last executing test programs:

17.699977394s ago: executing program 0 (id=994):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x103382)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3ff, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000040000000000000000008500000023000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
semget$private(0x0, 0x2, 0x0)
syz_emit_vhci(0x0, 0x7)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0)
fchmod(r6, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x7)
r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0), 0x4)
pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000380)="b9", 0x1}], 0x1, 0x6b5a, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r7)
sendfile(r1, r7, 0x0, 0xfffffffb)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)

13.837625861s ago: executing program 0 (id=1006):
r0 = io_uring_setup(0x66a, &(0x7f0000000000))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x0, 0x11100}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}, {0x0, 0xc6385f320f284e6}}}, 0x0})
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288763"], 0xffdd)
close_range(r0, 0xffffffffffffffff, 0x0)

10.407969412s ago: executing program 1 (id=1017):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x7c}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000700)={&(0x7f0000000780), 0x0})
dup3(0xffffffffffffffff, r2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e31, @empty}, 0x10)
r4 = dup2(0xffffffffffffffff, r3)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0xe403, 0x0, 0x2, 0x2090}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2}]]}}}]}, 0x40}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x6140, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r5)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010004000000000000000200001ca3de8a5398e9793200"/35], 0x1c}}, 0x0)

6.773056436s ago: executing program 1 (id=1021):
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r2 = getpid()
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = getpid()
process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000249, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x410000002)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x0, 0xe0000000}, 0x40)
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)

6.504074118s ago: executing program 0 (id=1023):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000007000000000076"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(r2, 0x1066, 0x0, 0x0, 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = eventfd(0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x3)
io_setup(0x9, &(0x7f0000000100)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f00000015c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}])
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r10, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, r11})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

6.331016452s ago: executing program 1 (id=1024):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_MARK={0x8}]}, 0x20}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x20000023896)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000001880)=@ethtool_stats})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000001000000000000000000000091120c000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4, 0x2}]}]}, 0x3c}}, 0x0)
read(0xffffffffffffffff, &(0x7f00000004c0)=""/152, 0x98)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x200, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @coaddr={0x14, 0xe, @in6=@loopback}]}, 0x15c}}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000280)=0xc)
r8 = socket$inet6(0xa, 0x3, 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r10)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000d500000000000001000000080001000c00000008000200030000002c0004"], 0x50}}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e0004"], 0x74}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)

5.077143485s ago: executing program 2 (id=1026):
sched_setscheduler(0x0, 0x1, 0x0)
ioperm(0x5, 0x0, 0x8000000005)
msync(&(0x7f0000951000/0x2000)=nil, 0x2000, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x4008031, 0xffffffffffffffff, 0xe3d4b000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe6, 0xa}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40045}, 0x100)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
syz_usb_disconnect(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

4.891969437s ago: executing program 0 (id=1027):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26)
sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)

4.860220295s ago: executing program 1 (id=1028):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)

4.650321902s ago: executing program 3 (id=1029):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCFLSH(r1, 0x80044704, 0xf0ff1f00000000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x48a01)
ioctl$NBD_DISCONNECT(r2, 0x127e)
r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0xf8, 0xd8, 0x2f2e}, {0xa39b, 0x0, 0x9e, 0x6}, {0x1, 0x9, 0x4, 0x259d}, {0x5, 0x5, 0x10, 0x10001}, {0x6, 0x1, 0xff, 0x1}]}, 0x10)

4.511731516s ago: executing program 4 (id=1030):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x3, 0x0, 0x1}, 0xfffffffa})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0xfffffff8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000380)=""/107, 0x6b}], 0x2, &(0x7f0000000400)=""/135, 0x87}, 0x80}, {{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/139, 0x8b}], 0x1, &(0x7f0000000240)=""/2, 0x2}, 0x3}, {{&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000300)}], 0x5, &(0x7f0000001900)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002900)=@ax25={{0x3, @default}, [@bcast, @netrom, @rose, @remote, @netrom, @rose, @remote, @netrom]}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002980)=""/235, 0xeb}, {&(0x7f0000002a80)=""/81, 0x51}, {&(0x7f0000002b00)=""/131, 0x83}, {&(0x7f0000002bc0)=""/162, 0xa2}, {&(0x7f0000002c80)=""/191, 0xbf}, {&(0x7f0000002d40)=""/67, 0x43}], 0x6, &(0x7f0000002e40)=""/158, 0x9e}, 0x7}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002f00)=""/213, 0xd5}, {&(0x7f0000003000)=""/147, 0x93}, {&(0x7f00000030c0)=""/1, 0x1}, {&(0x7f0000003100)=""/9, 0x9}, {&(0x7f0000003140)=""/78, 0x4e}, {&(0x7f00000031c0)=""/120, 0x78}, {&(0x7f0000003240)=""/193, 0xc1}, {&(0x7f0000003340)=""/200, 0xc8}, {&(0x7f0000003440)=""/157, 0x9d}, {&(0x7f0000003500)=""/129, 0x81}], 0xa}, 0xa6f}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003680)=""/239, 0xef}, {&(0x7f0000003780)=""/166, 0xa6}, {&(0x7f0000003840)=""/28, 0x1c}, {&(0x7f0000003880)=""/51, 0x33}, {&(0x7f00000038c0)=""/232, 0xe8}, {&(0x7f00000039c0)=""/4, 0x4}, {&(0x7f0000003a00)=""/49, 0x31}], 0x7, &(0x7f0000003ac0)=""/70, 0x46}, 0x1ffe0}, {{&(0x7f0000003b40)=@caif, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000004c00)=""/2, 0x2}, 0xffffffff}, {{&(0x7f0000004c40)=@hci, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004cc0)=""/53, 0x35}], 0x1, &(0x7f0000004d40)=""/236, 0xec}, 0x3829}], 0x8, 0x163, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x0)
syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd8a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6, @random="31332f9fa498"}, 0x10)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r10, 0x3, 0x6, @random="7d101a168a01"}, 0x10)
write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

4.474736917s ago: executing program 3 (id=1031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000006000000045000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000600000000000000316b22abc961c42c06ec2074286a26af"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x103300, 0x0)
ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000180)={{0xffffffff}, {0xc9, 0xb}, 0x7, 0x1})
setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000040)=0x100, 0x4)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x90}}, 0x0)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
write$uinput_user_dev(r7, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x0, 0xfffc}, 0x4, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000090000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r9, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r9, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0)
writev(r11, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
write$FUSE_ENTRY(r11, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)

4.01400616s ago: executing program 3 (id=1032):
syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8b2}}]})
munmap(&(0x7f0000003000/0x3000)=nil, 0x3000)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x32, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x1, 0x81, 0x5, 0x8, 0xf}, 0x7c, &(0x7f0000000380)={0x5, 0xf, 0x7c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1f, 0x9, 0x7, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1ff, 0xf, 0x40, [0xff0000, 0x30, 0x0, 0x3f00]}, @generic={0x27, 0x10, 0x3, "8236e129edb638fba2e10a21a06909df4db6ff954d12ee34b651de30a7441ac95d498f7a"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x4, 0x0, 0x4, [0xf, 0xff7ec0, 0xff00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x3, 0x1}]}})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000a7a000/0x3000)=nil], 0x0, &(0x7f0000000200), 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x58}}, 0x0)
remap_file_pages(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xc, 0xd53, 0x3)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xfffffffffffffef0, 0x3, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xae}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x10}}]}, 0x48}, 0x1, 0x0, 0x0, 0xfb6d3bcdb9e480e7}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/exec\x00')
ioctl$VT_DISALLOCATE(r3, 0x5608)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0)

3.829495857s ago: executing program 1 (id=1033):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b40)={0x20, 0x14, 0x6, "93f0e786c729"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="ffffffff0000000024001a80"], 0x44}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r2 = io_uring_setup(0x253d, &(0x7f0000000080))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000300), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0x5, 0x2, '\bz'}, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="800000000100"], 0x0})

3.707643348s ago: executing program 0 (id=1034):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.48321843s ago: executing program 4 (id=1035):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0xff02, 0x0, 0x0, @private0, 0xab}, {0xa, 0x4e20, 0x7, @mcast2}, r4}}, 0x48)

3.371362596s ago: executing program 4 (id=1036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000009c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044001}, 0x4008014)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0)

3.317453131s ago: executing program 4 (id=1037):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000640)=""/4096, 0xc5, 0x1000, 0x0, 0x6a31513, 0x0, @void, @value}, 0x28)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000000, 0x10000, &(0x7f00000002c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x17, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000001ac0)=[{{&(0x7f0000000180)=@caif=@dbg, 0x80, &(0x7f0000001980)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000001640)=""/65, 0x41}, {&(0x7f00000016c0)=""/131, 0x83}, {&(0x7f0000000300)}, {&(0x7f00000005c0)=""/26, 0x1a}, {&(0x7f0000001780)=""/45, 0x2d}, {&(0x7f00000017c0)=""/1, 0x1}, {&(0x7f0000001800)=""/163, 0xa3}, {&(0x7f00000018c0)}, {&(0x7f0000001900)=""/102, 0x66}], 0xa, &(0x7f0000001a40)=""/85, 0x55}, 0x4}], 0x1, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000008004502001c0000000000019078ac1e0001ffffffff1100027800000003110eeed40e3215cb01cbe5fbe1804a52716d45c2327b05161544", @ANYRES8=r4, @ANYRES8=r2], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x196, 0x0, &(0x7f0000000780)="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", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe}, 0x50)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000181100fc000000000000000000000000000000ff02000000000000000000000000000100004e22001890784300"/78], 0x0)

3.115249064s ago: executing program 2 (id=1038):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
r3 = syz_clone(0x80300, &(0x7f0000000200)="6c14a4c2b786620a5bcfedf752b44e60843ad19ca401580c49a00272974d6dec85b6909a69f2b22b4be744fa3aacdb23f49e07d16a625b654d44b9cda85ddcc49c61ffd2286a583d364b1d403aa9c44aad90c86776c344a1271cc5076f4e15243b50b91aba8db2e6ae2546652ab9e0173ad9260f4c8e14021854925b8c447a7a3017261dc93acc22b7ce54f9e405428f5d22549a4de12d0960d173203138e1ebe9a2c0d6895e9248746f06a4c7651a16359307afacb4ca71d0e4f4bfe4763d", 0xbf, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000500)="3500ca8406b26649dbfbee2f3e7a238e1772a83016c103f0f40e5e3b3c96ae126503ce31f65fc50ee1bcc3712339343c3f277710957610fa95339a796767d8a9435043e29ae79157caa6845044b0ce36a97efe71c05a7da967beb2f07f80539c1a144cd9108eac403c69289ad7499517a3a24ef254745e406429c096ea59881dad3f0ecb1ccacc413f5dc2da")
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000380)=r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000680)={0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000009c0)={<r4=>0x0, 0x4, 0xd7cb, 0x6, 0x0, 0x3, 0x4c9, 0x6, {0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x8000}}, 0x6, 0x101, 0xe2a2, 0x7ff, 0x342}}, &(0x7f0000000a80)=0xb0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000b80)={<r5=>0x0, 0x90, &(0x7f0000000ac0)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x0, @remote}, @in6={0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000bc0)=0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5a1}, 0x9c)
sendmmsg$inet_sctp(r2, &(0x7f0000000d00)=[{&(0x7f00000006c0)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="28d4494e864cb1425c9a6164b000bc887a381118ed638766626c1724a29a9f556be5ed4da12f22c36219f81f82b283cf773e2732a1fb2cc4efe40e554a8cb04bb097c498dd181173b66cf5498c13e9dfb109f4101a4a1dc1cf3ddd5f101d29a23bc51410c7", 0x65}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000084000000050000000000010000000000"], 0x18, 0x880}, {&(0x7f0000000800)=@in6={0xa, 0x4e24, 0xb05f, @empty, 0x6}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000840)="2d3fab3ffc81de982e3f333f3dd02c60fc61d843abf0eb412e275a6c1b78b43a7342eb5e2d073afe65b39f28aab00a7305479fe9b7cafb1679152389eac3fbbf810347abb03f63b7e21fbe4480e83d25bed5c52cc51ddaec50b142ce6225de9e8e0f5de4cdea108a860372a13d5b2020bb824493", 0x74}, {&(0x7f00000008c0)="d8563cd8e6aa2d69c675837e3e57b4094a190a5264a8a6765d52e03f37ac094f83c01d7a496952612582ded635047e4bf01cd326818971fab5e3f3d5bc04b37d4faab190a3d5e97942f0c3f3182459db15dcbfb3f9040e379bcddd589aaee7b2720f8c0b773e78a49c12009ca9f5d8df285ca194cfb459c21a5c00e971b212bb10696ec3b78a0c394f39b4c0dfd15cf2310418716af4b32fdc370830471f69d9712e8d04164eafe9f7d5503c191de91bcc80dd33", 0xb4}], 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB="2000000000000000840000000200000001ff048004000000ff1a0000", @ANYRES32=r4, @ANYBLOB="3000000000000000840000000100000001000f0004020036b890010000006dbe10e596000900000009000000", @ANYRES32=r5, @ANYBLOB="180000000000000084000000050000000000000002000000180000000000000084000000050000001000000005000000180000000000000084000000050000002000000001000080300000000000000084000000010000000200ff0f028200000300000001040000000000000700000020000000", @ANYRES32=r8, @ANYBLOB="20000000000000008400000008000000ff020000000000000000000000000001180000000000000084000000060000000700000000000000"], 0x100, 0x4040000}], 0x2, 0x4)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r2)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000d80)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x10)

2.503618479s ago: executing program 3 (id=1039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x6f8, r2, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x4, 0x16, 0x4, 0x5, 0x6, 0x10, 0xc, 0x2, 0x2, 0x6c, 0x5, 0x16, 0x16, 0x2, 0x48, 0x48, 0x60, 0xc, 0x10, 0x5, 0x30, 0xb, 0x0, 0x16, 0x4, 0x1, 0x5]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x16]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x1}, {0x7, 0x5}, {0x7, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {}, {0x2, 0x5}, {0x4, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0xa}, {0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x7}, {0x2, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x4, 0x8}, {0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0x7}, {0x5, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0xa}, {0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x6}, {}, {0x6, 0x2}, {0x0, 0x6}, {0x7, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x6}, {0x6}, {0x0, 0x3}, {0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x8, 0x9, 0x6, 0x0, 0x3, 0x1, 0x4]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc, 0x5, 0x5, 0x9, 0x8, 0x3, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7224, 0x8000, 0x6, 0x7f, 0x9, 0xfffc, 0x0, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x400, 0x1, 0x5, 0xcbb, 0x0, 0x6]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x3, 0xf000, 0x2, 0x3, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x9}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x1}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x2, 0x1}, {0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x2}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x2}, {0x1, 0x9}, {0x2, 0x5}, {}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0x9}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x3}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x4, 0x4, 0x7, 0x8, 0x8, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x33a, 0x6, 0x3, 0x4, 0x8, 0x3, 0x33c]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x5}, {0x5, 0x9}, {0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x4}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0xa}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x5, 0x3}, {0x6, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x5, 0x9}, {0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x5}, {0x3}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x18}, {0x4, 0x4}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x4, 0x80, 0x2, 0xfff7, 0x5, 0x10]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x5}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x8}, {0x1}, {0x4, 0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0xa}, {}, {0x7, 0x2}, {0x7, 0x7}, {0x1}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x3, 0x8, 0x4, 0x8, 0x81, 0xe, 0x6fcf]}}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x9, 0xb, 0x36, 0x4, 0x6c]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x8, 0x8, 0x5, 0x3, 0xfffc, 0x5]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x8}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x6}, {}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x7205, 0xc, 0x4, 0x5877, 0xec3, 0xe73]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8dbc, 0x0, 0x8, 0x1ff, 0x8, 0x0, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x9, 0x12, 0x3, 0x8, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffc0, 0x6, 0xfffb, 0x81, 0x9, 0x9, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x6c, 0x9, 0x6c, 0x1b, 0x0, 0x4, 0x6, 0xb, 0x4, 0x5]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x32c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x4, 0xb, 0x18, 0x13, 0x6c, 0x24, 0x2, 0x5, 0x48, 0x12, 0x36, 0x18, 0x1, 0x36, 0x60, 0x5, 0x1, 0x30, 0x12, 0x48, 0x30, 0x16, 0x18, 0x1, 0xc]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0xb, 0xc, 0xb, 0x3, 0x1, 0x12, 0x6, 0x37, 0x6]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd1, 0x8001, 0xfff8, 0x8, 0x40, 0x0, 0x0, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0xaf33, 0x6, 0x8, 0x1000, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {}, {}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x8}, {0x1}, {0x5}, {0x6, 0x9}, {0x2, 0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x6}, {}, {0x4, 0x4}, {0x4, 0x5}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x0, 0x30, 0x5, 0x5, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x1}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x2}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0xc}, {0x5, 0x7}, {0x7}, {0x2, 0x2}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x24, 0x2, 0x18, 0x16, 0x48, 0x6, 0x6, 0x12, 0x1, 0x36, 0x1, 0x5, 0x60, 0x36, 0x5, 0x6, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0xb, 0x12, 0x24, 0x9, 0x48, 0x16, 0x1608bed52d7e146e, 0x16, 0x5, 0xb, 0xc, 0x9, 0x18, 0x12, 0x4, 0x5, 0x3, 0x3, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x10, 0x6, 0x6, 0x96, 0x1, 0xfff8, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x4, 0x12, 0x16, 0x26, 0x5, 0x12, 0x61, 0x6c, 0x7c, 0x36]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb76, 0x6, 0xfffc, 0x472, 0x24, 0x4, 0x8000, 0xdfd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x574, 0x9, 0x3, 0x2, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2c, 0x8, 0x1c0, 0xfffb, 0x3, 0x3c, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0xb, 0x18, 0xd81a4afa1c8805a5, 0x6c, 0x60, 0x6c, 0x3, 0x1b, 0x6, 0x60, 0x1b, 0xb, 0x16, 0x16, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x7, 0x2, 0x2, 0x0, 0x227b, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x24, 0x16, 0x5, 0x2, 0x18, 0x1b, 0x6, 0xc, 0x6c, 0xc, 0x3, 0x9, 0x1f, 0x9, 0x24, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x35f7, 0x9, 0x7, 0x14, 0x40, 0x1bb, 0x3]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x48, 0x1b, 0x48, 0x12, 0x24, 0x21, 0x6c, 0x5, 0x30, 0x60, 0xc, 0x4, 0xc, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x6}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x2, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x5, 0xa}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x6, 0x8}, {0x6, 0x2}, {}, {0x6, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0x1, 0x76, 0x9, 0x7, 0x81, 0x4]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xa2, 0xfff8, 0x296, 0x9, 0xed, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x494a4deb5227d436, 0x5, 0x6c, 0x30, 0x60, 0x1, 0x48, 0x48, 0x3f, 0x11]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x400, 0xfffc, 0x9, 0x2, 0x1, 0x916, 0x7]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x48, 0xc, 0xc, 0x5, 0x6c, 0xb, 0x48, 0x60, 0x24, 0x60]}]}]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x40}, 0x13)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

2.49922707s ago: executing program 2 (id=1040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x52441, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x400caed0, &(0x7f0000000280))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000f40)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffc35)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x420080, 0x0)
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f00000001c0)={0x28, 0x6, 0x0, 0x0, 0x0, 0x80000001, 0x95})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r5, 0x0, 0xed}, 0x18)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = userfaultfd(0x1)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040))
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$UFFDIO_CONTINUE(r9, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
timer_create(0x4, &(0x7f0000000540)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000180)="78d56436135f363bd2cddef79dadf4c286898d29f9e62d0d714127b44417399fa3137d6f758160e85293b2fe", &(0x7f00000004c0)="374f5fa60af04389732092f1fbb0f162dbd7c1d11df5a7e72c09c624b99868d8171dac68d4dba324ebebe4dfc0d9f9340cdecd41b9f9018bf5718508cba98ed59e6ebbf6481adb5a060cb6"}}, &(0x7f0000000580))
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="80010000100001000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000079776ae19ce02d72d1d4893173e632bb56be59e12c234a10007d3dd0a30d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)

2.408396487s ago: executing program 3 (id=1041):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0)
socket(0x26, 0x4, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f00000002c0)="826ff2a38932974ab361c2e5273b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x4c)
process_vm_readv(r1, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
ptrace$peek(0x3, r1, &(0x7f0000000140))
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0)
getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r8, 0x100)
accept4(r8, 0x0, 0x0, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r10, 0x40047454, &(0x7f0000000300))

2.287972214s ago: executing program 4 (id=1042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r7, 0x0)
listen(r7, 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f044})
poll(&(0x7f0000000140)=[{r1, 0x19f23}], 0x1, 0x20)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c)

1.494252737s ago: executing program 0 (id=1043):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="280000001300290a00ffffffff30ffffff000000", @ANYRES32=r1, @ANYBLOB="000000000000000004000c8004001a80"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x3, 0x7, 0x1, 0x80000000, 0xf})
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000200), 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$setsig(r3, 0xa, 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x5, 0xd}}, './file0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x200, 0x2d700)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[<r7=>0x0], &(0x7f0000000340)=[<r8=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109022400010000000009040000023c7f98000905030200000000000905ba"], 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mincore(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r10, 0x2)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)

1.490771364s ago: executing program 2 (id=1044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x505, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x7, 0x0, 0x1, {0x0, r6}})
socket$kcm(0x2, 0x922000000001, 0x106)
io_uring_enter(r3, 0x3516, 0xc00, 0x0, 0x0, 0x0)

474.197628ms ago: executing program 4 (id=1045):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f00000002c0))
syz_open_dev$sndctrl(0x0, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000e4010000004400048005"], 0x68}}, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030040"], 0x8, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

247.585278ms ago: executing program 2 (id=1046):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000070000000000000000000000010000fb0700054000000002090002000000008c0100000008000440000000150800054000000010080004400000000f0800044000000001020000000000000008000100010000250800054000000020090002000000000801000000"], 0x6c}}, 0xc0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0)

247.195526ms ago: executing program 1 (id=1047):
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x1)
bind$inet6(r0, 0x0, 0xfffffda5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r3, 0x0, 0x4, 0x3, 0x9})
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)}, 0x1, 0x0, 0x0, 0x2}, 0x80)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x40443)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0x81785501, &(0x7f0000000080)={{0x1, 0x5, 0x0, 0x0, 'syz0\x00', 0x7f00}, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3f, 'syz0\x00', 0x0})
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x5, 0xb, 0xffff0001, 0x101, 0x18, "d1c721bfe0d04035c2ca58e7de4d5823db8d3e"})

245.9118ms ago: executing program 3 (id=1048):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x800000, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x459}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast1}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x1}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0x17, 0x0, [@local, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000000c0)={0x9, 0x0, 0x0, {0x18, 0x20ab, 0x6, 0x98}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 2 (id=1049):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7000000, 0x11, r0, 0x1000f0000)

kernel console output (not intermixed with test programs):

nown main item tag 0x0
[  241.652787][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.660273][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.667776][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.675319][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.682769][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.690241][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.697638][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.705128][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.712535][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.720306][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.727692][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.735657][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  241.794421][ T5916] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  242.445097][   T29] audit: type=1400 audit(1730556864.992:459): avc:  denied  { write } for  pid=7971 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  242.608837][   T29] audit: type=1400 audit(1730556865.062:460): avc:  denied  { ioctl } for  pid=7982 comm="syz.1.549" path="socket:[16769]" dev="sockfs" ino=16769 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  243.525151][ T7994] cgroup: fork rejected by pids controller in /syz0
[  243.592398][ T8007] devtmpfs: Too few inodes for current use
[  243.600193][   T29] audit: type=1400 audit(1730556866.152:461): avc:  denied  { mount } for  pid=8005 comm="syz.1.555" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  243.652729][   T29] audit: type=1400 audit(1730556866.152:462): avc:  denied  { mounton } for  pid=8005 comm="syz.1.555" path="/120/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  243.788417][   T29] audit: type=1400 audit(1730556866.172:463): avc:  denied  { remount } for  pid=8005 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  243.861041][ T5829] Bluetooth: hci3: command 0x206a tx timeout
[  245.630810][   T29] audit: type=1400 audit(1730556867.742:464): avc:  denied  { setopt } for  pid=8020 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  245.823818][   T29] audit: type=1326 audit(1730556868.402:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8024 comm="syz.3.560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ce8d7e719 code=0x0
[  245.962160][ T6106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.115978][ T6106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.299941][ T6106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.400666][ T2153] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  246.576619][ T2153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.645329][ T2153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  246.915122][ T2153] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  247.005799][ T6106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.086634][ T2153] usb 3-1: config 1 interface 1 has no altsetting 0
[  247.095544][ T2153] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  247.104654][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.113528][ T2153] usb 3-1: Product: syz
[  247.117713][ T2153] usb 3-1: Manufacturer: syz
[  247.122392][ T2153] usb 3-1: SerialNumber: syz
[  247.130464][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  247.143825][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  247.158232][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  247.194195][ T8061] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  247.229863][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  247.246048][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  247.254121][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  247.366783][   T29] audit: type=1400 audit(1730556869.922:466): avc:  denied  { mounton } for  pid=8054 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  247.392512][ T2153] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  247.422572][ T2153] usb 3-1: MIDIStreaming interface descriptor not found
[  247.433958][ T8054] lo speed is unknown, defaulting to 1000
[  247.537230][ T2153] usb 3-1: USB disconnect, device number 18
[  247.557351][   T29] audit: type=1326 audit(1730556870.132:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce8d7e719 code=0x7fc00000
[  247.696742][ T6106] bridge_slave_1: left allmulticast mode
[  247.702948][ T6106] bridge_slave_1: left promiscuous mode
[  247.710630][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.734194][ T6106] bridge_slave_0: left allmulticast mode
[  247.742279][ T6106] bridge_slave_0: left promiscuous mode
[  247.758671][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.003687][ T6106] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  248.019150][   T29] audit: type=1326 audit(1730556870.592:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.3.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f0ce8d7e719 code=0x7fc00000
[  248.427407][   T29] audit: type=1400 audit(1730556870.982:469): avc:  denied  { create } for  pid=8076 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  248.642193][ T8082] FAULT_INJECTION: forcing a failure.
[  248.642193][ T8082] name failslab, interval 1, probability 0, space 0, times 0
[  248.656477][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.4.574 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  248.667085][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  248.677167][ T8082] Call Trace:
[  248.680455][ T8082]  <TASK>
[  248.683395][ T8082]  dump_stack_lvl+0x16c/0x1f0
[  248.688096][ T8082]  should_fail_ex+0x497/0x5b0
[  248.692793][ T8082]  ? fs_reclaim_acquire+0xae/0x150
[  248.697920][ T8082]  should_failslab+0xc2/0x120
[  248.702624][ T8082]  __kmalloc_node_noprof+0xd1/0x430
[  248.707848][ T8082]  ? alloc_slab_obj_exts+0x41/0xa0
[  248.712987][ T8082]  alloc_slab_obj_exts+0x41/0xa0
[  248.717940][ T8082]  __memcg_slab_post_alloc_hook+0x2a7/0x9b0
[  248.723854][ T8082]  ? kasan_save_track+0x14/0x30
[  248.728725][ T8082]  kmem_cache_alloc_noprof+0x2c6/0x2f0
[  248.734212][ T8082]  ? alloc_vfsmnt+0x23/0x6e0
[  248.738824][ T8082]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  248.744479][ T8082]  alloc_vfsmnt+0x23/0x6e0
[  248.748916][ T8082]  clone_mnt+0x6d/0xf90
[  248.753092][ T8082]  ? lock_acquire+0x2f/0xb0
[  248.757611][ T8082]  ? copy_mnt_ns+0x14d/0xa80
[  248.762221][ T8082]  copy_tree+0xeb/0x910
[  248.766380][ T8082]  ? __pfx_down_write+0x10/0x10
[  248.771227][ T8082]  ? alloc_mnt_ns+0x2d3/0x4b0
[  248.775902][ T8082]  copy_mnt_ns+0x1b5/0xa80
[  248.780318][ T8082]  ? trace_kmem_cache_alloc+0x2d/0xe0
[  248.785780][ T8082]  ? kmem_cache_alloc_noprof+0x174/0x2f0
[  248.791416][ T8082]  ? create_new_namespaces+0x30/0xad0
[  248.796786][ T8082]  create_new_namespaces+0xd3/0xad0
[  248.801976][ T8082]  ? security_capable+0x7e/0x260
[  248.806917][ T8082]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  248.812542][ T8082]  ksys_unshare+0x45d/0xa40
[  248.817044][ T8082]  ? __pfx_ksys_unshare+0x10/0x10
[  248.822078][ T8082]  ? ksys_write+0x1ad/0x260
[  248.826591][ T8082]  __x64_sys_unshare+0x31/0x40
[  248.831440][ T8082]  do_syscall_64+0xcd/0x250
[  248.835940][ T8082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.841837][ T8082] RIP: 0033:0x7f8b16d7e719
[  248.846257][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.865868][ T8082] RSP: 002b:00007f8b17b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  248.874281][ T8082] RAX: ffffffffffffffda RBX: 00007f8b16f36058 RCX: 00007f8b16d7e719
[  248.882250][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  248.890224][ T8082] RBP: 00007f8b17b9c090 R08: 0000000000000000 R09: 0000000000000000
[  248.898206][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.906171][ T8082] R13: 0000000000000000 R14: 00007f8b16f36058 R15: 00007ffc7c806ca8
[  248.914148][ T8082]  </TASK>
[  249.294002][   T53] Bluetooth: hci0: command tx timeout
[  249.868707][ T6106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.896405][ T6106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.934867][ T8097] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  251.318659][ T6106] bond0 (unregistering): Released all slaves
[  251.374152][   T53] Bluetooth: hci0: command tx timeout
[  251.468972][ T8106] 9pnet_fd: Insufficient options for proto=fd
[  251.546417][ T8054] chnl_net:caif_netlink_parms(): no params data found
[  251.600246][    T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  252.044259][ T8106] binder: 8100:8106 ioctl c0306201 20000380 returned -14
[  252.228058][    T9] usb 2-1: device descriptor read/all, error -71
[  252.356907][   T29] audit: type=1400 audit(1730556874.932:470): avc:  denied  { map } for  pid=8109 comm="syz.2.581" path="/dev/sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  252.426854][ T8101] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  252.459608][ T8101] vxlan0: left promiscuous mode
[  252.460315][ T2153] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  252.473331][   T25] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  252.567411][   T53] Bluetooth: hci2: hardware error 0x00
[  252.736716][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  252.746331][   T25] usb 5-1: not running at top speed; connect to a high speed hub
[  252.762452][ T2153] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  252.786630][ T2153] usb 4-1: config 1 interface 0 has no altsetting 0
[  252.800029][   T25] usb 5-1: config 1 interface 0 has no altsetting 0
[  252.826359][ T2153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  252.854607][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.887612][   T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  252.930533][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.163187][ T2153] usb 4-1: Manufacturer: 剩웈鿃ⶴ鶸㈞ꖷ綿ቒᐗ瓚䈅甜ꐗۮ힋蔯怓骽㩫ޫ掚ꙡ뢓燜殴挏ꥼ릅Ὣ諳ﺼᶳ輘ɭ砝枥ާொ돿㛂䡭֤뜭Թ鮢籫䫞霔榣햂Ⴆ응め亜ॲ譼馣훉쟺瓡髶９蔚怊⻓⏃긨
[  253.222892][   T25] usb 5-1: Product: syz
[  253.235243][   T25] usb 5-1: Manufacturer: syz
[  253.244159][   T25] usb 5-1: SerialNumber: syz
[  253.252936][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.321862][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.329470][ T2153] usb 4-1: SerialNumber: ю
[  253.338647][ T8054] bridge_slave_0: entered allmulticast mode
[  253.481307][ T8054] bridge_slave_0: entered promiscuous mode
[  253.490337][ T5829] Bluetooth: hci0: command tx timeout
[  253.573376][   T25] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 127 proto 2 vid 0x0525 pid 0xA4A8
[  253.609632][   T25] usb 5-1: USB disconnect, device number 16
[  253.620640][   T25] usblp0: removed
[  254.128560][ T2153] usb 4-1: USB disconnect, device number 16
[  254.279912][ T6106] hsr_slave_0: left promiscuous mode
[  254.320758][ T6106] hsr_slave_1: left promiscuous mode
[  254.404128][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.423826][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.440046][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.447830][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.485184][ T6106] veth1_macvtap: left promiscuous mode
[  254.499873][ T6106] veth0_macvtap: left promiscuous mode
[  254.506211][ T6106] veth1_vlan: left promiscuous mode
[  254.511829][ T6106] veth0_vlan: left promiscuous mode
[  254.650877][   T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  254.929170][ T6106] team0 (unregistering): Port device team_slave_1 removed
[  254.937494][   T29] audit: type=1400 audit(1730556877.512:471): avc:  denied  { read } for  pid=8153 comm="syz.4.585" path="socket:[17472]" dev="sockfs" ino=17472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  254.994435][ T6106] team0 (unregistering): Port device team_slave_0 removed
[  255.530224][   T53] Bluetooth: hci0: command tx timeout
[  255.696125][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.711241][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  255.874629][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.881915][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.889479][ T8054] bridge_slave_1: entered allmulticast mode
[  255.898807][ T8054] bridge_slave_1: entered promiscuous mode
[  256.010228][   T29] audit: type=1400 audit(1730556878.582:472): avc:  denied  { mounton } for  pid=8160 comm="syz.3.587" path="/125/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  256.074747][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.095309][ T8163] smc: net device bond0 applied user defined pnetid S
[  256.262012][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.401033][   T29] audit: type=1400 audit(1730556878.982:473): avc:  denied  { override_creds } for  pid=8164 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  256.651423][ T8168] overlay: ./bus is not a directory
[  256.755738][ T8174] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  256.918596][ T8054] team0: Port device team_slave_0 added
[  257.181779][ T8054] team0: Port device team_slave_1 added
[  257.726960][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.789329][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.880353][ T2153] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  257.898232][   T29] audit: type=1400 audit(1730556880.452:474): avc:  denied  { create } for  pid=8188 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  257.928505][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.955113][   T29] audit: type=1400 audit(1730556880.452:475): avc:  denied  { write } for  pid=8188 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  258.010801][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.017769][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.068956][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.121460][ T2153] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  258.135481][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.166070][ T2153] usb 4-1: Product: syz
[  258.175246][ T2153] usb 4-1: Manufacturer: syz
[  258.179849][ T2153] usb 4-1: SerialNumber: syz
[  258.200933][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  258.221399][ T2153] usb 4-1: config 0 descriptor??
[  258.457217][ T8054] hsr_slave_0: entered promiscuous mode
[  258.480504][ T8054] hsr_slave_1: entered promiscuous mode
[  258.496170][ T8054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.505398][ T8054] Cannot create hsr debugfs directory
[  259.350121][   T29] audit: type=1400 audit(1730556881.282:476): avc:  denied  { accept } for  pid=8201 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  259.384092][   T29] audit: type=1400 audit(1730556881.392:477): avc:  denied  { wake_alarm } for  pid=8201 comm="syz.4.595" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  259.400153][ T2153] usb 4-1: Cannot retrieve CPort count: -110
[  259.434424][ T2153] usb 4-1: Cannot retrieve CPort count: -110
[  259.460663][ T2153] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -110
[  260.721834][   T29] audit: type=1400 audit(1730556883.302:478): avc:  denied  { read } for  pid=8180 comm="syz.3.592" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  260.779579][   T29] audit: type=1400 audit(1730556883.302:479): avc:  denied  { open } for  pid=8180 comm="syz.3.592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  260.803122][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  260.901675][   T29] audit: type=1400 audit(1730556883.332:480): avc:  denied  { write } for  pid=8180 comm="syz.3.592" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  260.996386][ T5915] usb 3-1: Using ep0 maxpacket: 8
[  261.017175][ T5915] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[  261.038774][ T5915] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  261.086799][ T5915] usb 3-1: config 6 has no interface number 0
[  261.143566][    T9] IPVS: starting estimator thread 0...
[  261.152244][ T5915] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  261.226577][ T5915] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  261.250289][ T8243] IPVS: using max 23 ests per chain, 55200 per kthread
[  261.261681][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.296707][ T5915] usb 3-1: Product: syz
[  261.322709][ T5915] usb 3-1: Manufacturer: syz
[  261.333274][ T5915] usb 3-1: SerialNumber: syz
[  261.374819][ T5915] hso 3-1:6.2: Failed to find INT IN ep
[  261.614498][ T8251] overlayfs: missing 'workdir'
[  261.671512][   T25] usb 3-1: USB disconnect, device number 19
[  261.763669][ T8255] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  262.754014][ T8054] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  262.811846][ T8054] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  263.112838][ T8054] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  263.322367][ T8054] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  263.428817][   T29] audit: type=1400 audit(1730556885.982:481): avc:  denied  { create } for  pid=8269 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  264.066271][ T8278] netlink: 560 bytes leftover after parsing attributes in process `syz.4.607'.
[  264.184304][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.247729][ T8054] 8021q: adding VLAN 0 to HW filter on device team0
[  264.558841][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.566040][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.603494][ T5878] usb 4-1: USB disconnect, device number 17
[  264.616500][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.623633][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.783402][ T8293] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  264.794195][ T8054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.840609][ T5879] IPVS: starting estimator thread 0...
[  264.865987][ T8054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  265.020562][ T8294] IPVS: using max 39 ests per chain, 93600 per kthread
[  265.215948][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'.
[  265.276359][ T8307] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  265.276359][ T8307] The task syz.3.611 (8307) triggered the difference, watch for misbehavior.
[  265.331742][ T8307] FAULT_INJECTION: forcing a failure.
[  265.331742][ T8307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.509533][ T8293] lo speed is unknown, defaulting to 1000
[  265.517109][ T8307] CPU: 0 UID: 0 PID: 8307 Comm: syz.3.611 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  265.527723][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  265.537794][ T8307] Call Trace:
[  265.541072][ T8307]  <TASK>
[  265.543989][ T8307]  dump_stack_lvl+0x16c/0x1f0
[  265.548651][ T8307]  should_fail_ex+0x497/0x5b0
[  265.553319][ T8307]  _copy_from_user+0x2e/0xd0
[  265.557896][ T8307]  kstrtouint_from_user+0xd7/0x1c0
[  265.563016][ T8307]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  265.568727][ T8307]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  265.574356][ T8307]  proc_fail_nth_write+0x84/0x250
[  265.579391][ T8307]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  265.585039][ T8307]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  265.590666][ T8307]  vfs_write+0x24c/0x1150
[  265.594999][ T8307]  ? __fget_files+0x23a/0x3f0
[  265.599673][ T8307]  ? fdget_pos+0x24c/0x360
[  265.604084][ T8307]  ? __pfx_lock_release+0x10/0x10
[  265.609096][ T8307]  ? trace_lock_acquire+0x14a/0x1d0
[  265.614289][ T8307]  ? __pfx_vfs_write+0x10/0x10
[  265.619048][ T8307]  ? __pfx___mutex_lock+0x10/0x10
[  265.624076][ T8307]  ? __fget_files+0x244/0x3f0
[  265.628758][ T8307]  ksys_write+0x12f/0x260
[  265.633085][ T8307]  ? __pfx_ksys_write+0x10/0x10
[  265.637940][ T8307]  do_syscall_64+0xcd/0x250
[  265.642436][ T8307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.648326][ T8307] RIP: 0033:0x7f0ce8d7d1ff
[  265.652737][ T8307] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  265.672337][ T8307] RSP: 002b:00007f0ce9ae6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  265.680742][ T8307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0ce8d7d1ff
[  265.688703][ T8307] RDX: 0000000000000001 RSI: 00007f0ce9ae60a0 RDI: 0000000000000003
[  265.696663][ T8307] RBP: 00007f0ce9ae6090 R08: 0000000000000000 R09: 0000000000000000
[  265.704628][ T8307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  265.712587][ T8307] R13: 0000000000000001 R14: 00007f0ce8f36058 R15: 00007ffc9372bf98
[  265.720573][ T8307]  </TASK>
[  265.931532][ T3524] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  265.940948][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.090960][ T5915] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  266.482650][ T8331] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  267.540595][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.550820][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  267.572254][ T8054] veth0_vlan: entered promiscuous mode
[  267.586491][ T8054] veth1_vlan: entered promiscuous mode
[  267.610458][ T8054] veth0_macvtap: entered promiscuous mode
[  267.618858][ T8054] veth1_macvtap: entered promiscuous mode
[  267.632637][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.643165][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.653098][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.663629][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.673537][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.683996][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.734646][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.821800][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.834285][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.844758][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.857697][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.872115][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.885100][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.970542][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.985069][ T8054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.993834][ T8054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.010141][ T8054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.025595][ T8054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.093533][ T5915] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  268.114617][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  268.137864][ T5915] usb 2-1: SerialNumber: syz
[  268.508536][ T5915] usb 2-1: 0:2 : does not exist
[  268.522093][ T2111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.529935][ T2111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.580528][ T5915] usb 2-1: USB disconnect, device number 22
[  268.622893][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.667697][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.682022][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.747853][   T29] audit: type=1400 audit(1730556891.322:482): avc:  denied  { mounton } for  pid=8054 comm="syz-executor" path="/root/syzkaller.Kot8tq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  269.780282][   T29] audit: type=1400 audit(1730556892.322:483): avc:  denied  { ioctl } for  pid=8372 comm="syz.4.620" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  270.525207][ T3524] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  271.373030][ T8396] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  271.700422][ T6811] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  272.840053][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'.
[  273.156516][ T8426] overlay: ./bus is not a directory
[  273.594873][   T29] audit: type=1400 audit(1730556896.172:484): avc:  denied  { read } for  pid=8417 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  274.454174][   T29] audit: type=1400 audit(1730556897.032:485): avc:  denied  { ioctl } for  pid=8417 comm="syz.1.629" path="socket:[18790]" dev="sockfs" ino=18790 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  275.688060][ T8443] evm: overlay not supported
[  275.809526][ T8466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8466 comm=syz.1.637
[  276.362769][   T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  276.680152][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  277.028516][ T5915] usb 2-1: config index 0 descriptor too short (expected 19, got 18)
[  277.114665][ T5915] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  277.144112][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.186765][ T5915] usb 2-1: config 0 descriptor??
[  277.469053][ T6811] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  277.499308][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[  277.990733][ T2153] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  278.250659][ T2153] usb 5-1: Using ep0 maxpacket: 16
[  278.278388][ T2153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.288632][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  278.299718][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  278.309464][ T2153] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  278.319343][ T2153] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.337434][ T2153] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  278.346586][ T2153] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  278.354665][ T2153] usb 5-1: Manufacturer: syz
[  278.363772][ T2153] usb 5-1: config 0 descriptor??
[  278.546488][ T8495] netlink: 'syz.3.647': attribute type 2 has an invalid length.
[  278.595349][ T8495] netlink: 6 bytes leftover after parsing attributes in process `syz.3.647'.
[  278.731051][ T2153] rc_core: IR keymap rc-hauppauge not found
[  278.738717][ T2153] Registered IR keymap rc-empty
[  278.750803][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  278.770246][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  278.814834][ T2153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  278.835909][ T2153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11
[  278.855339][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  278.890376][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  278.930334][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  278.960319][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  278.991583][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.030367][ T5915] pegasus 2-1:0.0: setup Pegasus II specific registers
[  279.036818][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.080359][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.111996][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.130426][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.142415][ T5915] pegasus 2-1:0.0: can't locate MII phy, using default
[  279.161206][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.190904][ T2153] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.192215][ T5915] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 06:75:ba:39:19:8f
[  279.235578][ T5915] usb 2-1: USB disconnect, device number 23
[  279.248034][ T2153] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  279.276955][ T2153] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  279.497617][ T2153] usb 5-1: USB disconnect, device number 17
[  280.956392][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  280.964453][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  280.971909][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  280.979296][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  280.986762][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  280.994699][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.002336][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.009728][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.316464][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.324589][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.332749][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.340415][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.348321][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.356283][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.364455][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.372121][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.379711][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.387437][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.395584][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.403238][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.410925][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.447715][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.455975][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.500710][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[  281.598678][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.606690][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.614168][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.621627][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.629038][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.636992][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.644486][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.651933][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.659923][ T5878] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  281.690800][ T5878] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  281.974753][ T3464] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  282.191726][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  282.330626][ T5916] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  282.357118][    T9] usb 2-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config
[  282.369910][    T9] usb 2-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice=c4.47
[  282.490530][   T61] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  282.519137][ T5916] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  282.705279][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.714135][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.722669][ T5916] usb 3-1: Product: syz
[  282.728808][    T9] usb 2-1: config 0 descriptor??
[  282.735403][ T5916] usb 3-1: Manufacturer: syz
[  282.740600][ T5916] usb 3-1: SerialNumber: syz
[  282.749026][ T5916] usb 3-1: config 0 descriptor??
[  282.952715][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'.
[  282.968431][ T5916] ch341 3-1:0.0: ch341-uart converter detected
[  283.016449][ T2153] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  283.573748][ T8539] binder: 8538:8539 ioctl c00c620f 20000080 returned -22
[  283.582716][ T8565] vivid-007: kernel_thread() failed
[  283.613339][    T9] usb 2-1: string descriptor 0 read error: -71
[  283.640378][   T29] audit: type=1400 audit(1730556906.202:486): avc:  denied  { ioctl } for  pid=8549 comm="syz.2.659" path="socket:[18954]" dev="sockfs" ino=18954 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  283.713872][    T9] usb 2-1: USB disconnect, device number 24
[  283.930700][ T2153] usb 5-1: Using ep0 maxpacket: 8
[  283.938879][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  283.949958][ T2153] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  283.960578][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.975708][ T2153] usb 5-1: config 0 descriptor??
[  284.749550][ T2153] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  284.799668][   T29] audit: type=1400 audit(1730556907.372:487): avc:  denied  { getopt } for  pid=8579 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  284.909105][ T5916] ch341-uart ttyUSB0: break control not supported, using simulated break
[  284.918875][ T5916] usb 3-1: ch341-uart converter now attached to ttyUSB0
[  284.981666][ T8586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.666'.
[  285.292502][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.328218][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.588987][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.632764][ T7533] usb 5-1: USB disconnect, device number 18
[  285.632769][    C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  285.692236][ T7533] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  285.813553][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.837644][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.845257][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.853501][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.861267][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.868685][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.876232][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.884217][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.891686][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.899091][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.906540][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.909379][ T5916] usb 3-1: USB disconnect, device number 20
[  285.914582][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.927518][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.929282][ T5916] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  285.935165][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.951904][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.959786][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.967725][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.975782][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.983458][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.991126][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  285.998527][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.006533][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.014012][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.021457][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.028862][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.036855][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.043218][ T5916] ch341 3-1:0.0: device disconnected
[  286.044308][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.056931][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.065180][ T2153] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  286.074576][ T2153] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  286.093121][ T8604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  286.099671][ T8604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  286.110306][ T8604] vhci_hcd vhci_hcd.0: Device attached
[  286.196354][   T29] audit: type=1400 audit(1730556908.772:488): avc:  denied  { create } for  pid=8615 comm="syz.0.674" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  287.292280][ T8620] syz.0.674: attempt to access beyond end of device
[  287.292280][ T8620] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  287.305642][ T8620] FAT-fs (loop1): unable to read boot sector
[  287.328573][ T8620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8620 comm=syz.0.674
[  287.329387][   T29] audit: type=1400 audit(1730556909.852:489): avc:  denied  { mounton } for  pid=8615 comm="syz.0.674" path="/13/file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  287.341201][ T2153] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  287.382434][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  287.400445][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  287.560781][   T29] audit: type=1400 audit(1730556910.132:490): avc:  denied  { unlink } for  pid=8054 comm="syz-executor" name="file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  287.620172][    T9] usb 2-1: device descriptor read/64, error -32
[  287.669661][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'.
[  287.690460][ T6811] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  287.879998][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'.
[  287.966333][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  288.072018][ T8639] hub 6-0:1.0: USB hub found
[  288.079673][ T8639] hub 6-0:1.0: 1 port detected
[  288.572427][   T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  288.631539][    T9] usb 2-1: config index 0 descriptor too short (expected 1042, got 18)
[  288.640174][    T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d
[  288.721316][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.780783][    T9] usb 2-1: config 0 descriptor??
[  289.956886][ T8609] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1
[  290.068619][ T3464] vhci_hcd: stop threads
[  290.078127][ T3464] vhci_hcd: release socket
[  290.088133][ T3464] vhci_hcd: disconnect device
[  290.206467][ T8660] overlay: ./bus is not a directory
[  290.327160][ T5877] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  290.335441][   T25] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  290.852499][ T5877] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  290.861733][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.919955][   T25] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  290.946405][ T5877] usb 4-1: config 0 descriptor??
[  290.960980][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.975799][   T25] usb 3-1: Product: syz
[  290.985099][   T25] usb 3-1: Manufacturer: syz
[  290.990041][   T25] usb 3-1: SerialNumber: syz
[  291.018737][   T25] usb 3-1: config 0 descriptor??
[  291.303022][   T25] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  291.312246][   T25] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[  291.361204][   T25] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  291.375140][   T25] usb 3-1: USB disconnect, device number 21
[  291.588846][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.605412][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.679469][ T5877] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  291.859698][ T5877] usb 4-1: USB disconnect, device number 18
[  292.241016][   T29] audit: type=1400 audit(1730556914.822:491): avc:  denied  { write } for  pid=8672 comm="syz.2.690" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  292.510192][ T2153] vhci_hcd: vhci_device speed not set
[  292.625959][ T5877] usb 2-1: USB disconnect, device number 26
[  292.880225][ T5915] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  292.936958][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'.
[  293.040225][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  293.050838][ T5915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  293.065962][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.088753][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.109181][ T5915] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.130797][ T5915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  293.139908][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.367036][ T5915] usb 4-1: GET_CAPABILITIES returned 0
[  293.372848][ T5915] usbtmc 4-1:16.0: can't read capabilities
[  293.462440][   T61] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  293.691561][   T29] audit: type=1400 audit(1730556916.252:492): avc:  denied  { call } for  pid=8691 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  293.720653][   T29] audit: type=1400 audit(1730556916.252:493): avc:  denied  { transfer } for  pid=8691 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  294.028729][   T29] audit: type=1326 audit(1730556916.602:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.4.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b16d7e719 code=0x0
[  294.274773][   T61] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  294.708937][ T8707] vivid-007: kernel_thread() failed
[  294.760230][   T29] audit: type=1400 audit(1730556917.152:495): avc:  denied  { read append } for  pid=8703 comm="syz.4.700" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  295.061206][   T29] audit: type=1400 audit(1730556917.162:496): avc:  denied  { open } for  pid=8703 comm="syz.4.700" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  295.096775][ T8710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8710 comm=syz.4.700
[  295.123810][   T29] audit: type=1400 audit(1730556917.672:497): avc:  denied  { write } for  pid=8703 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  295.896058][ T2153] usb 4-1: USB disconnect, device number 19
[  295.984226][ T8728] overlayfs: failed to resolve './file2': -2
[  296.074885][ T8729] Invalid ELF header magic: != ELF
[  296.091564][   T29] audit: type=1400 audit(1730556918.652:498): avc:  denied  { module_load } for  pid=8723 comm="syz.0.703" path="/22/bus/bus" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  297.973600][   T29] audit: type=1400 audit(1730556919.442:499): avc:  denied  { setopt } for  pid=8735 comm="syz.2.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  298.229577][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'.
[  299.134347][ T8765] vivid-007: kernel_thread() failed
[  299.210854][   T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  299.374922][ T8772] lo speed is unknown, defaulting to 1000
[  299.560742][ T5915] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  299.597740][   T29] audit: type=1400 audit(1730556922.172:500): avc:  denied  { map } for  pid=8777 comm="syz.0.717" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  299.620708][ T5916] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  299.807071][   T29] audit: type=1400 audit(1730556922.172:501): avc:  denied  { execute } for  pid=8777 comm="syz.0.717" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  299.851005][ T3524] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  300.050175][ T5916] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  300.070194][ T5916] usb 5-1: config 0 has no interface number 0
[  300.076339][ T5916] usb 5-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=81.db
[  300.100878][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.110679][ T8783] FAULT_INJECTION: forcing a failure.
[  300.110679][ T8783] name failslab, interval 1, probability 0, space 0, times 0
[  300.126590][ T5915] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  300.137827][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.146033][ T5915] usb 3-1: Product: syz
[  300.150287][ T5915] usb 3-1: Manufacturer: syz
[  300.155758][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.3.718 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  300.166364][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  300.176432][ T8783] Call Trace:
[  300.179719][ T8783]  <TASK>
[  300.182686][ T8783]  dump_stack_lvl+0x16c/0x1f0
[  300.187382][ T8783]  should_fail_ex+0x497/0x5b0
[  300.192077][ T8783]  ? fs_reclaim_acquire+0xae/0x150
[  300.197209][ T8783]  should_failslab+0xc2/0x120
[  300.201909][ T8783]  __kmalloc_noprof+0xcb/0x400
[  300.206696][ T8783]  nla_strdup+0xc6/0x150
[  300.210959][ T8783]  nf_tables_newtable+0xe08/0x1b40
[  300.216098][ T8783]  ? net_generic+0xea/0x2a0
[  300.220623][ T8783]  ? __pfx_nf_tables_newtable+0x10/0x10
[  300.226189][ T8783]  ? trace_lock_acquire+0x14a/0x1d0
[  300.231417][ T8783]  ? __nla_parse+0x40/0x60
[  300.235849][ T8783]  nfnetlink_rcv_batch+0x1a28/0x24e0
[  300.241175][ T8783]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  300.246835][ T8783]  ? avc_has_perm_noaudit+0x119/0x3a0
[  300.252230][ T8783]  ? avc_has_perm_noaudit+0x143/0x3a0
[  300.257622][ T8783]  ? __nla_parse+0x40/0x60
[  300.262038][ T8783]  nfnetlink_rcv+0x3c3/0x430
[  300.266627][ T8783]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  300.271740][ T8783]  netlink_unicast+0x53c/0x7f0
[  300.276509][ T8783]  ? __pfx_netlink_unicast+0x10/0x10
[  300.281798][ T8783]  netlink_sendmsg+0x8b8/0xd70
[  300.286562][ T8783]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.291855][ T8783]  ____sys_sendmsg+0xaaf/0xc90
[  300.296615][ T8783]  ? copy_msghdr_from_user+0x10b/0x160
[  300.302069][ T8783]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.307357][ T8783]  ? __pfx___lock_acquire+0x10/0x10
[  300.312546][ T8783]  ___sys_sendmsg+0x135/0x1e0
[  300.317217][ T8783]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.322419][ T8783]  ? lock_acquire+0x2f/0xb0
[  300.326910][ T8783]  ? __fget_files+0x40/0x3f0
[  300.331505][ T8783]  ? fdget+0x176/0x210
[  300.335571][ T8783]  __sys_sendmsg+0x117/0x1f0
[  300.340153][ T8783]  ? __pfx___sys_sendmsg+0x10/0x10
[  300.345251][ T8783]  ? __fget_files+0x244/0x3f0
[  300.349940][ T8783]  do_syscall_64+0xcd/0x250
[  300.354433][ T8783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.360348][ T8783] RIP: 0033:0x7f0ce8d7e719
[  300.364753][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.384349][ T8783] RSP: 002b:00007f0ce9b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.392753][ T8783] RAX: ffffffffffffffda RBX: 00007f0ce8f35f80 RCX: 00007f0ce8d7e719
[  300.400720][ T8783] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004
[  300.408682][ T8783] RBP: 00007f0ce9b07090 R08: 0000000000000000 R09: 0000000000000000
[  300.416640][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.424598][ T8783] R13: 0000000000000000 R14: 00007f0ce8f35f80 R15: 00007ffc9372bf98
[  300.432568][ T8783]  </TASK>
[  300.436883][ T5915] usb 3-1: SerialNumber: syz
[  300.449183][ T5915] usb 3-1: config 0 descriptor??
[  300.455218][ T5916] usb 5-1: config 0 descriptor??
[  300.493837][ T5916] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618
[  300.534752][ T2153] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  301.421970][ T5915] usb 3-1: Cannot retrieve CPort count: -110
[  301.740962][ T5915] usb 3-1: Cannot retrieve CPort count: -110
[  301.747029][ T5915] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -110
[  301.757685][ T5916] gspca_sn9c20x: Write register 1000 failed -110
[  301.764131][ T5916] gspca_sn9c20x: Device initialization failed
[  301.772792][ T5916] gspca_sn9c20x 5-1:0.223: probe with driver gspca_sn9c20x failed with error -110
[  302.080162][ T5878] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  302.090764][ T2153] usb 1-1: device descriptor read/64, error -71
[  302.242847][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.261639][ T5878] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  302.271710][ T5878] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  302.280816][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.290632][ T5878] usb 4-1: config 0 descriptor??
[  302.302037][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  302.308653][ T5878] dvb-usb: bulk message failed: -22 (3/0)
[  302.318428][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  302.327328][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  302.335389][ T5878] usb 4-1: media controller created
[  302.346316][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  302.354802][ T2153] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  302.380886][ T5878] dvb-usb: bulk message failed: -22 (6/0)
[  302.396399][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  302.411055][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  302.466581][ T5878] dvb-usb: schedule remote query interval to 150 msecs.
[  302.482021][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  302.517868][ T2153] usb 1-1: device descriptor read/64, error -71
[  302.651033][ T2153] usb usb1-port1: attempt power cycle
[  302.663863][ T5878] dvb-usb: bulk message failed: -22 (1/0)
[  302.866850][ T5878] dvb-usb: error while querying for an remote control event.
[  303.144945][   T25] dvb-usb: bulk message failed: -22 (1/0)
[  303.151433][   T25] dvb-usb: error while querying for an remote control event.
[  303.162658][   T25] usb 5-1: USB disconnect, device number 19
[  303.343068][ T5878] dvb-usb: bulk message failed: -22 (1/0)
[  303.400803][ T5878] dvb-usb: error while querying for an remote control event.
[  303.589901][ T5915] usb 4-1: USB disconnect, device number 20
[  303.650364][ T5878] dvb-usb: bulk message failed: -22 (1/0)
[  303.656145][ T5878] dvb-usb: error while querying for an remote control event.
[  304.247455][ T8806] futex_wake_op: syz.3.723 tries to shift op by 36; fix this program
[  304.609850][ T8810] fuse: Bad value for 'group_id'
[  304.615501][ T8810] fuse: Bad value for 'group_id'
[  304.634103][ T5915] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  304.737111][ T8816] xt_CT: You must specify a L4 protocol and not use inversions on it
[  305.849530][ T3464] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  305.873894][   T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  306.087636][ T5915] usb 3-1: USB disconnect, device number 22
[  306.891754][ T5915] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  307.072820][ T5915] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  307.555719][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.564484][ T5915] usb 3-1: Product: syz
[  307.568668][ T5915] usb 3-1: Manufacturer: syz
[  307.574105][ T5915] usb 3-1: SerialNumber: syz
[  307.591065][ T5915] usb 3-1: config 0 descriptor??
[  307.835179][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'.
[  308.388328][   T29] audit: type=1400 audit(1730556930.452:502): avc:  denied  { getopt } for  pid=8847 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  308.587190][ T5915] usb 3-1: Cannot retrieve CPort count: -110
[  308.593438][ T5915] usb 3-1: Cannot retrieve CPort count: -110
[  308.599456][ T5915] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -110
[  309.461744][ T8865] vivid-007: kernel_thread() failed
[  310.081618][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  310.515430][ T5915] usb 5-1: Using ep0 maxpacket: 32
[  310.539272][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.550272][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.565655][ T5915] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00
[  310.592931][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.613758][ T5915] usb 5-1: config 0 descriptor??
[  311.030856][ T5878] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  311.266802][ T5878] usb 4-1: config 5 has an invalid interface number: 117 but max is 0
[  311.321327][ T5878] usb 4-1: config 5 has no interface number 0
[  311.375831][ T7380] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  311.386931][ T6106] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  311.443111][ T5878] usb 4-1: config 5 interface 117 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  311.463507][ T5915] nzxt-smart2 0003:1E71:200F.000A: unknown main item tag 0xe
[  311.472863][ T5915] nzxt-smart2 0003:1E71:200F.000A: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.4-1/input0
[  311.496905][ T5878] usb 4-1: config 5 interface 117 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  311.508526][ T5878] usb 4-1: config 5 interface 117 has no altsetting 0
[  311.524047][ T5878] usb 4-1: New USB device found, idVendor=07c4, idProduct=a003, bcdDevice=ff.49
[  311.544961][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  311.552780][ T5915] usb 5-1: USB disconnect, device number 20
[  311.605966][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.614088][ T5878] usb 4-1: Product: syz
[  311.618263][ T5878] usb 4-1: Manufacturer: syz
[  311.623622][ T5878] usb 4-1: SerialNumber: syz
[  311.638266][ T8882] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  311.696725][ T8892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8892 comm=syz.1.748
[  311.723212][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32
[  311.733383][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.747757][    T9] usb 1-1: Product: syz
[  311.755987][    T9] usb 1-1: Manufacturer: syz
[  311.767656][    T9] usb 1-1: SerialNumber: syz
[  311.778356][    T9] usb 1-1: config 0 descriptor??
[  311.798304][    T9] pwc: Logitech/Cisco VT Camera webcam detected.
[  311.928193][ T5878] ums-datafab 4-1:5.117: USB Mass Storage device detected
[  311.987209][ T5878] scsi host1: usb-storage 4-1:5.117
[  312.014270][    T9] pwc: Failed to set LED on/off time (-71)
[  312.023321][    T9] pwc: send_video_command error -71
[  312.025184][ T5878] usb 4-1: USB disconnect, device number 21
[  312.086786][ T5877] usb 3-1: USB disconnect, device number 23
[  312.210222][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  312.218581][    T9] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  312.240659][    T9] usb 1-1: USB disconnect, device number 28
[  312.514750][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'.
[  313.257391][ T8929] lo speed is unknown, defaulting to 1000
[  313.472859][   T29] audit: type=1400 audit(1730556935.762:503): avc:  denied  { create } for  pid=8919 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  313.951064][ T8932] vivid-007: kernel_thread() failed
[  314.164059][   T29] audit: type=1400 audit(1730556935.762:504): avc:  denied  { listen } for  pid=8919 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  314.239839][   T29] audit: type=1400 audit(1730556935.772:505): avc:  denied  { accept } for  pid=8919 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  314.566103][   T29] audit: type=1400 audit(1730556937.042:506): avc:  denied  { mount } for  pid=8936 comm="syz.1.756" name="/" dev="hugetlbfs" ino=20578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  314.663042][   T29] audit: type=1400 audit(1730556937.052:507): avc:  denied  { create } for  pid=8936 comm="syz.1.756" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1
[  315.212387][   T29] audit: type=1400 audit(1730556937.742:508): avc:  denied  { write } for  pid=8950 comm="syz.4.760" name="file0" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  315.240164][   T29] audit: type=1400 audit(1730556937.742:509): avc:  denied  { open } for  pid=8950 comm="syz.4.760" path="/161/file0" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  315.266711][   T29] audit: type=1400 audit(1730556937.762:510): avc:  denied  { ioctl } for  pid=8950 comm="syz.4.760" path="/161/file0" dev="tmpfs" ino=867 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  315.294988][   T29] audit: type=1400 audit(1730556937.782:511): avc:  denied  { unmount } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  315.738184][ T8966] ALSA: seq fatal error: cannot create timer (-22)
[  317.091741][ T8987] netlink: 256 bytes leftover after parsing attributes in process `syz.4.767'.
[  317.562885][ T8985] vivid-007: kernel_thread() failed
[  317.660566][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.666894][   T29] audit: type=1400 audit(1730556940.242:512): avc:  denied  { read } for  pid=8988 comm="syz.2.769" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  317.691789][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  317.851116][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'.
[  318.476967][ T3464] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  318.477263][ T6106] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  318.716248][ T2153] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  318.952775][ T2153] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  319.193044][ T2153] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  319.242344][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  319.268687][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  319.282524][ T9003] binder: BINDER_SET_CONTEXT_MGR already set
[  319.294934][ T9003] binder: 8970:9003 ioctl 4018620d 20000040 returned -16
[  319.315836][ T2153] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  319.483019][ T2153] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  319.563352][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.583553][ T2153] usb 3-1: config 0 descriptor??
[  319.590596][ T8996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  320.024489][ T2153] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd
[  320.051997][ T2153] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  320.742677][ T2153] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  320.950608][ T9042] loop2: detected capacity change from 0 to 53
[  321.441770][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  321.441808][   T29] audit: type=1400 audit(1730556944.022:514): avc:  denied  { ioctl } for  pid=9046 comm="syz.0.779" path="/41/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  321.857318][ T5916] usb 3-1: USB disconnect, device number 24
[  323.451338][ T9066] vivid-007: kernel_thread() failed
[  323.927292][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'.
[  323.945061][   T29] audit: type=1400 audit(1730556946.522:515): avc:  denied  { setopt } for  pid=9072 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  324.156920][   T29] audit: type=1400 audit(1730556946.712:516): avc:  denied  { write } for  pid=9072 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  324.178488][ T5915] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  324.188625][   T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  324.198187][ T3524] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  324.370190][ T5915] usb 1-1: device descriptor read/64, error -71
[  324.435026][   T29] audit: type=1400 audit(1730556946.722:517): avc:  denied  { read } for  pid=9072 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  324.640190][ T5915] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  324.783696][ T5915] usb 1-1: device descriptor read/64, error -71
[  324.904678][ T5915] usb usb1-port1: attempt power cycle
[  325.092363][ T5916] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  325.119555][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.786'.
[  325.200239][ T9090] openvswitch: netlink: Flow key attr not present in new flow.
[  325.302059][ T5916] usb 2-1: config 7 has an invalid interface number: 93 but max is 0
[  325.313150][ T5916] usb 2-1: config 7 has no interface number 0
[  325.319327][ T5916] usb 2-1: config 7 interface 93 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32
[  325.332666][ T5915] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  325.355230][ T5916] usb 2-1: config 7 interface 93 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  325.398135][ T5915] usb 1-1: device descriptor read/8, error -71
[  325.420194][ T5916] usb 2-1: config 7 interface 93 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  325.438791][ T5916] usb 2-1: config 7 interface 93 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  325.465489][ T5916] usb 2-1: config 7 interface 93 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16
[  325.499677][ T5916] usb 2-1: config 7 interface 93 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  325.526395][ T5916] usb 2-1: config 7 interface 93 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  325.565909][ T5916] usb 2-1: config 7 interface 93 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  325.704347][ T5916] usb 2-1: config 7 interface 93 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  325.715198][ T5916] usb 2-1: config 7 interface 93 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  325.728127][ T5916] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d93, bcdDevice= a.13
[  325.738609][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.746832][ T5915] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  325.755170][ T5916] usb 2-1: Product: syz
[  325.759515][ T5916] usb 2-1: Manufacturer: syz
[  325.764498][ T5916] usb 2-1: SerialNumber: syz
[  325.770812][ T5915] usb 1-1: device descriptor read/8, error -71
[  325.792938][ T9083] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  325.809323][ T9083] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  325.880513][ T5915] usb usb1-port1: unable to enumerate USB device
[  325.931843][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  326.102638][    T9] usb 5-1: Using ep0 maxpacket: 8
[  326.117303][ T5916] usb 2-1: USB disconnect, device number 27
[  326.140740][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  326.173199][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  326.200347][ T5915] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  326.213576][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  326.236430][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  326.246860][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  326.260145][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  326.269191][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.370676][ T5915] usb 1-1: device descriptor read/64, error -71
[  326.495942][ T9100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.792'.
[  326.514506][    T9] usb 5-1: usb_control_msg returned -32
[  326.520206][    T9] usbtmc 5-1:16.0: can't read capabilities
[  326.938436][ T9108] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.792'.
[  327.041552][ T9108] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  327.065676][ T9100] netlink: 76 bytes leftover after parsing attributes in process `syz.4.792'.
[  327.090177][ T5915] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  327.193120][    T9] usb 5-1: USB disconnect, device number 21
[  329.154309][   T29] audit: type=1400 audit(1730556951.152:518): avc:  denied  { sqpoll } for  pid=9118 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  329.269584][ T9121] gfs2: not a GFS2 filesystem
[  329.537857][ T9123] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  329.682064][ T9140] binder: BINDER_SET_CONTEXT_MGR already set
[  329.688081][ T9140] binder: 9134:9140 ioctl 4018620d 20004a80 returned -16
[  329.941483][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  330.050661][ T5915] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  330.161102][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  330.169826][ T5829] Bluetooth: hci4: hardware error 0x00
[  330.173857][ T9147] geneve2: entered promiscuous mode
[  330.196876][ T9147] geneve2: entered allmulticast mode
[  330.320187][    T9] usb 2-1: Using ep0 maxpacket: 32
[  330.873787][    T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  330.882107][    T9] usb 2-1: config 0 has no interface number 0
[  330.891290][    T9] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=d1.34
[  330.900878][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.909926][    T9] usb 2-1: Product: syz
[  330.914320][    T9] usb 2-1: Manufacturer: syz
[  330.919008][    T9] usb 2-1: SerialNumber: syz
[  330.925984][    T9] usb 2-1: config 0 descriptor??
[  331.034234][    T9] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  331.082466][    T9] usb 2-1: setting power ON
[  331.155792][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  331.322591][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  331.534568][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  331.568741][    T9] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH)
[  331.589578][    T9] usb 2-1: media controller created
[  332.625980][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  332.659104][    T9] cxusb: set interface failed
[  332.665342][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  332.672430][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  332.693246][    T9] cxusb: clear tuner gpio failed
[  332.698485][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  332.723053][    T9] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH'
[  332.873035][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -71
[  333.013361][ T5915] usb 4-1: can't read configurations, error -71
[  333.740174][    T9] rc_core: IR keymap rc-d680-dmb not found
[  333.746031][    T9] Registered IR keymap rc-empty
[  333.752151][    T9] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  333.765623][    T9] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14
[  333.776418][ T1150] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  333.785118][ T9184] FAULT_INJECTION: forcing a failure.
[  333.785118][ T9184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.799327][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.0.815 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  333.809938][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  333.819999][ T9184] Call Trace:
[  333.823281][ T9184]  <TASK>
[  333.826216][ T9184]  dump_stack_lvl+0x16c/0x1f0
[  333.830903][ T9184]  should_fail_ex+0x497/0x5b0
[  333.835596][ T9184]  _copy_from_user+0x2e/0xd0
[  333.840201][ T9184]  copy_msghdr_from_user+0x99/0x160
[  333.845416][ T9184]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  333.851242][ T9184]  ? __pfx___lock_acquire+0x10/0x10
[  333.856454][ T9184]  ___sys_sendmsg+0xff/0x1e0
[  333.861056][ T9184]  ? __pfx____sys_sendmsg+0x10/0x10
[  333.866275][ T9184]  ? lock_acquire+0x2f/0xb0
[  333.870791][ T9184]  ? __fget_files+0x40/0x3f0
[  333.875408][ T9184]  ? fdget+0x176/0x210
[  333.879471][ T9184]  __sys_sendmsg+0x117/0x1f0
[  333.884053][ T9184]  ? __pfx___sys_sendmsg+0x10/0x10
[  333.889235][ T9184]  ? __fget_files+0x244/0x3f0
[  333.893919][ T9184]  do_syscall_64+0xcd/0x250
[  333.898422][ T9184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.904333][ T9184] RIP: 0033:0x7f1d2c77e719
[  333.908740][ T9184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.928339][ T9184] RSP: 002b:00007f1d2d5c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  333.936756][ T9184] RAX: ffffffffffffffda RBX: 00007f1d2c935f80 RCX: 00007f1d2c77e719
[  333.944715][ T9184] RDX: 0000000004000000 RSI: 0000000020000d00 RDI: 0000000000000003
[  333.952673][ T9184] RBP: 00007f1d2d5c5090 R08: 0000000000000000 R09: 0000000000000000
[  333.960631][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.968586][ T9184] R13: 0000000000000000 R14: 00007f1d2c935f80 R15: 00007fff1f365fb8
[  333.976555][ T9184]  </TASK>
[  334.233676][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  334.240832][    T9] usb 2-1: setting power OFF
[  334.245523][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  334.251669][    T9] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected.
[  334.267198][    T9] usb 2-1: USB disconnect, device number 28
[  334.330450][ T5915] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  334.631865][ T9189] netlink: 'syz.2.814': attribute type 4 has an invalid length.
[  334.647423][    T9] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected.
[  334.672456][ T5878] lo speed is unknown, defaulting to 1000
[  334.748940][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  334.937992][ T5915] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  334.950784][ T5915] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  334.989484][ T5915] usb 4-1: config 6 has no interface number 0
[  335.030510][ T5915] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  335.086165][ T5915] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  335.095587][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.103752][ T5915] usb 4-1: Product: syz
[  335.108387][ T5915] usb 4-1: Manufacturer: syz
[  335.113588][ T5915] usb 4-1: SerialNumber: syz
[  335.160316][ T5915] hso 4-1:6.2: Failed to find INT IN ep
[  335.326324][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'.
[  335.358017][ T9212] bridge1: port 1(macvlan2) entered blocking state
[  335.364959][ T9212] bridge1: port 1(macvlan2) entered disabled state
[  335.378630][ T9212] macvlan2: entered allmulticast mode
[  335.406968][ T9212] macvlan2: entered promiscuous mode
[  335.543406][ T5915] usb 4-1: USB disconnect, device number 23
[  335.686499][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'.
[  336.493580][ T9241] macsec0: entered promiscuous mode
[  336.530898][ T9241] veth1_macvtap: left promiscuous mode
[  336.558880][ T9244] binder: 9237:9244 ioctl c018620c 20000240 returned -22
[  336.607382][   T29] audit: type=1400 audit(1730556959.182:519): avc:  denied  { watch } for  pid=9237 comm="syz.0.827" path="/53/blkio.bfq.avg_queue_size" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  336.668993][ T9241] macsec0 (unregistering): left promiscuous mode
[  336.793945][ T9255] vlan0: entered promiscuous mode
[  336.824633][ T9255] team0: Port device vlan0 added
[  336.890819][   T25] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  336.947010][   T29] audit: type=1400 audit(1730556959.522:520): avc:  denied  { write } for  pid=9271 comm="syz.3.833" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  337.181549][   T25] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  337.197439][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.220718][   T25] usb 3-1: config 0 descriptor??
[  337.310222][ T5915] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  337.357828][ T9288] FAULT_INJECTION: forcing a failure.
[  337.357828][ T9288] name failslab, interval 1, probability 0, space 0, times 0
[  337.375064][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.1.838 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  337.385670][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  337.395714][ T9288] Call Trace:
[  337.398988][ T9288]  <TASK>
[  337.401924][ T9288]  dump_stack_lvl+0x16c/0x1f0
[  337.406596][ T9288]  should_fail_ex+0x497/0x5b0
[  337.411269][ T9288]  ? fs_reclaim_acquire+0xae/0x150
[  337.416380][ T9288]  should_failslab+0xc2/0x120
[  337.421076][ T9288]  __kmalloc_cache_noprof+0x6b/0x300
[  337.426364][ T9288]  ? copy_mount_options+0x55/0x190
[  337.431494][ T9288]  ? _copy_from_user+0x59/0xd0
[  337.436273][ T9288]  copy_mount_options+0x55/0x190
[  337.441227][ T9288]  __x64_sys_mount+0x1ad/0x320
[  337.445998][ T9288]  ? __pfx___x64_sys_mount+0x10/0x10
[  337.451276][ T9288]  do_syscall_64+0xcd/0x250
[  337.455766][ T9288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.461679][ T9288] RIP: 0033:0x7f01d8f7e719
[  337.466088][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.485688][ T9288] RSP: 002b:00007f01d9d55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  337.494111][ T9288] RAX: ffffffffffffffda RBX: 00007f01d9135f80 RCX: 00007f01d8f7e719
[  337.502076][ T9288] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000000
[  337.510048][ T9288] RBP: 00007f01d9d55090 R08: 00000000200001c0 R09: 0000000000000000
[  337.518111][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.526087][ T9288] R13: 0000000000000000 R14: 00007f01d9135f80 R15: 00007fff8716d738
[  337.534084][ T9288]  </TASK>
[  337.585662][ T9290] netlink: 'syz.1.839': attribute type 1 has an invalid length.
[  337.593672][ T9290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.839'.
[  337.620571][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  337.642018][ T5915] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  337.651013][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.662570][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  337.681524][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  337.690699][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.705027][ T5915] usb 4-1: Product: syz
[  337.709216][ T5915] usb 4-1: Manufacturer: syz
[  337.716981][ T5915] usb 4-1: SerialNumber: syz
[  337.865606][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.880875][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.934476][ T9294] tipc: Invalid UDP bearer configuration
[  337.934515][ T9294] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  337.959750][   T25] pegasus 3-1:0.0: probe with driver pegasus failed with error -71
[  338.002000][   T25] usb 3-1: USB disconnect, device number 25
[  338.018082][ T5915] usb 4-1: 0:2 : does not exist
[  338.034952][ T5915] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[  338.073246][ T5915] usb 4-1: USB disconnect, device number 24
[  338.118345][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.124735][ T9305] random: crng reseeded on system resumption
[  339.331252][   T29] audit: type=1400 audit(1730556961.702:521): avc:  denied  { append } for  pid=9304 comm="syz.1.845" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  339.933250][ T5829] Bluetooth: hci3: hardware error 0x00
[  340.943514][ T9324] vivid-007: kernel_thread() failed
[  341.889901][ T9337] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  342.207377][   T29] audit: type=1400 audit(1730556964.012:522): avc:  denied  { ioctl } for  pid=9329 comm="syz.4.850" path="socket:[20411]" dev="sockfs" ino=20411 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  342.299707][   T29] audit: type=1400 audit(1730556964.012:523): avc:  denied  { ioctl } for  pid=9329 comm="syz.4.850" path="socket:[20412]" dev="sockfs" ino=20412 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  342.346973][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'.
[  342.619339][   T29] audit: type=1400 audit(1730556964.912:524): avc:  denied  { getopt } for  pid=9339 comm="syz.0.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  342.904409][ T9327] lo speed is unknown, defaulting to 1000
[  343.543973][ T5829] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  343.607247][ T9349] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  344.783636][ T9357] IPVS: set_ctl: invalid protocol: 25459 100.95.115.119:26996
[  344.848624][ T9362] x_tables: duplicate underflow at hook 2
[  345.012241][   T29] audit: type=1400 audit(1730556967.572:525): avc:  denied  { validate_trans } for  pid=9360 comm="syz.0.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  345.313588][ T9372] syz.0.858 (9372): drop_caches: 2
[  347.271866][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  347.440193][    T9] usb 4-1: device descriptor read/64, error -71
[  348.140328][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  348.556460][    T9] usb 4-1: device descriptor read/64, error -71
[  348.671047][    T9] usb usb4-port1: attempt power cycle
[  348.924607][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'.
[  349.506265][   T29] audit: type=1400 audit(1730556972.082:526): avc:  denied  { write } for  pid=9432 comm="syz.3.876" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  349.716201][   T29] audit: type=1400 audit(1730556972.112:527): avc:  denied  { setattr } for  pid=9432 comm="syz.3.876" name="NETLINK" dev="sockfs" ino=21620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  350.929843][ T9445] netlink: 'syz.3.879': attribute type 3 has an invalid length.
[  350.937668][ T9445] netlink: 'syz.3.879': attribute type 3 has an invalid length.
[  350.945853][ T9445] netlink: 'syz.3.879': attribute type 3 has an invalid length.
[  352.199222][ T9466] fuse: Unknown parameter 'grou00000000000000000000'
[  352.394339][   T29] audit: type=1400 audit(1730556974.972:528): avc:  denied  { shutdown } for  pid=9464 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  352.575052][ T9480] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  352.594167][ T9480] tipc: Enabled bearer <udp:s>, priority 10
[  352.710305][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  352.809595][ T9486] : Can't lookup blockdev
[  352.980157][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  353.510192][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  354.002194][ T9494] FAULT_INJECTION: forcing a failure.
[  354.002194][ T9494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.021870][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.4.892 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  354.032502][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  354.042577][ T9494] Call Trace:
[  354.045867][ T9494]  <TASK>
[  354.048807][ T9494]  dump_stack_lvl+0x16c/0x1f0
[  354.053504][ T9494]  should_fail_ex+0x497/0x5b0
[  354.058203][ T9494]  _copy_to_user+0x32/0xd0
[  354.062645][ T9494]  simple_read_from_buffer+0xd0/0x160
[  354.068039][ T9494]  proc_fail_nth_read+0x198/0x270
[  354.073089][ T9494]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  354.078654][ T9494]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  354.084216][ T9494]  vfs_read+0x1df/0xbe0
[  354.088397][ T9494]  ? __fget_files+0x23a/0x3f0
[  354.093101][ T9494]  ? fdget_pos+0x24c/0x360
[  354.097542][ T9494]  ? __pfx_lock_release+0x10/0x10
[  354.102576][ T9494]  ? trace_lock_acquire+0x14a/0x1d0
[  354.107791][ T9494]  ? __pfx_vfs_read+0x10/0x10
[  354.112490][ T9494]  ? __pfx___mutex_lock+0x10/0x10
[  354.117533][ T9494]  ? __fget_files+0x244/0x3f0
[  354.122235][ T9494]  ksys_read+0x12f/0x260
[  354.126497][ T9494]  ? __pfx_ksys_read+0x10/0x10
[  354.131284][ T9494]  do_syscall_64+0xcd/0x250
[  354.135784][ T9494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.141674][ T9494] RIP: 0033:0x7f8b16d7d15c
[  354.146086][ T9494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  354.165693][ T9494] RSP: 002b:00007f8b17bbd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  354.174117][ T9494] RAX: ffffffffffffffda RBX: 00007f8b16f35f80 RCX: 00007f8b16d7d15c
[  354.182091][ T9494] RDX: 000000000000000f RSI: 00007f8b17bbd0a0 RDI: 0000000000000004
[  354.190055][ T9494] RBP: 00007f8b17bbd090 R08: 0000000000000000 R09: 0000000000000000
[  354.198018][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.205982][ T9494] R13: 0000000000000000 R14: 00007f8b16f35f80 R15: 00007ffc7c806ca8
[  354.213957][ T9494]  </TASK>
[  354.570150][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  354.677376][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  355.610179][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  356.650217][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  357.690252][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  358.000200][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  358.160971][    T9] usb 4-1: too many configurations: 106, using maximum allowed: 8
[  358.191388][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  358.344888][    T9] usb 4-1: can't read configurations, error -71
[  358.730153][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  359.770159][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  359.944634][ T9536] loop2: detected capacity change from 0 to 53
[  360.623314][ T5877] libceph: connect (1)[c::]:6789 error -101
[  360.629862][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  360.644787][ T9541] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  360.654261][ T9541] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  360.667553][ T9541] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  360.712926][ T9540] ceph: No mds server is up or the cluster is laggy
[  360.810190][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  360.950461][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  361.135648][    T9] usb 2-1: Using ep0 maxpacket: 8
[  361.180528][    T9] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  361.277099][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.581626][    T9] usb 2-1: Product: syz
[  361.813968][    T9] usb 2-1: Manufacturer: syz
[  361.818700][    T9] usb 2-1: SerialNumber: syz
[  361.827730][    T9] usb 2-1: config 0 descriptor??
[  361.838966][    T9] usb 2-1: invalid MIDI EP
[  361.843630][    T9] usb 2-1: snd-bcd2000: error during probing
[  361.850663][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  361.979430][    T9] snd-bcd2000 2-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  362.169868][   T29] audit: type=1400 audit(1730556984.742:529): avc:  denied  { getopt } for  pid=9562 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  362.890159][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  362.980518][ T2153] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  363.087971][ T5878] usb 2-1: USB disconnect, device number 29
[  363.382678][ T2153] usb 5-1: Using ep0 maxpacket: 8
[  363.396577][ T2153] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[  363.404862][ T2153] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  363.501754][ T2153] usb 5-1: config 6 has no interface number 0
[  363.531754][ T2153] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  363.557522][ T2153] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  363.567682][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.587936][ T2153] usb 5-1: Product: syz
[  363.601306][ T2153] usb 5-1: Manufacturer: syz
[  363.613390][ T2153] usb 5-1: SerialNumber: syz
[  363.735781][ T2153] hso 5-1:6.2: Failed to find INT IN ep
[  363.930213][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  364.662420][ T9589] netlink: 'syz.2.918': attribute type 10 has an invalid length.
[  364.679862][ T9589] team0: Device hsr_slave_0 failed to register rx_handler
[  364.820980][ T5915] usb 5-1: USB disconnect, device number 22
[  364.970163][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  365.646316][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'.
[  365.710168][   T29] audit: type=1326 audit(1730556988.262:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.3.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ce8d7e719 code=0x0
[  366.010152][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  367.050193][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  367.074622][ T9624] FAULT_INJECTION: forcing a failure.
[  367.074622][ T9624] name failslab, interval 1, probability 0, space 0, times 0
[  367.092494][ T9624] CPU: 0 UID: 0 PID: 9624 Comm: syz.4.925 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  367.103110][ T9624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  367.113175][ T9624] Call Trace:
[  367.116470][ T9624]  <TASK>
[  367.119404][ T9624]  dump_stack_lvl+0x16c/0x1f0
[  367.124095][ T9624]  should_fail_ex+0x497/0x5b0
[  367.128786][ T9624]  ? fs_reclaim_acquire+0xae/0x150
[  367.133914][ T9624]  should_failslab+0xc2/0x120
[  367.138607][ T9624]  kmem_cache_alloc_noprof+0x6e/0x2f0
[  367.144008][ T9624]  ? getname_kernel+0x52/0x370
[  367.148790][ T9624]  getname_kernel+0x52/0x370
[  367.153391][ T9624]  kern_path+0x1d/0x50
[  367.157480][ T9624]  tomoyo_mount_acl+0x62d/0x880
[  367.162345][ T9624]  ? hlock_class+0x4e/0x130
[  367.167120][ T9624]  ? __lock_acquire+0x163e/0x3ce0
[  367.172160][ T9624]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  367.177549][ T9624]  ? __pfx___lock_acquire+0x10/0x10
[  367.182742][ T9624]  ? stack_trace_save+0x95/0xd0
[  367.187582][ T9624]  ? __pfx_lock_release+0x10/0x10
[  367.192596][ T9624]  ? trace_lock_acquire+0x14a/0x1d0
[  367.197780][ T9624]  ? tomoyo_mount_permission+0x146/0x410
[  367.203418][ T9624]  ? lock_acquire+0x2f/0xb0
[  367.207931][ T9624]  ? tomoyo_mount_permission+0x146/0x410
[  367.213580][ T9624]  tomoyo_mount_permission+0x16b/0x410
[  367.219050][ T9624]  ? tomoyo_mount_permission+0x146/0x410
[  367.224701][ T9624]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  367.230725][ T9624]  ? get_current_fs_domain+0x188/0x1f0
[  367.236181][ T9624]  security_sb_mount+0x9b/0x260
[  367.241028][ T9624]  path_mount+0x129/0x1f20
[  367.245438][ T9624]  ? kmem_cache_free+0x152/0x4b0
[  367.250388][ T9624]  ? __pfx_path_mount+0x10/0x10
[  367.255266][ T9624]  ? putname+0x12e/0x170
[  367.259530][ T9624]  __x64_sys_mount+0x294/0x320
[  367.264289][ T9624]  ? __pfx___x64_sys_mount+0x10/0x10
[  367.269572][ T9624]  do_syscall_64+0xcd/0x250
[  367.274084][ T9624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.279968][ T9624] RIP: 0033:0x7f8b16d7e719
[  367.284366][ T9624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.303972][ T9624] RSP: 002b:00007f8b17bbd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  367.312403][ T9624] RAX: ffffffffffffffda RBX: 00007f8b16f35f80 RCX: 00007f8b16d7e719
[  367.320359][ T9624] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000020000480
[  367.328315][ T9624] RBP: 00007f8b17bbd090 R08: 0000000000000000 R09: 0000000000000000
[  367.336268][ T9624] R10: 0000000000002004 R11: 0000000000000246 R12: 0000000000000001
[  367.344238][ T9624] R13: 0000000000000000 R14: 00007f8b16f35f80 R15: 00007ffc7c806ca8
[  367.352207][ T9624]  </TASK>
[  367.372994][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'.
[  367.537356][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.544990][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.552520][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.559959][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.568405][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.575847][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.583338][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.595117][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.614257][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.643384][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.659630][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.836827][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.879765][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.888706][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.896423][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.904608][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.912408][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.920297][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.927926][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.935933][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.944187][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.951895][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.959503][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.967386][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  367.975069][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.011222][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.044513][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.077938][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.090158][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  368.096891][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.105037][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.112710][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.141826][ T5878] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  368.230424][ T5878] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  369.130141][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  369.527018][   T29] audit: type=1400 audit(1730556992.102:531): avc:  denied  { ioctl } for  pid=9653 comm="syz.3.933" path="socket:[23189]" dev="sockfs" ino=23189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  369.630967][   T29] audit: type=1400 audit(1730556992.182:532): avc:  denied  { connect } for  pid=9653 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  369.659078][ T9664] batadv_slave_1: entered promiscuous mode
[  369.700008][   T29] audit: type=1400 audit(1730556992.272:533): avc:  denied  { nlmsg_read } for  pid=9651 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  369.961751][    T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  370.170147][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  370.374179][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.386491][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  370.498266][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  370.600306][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.656754][    T9] usb 1-1: config 0 descriptor??
[  370.922872][ T5915] usb 1-1: USB disconnect, device number 35
[  371.001562][ T9651] batadv_slave_1: left promiscuous mode
[  371.210164][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  372.250218][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  372.553965][   T29] audit: type=1400 audit(1730556995.122:534): avc:  denied  { mounton } for  pid=9687 comm="syz.0.941" path="/proc/232/task" dev="proc" ino=21990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  372.990941][   T29] audit: type=1400 audit(1730556995.142:535): avc:  denied  { mount } for  pid=9690 comm="syz.2.943" name="/" dev="autofs" ino=23347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  373.174634][   T29] audit: type=1400 audit(1730556995.752:536): avc:  denied  { unmount } for  pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  373.290154][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  374.330303][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  375.000920][ T5877] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  375.152643][ T9739] loop2: detected capacity change from 0 to 53
[  375.370144][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  375.392861][ T5877] usb 4-1: Using ep0 maxpacket: 32
[  375.490243][ T5916] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  375.640354][ T5916] usb 2-1: device descriptor read/64, error -71
[  375.748498][ T5877] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  375.757682][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.775838][ T5877] usb 4-1: config 0 descriptor??
[  375.784932][ T5877] gspca_main: nw80x-2.14.0 probing 055f:d001
[  375.900288][ T5916] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  376.233507][ T5916] usb 2-1: device descriptor read/64, error -71
[  376.267180][ T9724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8720 sclass=netlink_route_socket pid=9724 comm=syz.3.951
[  376.351268][ T5877] gspca_nw80x: reg_r err -32
[  376.374999][ T5916] usb usb2-port1: attempt power cycle
[  376.378026][ T5877] nw80x 4-1:0.0: probe with driver nw80x failed with error -32
[  376.410154][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  376.657200][ T5915] usb 4-1: USB disconnect, device number 30
[  376.788170][ T5829] Bluetooth: hci1: hardware error 0x00
[  376.970213][ T5916] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  376.991004][ T5916] usb 2-1: device descriptor read/8, error -71
[  377.230626][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  377.260851][ T5916] usb 2-1: device descriptor read/8, error -71
[  377.372052][ T5916] usb usb2-port1: unable to enumerate USB device
[  377.391613][ T9759] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  377.450153][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  377.478228][   T29] audit: type=1400 audit(1730556999.982:537): avc:  denied  { bind } for  pid=9756 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  377.522749][   T29] audit: type=1400 audit(1730556999.982:538): avc:  denied  { read } for  pid=9756 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  378.490166][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  378.572282][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.601729][ T5916] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  378.762108][ T5916] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  378.780727][ T5916] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  378.797469][ T5916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  378.812136][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  378.822073][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.154453][   T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  379.366497][   T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  379.450156][   T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  379.475019][   T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  379.515737][ T9765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  379.525866][ T5916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  379.532902][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  379.560226][   T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.574175][   T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  379.583797][   T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  379.597276][   T25] usb 2-1: Product: syz
[  379.601529][   T25] usb 2-1: Manufacturer: syz
[  379.610042][   T25] cdc_wdm 2-1:1.0: skipping garbage
[  379.616296][   T25] cdc_wdm 2-1:1.0: skipping garbage
[  379.647912][   T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  379.660724][   T25] cdc_wdm 2-1:1.0: Unknown control protocol
[  380.407256][ T5916] usb 1-1: USB disconnect, device number 36
[  380.489438][   T29] audit: type=1400 audit(1730557002.392:539): avc:  denied  { mount } for  pid=9767 comm="syz.1.964" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  380.570160][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  380.773385][ T9802] loop2: detected capacity change from 0 to 53
[  381.020426][ T5916] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  381.206253][ T5916] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  381.217411][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.229708][ T5916] usb 1-1: Product: syz
[  381.236527][ T5916] usb 1-1: Manufacturer: syz
[  381.244367][ T5916] usb 1-1: SerialNumber: syz
[  381.318411][ T5916] usb 1-1: config 0 descriptor??
[  381.555797][ T9806] overlayfs: missing 'lowerdir'
[  381.561358][   T29] audit: type=1400 audit(1730557004.132:540): avc:  denied  { mounton } for  pid=9805 comm="syz.4.975" path="/212/file0/bus" dev="ramfs" ino=22290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  381.599278][ T9806] FAULT_INJECTION: forcing a failure.
[  381.599278][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.610316][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  381.625058][   T25] usb 2-1: USB disconnect, device number 34
[  381.632654][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.4.975 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  381.643300][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  381.653358][ T9806] Call Trace:
[  381.656638][ T9806]  <TASK>
[  381.659558][ T9806]  dump_stack_lvl+0x16c/0x1f0
[  381.664235][ T9806]  should_fail_ex+0x497/0x5b0
[  381.668912][ T9806]  _copy_to_user+0x32/0xd0
[  381.673347][ T9806]  simple_read_from_buffer+0xd0/0x160
[  381.678725][ T9806]  proc_fail_nth_read+0x198/0x270
[  381.683751][ T9806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  381.689291][ T9806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  381.694827][ T9806]  vfs_read+0x1df/0xbe0
[  381.698987][ T9806]  ? __fget_files+0x23a/0x3f0
[  381.703670][ T9806]  ? fdget_pos+0x24c/0x360
[  381.708091][ T9806]  ? __pfx_lock_release+0x10/0x10
[  381.713113][ T9806]  ? trace_lock_acquire+0x14a/0x1d0
[  381.718304][ T9806]  ? __pfx_vfs_read+0x10/0x10
[  381.723000][ T9806]  ? __pfx___mutex_lock+0x10/0x10
[  381.728023][ T9806]  ? __fget_files+0x244/0x3f0
[  381.732710][ T9806]  ksys_read+0x12f/0x260
[  381.736964][ T9806]  ? __pfx_ksys_read+0x10/0x10
[  381.741750][ T9806]  do_syscall_64+0xcd/0x250
[  381.746258][ T9806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.752152][ T9806] RIP: 0033:0x7f8b16d7d15c
[  381.756559][ T9806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  381.776161][ T9806] RSP: 002b:00007f8b17bbd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  381.784570][ T9806] RAX: ffffffffffffffda RBX: 00007f8b16f35f80 RCX: 00007f8b16d7d15c
[  381.792534][ T9806] RDX: 000000000000000f RSI: 00007f8b17bbd0a0 RDI: 0000000000000005
[  381.800505][ T9806] RBP: 00007f8b17bbd090 R08: 0000000000000000 R09: 0000000000000000
[  381.808484][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.816454][ T9806] R13: 0000000000000000 R14: 00007f8b16f35f80 R15: 00007ffc7c806ca8
[  381.824431][ T9806]  </TASK>
[  381.834686][   T29] audit: type=1400 audit(1730557004.412:541): avc:  denied  { unmount } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  381.858621][ T5916] usb 1-1: Cannot retrieve CPort count: -110
[  381.864785][ T5916] usb 1-1: Cannot retrieve CPort count: -110
[  381.871162][ T5916] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -110
[  382.272857][   T25] usb 1-1: USB disconnect, device number 37
[  382.650147][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  383.690490][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  384.663200][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.986'.
[  384.740167][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  384.774488][ T9827] Invalid logical block size (1)
[  385.312896][   T29] audit: type=1400 audit(1730557007.892:542): avc:  denied  { create } for  pid=9850 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  385.336382][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'.
[  385.342554][   T29] audit: type=1400 audit(1730557007.912:543): avc:  denied  { getopt } for  pid=9850 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  385.440187][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  385.447919][ T5879] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  385.720219][    T9] usb 5-1: Using ep0 maxpacket: 8
[  385.725579][ T5879] usb 4-1: Using ep0 maxpacket: 8
[  385.732150][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.747996][ T5879] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  385.756249][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.766703][ T5879] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  385.776925][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  385.787334][ T5879] usb 4-1: config 6 has no interface number 0
[  385.800168][    T9] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  385.815210][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.825873][ T5879] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  385.838978][    T9] usb 5-1: Product: syz
[  385.843580][    T9] usb 5-1: Manufacturer: syz
[  385.848220][    T9] usb 5-1: SerialNumber: syz
[  385.859497][ T5879] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  385.876652][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.885293][ T5879] usb 4-1: Product: syz
[  385.889522][ T5879] usb 4-1: Manufacturer: syz
[  385.894691][ T5879] usb 4-1: SerialNumber: syz
[  385.923816][ T5879] hso 4-1:6.2: Failed to find INT IN ep
[  386.088601][    T9] usbhid 5-1:1.0: can't add hid device: -22
[  386.108300][    T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -22
[  386.253985][    T9] usb 5-1: USB disconnect, device number 23
[  386.820239][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  386.846674][ T5916] usb 4-1: USB disconnect, device number 31
[  386.983518][ T9874] loop2: detected capacity change from 0 to 53
[  387.850214][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  388.614266][ T9884] overlayfs: missing 'lowerdir'
[  388.714699][ T9888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.999'.
[  388.890271][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  389.930276][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  390.970167][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  391.900958][ T5879] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  392.010270][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  392.061733][ T5879] usb 5-1: Using ep0 maxpacket: 16
[  392.069309][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.081182][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  392.091166][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.164552][ T5879] usb 5-1: config 0 descriptor??
[  392.387418][   T29] audit: type=1400 audit(1730557014.722:544): avc:  denied  { ioctl } for  pid=9927 comm="syz.2.1010" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  392.829729][ T9923] syzkaller0: entered promiscuous mode
[  392.835474][ T9923] syzkaller0: entered allmulticast mode
[  392.871312][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15
[  392.915931][   T29] audit: type=1400 audit(1730557015.432:545): avc:  denied  { relabelfrom } for  pid=9919 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  392.939318][   T29] audit: type=1400 audit(1730557015.432:546): avc:  denied  { relabelto } for  pid=9919 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  393.022705][ T9932] netfs: Couldn't get user pages (rc=-14)
[  393.037416][   T29] audit: type=1400 audit(1730557015.542:547): avc:  denied  { setattr } for  pid=9931 comm="syz.3.1012" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  393.059109][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  393.076937][ T9913] input: syz0 as /devices/virtual/input/input16
[  393.111132][   T29] audit: type=1400 audit(1730557015.562:548): avc:  denied  { write } for  pid=9931 comm="syz.3.1012" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  393.131992][   T29] audit: type=1400 audit(1730557015.572:549): avc:  denied  { open } for  pid=9931 comm="syz.3.1012" path="/207/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  393.154225][   T29] audit: type=1400 audit(1730557015.702:550): avc:  denied  { getopt } for  pid=9931 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  393.223294][ T5186] bcm5974 5-1:0.0: could not read from device
[  393.432320][ T5186] bcm5974 5-1:0.0: could not read from device
[  393.848563][ T5879] usb 5-1: USB disconnect, device number 24
[  393.977941][ T9952] loop2: detected capacity change from 0 to 53
[  394.093381][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  394.744680][   T29] audit: type=1400 audit(1730557017.322:551): avc:  denied  { connect } for  pid=9958 comm="syz.4.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  395.146953][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  395.279507][   T29] audit: type=1400 audit(1730557017.322:552): avc:  denied  { ioctl } for  pid=9958 comm="syz.4.1018" path="socket:[24783]" dev="sockfs" ino=24783 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  395.304927][   T29] audit: type=1400 audit(1730557017.322:553): avc:  denied  { write } for  pid=9958 comm="syz.4.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  396.180146][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  397.220162][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  397.750335][ T9962] tipc: MTU too low for tipc bearer
[  397.806512][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'.
[  398.250151][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  398.327294][ T9967] lo speed is unknown, defaulting to 1000
[  398.572070][ T9993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  399.032043][ T9994] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  399.300146][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  399.383387][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'.
[  399.390348][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  399.390364][   T29] audit: type=1400 audit(1730557021.962:572): avc:  denied  { getopt } for  pid=9987 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  399.427866][ T9988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1024'.
[  399.597190][   T29] audit: type=1400 audit(1730557022.172:573): avc:  denied  { module_load } for  pid=9997 comm="syz.3.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  399.633293][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'.
[  399.675306][ T9998] bridge2: port 1(macvlan2) entered blocking state
[  399.687733][ T9998] bridge2: port 1(macvlan2) entered disabled state
[  399.695614][ T9998] macvlan2: entered allmulticast mode
[  399.709456][ T9998] macvlan2: entered promiscuous mode
[  400.227933][   T29] audit: type=1400 audit(1730557022.792:574): avc:  denied  { write } for  pid=10016 comm="syz.3.1031" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  400.282331][T10018] input: syz1 as /devices/virtual/input/input17
[  400.330239][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  400.338430][T10000] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  400.870346][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  401.001425][ T5879] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  401.030278][    T9] usb 4-1: Using ep0 maxpacket: 8
[  401.039872][    T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 64
[  401.050600][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  401.061153][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  401.071853][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.087053][    T9] usb 4-1: Product: syz
[  401.093450][    T9] usb 4-1: Manufacturer: syz
[  401.098066][    T9] usb 4-1: SerialNumber: syz
[  401.105482][T10025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  401.112802][ T5916] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  401.162412][ T5879] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  401.173415][ T5879] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  401.178819][   T29] audit: type=1400 audit(1730557023.752:575): avc:  denied  { setopt } for  pid=10033 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  401.190415][ T5879] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  401.240187][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.248251][ T5879] usb 2-1: Product: syz
[  401.280646][ T5879] usb 2-1: Manufacturer: syz
[  401.285344][ T5879] usb 2-1: SerialNumber: syz
[  401.303692][ T5879] usb 2-1: config 0 descriptor??
[  401.310515][ T5916] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  401.318582][ T5916] usb 1-1: config 0 has no interface number 0
[  401.362033][T10027] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  401.375511][T10027] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  401.382880][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  401.408647][ T5916] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.453658][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 127 proto 1 vid 0x0525 pid 0xA4A8
[  401.501687][ T5916] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.520461][    T9] usb 4-1: USB disconnect, device number 32
[  401.562052][    T9] usblp0: removed
[  401.567753][ T5916] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  401.611288][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.669530][ T5916] usb 1-1: config 0 descriptor??
[  401.686032][T10027] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  401.739112][T10027] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  402.181202][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.206334][ T5916] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.000D/input/input18
[  402.243594][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.270183][ T5879] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  402.375101][T10050] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1040'.
[  402.410199][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  402.869754][ T5916] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1
[  402.941123][ T5916] usb 1-1: USB disconnect, device number 38
[  403.013102][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'.
[  403.107118][ T5879] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  403.166586][ T5879] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, e2:91:f7:a1:71:c5
[  403.340891][ T5879] usb 2-1: USB disconnect, device number 35
[  403.450166][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  403.943897][ T5879] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[  404.200235][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  404.350369][    T9] usb 1-1: Using ep0 maxpacket: 8
[  404.360014][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  404.380242][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  404.412973][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  404.464064][    T9] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  404.480223][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.490162][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  404.509103][    T9] usb 1-1: Product: syz
[  404.514795][    T9] usb 1-1: Manufacturer: syz
[  404.519554][    T9] usb 1-1: SerialNumber: syz
[  404.526439][    T9] usb 1-1: config 0 descriptor??
[  404.535387][    T9] smsusb:smsusb_probe: board id=2, interface number 0
[  404.547148][    T9] smsusb:siano_media_device_register: media controller created
[  404.598831][    T9] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[  404.621289][    T9] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[  404.630191][   T29] audit: type=1400 audit(1730557027.192:576): avc:  denied  { map } for  pid=10074 comm="syz.2.1049" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  404.674461][    T9] ------------[ cut here ]------------
[  404.680022][    T9] WARNING: CPU: 0 PID: 9 at mm/slub.c:4689 free_large_kmalloc+0xda/0x140
[  404.688662][    T9] Modules linked in:
[  404.692654][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  404.703166][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  404.713262][    T9] Workqueue: usb_hub_wq hub_event
[  404.718289][    T9] RIP: 0010:free_large_kmalloc+0xda/0x140
[  404.724067][    T9] Code: 56 fb 8b 43 34 85 c0 75 c7 48 c7 c6 20 63 7b 8d 48 89 df e8 18 45 ef ff 90 0f 0b 48 89 df 5b 5d 41 5c 41 5d e9 d7 c7 e2 ff 90 <0f> 0b 90 80 3d e4 0e 64 0e 00 74 28 48 8b 74 24 20 48 89 ef e8 cd
[  404.744380][    T9] RSP: 0018:ffffc900000e6e18 EFLAGS: 00010246
[  404.750902][    T9] RAX: 00fff00000000000 RBX: ffffea00024b9880 RCX: ffffc900173b3000
[  404.758885][    T9] RDX: 0000000000100000 RSI: ffff888092e62000 RDI: ffffea00024b9880
[  404.766973][    T9] RBP: ffff888092e62000 R08: 0000000000000007 R09: 0000000000000000
[  404.774995][    T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880268b5000
[  404.783090][    T9] R13: ffff8880268b7000 R14: dffffc0000000000 R15: ffff8880268b50f0
[  404.791129][    T9] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  404.800360][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  404.806978][    T9] CR2: 000000110c37fd21 CR3: 00000000680fe000 CR4: 00000000003526f0
[  404.815226][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  404.823306][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  404.831372][    T9] Call Trace:
[  404.834670][    T9]  <TASK>
[  404.837622][    T9]  ? __warn+0xea/0x3d0
[  404.842388][    T9]  ? free_large_kmalloc+0xda/0x140
[  404.847548][    T9]  ? report_bug+0x3c0/0x580
[  404.852668][    T9]  ? handle_bug+0x54/0xa0
[  404.857029][    T9]  ? exc_invalid_op+0x17/0x50
[  404.861784][    T9]  ? asm_exc_invalid_op+0x1a/0x20
[  404.866854][    T9]  ? free_large_kmalloc+0xda/0x140
[  404.872172][    T9]  ? free_large_kmalloc+0x11/0x140
[  404.877314][    T9]  usb_free_urb.part.0+0xe5/0x100
[  404.882418][    T9]  usb_free_urb+0x1f/0x30
[  404.886783][    T9]  smsusb_term_device+0x108/0x1e0
[  404.891964][    T9]  smsusb_init_device+0xaa2/0xe10
[  404.897015][    T9]  ? __pfx_smsusb_init_device+0x10/0x10
[  404.904952][    T9]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  404.910605][    T9]  ? usb_clear_halt+0x61/0x160
[  404.915409][    T9]  smsusb_probe+0x5e2/0x10b0
[  404.920030][    T9]  ? __pfx_smsusb_probe+0x10/0x10
[  404.925183][    T9]  ? mark_held_locks+0x9f/0xe0
[  404.929977][    T9]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  404.935946][    T9]  ? __pm_runtime_set_status+0x13c/0x9a0
[  404.941651][    T9]  usb_probe_interface+0x309/0x9d0
[  404.947354][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[  404.953611][    T9]  really_probe+0x23e/0xa90
[  404.958245][    T9]  __driver_probe_device+0x1de/0x440
[  404.964489][    T9]  driver_probe_device+0x4c/0x1b0
[  404.969620][    T9]  __device_attach_driver+0x1df/0x310
[  404.975412][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  404.981393][    T9]  bus_for_each_drv+0x157/0x1e0
[  404.986284][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  404.991765][    T9]  ? lockdep_hardirqs_on+0x7c/0x110
[  404.997020][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  405.003101][    T9]  __device_attach+0x1e8/0x4b0
[  405.007906][    T9]  ? __pfx___device_attach+0x10/0x10
[  405.013324][    T9]  ? do_raw_spin_unlock+0x172/0x230
[  405.018560][    T9]  bus_probe_device+0x17f/0x1c0
[  405.023497][    T9]  device_add+0x114b/0x1a70
[  405.028039][    T9]  ? __pfx_device_add+0x10/0x10
[  405.032972][    T9]  ? preempt_schedule_thunk+0x1a/0x30
[  405.038400][    T9]  usb_set_configuration+0x10cb/0x1c50
[  405.043980][    T9]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  405.050652][    T9]  usb_generic_driver_probe+0xb1/0x110
[  405.056151][    T9]  usb_probe_device+0xec/0x3e0
[  405.061558][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[  405.066968][    T9]  really_probe+0x23e/0xa90
[  405.071686][    T9]  __driver_probe_device+0x1de/0x440
[  405.077006][    T9]  ? usb_driver_applicable+0x1c7/0x220
[  405.082554][    T9]  driver_probe_device+0x4c/0x1b0
[  405.087626][    T9]  __device_attach_driver+0x1df/0x310
[  405.093142][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  405.099063][    T9]  bus_for_each_drv+0x157/0x1e0
[  405.104012][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  405.109408][    T9]  ? lockdep_hardirqs_on+0x7c/0x110
[  405.114674][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  405.120627][    T9]  __device_attach+0x1e8/0x4b0
[  405.125419][    T9]  ? __pfx___device_attach+0x10/0x10
[  405.131014][    T9]  ? do_raw_spin_unlock+0x172/0x230
[  405.136252][    T9]  bus_probe_device+0x17f/0x1c0
[  405.141252][    T9]  device_add+0x114b/0x1a70
[  405.145789][    T9]  ? __pfx_device_add+0x10/0x10
[  405.151325][    T9]  ? add_device_randomness+0xb8/0xf0
[  405.156650][    T9]  usb_new_device+0xd90/0x1a10
[  405.162034][    T9]  ? __pfx_usb_new_device+0x10/0x10
[  405.167268][    T9]  hub_event+0x2d9a/0x4e10
[  405.171758][    T9]  ? __pfx_hub_event+0x10/0x10
[  405.176560][    T9]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  405.182206][    T9]  ? rcu_is_watching+0x12/0xc0
[  405.186957][    T9]  ? trace_lock_acquire+0x14a/0x1d0
[  405.192222][    T9]  ? process_one_work+0x921/0x1ba0
[  405.197349][    T9]  ? lock_acquire+0x2f/0xb0
[  405.201934][    T9]  ? process_one_work+0x921/0x1ba0
[  405.207070][    T9]  process_one_work+0x9c5/0x1ba0
[  405.212178][    T9]  ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10
[  405.218675][    T9]  ? __pfx_process_one_work+0x10/0x10
[  405.224098][    T9]  ? assign_work+0x1a0/0x250
[  405.228700][    T9]  worker_thread+0x6c8/0xf00
[  405.233336][    T9]  ? __pfx_worker_thread+0x10/0x10
[  405.238473][    T9]  kthread+0x2c1/0x3a0
[  405.242555][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.247762][    T9]  ? __pfx_kthread+0x10/0x10
[  405.252677][    T9]  ret_from_fork+0x45/0x80
[  405.257082][    T9]  ? __pfx_kthread+0x10/0x10
[  405.262074][    T9]  ret_from_fork_asm+0x1a/0x30
[  405.266842][    T9]  </TASK>
[  405.269845][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  405.277109][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  405.287586][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  405.297625][    T9] Workqueue: usb_hub_wq hub_event
[  405.302645][    T9] Call Trace:
[  405.305915][    T9]  <TASK>
[  405.308845][    T9]  dump_stack_lvl+0x3d/0x1f0
[  405.313420][    T9]  panic+0x71d/0x800
[  405.317302][    T9]  ? __pfx_panic+0x10/0x10
[  405.321717][    T9]  ? show_trace_log_lvl+0x29d/0x3d0
[  405.326926][    T9]  ? free_large_kmalloc+0xda/0x140
[  405.332033][    T9]  check_panic_on_warn+0xab/0xb0
[  405.336987][    T9]  __warn+0xf6/0x3d0
[  405.340877][    T9]  ? free_large_kmalloc+0xda/0x140
[  405.345986][    T9]  report_bug+0x3c0/0x580
[  405.350309][    T9]  handle_bug+0x54/0xa0
[  405.354449][    T9]  exc_invalid_op+0x17/0x50
[  405.358938][    T9]  asm_exc_invalid_op+0x1a/0x20
[  405.363778][    T9] RIP: 0010:free_large_kmalloc+0xda/0x140
[  405.369493][    T9] Code: 56 fb 8b 43 34 85 c0 75 c7 48 c7 c6 20 63 7b 8d 48 89 df e8 18 45 ef ff 90 0f 0b 48 89 df 5b 5d 41 5c 41 5d e9 d7 c7 e2 ff 90 <0f> 0b 90 80 3d e4 0e 64 0e 00 74 28 48 8b 74 24 20 48 89 ef e8 cd
[  405.389089][    T9] RSP: 0018:ffffc900000e6e18 EFLAGS: 00010246
[  405.395138][    T9] RAX: 00fff00000000000 RBX: ffffea00024b9880 RCX: ffffc900173b3000
[  405.403096][    T9] RDX: 0000000000100000 RSI: ffff888092e62000 RDI: ffffea00024b9880
[  405.411050][    T9] RBP: ffff888092e62000 R08: 0000000000000007 R09: 0000000000000000
[  405.419003][    T9] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880268b5000
[  405.426956][    T9] R13: ffff8880268b7000 R14: dffffc0000000000 R15: ffff8880268b50f0
[  405.434936][    T9]  ? free_large_kmalloc+0x11/0x140
[  405.440066][    T9]  usb_free_urb.part.0+0xe5/0x100
[  405.445093][    T9]  usb_free_urb+0x1f/0x30
[  405.449405][    T9]  smsusb_term_device+0x108/0x1e0
[  405.454415][    T9]  smsusb_init_device+0xaa2/0xe10
[  405.459446][    T9]  ? __pfx_smsusb_init_device+0x10/0x10
[  405.465003][    T9]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  405.470546][    T9]  ? usb_clear_halt+0x61/0x160
[  405.475319][    T9]  smsusb_probe+0x5e2/0x10b0
[  405.479898][    T9]  ? __pfx_smsusb_probe+0x10/0x10
[  405.484925][    T9]  ? mark_held_locks+0x9f/0xe0
[  405.489675][    T9]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  405.495474][    T9]  ? __pm_runtime_set_status+0x13c/0x9a0
[  405.501097][    T9]  usb_probe_interface+0x309/0x9d0
[  405.506212][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[  405.511827][    T9]  really_probe+0x23e/0xa90
[  405.516321][    T9]  __driver_probe_device+0x1de/0x440
[  405.521597][    T9]  driver_probe_device+0x4c/0x1b0
[  405.526609][    T9]  __device_attach_driver+0x1df/0x310
[  405.531972][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  405.537849][    T9]  bus_for_each_drv+0x157/0x1e0
[  405.542686][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  405.548045][    T9]  ? lockdep_hardirqs_on+0x7c/0x110
[  405.553235][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  405.559061][    T9]  __device_attach+0x1e8/0x4b0
[  405.563832][    T9]  ? __pfx___device_attach+0x10/0x10
[  405.569108][    T9]  ? do_raw_spin_unlock+0x172/0x230
[  405.574300][    T9]  bus_probe_device+0x17f/0x1c0
[  405.579149][    T9]  device_add+0x114b/0x1a70
[  405.583641][    T9]  ? __pfx_device_add+0x10/0x10
[  405.588474][    T9]  ? preempt_schedule_thunk+0x1a/0x30
[  405.593850][    T9]  usb_set_configuration+0x10cb/0x1c50
[  405.599342][    T9]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  405.605408][    T9]  usb_generic_driver_probe+0xb1/0x110
[  405.610875][    T9]  usb_probe_device+0xec/0x3e0
[  405.615650][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[  405.621017][    T9]  really_probe+0x23e/0xa90
[  405.625514][    T9]  __driver_probe_device+0x1de/0x440
[  405.630803][    T9]  ? usb_driver_applicable+0x1c7/0x220
[  405.636248][    T9]  driver_probe_device+0x4c/0x1b0
[  405.641340][    T9]  __device_attach_driver+0x1df/0x310
[  405.646714][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  405.652608][    T9]  bus_for_each_drv+0x157/0x1e0
[  405.657445][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  405.662805][    T9]  ? lockdep_hardirqs_on+0x7c/0x110
[  405.668004][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  405.673833][    T9]  __device_attach+0x1e8/0x4b0
[  405.678606][    T9]  ? __pfx___device_attach+0x10/0x10
[  405.683905][    T9]  ? do_raw_spin_unlock+0x172/0x230
[  405.689096][    T9]  bus_probe_device+0x17f/0x1c0
[  405.693939][    T9]  device_add+0x114b/0x1a70
[  405.698437][    T9]  ? __pfx_device_add+0x10/0x10
[  405.703308][    T9]  ? add_device_randomness+0xb8/0xf0
[  405.708610][    T9]  usb_new_device+0xd90/0x1a10
[  405.713369][    T9]  ? __pfx_usb_new_device+0x10/0x10
[  405.718560][    T9]  hub_event+0x2d9a/0x4e10
[  405.722984][    T9]  ? __pfx_hub_event+0x10/0x10
[  405.727741][    T9]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  405.733363][    T9]  ? rcu_is_watching+0x12/0xc0
[  405.738117][    T9]  ? trace_lock_acquire+0x14a/0x1d0
[  405.743304][    T9]  ? process_one_work+0x921/0x1ba0
[  405.748423][    T9]  ? lock_acquire+0x2f/0xb0
[  405.752913][    T9]  ? process_one_work+0x921/0x1ba0
[  405.758009][    T9]  process_one_work+0x9c5/0x1ba0
[  405.762946][    T9]  ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10
[  405.769457][    T9]  ? __pfx_process_one_work+0x10/0x10
[  405.774821][    T9]  ? assign_work+0x1a0/0x250
[  405.779404][    T9]  worker_thread+0x6c8/0xf00
[  405.783989][    T9]  ? __pfx_worker_thread+0x10/0x10
[  405.789086][    T9]  kthread+0x2c1/0x3a0
[  405.793149][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.798338][    T9]  ? __pfx_kthread+0x10/0x10
[  405.802936][    T9]  ret_from_fork+0x45/0x80
[  405.807337][    T9]  ? __pfx_kthread+0x10/0x10
[  405.811921][    T9]  ret_from_fork_asm+0x1a/0x30
[  405.816680][    T9]  </TASK>
[  405.819922][    T9] Kernel Offset: disabled
[  405.824293][    T9] Rebooting in 86400 seconds..