last executing test programs:

45.613622498s ago: executing program 4 (id=1219):
r0 = creat(&(0x7f0000002640)='./file0\x00', 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x6)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "ad7687cdb47be89e", "80a36f1fcdabbf2d1cd6dd223b2b15f9", "b0d1c785", "3f6cd16f809ac18d"}, 0x28)
bind$netlink(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)={0x2e, 0x0, '\x00', [@pad1]}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x1, [@broadcast]}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0xef48, 0x101, 0x3f, 0x98aa}, 0x14)
getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000280)={'security\x00'}, &(0x7f00000003c0)=0x24)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet6(0xa, 0x80801, 0xff)
dup3(r6, r5, 0x0)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "055038480a2d2cd7", "ea2c90cb7ac5d40787d8cbd36cf1fae7", "4d8ebad2", "a2e12e246e59717c"}, 0x28)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000005c0)='ip6_vti0\x00')
mq_open(&(0x7f00000008c0)='ip\xcf\x93#\xfa\x15\x9d', 0x40, 0x22, &(0x7f0000000900)={0x0, 0x1a0, 0x3, 0xef})

44.641263312s ago: executing program 4 (id=1223):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000500530001000000140004"], 0x60}}, 0x0)

44.317313097s ago: executing program 4 (id=1228):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000000000000630138de0000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

43.629387044s ago: executing program 4 (id=1230):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="403dd4"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

43.499753625s ago: executing program 3 (id=1233):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
userfaultfd(0x801)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18a})
unshare(0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x39}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x4, "5c1d34", 0x80, 0x7}, {@none, 0x4, 0x8, "b3762d", 0x6, 0x5}, {@any, 0x7f, 0x6, "e9c935", 0x5, 0xd8}, {@any, 0x8, 0x75, "d5bce1", 0x17b, 0x3}]}}}, 0x3c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x2, 0x0, @local}, 0x1c)
socket(0x2, 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})
r5 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fsopen(&(0x7f0000000500)='v7\x00', 0x0)
ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f00000017c0)=0x8000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40082104, &(0x7f0000000000))
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff)
preadv(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

39.414336235s ago: executing program 3 (id=1241):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$RNDGETENTCNT(r0, 0x8946, &(0x7f0000000000))

39.414116007s ago: executing program 4 (id=1242):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="0b03060003001000020047c8aa96a13bb1001911000088ca1a00772bfc0d166321f30f7d26e3", 0x26, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

39.117664372s ago: executing program 4 (id=1244):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x100800001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$binfmt_script(r0, &(0x7f0000001440)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}, {}, {0x20, ')\x9e!'}], 0xa, "c66969522d9812f7"}, 0x28)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c80008"], 0x51)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x17)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r2], 0x1ac)
syz_emit_vhci(0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x2)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@none, 0x3, 0x8, 0x1, "7efac9", 0xfbe1, 0x2}, {@none, 0x5, 0x3, 0x9, "75824d", 0x6, 0x4}, {@none, 0x5, 0x6, 0x9, "e6c5ff", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0x5, 0x5, "a7540c", 0xf, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x7, 0x40, "e15999", 0x8f77, 0x9}, {@none, 0x5, 0x3, 0x6, "0d69ef", 0x8, 0x7}]}}}, 0x5e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000001400), 0x1, 0x22, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x4)

39.030995673s ago: executing program 3 (id=1245):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r4})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)

37.891962614s ago: executing program 3 (id=1247):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003400), 0x0, 0x0)
open(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f000001c440)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0xfffffffd, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0)

37.389649777s ago: executing program 3 (id=1251):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

36.93743301s ago: executing program 3 (id=1256):
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20000769, &(0x7f0000000200)={0x2, 0x24e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x37000000, @local}}}, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x143042, 0x0)
ftruncate(r4, 0x2008002)
sendfile(r3, r4, 0x0, 0x80000001)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)

16.648207425s ago: executing program 0 (id=1293):
r0 = socket(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
geteuid()
r4 = syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x408041)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]})
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0xffffffa1, &(0x7f0000000480)={&(0x7f0000000400)=""/51, 0x33, <r5=>0x0, &(0x7f0000000740)=""/138, 0x8a}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000f80)=""/4096, 0x300)

15.436350837s ago: executing program 0 (id=1297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_STATE={0x5}]}}}]}, 0x4c}}, 0x0)

14.988077715s ago: executing program 0 (id=1299):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0)

14.685081296s ago: executing program 0 (id=1300):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.61921012s ago: executing program 0 (id=1303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20)

12.439029118s ago: executing program 0 (id=1305):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, <r6=>0x0}, 0x2020)
open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50)
read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r8, r5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r1, <r9=>0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000000c0)={r1, r9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

9.855168606s ago: executing program 1 (id=1309):
r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0)
memfd_secret(0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000540), 0xfff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r3, 0x5437, 0x0)
socket$rds(0x15, 0x5, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='dax\x00', &(0x7f0000000080), 0xfffffffffffffdcd)

9.62959718s ago: executing program 2 (id=1310):
syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0xec, 0x68, 0xd4, 0x20, 0x93a, 0x50f, 0x56a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x90, 0x64}}]}}]}}, 0x0)

8.909273935s ago: executing program 1 (id=1311):
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xa, 0x0, &(0x7f00000006c0)="f6f4e98ed78ad62ceef1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x24000044, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0x10132)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x4144, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x1)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3414040da0b8a81d8e20000000109021200"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x21, 0x1}})

7.868416058s ago: executing program 2 (id=1313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000000))
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)

6.887940823s ago: executing program 2 (id=1314):
r0 = socket$unix(0x1, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0x8e2ea000)
r1 = socket(0x200000100000011, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18)
r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75425c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f00000002c0)=0x8)
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x4, 0x0, 0x1, 0x10, 0x101]}, &(0x7f0000000000)=0x54)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$rfkill(r7, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_eeprom})
ioctl$sock_proto_private(r0, 0x8b0b, &(0x7f0000000080))

5.386154946s ago: executing program 1 (id=1315):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
socket(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x9)
rmdir(&(0x7f0000000700)='./cgroup/../file0\x00')

5.385879701s ago: executing program 2 (id=1316):
socket$netlink(0x10, 0x3, 0x4)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'})
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x14)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

4.275957894s ago: executing program 1 (id=1317):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000200)=0x641, 0x4)
setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000080)=0x4, 0x4)

2.936805062s ago: executing program 2 (id=1318):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.93150746s ago: executing program 1 (id=1319):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0xde}, @mss={0x2, 0x7}, @mss={0x2, 0x1}], 0xd)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r1, 0x8b2c, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x0, 0x2}})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3650}]}, 0x10)
r4 = syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r5, r6, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0})
listen(r7, 0x0)
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

1.427563363s ago: executing program 2 (id=1321):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{}]}, 0x2c, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
syz_open_procfs(0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ioctl(r0, 0x8936, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000010000003dd00000000000000cf00000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000306030000000000020000000000000005000100", @ANYRES32], 0x1c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)

0s ago: executing program 1 (id=1322):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x1, 0x497}}, './file0\x00'})
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
socket$inet6(0xa, 0x2, 0x4601dd03)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [<r8=>0x0]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r9})
close_range(r3, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_settime(0x0, &(0x7f0000000080)={0x77359400})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
socket$netlink(0x10, 0x3, 0x4)

kernel console output (not intermixed with test programs):

(1723025782.497:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.1.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x0
[  336.339877][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.462289][ T7680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.665132][ T7680] hsr_slave_0: entered promiscuous mode
[  336.720496][ T7680] hsr_slave_1: entered promiscuous mode
[  337.366080][   T29] audit: type=1400 audit(1723025783.577:480): avc:  denied  { ioctl } for  pid=7889 comm="syz.0.714" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  337.467445][ T7899] block nbd1: shutting down sockets
[  337.527045][   T29] audit: type=1326 audit(1723025783.747:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x0
[  338.121211][ T7910] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[  338.156613][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  338.381503][    T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=4d.67
[  338.408120][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.454998][    T9] usb 5-1: Product: syz
[  338.480981][    T9] usb 5-1: Manufacturer: syz
[  338.508973][    T9] usb 5-1: SerialNumber: syz
[  338.559142][    T9] usb 5-1: config 0 descriptor??
[  338.588134][    T9] ati_remote2 5-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint
[  338.704694][   T29] audit: type=1400 audit(1723025784.907:482): avc:  denied  { setopt } for  pid=7914 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  338.760538][ T7918] netlink: 'syz.2.721': attribute type 10 has an invalid length.
[  338.851847][    T9] usb 5-1: USB disconnect, device number 11
[  338.955861][ T7918] team0: Port device netdevsim0 added
[  339.029437][   T29] audit: type=1400 audit(1723025785.247:483): avc:  denied  { append } for  pid=7924 comm="syz.0.723" name="nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  339.288624][ T7926] nvme_fabrics: missing parameter 'transport=%s'
[  339.296958][ T7926] nvme_fabrics: missing parameter 'nqn=%s'
[  339.319076][ T7680] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  339.380533][ T7680] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  339.419487][ T7680] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  339.459577][ T7680] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  339.516321][ T5282] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  339.748172][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.861838][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.900862][ T5282] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  339.919166][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.971021][ T5282] usb 2-1: config 0 descriptor??
[  340.363102][ T7680] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.585588][ T7680] 8021q: adding VLAN 0 to HW filter on device team0
[  340.636290][   T29] audit: type=1400 audit(1723025786.817:484): avc:  denied  { mount } for  pid=7933 comm="syz.2.726" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  340.711829][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.719047][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.734435][ T7934] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  340.787561][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.794819][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.927791][ T7680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.076299][ T5270] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  341.139971][   T29] audit: type=1400 audit(1723025787.357:485): avc:  denied  { unmount } for  pid=6607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  341.312545][ T5270] usb 5-1: Using ep0 maxpacket: 16
[  341.341893][ T5270] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95
[  341.411829][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.465472][ T5270] usb 5-1: Product: syz
[  341.470487][ T5282] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input15
[  341.508034][ T5270] usb 5-1: Manufacturer: syz
[  341.512672][ T5270] usb 5-1: SerialNumber: syz
[  341.582444][ T5270] usb 5-1: config 0 descriptor??
[  342.285110][ T5282] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000F/input/input16
[  342.389443][ T5282] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  342.436200][ T5282] usb 2-1: USB disconnect, device number 18
[  342.624278][ T5270] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  342.648450][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.674173][ T5270] asix 5-1:0.0: probe with driver asix failed with error -71
[  342.734135][ T5270] usb 5-1: USB disconnect, device number 12
[  342.816083][   T51] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  342.918085][ T7680] veth0_vlan: entered promiscuous mode
[  343.009423][ T7680] veth1_vlan: entered promiscuous mode
[  343.030670][   T51] usb 1-1: Using ep0 maxpacket: 32
[  343.063146][   T51] usb 1-1: config index 0 descriptor too short (expected 164, got 36)
[  343.102437][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.170207][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.214123][ T7680] veth0_macvtap: entered promiscuous mode
[  343.224103][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  343.230140][ T7975] netlink: 208 bytes leftover after parsing attributes in process `syz.1.732'.
[  343.254940][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.303981][ T7680] veth1_macvtap: entered promiscuous mode
[  343.339262][   T51] usb 1-1: config 0 descriptor??
[  343.465576][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.524967][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.564789][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.637747][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.681714][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.752546][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.794335][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.840432][   T51] logitech 0003:046D:C29C.0010: unknown main item tag 0x0
[  343.847687][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.876074][ T5280] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  343.886829][   T51] logitech 0003:046D:C29C.0010: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0
[  343.898328][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.935801][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.952755][   T29] audit: type=1400 audit(1723025790.147:486): avc:  denied  { ioctl } for  pid=7977 comm="syz.2.733" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  343.998920][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.034149][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.064563][   T51] logitech 0003:046D:C29C.0010: no inputs found
[  344.095500][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.117775][   T51] usb 1-1: USB disconnect, device number 25
[  344.153940][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.182970][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.241023][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.257024][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.303032][ T5280] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  344.305586][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.335972][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.387780][ T5280] usb 5-1: config 0 descriptor??
[  344.394507][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.423280][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.447521][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.467888][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.501352][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.512906][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.528290][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.552693][ T7680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.565974][ T7680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.585134][ T7680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.626531][ T7979] syzkaller0: entered allmulticast mode
[  344.651015][ T7993] team_slave_1: mtu less than device minimum
[  344.717850][ T7680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.728869][ T7680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.738944][ T7680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.750185][ T7680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.955444][ T5280] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  345.057490][ T6261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.106903][ T5280] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE
[  345.185250][ T6261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.327253][ T5280] cp2112 0003:10C4:EA90.0011: error requesting SMBus config
[  345.421447][ T5280] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71
[  345.554878][ T5280] usb 5-1: USB disconnect, device number 13
[  345.858363][  T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.885426][  T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.108180][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  346.271840][ T8010] syzkaller0: entered promiscuous mode
[  346.303440][ T8010] syzkaller0: entered allmulticast mode
[  346.314436][   T29] audit: type=1326 audit(1723025792.527:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8007 comm="syz.1.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x0
[  346.376503][    T9] usb 1-1: Using ep0 maxpacket: 16
[  346.435639][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  346.482932][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  346.525743][    T9] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  346.555348][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.590822][    T9] usb 1-1: config 0 descriptor??
[  346.747036][ T5282] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  346.966089][ T5282] usb 3-1: Using ep0 maxpacket: 32
[  346.993638][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  347.038641][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  347.071403][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  347.091323][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  347.113101][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[  347.145993][ T5282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16
[  347.159306][ T8041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.742'.
[  347.178899][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  347.211165][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  347.228904][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.244873][ T8041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.742'.
[  347.256847][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.276488][ T4608] Bluetooth: hci0: unexpected event 0x09 length: 4 > 3
[  347.303596][ T5282] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  347.326098][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.334257][ T5282] usb 3-1: Product: syz
[  347.340199][ T5282] usb 3-1: Manufacturer: syz
[  347.344954][ T5282] usb 3-1: SerialNumber: syz
[  347.365683][ T5282] usb 3-1: config 0 descriptor??
[  347.373596][ T8026] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  347.393495][ T4608] Bluetooth: hci0: ACL packet for unknown connection handle 203
[  347.417771][ T8026] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  347.442085][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'.
[  347.468033][    T9] hid (null): bogus close delimiter
[  347.477053][ T4608] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  347.528509][    T9] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0
[  347.560283][    T9] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0
[  347.611242][    T9] hid-generic 0003:0158:0100.0012: bogus close delimiter
[  347.646118][    T9] hid-generic 0003:0158:0100.0012: item 0 0 2 10 parsing failed
[  347.663221][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.665025][    T9] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22
[  347.698113][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.759367][ T5282] cxacru 3-1:0.0: submit of read urb for cm 0x90 failed (-8)
[  347.787277][ T5282] cxacru 3-1:0.0: usbatm_usb_probe: invalid endpoint 02!
[  347.839094][ T5282] cxacru 3-1:0.0: probe with driver cxacru failed with error -22
[  348.866415][ T5282] usb 3-1: USB disconnect, device number 15
[  348.901178][   T29] audit: type=1400 audit(1723025794.427:488): avc:  denied  { read } for  pid=8053 comm="syz.3.745" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  349.043363][   T29] audit: type=1400 audit(1723025794.427:489): avc:  denied  { open } for  pid=8053 comm="syz.3.745" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  349.081859][    T8] usb 1-1: USB disconnect, device number 26
[  349.155192][   T29] audit: type=1400 audit(1723025794.467:490): avc:  denied  { ioctl } for  pid=8053 comm="syz.3.745" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  349.396358][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  349.631634][    T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  349.661667][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.703512][    T9] usb 4-1: Product: syz
[  349.714041][    T9] usb 4-1: Manufacturer: syz
[  349.726395][ T5280] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  349.736638][    T9] usb 4-1: SerialNumber: syz
[  349.761770][    T9] usb 4-1: config 0 descriptor??
[  349.791616][    T9] gspca_main: sunplus-2.14.0 probing 055f:c230
[  349.949006][ T5280] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  349.994606][ T5280] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  350.061583][ T5280] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  350.104840][ T5280] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6
[  350.329996][   T53] usb 4-1: USB disconnect, device number 23
[  350.352214][ T5280] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  350.732422][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'.
[  352.216521][ T5280] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  352.253437][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.269276][ T5280] usb 3-1: Product: syz
[  352.273470][ T5280] usb 3-1: Manufacturer: syz
[  352.280239][ T5280] usb 3-1: SerialNumber: syz
[  352.297336][ T5280] usb 3-1: ucan: probing device on interface #0
[  352.341439][ T5280] usb 3-1: ucan: invalid endpoint configuration
[  352.366081][ T5280] usb 3-1: ucan: probe failed; try to update the device firmware
[  352.474072][   T29] audit: type=1400 audit(1723025798.667:491): avc:  denied  { execute } for  pid=8083 comm="syz.1.751" dev="hugetlbfs" ino=20548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  352.527054][   T53] usb 3-1: USB disconnect, device number 16
[  352.613492][   T29] audit: type=1400 audit(1723025798.697:492): avc:  denied  { execute_no_trans } for  pid=8083 comm="syz.1.751" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=20548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  356.726184][ T5282] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  356.806555][ T5280] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  356.928333][ T5282] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  356.963052][ T5282] usb 5-1: config 0 has no interface number 0
[  357.012754][ T5282] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96
[  357.027728][ T5280] usb 3-1: Using ep0 maxpacket: 16
[  357.032067][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.070264][ T5280] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  357.076025][ T5282] usb 5-1: Product: syz
[  357.097053][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.131370][ T5282] usb 5-1: Manufacturer: syz
[  357.134147][ T5280] usb 3-1: Product: syz
[  357.150648][ T5280] usb 3-1: Manufacturer: syz
[  357.154911][ T5282] usb 5-1: SerialNumber: syz
[  357.162451][ T5280] usb 3-1: SerialNumber: syz
[  357.182833][ T5282] usb 5-1: config 0 descriptor??
[  357.223754][ T5282] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces
[  357.238533][ T5280] r8152-cfgselector 3-1: Unknown version 0x0000
[  357.265624][ T5280] r8152-cfgselector 3-1: config 0 descriptor??
[  357.279540][ T5282] cx231xx 5-1:0.1: Not found matching IAD interface
[  357.321623][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  357.332334][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  357.355069][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  357.406451][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  357.414360][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  357.422200][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  357.540011][   T53] usb 5-1: USB disconnect, device number 14
[  358.780838][   T29] audit: type=1400 audit(1723025804.997:493): avc:  denied  { read } for  pid=8153 comm="syz.4.769" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  358.814828][   T29] audit: type=1400 audit(1723025805.017:494): avc:  denied  { open } for  pid=8153 comm="syz.4.769" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  358.873962][   T29] audit: type=1400 audit(1723025805.057:495): avc:  denied  { ioctl } for  pid=8153 comm="syz.4.769" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  358.898893][    C0] vkms_vblank_simulate: vblank timer overrun
[  359.516421][ T4608] Bluetooth: hci6: command tx timeout
[  360.629575][ T5282] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  360.835587][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.856665][ T5282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08
[  360.865863][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.874224][ T5282] usb 4-1: Product: syz
[  360.882624][ T5282] usb 4-1: Manufacturer: syz
[  360.887382][ T5282] usb 4-1: SerialNumber: syz
[  360.896471][ T5282] usb 4-1: config 0 descriptor??
[  360.910610][ T5282] usbtest 4-1:0.0: couldn't get endpoints, -22
[  360.917688][ T5282] usbtest 4-1:0.0: probe with driver usbtest failed with error -22
[  361.147460][ T5282] r8152-cfgselector 3-1: USB disconnect, device number 17
[  361.606134][ T4608] Bluetooth: hci6: command tx timeout
[  362.083965][   T51] usb 4-1: USB disconnect, device number 24
[  362.193172][ T6285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.198481][ T8181] ieee802154 phy0 wpan0: encryption failed: -22
[  362.333239][ T5282] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  362.387832][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies.
[  362.459856][ T6285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.561948][ T5282] usb 3-1: Using ep0 maxpacket: 32
[  362.597693][ T5282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.654160][ T5282] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  362.678514][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.716042][ T5282] usb 3-1: Product: syz
[  362.720248][ T5282] usb 3-1: Manufacturer: syz
[  362.724821][ T6285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.755118][ T5282] usb 3-1: SerialNumber: syz
[  362.774106][ T5282] usb 3-1: config 0 descriptor??
[  362.789800][ T5282] usb 3-1: bad CDC descriptors
[  362.796535][ T5282] usb 3-1: unsupported MDLM descriptors
[  362.997632][   T29] audit: type=1400 audit(1723025809.197:496): avc:  denied  { create } for  pid=8193 comm="syz.3.784" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  363.093907][ T6285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.101546][ T4608] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  363.126533][   T29] audit: type=1400 audit(1723025809.247:497): avc:  denied  { unlink } for  pid=7680 comm="syz-executor" name="file5" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  363.225862][   T29] audit: type=1400 audit(1723025809.317:498): avc:  denied  { write } for  pid=8202 comm="syz.3.787" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  363.363430][ T5280] usb 3-1: USB disconnect, device number 18
[  363.513529][ T8133] chnl_net:caif_netlink_parms(): no params data found
[  363.566044][ T5282] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  363.666240][ T4608] Bluetooth: hci6: command tx timeout
[  363.758468][ T5282] usb 2-1: Using ep0 maxpacket: 32
[  363.788448][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.805369][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.820676][ T5282] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  363.830237][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.843544][ T5282] usb 2-1: config 0 descriptor??
[  363.966494][ T6285] bridge_slave_1: left allmulticast mode
[  364.011315][ T6285] bridge_slave_1: left promiscuous mode
[  364.059457][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.114232][ T6285] bridge_slave_0: left allmulticast mode
[  364.142341][ T6285] bridge_slave_0: left promiscuous mode
[  364.173552][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.341577][ T5282] elecom 0003:056E:00E6.0013: item fetching failed at offset 2/5
[  364.355231][ T5282] elecom 0003:056E:00E6.0013: probe with driver elecom failed with error -22
[  364.685742][ T5270] usb 2-1: USB disconnect, device number 19
[  365.028199][   T29] audit: type=1400 audit(1723025811.207:499): avc:  denied  { map } for  pid=8234 comm="syz.2.798" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  365.746732][ T5239] Bluetooth: hci6: command tx timeout
[  365.829352][ T5239] Bluetooth: hci5: command 0x0406 tx timeout
[  366.857536][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.918046][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.935572][ T6285] bond0 (unregistering): Released all slaves
[  367.079080][ T8225] netlink: 'syz.3.795': attribute type 12 has an invalid length.
[  367.192769][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'.
[  367.215293][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.800'.
[  367.392508][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.435373][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.463128][ T8133] bridge_slave_0: entered allmulticast mode
[  367.491519][ T8133] bridge_slave_0: entered promiscuous mode
[  367.562252][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.587538][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.595703][ T8133] bridge_slave_1: entered allmulticast mode
[  367.617164][ T8133] bridge_slave_1: entered promiscuous mode
[  368.007526][   T53] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  368.076568][   T51] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  368.244811][ T6285] hsr_slave_0: left promiscuous mode
[  368.292023][   T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.378272][ T6285] hsr_slave_1: left promiscuous mode
[  368.463338][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.491968][   T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.560823][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.752056][   T53] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  368.796744][   T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.817329][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.824775][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.877657][   T53] usb 2-1: config 0 descriptor??
[  369.019543][ T6285] veth1_macvtap: left promiscuous mode
[  369.046189][ T6285] veth0_macvtap: left promiscuous mode
[  369.053571][ T6285] veth1_vlan: left promiscuous mode
[  369.095774][ T6285] veth0_vlan: left promiscuous mode
[  369.101488][ T8274] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  369.106090][   T51] usb 5-1: Using ep0 maxpacket: 8
[  369.346491][   T53] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 5/7
[  369.408837][   T53] cp2112 0003:10C4:EA90.0014: parse failed
[  369.451520][   T53] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -22
[  369.582678][   T53] usb 2-1: USB disconnect, device number 20
[  369.592869][   T51] usb 5-1: config 0 has an invalid interface number: 32 but max is 0
[  369.601070][   T51] usb 5-1: config 0 has no interface number 0
[  369.607361][   T51] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.624347][   T51] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.665327][   T51] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  369.678876][   T51] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  369.687172][   T51] usb 5-1: Manufacturer: syz
[  369.742473][   T51] usb 5-1: config 0 descriptor??
[  370.333087][ T4608] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3
[  370.398536][ T5280] usb 5-1: USB disconnect, device number 15
[  370.544266][ T4608] Bluetooth: hci1: ACL packet for unknown connection handle 203
[  372.350093][ T6285] team0 (unregistering): Port device team_slave_1 removed
[  372.409855][ T6285] team0 (unregistering): Port device team_slave_0 removed
[  372.907550][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.969949][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.092754][ T8133] team0: Port device team_slave_0 added
[  373.153240][ T8133] team0: Port device team_slave_1 added
[  373.235658][ T8314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.243374][ T8314] IPv6: NLM_F_CREATE should be set when creating new route
[  373.304780][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.322032][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.426544][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.570935][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.587076][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.653642][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.806723][    T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  373.866847][   T51] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  373.917676][ T8133] hsr_slave_0: entered promiscuous mode
[  373.964635][ T8133] hsr_slave_1: entered promiscuous mode
[  374.007335][ T8133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  374.017216][    T8] usb 3-1: Using ep0 maxpacket: 32
[  374.032620][ T8133] Cannot create hsr debugfs directory
[  374.044343][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  374.072122][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  374.096148][   T51] usb 2-1: Using ep0 maxpacket: 16
[  374.104094][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  374.126262][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  374.153971][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.166049][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  374.199169][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  374.199538][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.253072][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  374.297297][   T51] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  374.322290][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.340703][    T8] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  374.373502][   T51] usb 2-1: config 0 descriptor??
[  374.395211][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.421862][    T8] usb 3-1: Product: syz
[  374.437986][    T8] usb 3-1: Manufacturer: syz
[  374.442624][    T8] usb 3-1: SerialNumber: syz
[  374.487688][    T8] usb 3-1: config 0 descriptor??
[  374.493883][ T8319] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  374.876649][    T8] hdpvr 3-1:0.0: unexpected answer of status request, len -71
[  374.902854][    T8] hdpvr 3-1:0.0: device init failed
[  374.912328][   T51] uclogic 0003:28BD:0042.0016: interface is invalid, ignoring
[  374.916033][    T8] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  375.507846][    T8] usb 3-1: USB disconnect, device number 19
[  375.720587][ T1565] usb 2-1: USB disconnect, device number 21
[  375.982866][   T29] audit: type=1400 audit(1723025822.187:500): avc:  denied  { listen } for  pid=8356 comm="syz.3.827" lport=58347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  376.004524][ T8358] netlink: 'syz.4.828': attribute type 10 has an invalid length.
[  376.056667][   T29] audit: type=1400 audit(1723025822.237:501): avc:  denied  { accept } for  pid=8356 comm="syz.3.827" lport=58347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  376.138095][ T8358] team0: Port device netdevsim0 added
[  376.150957][ T8363] netlink: 'syz.4.828': attribute type 10 has an invalid length.
[  376.203303][ T8363] team0: Port device netdevsim0 removed
[  376.223026][ T8363] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  376.455553][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.569867][ T8133] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  377.610521][ T8385] xt_CT: You must specify a L4 protocol and not use inversions on it
[  377.625592][ T8133] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  377.656327][   T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  377.698944][ T8133] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  377.741484][ T8133] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  377.899385][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.913615][ T4608] Bluetooth: hci1: unexpected event 0x08 length: 78 > 4
[  377.936070][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.010932][   T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  378.123692][   T51] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  378.166821][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.277159][   T51] usb 2-1: config 0 descriptor??
[  378.413451][   T29] audit: type=1400 audit(1723025824.627:502): avc:  denied  { write } for  pid=8387 comm="syz.3.835" name="usbmon4" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  378.434295][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.436717][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.607844][ T8133] 8021q: adding VLAN 0 to HW filter on device team0
[  378.676385][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.683681][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.757833][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.765282][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.810202][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.824744][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.832148][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.854107][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.864750][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.911084][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.944834][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.987285][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  378.994733][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  379.051671][ T8133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  379.076264][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  379.100494][   T51] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  379.125741][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  379.132191][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  379.208081][   T51] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  379.232048][   T51] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  379.309460][   T51] usb 2-1: USB disconnect, device number 22
[  380.417133][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'.
[  380.440615][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.472521][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.525717][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.598452][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.863812][ T8444] input: syz1 as /devices/virtual/input/input18
[  380.965227][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.276604][ T8133] veth0_vlan: entered promiscuous mode
[  381.308221][ T8457] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  381.328031][ T8133] veth1_vlan: entered promiscuous mode
[  381.353859][ T8457] netlink: 'syz.1.848': attribute type 2 has an invalid length.
[  381.523610][   T29] audit: type=1326 audit(1723025827.737:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf61b779f9 code=0x7fc00000
[  381.559324][ T8133] veth0_macvtap: entered promiscuous mode
[  381.584339][ T8133] veth1_macvtap: entered promiscuous mode
[  381.607513][   T29] audit: type=1326 audit(1723025827.817:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf61b779f9 code=0x7fc00000
[  381.665495][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.702212][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.735749][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.760101][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.808057][   T29] audit: type=1326 audit(1723025834.007:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf61b779f9 code=0x7fc00000
[  387.854913][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.947308][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.026393][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.070528][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.129333][   T29] audit: type=1400 audit(1723025834.347:506): avc:  denied  { write } for  pid=8477 comm="syz.2.853" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  388.129734][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.232272][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.335474][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.420596][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.459963][   T29] audit: type=1400 audit(1723025834.667:507): avc:  denied  { map } for  pid=8482 comm="syz.3.854" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  388.503908][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.531780][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'.
[  388.535955][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.618700][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.669064][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.711703][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.738490][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.774299][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.809816][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.828549][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.861580][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.975065][ T8133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.014948][ T8133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.054894][ T8133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.073925][ T8133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.367206][   T29] audit: type=1400 audit(1723025835.577:508): avc:  denied  { bind } for  pid=8508 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  389.434592][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.465206][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.735995][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.796329][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.951190][   T29] audit: type=1400 audit(1723025836.077:509): avc:  denied  { write } for  pid=8511 comm="syz.3.862" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  392.357502][    T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  392.588771][    T8] usb 2-1: config 0 has no interfaces?
[  392.612178][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  392.648039][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.664871][   T51] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  392.683347][    T8] usb 2-1: Product: syz
[  392.702605][    T8] usb 2-1: Manufacturer: syz
[  392.725637][    T8] usb 2-1: SerialNumber: syz
[  392.754311][    T8] usb 2-1: config 0 descriptor??
[  392.886078][   T51] usb 4-1: Using ep0 maxpacket: 16
[  392.927756][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.962641][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.003214][   T51] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  393.022875][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.027867][ T5281] usb 2-1: USB disconnect, device number 23
[  393.050761][   T51] usb 4-1: config 0 descriptor??
[  393.259575][    T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  393.354874][ T8555] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.869'.
[  393.494459][    T8] usb 5-1: Using ep0 maxpacket: 32
[  393.524912][    T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  393.540931][   T51] mcp2200 0003:04D8:00DF.0018: item fetching failed at offset 0/2
[  393.558183][   T51] mcp2200 0003:04D8:00DF.0018: can't parse reports
[  393.572369][   T51] mcp2200 0003:04D8:00DF.0018: probe with driver mcp2200 failed with error -22
[  393.575939][    T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  393.768934][    T8] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  393.781525][    T8] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  393.795503][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  393.876340][   T29] audit: type=1400 audit(1723025840.077:510): avc:  denied  { read } for  pid=8565 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  393.896367][   T51] usb 4-1: USB disconnect, device number 25
[  394.623478][    T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  394.651355][    T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  394.661918][    T8] usb 5-1: Product: syz
[  394.666143][    T8] usb 5-1: Manufacturer: syz
[  394.670754][    T8] usb 5-1: SerialNumber: syz
[  394.724182][    T8] usb 5-1: config 0 descriptor??
[  394.736718][    T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  394.758033][    T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  395.120560][ T8576] binder: BINDER_SET_CONTEXT_MGR already set
[  395.127497][ T8576] binder: 8570:8576 ioctl 4018620d 20000040 returned -16
[  396.324528][ T8584] syzkaller1: entered promiscuous mode
[  396.331590][ T8584] syzkaller1: entered allmulticast mode
[  396.446036][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'.
[  396.469592][ T8589] netlink: 'syz.0.877': attribute type 15 has an invalid length.
[  396.512080][ T8589] netlink: 'syz.0.877': attribute type 7 has an invalid length.
[  396.917911][   T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  396.956314][ T5282] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  397.118250][   T51] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  397.132957][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.146676][   T51] usb 3-1: config 0 descriptor??
[  397.156386][ T5282] usb 4-1: Using ep0 maxpacket: 32
[  397.168105][   T51] gspca_main: cpia1-2.14.0 probing 0813:0001
[  398.189978][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.255481][ T5270] usb 5-1: USB disconnect, device number 16
[  398.266055][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.292826][ T5270] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  398.329117][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  398.376253][ T5282] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  398.385388][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.397014][   T51] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  398.435026][ T5282] usb 4-1: config 0 descriptor??
[  398.521211][ T5280] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  399.048433][   T29] audit: type=1326 audit(1723025844.947:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  399.461442][ T5280] usb 2-1: Using ep0 maxpacket: 32
[  399.491047][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  399.519710][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  399.545283][   T29] audit: type=1326 audit(1723025844.947:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  399.569417][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  399.620027][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  399.656123][   T29] audit: type=1326 audit(1723025844.957:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  399.679355][    C0] vkms_vblank_simulate: vblank timer overrun
[  399.686750][ T5280] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  399.704776][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  399.722206][ T5282] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0019/input/input19
[  399.728845][ T5280] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  399.760739][   T29] audit: type=1326 audit(1723025844.957:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  399.802988][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  399.824886][ T5282] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0019/input/input20
[  399.825346][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  399.890172][   T29] audit: type=1326 audit(1723025844.957:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  399.913404][    C0] vkms_vblank_simulate: vblank timer overrun
[  399.969631][ T5282] kye 0003:0458:5011.0019: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  400.006194][ T5280] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  400.061122][ T5282] usb 4-1: USB disconnect, device number 26
[  400.069130][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.077503][   T29] audit: type=1326 audit(1723025844.957:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  400.132737][ T5280] usb 2-1: Product: syz
[  400.153421][ T5280] usb 2-1: Manufacturer: syz
[  400.170536][ T5280] usb 2-1: SerialNumber: syz
[  400.195612][   T29] audit: type=1326 audit(1723025844.957:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  400.265313][ T5280] usb 2-1: config 0 descriptor??
[  400.309101][ T8604] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  400.365630][   T29] audit: type=1326 audit(1723025844.957:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  400.411070][   T29] audit: type=1326 audit(1723025844.967:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f762a3779f9 code=0x7ffc0000
[  400.466586][   T51] gspca_cpia1: usb_control_msg 02, error -110
[  400.494296][   T51] gspca_cpia1: usb_control_msg 05, error -32
[  400.522419][   T51] gspca_cpia1: usb_control_msg 05, error -32
[  400.542200][   T51] gspca_cpia1: usb_control_msg 05, error -32
[  400.583068][   T51] gspca_cpia1: usb_control_msg 05, error -32
[  400.598315][   T51] cpia1 3-1:0.0: unexpected systemstate: 00
[  400.636379][ T1565] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  400.687061][ T5280] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8)
[  400.718763][ T5280] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02!
[  400.744953][ T5280] cxacru 2-1:0.0: probe with driver cxacru failed with error -22
[  400.814791][ T5280] usb 2-1: USB disconnect, device number 24
[  400.856062][ T1565] usb 5-1: Using ep0 maxpacket: 16
[  400.892156][ T1565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  400.953255][ T1565] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  401.004571][ T1565] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  401.033706][ T1565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  401.049542][ T1565] usb 5-1: SerialNumber: syz
[  401.050185][ T5281] usb 3-1: USB disconnect, device number 20
[  401.166655][    T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  401.408115][    T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  401.457894][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.489765][   T51] usb 5-1: USB disconnect, device number 17
[  401.523754][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  401.537018][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.557388][    T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  401.584675][    T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  401.614930][    T8] usb 4-1: Product: syz
[  401.630997][    T8] usb 4-1: Manufacturer: syz
[  401.659402][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  401.664650][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  401.740245][    T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  401.756888][    T8] cdc_wdm 4-1:1.0: Unknown control protocol
[  401.876871][    T8] usb 4-1: USB disconnect, device number 27
[  401.976413][ T5282] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  402.167969][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  402.204152][ T5282] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  402.215856][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.239071][ T5282] usb 2-1: config 0 descriptor??
[  402.251907][ T5282] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  402.259542][ T5282] usb 2-1: No valid video chain found.
[  402.446699][ T1565] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  402.519206][    T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  402.527179][    T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  402.560331][ T5282] usb 2-1: USB disconnect, device number 25
[  402.646089][ T1565] usb 1-1: Using ep0 maxpacket: 8
[  402.663690][ T1565] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  402.683676][ T1565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.693652][ T1565] usb 1-1: Product: syz
[  402.701972][ T1565] usb 1-1: Manufacturer: syz
[  402.710260][ T1565] usb 1-1: SerialNumber: syz
[  402.738067][ T1565] usb 1-1: config 0 descriptor??
[  402.749748][    T9] usb 5-1: Using ep0 maxpacket: 32
[  402.760098][ T1565] usb 1-1: invalid MIDI EP
[  402.765001][ T1565] usb 1-1: snd-bcd2000: error during probing
[  402.771073][    T9] usb 5-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=e6.7e
[  402.788581][    T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  402.792584][ T1565] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  402.798204][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.819451][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.844127][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  402.863660][    T9] usb 5-1: Product: syz
[  402.878089][    T9] usb 5-1: Manufacturer: syz
[  402.888864][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.916097][    T9] usb 5-1: SerialNumber: syz
[  402.932303][    T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  402.957698][    T9] usb 5-1: config 0 descriptor??
[  402.972956][    T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  402.984018][    T9] usb 5-1: bad CDC descriptors
[  403.024076][    T8] usb 4-1: Product: syz
[  403.031953][    T8] usb 4-1: Manufacturer: syz
[  403.058049][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  403.063557][    T8] cdc_wdm 4-1:1.0: skipping garbage
[  403.076190][    T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  403.082537][    T8] cdc_wdm 4-1:1.0: Unknown control protocol
[  403.245675][ T1565] usb 1-1: USB disconnect, device number 27
[  403.282521][ T5282] usb 5-1: USB disconnect, device number 18
[  403.297093][    C1] cdc_wdm 4-1:1.0: unknown notification 66 received: index 4709 len 13010
[  403.305859][    C1] cdc_wdm 4-1:1.0: unknown notification 166 received: index 48734 len 57114
[  403.552416][   T51] usb 4-1: USB disconnect, device number 28
[  405.310870][   T29] audit: type=1400 audit(1723025851.517:520): avc:  denied  { sqpoll } for  pid=8658 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  406.142144][   T29] audit: type=1400 audit(1723025852.357:521): avc:  denied  { ioctl } for  pid=8668 comm="syz.4.904" path="socket:[22924]" dev="sockfs" ino=22924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  406.688503][   T29] audit: type=1400 audit(1723025852.897:522): avc:  denied  { create } for  pid=8679 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  407.975959][   T29] audit: type=1400 audit(1723025852.907:523): avc:  denied  { read } for  pid=8679 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  408.336629][    T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  409.315949][    T8] usb 3-1: Using ep0 maxpacket: 8
[  409.357064][    T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  409.390554][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.409711][    T8] usb 3-1: Product: syz
[  409.421847][    T8] usb 3-1: Manufacturer: syz
[  409.432158][    T8] usb 3-1: SerialNumber: syz
[  409.489151][    T8] usb 3-1: config 0 descriptor??
[  409.722502][    T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  410.678180][   T29] audit: type=1400 audit(1723025856.897:524): avc:  denied  { ioctl } for  pid=8718 comm="syz.4.919" path="socket:[22216]" dev="sockfs" ino=22216 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  410.863821][   T29] audit: type=1326 audit(1723025857.077:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.4.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762a3779f9 code=0x0
[  411.442791][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  411.783300][    T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  411.805610][    T8] usb 3-1: USB disconnect, device number 21
[  411.818450][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  411.832297][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  411.927858][    T9] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  411.951335][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.169036][    T9] usb 1-1: Product: syz
[  412.179394][    T9] usb 1-1: Manufacturer: syz
[  412.267584][    T9] usb 1-1: SerialNumber: syz
[  412.452544][    T9] usb 1-1: config 0 descriptor??
[  412.510749][    T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90
[  412.812199][   T29] audit: type=1400 audit(1723025859.017:526): avc:  denied  { setopt } for  pid=8747 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  413.041929][    T8] usb 1-1: USB disconnect, device number 28
[  413.114247][ T8745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8745 comm=syz.4.927
[  413.154192][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.927'.
[  413.476593][    T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  413.600870][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  413.608959][ T8760] UDF-fs: Scanning with blocksize 512 failed
[  413.619153][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  413.626827][ T8760] UDF-fs: Scanning with blocksize 1024 failed
[  413.641484][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  413.649176][ T8760] UDF-fs: Scanning with blocksize 2048 failed
[  413.656851][ T8760] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  413.665745][ T8760] UDF-fs: Scanning with blocksize 4096 failed
[  414.329799][    T8] usb 3-1: Using ep0 maxpacket: 8
[  414.374914][    T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  414.405971][    T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  414.415766][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  414.450263][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  414.494148][    T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  414.537351][    T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  414.563493][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.817028][    T8] usb 3-1: GET_CAPABILITIES returned 0
[  414.841752][    T8] usbtmc 3-1:16.0: can't read capabilities
[  415.050367][ T1565] usb 3-1: USB disconnect, device number 22
[  415.376201][ T5278] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  415.675994][ T5278] usb 2-1: Using ep0 maxpacket: 16
[  415.695084][ T5278] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  415.709588][ T5278] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  415.732502][ T5278] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  415.741784][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  415.754811][ T5278] usb 2-1: SerialNumber: syz
[  416.063070][ T8787] sctp: [Deprecated]: syz.4.942 (pid 8787) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.063070][ T8787] Use struct sctp_sack_info instead
[  417.198722][ T1565] usb 2-1: USB disconnect, device number 26
[  417.608813][ T8813] netlink: 'syz.3.949': attribute type 11 has an invalid length.
[  418.150441][ T8826] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  418.216739][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  418.486627][    T9] usb 2-1: Using ep0 maxpacket: 8
[  418.522190][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  418.556323][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  418.597991][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42157, setting to 1024
[  418.640372][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  418.669288][ T5280] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  418.677331][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  418.707642][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  418.719589][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.755810][ T8833] netlink: 'syz.3.956': attribute type 1 has an invalid length.
[  418.915961][ T5280] usb 3-1: Using ep0 maxpacket: 8
[  418.935088][ T5280] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  418.946402][ T5280] usb 3-1: config 0 has no interface number 0
[  418.953590][ T5280] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  418.968061][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  418.973534][    T9] usbtmc 2-1:16.0: can't read capabilities
[  418.983502][ T5280] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  418.984068][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv1
[  419.002293][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.030424][ T5280] usb 3-1: config 0 descriptor??
[  419.048521][ T5280] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  419.068898][ T8835] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  419.159896][ T8833] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  419.191189][ T1565] usb 2-1: USB disconnect, device number 27
[  419.217008][ T8833] bond1 (unregistering): Released all slaves
[  419.328549][ T5278] usb 3-1: USB disconnect, device number 23
[  419.351550][ T5278] iowarrior 3-1:0.1: I/O-Warror #1 now disconnected
[  419.623573][   T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  419.846811][   T51] usb 5-1: Using ep0 maxpacket: 8
[  419.873285][   T51] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  419.984028][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.088695][   T51] usb 5-1: Product: syz
[  420.136704][   T51] usb 5-1: Manufacturer: syz
[  420.200773][   T51] usb 5-1: SerialNumber: syz
[  420.516587][   T51] usb 5-1: config 0 descriptor??
[  420.787210][   T51] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  420.906674][ T5270] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  421.124632][ T5270] usb 4-1: config 0 has an invalid interface number: 18 but max is 0
[  421.168990][ T5270] usb 4-1: config 0 has no interface number 0
[  421.200497][ T5270] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.239208][ T5270] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.263639][ T5270] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  421.274935][ T5270] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  421.283832][ T5270] usb 4-1: Manufacturer: syz
[  421.297414][ T5270] usb 4-1: config 0 descriptor??
[  421.833859][ T8855] netlink: 576 bytes leftover after parsing attributes in process `syz.1.964'.
[  421.845585][ T1565] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  421.861945][ T8846] QAT: Device 0 not found
[  421.878680][ T1565] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  422.218677][   T51] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  422.263173][   T51] usb 5-1: USB disconnect, device number 19
[  422.356002][ T5280] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  422.586538][ T5280] usb 3-1: Using ep0 maxpacket: 16
[  422.605222][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  422.648879][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  422.698717][ T5280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  422.725432][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  422.742779][ T5280] usb 3-1: SerialNumber: syz
[  422.786170][ T4608] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  422.799847][ T4608] Bluetooth: hci6: Injecting HCI hardware error event
[  422.808643][ T4608] Bluetooth: hci6: hardware error 0x00
[  424.033731][ T5239] Bluetooth: hci0: unexpected event for opcode 0x2043
[  424.140801][ T5270] usbhid 4-1:0.18: can't add hid device: -71
[  424.170339][ T5270] usbhid 4-1:0.18: probe with driver usbhid failed with error -71
[  424.265496][ T5270] usb 4-1: USB disconnect, device number 29
[  424.439572][ T5280] usb 3-1: USB disconnect, device number 24
[  424.644843][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'.
[  424.732967][ T8891] 8021q: adding VLAN 0 to HW filter on device team1
[  424.814607][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'.
[  424.946726][ T4608] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  425.860025][ T5280] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  426.136790][ T5280] usb 4-1: Using ep0 maxpacket: 16
[  426.437708][ T5280] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  426.697814][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.721843][ T5280] usb 4-1: Product: syz
[  426.727546][ T5280] usb 4-1: Manufacturer: syz
[  426.732171][ T5280] usb 4-1: SerialNumber: syz
[  426.774383][ T5278] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  426.790390][ T5280] r8152-cfgselector 4-1: Unknown version 0x0000
[  426.815954][ T5280] r8152-cfgselector 4-1: config 0 descriptor??
[  426.992307][ T5278] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  427.019928][ T5278] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  427.045986][ T5278] usb 2-1: config 1 has no interface number 1
[  427.072465][ T5278] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  427.149376][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  427.544896][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  427.557820][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.571026][ T5278] usb 2-1: Product: syz
[  427.581212][ T5278] usb 2-1: Manufacturer: syz
[  427.648803][ T5278] usb 2-1: SerialNumber: syz
[  427.852117][ T5280] r8152-cfgselector 4-1: USB disconnect, device number 30
[  427.930168][ T5278] usb 2-1: 2:1 : unsupported format bits 0x40
[  428.066117][ T5278] usb 2-1: USB disconnect, device number 28
[  428.414105][ T8475] udevd[8475]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.446164][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  431.638339][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.677982][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  431.721863][    T9] usb 3-1: config 1 has no interface number 0
[  431.735946][    T9] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  431.767839][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  431.805960][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.823379][    T9] usb 3-1: Product: syz
[  431.845302][    T9] usb 3-1: Manufacturer: syz
[  431.851957][    T9] usb 3-1: SerialNumber: syz
[  431.868748][ T5278] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  431.882300][    T9] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing
[  431.911169][    T9] cdc_ncm 3-1:1.1: bind() failure
[  431.946362][ T1565] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  431.986573][ T4608] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  431.999629][ T4608] Bluetooth: hci5: Injecting HCI hardware error event
[  432.009141][ T5239] Bluetooth: hci5: hardware error 0x00
[  432.082745][ T5278] usb 4-1: Using ep0 maxpacket: 8
[  432.093839][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.146377][   T51] usb 3-1: USB disconnect, device number 25
[  432.155945][ T1565] usb 1-1: Using ep0 maxpacket: 16
[  432.162972][ T5278] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  432.210905][ T1565] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  432.253487][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.264974][ T1565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.280587][ T5278] usb 4-1: Product: syz
[  432.284837][ T5278] usb 4-1: Manufacturer: syz
[  432.290261][ T1565] usb 1-1: Product: syz
[  432.294452][ T1565] usb 1-1: Manufacturer: syz
[  432.299590][ T5278] usb 4-1: SerialNumber: syz
[  432.317422][ T1565] usb 1-1: SerialNumber: syz
[  432.410875][ T5278] usb 4-1: config 0 descriptor??
[  432.449893][ T1565] r8152-cfgselector 1-1: Unknown version 0x0000
[  432.534647][ T1565] r8152-cfgselector 1-1: config 0 descriptor??
[  432.545435][ T5278] gspca_main: stk014-2.14.0 probing 05e1:0893
[  432.581150][ T5278] usb 4-1: selecting invalid altsetting 1
[  433.599791][    T9] r8152-cfgselector 1-1: USB disconnect, device number 29
[  433.668612][    T8] usb 4-1: USB disconnect, device number 31
[  433.678452][ T9001] netlink: 'syz.2.1009': attribute type 3 has an invalid length.
[  433.731895][ T9001] netlink: 'syz.2.1009': attribute type 4 has an invalid length.
[  433.766274][ T9001] netlink: 'syz.2.1009': attribute type 7 has an invalid length.
[  433.792685][ T9001] netlink: 'syz.2.1009': attribute type 8 has an invalid length.
[  433.818275][ T9001] netlink: 'syz.2.1009': attribute type 7 has an invalid length.
[  433.839682][ T9001] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.1009'.
[  434.049483][   T29] audit: type=1400 audit(1723025880.267:527): avc:  denied  { accept } for  pid=9003 comm="iou-wrk-9006" lport=44467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  434.066800][ T5239] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  434.091759][ T9005] syzkaller1: entered promiscuous mode
[  434.118207][ T9005] syzkaller1: entered allmulticast mode
[  434.164667][   T29] audit: type=1400 audit(1723025880.377:528): avc:  denied  { create } for  pid=9010 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  434.249069][   T29] audit: type=1400 audit(1723025880.447:529): avc:  denied  { write } for  pid=9010 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  434.302997][   T29] audit: type=1400 audit(1723025880.447:530): avc:  denied  { nlmsg_read } for  pid=9010 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  436.266340][ T5278] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  436.476095][ T5278] usb 3-1: Using ep0 maxpacket: 8
[  436.538197][ T5278] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  436.546669][ T5278] usb 3-1: config 179 has no interface number 0
[  436.553357][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  436.564731][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  436.584038][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  436.626353][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  436.640915][ T5278] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  436.676192][ T5278] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  436.696241][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.765759][ T9037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  437.440675][ T1565] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21
[  437.738906][ T1565] usb 3-1: USB disconnect, device number 26
[  437.738974][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  437.739033][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  437.828975][ T1565] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  437.960791][ T9053] netlink: 'syz.4.1024': attribute type 21 has an invalid length.
[  438.006472][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1024'.
[  438.046425][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1025'.
[  439.186527][ T5280] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  439.526684][ T5280] usb 5-1: Using ep0 maxpacket: 16
[  439.541077][ T5280] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  439.576112][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.591135][ T5280] usb 5-1: Product: syz
[  439.595327][ T5280] usb 5-1: Manufacturer: syz
[  439.608012][ T5280] usb 5-1: SerialNumber: syz
[  439.630338][ T5280] r8152-cfgselector 5-1: Unknown version 0x0000
[  439.661325][ T5280] r8152-cfgselector 5-1: config 0 descriptor??
[  440.581037][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  440.590214][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  440.695115][    T9] r8152-cfgselector 5-1: USB disconnect, device number 20
[  441.026298][ T5239] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  441.036775][ T5239] Bluetooth: hci1: Injecting HCI hardware error event
[  442.380498][ T5239] Bluetooth: hci0: unexpected event for opcode 0x2043
[  442.558016][ T9107] netlink: 'syz.1.1041': attribute type 13 has an invalid length.
[  442.586089][ T9107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1041'.
[  442.626178][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  442.658074][ T9107] syz_tun: refused to change device tx_queue_len
[  442.664410][ T9107] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  442.901852][ T4608] Bluetooth: hci1: hardware error 0x00
[  443.102363][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'.
[  443.115324][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'.
[  445.026146][ T4608] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  445.690829][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  445.811947][   T29] audit: type=1400 audit(1723025892.027:531): avc:  denied  { bind } for  pid=9121 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  445.936583][    T9] usb 2-1: Using ep0 maxpacket: 16
[  445.994196][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  446.044971][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.563584][    T9] usb 2-1: Product: syz
[  447.588755][    T9] usb 2-1: Manufacturer: syz
[  447.589791][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1055'.
[  447.593413][    T9] usb 2-1: SerialNumber: syz
[  447.628482][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  447.634785][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[  448.027384][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  448.171490][    T9] r8152-cfgselector 2-1: bad CDC descriptors
[  448.354753][    T9] r8152-cfgselector 2-1: USB disconnect, device number 29
[  448.464101][ T9159] netlink: 'syz.3.1061': attribute type 1 has an invalid length.
[  451.900499][ T9199] bridge_slave_1: left allmulticast mode
[  451.925927][ T9199] bridge_slave_1: left promiscuous mode
[  451.973748][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.032012][ T9199] netlink: 'syz.2.1073': attribute type 2 has an invalid length.
[  452.045032][ T9199] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  452.615376][   T29] audit: type=1400 audit(1723025898.827:532): avc:  denied  { mount } for  pid=9204 comm="syz.4.1076" name="/" dev="hugetlbfs" ino=24259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  454.235194][   T29] audit: type=1400 audit(1723025900.447:533): avc:  denied  { mounton } for  pid=9213 comm="syz.0.1077" path="/proc/124/cgroup" dev="proc" ino=25015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  454.683886][   T29] audit: type=1400 audit(1723025900.897:534): avc:  denied  { unmount } for  pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  454.745973][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  454.948291][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  454.991805][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  455.050387][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=dd.c4
[  455.059869][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.084880][    T9] usb 2-1: Product: syz
[  455.089546][    T9] usb 2-1: Manufacturer: syz
[  455.094148][    T9] usb 2-1: SerialNumber: syz
[  455.157139][    T9] usb 2-1: config 0 descriptor??
[  455.341942][ T1565] usb 2-1: USB disconnect, device number 30
[  457.623074][ T9247] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  458.369044][   T29] audit: type=1400 audit(1723025904.547:535): avc:  denied  { write } for  pid=9257 comm="syz.3.1090" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  462.430558][   T29] audit: type=1400 audit(1723025908.647:536): avc:  denied  { mount } for  pid=9297 comm="syz.0.1100" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  462.515779][   T29] audit: type=1400 audit(1723025908.687:537): avc:  denied  { remount } for  pid=9297 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  462.585487][   T29] audit: type=1400 audit(1723025908.797:538): avc:  denied  { unmount } for  pid=8133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  462.802441][   T29] audit: type=1400 audit(1723025909.017:539): avc:  denied  { setopt } for  pid=9307 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  464.931270][ T5280] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  465.830757][ T5280] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  465.854729][ T5280] usb 4-1: config 0 has no interface number 0
[  465.867946][ T5280] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  465.879782][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.903356][ T5280] usb 4-1: config 0 descriptor??
[  465.918441][ T5280] usb 4-1: selecting invalid altsetting 1
[  465.935569][ T5280] dvb_ttusb_budget: ttusb_init_controller: error
[  465.961538][ T5280] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  466.100666][ T5280] DVB: Unable to find symbol cx22700_attach()
[  466.247077][ T5280] DVB: Unable to find symbol tda10046_attach()
[  466.263608][ T5280] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  466.315249][ T5280] usb 4-1: USB disconnect, device number 32
[  467.019562][   T29] audit: type=1400 audit(1723025913.237:540): avc:  denied  { create } for  pid=9343 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  467.049457][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'.
[  467.104330][   T29] audit: type=1400 audit(1723025913.267:541): avc:  denied  { write } for  pid=9343 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  468.229852][ T9351] fuseblk: Bad value for 'rootmode'
[  468.255332][   T29] audit: type=1400 audit(1723025914.467:542): avc:  denied  { nlmsg_write } for  pid=9348 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  468.479400][ T5309] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  468.566429][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'.
[  468.716917][ T5309] usb 5-1: Using ep0 maxpacket: 32
[  468.763143][ T5309] usb 5-1: unable to get BOS descriptor or descriptor too short
[  468.784561][ T5309] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  468.794826][ T5309] usb 5-1: config 0 has no interface number 0
[  468.807008][ T5309] usb 5-1: New USB device found, idVendor=05c6, idProduct=7001, bcdDevice=5f.cd
[  468.816941][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.826246][ T5309] usb 5-1: Product: syz
[  468.852390][ T5309] usb 5-1: Manufacturer: syz
[  468.902291][ T5309] usb 5-1: SerialNumber: syz
[  468.943943][ T5309] usb 5-1: config 0 descriptor??
[  469.184199][ T5309] qmi_wwan 5-1:0.1: probe with driver qmi_wwan failed with error -22
[  469.264417][ T5309] usb 5-1: USB disconnect, device number 21
[  469.638570][ T9381] netlink: 'syz.3.1128': attribute type 9 has an invalid length.
[  473.836785][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'.
[  475.777965][ T9454] syz.4.1149[9454] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  475.778158][ T9454] syz.4.1149[9454] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  479.351429][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.378334][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.502685][ T9493] tipc: Resetting bearer <eth:macvlan0>
[  479.515504][ T9493] tipc: Resetting bearer <eth:macvlan0>
[  479.885360][   T29] audit: type=1400 audit(1723025925.477:543): avc:  denied  { write } for  pid=9490 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  480.013298][    T8] tipc: Resetting bearer <eth:macvlan0>
[  483.278173][   T29] audit: type=1326 audit(1723025929.487:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9517 comm="syz.0.1167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b3bd779f9 code=0x0
[  483.756075][   T51] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  484.045995][   T51] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.296284][   T51] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  484.330910][   T51] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  484.466181][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.523158][   T51] usb 4-1: Product: syz
[  484.529726][   T51] usb 4-1: Manufacturer: syz
[  484.539857][   T51] usb 4-1: SerialNumber: syz
[  484.670589][ T9540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9540 comm=syz.0.1176
[  484.694487][   T29] audit: type=1400 audit(1723025930.907:545): avc:  denied  { read } for  pid=9537 comm="syz.0.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  484.789249][ T9529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  484.797875][    T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  485.158689][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  485.179887][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.192564][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  486.105941][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  486.159774][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB
[  486.223910][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  486.268483][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  486.328756][ T9529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  486.429982][   T29] audit: type=1400 audit(1723025932.517:546): avc:  denied  { write } for  pid=9557 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  486.901812][    T8] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  488.329858][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.353365][    T8] usb 3-1: Product: syz
[  488.371235][   T29] audit: type=1400 audit(1723025933.677:547): avc:  denied  { accept } for  pid=9554 comm="syz.1.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  488.391957][    T8] usb 3-1: Manufacturer: syz
[  488.617054][    T8] usb 3-1: SerialNumber: syz
[  488.710630][    T8] usb 3-1: config 0 descriptor??
[  488.812325][    T8] usb 3-1: can't set config #0, error -71
[  488.938424][   T51] cdc_ncm 4-1:1.0: failed to get mac address
[  488.949937][   T51] cdc_ncm 4-1:1.0: bind() failure
[  488.968834][   T51] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  488.986019][    T8] usb 3-1: USB disconnect, device number 27
[  489.031822][   T51] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  489.088721][   T51] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  489.156382][   T51] usb 4-1: USB disconnect, device number 33
[  489.406121][ T1565] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  489.636181][ T1565] usb 1-1: Using ep0 maxpacket: 8
[  489.659538][ T1565] usb 1-1: config 3 has an invalid interface number: 9 but max is 0
[  489.667931][ T1565] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  489.732697][ T1565] usb 1-1: config 3 has no interface number 0
[  489.749886][ T1565] usb 1-1: config 3 interface 9 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 16
[  489.818127][ T1565] usb 1-1: config 3 interface 9 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  489.829552][ T1565] usb 1-1: config 3 interface 9 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  489.841068][ T1565] usb 1-1: config 3 interface 9 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  489.886581][ T1565] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[  489.928786][ T1565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.996580][ T9576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  490.269961][ T1565] usb 1-1: USB disconnect, device number 30
[  490.446405][ T9595] netlink: 'syz.3.1192': attribute type 3 has an invalid length.
[  490.496523][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'.
[  490.664952][ T9597] ucma_write: process 781 (syz.1.1193) changed security contexts after opening file descriptor, this is not allowed.
[  493.376391][ T5278] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  493.606059][ T5278] usb 3-1: Using ep0 maxpacket: 16
[  493.624719][ T5278] usb 3-1: config 1 has too many interfaces: 129, using maximum allowed: 32
[  493.634906][ T5278] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 129
[  493.646668][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.663421][ T5278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  493.679532][ T5278] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  493.699492][ T5278] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  493.724018][ T5278] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  493.735949][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  493.752152][ T5278] usb 3-1: SerialNumber: syz
[  493.809964][ T5278] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  493.838340][ T5278] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  494.110259][    T9] usb 3-1: USB disconnect, device number 28
[  495.113262][   T29] audit: type=1400 audit(1723025941.327:548): avc:  denied  { connect } for  pid=9638 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  495.662643][ T9649] tap0: tun_chr_ioctl cmd 1074025675
[  495.668195][ T9649] tap0: persist enabled
[  495.674862][ T9649] tap0: tun_chr_ioctl cmd 1074025675
[  495.680828][ T9649] tap0: persist disabled
[  496.263171][ T5280] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[  496.479013][ T5280] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  496.523399][ T5280] usb 3-1: config 1 has no interface number 1
[  496.552066][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  496.614001][ T5280] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  496.732072][ T5280] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  496.958000][ T5280] usb 3-1: string descriptor 0 read error: -22
[  497.075209][ T5280] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  497.141678][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.295637][ T5280] usb 3-1: low speed audio streaming not supported
[  497.617191][    T9] usb 3-1: USB disconnect, device number 29
[  498.001296][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'.
[  498.018815][ T9667] netlink: 'syz.0.1215': attribute type 11 has an invalid length.
[  498.033666][ T9667] netlink: 'syz.0.1215': attribute type 12 has an invalid length.
[  499.504042][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'.
[  499.658001][   T29] audit: type=1400 audit(1723025945.877:549): avc:  denied  { ioctl } for  pid=9687 comm="syz.3.1222" path="socket:[26770]" dev="sockfs" ino=26770 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  499.798295][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1223'.
[  501.046206][ T5280] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  501.096341][   T29] audit: type=1326 audit(1723025947.307:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.3.1233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18cab779f9 code=0x0
[  501.246464][ T5280] usb 5-1: Using ep0 maxpacket: 8
[  501.267594][ T5280] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  501.299117][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.343134][ T5280] usb 5-1: config 0 descriptor??
[  501.994032][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  502.000929][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  504.749692][   T29] audit: type=1400 audit(1723025950.967:551): avc:  denied  { write } for  pid=9737 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  504.785771][ T5280] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  504.837534][ T5280] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  504.956472][ T5280] asix 5-1:0.0: probe with driver asix failed with error -71
[  505.017457][   T29] audit: type=1326 audit(1723025951.227:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3bd779f9 code=0x0
[  505.046563][ T5280] usb 5-1: USB disconnect, device number 22
[  506.394882][ T4608] Bluetooth: hci0: unexpected event 0x08 length: 78 > 4
[  506.524918][ T9761] tipc: Failed to remove unknown binding: 66,1,1/0:1281618444/1281618446
[  506.609280][ T9769] tipc: Failed to remove unknown binding: 66,1,1/0:1281618444/1281618446
[  507.234420][   T29] audit: type=1400 audit(1723025953.447:553): avc:  denied  { unmount } for  pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  507.254590][    C1] vkms_vblank_simulate: vblank timer overrun
[  507.394565][ T9791] netlink: 'syz.2.1254': attribute type 3 has an invalid length.
[  507.426238][ T9791] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1254'.
[  508.136456][ T5278] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  508.361088][ T5278] usb 2-1: Using ep0 maxpacket: 16
[  508.391599][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.483893][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  508.566015][ T5278] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  508.651786][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.836875][ T5278] usb 2-1: config 0 descriptor??
[  513.977486][ T5278] usb 2-1: can't set config #0, error -71
[  514.047850][ T5278] usb 2-1: USB disconnect, device number 31
[  515.351462][   T29] audit: type=1400 audit(1723025961.567:554): avc:  denied  { attach_queue } for  pid=9821 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  515.980982][ T5309] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  516.186703][ T5309] usb 3-1: Using ep0 maxpacket: 32
[  516.232234][ T5309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  516.353210][ T5309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  516.518485][ T5309] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  516.538200][ T5309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.579849][ T5309] usb 3-1: Product: syz
[  516.610275][ T5309] usb 3-1: Manufacturer: syz
[  516.625177][ T5309] usb 3-1: SerialNumber: syz
[  516.801893][ T9836] ubi0: attaching mtd0
[  516.821762][ T9836] ubi0: scanning is finished
[  516.826541][ T9836] ubi0: empty MTD device detected
[  517.604737][ T9836] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  517.747024][ T9839] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1271'.
[  518.154674][   T29] audit: type=1400 audit(1723025964.367:555): avc:  denied  { mounton } for  pid=9843 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  518.267729][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  518.279386][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  518.287533][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  518.309172][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  518.339104][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  518.349179][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  518.577480][ T9846] netlink: 'syz.0.1274': attribute type 21 has an invalid length.
[  518.596638][ T5309] cdc_ncm 3-1:1.0: bind() failure
[  518.608988][ T5309] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  518.628166][ T4608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  518.639493][ T4608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  518.647428][ T4608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  518.661660][ T4608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  518.667586][ T9846] netlink: 'syz.0.1274': attribute type 6 has an invalid length.
[  518.683098][ T4608] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  518.690837][ T4608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  518.700541][ T5309] usb 3-1: USB disconnect, device number 30
[  518.738702][ T6257] bridge_slave_1: left allmulticast mode
[  518.816544][ T6257] bridge_slave_1: left promiscuous mode
[  518.823303][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.969347][ T6257] bridge_slave_0: left allmulticast mode
[  518.975064][ T6257] bridge_slave_0: left promiscuous mode
[  519.032103][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.457515][   T29] audit: type=1400 audit(1723025965.677:556): avc:  denied  { bind } for  pid=9854 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  519.498409][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  519.575916][   T29] audit: type=1400 audit(1723025965.787:557): avc:  denied  { connect } for  pid=9854 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  519.690691][   T29] audit: type=1400 audit(1723025965.837:558): avc:  denied  { shutdown } for  pid=9854 comm="syz.2.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  519.731654][   T29] audit: type=1400 audit(1723025965.907:559): avc:  denied  { ioctl } for  pid=9854 comm="syz.2.1277" path="socket:[26517]" dev="sockfs" ino=26517 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  519.838886][   T29] audit: type=1326 audit(1723025966.037:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x7fc00000
[  519.929673][   T29] audit: type=1326 audit(1723025966.147:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd405b779f9 code=0x7fc00000
[  520.470050][ T5239] Bluetooth: hci2: command tx timeout
[  520.505243][   T29] audit: type=1326 audit(1723025966.717:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd405b779f9 code=0x7fc00000
[  520.792020][ T5239] Bluetooth: hci7: command tx timeout
[  521.021406][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.092175][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  521.113947][ T6257] bond0 (unregistering): Released all slaves
[  521.553830][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.115799][ T9875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  522.319418][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'.
[  522.334145][ T9885] netlink: 'syz.2.1283': attribute type 15 has an invalid length.
[  522.404706][   T29] audit: type=1400 audit(1723025968.617:563): avc:  denied  { read } for  pid=9866 comm="syz.1.1279" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  522.437040][   T29] audit: type=1400 audit(1723025968.647:564): avc:  denied  { open } for  pid=9866 comm="syz.1.1279" path="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  522.478803][ T6257] hsr_slave_0: left promiscuous mode
[  522.484726][ T6257] hsr_slave_1: left promiscuous mode
[  522.494164][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.503690][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.522331][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.532513][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.555957][ T5239] Bluetooth: hci2: command tx timeout
[  522.588788][ T6257] veth1_macvtap: left promiscuous mode
[  522.602114][ T6257] veth0_macvtap: left promiscuous mode
[  522.609309][ T6257] veth1_vlan: left promiscuous mode
[  522.614803][ T6257] veth0_vlan: left promiscuous mode
[  522.866763][ T5239] Bluetooth: hci7: command tx timeout
[  524.146964][ T6257] team0 (unregistering): Port device team_slave_1 removed
[  524.338036][ T6257] team0 (unregistering): Port device team_slave_0 removed
[  524.627849][ T5239] Bluetooth: hci2: command tx timeout
[  524.945963][ T5239] Bluetooth: hci7: command tx timeout
[  525.520409][ T9909] team_slave_1: mtu less than device minimum
[  526.016224][    T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  526.089868][ T9847] chnl_net:caif_netlink_parms(): no params data found
[  526.226296][    T8] usb 2-1: Using ep0 maxpacket: 32
[  526.236265][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  526.257830][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  526.375206][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  526.429000][ T9843] chnl_net:caif_netlink_parms(): no params data found
[  526.486679][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  526.552733][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  526.566038][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  526.576173][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  526.585996][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  526.595769][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  526.620573][    T8] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  526.629970][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.651909][    T8] usb 2-1: Product: syz
[  526.662446][    T8] usb 2-1: Manufacturer: syz
[  526.672492][    T8] usb 2-1: SerialNumber: syz
[  526.693352][    T8] usb 2-1: config 0 descriptor??
[  526.699026][ T9920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  526.706854][ T5239] Bluetooth: hci2: command tx timeout
[  526.924597][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.932523][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.937016][    T8] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8)
[  526.967629][ T9847] bridge_slave_0: entered allmulticast mode
[  526.970052][    T8] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02!
[  526.981279][ T9847] bridge_slave_0: entered promiscuous mode
[  526.984430][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.012927][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.016362][    T8] cxacru 2-1:0.0: probe with driver cxacru failed with error -22
[  527.030884][ T5239] Bluetooth: hci7: command tx timeout
[  527.063913][ T9847] bridge_slave_1: entered allmulticast mode
[  527.063952][    T8] usb 2-1: USB disconnect, device number 32
[  527.127196][ T9847] bridge_slave_1: entered promiscuous mode
[  527.488853][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.526783][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.541082][ T9843] bridge_slave_0: entered allmulticast mode
[  527.562921][ T9843] bridge_slave_0: entered promiscuous mode
[  527.619479][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.722429][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.766348][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.795630][ T9843] bridge_slave_1: entered allmulticast mode
[  527.829431][ T9843] bridge_slave_1: entered promiscuous mode
[  528.009625][ T6257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.102679][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.240730][ T9945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  528.303708][ T6257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.366498][    T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  528.419858][ T9847] team0: Port device team_slave_0 added
[  528.467368][ T9847] team0: Port device team_slave_1 added
[  528.495727][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.558232][    T8] usb 2-1: Using ep0 maxpacket: 16
[  528.587694][ T6257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.624293][    T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  528.656030][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.711831][    T8] usb 2-1: config 0 descriptor??
[  528.740865][    T8] gspca_main: sonixj-2.14.0 probing 0471:0327
[  528.780245][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.929008][ T6257] bond0: (slave netdevsim0): Releasing backup interface
[  528.952751][ T6257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.997868][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.004923][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.035671][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.072413][   T29] audit: type=1400 audit(1723025975.287:565): avc:  denied  { setopt } for  pid=9952 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  529.134908][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.144827][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.153259][ T9955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.183667][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.206051][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.294823][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.453362][ T9843] team0: Port device team_slave_0 added
[  529.509810][ T9847] hsr_slave_0: entered promiscuous mode
[  529.537994][ T9847] hsr_slave_1: entered promiscuous mode
[  529.557946][ T9847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  529.570873][ T9847] Cannot create hsr debugfs directory
[  529.608607][ T9843] team0: Port device team_slave_1 added
[  529.697957][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.711861][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.770591][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.961947][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.025310][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.084310][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.350413][ T6257] bridge_slave_1: left allmulticast mode
[  530.367731][ T6257] bridge_slave_1: left promiscuous mode
[  530.381954][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.406410][    T8] gspca_sonixj: i2c_w8 err -71
[  530.411755][ T6257] bridge_slave_0: left allmulticast mode
[  530.424291][ T6257] bridge_slave_0: left promiscuous mode
[  530.430404][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.456271][    T8] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  530.525303][    T8] usb 2-1: USB disconnect, device number 33
[  531.690399][   T29] audit: type=1800 audit(1723025977.887:566): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1302" name="/" dev="fuse" ino=1 res=0 errno=0
[  532.175597][ T9974] IPVS: sed: TCP 127.0.0.1:0 - no destination available
[  533.131545][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.151647][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.175044][ T6257] bond0 (unregistering): Released all slaves
[  533.468513][ T9843] hsr_slave_0: entered promiscuous mode
[  533.535673][ T9843] hsr_slave_1: entered promiscuous mode
[  533.554374][ T9843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  533.583818][ T9843] Cannot create hsr debugfs directory
[  534.118102][T10000] Can't find ip_set type bidmap:ip
[  534.360442][ T6257] tipc: Disabling bearer <eth:macvlan0>
[  534.401982][ T6257] tipc: Left network mode
[  534.976038][   T51] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  535.075441][ T9847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.166040][   T51] usb 3-1: Using ep0 maxpacket: 32
[  535.189626][   T51] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5
[  535.200527][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.213618][   T51] usb 3-1: Product: syz
[  535.218228][   T51] usb 3-1: Manufacturer: syz
[  535.235277][   T51] usb 3-1: SerialNumber: syz
[  535.261784][   T51] usb 3-1: config 0 descriptor??
[  535.299515][   T51] gspca_main: mars-2.14.0 probing 093a:050f
[  535.344355][ T6257] veth1_macvtap: left promiscuous mode
[  535.355994][ T6257] veth0_macvtap: left promiscuous mode
[  535.361923][ T6257] veth1_vlan: left promiscuous mode
[  535.384191][ T6257] veth0_vlan: left promiscuous mode
[  535.836479][   T53] usb 3-1: USB disconnect, device number 31
[  536.316204][   T51] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  537.293544][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.361294][   T51] usb 2-1: config 0 has no interfaces?
[  537.368243][   T51] usb 2-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8
[  537.377605][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.388694][   T51] usb 2-1: config 0 descriptor??
[  537.449124][ T6257] team0 (unregistering): Port device team_slave_1 removed
[  537.710758][   T29] audit: type=1400 audit(1723025983.927:567): avc:  denied  { read } for  pid=10039 comm="syz.2.1314" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  537.767445][ T6257] team0 (unregistering): Port device team_slave_0 removed
[  537.783632][   T29] audit: type=1400 audit(1723025983.927:568): avc:  denied  { open } for  pid=10039 comm="syz.2.1314" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  537.810061][   T29] audit: type=1400 audit(1723025983.967:569): avc:  denied  { ioctl } for  pid=10039 comm="syz.2.1314" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  538.428399][ T9847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.662351][ T9847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.761985][ T9847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.860327][ T5309] usb 2-1: USB disconnect, device number 34
[  539.094835][ T6257] IPVS: stop unused estimator thread 0...
[  539.115677][   T29] audit: type=1400 audit(1723025985.327:570): avc:  denied  { execmem } for  pid=10047 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  540.074331][ T9847] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  540.150536][ T9847] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  540.221636][ T9847] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  540.253592][ T9847] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  540.855130][ T9843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  540.883935][ T9843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  540.903601][ T9843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  540.924030][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.934327][ T9843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  540.999680][ T9847] 8021q: adding VLAN 0 to HW filter on device team0
[  541.043531][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.050766][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.071523][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.078734][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.242062][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.503091][ T9843] 8021q: adding VLAN 0 to HW filter on device team0
[  541.583821][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.591073][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.632898][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.640200][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.078088][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.502494][ T9847] veth0_vlan: entered promiscuous mode
[  542.595459][ T9847] veth1_vlan: entered promiscuous mode
[  542.804595][ T9847] veth0_macvtap: entered promiscuous mode
[  542.845739][ T9847] veth1_macvtap: entered promiscuous mode
[  542.980358][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.023203][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.087440][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.126689][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.170930][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.201765][ T4608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  543.226078][ T4608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  543.235209][ T4608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  543.243363][ T4608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  543.251080][ T4608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  543.258763][ T4608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  543.275164][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.286786][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.297683][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.314160][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.324217][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.334796][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.350616][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.381699][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.400049][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.414834][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.435941][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.445778][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.486191][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.512525][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.536121][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.562921][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.582359][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.654068][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.734874][ T9847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.755604][ T9847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.784677][ T9847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.845104][ T9847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.111451][   T29] audit: type=1400 audit(1723025990.307:571): avc:  denied  { rename } for  pid=10104 comm="syz.2.1321" name="file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  544.623852][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.665758][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  649.672753][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6273/1:b..l
[  649.681365][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=48577, q=278 ncpus=2)
[  649.689093][    C1] task:kworker/u8:23   state:R  running task     stack:23616 pid:6273  tgid:6273  ppid:2      flags:0x00004000
[  649.702376][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  649.710246][    C1] Call Trace:
[  649.713532][    C1]  <TASK>
[  649.716474][    C1]  __schedule+0xe37/0x5490
[  649.720918][    C1]  ? __pfx_mark_lock+0x10/0x10
[  649.725709][    C1]  ? __pfx_mark_lock+0x10/0x10
[  649.730494][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  649.735459][    C1]  ? __pfx___schedule+0x10/0x10
[  649.740327][    C1]  ? hlock_class+0x4e/0x130
[  649.744862][    C1]  ? mark_held_locks+0x9f/0xe0
[  649.749651][    C1]  preempt_schedule_irq+0x51/0x90
[  649.754704][    C1]  irqentry_exit+0x36/0x90
[  649.759143][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  649.765156][    C1] RIP: 0010:lock_acquire+0x160/0x560
[  649.770464][    C1] Code: 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 b3 03 00 00 8b 92 dc 0a 00 00 85 d2 0f 85 d6 00 00 00 9c 8f 44 24 08 <48> 8b 6c 24 08 fa 48 c7 c7 c0 c7 4c 8b e8 3e 76 a9 09 48 89 e8 45
[  649.790175][    C1] RSP: 0018:ffffc9000330fa70 EFLAGS: 00000246
[  649.796257][    C1] RAX: 0000000000000007 RBX: 1ffff92000661f50 RCX: 0000000000000000
[  649.804240][    C1] RDX: 0000000000000000 RSI: ffffffff8bb08480 RDI: ffff88802b2246dc
[  649.812223][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20259d3
[  649.820203][    C1] R10: ffffffff9012ce9f R11: 0000000000000000 R12: 0000000000000000
[  649.828188][    C1] R13: 0000000000000000 R14: ffffffff8ddb5ca0 R15: 0000000000000000
[  649.836190][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  649.841244][    C1]  ? batadv_iv_ogm_schedule_buff+0x75c/0x1500
[  649.847345][    C1]  ? __pfx_lock_release+0x10/0x10
[  649.852394][    C1]  batadv_iv_ogm_schedule_buff+0x5ac/0x1500
[  649.858323][    C1]  ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500
[  649.864423][    C1]  ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10
[  649.870780][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  649.875827][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0
[  649.882889][    C1]  process_one_work+0x9c5/0x1b40
[  649.887864][    C1]  ? __pfx_netdevice_event_work_handler+0x10/0x10
[  649.894309][    C1]  ? __pfx_process_one_work+0x10/0x10
[  649.899713][    C1]  ? assign_work+0x1a0/0x250
[  649.904325][    C1]  worker_thread+0x6c8/0xf20
[  649.908942][    C1]  ? __pfx_worker_thread+0x10/0x10
[  649.914076][    C1]  kthread+0x2c1/0x3a0
[  649.918155][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  649.923368][    C1]  ? __pfx_kthread+0x10/0x10
[  649.927968][    C1]  ret_from_fork+0x45/0x80
[  649.932411][    C1]  ? __pfx_kthread+0x10/0x10
[  649.937011][    C1]  ret_from_fork_asm+0x1a/0x30
[  649.941805][    C1]  </TASK>
[  649.944838][    C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g48577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  649.956061][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  649.966042][    C1] rcu: RCU grace-period kthread stack dump:
[  649.971944][    C1] task:rcu_preempt     state:R  running task     stack:27584 pid:17    tgid:17    ppid:2      flags:0x00004000
[  649.983841][    C1] Call Trace:
[  649.987126][    C1]  <TASK>
[  649.990065][    C1]  __schedule+0xe37/0x5490
[  649.994505][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  649.999754][    C1]  ? __pfx___schedule+0x10/0x10
[  650.004621][    C1]  ? schedule+0x298/0x350
[  650.008964][    C1]  ? __pfx_lock_release+0x10/0x10
[  650.014008][    C1]  ? __pfx___mod_timer+0x10/0x10
[  650.018966][    C1]  ? lock_acquire+0x1b1/0x560
[  650.023661][    C1]  ? lockdep_init_map_type+0x16d/0x7d0
[  650.029150][    C1]  schedule+0xe7/0x350
[  650.033234][    C1]  schedule_timeout+0x136/0x2a0
[  650.038118][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  650.043520][    C1]  ? __pfx_process_timeout+0x10/0x10
[  650.048819][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  650.054639][    C1]  ? prepare_to_swait_event+0xf0/0x470
[  650.060122][    C1]  rcu_gp_fqs_loop+0x1eb/0xb00
[  650.064901][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  650.070205][    C1]  ? rcu_gp_init+0xc82/0x1630
[  650.074896][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  650.080117][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  650.085945][    C1]  rcu_gp_kthread+0x271/0x380
[  650.090654][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  650.095904][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  650.101129][    C1]  ? __kthread_parkme+0x148/0x220
[  650.106183][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  650.111402][    C1]  kthread+0x2c1/0x3a0
[  650.115489][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  650.120706][    C1]  ? __pfx_kthread+0x10/0x10
[  650.125311][    C1]  ret_from_fork+0x45/0x80
[  650.129757][    C1]  ? __pfx_kthread+0x10/0x10
[  650.134366][    C1]  ret_from_fork_asm+0x1a/0x30
[  650.139160][    C1]  </TASK>
[  650.142188][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  650.148529][    C1] CPU: 1 UID: 0 PID: 6283 Comm: kworker/u8:27 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0
[  650.159485][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  650.169552][    C1] Workqueue: events_unbound toggle_allocation_gate
[  650.176082][    C1] RIP: 0010:smp_call_function_many_cond+0x4e7/0x1420
[  650.182787][    C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 4b 39 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31
[  650.202407][    C1] RSP: 0018:ffffc900040f7908 EFLAGS: 00000293
[  650.208487][    C1] RAX: 0000000000000000 RBX: ffff8880b9246940 RCX: ffffffff817e443b
[  650.216467][    C1] RDX: ffff8880263b8000 RSI: ffffffff817e4415 RDI: 0000000000000005
[  650.224449][    C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[  650.232430][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1017248d29
[  650.240411][    C1] R13: 0000000000000001 R14: ffff8880b9246948 R15: ffff8880b933ffc0
[  650.248393][    C1] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  650.257338][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  650.263936][    C1] CR2: 00007f85ecf7f270 CR3: 000000000db7c000 CR4: 00000000003506f0
[  650.271917][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  650.279928][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  650.287909][    C1] Call Trace:
[  650.291198][    C1]  <IRQ>
[  650.294048][    C1]  ? show_regs+0x8c/0xa0
[  650.298320][    C1]  ? rcu_check_gp_kthread_starvation+0x31b/0x450
[  650.304672][    C1]  ? do_raw_spin_unlock+0x172/0x230
[  650.309899][    C1]  ? rcu_sched_clock_irq+0x2501/0x33f0
[  650.315381][    C1]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  650.321036][    C1]  ? __asan_memcpy+0x3c/0x60
[  650.325641][    C1]  ? __asan_memcpy+0x3c/0x60
[  650.330262][    C1]  ? update_process_times+0x175/0x220
[  650.335659][    C1]  ? __pfx_update_process_times+0x10/0x10
[  650.341408][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[  650.346914][    C1]  ? update_wall_time+0x1c/0x40
[  650.351794][    C1]  ? tick_nohz_handler+0x376/0x530
[  650.356940][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[  650.362433][    C1]  ? __hrtimer_run_queues+0x657/0xcc0
[  650.367842][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  650.373599][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[  650.379693][    C1]  ? hrtimer_interrupt+0x31b/0x800
[  650.384833][    C1]  ? __sysvec_apic_timer_interrupt+0x10f/0x450
[  650.391004][    C1]  ? sysvec_apic_timer_interrupt+0x90/0xb0
[  650.396836][    C1]  </IRQ>
[  650.399774][    C1]  <TASK>
[  650.402712][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  650.408896][    C1]  ? smp_call_function_many_cond+0x50b/0x1420
[  650.414989][    C1]  ? smp_call_function_many_cond+0x4e5/0x1420
[  650.421080][    C1]  ? smp_call_function_many_cond+0x4e7/0x1420
[  650.427183][    C1]  ? smp_call_function_many_cond+0x4e5/0x1420
[  650.433280][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  650.439636][    C1]  ? __pfx___text_poke+0x10/0x10
[  650.444597][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  650.449648][    C1]  on_each_cpu_cond_mask+0x40/0x90
[  650.454787][    C1]  text_poke_bp_batch+0x22b/0x760
[  650.459833][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[  650.466014][    C1]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  650.471581][    C1]  ? __jump_label_patch+0x1db/0x400
[  650.476809][    C1]  ? arch_jump_label_transform_queue+0xc0/0x120
[  650.483075][    C1]  text_poke_finish+0x30/0x40
[  650.487771][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  650.493777][    C1]  jump_label_update+0x1d7/0x400
[  650.498734][    C1]  static_key_enable_cpuslocked+0x1b7/0x270
[  650.504652][    C1]  static_key_enable+0x1a/0x20
[  650.509435][    C1]  toggle_allocation_gate+0xf8/0x250
[  650.514745][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  650.520665][    C1]  process_one_work+0x9c5/0x1b40
[  650.525626][    C1]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  650.531294][    C1]  ? __pfx_process_one_work+0x10/0x10
[  650.536707][    C1]  ? assign_work+0x1a0/0x250
[  650.541328][    C1]  worker_thread+0x6c8/0xf20
[  650.545953][    C1]  ? __pfx_worker_thread+0x10/0x10
[  650.551088][    C1]  kthread+0x2c1/0x3a0
[  650.555174][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  650.560396][    C1]  ? __pfx_kthread+0x10/0x10
[  650.565003][    C1]  ret_from_fork+0x45/0x80
[  650.569448][    C1]  ? __pfx_kthread+0x10/0x10
[  650.574061][    C1]  ret_from_fork_asm+0x1a/0x30
[  650.578857][    C1]  </TASK>