:[7764]" dev="sockfs" ino=7764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.798932][ T6073] new mount options do not match the existing superblock, will be ignored
[   81.513388][   T30] audit: type=1400 audit(2000000010.390:168): avc:  denied  { create } for  pid=6068 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   81.606532][   T30] audit: type=1400 audit(2000000010.740:169): avc:  denied  { read write } for  pid=6080 comm="syz.2.53" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   81.633952][   T30] audit: type=1400 audit(2000000010.740:170): avc:  denied  { open } for  pid=6080 comm="syz.2.53" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   81.764256][   T30] audit: type=1400 audit(2000000010.750:171): avc:  denied  { unmount } for  pid=6080 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   82.696724][   T30] audit: type=1400 audit(2000000000.380:172): avc:  denied  { create } for  pid=6103 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   82.720839][   T30] audit: type=1400 audit(2000000000.390:173): avc:  denied  { connect } for  pid=6103 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   84.194033][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   84.194064][   T30] audit: type=1400 audit(2000000001.880:178): avc:  denied  { write } for  pid=6111 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.364387][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.4.60'.
[   85.215603][   T30] audit: type=1400 audit(2000000002.050:179): avc:  denied  { nlmsg_write } for  pid=6111 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   87.663307][   T30] audit: type=1400 audit(2000000005.350:180): avc:  denied  { name_bind } for  pid=6148 comm="syz.4.67" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   87.828834][   T30] audit: type=1400 audit(2000000005.350:181): avc:  denied  { node_bind } for  pid=6148 comm="syz.4.67" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   88.872480][   T30] audit: type=1400 audit(2000000006.560:182): avc:  denied  { read write } for  pid=6153 comm="syz.4.69" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   89.572439][ T6163] syz.2.71: attempt to access beyond end of device
[   89.572439][ T6163] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[   89.572506][ T6163] FAT-fs (loop5): unable to read boot sector
[   90.261089][   T30] audit: type=1400 audit(2000000006.590:183): avc:  denied  { open } for  pid=6153 comm="syz.4.69" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.261129][   T30] audit: type=1400 audit(2000000006.600:184): avc:  denied  { ioctl } for  pid=6153 comm="syz.4.69" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   90.270207][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.665790][   T30] audit: type=1400 audit(2000000003.550:185): avc:  denied  { setopt } for  pid=6179 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   92.859934][ T5858] usb 5-1: device not accepting address 2, error -71
[   93.086132][ T6188] veth0: entered promiscuous mode
[   93.157215][   T30] audit: type=1400 audit(2000000003.980:186): avc:  denied  { write } for  pid=6179 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   93.564636][ T6179] veth0: left promiscuous mode
[   93.760001][   T30] audit: type=1400 audit(2000000004.630:187): avc:  denied  { read } for  pid=6191 comm="syz.0.79" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   93.801735][   T30] audit: type=1400 audit(2000000004.630:188): avc:  denied  { open } for  pid=6191 comm="syz.0.79" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   93.867938][   T30] audit: type=1400 audit(2000000004.720:189): avc:  denied  { create } for  pid=6191 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   94.718711][   T30] audit: type=1400 audit(2000000004.730:190): avc:  denied  { setopt } for  pid=6191 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.635063][ T6208] syz.4.82: attempt to access beyond end of device
[   96.635063][ T6208] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[   96.647762][ T6208] FAT-fs (loop9): unable to read boot sector
[   97.338766][ T6223] netlink: 52 bytes leftover after parsing attributes in process `syz.3.84'.
[   97.873057][   T30] audit: type=1400 audit(2000000001.610:191): avc:  denied  { create } for  pid=6213 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   98.096557][ T6221] syz.2.86: attempt to access beyond end of device
[   98.096557][ T6221] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[   98.109263][ T6221] FAT-fs (loop5): unable to read boot sector
[   98.900184][   T30] audit: type=1400 audit(2000000001.610:192): avc:  denied  { write } for  pid=6213 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  102.722678][ T6255] netlink: 'syz.2.94': attribute type 4 has an invalid length.
[  102.906996][ T6261] syz.3.93: attempt to access beyond end of device
[  102.906996][ T6261] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  102.919771][ T6261] FAT-fs (loop7): unable to read boot sector
[  108.460431][ T6291] fuse: Bad value for 'rootmode'
[  109.260949][ T6299] x_tables: duplicate underflow at hook 1
[  111.519225][   T30] audit: type=1400 audit(2000000015.790:193): avc:  denied  { create } for  pid=6306 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  111.553730][   T30] audit: type=1400 audit(2000000015.820:194): avc:  denied  { bind } for  pid=6306 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  111.578370][   T30] audit: type=1400 audit(2000000015.820:195): avc:  denied  { setopt } for  pid=6306 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  111.612815][   T30] audit: type=1400 audit(2000000015.850:196): avc:  denied  { accept } for  pid=6306 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  111.780474][ T6312] syz.1.111: attempt to access beyond end of device
[  111.780474][ T6312] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  111.780874][ T6323] syz.0.109: attempt to access beyond end of device
[  111.780874][ T6323] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  111.793219][ T6312] FAT-fs (loop3): unable to read boot sector
[  111.805881][ T6323] FAT-fs (loop1): unable to read boot sector
[  112.591495][   T30] audit: type=1400 audit(2000000015.850:197): avc:  denied  { write } for  pid=6306 comm="syz.4.108" path="socket:[8757]" dev="sockfs" ino=8757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  112.617284][   T30] audit: type=1400 audit(2000000015.850:198): avc:  denied  { read } for  pid=6306 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  112.675186][   T30] audit: type=1400 audit(2000000016.840:199): avc:  denied  { write } for  pid=6318 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  113.192183][ T6334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.011984][ T6352] x_tables: duplicate underflow at hook 1
[  119.704262][ T6381] capability: warning: `syz.2.126' uses deprecated v2 capabilities in a way that may be insecure
[  120.284861][   T30] audit: type=1400 audit(2000000004.380:200): avc:  denied  { read write } for  pid=6377 comm="syz.3.127" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  120.379256][   T30] audit: type=1400 audit(2000000004.380:201): avc:  denied  { open } for  pid=6377 comm="syz.3.127" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  121.920261][   T24] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  121.970019][   T30] audit: type=1400 audit(2000000006.060:202): avc:  denied  { bind } for  pid=6387 comm="syz.1.129" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  122.610252][   T30] audit: type=1400 audit(2000000006.070:203): avc:  denied  { node_bind } for  pid=6387 comm="syz.1.129" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  122.669986][   T24] usb 4-1: device descriptor read/64, error -71
[  124.152271][ T6408] x_tables: duplicate underflow at hook 1
[  126.330304][   T30] audit: type=1400 audit(2000000001.970:204): avc:  denied  { sys_module } for  pid=6414 comm="syz.2.137" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  130.643568][   T30] audit: type=1400 audit(2000000005.850:205): avc:  denied  { create } for  pid=6451 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  131.658891][ T6466] x_tables: duplicate underflow at hook 1
[  131.684881][   T80] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[  132.501157][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.507463][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  133.286630][   T80] usb 1-1: device descriptor read/all, error -71
[  136.170549][ T6515] netlink: 'syz.1.160': attribute type 4 has an invalid length.
[  136.621855][ T6517] netlink: 'syz.2.159': attribute type 4 has an invalid length.
[  137.165546][ T6518] x_tables: duplicate underflow at hook 1
[  137.730646][   T30] audit: type=1400 audit(2000000013.680:206): avc:  denied  { ioctl } for  pid=6526 comm="syz.2.164" path="socket:[9316]" dev="sockfs" ino=9316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  138.790448][   T30] audit: type=1400 audit(2000000014.680:207): avc:  denied  { create } for  pid=6534 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  138.968186][   T30] audit: type=1400 audit(2000000014.680:208): avc:  denied  { write } for  pid=6534 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  139.123693][   T30] audit: type=1400 audit(2000000015.070:209): avc:  denied  { name_bind } for  pid=6541 comm="syz.1.169" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  139.235819][   T30] audit: type=1400 audit(2000000015.120:210): avc:  denied  { create } for  pid=6519 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  140.950493][ T6570] syz.2.174: attempt to access beyond end of device
[  140.950493][ T6570] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  140.963802][ T6570] FAT-fs (loop5): unable to read boot sector
[  142.473463][ T6580] x_tables: duplicate underflow at hook 1
[  143.298027][ T6595] syz.4.179: attempt to access beyond end of device
[  143.298027][ T6595] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  143.311454][ T6595] FAT-fs (loop9): unable to read boot sector
[  147.697166][   T30] audit: type=1400 audit(2000000005.250:211): avc:  denied  { ioctl } for  pid=6614 comm="syz.4.187" path="socket:[9450]" dev="sockfs" ino=9450 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  148.691756][   T30] audit: type=1400 audit(2000000005.260:212): avc:  denied  { bind } for  pid=6614 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.131265][   T30] audit: type=1400 audit(2000000005.260:213): avc:  denied  { listen } for  pid=6614 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.388113][ T6624] wg2: entered promiscuous mode
[  149.393236][ T6624] wg2: entered allmulticast mode
[  149.488126][ T6634] netlink: 'syz.1.190': attribute type 4 has an invalid length.
[  150.530925][ T6633] netlink: 'syz.4.191': attribute type 4 has an invalid length.
[  152.526484][ T6662] overlayfs: conflicting lowerdir path
[  152.543704][   T30] audit: type=1400 audit(2000000000.640:214): avc:  denied  { unlink } for  pid=6653 comm="syz.0.196" name="#1" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  152.575546][ T6663] overlayfs: missing 'lowerdir'
[  155.105580][ T6685] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  158.009572][   T30] audit: type=1400 audit(2000000005.410:215): avc:  denied  { create } for  pid=6692 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  158.060515][ T6701] wg2: entered promiscuous mode
[  158.065496][ T6701] wg2: entered allmulticast mode
[  158.072354][   T30] audit: type=1400 audit(2000000005.970:216): avc:  denied  { ioctl } for  pid=6692 comm="syz.4.205" path="socket:[9555]" dev="sockfs" ino=9555 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  158.564702][   T30] audit: type=1400 audit(2000000006.650:217): avc:  denied  { mounton } for  pid=6706 comm="syz.4.208" path="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  159.315578][ T6719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.212'.
[  160.268235][   T30] audit: type=1400 audit(2000000000.400:218): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  165.401022][ T6774] netlink: 5 bytes leftover after parsing attributes in process `syz.2.226'.
[  165.413789][ T6774] netlink: 5 bytes leftover after parsing attributes in process `syz.2.226'.
[  165.423103][ T6774] netlink: 5 bytes leftover after parsing attributes in process `syz.2.226'.
[  168.053463][ T6791] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  170.572548][ T6800] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  172.103181][ T6810] syz.4.232: attempt to access beyond end of device
[  172.103181][ T6810] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  172.116318][ T6810] FAT-fs (loop9): unable to read boot sector
[  172.680641][ T6814] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  173.643766][ T6819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.235'.
[  175.161646][   T30] audit: type=1400 audit(2000000015.300:219): avc:  denied  { execute } for  pid=6827 comm="syz.2.237" name="file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  176.720579][ T6828] process 'syz.2.237' launched './file0' with NULL argv: empty string added
[  176.830111][   T30] audit: type=1400 audit(2000000016.890:220): avc:  denied  { execute_no_trans } for  pid=6827 comm="syz.2.237" path="/54/file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  178.049935][ T6849] mmap: syz.1.244 (6849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  179.260364][ T6858] wg2: entered promiscuous mode
[  181.405053][ T6877] netlink: 'syz.1.248': attribute type 4 has an invalid length.
[  181.499657][ T6884] wg2: left allmulticast mode
[  182.141712][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.150336][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.162117][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.170320][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.177890][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.627830][ T6886] chnl_net:caif_netlink_parms(): no params data found
[  184.282468][   T54] Bluetooth: hci5: command tx timeout
[  184.385993][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.774184][ T6919] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  185.359928][   T30] audit: type=1400 audit(2000000024.930:221): avc:  denied  { relabelto } for  pid=6914 comm="syz.2.261" name="61" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  185.390117][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.640513][   T30] audit: type=1400 audit(2000000024.930:222): avc:  denied  { associate } for  pid=6914 comm="syz.2.261" name="61" dev="tmpfs" ino=338 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  185.651826][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  185.673430][ T5816] Bluetooth: hci0: command 0x0406 tx timeout
[  185.679965][ T5816] Bluetooth: hci3: command 0x0406 tx timeout
[  185.687202][ T5816] Bluetooth: hci2: command 0x0406 tx timeout
[  185.720037][ T6886] bridge_slave_0: entered allmulticast mode
[  185.727168][ T6886] bridge_slave_0: entered promiscuous mode
[  185.753492][   T30] audit: type=1400 audit(2000000025.820:223): avc:  denied  { write } for  pid=5815 comm="syz-executor" name="61" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  185.793865][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.833141][   T30] audit: type=1400 audit(2000000025.820:224): avc:  denied  { remove_name } for  pid=5815 comm="syz-executor" name="file1" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  185.836643][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.862390][   T30] audit: type=1400 audit(2000000025.820:225): avc:  denied  { rmdir } for  pid=5815 comm="syz-executor" name="61" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  186.027575][ T6886] bridge_slave_1: entered allmulticast mode
[  186.037066][ T6886] bridge_slave_1: entered promiscuous mode
[  186.051706][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  186.208163][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.220145][   T10] usb 5-1: Using ep0 maxpacket: 8
[  186.224305][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.228112][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.248226][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 13
[  186.362084][ T6934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'.
[  186.372128][ T5821] Bluetooth: hci5: command tx timeout
[  186.660078][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  186.690303][   T10] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  186.708149][   T10] usb 5-1: Product: syz
[  186.716602][   T10] usb 5-1: Manufacturer: syz
[  186.734994][   T10] usb 5-1: SerialNumber: syz
[  186.790842][   T10] usb 5-1: config 0 descriptor??
[  186.805562][ T6886] team0: Port device team_slave_0 added
[  186.884533][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.065868][ T6886] team0: Port device team_slave_1 added
[  187.133040][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.232799][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.264016][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.229565][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.238591][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.282139][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.321218][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.430057][ T5821] Bluetooth: hci5: command tx timeout
[  188.588629][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.644023][ T6886] hsr_slave_0: entered promiscuous mode
[  188.661659][ T6886] hsr_slave_1: entered promiscuous mode
[  188.684129][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.695600][ T6886] Cannot create hsr debugfs directory
[  188.778780][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.289680][   T30] audit: type=1400 audit(2000000030.420:226): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.470305][   T10] usb 5-1: USB disconnect, device number 4
[  190.478387][   T30] audit: type=1400 audit(2000000030.470:227): avc:  denied  { read } for  pid=5479 comm="dhcpcd" name="n100" dev="tmpfs" ino=2541 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  190.507081][   T30] audit: type=1400 audit(2000000030.470:228): avc:  denied  { open } for  pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2541 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  190.542357][ T5821] Bluetooth: hci5: command tx timeout
[  190.549350][   T30] audit: type=1400 audit(2000000030.470:229): avc:  denied  { getattr } for  pid=5479 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2541 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  190.597171][ T1100] bridge_slave_1: left allmulticast mode
[  190.615933][ T1100] bridge_slave_1: left promiscuous mode
[  190.632584][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.668596][ T1100] bridge_slave_0: left allmulticast mode
[  190.677351][ T1100] bridge_slave_0: left promiscuous mode
[  190.683456][   T30] audit: type=1400 audit(2000000030.820:230): avc:  denied  { read } for  pid=6975 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.689151][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.762235][   T30] audit: type=1400 audit(2000000030.830:231): avc:  denied  { open } for  pid=6975 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  190.824498][   T30] audit: type=1400 audit(2000000030.830:232): avc:  denied  { getattr } for  pid=6975 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.025870][ T6990] overlayfs: overlapping lowerdir path
[  191.117466][ T1100] team0: Port device geneve0 removed
[  191.200090][   T30] audit: type=1400 audit(2000000031.330:233): avc:  denied  { write } for  pid=6973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.250317][   T30] audit: type=1400 audit(2000000031.340:234): avc:  denied  { add_name } for  pid=6973 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.305795][   T30] audit: type=1400 audit(2000000031.340:235): avc:  denied  { create } for  pid=6973 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  191.349271][   T30] audit: type=1400 audit(2000000031.340:236): avc:  denied  { write } for  pid=6973 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2553 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  191.454390][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.472194][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.487212][ T1100] bond0 (unregistering): Released all slaves
[  191.580941][ T6886] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  191.603392][ T6886] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  191.634252][ T6886] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  191.655763][ T6886] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  193.805619][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  193.812070][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  195.148067][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.287115][ T6886] 8021q: adding VLAN 0 to HW filter on device team0
[  196.310257][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  196.310337][   T30] audit: type=1400 audit(2000000036.430:240): avc:  denied  { write } for  pid=7024 comm="syz.3.283" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  196.486451][ T7033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.588918][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.596232][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.693723][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.700927][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.912595][ T7046] netlink: 52 bytes leftover after parsing attributes in process `syz.4.286'.
[  197.313728][ T1100] hsr_slave_0: left promiscuous mode
[  197.323920][ T1100] hsr_slave_1: left promiscuous mode
[  197.343499][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.357276][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.386922][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.410484][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.479578][ T1100] veth1_macvtap: left promiscuous mode
[  197.495165][ T1100] veth0_macvtap: left promiscuous mode
[  197.506767][ T1100] veth1_vlan: left promiscuous mode
[  197.517715][ T1100] veth0_vlan: left promiscuous mode
[  198.068979][ T1100] team0 (unregistering): Port device team_slave_1 removed
[  198.119562][ T1100] team0 (unregistering): Port device team_slave_0 removed
[  198.760336][ T7073] syz.2.293: attempt to access beyond end of device
[  198.760336][ T7073] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  198.773204][ T7073] FAT-fs (loop5): unable to read boot sector
[  201.266464][ T7077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.345903][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.375371][   T30] audit: type=1326 audit(2000000043.960:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.650089][   T30] audit: type=1326 audit(2000000043.970:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.734270][   T30] audit: type=1326 audit(2000000043.970:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.775295][   T30] audit: type=1326 audit(2000000043.970:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.800576][ T7138] netlink: 'syz.1.307': attribute type 10 has an invalid length.
[  204.808299][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'.
[  204.824072][   T30] audit: type=1326 audit(2000000043.970:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.849141][   T30] audit: type=1326 audit(2000000043.970:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.874477][   T30] audit: type=1400 audit(2000000043.970:247): avc:  denied  { create } for  pid=7123 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  204.902320][   T30] audit: type=1326 audit(2000000043.970:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.952317][   T30] audit: type=1326 audit(2000000043.970:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  204.987571][ T7139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  205.018946][   T30] audit: type=1326 audit(2000000043.970:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  205.367540][ T7156] netlink: 'syz.3.310': attribute type 4 has an invalid length.
[  205.782696][ T7157] overlayfs: overlapping lowerdir path
[  207.233742][ T6886] veth0_vlan: entered promiscuous mode
[  207.247432][ T6886] veth1_vlan: entered promiscuous mode
[  207.278042][ T6886] veth0_macvtap: entered promiscuous mode
[  207.315274][ T6886] veth1_macvtap: entered promiscuous mode
[  207.364263][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.387343][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.420950][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.431519][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.441453][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.470136][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.480030][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.506946][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.320114][ T7179] netlink: 'syz.1.314': attribute type 4 has an invalid length.
[  208.501038][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.523002][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.796951][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.816462][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.870014][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.894060][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.939889][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.959937][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.980510][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.024023][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.174376][ T6886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.185936][ T6886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.205125][ T6886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.233161][ T6886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.915390][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.936040][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.955912][ T7212] netlink: 'syz.3.321': attribute type 4 has an invalid length.
[  211.128537][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.195558][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.250605][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  211.250621][   T30] audit: type=1400 audit(2000000051.390:279): avc:  denied  { mount } for  pid=6886 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  211.314386][   T30] audit: type=1400 audit(2000000051.430:280): avc:  denied  { mounton } for  pid=6886 comm="syz-executor" path="/root/syzkaller.MDfLiD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  211.399197][   T30] audit: type=1400 audit(2000000051.530:281): avc:  denied  { mount } for  pid=6886 comm="syz-executor" name="/" dev="gadgetfs" ino=6675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  219.147355][ T7282] overlayfs: failed to clone upperpath
[  220.277543][ T7298] netlink: 'syz.3.335': attribute type 4 has an invalid length.
[  221.476480][ T7308] wg2: entered allmulticast mode
[  222.204535][   T30] audit: type=1400 audit(2000000062.310:282): avc:  denied  { create } for  pid=7306 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  222.819130][ T7322] netlink: 'syz.4.340': attribute type 4 has an invalid length.
[  225.169968][   T30] audit: type=1400 audit(2000000065.300:283): avc:  denied  { ioctl } for  pid=7353 comm="syz.5.347" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12311 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  225.808927][ T7338] netlink: 56 bytes leftover after parsing attributes in process `syz.4.343'.
[  225.990319][   T30] audit: type=1400 audit(2000000065.400:284): avc:  denied  { create } for  pid=7353 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  226.220349][   T30] audit: type=1400 audit(2000000065.410:285): avc:  denied  { bind } for  pid=7353 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  226.239871][   T30] audit: type=1400 audit(2000000065.410:286): avc:  denied  { name_bind } for  pid=7353 comm="syz.5.347" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  226.261736][   T30] audit: type=1400 audit(2000000065.410:287): avc:  denied  { node_bind } for  pid=7353 comm="syz.5.347" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  226.282532][   T30] audit: type=1400 audit(2000000065.470:288): avc:  denied  { setopt } for  pid=7353 comm="syz.5.347" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  229.153957][ T7393] syz.5.353: attempt to access beyond end of device
[  229.153957][ T7393] loop11: rw=0, sector=0, nr_sectors = 1 limit=0
[  229.167078][ T7393] FAT-fs (loop11): unable to read boot sector
[  232.130561][   T30] audit: type=1400 audit(2000000072.250:289): avc:  denied  { read write } for  pid=7421 comm="syz.5.361" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  232.337406][   T30] audit: type=1400 audit(2000000072.260:290): avc:  denied  { open } for  pid=7421 comm="syz.5.361" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  232.370150][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  232.410648][   T30] audit: type=1400 audit(2000000072.260:291): avc:  denied  { ioctl } for  pid=7421 comm="syz.5.361" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  232.435748][   T30] audit: type=1400 audit(2000000072.510:292): avc:  denied  { connect } for  pid=7425 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  232.465693][   T30] audit: type=1400 audit(2000000072.510:293): avc:  denied  { name_connect } for  pid=7425 comm="syz.4.362" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  232.581035][    T9] usb 6-1: Using ep0 maxpacket: 16
[  233.074556][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06
[  233.123962][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.141038][   T30] audit: type=1400 audit(2000000072.540:294): avc:  denied  { listen } for  pid=7425 comm="syz.4.362" lport=59992 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  233.165254][    T9] usb 6-1: Product: syz
[  233.169603][    T9] usb 6-1: Manufacturer: syz
[  233.174513][    T9] usb 6-1: SerialNumber: syz
[  233.179915][ T1558] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  233.188422][    T9] usb 6-1: config 0 descriptor??
[  233.420100][ T1558] usb 5-1: Using ep0 maxpacket: 16
[  233.434348][ T1558] usb 5-1: config index 0 descriptor too short (expected 1828, got 36)
[  233.496573][ T1558] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  233.651488][    T9] usb 6-1: USB disconnect, device number 2
[  233.670546][ T1558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  233.687979][ T1558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  234.592509][ T1558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  234.603808][ T1558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  234.771740][ T6964] udevd[6964]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.791819][ T1558] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  235.250191][ T1558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.258221][ T1558] usb 5-1: Product: syz
[  235.333698][ T1558] usb 5-1: Manufacturer: syz
[  235.347004][ T1558] usb 5-1: SerialNumber: syz
[  235.418519][ T1558] usb 5-1: config 0 descriptor??
[  235.435037][ T1558] usb 5-1: can't set config #0, error -71
[  235.554817][ T1558] usb 5-1: USB disconnect, device number 5
[  237.744263][   T30] audit: type=1400 audit(2000000077.860:295): avc:  denied  { ioctl } for  pid=7492 comm="syz.3.378" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  239.081931][ T7506] x_tables: duplicate underflow at hook 1
[  240.590105][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  240.712157][ T7530] netlink: 'syz.3.386': attribute type 10 has an invalid length.
[  240.720042][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.386'.
[  240.842944][ T5889] usb 6-1: Using ep0 maxpacket: 16
[  240.853345][ T7530] team0: Port device geneve0 added
[  240.906493][ T5889] usb 6-1: config index 0 descriptor too short (expected 1828, got 36)
[  240.986011][ T5889] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  241.098541][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  241.218603][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  241.743732][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  241.779382][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  241.916164][ T5889] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  241.926093][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.934488][ T5889] usb 6-1: Product: syz
[  241.938657][ T5889] usb 6-1: Manufacturer: syz
[  242.070145][ T5889] usb 6-1: SerialNumber: syz
[  242.103094][ T5889] usb 6-1: config 0 descriptor??
[  242.608866][ T5889] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected
[  242.667288][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87
[  243.324646][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7
[  243.367466][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[  243.986443][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[  244.004410][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[  244.045069][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85
[  244.320986][   T30] audit: type=1326 audit(2000000084.400:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  244.681370][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5
[  244.709496][ T5889] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  244.748238][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83
[  244.780424][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[  244.789130][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86
[  244.798284][ T5889] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[  244.816332][ T5889] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  244.829113][ T5889] usb 6-1: USB disconnect, device number 3
[  244.840371][ T5889] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  244.854167][   T30] audit: type=1326 audit(2000000084.400:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  244.854715][ T5889] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  244.999620][   T30] audit: type=1326 audit(2000000084.400:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  245.026355][   T30] audit: type=1326 audit(2000000084.400:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  245.324221][   T30] audit: type=1326 audit(2000000084.400:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  245.407776][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.3.392'.
[  245.432781][ T7575] block device autoloading is deprecated and will be removed.
[  245.628308][ T5889] keyspan 6-1:0.0: device disconnected
[  245.719928][   T30] audit: type=1326 audit(2000000084.400:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  245.756388][   T30] audit: type=1326 audit(2000000084.400:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  245.780042][   T30] audit: type=1326 audit(2000000084.400:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  245.910364][   T30] audit: type=1326 audit(2000000084.400:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  246.237804][   T30] audit: type=1326 audit(2000000084.400:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc38b8e969 code=0x7ffc0000
[  247.347383][ T7594] evm: overlay not supported
[  247.500173][ T7615] overlayfs: failed to clone upperpath
[  247.554790][ T7616] overlayfs: missing 'lowerdir'
[  250.588179][ T7647] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  251.299082][ T7653] wg2: entered promiscuous mode
[  251.384636][ T7663] syz.1.411: attempt to access beyond end of device
[  251.384636][ T7663] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  251.397872][ T7663] FAT-fs (loop3): unable to read boot sector
[  251.963759][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  252.357832][ T7678] x_tables: duplicate underflow at hook 1
[  252.411309][ T5813] Bluetooth: hci4: command 0x0406 tx timeout
[  252.759935][    T9] usb 4-1: Using ep0 maxpacket: 8
[  252.768758][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  252.910566][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  252.919667][    T9] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  253.065746][    T9] usb 4-1: Product: syz
[  253.125004][    T9] usb 4-1: Manufacturer: syz
[  253.167791][    T9] usb 4-1: SerialNumber: syz
[  253.305654][    T9] usb 4-1: config 0 descriptor??
[  253.342194][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  254.506765][    T9] gspca_zc3xx: reg_w_i err -110
[  255.110029][    T9] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  255.132107][    T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  255.234453][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.244286][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.153757][ T7721] netlink: 'syz.5.422': attribute type 4 has an invalid length.
[  256.565922][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'.
[  256.971532][ T5862] usb 4-1: USB disconnect, device number 4
[  258.431859][ T7748] netlink: 'syz.4.429': attribute type 4 has an invalid length.
[  263.054110][ T7790] syz.5.438: attempt to access beyond end of device
[  263.054110][ T7790] loop11: rw=0, sector=0, nr_sectors = 1 limit=0
[  263.067311][ T7790] FAT-fs (loop11): unable to read boot sector
[  263.230329][   T80] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  264.284238][   T80] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  264.296598][   T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  264.308926][   T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  264.333414][   T80] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  264.420940][ T7807] overlayfs: failed to resolve './file0': -2
[  264.813217][   T80] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  264.827044][   T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.866975][   T80] usb 4-1: config 0 descriptor??
[  264.943507][ T7784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  265.764974][   T80] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[  265.803287][   T80] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  265.828596][   T80] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  265.952158][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'.
[  266.200893][   T80] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  266.321189][   T80] usb 4-1: USB disconnect, device number 5
[  266.528970][ T7839] fido_id[7839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  267.361512][ T7852] block device autoloading is deprecated and will be removed.
[  267.369574][ T7852] syz.4.449: attempt to access beyond end of device
[  267.369574][ T7852] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  267.382727][ T7852] FAT-fs (loop9): unable to read boot sector
[  268.073840][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  268.073856][   T30] audit: type=1400 audit(2000000018.210:337): avc:  denied  { create } for  pid=7861 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  269.334990][ T7869] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  269.456513][   T30] audit: type=1400 audit(2000000018.330:338): avc:  denied  { ioctl } for  pid=7861 comm="syz.1.454" path="socket:[12843]" dev="sockfs" ino=12843 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  269.572035][ T7879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.456'.
[  274.110323][ T7927] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  276.109696][ T7938] wg2: entered promiscuous mode
[  276.114654][ T7938] wg2: entered allmulticast mode
[  276.696041][ T7950] overlayfs: failed to clone upperpath
[  278.175190][   T30] audit: type=1400 audit(2000000000.350:339): avc:  denied  { write } for  pid=7944 comm="syz.4.469" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  278.290347][   T30] audit: type=1400 audit(2000000000.350:340): avc:  denied  { open } for  pid=7944 comm="syz.4.469" path="/dev/sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  278.829920][ T7966] syz.2.474: attempt to access beyond end of device
[  278.829920][ T7966] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  278.843044][ T7966] FAT-fs (loop5): unable to read boot sector
[  280.408504][ T7979] wg2: left allmulticast mode
[  280.439866][   T30] audit: type=1400 audit(2000000002.620:341): avc:  denied  { mounton } for  pid=7980 comm="syz.3.478" path="/88/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  280.554345][   T30] audit: type=1400 audit(2000000002.650:342): avc:  denied  { read write } for  pid=7980 comm="syz.3.478" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  280.557766][ T7952] syz.4.469 (7952): drop_caches: 2
[  280.575921][   T30] audit: type=1400 audit(2000000002.650:343): avc:  denied  { open } for  pid=7980 comm="syz.3.478" path="/88/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  280.610749][   T30] audit: type=1400 audit(2000000002.700:344): avc:  denied  { unmount } for  pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  287.549552][ T8061] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  290.148250][   T30] audit: type=1400 audit(2000000010.930:345): avc:  denied  { create } for  pid=8067 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  290.171899][   T30] audit: type=1400 audit(2000000010.940:346): avc:  denied  { bind } for  pid=8067 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  292.038173][ T8072] syz.4.494 (8072): drop_caches: 2
[  295.874548][ T8119] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  299.223536][   T30] audit: type=1326 audit(2000000021.350:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  299.622274][   T30] audit: type=1326 audit(2000000021.350:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  299.758162][   T30] audit: type=1326 audit(2000000021.350:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  299.926087][   T30] audit: type=1326 audit(2000000021.350:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  300.290132][   T30] audit: type=1326 audit(2000000021.350:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  300.711623][   T30] audit: type=1326 audit(2000000021.360:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  300.740082][   T30] audit: type=1326 audit(2000000021.360:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  300.783291][   T30] audit: type=1326 audit(2000000021.360:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  300.951258][   T30] audit: type=1326 audit(2000000021.360:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  300.979987][   T30] audit: type=1326 audit(2000000021.360:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8153 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7ffc0000
[  304.441493][ T8198] netlink: 'syz.1.524': attribute type 10 has an invalid length.
[  304.449246][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.524'.
[  305.513688][ T8205] overlayfs: failed to clone upperpath
[  306.170869][ T8209] overlayfs: failed to clone upperpath
[  306.211593][ T8209] overlayfs: missing 'lowerdir'
[  306.408753][ T8219] netlink: 'syz.4.528': attribute type 10 has an invalid length.
[  306.416780][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.528'.
[  306.539772][ T8219] team0: Port device geneve0 added
[  307.633885][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  307.633906][   T30] audit: type=1400 audit(2000000029.820:382): avc:  denied  { relabelfrom } for  pid=8229 comm="syz.5.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  307.639527][ T8233] pim6reg1: entered promiscuous mode
[  307.665953][   T30] audit: type=1400 audit(2000000029.820:383): avc:  denied  { relabelto } for  pid=8229 comm="syz.5.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  307.735976][ T8233] pim6reg1: entered allmulticast mode
[  308.424785][   T30] audit: type=1400 audit(2000000030.610:384): avc:  denied  { read } for  pid=8255 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  308.598459][ T8262] pim6reg1: entered promiscuous mode
[  308.613145][ T8262] pim6reg1: entered allmulticast mode
[  310.007494][ T8298] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  310.071424][ T8298] syzkaller0: entered promiscuous mode
[  310.083170][ T8298] syzkaller0: entered allmulticast mode
[  311.347525][ T8334] wg2: entered allmulticast mode
[  313.318344][ T8436] pim6reg1: entered promiscuous mode
[  313.334023][ T8436] pim6reg1: entered allmulticast mode
[  314.618370][ T8468] veth1_macvtap: left promiscuous mode
[  314.636576][ T8468] macsec0: entered promiscuous mode
[  314.667460][ T8472] sit0: entered promiscuous mode
[  314.685293][ T8472] sit0: entered allmulticast mode
[  314.851612][   T30] audit: type=1400 audit(2000000037.030:385): avc:  denied  { ioctl } for  pid=8486 comm="syz.5.635" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  315.711287][ T8523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.651'.
[  315.728873][ T8523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.651'.
[  315.838371][   T30] audit: type=1400 audit(2000000038.020:386): avc:  denied  { create } for  pid=8527 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  315.926446][   T30] audit: type=1400 audit(2000000038.050:387): avc:  denied  { write } for  pid=8527 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  316.059407][ T8542] netlink: 'syz.1.660': attribute type 29 has an invalid length.
[  316.068586][ T8542] netlink: 'syz.1.660': attribute type 29 has an invalid length.
[  316.397996][ T8567] netlink: 'syz.2.670': attribute type 29 has an invalid length.
[  316.430549][ T8567] netlink: 'syz.2.670': attribute type 29 has an invalid length.
[  316.683219][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.689548][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  316.939339][ T8599] pim6reg1: entered promiscuous mode
[  316.946959][ T8599] pim6reg1: entered allmulticast mode
[  317.032153][ T8605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  317.039693][ T8605] IPv6: NLM_F_CREATE should be set when creating new route
[  317.046997][ T8605] IPv6: NLM_F_CREATE should be set when creating new route
[  317.685913][   T30] audit: type=1400 audit(2000000039.870:388): avc:  denied  { setopt } for  pid=8645 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  317.725552][ T8648] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.711'.
[  317.838542][   T30] audit: type=1400 audit(2000000040.010:389): avc:  denied  { write } for  pid=8651 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  318.114367][   T30] audit: type=1400 audit(2000000040.300:390): avc:  denied  { write } for  pid=8671 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  318.136506][   T30] audit: type=1400 audit(2000000040.300:391): avc:  denied  { name_connect } for  pid=8671 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  318.869297][ T8675] warning: `syz.1.722' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  318.881459][ T8681] veth0_vlan: entered allmulticast mode
[  319.737481][   T30] audit: type=1400 audit(2000000041.920:392): avc:  denied  { write } for  pid=8719 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  319.812795][   T30] audit: type=1400 audit(2000000041.970:393): avc:  denied  { ioctl } for  pid=8719 comm="syz.4.743" path="socket:[15665]" dev="sockfs" ino=15665 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  327.940686][ T8796] netlink: 'syz.1.764': attribute type 4 has an invalid length.
[  328.550861][ T8793] netlink: 'syz.3.765': attribute type 10 has an invalid length.
[  328.558649][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.765'.
[  331.347951][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.772'.
[  333.896206][   T30] audit: type=1326 audit(2000000055.870:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc9b8e969 code=0x7fc00000
[  343.262401][ T5889] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  343.575954][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.628071][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  343.666531][ T5889] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  343.668365][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.808'.
[  343.685011][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.706838][ T5889] usb 4-1: config 0 descriptor??
[  344.699944][   T30] audit: type=1400 audit(2000000066.320:395): avc:  denied  { write } for  pid=8925 comm="syz.3.806" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  344.818830][   T30] audit: type=1400 audit(2000000066.320:396): avc:  denied  { open } for  pid=8925 comm="syz.3.806" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  344.920714][   T30] audit: type=1400 audit(2000000066.320:397): avc:  denied  { ioctl } for  pid=8925 comm="syz.3.806" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  344.989293][ T5889] usb 4-1: string descriptor 0 read error: -71
[  345.128559][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  345.252219][   T30] audit: type=1400 audit(2000000067.440:398): avc:  denied  { read } for  pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.274908][ T5169] bcm5974 4-1:0.0: could not read from device
[  345.382992][   T30] audit: type=1400 audit(2000000067.440:399): avc:  denied  { open } for  pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  345.419741][ T5169] bcm5974 4-1:0.0: could not read from device
[  345.451612][ T5889] usb 4-1: USB disconnect, device number 6
[  345.908682][ T6963] bcm5974 4-1:0.0: could not read from device
[  345.921718][   T30] audit: type=1400 audit(2000000067.700:400): avc:  denied  { read } for  pid=8961 comm="syz.5.814" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  352.009844][   T30] audit: type=1400 audit(2000000074.180:401): avc:  denied  { accept } for  pid=8988 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  352.301519][ T9023] netlink: 'syz.1.832': attribute type 10 has an invalid length.
[  352.309672][ T9023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.832'.
[  352.578165][ T9032] netlink: 'syz.3.835': attribute type 10 has an invalid length.
[  352.586101][ T9032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.835'.
[  355.328069][ T9050] netlink: 'syz.1.841': attribute type 10 has an invalid length.
[  355.336157][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.841'.
[  356.234342][ T9065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.845'.
[  356.959375][ T9080] syz.5.849 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  357.780626][ T9084] overlayfs: failed to clone upperpath
[  360.574440][ T9107] netlink: 'syz.4.861': attribute type 10 has an invalid length.
[  360.582380][ T9107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.861'.
[  360.595987][ T9077] syz.5.849 (9077): drop_caches: 2
[  361.316622][ T9118] netlink: 'syz.5.862': attribute type 10 has an invalid length.
[  361.324722][ T9118] netlink: 40 bytes leftover after parsing attributes in process `syz.5.862'.
[  363.588920][ T9118] team0: Port device geneve0 added
[  365.694416][ T9156] netlink: 'syz.5.871': attribute type 4 has an invalid length.
[  366.695928][ T9159] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  369.021550][ T9193] wg2: left allmulticast mode
[  370.529078][ T9217] overlayfs: failed to clone upperpath
[  372.617190][ T9230] overlayfs: failed to clone upperpath
[  373.124787][ T9228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  374.968248][ T9262] overlayfs: failed to clone upperpath
[  374.974335][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  375.190302][ T9265] overlayfs: missing 'lowerdir'
[  376.279644][    T9] usb 6-1: Using ep0 maxpacket: 8
[  376.286508][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.300090][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  376.313990][    T9] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  377.118830][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  377.453092][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  377.497907][    T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  377.613107][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.770673][    T9] usb 6-1: can't set config #1, error -71
[  378.727443][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.734024][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  378.746564][    T9] usb 6-1: USB disconnect, device number 4
[  379.172188][ T9289] netlink: 'syz.3.908': attribute type 4 has an invalid length.
[  380.457705][ T9314] overlayfs: conflicting lowerdir path
[  380.525364][ T9315] overlayfs: missing 'lowerdir'
[  383.459750][ T9334] blkio.reset_stats is deprecated
[  384.516971][ T9348] netlink: 'syz.5.927': attribute type 4 has an invalid length.
[  384.878797][ T9349] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  386.377947][   T30] audit: type=1400 audit(2000000108.550:402): avc:  denied  { create } for  pid=9354 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  389.201889][ T9392] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.941'.
[  389.247118][ T9391] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.941'.
[  389.481858][ T9361] syz.5.930 (9361): drop_caches: 2
[  390.420552][ T9402] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  394.138165][ T9432] netlink: 'syz.5.952': attribute type 10 has an invalid length.
[  394.146624][ T9432] netlink: 40 bytes leftover after parsing attributes in process `syz.5.952'.
[  394.523194][ T9441] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.954'.
[  394.584146][ T9438] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.954'.
[  394.639233][ T9443] overlayfs: failed to clone upperpath
[  397.210214][ T9475] netlink: 'syz.3.965': attribute type 10 has an invalid length.
[  397.218238][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.965'.
[  398.885785][ T9497] netlink: 'syz.2.971': attribute type 4 has an invalid length.
[  403.175769][ T9530] wg2: left allmulticast mode
[  404.744265][   T30] audit: type=1326 audit(2000000126.870:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.041254][   T30] audit: type=1326 audit(2000000126.870:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.077098][   T30] audit: type=1326 audit(2000000126.880:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.140522][   T30] audit: type=1326 audit(2000000126.880:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.167676][   T30] audit: type=1326 audit(2000000126.880:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.197143][   T30] audit: type=1326 audit(2000000126.880:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.227784][   T30] audit: type=1326 audit(2000000126.890:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.423733][ T9560] netlink: 'syz.2.992': attribute type 4 has an invalid length.
[  405.765347][   T30] audit: type=1326 audit(2000000126.890:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.790629][   T30] audit: type=1326 audit(2000000126.890:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  405.814221][   T30] audit: type=1326 audit(2000000126.890:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b778e969 code=0x7ffc0000
[  407.054500][ T9571] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  407.716612][ T9583] overlayfs: failed to clone lowerpath
[  411.585508][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  411.934495][ T9613] overlayfs: failed to clone upperpath
[  412.161086][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  412.385216][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  412.398757][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  412.592609][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  413.250603][ T9616] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  413.422565][ T9580] syz.5.1001 (9580): drop_caches: 2
[  414.850410][ T5821] Bluetooth: hci2: command tx timeout
[  415.043177][ T9603] chnl_net:caif_netlink_parms(): no params data found
[  415.867657][ T9656] netlink: 'syz.5.1013': attribute type 4 has an invalid length.
[  416.499995][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.522742][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.471243][ T5821] Bluetooth: hci2: command tx timeout
[  417.559143][ T9603] bridge_slave_0: entered allmulticast mode
[  417.568132][ T9603] bridge_slave_0: entered promiscuous mode
[  417.576639][ T9663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.843554][ T5954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.600471][ T9677] overlayfs: failed to clone upperpath
[  418.793804][ T9679] overlayfs: overlapping lowerdir path
[  418.840056][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.893861][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.902305][ T9603] bridge_slave_1: entered allmulticast mode
[  418.934066][ T9603] bridge_slave_1: entered promiscuous mode
[  419.293976][ T9685] overlayfs: failed to clone upperpath
[  419.669963][ T5821] Bluetooth: hci2: command tx timeout
[  419.842456][ T5954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.062569][ T5954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.121984][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.181222][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.253745][ T5824] Bluetooth: hci2: command tx timeout
[  423.076054][ T9603] team0: Port device team_slave_0 added
[  423.137079][ T5954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.194399][ T9603] team0: Port device team_slave_1 added
[  423.235279][ T9699] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  423.371925][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.400403][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.436812][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.422223][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.460197][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.559067][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.236157][ T9725] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  425.971547][ T9603] hsr_slave_0: entered promiscuous mode
[  426.000626][ T9603] hsr_slave_1: entered promiscuous mode
[  426.040846][ T9603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  426.091251][ T9603] Cannot create hsr debugfs directory
[  426.370035][   T80] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  426.451050][ T5954] bridge_slave_1: left allmulticast mode
[  426.456731][ T5954] bridge_slave_1: left promiscuous mode
[  426.486658][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.003220][ T5954] bridge_slave_0: left allmulticast mode
[  427.017371][ T5954] bridge_slave_0: left promiscuous mode
[  427.078771][   T80] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.115163][   T80] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  427.120041][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.159665][   T80] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  427.169026][   T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.189755][   T80] usb 4-1: config 0 descriptor??
[  428.880690][   T80] usb 4-1: string descriptor 0 read error: -71
[  428.912518][   T80] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  428.958690][ T5169] bcm5974 4-1:0.0: could not read from device
[  429.015525][ T5169] bcm5974 4-1:0.0: could not read from device
[  429.034201][   T80] usb 4-1: USB disconnect, device number 7
[  429.061253][ T5169] bcm5974 4-1:0.0: could not read from device
[  429.079936][  T971] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  429.124161][ T5169] bcm5974 4-1:0.0: could not read from device
[  429.133063][ T5954] team0: Port device geneve0 removed
[  429.280571][  T971] usb 6-1: Using ep0 maxpacket: 8
[  429.287996][  T971] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  429.297195][  T971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  429.312060][  T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  429.322265][ T5954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.330906][  T971] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  429.344985][  T971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  429.359098][  T971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  429.369194][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.389402][  T971] usbtmc 6-1:16.0: bulk endpoints not found
[  429.416153][ T5954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.436553][ T5954] bond0 (unregistering): Released all slaves
[  429.502264][ T9755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.851135][ T9777] netlink: 'syz.2.1046': attribute type 4 has an invalid length.
[  432.186139][ T9799] wg2: entered allmulticast mode
[  432.210361][ T1558] usb 6-1: USB disconnect, device number 5
[  432.558164][ T9603] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  432.808800][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  433.376915][   T30] audit: type=1400 audit(2000000154.980:439): avc:  denied  { connect } for  pid=9802 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  433.859432][ T9603] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  433.968353][ T9815] netlink: 'syz.5.1052': attribute type 4 has an invalid length.
[  434.020714][ T9603] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  435.989631][ T9603] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  436.576639][ T9835] overlayfs: overlapping lowerdir path
[  439.932264][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  439.938631][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  443.790968][ T5954] hsr_slave_0: left promiscuous mode
[  443.802889][ T5954] hsr_slave_1: left promiscuous mode
[  443.819615][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.845242][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.294791][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.311936][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.693396][ T5954] veth1_macvtap: left promiscuous mode
[  444.698991][ T5954] veth0_macvtap: left promiscuous mode
[  444.719990][ T5954] veth1_vlan: left promiscuous mode
[  444.725355][ T5954] veth0_vlan: left promiscuous mode
[  446.847650][ T5954] team0 (unregistering): Port device team_slave_1 removed
[  446.903922][ T5954] team0 (unregistering): Port device team_slave_0 removed
[  448.654896][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.175699][ T9912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9912 comm=syz.5.1073
[  449.388580][ T9603] 8021q: adding VLAN 0 to HW filter on device team0
[  449.459849][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  449.500482][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.507565][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.585669][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.592771][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.681370][    T9] usb 6-1: Using ep0 maxpacket: 16
[  449.706821][    T9] usb 6-1: config index 0 descriptor too short (expected 1828, got 36)
[  449.744956][    T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  449.769352][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  449.840619][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  449.864188][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  449.885806][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  450.009856][    T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  450.020329][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.033482][    T9] usb 6-1: Product: syz
[  450.041911][    T9] usb 6-1: Manufacturer: syz
[  450.548952][    T9] usb 6-1: SerialNumber: syz
[  450.707915][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.821228][ T9949] overlayfs: overlapping lowerdir path
[  451.271207][    T9] usb 6-1: config 0 descriptor??
[  451.594666][ T9956] netlink: 'syz.2.1080': attribute type 4 has an invalid length.
[  452.383642][ T9961] netlink: 'syz.1.1078': attribute type 4 has an invalid length.
[  452.949926][    T9] usb 6-1: can't set config #0, error -71
[  452.993775][    T9] usb 6-1: USB disconnect, device number 6
[  453.877344][ T9603] veth0_vlan: entered promiscuous mode
[  454.915315][ T9603] veth1_vlan: entered promiscuous mode
[  455.972256][ T9603] veth0_macvtap: entered promiscuous mode
[  456.020504][ T9603] veth1_macvtap: entered promiscuous mode
[  456.038311][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.049215][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.059158][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.071166][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.082679][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.141684][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.162316][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.175307][T10000] overlayfs: failed to clone lowerpath
[  456.615638][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.626926][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.686683][ T9998] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  456.728769][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.877192][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.889547][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.902636][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.914418][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.935533][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.135034][ T9603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.177066][ T9603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.120646][ T9603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.255413][ T9603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.266214][ T9603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.275861][ T9603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.284959][ T9603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.485788][T10025] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1094'.
[  458.617082][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.636982][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.654070][T10020] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1094'.
[  459.285148][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.370101][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.624321][T10063] netlink: 'syz.6.1000': attribute type 4 has an invalid length.
[  462.386453][T10070] overlayfs: failed to clone lowerpath
[  462.641662][T10073] overlayfs: failed to clone lowerpath
[  462.885702][T10080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10080 comm=syz.1.1107
[  472.015278][T10161] overlayfs: failed to clone lowerpath
[  473.536675][   T30] audit: type=1400 audit(2000000195.410:440): avc:  denied  { search } for  pid=10176 comm="syz.6.1128" name="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  473.687906][   T30] audit: type=1400 audit(2000000195.830:441): avc:  denied  { mounton } for  pid=10176 comm="syz.6.1128" path="/" dev="configfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  473.826644][T10177] overlayfs: overlapping lowerdir path
[  477.783189][T10221] overlayfs: overlapping lowerdir path
[  480.006122][T10260] wg2: left allmulticast mode
[  480.735243][T10273] fuse: Bad value for 'fd'
[  488.359780][T10378] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1172'.
[  488.532621][T10374] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1172'.
[  491.581633][T10429] overlayfs: failed to clone upperpath
[  495.176169][T10492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1198'.
[  500.996059][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.002942][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  503.353267][T10580] overlayfs: failed to clone upperpath
[  505.253752][T10620] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1230'.
[  505.263428][T10619] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1230'.
[  505.406189][ T5861] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  505.614396][ T5861] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  505.923047][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.940293][ T5861] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  505.978775][ T5861] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  505.997181][ T5861] usb 4-1: Manufacturer: syz
[  506.027302][ T5861] usb 4-1: config 0 descriptor??
[  506.067810][ T5861] igorplugusb 4-1:0.0: incorrect number of endpoints
[  506.285753][ T5889] usb 4-1: USB disconnect, device number 8
[  510.518946][T10692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10692 comm=syz.2.1249
[  513.690130][T10733] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  513.796278][   T30] audit: type=1400 audit(2000000235.980:442): avc:  denied  { shutdown } for  pid=10729 comm="syz.6.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  514.021101][   T30] audit: type=1400 audit(2000000236.200:443): avc:  denied  { ioctl } for  pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2862 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  516.911004][T10786] overlayfs: failed to clone lowerpath
[  518.139983][ T5889] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  518.216646][T10800] overlayfs: missing 'workdir'
[  518.227363][T10800] overlayfs: missing 'lowerdir'
[  518.641602][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  518.662341][ T5889] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  518.686533][ T5889] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  518.698162][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.710566][ T5889] usb 7-1: config 0 descriptor??
[  518.732951][ T5889] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  518.747083][ T5889] dvb-usb: bulk message failed: -22 (3/0)
[  518.779263][ T5889] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  518.817399][ T5889] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  518.828316][ T5889] usb 7-1: media controller created
[  518.852088][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  518.970547][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  518.976625][ T5889] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  519.131730][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8
[  519.144812][ T5889] dvb-usb: schedule remote query interval to 150 msecs.
[  519.151819][ T5889] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  519.162857][ T5889] usb 7-1: USB disconnect, device number 2
[  519.806961][T10835] overlayfs: failed to clone upperpath
[  520.291257][ T5889] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  520.988571][T10839] overlayfs: failed to clone upperpath
[  523.006369][T10855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10855 comm=syz.6.1288
[  523.589871][ T5824] Bluetooth: hci5: command 0x0406 tx timeout
[  523.628132][ T5858] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  523.953274][T10881] overlayfs: failed to clone upperpath
[  524.469060][ T5858] usb 7-1: Using ep0 maxpacket: 16
[  524.740772][ T5858] usb 7-1: config index 0 descriptor too short (expected 1828, got 36)
[  524.822080][ T5858] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  524.967430][ T5858] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  524.992209][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  525.952205][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  525.969845][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  525.982248][ T5858] usb 7-1: string descriptor 0 read error: -71
[  525.988520][ T5858] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  526.279422][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.293528][ T5858] usb 7-1: config 0 descriptor??
[  526.415213][ T5858] usb 7-1: can't set config #0, error -71
[  526.467114][ T5858] usb 7-1: USB disconnect, device number 3
[  528.814124][T10901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10901 comm=syz.1.1298
[  633.829712][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  633.836723][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P1153/1:b..l
[  633.845029][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=28025, q=290 ncpus=2)
[  633.852736][    C1] task:kworker/u8:7    state:R  running task     stack:23048 pid:1153  tgid:1153  ppid:2      task_flags:0x4208060 flags:0x00004000
[  633.867060][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  633.874859][    C1] Call Trace:
[  633.878115][    C1]  <TASK>
[  633.881029][    C1]  __schedule+0x116f/0x5de0
[  633.885533][    C1]  ? __pfx___schedule+0x10/0x10
[  633.890371][    C1]  ? mark_held_locks+0x49/0x80
[  633.895115][    C1]  preempt_schedule_irq+0x51/0x90
[  633.900125][    C1]  irqentry_exit+0x36/0x90
[  633.904517][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  633.910473][    C1] RIP: 0010:write_comp_data+0x8b/0x90
[  633.915833][    C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 <c3> cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3
[  633.935414][    C1] RSP: 0018:ffffc90003d37ad8 EFLAGS: 00000293
[  633.941455][    C1] RAX: 0000000000000000 RBX: ffff88805cd35540 RCX: ffffffff8b3507b5
[  633.949400][    C1] RDX: ffff888027f0a440 RSI: 0000000000000000 RDI: 0000000000000005
[  633.957350][    C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  633.965298][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807a43cd80
[  633.973241][    C1] R13: 00000000000002a8 R14: 0000000000000001 R15: ffff888027de8b40
[  633.981190][    C1]  ? batadv_iv_ogm_schedule_buff+0x5c5/0x14e0
[  633.987246][    C1]  batadv_iv_ogm_schedule_buff+0x5c5/0x14e0
[  633.993113][    C1]  ? batadv_iv_ogm_schedule_buff+0x5a3/0x14e0
[  633.999156][    C1]  ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10
[  634.005471][    C1]  ? batadv_send_skb_packet+0x5dd/0x780
[  634.010998][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920
[  634.018003][    C1]  process_one_work+0x9cc/0x1b70
[  634.022936][    C1]  ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10
[  634.030462][    C1]  ? __pfx_process_one_work+0x10/0x10
[  634.035808][    C1]  ? assign_work+0x1a0/0x250
[  634.040370][    C1]  worker_thread+0x6c8/0xf10
[  634.044941][    C1]  ? __pfx_worker_thread+0x10/0x10
[  634.050032][    C1]  kthread+0x3c2/0x780
[  634.054079][    C1]  ? __pfx_kthread+0x10/0x10
[  634.058644][    C1]  ? __pfx_kthread+0x10/0x10
[  634.063216][    C1]  ? __pfx_kthread+0x10/0x10
[  634.067779][    C1]  ? __pfx_kthread+0x10/0x10
[  634.072340][    C1]  ? rcu_is_watching+0x12/0xc0
[  634.077088][    C1]  ? __pfx_kthread+0x10/0x10
[  634.081649][    C1]  ret_from_fork+0x45/0x80
[  634.086041][    C1]  ? __pfx_kthread+0x10/0x10
[  634.090601][    C1]  ret_from_fork_asm+0x1a/0x30
[  634.095349][    C1]  </TASK>
[  634.098357][    C1] rcu: rcu_preempt kthread starved for 10300 jiffies! g28025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  634.109522][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  634.119461][    C1] rcu: RCU grace-period kthread stack dump:
[  634.125318][    C1] task:rcu_preempt     state:R  running task     stack:27304 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  634.138760][    C1] Call Trace:
[  634.142016][    C1]  <TASK>
[  634.144930][    C1]  __schedule+0x116f/0x5de0
[  634.149429][    C1]  ? __pfx___schedule+0x10/0x10
[  634.154271][    C1]  ? find_held_lock+0x2b/0x80
[  634.158922][    C1]  ? schedule+0x2d7/0x3a0
[  634.163227][    C1]  schedule+0xe7/0x3a0
[  634.167272][    C1]  schedule_timeout+0x123/0x290
[  634.172096][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  634.177441][    C1]  ? __pfx_process_timeout+0x10/0x10
[  634.182707][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  634.188487][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  634.193933][    C1]  rcu_gp_fqs_loop+0x1ea/0xb00
[  634.198683][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  634.203954][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  634.208791][    C1]  rcu_gp_kthread+0x270/0x380
[  634.213455][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  634.218636][    C1]  ? rcu_is_watching+0x12/0xc0
[  634.223374][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  634.228548][    C1]  ? __kthread_parkme+0x19e/0x250
[  634.233550][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  634.238734][    C1]  kthread+0x3c2/0x780
[  634.242775][    C1]  ? __pfx_kthread+0x10/0x10
[  634.247337][    C1]  ? __pfx_kthread+0x10/0x10
[  634.251909][    C1]  ? __pfx_kthread+0x10/0x10
[  634.256469][    C1]  ? __pfx_kthread+0x10/0x10
[  634.261034][    C1]  ? rcu_is_watching+0x12/0xc0
[  634.265773][    C1]  ? __pfx_kthread+0x10/0x10
[  634.270335][    C1]  ret_from_fork+0x45/0x80
[  634.274754][    C1]  ? __pfx_kthread+0x10/0x10
[  634.279315][    C1]  ret_from_fork_asm+0x1a/0x30
[  634.284062][    C1]  </TASK>
[  634.287054][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  634.293346][    C1] Sending NMI from CPU 1 to CPUs 0:
[  634.298530][    C0] NMI backtrace for cpu 0
[  634.298541][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) 
[  634.298556][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  634.298564][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  634.298581][    C0] Code: 25 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  634.298592][    C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6
[  634.298603][    C0] RAX: 0000000000cd48bb RBX: 0000000000000000 RCX: ffffffff8b6cd419
[  634.298611][    C0] RDX: 0000000000000000 RSI: ffffffff8dbe14c7 RDI: ffffffff8bf48360
[  634.298619][    C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd
[  634.298627][    C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000
[  634.298634][    C0] R13: ffffffff8e097740 R14: ffffffff9084f610 R15: 0000000000000000
[  634.298642][    C0] FS:  0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000
[  634.298655][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  634.298663][    C0] CR2: 00007fb2b4237ff8 CR3: 0000000077b4a000 CR4: 00000000003526f0
[  634.298671][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  634.298678][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  634.298686][    C0] Call Trace:
[  634.298690][    C0]  <TASK>
[  634.298694][    C0]  default_idle+0x13/0x20
[  634.298711][    C0]  default_idle_call+0x6d/0xb0
[  634.298728][    C0]  do_idle+0x391/0x510
[  634.298743][    C0]  ? __pfx_do_idle+0x10/0x10
[  634.298757][    C0]  ? trace_sched_exit_tp+0x31/0x130
[  634.298777][    C0]  cpu_startup_entry+0x4f/0x60
[  634.298791][    C0]  rest_init+0x16b/0x2b0
[  634.298801][    C0]  ? acpi_subsystem_init+0x133/0x180
[  634.298816][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  634.298834][    C0]  start_kernel+0x3e9/0x4d0
[  634.298851][    C0]  x86_64_start_reservations+0x18/0x30
[  634.298867][    C0]  x86_64_start_kernel+0xb0/0xc0
[  634.298882][    C0]  common_startup_64+0x13e/0x148
[  634.298902][    C0]  </TASK>
[  634.530274][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  634.539980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  634.550154][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  634.556490][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=72544 sent=0 n=-1 (errno 32: Broken pipe)
[  635.500041][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  635.512045][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  635.523317][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  635.579292][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  635.589009][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  636.589777][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[  637.333939][   T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.427609][   T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.494898][   T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.609334][   T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.708439][   T81] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.804808][   T81] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.868781][   T81] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.943345][   T81] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.094745][   T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.184960][   T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.238428][   T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.309325][   T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.466028][   T81] bridge_slave_1: left allmulticast mode
[  638.472551][   T81] bridge_slave_1: left promiscuous mode
[  638.478701][   T81] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.488051][   T81] bridge_slave_0: left allmulticast mode
[  638.493823][   T81] bridge_slave_0: left promiscuous mode
[  638.499464][   T81] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.510676][   T81] bridge_slave_1: left allmulticast mode
[  638.516954][   T81] bridge_slave_1: left promiscuous mode
[  638.523703][   T81] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.532291][   T81] bridge_slave_0: left allmulticast mode
[  638.537907][   T81] bridge_slave_0: left promiscuous mode
[  638.543976][   T81] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.557194][   T81] bridge_slave_1: left allmulticast mode
[  638.562910][   T81] bridge_slave_1: left promiscuous mode
[  638.568701][   T81] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.578464][   T81] bridge_slave_0: left allmulticast mode
[  638.584281][   T81] bridge_slave_0: left promiscuous mode
[  638.590149][   T81] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.881672][   T81] team0: Port device geneve0 removed
[  638.916943][   T81] team0: Port device geneve0 removed
[  639.121824][   T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.131971][   T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.141871][   T81] bond0 (unregistering): Released all slaves
[  639.207826][   T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.218018][   T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.234588][   T81] bond0 (unregistering): Released all slaves
[  639.297790][   T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.307807][   T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.317738][   T81] bond0 (unregistering): Released all slaves
[  641.532526][   T81] hsr_slave_0: left promiscuous mode
[  641.540950][   T81] hsr_slave_1: left promiscuous mode
[  641.546759][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  641.556035][   T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[  641.566075][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  641.573763][   T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[  641.587682][   T81] hsr_slave_0: left promiscuous mode
[  641.594711][   T81] hsr_slave_1: left promiscuous mode
[  641.602191][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  641.609603][   T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[  641.619148][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  641.628648][   T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[  641.642293][   T81] hsr_slave_0: left promiscuous mode
[  641.648204][   T81] hsr_slave_1: left promiscuous mode
[  641.655349][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  641.666956][   T81] batman_adv: batadv0: Removing interface: batadv_slave_0
[  641.677760][   T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  641.687879][   T81] batman_adv: batadv0: Removing interface: batadv_slave_1
[  641.738472][   T81] veth1_macvtap: left promiscuous mode
[  641.744103][   T81] veth0_macvtap: left promiscuous mode
[  641.752875][   T81] veth1_vlan: left promiscuous mode
[  641.758256][   T81] veth0_vlan: left promiscuous mode
[  641.765929][   T81] veth1_macvtap: left promiscuous mode
[  641.774514][   T81] veth0_macvtap: left promiscuous mode
[  641.781199][   T81] veth1_vlan: left promiscuous mode
[  641.786451][   T81] veth0_vlan: left promiscuous mode
[  641.794227][   T81] veth1_macvtap: left promiscuous mode
[  641.799774][   T81] veth0_macvtap: left promiscuous mode
[  641.805292][   T81] veth1_vlan: left promiscuous mode
[  641.810610][   T81] veth0_vlan: left promiscuous mode
[  642.154658][   T81] team0 (unregistering): Port device team_slave_1 removed
[  642.185257][   T81] team0 (unregistering): Port device team_slave_0 removed
[  642.632050][   T81] team0 (unregistering): Port device team_slave_1 removed
[  642.663650][   T81] team0 (unregistering): Port device team_slave_0 removed
[  643.107327][   T81] team0 (unregistering): Port device team_slave_1 removed
[  643.138959][   T81] team0 (unregistering): Port device team_slave_0 removed