last executing test programs:

16.091614946s ago: executing program 0 (id=1600):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x20)

14.180247572s ago: executing program 0 (id=1604):
r0 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x06K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf~%\xcfU\x16\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F\x92\x9e\xc8\xdc*b\x96\xd0t]\r\xd5\xc8X\xcb\x81I\x97\xd8\x9ciN\x06\xc8\x9e\xa2\xc0|3\xae\xfa\xf4\xcf]\xbe\xcbR(T\x9c\x99\xc7\xfe\x1e>rM\x12\xeb\xe021\xc2&\x06\x86\xffm:\xdb\xcc\x13\xec\x1f\xd3\x97\xce\\\x12\x88\x00\x90\x8cO\xe7\x98\xe6\x95#\xf5x\xa6l8X\x81@\xc5\x8b?\xc5 /\x9a)\xeahg\x85gis\xb5\x11\xedp-\xfdj\x13\xc3E\x12\xe2Q]\xc1\x11\xc7Fz\xc0\x88\x03\x1c\x00\xa6\x7f%\x8d*\xd4w\x1c\'\xb3\xfe\xd6[\x8a\xf7T\xd4\x02X^\tgl\x14\x17\x15\x0f\xa3MyYr5Q\x8coAv,\tJ\x10\x13\x9f\xbf@\xc2\xd7%\xdb\x9d\xf3\xad\xd4\xd1 \x19Ul\xdb\xff\x8b/\x8c\x81+\x9c\x04\xa1\xa0\x8c\xc1\xe6\x00'/375, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0xfffffffffffffffd, 0x200000000000, 0x0)

13.976753817s ago: executing program 0 (id=1605):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/198, 0xc6}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13.640037909s ago: executing program 1 (id=1608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0}, 0x90)
setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60)

13.404863286s ago: executing program 0 (id=1609):
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff0c)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20)
write$binfmt_elf32(r4, 0x0, 0x4cd)

9.5909495s ago: executing program 0 (id=1610):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000000858045301000000000001090224000100000000090400000103000000092100000001220500090581030000000000f072dedce6eac8772fef"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5f, {0x5f, 0x0, "a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50c76a16f810ac55fbda3e39fcbe111cc28def45137dd52b615507901e312253d859be5cdac84dd1ab0ebff44827"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

8.910433511s ago: executing program 2 (id=1613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x0, 0x3}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)

8.758774166s ago: executing program 4 (id=1615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x8, 0x3})

8.604438618s ago: executing program 2 (id=1616):
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r3, 0x20000005)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r5, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0)

8.144895495s ago: executing program 4 (id=1617):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@local=@item_012={0x2, 0x2, 0x0, "64d0"}, @global, @main=@item_4={0x3, 0x0, 0x0, "153c0023"}]}}, 0x0}, 0x0)

7.31570394s ago: executing program 1 (id=1618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r3, 0x2006e2)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
r4 = memfd_secret(0x0)
ftruncate(r4, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffc, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r6, &(0x7f0000000440)="4221fa3c7de2d20162e2bf5d0301b60a578ef8f2c4221efa44314e8196a1131d152a8517d40b6139229bcc885873ea69a94f2aa42e5f557befccac3ffe72c3a5062d1c17330a4b0b84add21799eba836de7be7e9f7c27c0b8d052f784989432f1841ee421d9bd4f0a9d8fa5a64076472f674f800b43169558f75cc4bf115ef0325569902cb63d2dfcf23b84e2af8b0c8e7081e6d41ad5e67197abceab1b51bd30cc857b696fe7790", 0xa8, 0x50af7aada91ebcf6, &(0x7f00000003c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r6, 0xda90)
accept4(r6, 0x0, 0x0, 0x180800)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_ts_info={0x9}})
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000001b80), 0x0}, 0x20)

7.076751205s ago: executing program 2 (id=1619):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x4000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019000300000008000a"], 0x4c}}, 0x0)

6.461943832s ago: executing program 2 (id=1620):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc0)

6.204791641s ago: executing program 0 (id=1621):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f0000000180)=0x5)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5)

5.452797227s ago: executing program 4 (id=1624):
r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x4d, 0x8826, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x44, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, &(0x7f0000000140))
r7 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r8 = dup(r7)
write$cgroup_pid(r8, &(0x7f0000000040)=0xffffffffffffffff, 0xe)
sendfile(r7, r8, &(0x7f00000003c0), 0x6c03)
socket(0x28, 0x1, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

5.386515053s ago: executing program 2 (id=1625):
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00')
socket$packet(0x11, 0x2, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r0], 0x20}}, 0x0)

5.238866545s ago: executing program 3 (id=1626):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0xee01}, {0x0, 0x0, 0x80000000000000}, {0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0xe}}, 0xe8)
sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x81, 0x0, 0x7, 0x0, [{0x0, 0xf776}, {0x1000007}, {0x8, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x9, 0x8}, {0x0, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0xc0844123, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
ioprio_set$uid(0x3, 0x0, 0x0)
chdir(0x0)
open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x63)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/53, 0x0})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/96, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240))

5.061172835s ago: executing program 1 (id=1627):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0)

3.819774045s ago: executing program 3 (id=1628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5, 0x6, 0x2}]}}}]}, 0x48}}, 0x0)

3.701090157s ago: executing program 4 (id=1629):
socket$inet6_sctp(0xa, 0x0, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
timer_create(0x2, 0x0, &(0x7f00000003c0))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0100"], 0x13c}}, 0x0)

3.632747046s ago: executing program 2 (id=1630):
pipe(&(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
read$FUSE(r0, &(0x7f0000003f80)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r1 = open(&(0x7f00000020c0)='./file0\x00', 0x12538eea49676355, 0x0)
ftruncate(r1, 0x88801)
r2 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x400000e, 0x4088053, r1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0xff5, &(0x7f0000000800)="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", 0x0, 0x0, &(0x7f0000000380)})
r3 = dup(r2)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000000)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x43d, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8)
sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x5e, 0x401, 0x0, 0x25dfdbfb, "", [@typed={0x4}, @typed={0x8, 0x3ffd, 0x0, 0x0, @uid}]}, 0x1c}], 0x1}, 0x0)
pipe(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYBLOB="0000000e000000"], 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001b00)=ANY=[@ANYBLOB], 0x120}}, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)

3.487490542s ago: executing program 1 (id=1631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0)

3.447966376s ago: executing program 3 (id=1632):
syz_open_procfs(0x0, &(0x7f0000000640)='task\x00')
socket$pppoe(0x18, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_open_procfs(0x0, &(0x7f0000000600)='comm\x00')
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)

3.029192265s ago: executing program 3 (id=1633):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mremap(&(0x7f0000aeb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0)

2.973545724s ago: executing program 4 (id=1634):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
sendfile(r1, r2, 0x0, 0x200)

2.951578124s ago: executing program 1 (id=1635):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r2, 0x11, 0x0, 0x4)

2.596311695s ago: executing program 3 (id=1636):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = userfaultfd(0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r4, 0x5412, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240))
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}]}]}]}, 0x44}}, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000100)={0x10})
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7d})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x0)
read(0xffffffffffffffff, &(0x7f0000000380)=""/167, 0xa7)

153.762114ms ago: executing program 1 (id=1637):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0x8, 0xd}, {0x8, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

112.774513ms ago: executing program 4 (id=1638):
r0 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r0, 0x3)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x6e20, 0x0, @empty}, 0x1c)
listen(r2, 0x80)
listen(r1, 0x3)

0s ago: executing program 3 (id=1639):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

kernel console output (not intermixed with test programs):

ice strings: Mfr=0, Product=0, SerialNumber=0
[  636.125557][ T5275] usb 2-1: config 0 descriptor??
[  636.139623][ T2509] bridge_slave_1: left allmulticast mode
[  636.145476][ T2509] bridge_slave_1: left promiscuous mode
[  636.152066][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.166160][ T2509] bridge_slave_0: left allmulticast mode
[  636.172555][ T2509] bridge_slave_0: left promiscuous mode
[  636.178531][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.612987][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.628469][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.763146][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0
[  636.779035][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0
[  636.787208][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0
[  636.809795][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0
[  636.819948][ T5275] samsung 0003:0419:0600.0007: unknown main item tag 0x0
[  636.850541][ T5275] samsung 0003:0419:0600.0007: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0
[  637.411043][ T5231] Bluetooth: hci2: command tx timeout
[  638.031269][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  638.115817][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  638.179193][ T2509] bond0 (unregistering): Released all slaves
[  639.473077][ T5231] Bluetooth: hci2: command tx timeout
[  639.552726][ T8678] usb 2-1: USB disconnect, device number 17
[  640.572721][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  640.584487][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  640.596663][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  640.607736][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  640.617515][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  640.625806][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  640.730376][ T2509] hsr_slave_0: left promiscuous mode
[  640.743619][ T2509] hsr_slave_1: left promiscuous mode
[  640.764191][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  640.777893][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  640.797002][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  640.820436][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  640.927198][ T2509] veth1_macvtap: left promiscuous mode
[  640.933886][ T2509] veth0_macvtap: left promiscuous mode
[  640.940908][ T2509] veth1_vlan: left promiscuous mode
[  640.948553][ T2509] veth0_vlan: left promiscuous mode
[  641.562113][ T5238] Bluetooth: hci2: command tx timeout
[  642.408871][ T2509] team0 (unregistering): Port device team_slave_1 removed
[  642.487188][ T2509] team0 (unregistering): Port device team_slave_0 removed
[  642.676122][ T5238] Bluetooth: hci5: command tx timeout
[  643.636604][ T5238] Bluetooth: hci2: command tx timeout
[  643.663298][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  643.663322][   T29] audit: type=1400 audit(1723165390.604:1136): avc:  denied  { mount } for  pid=9388 comm="syz.4.1200" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  644.753228][ T5238] Bluetooth: hci5: command tx timeout
[  645.007278][ T9341] chnl_net:caif_netlink_parms(): no params data found
[  645.244706][ T2509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.565082][ T2509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.703654][ T9415] can0: slcan on ptm0.
[  645.888890][ T2509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.231793][ T9414] can0 (unregistered): slcan off ptm0.
[  646.300450][ T2509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.551064][   T29] audit: type=1326 audit(1723165393.484:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.4.1211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46547779f9 code=0x0
[  646.599669][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.655340][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.689010][ T9341] bridge_slave_0: entered allmulticast mode
[  646.733878][ T9341] bridge_slave_0: entered promiscuous mode
[  646.795208][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.811060][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.826662][ T9341] bridge_slave_1: entered allmulticast mode
[  646.832985][ T5238] Bluetooth: hci5: command tx timeout
[  646.866548][ T9341] bridge_slave_1: entered promiscuous mode
[  646.889420][   T29] audit: type=1400 audit(1723165393.824:1138): avc:  denied  { ioctl } for  pid=9428 comm="syz.4.1211" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  647.089613][ T9371] chnl_net:caif_netlink_parms(): no params data found
[  647.138432][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  647.160508][ T9197] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  647.223233][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  647.281521][ T9197] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  647.302046][ T9197] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  648.912461][ T5238] Bluetooth: hci5: command tx timeout
[  648.972470][ T9341] team0: Port device team_slave_0 added
[  649.002198][ T9197] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  649.058784][ T9341] team0: Port device team_slave_1 added
[  649.363809][ T9453] sctp: [Deprecated]: syz.4.1215 (pid 9453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  649.363809][ T9453] Use struct sctp_sack_info instead
[  649.467255][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.506075][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.670882][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.905696][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.913619][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.921258][ T9371] bridge_slave_0: entered allmulticast mode
[  649.939648][ T9371] bridge_slave_0: entered promiscuous mode
[  649.951412][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.958426][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  650.018816][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  650.175017][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.185599][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.199828][ T9371] bridge_slave_1: entered allmulticast mode
[  650.222953][ T9371] bridge_slave_1: entered promiscuous mode
[  650.572860][ T2509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.743805][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  650.881536][ T2509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.974187][   T29] audit: type=1400 audit(1723165397.914:1139): avc:  denied  { setopt } for  pid=9454 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  651.023349][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'.
[  651.066020][ T9341] hsr_slave_0: entered promiscuous mode
[  651.090305][ T9341] hsr_slave_1: entered promiscuous mode
[  651.126147][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.264704][ T2509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.447335][ T9371] team0: Port device team_slave_0 added
[  651.460106][ T9371] team0: Port device team_slave_1 added
[  651.525174][ T2509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.746862][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.760802][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.793608][ T5209] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  651.820798][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.835548][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.843442][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.869471][    C1] vkms_vblank_simulate: vblank timer overrun
[  651.880453][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.927760][   T29] audit: type=1400 audit(1723165398.864:1140): avc:  denied  { mounton } for  pid=9460 comm="syz.1.1220" path="/proc/405/cgroup" dev="proc" ino=30908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  651.995631][   T29] audit: type=1400 audit(1723165398.864:1141): avc:  denied  { mounton } for  pid=9460 comm="syz.1.1220" path="/proc/405/cgroup" dev="proc" ino=30905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[  652.019422][    C1] vkms_vblank_simulate: vblank timer overrun
[  652.115310][ T5209] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  652.227935][ T5209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  652.341970][ T5209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  652.354146][ T5209] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99
[  652.364274][ T5209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.405832][ T5209] usb 5-1: config 0 descriptor??
[  652.446672][ T9457] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  652.474771][ T5209] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  652.773255][ T5209] usb 5-1: USB disconnect, device number 14
[  653.003067][ T9371] hsr_slave_0: entered promiscuous mode
[  653.010200][ T9371] hsr_slave_1: entered promiscuous mode
[  653.018084][ T9371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  653.026497][ T9371] Cannot create hsr debugfs directory
[  653.192799][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  653.564165][ T2509] bridge_slave_1: left allmulticast mode
[  653.580868][ T2509] bridge_slave_1: left promiscuous mode
[  653.586812][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.595767][ T9472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  653.614259][ T2509] bridge_slave_0: left allmulticast mode
[  653.630812][ T2509] bridge_slave_0: left promiscuous mode
[  653.641376][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.661969][ T9472] kvm: pic: level sensitive irq not supported
[  653.662072][ T9472] kvm: pic: non byte read
[  653.663474][ T2509] team0: left allmulticast mode
[  653.668754][ T9472] kvm: pic: level sensitive irq not supported
[  653.679381][ T2509] team_slave_0: left allmulticast mode
[  653.702847][ T9472] kvm: pic: non byte read
[  653.706029][ T2509] team_slave_1: left allmulticast mode
[  653.719813][ T2509] team0: left promiscuous mode
[  653.740680][ T2509] team_slave_0: left promiscuous mode
[  653.747284][ T2509] team_slave_1: left promiscuous mode
[  653.779133][ T2509] bridge0: port 3(team0) entered disabled state
[  653.822173][ T2509] bridge_slave_1: left allmulticast mode
[  653.831611][ T2509] bridge_slave_1: left promiscuous mode
[  653.837858][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.867306][ T2509] bridge_slave_0: left allmulticast mode
[  653.886457][ T2509] bridge_slave_0: left promiscuous mode
[  653.899353][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.481691][ T9484] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1227'.
[  655.929820][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.948290][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.963512][ T2509] bond0 (unregistering): Released all slaves
[  655.984059][ T2509] bond1 (unregistering): Released all slaves
[  656.215756][ T2509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  656.228587][ T2509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.243202][ T2509] bond0 (unregistering): Released all slaves
[  656.487433][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.788508][ T9197] 8021q: adding VLAN 0 to HW filter on device team0
[  657.000816][ T1184] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  657.058557][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.065846][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  657.147535][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.154876][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  657.180763][ T1184] usb 2-1: Using ep0 maxpacket: 32
[  657.236359][ T1184] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  657.322496][ T1184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  657.417899][ T1184] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  657.459738][ T1184] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  657.507635][ T1184] usb 2-1: Product: syz
[  657.541120][ T1184] usb 2-1: Manufacturer: syz
[  657.545800][ T1184] usb 2-1: SerialNumber: syz
[  657.609251][ T1184] usb 2-1: config 0 descriptor??
[  657.663871][ T1184] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  657.699925][ T1184] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  657.920882][ T2509] hsr_slave_0: left promiscuous mode
[  658.006733][ T2509] hsr_slave_1: left promiscuous mode
[  658.041731][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.060403][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.102091][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.109651][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.156978][ T1173] usb 2-1: USB disconnect, device number 18
[  658.163437][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  658.201901][ T1173] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  658.209455][ T2509] hsr_slave_0: left promiscuous mode
[  658.221444][ T2509] hsr_slave_1: left promiscuous mode
[  658.244357][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.256010][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.268756][ T2509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.281135][ T2509] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.344413][ T2509] veth1_macvtap: left promiscuous mode
[  658.350173][ T2509] veth0_macvtap: left promiscuous mode
[  658.354318][ T9498] ldusb: No device or device unplugged -19
[  658.356007][ T2509] veth1_vlan: left promiscuous mode
[  658.368853][ T2509] veth0_vlan: left promiscuous mode
[  658.378714][ T2509] veth1_macvtap: left promiscuous mode
[  658.384485][ T2509] veth0_macvtap: left promiscuous mode
[  658.390180][ T2509] veth1_vlan: left allmulticast mode
[  658.395909][ T2509] veth1_vlan: left promiscuous mode
[  658.402564][ T2509] veth0_vlan: left promiscuous mode
[  658.510857][ T1184] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  658.707393][ T1184] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  658.717662][ T1184] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  658.736342][ T1184] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  658.747119][ T1184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.757998][ T1184] usb 5-1: Product: syz
[  658.773219][ T1184] usb 5-1: Manufacturer: syz
[  658.777900][ T1184] usb 5-1: SerialNumber: syz
[  658.788190][ T1184] usb 5-1: config 0 descriptor??
[  658.797706][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  658.805844][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  659.033161][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  659.053529][ T9507] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  659.589055][ T1184] dm9601: No valid MAC address in EEPROM, using 2a:b9:b7:a6:c2:96
[  659.607983][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'.
[  659.829550][ T1184] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  660.333281][ T1184] usb 5-1: USB disconnect, device number 15
[  660.909793][ T9527] netlink: 'syz.1.1240': attribute type 2 has an invalid length.
[  660.929815][ T9527] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1240'.
[  660.962727][ T2509] team0 (unregistering): Port device team_slave_1 removed
[  661.091870][ T2509] team0 (unregistering): Port device team_slave_0 removed
[  662.282128][ T2509] pim6reg (unregistering): left allmulticast mode
[  662.335639][ T1173] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  662.451950][ T2509] macvlan1 (unregistering): left allmulticast mode
[  662.550792][ T1173] usb 2-1: Using ep0 maxpacket: 8
[  662.561198][ T1173] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  662.569574][ T1173] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  662.584036][ T1173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  662.595541][ T1173] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  662.620807][ T1173] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  662.635902][ T1173] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  662.645955][ T1173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.886386][ T1173] usb 2-1: GET_CAPABILITIES returned 0
[  662.892369][ T1173] usbtmc 2-1:16.0: can't read capabilities
[  663.091176][ T2509] team0 (unregistering): Port device team_slave_1 removed
[  663.177480][ T2509] team0 (unregistering): Port device team_slave_0 removed
[  663.340551][ T9532] usbtmc 2-1:16.0: usb_control_msg returned -32
[  663.372255][ T1173] usb 2-1: USB disconnect, device number 19
[  664.093213][ T9341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  664.187658][ T9341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  664.248296][ T9341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  664.409960][ T9341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  664.629074][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.035200][ T9197] veth0_vlan: entered promiscuous mode
[  665.091221][ T5279] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  665.101481][ T9197] veth1_vlan: entered promiscuous mode
[  665.220794][ T8678] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  665.332215][ T5279] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  665.356234][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.375554][ T9371] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  665.393634][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.397143][ T9371] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  665.414567][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.427281][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.439808][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.454511][ T9371] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  665.454701][ T8678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  665.472716][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.486980][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.492934][ T8678] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  665.507170][ T5279] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  665.507266][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ee.8d
[  665.507309][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.538154][ T5279] pwc: Logitech QuickCam Zoom USB webcam detected.
[  665.543657][ T9371] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  665.556748][ T5279] pwc: Warning: more than 1 configuration available.
[  665.577129][ T9197] veth0_macvtap: entered promiscuous mode
[  665.590388][ T8678] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  665.599757][ T8678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  665.626082][ T8678] usb 5-1: SerialNumber: syz
[  665.673905][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.686232][ T9197] veth1_macvtap: entered promiscuous mode
[  665.756234][ T5279] pwc: Failed to set LED on/off time (-71)
[  665.771653][ T5279] pwc: send_video_command error -71
[  665.778282][ T5279] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  665.812531][ T5279] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71
[  665.826804][ T9341] 8021q: adding VLAN 0 to HW filter on device team0
[  665.898331][ T8678] usb 5-1: 0:2 : does not exist
[  665.907337][ T5279] usb 2-1: USB disconnect, device number 20
[  665.924806][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  665.969542][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  665.990979][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.000735][ T8678] usb 5-1: USB disconnect, device number 16
[  666.002722][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.027306][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.047013][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.071985][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.166654][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.174009][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.198125][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.205386][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.225372][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.236165][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.247452][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.263475][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  666.279555][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.290197][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.310746][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.329887][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  666.408723][ T9197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.434343][ T9197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.443674][ T9197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.452631][ T9197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.805111][  T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.815376][  T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.916004][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.064516][   T29] audit: type=1400 audit(1723165414.004:1142): avc:  denied  { setattr } for  pid=9556 comm="syz.4.1251" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  667.101279][ T2536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.121515][ T2536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.137011][ T9371] 8021q: adding VLAN 0 to HW filter on device team0
[  667.203820][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.211150][ T5209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.276028][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.283499][ T8678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.658032][   T29] audit: type=1400 audit(1723165414.594:1143): avc:  denied  { ioctl } for  pid=9560 comm="syz.4.1252" path="socket:[30692]" dev="sockfs" ino=30692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  667.719802][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.241180][ T9341] veth0_vlan: entered promiscuous mode
[  668.313131][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  668.427725][ T9341] veth1_vlan: entered promiscuous mode
[  668.665323][ T9341] veth0_macvtap: entered promiscuous mode
[  668.738975][ T9341] veth1_macvtap: entered promiscuous mode
[  668.746117][ T5275] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  669.021592][ T5275] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  669.173391][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.295658][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.313664][ T5275] usb 3-1: config 0 descriptor??
[  669.329984][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.359282][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.390819][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.417119][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.438267][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.457793][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  669.478939][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.519001][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.546374][ T9371] veth0_vlan: entered promiscuous mode
[  669.638319][   T29] audit: type=1400 audit(1723165416.574:1144): avc:  denied  { create } for  pid=9580 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  669.695062][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.734931][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.766503][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.795636][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.820830][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.833839][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.855325][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  669.886530][ T9581] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  669.893569][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  669.913806][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.984285][ T9341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.016649][ T9341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.053044][ T9341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.066116][ T9341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.099178][ T9371] veth1_vlan: entered promiscuous mode
[  670.465311][ T9371] veth0_macvtap: entered promiscuous mode
[  670.544393][ T9371] veth1_macvtap: entered promiscuous mode
[  670.883094][ T5275] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  671.007326][ T5275] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  671.132463][ T5275] asix 3-1:0.0: probe with driver asix failed with error -71
[  671.178504][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.267462][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.430009][ T5275] usb 3-1: USB disconnect, device number 22
[  671.611184][   T29] audit: type=1326 audit(1723165418.454:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz.1.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f725779f9 code=0x0
[  671.803117][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.843032][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.884354][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.919010][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.988013][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.036104][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.080561][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.104429][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.125521][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.144789][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.174249][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.223771][ T2509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.236274][ T2509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.518266][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.847157][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.910732][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.040493][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.321396][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.827476][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.859853][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.882989][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.908379][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.927414][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.941693][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.010214][ T9371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.057867][ T9371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.078035][ T9371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.100495][ T9371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.875219][ T5362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.902296][ T5362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.395288][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.415949][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.021161][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'.
[  676.151714][ T8678] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  676.184833][   T29] audit: type=1400 audit(1723165423.124:1146): avc:  denied  { map } for  pid=9638 comm="syz.0.1275" path="socket:[33401]" dev="sockfs" ino=33401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  676.311280][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1278'.
[  676.382561][ T8678] usb 2-1: Using ep0 maxpacket: 32
[  676.395711][ T8678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  676.420559][ T8678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  676.466615][ T8678] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  676.521973][ T8678] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  676.546315][ T8678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.578210][ T8678] usb 2-1: config 0 descriptor??
[  677.195310][ T8678] itetech 0003:048D:8595.0008: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0
[  677.318349][ T9665] serio: Serial port ptm0
[  678.191530][ T5231] Bluetooth: hci0: command 0x0405 tx timeout
[  678.479402][ T5305] usb 2-1: USB disconnect, device number 21
[  679.024048][   T29] audit: type=1400 audit(1723165425.794:1147): avc:  denied  { connect } for  pid=9684 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  679.904247][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.911575][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.959426][   T29] audit: type=1400 audit(1723165426.884:1148): avc:  denied  { ioctl } for  pid=9690 comm="syz.3.1292" path="socket:[32172]" dev="sockfs" ino=32172 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  680.077732][   T29] audit: type=1400 audit(1723165426.984:1149): avc:  denied  { ioctl } for  pid=9672 comm="syz.4.1284" path="socket:[32180]" dev="sockfs" ino=32180 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  687.902925][ T9722] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) !
[  688.832668][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  688.894697][   T29] audit: type=1400 audit(1723165435.824:1150): avc:  denied  { listen } for  pid=9728 comm="syz.0.1303" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  689.050748][    T9] usb 4-1: Using ep0 maxpacket: 16
[  689.064209][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  689.087794][    T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  689.111349][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.151458][    T9] usb 4-1: Product: syz
[  689.155697][    T9] usb 4-1: Manufacturer: syz
[  689.191284][    T9] usb 4-1: SerialNumber: syz
[  689.212594][    T9] usb 4-1: config 0 descriptor??
[  689.243287][    T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  689.268783][   T29] audit: type=1400 audit(1723165436.204:1151): avc:  denied  { ioctl } for  pid=9732 comm="syz.1.1305" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  689.302672][    T9] usb 4-1: Detected FT232R
[  689.540030][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  689.591880][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  689.662299][    T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  689.687293][    T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  689.766146][    T9] usb 4-1: USB disconnect, device number 20
[  689.776308][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  689.791691][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  689.802090][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  689.816136][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  689.831685][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  689.839495][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  690.484985][   T29] audit: type=1400 audit(1723165437.184:1152): avc:  denied  { create } for  pid=9735 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  690.893239][   T29] audit: type=1400 audit(1723165437.204:1153): avc:  denied  { write } for  pid=9735 comm="syz.0.1306" path="socket:[33561]" dev="sockfs" ino=33561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  691.221348][ T1184] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  691.484138][ T1184] usb 2-1: Using ep0 maxpacket: 8
[  691.491192][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  691.643832][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  691.684739][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  691.918144][    T9] ftdi_sio 4-1:0.0: device disconnected
[  691.953320][ T5231] Bluetooth: hci0: command tx timeout
[  692.051776][   T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.071674][ T1184] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  692.104735][ T1184] usb 2-1: config 1 has no interface number 1
[  692.120993][ T1184] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  692.150908][ T1184] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  692.206824][ T1184] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  692.263835][ T1184] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  692.296989][ T1184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.351095][ T1184] usb 2-1: Product: syz
[  692.359411][ T1184] usb 2-1: Manufacturer: syz
[  692.379933][ T1184] usb 2-1: SerialNumber: syz
[  692.412711][ T9746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  692.558665][   T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.897127][   T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.898174][ T1184] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  692.977915][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'.
[  693.000916][ T9765] netlink: 'syz.3.1310': attribute type 25 has an invalid length.
[  693.071754][ T1184] usb 2-1: USB disconnect, device number 22
[  693.189574][ T9765] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  693.199655][ T9765] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  693.208496][ T9765] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  693.217338][ T9765] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  693.364594][   T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.433247][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.070945][ T5231] Bluetooth: hci0: command tx timeout
[  694.123141][   T34] bridge_slave_1: left allmulticast mode
[  694.128860][   T34] bridge_slave_1: left promiscuous mode
[  694.192331][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.267523][   T34] bridge_slave_0: left allmulticast mode
[  694.301083][   T34] bridge_slave_0: left promiscuous mode
[  694.310265][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.433277][ T9779] hfs: can't find a HFS filesystem on dev nullb0
[  696.110716][ T5231] Bluetooth: hci0: command tx timeout
[  698.230818][ T5231] Bluetooth: hci0: command tx timeout
[  698.512369][ T9811] Bluetooth: MGMT ver 1.23
[  699.396135][   T29] audit: type=1400 audit(1723165446.324:1154): avc:  denied  { write } for  pid=9815 comm="syz.0.1327" path="socket:[32426]" dev="sockfs" ino=32426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  699.865640][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  699.880477][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  699.890053][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  699.933503][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  699.943699][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  699.952269][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  700.084391][ T5305] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  700.119198][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.147520][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.173597][   T34] bond0 (unregistering): Released all slaves
[  700.255327][ T9734] chnl_net:caif_netlink_parms(): no params data found
[  700.288708][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.346019][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  700.370487][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'.
[  700.381024][ T9807] netlink: 'syz.1.1323': attribute type 30 has an invalid length.
[  700.389087][ T5305] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  700.404586][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.479143][ T5305] usb 4-1: config 0 descriptor??
[  700.601185][ T5231] Bluetooth: hci0: command tx timeout
[  701.294916][ T5305] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  701.466153][ T5305] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  701.841412][   T34] hsr_slave_0: left promiscuous mode
[  701.859838][   T34] hsr_slave_1: left promiscuous mode
[  701.873895][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  701.883527][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.913282][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.937096][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  702.031295][ T5231] Bluetooth: hci6: command tx timeout
[  702.264247][   T34] veth1_macvtap: left promiscuous mode
[  702.273913][   T34] veth0_macvtap: left promiscuous mode
[  702.280090][   T34] veth1_vlan: left promiscuous mode
[  702.286859][   T34] veth0_vlan: left promiscuous mode
[  703.690668][ T1184] usb 4-1: USB disconnect, device number 21
[  703.899685][   T29] audit: type=1400 audit(1723165450.834:1155): avc:  denied  { module_load } for  pid=9840 comm="syz.3.1334" path=2F6D656D66643A2D42D54E49C56A9A706987B9029524F10C0B18202864656C6574656429 dev="hugetlbfs" ino=32511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1
[  703.909377][ T9842] Invalid ELF header magic: != ELF
[  703.928927][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.120773][ T5231] Bluetooth: hci6: command tx timeout
[  704.159457][   T34] team0 (unregistering): Port device team_slave_1 removed
[  704.251899][   T34] team0 (unregistering): Port device team_slave_0 removed
[  705.140706][ T1184] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  705.176217][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.186130][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.193899][ T9734] bridge_slave_0: entered allmulticast mode
[  705.202938][ T9734] bridge_slave_0: entered promiscuous mode
[  705.234093][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.251420][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.258771][ T9734] bridge_slave_1: entered allmulticast mode
[  705.283599][ T9734] bridge_slave_1: entered promiscuous mode
[  705.340728][ T1184] usb 4-1: Using ep0 maxpacket: 8
[  705.356252][ T1184] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62
[  705.375814][ T1184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.404026][ T1184] usb 4-1: config 0 descriptor??
[  705.427712][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.448639][ T1184] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  705.513511][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.700367][   T29] audit: type=1400 audit(1723165452.634:1156): avc:  denied  { connect } for  pid=9850 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  705.751993][ T1184] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  705.889546][ T9734] team0: Port device team_slave_0 added
[  705.958252][ T9734] team0: Port device team_slave_1 added
[  706.072163][ T9468] udevd[9468]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  706.192086][ T5231] Bluetooth: hci6: command tx timeout
[  706.253051][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.261848][ T1184] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  706.281597][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.426884][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  707.179942][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  707.211541][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  707.269144][ T1184] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  707.285775][ T1184] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  707.300718][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.326771][ T1184] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  707.350970][ T1184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  707.359084][ T1184] usb 2-1: SerialNumber: syz
[  710.205702][ T5231] Bluetooth: hci6: command tx timeout
[  710.230782][ T5323] usb 4-1: USB disconnect, device number 22
[  710.979921][ T1184] usb 2-1: skipping empty audio interface (v1)
[  711.096193][ T1184] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  711.171651][ T1184] usb 2-1: USB disconnect, device number 23
[  711.263948][ T9734] hsr_slave_0: entered promiscuous mode
[  711.314758][ T9734] hsr_slave_1: entered promiscuous mode
[  711.353093][ T9734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  711.370902][ T9734] Cannot create hsr debugfs directory
[  711.446398][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  711.736290][ T9823] chnl_net:caif_netlink_parms(): no params data found
[  711.746675][ T9864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1342'.
[  711.918758][   T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.308901][   T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.514160][   T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.679774][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.688554][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.697751][ T9823] bridge_slave_0: entered allmulticast mode
[  712.725825][ T9823] bridge_slave_0: entered promiscuous mode
[  712.770348][   T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.828917][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.847635][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.863006][ T9823] bridge_slave_1: entered allmulticast mode
[  712.871342][ T9823] bridge_slave_1: entered promiscuous mode
[  713.113222][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.280148][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  713.296682][ T9882] xt_CT: You must specify a L4 protocol and not use inversions on it
[  713.331328][   T29] audit: type=1400 audit(1723165460.264:1157): avc:  denied  { map } for  pid=9881 comm="syz.3.1347" path="socket:[33899]" dev="sockfs" ino=33899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  713.563757][ T9823] team0: Port device team_slave_0 added
[  713.601604][ T9823] team0: Port device team_slave_1 added
[  713.963213][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.970231][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.000533][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  714.044487][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  714.065753][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.092977][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.105273][   T34] bridge_slave_1: left allmulticast mode
[  714.114083][   T34] bridge_slave_1: left promiscuous mode
[  714.121196][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.133863][   T34] bridge_slave_0: left allmulticast mode
[  714.139636][   T34] bridge_slave_0: left promiscuous mode
[  714.147670][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.210847][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  714.421227][    T9] usb 2-1: Using ep0 maxpacket: 8
[  714.434729][    T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  714.454118][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.473502][    T9] usb 2-1: config 0 descriptor??
[  715.177417][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  715.209634][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  715.230439][   T34] bond0 (unregistering): Released all slaves
[  715.327117][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'.
[  715.717393][ T9823] hsr_slave_0: entered promiscuous mode
[  715.961404][ T9823] hsr_slave_1: entered promiscuous mode
[  716.011027][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  716.030276][ T9823] Cannot create hsr debugfs directory
[  718.775883][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  718.813410][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  718.900616][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[  719.014368][    T9] usb 2-1: USB disconnect, device number 24
[  719.054770][ T9470] udevd[9470]: failed to send result of seq 19336 to main daemon: Connection refused
[  719.338513][ T9913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1357'.
[  719.472110][ T9469] udevd[9469]: failed to send result of seq 19333 to main daemon: Transport endpoint is not connected
[  719.664999][   T34] hsr_slave_0: left promiscuous mode
[  719.681069][   T34] hsr_slave_1: left promiscuous mode
[  719.687806][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  719.696977][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.706217][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  719.714201][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  719.838439][   T34] veth1_macvtap: left promiscuous mode
[  719.848616][   T34] veth0_macvtap: left promiscuous mode
[  719.871615][   T34] veth1_vlan: left promiscuous mode
[  719.879694][   T34] veth0_vlan: left promiscuous mode
[  719.930698][ T5277] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  720.131026][ T5277] usb 2-1: Using ep0 maxpacket: 32
[  720.145611][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  720.157611][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  720.181825][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  720.218037][ T5277] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  720.228513][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  720.243436][ T5277] usb 2-1: Product: syz
[  720.247767][ T5277] usb 2-1: Manufacturer: syz
[  720.252835][ T5277] usb 2-1: SerialNumber: syz
[  720.263611][ T9922] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  720.280208][ T5277] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input15
[  720.358517][    C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  720.512739][    C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  720.567852][ T5277] usb 2-1: USB disconnect, device number 25
[  720.649768][ T5277] appletouch 2-1:1.0: input: appletouch disconnected
[  721.519405][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'.
[  721.910645][   T34] team0 (unregistering): Port device team_slave_1 removed
[  722.048484][   T34] team0 (unregistering): Port device team_slave_0 removed
[  723.254215][   T29] audit: type=1400 audit(1723165470.194:1158): avc:  denied  { ioctl } for  pid=9940 comm="syz.0.1367" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  723.350444][ T9734] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  723.459770][ T9734] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  723.497390][ T9734] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  723.546897][ T9734] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  724.531906][ T9951] netlink: 'syz.1.1370': attribute type 4 has an invalid length.
[  725.638768][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0
[  725.729938][ T9734] 8021q: adding VLAN 0 to HW filter on device team0
[  725.774230][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.781535][ T5305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  725.860475][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.867789][ T5209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  725.960769][ T1184] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  726.192516][ T1184] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.220245][ T1184] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  726.248031][ T9823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  726.254408][ T1184] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[  726.279844][ T1184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.310726][ T1184] usb 2-1: Product: syz
[  726.315067][ T1184] usb 2-1: Manufacturer: syz
[  726.325373][ T1184] usb 2-1: SerialNumber: syz
[  726.345457][ T1184] usb 2-1: config 0 descriptor??
[  726.368927][ T9823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  726.386433][ T9823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  726.399543][ T1184] usb 2-1: Found UVC 0.00 device syz (468c:90ea)
[  726.419819][ T1184] usb 2-1: No valid video chain found.
[  726.437990][ T9823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  726.479413][ T9734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  727.059972][   T29] audit: type=1400 audit(1723165473.994:1159): avc:  denied  { read } for  pid=9957 comm="syz.1.1372" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  727.209956][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.449890][ T9823] 8021q: adding VLAN 0 to HW filter on device team0
[  727.516205][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  727.565722][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.573030][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.706592][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.713950][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.023150][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'.
[  728.820789][ T5209] usb 2-1: USB disconnect, device number 26
[  728.824471][ T9734] veth0_vlan: entered promiscuous mode
[  728.952522][ T9734] veth1_vlan: entered promiscuous mode
[  729.551085][ T5305] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  730.233840][ T5305] usb 4-1: Using ep0 maxpacket: 8
[  730.268735][ T5305] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice= 5.fc
[  730.298609][ T9734] veth0_macvtap: entered promiscuous mode
[  730.300952][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.348584][ T5305] usb 4-1: Product: syz
[  730.356351][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.356463][ T5305] usb 4-1: Manufacturer: syz
[  730.381954][ T9734] veth1_macvtap: entered promiscuous mode
[  730.392861][ T5305] usb 4-1: SerialNumber: syz
[  730.402524][ T5305] usb 4-1: config 0 descriptor??
[  730.497976][ T9997] netlink: 'syz.0.1381': attribute type 2 has an invalid length.
[  730.519451][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'.
[  730.545175][ T9997] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  730.623925][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.643891][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.661350][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.682882][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.724712][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.745756][ T5305] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  730.763859][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.796271][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.807008][ T5305] usb 4-1: USB disconnect, device number 23
[  730.832533][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.853262][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.905711][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.919703][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.931146][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.945064][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.955443][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.989536][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.002960][ T9734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.014057][ T9734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.027362][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  731.146645][ T9734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.200987][ T9734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.209811][ T9734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  731.219249][ T9734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  731.258477][ T9823] veth0_vlan: entered promiscuous mode
[  731.340503][ T9823] veth1_vlan: entered promiscuous mode
[  731.747509][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.780628][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.839088][ T9823] veth0_macvtap: entered promiscuous mode
[  731.935485][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.948394][ T9823] veth1_macvtap: entered promiscuous mode
[  731.967469][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.062513][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.092006][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.104117][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.117167][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.131086][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.154124][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.180261][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.195468][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.207372][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.229843][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.263587][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  732.359985][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.387881][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.446768][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.471776][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.517957][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.546101][T10005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  732.556435][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.587391][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.664238][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.690664][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.708291][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.735881][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.919994][ T9823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.957707][ T9823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.988236][ T9823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  733.038541][T10023] netlink: 'syz.4.1388': attribute type 20 has an invalid length.
[  733.068694][ T9823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  733.747985][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.761537][ T5323] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  733.769896][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.977431][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.991269][ T5323] usb 4-1: Using ep0 maxpacket: 16
[  733.995247][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.027559][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  734.071603][ T5323] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  734.091043][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.118374][ T5323] usb 4-1: Product: syz
[  734.130857][ T5323] usb 4-1: Manufacturer: syz
[  734.156073][ T5323] usb 4-1: SerialNumber: syz
[  734.201979][ T5323] usb 4-1: config 0 descriptor??
[  734.233687][ T5323] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  734.266970][ T5323] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  734.873442][ T5323] em28xx 4-1:0.0: chip ID is em2860
[  735.230485][ T5323] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  735.246184][ T5323] em28xx 4-1:0.0: board has no eeprom
[  735.314612][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1397'.
[  735.400697][ T5323] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  735.418880][ T5323] em28xx 4-1:0.0: dvb set to bulk mode.
[  735.446501][ T5305] em28xx 4-1:0.0: Binding DVB extension
[  735.487583][ T5323] usb 4-1: USB disconnect, device number 24
[  735.532126][ T5323] em28xx 4-1:0.0: Disconnecting em28xx
[  735.702507][ T5305] em28xx 4-1:0.0: Registering input extension
[  735.936809][ T5305] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  735.991200][ T5305] Registered IR keymap rc-empty
[  736.045486][ T5305] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  736.092895][ T5305] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16
[  736.173282][ T5305] em28xx 4-1:0.0: Input extension successfully initialized
[  736.181587][ T5209] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  736.216752][ T5323] em28xx 4-1:0.0: Closing input extension
[  736.402576][ T5209] usb 2-1: Using ep0 maxpacket: 16
[  736.454870][ T5209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  736.510784][ T5209] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  736.533698][ T5323] em28xx 4-1:0.0: Freeing device
[  736.597088][ T5209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.673729][ T5209] usb 2-1: config 0 descriptor??
[  736.708277][   T29] audit: type=1400 audit(1723165483.624:1160): avc:  denied  { nlmsg_write } for  pid=10038 comm="syz.2.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  736.794611][ T5209] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  737.011124][ T4655] bcm5974 2-1:0.0: could not read from device
[  737.046213][ T4655] bcm5974 2-1:0.0: could not read from device
[  737.326686][ T4655] bcm5974 2-1:0.0: could not read from device
[  737.354798][ T5209] usb 2-1: USB disconnect, device number 27
[  737.380403][ T4655] bcm5974 2-1:0.0: could not read from device
[  745.156929][   T29] audit: type=1400 audit(1723165492.094:1161): avc:  denied  { append } for  pid=10107 comm="syz.1.1415" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  745.194050][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  745.453862][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  745.518956][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  745.585433][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  745.633900][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  745.669309][    T9] usb 3-1: SerialNumber: syz
[  745.692212][T10109] xt_CT: You must specify a L4 protocol and not use inversions on it
[  745.816483][T10115] netlink: 'syz.3.1418': attribute type 1 has an invalid length.
[  746.200359][    T9] usb 3-1: 0:2 : does not exist
[  746.330827][    T9] usb 3-1: USB disconnect, device number 23
[  746.430868][   T29] audit: type=1400 audit(1723165493.344:1162): avc:  denied  { ioctl } for  pid=10118 comm="syz.3.1419" path="socket:[35993]" dev="sockfs" ino=35993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  746.742455][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  746.758464][   T29] audit: type=1400 audit(1723165493.684:1163): avc:  denied  { name_bind } for  pid=10121 comm="syz.3.1421" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  747.307967][T10124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  747.694214][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  747.716962][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  747.726664][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  747.916496][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  747.927040][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  747.943908][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  748.715137][  T987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.821875][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  748.834034][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  748.859781][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  748.879924][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  748.901109][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  748.919142][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  749.138659][  T987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.344198][  T987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.833146][   T29] audit: type=1400 audit(1723165496.764:1164): avc:  denied  { map } for  pid=10151 comm="syz.3.1431" path="/dev/net/tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  750.562021][ T5231] Bluetooth: hci1: command tx timeout
[  750.631369][   T29] audit: type=1400 audit(1723165496.764:1165): avc:  denied  { execute } for  pid=10151 comm="syz.3.1431" path="/dev/net/tun" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  750.764574][  T987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.991540][ T5231] Bluetooth: hci0: command tx timeout
[  751.780707][T10176] Bluetooth: MGMT ver 1.23
[  752.552435][  T987] bridge_slave_1: left allmulticast mode
[  752.558257][  T987] bridge_slave_1: left promiscuous mode
[  752.824168][ T5231] Bluetooth: hci1: command tx timeout
[  752.855599][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.661708][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  756.668109][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  756.751206][ T5231] Bluetooth: hci0: command tx timeout
[  756.760725][ T5231] Bluetooth: hci1: command tx timeout
[  756.824100][  T987] bridge_slave_0: left allmulticast mode
[  756.840141][  T987] bridge_slave_0: left promiscuous mode
[  756.869400][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  757.967310][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.989790][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  758.005558][  T987] bond0 (unregistering): Released all slaves
[  758.275898][T10130] chnl_net:caif_netlink_parms(): no params data found
[  758.859912][ T5238] Bluetooth: hci1: command tx timeout
[  758.859926][ T5231] Bluetooth: hci0: command tx timeout
[  760.920967][ T5238] Bluetooth: hci0: command tx timeout
[  761.937042][T10138] chnl_net:caif_netlink_parms(): no params data found
[  762.073151][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'.
[  762.134461][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  762.341855][T10211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  762.992763][ T5238] Bluetooth: hci0: command tx timeout
[  763.978420][  T987] hsr_slave_0: left promiscuous mode
[  764.004582][  T987] hsr_slave_1: left promiscuous mode
[  764.022170][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  764.041431][  T987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  764.055965][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.082163][  T987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  764.133964][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  764.157683][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  764.158393][  T987] veth1_macvtap: left promiscuous mode
[  764.171267][  T987] veth0_macvtap: left promiscuous mode
[  764.177172][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  764.177290][  T987] veth1_vlan: left promiscuous mode
[  764.190032][  T987] veth0_vlan: left promiscuous mode
[  764.244540][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  764.252946][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  764.260904][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  764.280810][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  764.472600][    T9] usb 3-1: Using ep0 maxpacket: 8
[  764.500405][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  764.552162][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  764.578321][    T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  764.598225][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.618092][    T9] usb 3-1: config 0 descriptor??
[  764.634042][    T9] qmi_wwan 3-1:0.0: bogus CDC Union: master=0, slave=2
[  765.331060][   T29] audit: type=1400 audit(1723165511.594:1166): avc:  denied  { accept } for  pid=10236 comm="syz.3.1450" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  765.402352][ T5231] Bluetooth: hci5: command 0x0406 tx timeout
[  765.670089][    T9] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[  765.695089][    T9] usb 3-1: USB disconnect, device number 24
[  766.449112][   T54] Bluetooth: hci2: command tx timeout
[  766.585199][   T54] Bluetooth: hci5: unknown advertising packet type: 0x6b
[  766.585406][   T54] Bluetooth: hci5: Dropping invalid advertising data
[  766.635042][   T54] Bluetooth: hci5: Malformed LE Event: 0x02
[  767.428282][  T987] team0 (unregistering): Port device team_slave_1 removed
[  767.515320][  T987] team0 (unregistering): Port device team_slave_0 removed
[  768.513650][   T54] Bluetooth: hci2: command tx timeout
[  768.707002][T10130] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.726128][T10130] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.741045][T10130] bridge_slave_0: entered allmulticast mode
[  768.759430][T10130] bridge_slave_0: entered promiscuous mode
[  768.908731][T10130] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.953504][T10130] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.000339][T10130] bridge_slave_1: entered allmulticast mode
[  769.035431][T10130] bridge_slave_1: entered promiscuous mode
[  769.089563][T10138] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.122796][T10138] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.130259][T10138] bridge_slave_0: entered allmulticast mode
[  769.143096][T10138] bridge_slave_0: entered promiscuous mode
[  769.153769][T10138] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.161830][T10138] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.169250][T10138] bridge_slave_1: entered allmulticast mode
[  769.177970][T10138] bridge_slave_1: entered promiscuous mode
[  769.387882][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.454597][ T5279] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  769.462231][T10138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.524293][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.612386][T10138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.703175][ T5279] usb 3-1: Using ep0 maxpacket: 16
[  769.724354][ T5279] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  769.741529][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.756340][ T5279] usb 3-1: Product: syz
[  769.773309][ T5279] usb 3-1: Manufacturer: syz
[  769.789197][ T5279] usb 3-1: SerialNumber: syz
[  769.802726][T10130] team0: Port device team_slave_0 added
[  769.821154][ T5279] usb 3-1: config 0 descriptor??
[  769.843668][T10130] team0: Port device team_slave_1 added
[  769.984557][T10138] team0: Port device team_slave_0 added
[  769.998132][T10138] team0: Port device team_slave_1 added
[  770.111871][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  770.118915][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  770.149820][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  770.257426][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  770.273131][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  770.304623][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  770.316750][ T5279] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  770.336037][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  770.348860][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  770.380105][ T5279] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  770.414685][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  770.427680][ T5279] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  770.439281][ T5279] usb 3-1: media controller created
[  770.458938][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  770.482549][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  770.547591][ T5279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  770.556176][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  770.591230][   T54] Bluetooth: hci2: command tx timeout
[  770.736418][ T5279] zl10353_read_register: readreg error (reg=127, ret==0)
[  770.767827][ T5279] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  770.798933][ T5279] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  770.838894][ T5279] usb 3-1: USB disconnect, device number 25
[  771.001313][ T5279] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  771.189118][T10138] hsr_slave_0: entered promiscuous mode
[  771.199972][T10138] hsr_slave_1: entered promiscuous mode
[  771.318224][  T987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.338132][   T29] audit: type=1400 audit(1723165518.274:1167): avc:  denied  { setopt } for  pid=10264 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  771.496156][T10130] hsr_slave_0: entered promiscuous mode
[  771.539621][T10130] hsr_slave_1: entered promiscuous mode
[  771.556775][T10130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  771.569593][T10130] Cannot create hsr debugfs directory
[  771.619528][  T987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.591036][   T29] audit: type=1400 audit(1723165518.764:1168): avc:  denied  { accept } for  pid=10270 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  772.670729][   T54] Bluetooth: hci2: command tx timeout
[  772.684845][T10235] chnl_net:caif_netlink_parms(): no params data found
[  772.854851][  T987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.866180][T10278] netlink: 'syz.2.1462': attribute type 4 has an invalid length.
[  774.064209][  T987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.076744][T10282] overlayfs: missing 'lowerdir'
[  776.109682][T10303] overlayfs: missing 'lowerdir'
[  776.223641][ T5279] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  776.512903][ T5279] usb 4-1: Using ep0 maxpacket: 32
[  776.535031][T10235] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.596665][ T5279] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51
[  776.600959][T10235] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.611181][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.722520][T10235] bridge_slave_0: entered allmulticast mode
[  776.740018][ T5279] usb 4-1: Product: syz
[  776.764347][ T5279] usb 4-1: Manufacturer: syz
[  776.788580][T10235] bridge_slave_0: entered promiscuous mode
[  776.817813][ T5279] usb 4-1: SerialNumber: syz
[  776.831224][ T5279] usb 4-1: config 0 descriptor??
[  776.863159][ T5279] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  776.966442][T10235] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.980853][T10235] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.988283][T10235] bridge_slave_1: entered allmulticast mode
[  777.001169][T10235] bridge_slave_1: entered promiscuous mode
[  777.092774][ T5279] gspca_sn9c2028: read1 error -71
[  777.098895][ T5279] gspca_sn9c2028: read1 error -71
[  777.109937][ T5279] gspca_sn9c2028: read1 error -71
[  777.132793][ T5279] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  777.145303][ T5279] usb 4-1: USB disconnect, device number 25
[  777.447956][T10308] kvm: pic: non byte write
[  777.503869][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  777.999558][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  778.220926][T10235] team0: Port device team_slave_0 added
[  778.320801][  T987] bridge_slave_1: left allmulticast mode
[  778.326521][  T987] bridge_slave_1: left promiscuous mode
[  778.340933][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.619067][  T987] bridge_slave_0: left allmulticast mode
[  778.680243][  T987] bridge_slave_0: left promiscuous mode
[  779.214012][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.940750][ T5209] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  780.173581][ T5209] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  780.182895][ T5209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.207637][ T5209] usb 4-1: config 0 descriptor??
[  780.220438][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.236343][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.249515][  T987] bond0 (unregistering): Released all slaves
[  780.301347][T10235] team0: Port device team_slave_1 added
[  780.653868][ T5209] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  780.654562][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  780.667739][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  780.706452][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  780.765535][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  780.783373][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  780.819740][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.085939][  T987] hsr_slave_0: left promiscuous mode
[  781.090852][ T5209] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  781.101744][ T5209] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  781.121068][  T987] hsr_slave_1: left promiscuous mode
[  781.127222][ T5209] usb 4-1: USB disconnect, device number 26
[  781.134672][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  781.149506][  T987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  781.158534][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  781.170085][  T987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  781.208414][  T987] veth1_macvtap: left promiscuous mode
[  781.217671][  T987] veth0_macvtap: left promiscuous mode
[  781.223569][  T987] veth1_vlan: left promiscuous mode
[  781.229140][  T987] veth0_vlan: left promiscuous mode
[  781.810990][ T5305] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  782.023867][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  782.037917][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  782.048256][ T5305] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  782.058894][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.071233][ T5305] usb 3-1: config 0 descriptor??
[  782.192441][ T5209] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  782.388769][ T5209] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  782.401816][ T5209] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  782.412773][ T5209] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  782.422169][ T5209] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  782.437496][ T5209] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  782.459622][ T5209] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  782.469872][ T5209] usb 4-1: Product: syz
[  782.486056][ T5209] usb 4-1: Manufacturer: syz
[  782.502271][ T5209] cdc_wdm 4-1:1.0: skipping garbage
[  782.507641][ T5209] cdc_wdm 4-1:1.0: skipping garbage
[  782.530133][ T5305] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0
[  782.544272][ T5209] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  782.552723][ T5305] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0
[  782.555406][  T987] team0 (unregistering): Port device team_slave_1 removed
[  782.560113][ T5209] cdc_wdm 4-1:1.0: Unknown control protocol
[  782.582234][ T5305] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000A/input/input18
[  782.635202][ T5305] cm6533_jd 0003:0D8C:0022.000A: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  782.688746][  T987] team0 (unregistering): Port device team_slave_0 removed
[  782.870064][ T5277] usb 4-1: USB disconnect, device number 27
[  782.929136][ T5305] usb 3-1: USB disconnect, device number 26
[  783.943137][T10235] hsr_slave_0: entered promiscuous mode
[  783.952242][T10235] hsr_slave_1: entered promiscuous mode
[  783.963749][T10235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  783.983054][T10235] Cannot create hsr debugfs directory
[  784.301328][ T5279] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  784.422906][T10138] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  784.436302][T10138] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  784.509078][ T5279] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93
[  784.521270][T10138] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  784.540172][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.543824][T10138] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  784.548470][ T5279] usb 4-1: Product: syz
[  784.569605][ T5279] usb 4-1: Manufacturer: syz
[  784.576465][ T5279] usb 4-1: SerialNumber: syz
[  784.585457][ T5279] usb 4-1: config 0 descriptor??
[  784.851931][ T5279] usb 4-1: USB disconnect, device number 28
[  784.955841][  T987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.140619][  T987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.288749][  T987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.533407][T10138] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.693068][T10138] 8021q: adding VLAN 0 to HW filter on device team0
[  785.746508][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.753839][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  785.804812][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.812162][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.024704][  T987] bridge_slave_1: left allmulticast mode
[  786.038963][  T987] bridge_slave_1: left promiscuous mode
[  786.050944][  T987] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.075635][  T987] bridge_slave_0: left allmulticast mode
[  786.089983][  T987] bridge_slave_0: left promiscuous mode
[  786.098260][  T987] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.441329][  T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.514491][  T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.566411][  T987] bond0 (unregistering): Released all slaves
[  788.149188][ T1174] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  788.373513][ T1174] usb 4-1: Using ep0 maxpacket: 32
[  788.388439][ T1174] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae
[  788.419502][ T1174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.436179][ T1174] usb 4-1: Product: syz
[  788.456245][ T1174] usb 4-1: Manufacturer: syz
[  788.461213][ T1174] usb 4-1: SerialNumber: syz
[  788.477815][ T1174] usb 4-1: config 0 descriptor??
[  788.492618][ T1174] ums_eneub6250 4-1:0.0: USB Mass Storage device detected
[  788.611389][  T987] hsr_slave_0: left promiscuous mode
[  788.618351][  T987] hsr_slave_1: left promiscuous mode
[  788.633037][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  788.654825][  T987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  788.674549][  T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  788.691755][  T987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.739251][  T987] veth1_macvtap: left promiscuous mode
[  788.770437][  T987] veth0_macvtap: left promiscuous mode
[  788.787683][  T987] veth1_vlan: left promiscuous mode
[  788.794334][  T987] veth0_vlan: left promiscuous mode
[  789.118311][ T5323] usb 4-1: USB disconnect, device number 29
[  791.324402][  T987] team0 (unregistering): Port device team_slave_1 removed
[  791.399821][ T5323] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  791.425381][  T987] team0 (unregistering): Port device team_slave_0 removed
[  791.611529][ T5323] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  791.619923][ T5323] usb 3-1: config 0 has no interface number 0
[  791.631886][ T5323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  791.648881][ T5323] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  791.659143][ T5323] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=ee.00
[  791.678937][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.691311][ T5323] usb 3-1: config 0 descriptor??
[  792.166065][ T5323] uclogic 0003:256C:006D.000B: No inputs registered, leaving
[  792.185435][ T5323] uclogic 0003:256C:006D.000B: hidraw0: USB HID v0.40 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1
[  792.565768][ T1174] usb 3-1: USB disconnect, device number 27
[  792.621606][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  792.715562][T10235] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  792.795700][   T29] audit: type=1400 audit(1723165539.704:1169): avc:  denied  { read } for  pid=10396 comm="syz.3.1501" laddr=127.0.0.1 lport=48692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  792.827431][T10235] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  793.054853][T10235] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  793.118858][T10235] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  793.216406][T10130] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  793.270739][ T5209] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  793.288635][  T987] IPVS: stop unused estimator thread 0...
[  793.295903][T10130] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  793.368041][T10130] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  793.403241][T10130] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  793.460729][ T5209] usb 4-1: Using ep0 maxpacket: 8
[  793.481680][ T5209] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  793.499469][ T5209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.514242][ T5209] usb 4-1: Product: syz
[  793.518484][ T5209] usb 4-1: Manufacturer: syz
[  793.523924][ T5209] usb 4-1: SerialNumber: syz
[  793.532458][ T5209] usb 4-1: config 0 descriptor??
[  793.776483][T10138] veth0_vlan: entered promiscuous mode
[  793.796165][ T5209] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  793.858906][T10138] veth1_vlan: entered promiscuous mode
[  793.973797][T10235] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.079207][T10235] 8021q: adding VLAN 0 to HW filter on device team0
[  794.090334][T10138] veth0_macvtap: entered promiscuous mode
[  794.138643][T10138] veth1_macvtap: entered promiscuous mode
[  794.182902][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.190146][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  794.258245][T10130] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.311720][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.318993][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  794.365607][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.376522][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.394967][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.407288][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.424000][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  794.498460][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.509474][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.526338][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.538434][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.548388][T10138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.559560][T10138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.573059][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  794.606726][T10138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.628441][T10138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.645294][T10138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.655779][T10138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.673060][T10130] 8021q: adding VLAN 0 to HW filter on device team0
[  794.713794][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.721184][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  794.778373][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.785799][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.164802][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.194554][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.352107][ T5209] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  795.386359][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.396645][ T5209] usb 4-1: USB disconnect, device number 30
[  795.427911][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.688324][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  795.908921][T10235] veth0_vlan: entered promiscuous mode
[  795.930317][T10235] veth1_vlan: entered promiscuous mode
[  796.045726][T10130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.053990][ T5275] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  796.226891][T10235] veth0_macvtap: entered promiscuous mode
[  796.268191][ T5275] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  796.310561][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  796.365596][T10235] veth1_macvtap: entered promiscuous mode
[  796.390915][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  796.440866][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  796.497281][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  796.703218][   T29] audit: type=1400 audit(1723165543.534:1170): avc:  denied  { connect } for  pid=10431 comm="syz.4.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  796.892845][ T5275] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  796.904353][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.916881][ T5275] usb 3-1: config 0 descriptor??
[  796.923878][T10430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  796.945250][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  797.120840][   T29] audit: type=1400 audit(1723165543.994:1171): avc:  denied  { mount } for  pid=10436 comm="syz.3.1510" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  797.249198][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.435240][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  797.639073][   T29] audit: type=1400 audit(1723165544.574:1172): avc:  denied  { unmount } for  pid=9371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  797.659715][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.690224][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  797.715275][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.743780][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  798.276220][ T5275] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd
[  798.318037][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  798.322163][ T5275] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  798.341130][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.379216][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  798.390744][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.400904][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  798.412118][ T5275] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  798.428204][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.448911][T10235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  798.460358][T10235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.473933][   T54] Bluetooth: hci5: unexpected event 0x04 length: 14 > 10
[  798.502401][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  798.823293][T10448] xt_CT: You must specify a L4 protocol and not use inversions on it
[  799.197896][T10130] veth0_vlan: entered promiscuous mode
[  799.704113][T10235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.748327][T10235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.784697][ T5209] usb 3-1: USB disconnect, device number 28
[  799.799438][T10235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.871312][T10235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.929264][T10130] veth1_vlan: entered promiscuous mode
[  800.391815][T10130] veth0_macvtap: entered promiscuous mode
[  800.399576][T10456] input: syz0 as /devices/virtual/input/input20
[  800.512904][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  800.547589][T10130] veth1_macvtap: entered promiscuous mode
[  800.699501][  T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.720244][  T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.963114][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.980301][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.990466][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.999635][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.012156][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.023072][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.033490][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.061041][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.151931][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.180726][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.221625][T10130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.287962][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.308969][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.320096][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.343467][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.374791][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.394030][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.405550][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.452731][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.501350][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  801.523043][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.536800][T10130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  801.565618][T10130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.578121][T10130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.603023][T10130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.618742][T10130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.646739][T10463] netlink: 'syz.2.1517': attribute type 3 has an invalid length.
[  801.661526][T10463] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1517'.
[  801.892853][T10465] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  802.093435][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.400813][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.465097][T10471] syz.2.1518[10471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  802.465363][T10471] syz.2.1518[10471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  803.904928][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.749635][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.129219][T10479] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1520'.
[  805.351018][T10483] netlink: 'syz.2.1521': attribute type 16 has an invalid length.
[  805.385434][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1521'.
[  805.421713][T10484] block nbd4: Device being setup by another task
[  805.450153][T10483] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.036031][   T54] block nbd4: Receive control failed (result -32)
[  807.037443][T10482] block nbd4: shutting down sockets
[  807.581435][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'.
[  808.054720][   T29] audit: type=1400 audit(1723165554.964:1173): avc:  denied  { mount } for  pid=10501 comm="syz.2.1529" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  808.080941][ T1173] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  808.404852][ T1173] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  808.450657][ T1173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.471007][ T1173] usb 2-1: Product: syz
[  808.475264][ T1173] usb 2-1: Manufacturer: syz
[  808.479923][ T1173] usb 2-1: SerialNumber: syz
[  808.541460][ T1173] usb 2-1: config 0 descriptor??
[  808.578453][ T1173] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  808.626575][ T1173] nokiaca42v2 ttyUSB0: required endpoint is missing
[  808.837919][   T29] audit: type=1400 audit(1723165555.774:1174): avc:  denied  { unmount } for  pid=9823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  809.093902][ T1173] usb 2-1: USB disconnect, device number 28
[  809.103535][ T1173] cypress_m8 2-1:0.0: device disconnected
[  809.270650][ T5209] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  809.339007][   T29] audit: type=1400 audit(1723165556.274:1175): avc:  denied  { setopt } for  pid=10531 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  809.443393][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'.
[  809.491238][ T5209] usb 3-1: Using ep0 maxpacket: 16
[  809.513458][ T5209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  809.541776][ T5209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  809.561065][ T5209] usb 3-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00
[  809.582368][ T5209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.611820][ T5209] usb 3-1: config 0 descriptor??
[  810.076105][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0
[  810.090681][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0
[  810.109439][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0
[  810.117302][ T5209] ortek 0003:05A4:1700.000D: unknown main item tag 0x0
[  810.137884][ T5209] ortek 0003:05A4:1700.000D: hidraw0: USB HID v0.00 Device [HID 05a4:1700] on usb-dummy_hcd.2-1/input0
[  810.317287][ T8678] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  810.376335][ T1173] usb 3-1: USB disconnect, device number 29
[  810.528675][ T8678] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  810.539988][ T8678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.548201][ T8678] usb 5-1: Product: syz
[  810.552742][ T8678] usb 5-1: Manufacturer: syz
[  810.557452][ T8678] usb 5-1: SerialNumber: syz
[  810.581899][ T8678] usb 5-1: config 0 descriptor??
[  810.844765][ T8678] hso 5-1:0.0: Failed to find INT IN ep
[  810.854426][ T8678] usb-storage 5-1:0.0: USB Mass Storage device detected
[  811.286524][T10560] 9pnet_fd: Insufficient options for proto=fd
[  811.294050][ T5209] usb 5-1: USB disconnect, device number 17
[  811.348151][T10560] netlink: 'syz.3.1550': attribute type 10 has an invalid length.
[  811.374185][T10560] bond0: (slave bond_slave_0): Releasing backup interface
[  811.510944][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  811.712067][    T9] usb 3-1: Using ep0 maxpacket: 8
[  811.740169][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  811.757422][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.790379][    T9] usb 3-1: Product: syz
[  811.810041][    T9] usb 3-1: Manufacturer: syz
[  811.820184][    T9] usb 3-1: SerialNumber: syz
[  811.855793][    T9] usb 3-1: config 0 descriptor??
[  812.111393][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  812.438649][T10574] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1557'.
[  813.085901][   T29] audit: type=1400 audit(1723165559.884:1176): avc:  denied  { watch watch_reads } for  pid=10577 comm="syz.3.1559" path="pipe:[28499]" dev="pipefs" ino=28499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  813.868615][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  813.889385][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  814.371178][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  814.569931][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  814.658005][    T9] usb 3-1: USB disconnect, device number 30
[  814.956263][T10597] netlink: 'syz.1.1564': attribute type 11 has an invalid length.
[  815.580153][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'.
[  815.617240][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'.
[  816.001423][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'.
[  816.063424][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'.
[  816.943445][   T29] audit: type=1326 audit(1723165563.884:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10621 comm="syz.3.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f129a1779f9 code=0x0
[  817.016071][ T5209] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  817.067844][ T5209] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  817.174199][ T5209] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  819.880675][   T29] audit: type=1400 audit(1723165566.804:1178): avc:  denied  { create } for  pid=10638 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  820.374164][   T29] audit: type=1400 audit(1723165566.804:1179): avc:  denied  { sys_admin } for  pid=10638 comm="syz.4.1578" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  820.616555][   T29] audit: type=1400 audit(1723165567.554:1180): avc:  denied  { getopt } for  pid=10652 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  820.781249][ T5275] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  820.992298][ T5275] usb 2-1: Using ep0 maxpacket: 16
[  821.004461][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.039806][ T5275] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  821.083218][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.107740][ T5275] usb 2-1: Product: syz
[  821.114356][ T5275] usb 2-1: Manufacturer: syz
[  821.130480][ T5275] usb 2-1: SerialNumber: syz
[  821.150883][T10666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32792 sclass=netlink_route_socket pid=10666 comm=syz.0.1587
[  821.191858][ T5275] usb 2-1: config 0 descriptor??
[  821.216858][T10666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  821.278922][T10666] batadv_slave_0: entered allmulticast mode
[  821.455675][ T5275] usb 2-1: Cannot retrieve CPort count: -71
[  821.470966][ T5275] usb 2-1: Cannot retrieve CPort count: -71
[  821.477787][ T5275] es2_ap_driver 2-1:0.0: probe with driver es2_ap_driver failed with error -71
[  821.495259][ T5275] usb 2-1: USB disconnect, device number 29
[  821.835321][T10659] block nbd0: shutting down sockets
[  822.540715][ T5275] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  822.788384][ T5275] usb 4-1: Using ep0 maxpacket: 32
[  823.616754][ T5275] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  823.646383][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.206998][ T5275] usb 4-1: config 0 descriptor??
[  824.217132][ T5275] gspca_main: sunplus-2.14.0 probing 041e:400b
[  824.761509][ T5277] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  824.980871][ T5277] usb 3-1: Using ep0 maxpacket: 8
[  825.009652][ T5277] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  825.028549][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.047049][ T5277] usb 3-1: Product: syz
[  825.051709][ T5277] usb 3-1: Manufacturer: syz
[  825.056413][ T5277] usb 3-1: SerialNumber: syz
[  825.067733][ T5277] usb 3-1: config 0 descriptor??
[  825.314476][ T5275] gspca_sunplus: reg_w_riv err -71
[  825.340959][ T5275] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  825.386592][ T5275] usb 4-1: USB disconnect, device number 31
[  825.443128][ T8678] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  825.479283][ T5277] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  829.009266][ T5231] Bluetooth: hci6: command 0x0406 tx timeout
[  829.040636][ T5277] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  829.279482][    T8] usb 3-1: USB disconnect, device number 31
[  829.506354][ T5231] Bluetooth: hci7: sending frame failed (-49)
[  829.517485][   T54] Bluetooth: hci7: Opcode 0x1003 failed: -49
[  829.831064][ T5275] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  829.881322][T10734] tipc: Started in network mode
[  829.886267][T10734] tipc: Node identity 4, cluster identity 4711
[  829.921927][T10734] tipc: Node number set to 4
[  829.980668][ T8678] usb 5-1: device not accepting address 18, error -71
[  830.033757][ T5275] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  830.046693][ T5275] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  830.080601][ T5275] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  830.089603][ T5275] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  830.136125][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  830.166421][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  830.430315][ T5275] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  831.070829][   T54] Bluetooth: hci4: command 0x1003 tx timeout
[  831.088278][ T5238] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  831.360863][ T8678] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  831.524104][ T5275] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  831.540968][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.555753][ T5275] usb 4-1: Product: 䇜띔➒䬎잃♞ᨨ䂹鋰禪䤸︉畘䒋䘊菁㲝佸ꚃ깆㰵ၹ៍㯁ᒒ빒䁴䱕鴺餹偖᛭到⿣꺤溽ᗆ䃲
[  831.570633][ T8678] usb 5-1: Using ep0 maxpacket: 32
[  831.601881][ T5275] usb 4-1: config 0 descriptor??
[  831.610123][ T8678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  831.623187][ T5275] hub 4-1:0.0: bad descriptor, ignoring hub
[  831.629115][ T5275] hub 4-1:0.0: probe with driver hub failed with error -5
[  831.675952][ T5275] input: 䇜띔➒䬎잃♞ᨨ䂹鋰禪䤸︉畘䒋䘊菁㲝佸ꚃ깆㰵ၹ៍㯁ᒒ빒䁴䱕鴺餹偖᛭到⿣꺤溽ᗆ� as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  831.685781][ T8678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  831.770821][ T8678] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  831.800378][ T8678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.833993][ T8678] usb 5-1: config 0 descriptor??
[  831.877563][T10749] bridge_slave_1: left allmulticast mode
[  831.900785][T10749] bridge_slave_1: left promiscuous mode
[  831.909721][T10749] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.955298][   T29] audit: type=1804 audit(1723165578.893:1181): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1618" name="/newroot/19/bus/bus" dev="overlay" ino=121 res=1 errno=0
[  832.184294][ T5305] usb 4-1: USB disconnect, device number 32
[  832.263493][ T8678] savu 0003:1E7D:2D5A.000F: item fetching failed at offset 4/8
[  832.289962][ T8678] savu 0003:1E7D:2D5A.000F: parse failed
[  832.296367][ T8678] savu 0003:1E7D:2D5A.000F: probe with driver savu failed with error -22
[  832.494356][ T5305] usb 5-1: USB disconnect, device number 19
[  832.541986][   T62] Bluetooth: (null): Invalid header checksum
[  832.548173][   T62] Bluetooth: (null): Invalid header checksum
[  835.331928][T10784] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10784 comm=syz.4.1629
[  835.421192][ T1173] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  835.523764][T10788] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1631'.
[  835.680730][ T1173] usb 3-1: Using ep0 maxpacket: 8
[  835.697519][ T1173] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  835.721432][ T1173] usb 3-1: config 179 has no interface number 0
[  835.735574][ T1173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  835.810974][ T1173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  835.863408][ T1173] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  835.892924][ T1173] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  835.928526][ T1173] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  835.960916][ T1173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.015195][T10779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  836.163112][T10801] Bluetooth: hci4: Frame reassembly failed (-84)
[  836.172942][T10801] Bluetooth: hci4: Frame reassembly failed (-84)
[  836.183164][T10801] Bluetooth: hci4: Frame reassembly failed (-84)
[  836.191498][T10801] Bluetooth: hci4: Frame reassembly failed (-84)
[  838.272496][ T5238] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  838.629383][ T8678] usb 3-1: USB disconnect, device number 32
[  838.629541][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  838.643718][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  838.654114][    C0] ==================================================================
[  838.662224][    C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x271/0x2c0
[  838.670082][    C0] Read of size 4 at addr ffff88801c70785c by task syz-executor/9371
[  838.678244][    C0] 
[  838.680589][    C0] CPU: 0 UID: 0 PID: 9371 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[  838.691455][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  838.701513][    C0] Call Trace:
[  838.704791][    C0]  <IRQ>
[  838.707646][    C0]  dump_stack_lvl+0x116/0x1f0
[  838.712347][    C0]  print_report+0xc3/0x620
[  838.716786][    C0]  ? __virt_addr_valid+0x5e/0x590
[  838.721826][    C0]  ? __phys_addr+0xc6/0x150
[  838.726431][    C0]  kasan_report+0xd9/0x110
[  838.731050][    C0]  ? do_raw_spin_lock+0x271/0x2c0
[  838.736102][    C0]  ? do_raw_spin_lock+0x271/0x2c0
[  838.741146][    C0]  do_raw_spin_lock+0x271/0x2c0
[  838.746036][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  838.751443][    C0]  ? __usb_hcd_giveback_urb+0x389/0x6e0
[  838.757024][    C0]  ? __pfx_lock_release+0x10/0x10
[  838.762067][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  838.767304][    C0]  _raw_spin_lock_irqsave+0x42/0x60
[  838.772516][    C0]  ? __wake_up+0x1c/0x60
[  838.776765][    C0]  __wake_up+0x1c/0x60
[  838.780848][    C0]  usb_anchor_resume_wakeups+0xc2/0xe0
[  838.786361][    C0]  __usb_hcd_giveback_urb+0x3b7/0x6e0
[  838.791745][    C0]  usb_hcd_giveback_urb+0x396/0x450
[  838.796949][    C0]  dummy_timer+0x17c3/0x38d0
[  838.801637][    C0]  ? debug_object_deactivate+0x1f0/0x370
[  838.807292][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  838.812523][    C0]  ? __hrtimer_run_queues+0x5a7/0xcc0
[  838.817914][    C0]  ? __pfx_lock_release+0x10/0x10
[  838.823025][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  838.828012][    C0]  ? timerqueue_del+0x83/0x150
[  838.832813][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  838.837783][    C0]  __hrtimer_run_queues+0x20c/0xcc0
[  838.843367][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  838.849134][    C0]  ? ktime_get_update_offsets_now+0x201/0x310
[  838.855228][    C0]  hrtimer_interrupt+0x31b/0x800
[  838.860233][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x450
[  838.866228][    C0]  sysvec_apic_timer_interrupt+0x43/0xb0
[  838.871907][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  838.878170][    C0] RIP: 0010:__orc_find+0xa1/0x130
[  838.883222][    C0] Code: a6 4d 00 48 89 e8 48 29 d8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 4c 8d 3c 83 4c 89 fa 48 c1 ea 03 42 0f b6 0c 32 <4c> 89 fa 83 e2 07 83 c2 03 38 ca 7c 04 84 c9 75 73 49 63 17 4c 89
[  838.903009][    C0] RSP: 0018:ffffc90000006a00 EFLAGS: 00000a06
[  838.909135][    C0] RAX: 0000000000000004 RBX: ffffffff90811f88 RCX: 0000000000000000
[  838.917135][    C0] RDX: 1ffffffff21023f3 RSI: ffffffff813cd3da RDI: 0000000000000005
[  838.925131][    C0] RBP: ffffffff90811fa8 R08: 0000000000000005 R09: 0000000000000000
[  838.933215][    C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff88e4acab
[  838.941377][    C0] R13: ffffffff9130b5d6 R14: dffffc0000000000 R15: ffffffff90811f98
[  838.949371][    C0]  ? skb_release_data+0x75b/0x980
[  838.954416][    C0]  ? __orc_find+0x7a/0x130
[  838.958881][    C0]  ? skb_release_data+0x75b/0x980
[  838.963926][    C0]  unwind_next_frame+0x335/0x23a0
[  838.968982][    C0]  ? skb_release_data+0x75c/0x980
[  838.974168][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  838.980366][    C0]  arch_stack_walk+0x100/0x170
[  838.985153][    C0]  ? skb_release_data+0x75c/0x980
[  838.990219][    C0]  ? skb_free_head+0x18a/0x1d0
[  838.995019][    C0]  stack_trace_save+0x95/0xd0
[  838.999815][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  839.005247][    C0]  ? mark_lock+0xb5/0xc60
[  839.009612][    C0]  ? __pfx_mark_lock+0x10/0x10
[  839.014398][    C0]  kasan_save_stack+0x33/0x60
[  839.019174][    C0]  ? kasan_save_stack+0x33/0x60
[  839.024035][    C0]  ? kasan_save_track+0x14/0x30
[  839.028915][    C0]  ? kasan_save_free_info+0x3b/0x60
[  839.034146][    C0]  ? poison_slab_object+0xf7/0x160
[  839.039360][    C0]  ? __kasan_slab_free+0x32/0x50
[  839.044340][    C0]  ? kmem_cache_free+0x12f/0x3a0
[  839.049380][    C0]  ? skb_free_head+0x18a/0x1d0
[  839.054171][    C0]  ? skb_release_data+0x75c/0x980
[  839.059224][    C0]  kasan_save_track+0x14/0x30
[  839.063925][    C0]  kasan_save_free_info+0x3b/0x60
[  839.069001][    C0]  poison_slab_object+0xf7/0x160
[  839.073983][    C0]  __kasan_slab_free+0x32/0x50
[  839.078760][    C0]  kmem_cache_free+0x12f/0x3a0
[  839.083556][    C0]  ? __pfx_mark_lock+0x10/0x10
[  839.088416][    C0]  ? skb_free_head+0x18a/0x1d0
[  839.093303][    C0]  skb_free_head+0x18a/0x1d0
[  839.097936][    C0]  skb_release_data+0x75c/0x980
[  839.102813][    C0]  __kfree_skb+0x4f/0x70
[  839.107062][    C0]  tcp_ack+0x1eb7/0x5ba0
[  839.111324][    C0]  ? __pfx_tcp_ack+0x10/0x10
[  839.115939][    C0]  ? timekeeping_debug_get_ns+0x3e0/0x5b0
[  839.121683][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  839.126902][    C0]  ? ktime_get+0xfb/0x1a0
[  839.131244][    C0]  tcp_rcv_established+0x60f/0x21c0
[  839.136452][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  839.142110][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  839.147171][    C0]  ? __pfx_ipv4_dst_check+0x10/0x10
[  839.152474][    C0]  tcp_v4_do_rcv+0x5ca/0xa90
[  839.157163][    C0]  tcp_v4_rcv+0x344c/0x44e0
[  839.161683][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  839.166544][    C0]  ? __pfx_raw_local_deliver+0x10/0x10
[  839.172101][    C0]  ? nf_hook.constprop.0+0x467/0x750
[  839.177406][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  839.182273][    C0]  ip_protocol_deliver_rcu+0xba/0x4e0
[  839.187679][    C0]  ip_local_deliver_finish+0x316/0x570
[  839.193152][    C0]  ip_local_deliver+0x18e/0x1f0
[  839.198016][    C0]  ip_sublist_rcv_finish+0x2c1/0x620
[  839.203318][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  839.208702][    C0]  ip_list_rcv_finish.constprop.0+0x559/0x720
[  839.214799][    C0]  ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10
[  839.221404][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  839.226530][    C0]  ip_list_rcv+0x339/0x450
[  839.230981][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  839.235932][    C0]  ? find_held_lock+0x2d/0x110
[  839.240716][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  839.245927][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  839.250880][    C0]  __netif_receive_skb_list_core+0x755/0x950
[  839.256907][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  839.263434][    C0]  ? timekeeping_debug_get_ns+0x334/0x5b0
[  839.269164][    C0]  netif_receive_skb_list_internal+0x753/0xda0
[  839.275338][    C0]  ? tick_program_event+0xb0/0x140
[  839.280477][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  839.287189][    C0]  ? mark_held_locks+0x9f/0xe0
[  839.291971][    C0]  napi_complete_done+0x23f/0x9a0
[  839.297027][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[  839.302589][    C0]  ? virtnet_poll+0x118a/0x3ab0
[  839.307444][    C0]  virtnet_poll+0x1c26/0x3ab0
[  839.312133][    C0]  ? __free_old_xmit+0x3db/0x5e0
[  839.317084][    C0]  ? __pfx_virtnet_poll+0x10/0x10
[  839.322121][    C0]  ? find_held_lock+0x2d/0x110
[  839.326907][    C0]  ? virtnet_poll_tx+0x362/0x6b0
[  839.331899][    C0]  ? __pfx_lock_release+0x10/0x10
[  839.336934][    C0]  ? napi_complete_done+0x3fa/0x9a0
[  839.342259][    C0]  ? virtqueue_poll+0x1b0/0x290
[  839.347114][    C0]  ? rcu_is_watching+0x12/0xc0
[  839.351891][    C0]  ? xdp_do_check_flushed+0x28f/0x4e0
[  839.357270][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  839.362660][    C0]  net_rx_action+0xa92/0x1010
[  839.367362][    C0]  ? __common_interrupt+0xdf/0x250
[  839.372489][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  839.377614][    C0]  ? mark_held_locks+0x9f/0xe0
[  839.382421][    C0]  handle_softirqs+0x216/0x8f0
[  839.387221][    C0]  ? handle_edge_irq+0x40f/0xd10
[  839.392174][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  839.397479][    C0]  irq_exit_rcu+0xbb/0x120
[  839.401914][    C0]  common_interrupt+0xb0/0xd0
[  839.406610][    C0]  </IRQ>
[  839.409814][    C0]  <TASK>
[  839.412745][    C0]  asm_common_interrupt+0x26/0x40
[  839.417789][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  839.424212][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 d1 53 f6 48 89 df e8 ce 4e 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 c2 45 f6 65 8b 05 06 44 ef 74 85 c0 74 16 5b
[  839.443829][    C0] RSP: 0018:ffffc90003b57658 EFLAGS: 00000246
[  839.449928][    C0] RAX: 0000000000000006 RBX: ffffffff9513cbb8 RCX: 1ffffffff28c8e94
[  839.457916][    C0] RDX: 0000000000000000 RSI: ffffffff8b4cc500 RDI: ffffffff8bb08900
[  839.465896][    C0] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff28c5ae0
[  839.473878][    C0] R10: ffffffff9462d707 R11: ffffffff8b4e4da0 R12: 0000000000000001
[  839.481868][    C0] R13: ffffc90003ad0000 R14: 1ffff9200076aed2 R15: ffffffff9513cbb0
[  839.489886][    C0]  debug_object_activate+0x34d/0x540
[  839.495196][    C0]  ? __pfx_mark_lock+0x10/0x10
[  839.499970][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  839.505788][    C0]  ? finish_task_switch.isra.0+0x89a/0xcc0
[  839.511618][    C0]  ? __pfx_thread_stack_free_rcu+0x10/0x10
[  839.517452][    C0]  ? __call_rcu_common.constprop.0+0x2c/0x790
[  839.523532][    C0]  __call_rcu_common.constprop.0+0x2c/0x790
[  839.529441][    C0]  ? mark_held_locks+0x9f/0xe0
[  839.534214][    C0]  put_task_stack+0x23a/0x390
[  839.538914][    C0]  finish_task_switch.isra.0+0x8a5/0xcc0
[  839.544561][    C0]  ? __switch_to+0x749/0x1180
[  839.549245][    C0]  __schedule+0xe3f/0x5490
[  839.553669][    C0]  ? hlock_class+0x4e/0x130
[  839.558187][    C0]  ? __pfx_mark_lock+0x10/0x10
[  839.562959][    C0]  ? __pfx___schedule+0x10/0x10
[  839.567814][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  839.573054][    C0]  preempt_schedule_irq+0x51/0x90
[  839.578104][    C0]  irqentry_exit+0x36/0x90
[  839.582540][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  839.588547][    C0] RIP: 0010:tomoyo_check_acl+0x30e/0x410
[  839.594195][    C0] Code: 49 0f a3 5d 00 8d 43 01 41 0f 92 c7 31 ff 44 89 fe 66 89 44 24 16 e8 31 e8 46 fd 45 84 ff 75 29 e8 47 e6 46 fd 0f b7 74 24 16 <bf> 00 01 00 00 48 83 c3 01 e8 44 e8 46 fd 48 81 fb 00 01 00 00 75
[  839.613809][    C0] RSP: 0018:ffffc90003b57ab8 EFLAGS: 00000293
[  839.619880][    C0] RAX: 0000000000000000 RBX: 000000000000006d RCX: ffffffff8443944f
[  839.627855][    C0] RDX: ffff888020c73c00 RSI: 000000000000006e RDI: 0000000000000001
[  839.635835][    C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  839.643814][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b57b78
[  839.651786][    C0] R13: ffff8880218f8030 R14: 000000000000006d R15: 0000000000000000
[  839.659761][    C0]  ? tomoyo_check_acl+0x2ff/0x410
[  839.664890][    C0]  ? tomoyo_check_acl+0x309/0x410
[  839.669918][    C0]  ? __pfx_tomoyo_check_path_number_acl+0x10/0x10
[  839.676351][    C0]  tomoyo_path_number_perm+0x34a/0x590
[  839.681831][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  839.687840][    C0]  ? find_held_lock+0x2d/0x110
[  839.692634][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  839.697846][    C0]  ? _raw_spin_unlock+0x28/0x50
[  839.702708][    C0]  ? d_add+0x43c/0x730
[  839.706791][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  839.712005][    C0]  ? simple_lookup+0xd6/0x110
[  839.716696][    C0]  tomoyo_path_mkdir+0x9c/0xe0
[  839.721467][    C0]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  839.726935][    C0]  ? get_current_fs_domain+0x188/0x1f0
[  839.732402][    C0]  security_path_mkdir+0x111/0x170
[  839.737538][    C0]  do_mkdirat+0x176/0x3a0
[  839.741893][    C0]  ? __pfx_do_mkdirat+0x10/0x10
[  839.746790][    C0]  ? getname_flags.part.0+0x1c5/0x550
[  839.752193][    C0]  __x64_sys_mkdirat+0x83/0xb0
[  839.756977][    C0]  do_syscall_64+0xcd/0x250
[  839.761500][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.767526][    C0] RIP: 0033:0x7f129a176297
[  839.771953][    C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  839.791579][    C0] RSP: 002b:00007ffed262d5d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102
[  839.800003][    C0] RAX: ffffffffffffffda RBX: 00007ffed262d620 RCX: 00007f129a176297
[  839.807979][    C0] RDX: 00000000000001ff RSI: 00007ffed262d620 RDI: 00000000ffffff9c
[  839.816127][    C0] RBP: 00007ffed262d60c R08: 0000000000000005 R09: 00007ffed262d375
[  839.824102][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032
[  839.832089][    C0] R13: 00000000000ccac4 R14: 00000000000cc18b R15: 00007ffed262d660
[  839.840090][    C0]  </TASK>
[  839.843109][    C0] 
[  839.845431][    C0] Allocated by task 1173:
[  839.849763][    C0]  kasan_save_stack+0x33/0x60
[  839.854491][    C0]  kasan_save_track+0x14/0x30
[  839.859197][    C0]  __kasan_kmalloc+0xaa/0xb0
[  839.863833][    C0]  xpad_probe+0x27e/0x1f50
[  839.868260][    C0]  usb_probe_interface+0x309/0x9d0
[  839.873390][    C0]  really_probe+0x23e/0xa90
[  839.877925][    C0]  __driver_probe_device+0x1de/0x440
[  839.883219][    C0]  driver_probe_device+0x4c/0x1b0
[  839.888251][    C0]  __device_attach_driver+0x1df/0x310
[  839.893982][    C0]  bus_for_each_drv+0x157/0x1e0
[  839.898865][    C0]  __device_attach+0x1e8/0x4b0
[  839.903654][    C0]  bus_probe_device+0x17f/0x1c0
[  839.908628][    C0]  device_add+0x114b/0x1a70
[  839.913141][    C0]  usb_set_configuration+0x10cb/0x1c50
[  839.918617][    C0]  usb_generic_driver_probe+0xb1/0x110
[  839.924084][    C0]  usb_probe_device+0xec/0x3e0
[  839.928879][    C0]  really_probe+0x23e/0xa90
[  839.933399][    C0]  __driver_probe_device+0x1de/0x440
[  839.938690][    C0]  driver_probe_device+0x4c/0x1b0
[  839.943740][    C0]  __device_attach_driver+0x1df/0x310
[  839.949237][    C0]  bus_for_each_drv+0x157/0x1e0
[  839.954115][    C0]  __device_attach+0x1e8/0x4b0
[  839.958892][    C0]  bus_probe_device+0x17f/0x1c0
[  839.963823][    C0]  device_add+0x114b/0x1a70
[  839.968343][    C0]  usb_new_device+0xd90/0x1a10
[  839.973122][    C0]  hub_event+0x2db0/0x4e20
[  839.977555][    C0]  process_one_work+0x9c5/0x1b40
[  839.982507][    C0]  worker_thread+0x6c8/0xf20
[  839.987117][    C0]  kthread+0x2c1/0x3a0
[  839.991187][    C0]  ret_from_fork+0x45/0x80
[  839.995634][    C0]  ret_from_fork_asm+0x1a/0x30
[  840.000417][    C0] 
[  840.002739][    C0] Freed by task 8678:
[  840.006738][    C0]  kasan_save_stack+0x33/0x60
[  840.011427][    C0]  kasan_save_track+0x14/0x30
[  840.016140][    C0]  kasan_save_free_info+0x3b/0x60
[  840.021187][    C0]  poison_slab_object+0xf7/0x160
[  840.026134][    C0]  __kasan_slab_free+0x32/0x50
[  840.030908][    C0]  kfree+0x12a/0x3b0
[  840.034819][    C0]  xpad_disconnect+0x1cf/0x580
[  840.039701][    C0]  usb_unbind_interface+0x1e8/0x970
[  840.044932][    C0]  device_remove+0x122/0x170
[  840.049678][    C0]  device_release_driver_internal+0x44a/0x610
[  840.055758][    C0]  bus_remove_device+0x22f/0x420
[  840.060723][    C0]  device_del+0x396/0x9f0
[  840.065053][    C0]  usb_disable_device+0x36c/0x7f0
[  840.070091][    C0]  usb_disconnect+0x2e1/0x920
[  840.074778][    C0]  hub_event+0x1dbb/0x4e20
[  840.079209][    C0]  process_one_work+0x9c5/0x1b40
[  840.084170][    C0]  worker_thread+0x6c8/0xf20
[  840.088774][    C0]  kthread+0x2c1/0x3a0
[  840.092864][    C0]  ret_from_fork+0x45/0x80
[  840.097324][    C0]  ret_from_fork_asm+0x1a/0x30
[  840.102141][    C0] 
[  840.104463][    C0] The buggy address belongs to the object at ffff88801c707800
[  840.104463][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  840.118540][    C0] The buggy address is located 92 bytes inside of
[  840.118540][    C0]  freed 1024-byte region [ffff88801c707800, ffff88801c707c00)
[  840.132354][    C0] 
[  840.134681][    C0] The buggy address belongs to the physical page:
[  840.141100][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c700
[  840.149864][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  840.158373][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  840.165930][    C0] page_type: 0xfdffffff(slab)
[  840.170636][    C0] raw: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122
[  840.179240][    C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  840.187906][    C0] head: 00fff00000000040 ffff888015841dc0 dead000000000100 dead000000000122
[  840.196596][    C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000
[  840.205285][    C0] head: 00fff00000000003 ffffea000071c001 ffffffffffffffff 0000000000000000
[  840.213984][    C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  840.222672][    C0] page dumped because: kasan: bad access detected
[  840.229086][    C0] page_owner tracks the page as allocated
[  840.234880][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1109, tgid 1109 (kworker/u8:6), ts 674519957146, free_ts 673948577556
[  840.255903][    C0]  post_alloc_hook+0x2d1/0x350
[  840.260679][    C0]  get_page_from_freelist+0x1351/0x2e50
[  840.266251][    C0]  __alloc_pages_noprof+0x22b/0x2460
[  840.271557][    C0]  alloc_slab_page+0x4e/0xf0
[  840.276169][    C0]  new_slab+0x84/0x260
[  840.280259][    C0]  ___slab_alloc+0xdac/0x1870
[  840.284947][    C0]  __slab_alloc.constprop.0+0x56/0xb0
[  840.290344][    C0]  __kmalloc_noprof+0x367/0x400
[  840.295243][    C0]  ieee802_11_parse_elems_full+0xea/0x1680
[  840.301078][    C0]  ieee80211_inform_bss+0xfd/0x1100
[  840.306317][    C0]  cfg80211_inform_single_bss_data+0x8e2/0x1dc0
[  840.312581][    C0]  cfg80211_inform_bss_data+0x205/0x39c0
[  840.318431][    C0]  cfg80211_inform_bss_frame_data+0x271/0x7a0
[  840.324616][    C0]  ieee80211_bss_info_update+0x311/0xab0
[  840.330361][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40
[  840.336620][    C0]  ieee80211_iface_work+0xc0b/0xf00
[  840.341917][    C0] page last free pid 9607 tgid 9606 stack trace:
[  840.348237][    C0]  free_unref_page+0x64a/0xe40
[  840.353009][    C0]  vfree+0x181/0x7a0
[  840.356913][    C0]  __vmalloc_node_range_noprof+0x11f5/0x1520
[  840.362909][    C0]  vmalloc_user_noprof+0x6b/0x90
[  840.367947][    C0]  xskq_create+0xfb/0x1d0
[  840.372287][    C0]  xsk_setsockopt+0x757/0xa10
[  840.376973][    C0]  do_sock_setsockopt+0x222/0x480
[  840.382008][    C0]  __sys_setsockopt+0x1a4/0x270
[  840.386889][    C0]  __x64_sys_setsockopt+0xbd/0x160
[  840.392018][    C0]  do_syscall_64+0xcd/0x250
[  840.396529][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.402523][    C0] 
[  840.404846][    C0] Memory state around the buggy address:
[  840.410470][    C0]  ffff88801c707700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  840.418535][    C0]  ffff88801c707780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  840.426626][    C0] >ffff88801c707800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  840.434699][    C0]                                                     ^
[  840.441632][    C0]  ffff88801c707880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  840.449708][    C0]  ffff88801c707900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  840.457764][    C0] ==================================================================
[  840.465824][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  840.473015][    C0] CPU: 0 UID: 0 PID: 9371 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[  840.483869][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  840.493925][    C0] Call Trace:
[  840.497209][    C0]  <IRQ>
[  840.500052][    C0]  dump_stack_lvl+0x3d/0x1f0
[  840.504687][    C0]  panic+0x6f5/0x7a0
[  840.508596][    C0]  ? __pfx_panic+0x10/0x10
[  840.513025][    C0]  ? rcu_is_watching+0x12/0xc0
[  840.517822][    C0]  ? __pfx_lock_release+0x10/0x10
[  840.522860][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  840.528067][    C0]  check_panic_on_warn+0xab/0xb0
[  840.533130][    C0]  end_report+0x117/0x180
[  840.537489][    C0]  kasan_report+0xe9/0x110
[  840.541929][    C0]  ? do_raw_spin_lock+0x271/0x2c0
[  840.546981][    C0]  ? do_raw_spin_lock+0x271/0x2c0
[  840.552031][    C0]  do_raw_spin_lock+0x271/0x2c0
[  840.556924][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  840.562312][    C0]  ? __usb_hcd_giveback_urb+0x389/0x6e0
[  840.567867][    C0]  ? __pfx_lock_release+0x10/0x10
[  840.572902][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  840.578114][    C0]  _raw_spin_lock_irqsave+0x42/0x60
[  840.583321][    C0]  ? __wake_up+0x1c/0x60
[  840.587575][    C0]  __wake_up+0x1c/0x60
[  840.591658][    C0]  usb_anchor_resume_wakeups+0xc2/0xe0
[  840.597250][    C0]  __usb_hcd_giveback_urb+0x3b7/0x6e0
[  840.602643][    C0]  usb_hcd_giveback_urb+0x396/0x450
[  840.607871][    C0]  dummy_timer+0x17c3/0x38d0
[  840.612773][    C0]  ? debug_object_deactivate+0x1f0/0x370
[  840.618426][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  840.623642][    C0]  ? __hrtimer_run_queues+0x5a7/0xcc0
[  840.629031][    C0]  ? __pfx_lock_release+0x10/0x10
[  840.634068][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  840.639020][    C0]  ? timerqueue_del+0x83/0x150
[  840.643797][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  840.648740][    C0]  __hrtimer_run_queues+0x20c/0xcc0
[  840.653970][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  840.659713][    C0]  ? ktime_get_update_offsets_now+0x201/0x310
[  840.665794][    C0]  hrtimer_interrupt+0x31b/0x800
[  840.670839][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x450
[  840.676846][    C0]  sysvec_apic_timer_interrupt+0x43/0xb0
[  840.682497][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  840.688505][    C0] RIP: 0010:__orc_find+0xa1/0x130
[  840.693555][    C0] Code: a6 4d 00 48 89 e8 48 29 d8 48 89 c2 48 c1 e8 3f 48 c1 fa 02 48 01 d0 48 d1 f8 4c 8d 3c 83 4c 89 fa 48 c1 ea 03 42 0f b6 0c 32 <4c> 89 fa 83 e2 07 83 c2 03 38 ca 7c 04 84 c9 75 73 49 63 17 4c 89
[  840.713274][    C0] RSP: 0018:ffffc90000006a00 EFLAGS: 00000a06
[  840.719354][    C0] RAX: 0000000000000004 RBX: ffffffff90811f88 RCX: 0000000000000000
[  840.727351][    C0] RDX: 1ffffffff21023f3 RSI: ffffffff813cd3da RDI: 0000000000000005
[  840.735331][    C0] RBP: ffffffff90811fa8 R08: 0000000000000005 R09: 0000000000000000
[  840.743306][    C0] R10: 0000000000000009 R11: 0000000000000000 R12: ffffffff88e4acab
[  840.751280][    C0] R13: ffffffff9130b5d6 R14: dffffc0000000000 R15: ffffffff90811f98
[  840.759364][    C0]  ? skb_release_data+0x75b/0x980
[  840.764426][    C0]  ? __orc_find+0x7a/0x130
[  840.768866][    C0]  ? skb_release_data+0x75b/0x980
[  840.773905][    C0]  unwind_next_frame+0x335/0x23a0
[  840.778944][    C0]  ? skb_release_data+0x75c/0x980
[  840.784149][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  840.790321][    C0]  arch_stack_walk+0x100/0x170
[  840.795099][    C0]  ? skb_release_data+0x75c/0x980
[  840.800187][    C0]  ? skb_free_head+0x18a/0x1d0
[  840.804975][    C0]  stack_trace_save+0x95/0xd0
[  840.809666][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  840.815060][    C0]  ? mark_lock+0xb5/0xc60
[  840.819414][    C0]  ? __pfx_mark_lock+0x10/0x10
[  840.824307][    C0]  kasan_save_stack+0x33/0x60
[  840.829022][    C0]  ? kasan_save_stack+0x33/0x60
[  840.833902][    C0]  ? kasan_save_track+0x14/0x30
[  840.838773][    C0]  ? kasan_save_free_info+0x3b/0x60
[  840.844015][    C0]  ? poison_slab_object+0xf7/0x160
[  840.849151][    C0]  ? __kasan_slab_free+0x32/0x50
[  840.854137][    C0]  ? kmem_cache_free+0x12f/0x3a0
[  840.859084][    C0]  ? skb_free_head+0x18a/0x1d0
[  840.863981][    C0]  ? skb_release_data+0x75c/0x980
[  840.869051][    C0]  kasan_save_track+0x14/0x30
[  840.873836][    C0]  kasan_save_free_info+0x3b/0x60
[  840.878899][    C0]  poison_slab_object+0xf7/0x160
[  840.883850][    C0]  __kasan_slab_free+0x32/0x50
[  840.888626][    C0]  kmem_cache_free+0x12f/0x3a0
[  840.893402][    C0]  ? __pfx_mark_lock+0x10/0x10
[  840.898178][    C0]  ? skb_free_head+0x18a/0x1d0
[  840.902962][    C0]  skb_free_head+0x18a/0x1d0
[  840.907588][    C0]  skb_release_data+0x75c/0x980
[  840.912538][    C0]  __kfree_skb+0x4f/0x70
[  840.916813][    C0]  tcp_ack+0x1eb7/0x5ba0
[  840.921076][    C0]  ? __pfx_tcp_ack+0x10/0x10
[  840.925669][    C0]  ? timekeeping_debug_get_ns+0x3e0/0x5b0
[  840.931398][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  840.936608][    C0]  ? ktime_get+0xfb/0x1a0
[  840.940944][    C0]  tcp_rcv_established+0x60f/0x21c0
[  840.946156][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  840.951815][    C0]  ? do_raw_spin_lock+0x12d/0x2c0
[  840.956873][    C0]  ? __pfx_ipv4_dst_check+0x10/0x10
[  840.962091][    C0]  tcp_v4_do_rcv+0x5ca/0xa90
[  840.966708][    C0]  tcp_v4_rcv+0x344c/0x44e0
[  840.971232][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  840.976111][    C0]  ? __pfx_raw_local_deliver+0x10/0x10
[  840.981591][    C0]  ? nf_hook.constprop.0+0x467/0x750
[  840.986909][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  840.991778][    C0]  ip_protocol_deliver_rcu+0xba/0x4e0
[  840.997177][    C0]  ip_local_deliver_finish+0x316/0x570
[  841.002682][    C0]  ip_local_deliver+0x18e/0x1f0
[  841.007653][    C0]  ip_sublist_rcv_finish+0x2c1/0x620
[  841.012959][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  841.018406][    C0]  ip_list_rcv_finish.constprop.0+0x559/0x720
[  841.024528][    C0]  ? __pfx_ip_list_rcv_finish.constprop.0+0x10/0x10
[  841.031206][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  841.036349][    C0]  ip_list_rcv+0x339/0x450
[  841.040788][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  841.045744][    C0]  ? find_held_lock+0x2d/0x110
[  841.050538][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  841.055769][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  841.060721][    C0]  __netif_receive_skb_list_core+0x755/0x950
[  841.066719][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  841.073246][    C0]  ? timekeeping_debug_get_ns+0x334/0x5b0
[  841.078981][    C0]  netif_receive_skb_list_internal+0x753/0xda0
[  841.085172][    C0]  ? tick_program_event+0xb0/0x140
[  841.090313][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  841.097023][    C0]  ? mark_held_locks+0x9f/0xe0
[  841.101812][    C0]  napi_complete_done+0x23f/0x9a0
[  841.106864][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[  841.112438][    C0]  ? virtnet_poll+0x118a/0x3ab0
[  841.117301][    C0]  virtnet_poll+0x1c26/0x3ab0
[  841.121998][    C0]  ? __free_old_xmit+0x3db/0x5e0
[  841.126977][    C0]  ? __pfx_virtnet_poll+0x10/0x10
[  841.132016][    C0]  ? find_held_lock+0x2d/0x110
[  841.136813][    C0]  ? virtnet_poll_tx+0x362/0x6b0
[  841.141781][    C0]  ? __pfx_lock_release+0x10/0x10
[  841.146819][    C0]  ? napi_complete_done+0x3fa/0x9a0
[  841.152036][    C0]  ? virtqueue_poll+0x1b0/0x290
[  841.157008][    C0]  ? rcu_is_watching+0x12/0xc0
[  841.161796][    C0]  ? xdp_do_check_flushed+0x28f/0x4e0
[  841.167182][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  841.172576][    C0]  net_rx_action+0xa92/0x1010
[  841.177266][    C0]  ? __common_interrupt+0xdf/0x250
[  841.182392][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  841.187517][    C0]  ? mark_held_locks+0x9f/0xe0
[  841.192303][    C0]  handle_softirqs+0x216/0x8f0
[  841.197106][    C0]  ? handle_edge_irq+0x40f/0xd10
[  841.202061][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  841.207391][    C0]  irq_exit_rcu+0xbb/0x120
[  841.211835][    C0]  common_interrupt+0xb0/0xd0
[  841.216551][    C0]  </IRQ>
[  841.219484][    C0]  <TASK>
[  841.222437][    C0]  asm_common_interrupt+0x26/0x40
[  841.227509][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  841.233944][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 d1 53 f6 48 89 df e8 ce 4e 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 c2 45 f6 65 8b 05 06 44 ef 74 85 c0 74 16 5b
[  841.253564][    C0] RSP: 0018:ffffc90003b57658 EFLAGS: 00000246
[  841.259639][    C0] RAX: 0000000000000006 RBX: ffffffff9513cbb8 RCX: 1ffffffff28c8e94
[  841.267617][    C0] RDX: 0000000000000000 RSI: ffffffff8b4cc500 RDI: ffffffff8bb08900
[  841.275593][    C0] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff28c5ae0
[  841.283565][    C0] R10: ffffffff9462d707 R11: ffffffff8b4e4da0 R12: 0000000000000001
[  841.291538][    C0] R13: ffffc90003ad0000 R14: 1ffff9200076aed2 R15: ffffffff9513cbb0
[  841.299519][    C0]  debug_object_activate+0x34d/0x540
[  841.304825][    C0]  ? __pfx_mark_lock+0x10/0x10
[  841.309598][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  841.315428][    C0]  ? finish_task_switch.isra.0+0x89a/0xcc0
[  841.321251][    C0]  ? __pfx_thread_stack_free_rcu+0x10/0x10
[  841.327103][    C0]  ? __call_rcu_common.constprop.0+0x2c/0x790
[  841.333188][    C0]  __call_rcu_common.constprop.0+0x2c/0x790
[  841.339091][    C0]  ? mark_held_locks+0x9f/0xe0
[  841.343865][    C0]  put_task_stack+0x23a/0x390
[  841.348557][    C0]  finish_task_switch.isra.0+0x8a5/0xcc0
[  841.354201][    C0]  ? __switch_to+0x749/0x1180
[  841.358885][    C0]  __schedule+0xe3f/0x5490
[  841.363329][    C0]  ? hlock_class+0x4e/0x130
[  841.367854][    C0]  ? __pfx_mark_lock+0x10/0x10
[  841.372652][    C0]  ? __pfx___schedule+0x10/0x10
[  841.377514][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  841.382737][    C0]  preempt_schedule_irq+0x51/0x90
[  841.387817][    C0]  irqentry_exit+0x36/0x90
[  841.392279][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  841.398286][    C0] RIP: 0010:tomoyo_check_acl+0x30e/0x410
[  841.403976][    C0] Code: 49 0f a3 5d 00 8d 43 01 41 0f 92 c7 31 ff 44 89 fe 66 89 44 24 16 e8 31 e8 46 fd 45 84 ff 75 29 e8 47 e6 46 fd 0f b7 74 24 16 <bf> 00 01 00 00 48 83 c3 01 e8 44 e8 46 fd 48 81 fb 00 01 00 00 75
[  841.423605][    C0] RSP: 0018:ffffc90003b57ab8 EFLAGS: 00000293
[  841.429692][    C0] RAX: 0000000000000000 RBX: 000000000000006d RCX: ffffffff8443944f
[  841.437671][    C0] RDX: ffff888020c73c00 RSI: 000000000000006e RDI: 0000000000000001
[  841.445652][    C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  841.453636][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b57b78
[  841.461612][    C0] R13: ffff8880218f8030 R14: 000000000000006d R15: 0000000000000000
[  841.469689][    C0]  ? tomoyo_check_acl+0x2ff/0x410
[  841.474730][    C0]  ? tomoyo_check_acl+0x309/0x410
[  841.479764][    C0]  ? __pfx_tomoyo_check_path_number_acl+0x10/0x10
[  841.486194][    C0]  tomoyo_path_number_perm+0x34a/0x590
[  841.491681][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  841.497680][    C0]  ? find_held_lock+0x2d/0x110
[  841.502467][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  841.507691][    C0]  ? _raw_spin_unlock+0x28/0x50
[  841.512551][    C0]  ? d_add+0x43c/0x730
[  841.516634][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  841.521950][    C0]  ? simple_lookup+0xd6/0x110
[  841.526641][    C0]  tomoyo_path_mkdir+0x9c/0xe0
[  841.531424][    C0]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  841.536894][    C0]  ? get_current_fs_domain+0x188/0x1f0
[  841.542362][    C0]  security_path_mkdir+0x111/0x170
[  841.547485][    C0]  do_mkdirat+0x176/0x3a0
[  841.551826][    C0]  ? __pfx_do_mkdirat+0x10/0x10
[  841.556688][    C0]  ? getname_flags.part.0+0x1c5/0x550
[  841.562180][    C0]  __x64_sys_mkdirat+0x83/0xb0
[  841.566967][    C0]  do_syscall_64+0xcd/0x250
[  841.571581][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.577605][    C0] RIP: 0033:0x7f129a176297
[  841.582201][    C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  841.601907][    C0] RSP: 002b:00007ffed262d5d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102
[  841.610328][    C0] RAX: ffffffffffffffda RBX: 00007ffed262d620 RCX: 00007f129a176297
[  841.618306][    C0] RDX: 00000000000001ff RSI: 00007ffed262d620 RDI: 00000000ffffff9c
[  841.626386][    C0] RBP: 00007ffed262d60c R08: 0000000000000005 R09: 00007ffed262d375
[  841.634456][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032
[  841.642454][    C0] R13: 00000000000ccac4 R14: 00000000000cc18b R15: 00007ffed262d660
[  841.650439][    C0]  </TASK>
[  841.653727][    C0] Kernel Offset: disabled
[  841.658091][    C0] Rebooting in 86400 seconds..