last executing test programs:

31.232398713s ago: executing program 2 (id=731):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0x0, &(0x7f0000000180))

30.519707198s ago: executing program 2 (id=733):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x168, 0x1170, 0x1398, 0x168, 0x1170, 0x2e8, 0x1398, 0x1398, 0x2e8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x43}, [0x0, 0xff000000], [0xffffff00, 0xff, 0x0, 0xff000000], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x3, 0x3, 0x0, 0x9}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'geneve0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5c, 0x5, 0x4, 0x10}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0xdc, 0x2, 0x0, [0x5, 0x33c1, 0x0, 0x4, 0x6b, 0x9, 0xc00, 0x3, 0xd, 0x2, 0x6, 0x6, 0xfffc, 0x4, 0x801, 0x7], 0xd}}, @common=@mh={{0x28}, {"28d2", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x7, 0x4, 0x82d, 'netbios-ns\x00', 'syz0\x00', {0x94}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8cc26ef70280ad880811d62e"], 0x7c}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080))
pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0)

30.440237251s ago: executing program 2 (id=736):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [0x0, 0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

29.503096044s ago: executing program 2 (id=740):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_names\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x10, r0, 0x6eb8c000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

28.595902583s ago: executing program 2 (id=742):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r1, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000780)=""/50, 0x32}, {&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/93, 0x5d}], 0x9, &(0x7f0000000980)}, 0x38, 0x102)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
futex(&(0x7f0000000140)=0x1, 0x6, 0x2, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)=0x1, 0x2)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

28.341053418s ago: executing program 2 (id=744):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x3, 0x1]}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = creat(&(0x7f0000001000)='./file0\x00', 0x10c)
r3 = dup(r2) (async)
pipe2$9p(&(0x7f00000046c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4800)
mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
vmsplice(r5, &(0x7f0000011240)=[{&(0x7f0000011180)="ad", 0x1}], 0x1, 0x1) (async)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
get_mempolicy(0x0, &(0x7f0000000140), 0x8001, &(0x7f0000ffa000/0x3000)=nil, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0), 0x4)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000200)=ANY=[@ANYBLOB="060000ad", @ANYRES16=r0, @ANYBLOB="00022abd7002ffdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240008c0)

12.799402411s ago: executing program 32 (id=744):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x3, 0x1]}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = creat(&(0x7f0000001000)='./file0\x00', 0x10c)
r3 = dup(r2) (async)
pipe2$9p(&(0x7f00000046c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4800)
mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async)
vmsplice(r5, &(0x7f0000011240)=[{&(0x7f0000011180)="ad", 0x1}], 0x1, 0x1) (async)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
get_mempolicy(0x0, &(0x7f0000000140), 0x8001, &(0x7f0000ffa000/0x3000)=nil, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0), 0x4)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000200)=ANY=[@ANYBLOB="060000ad", @ANYRES16=r0, @ANYBLOB="00022abd7002ffdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240008c0)

6.675805459s ago: executing program 4 (id=821):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
socket(0x400000000010, 0x6, 0x3)
socket(0x400000000010, 0x3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000096e20e0500180100002020642500000000002020202675b57d00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095d79b91f09dc76fee3086d929847e3c6d51101e5e63571a69aa88b3db728b9a1fccd68b9ebd7d86c86ff2851baa90690a030e8479bab3cfc1ba5241fa0027718ea389f2d8ca51f950faba01e5fbfb3ccd7091c26efdbabbaa1509a4cb345094f4c85fd74a58bd87bf85"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0xfffffffffffffe87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000480)=[{0x6, 0x1, 0x1, 0x7ffffffd}, {0x1ff, 0x2, 0x80, 0xffffff7f}, {0x3, 0x2, 0x1, 0x7}]})
clock_gettime(0x0, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigaction(0x41, &(0x7f0000003a40)={&(0x7f0000000140)="ca027ad1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{r2, 0x80dd}], 0x1, 0x20000)

6.327008545s ago: executing program 0 (id=823):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000019000100000000000000000b021800000000fe000000000008000100ac1414"], 0x30}}, 0x0)

5.855827217s ago: executing program 0 (id=825):
syz_open_dev$vbi(0x0, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
creat(0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x54, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4e, 0x0, @default_ap_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c851}, 0x4)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x77e}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040))
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000600)=0x3, 0x4)

5.19632985s ago: executing program 0 (id=826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf0ffff, 0x2}, 0x50)

5.147831826s ago: executing program 3 (id=827):
r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x9a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\x00D(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\x18s\xf7!~0\xc7y\xe2\xb2VP\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yxm\x96\xbfS\x97\x9c/\x1f5i\xc6\x861\x8a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xac\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4010, r0, 0x1000)
fallocate(r0, 0x3, 0x4, 0xfffffffb)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f00000003c0)=ANY=[@ANYBLOB="66641d", @ANYRESHEX=0x0, @ANYRES16=r1])
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
lremovexattr(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)=@known='system.advise\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x1f6dfd9c6b8e4c3f, 0x0, 0x17, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10, 0x10, 0x1, 0xffffffff}})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e80000000001010400000000000000000a000000280001800c00028005000100840000000c00028005000100000000000c00028005000100060000000400018008000740000004004c000e8014000180080001000a01010108000200640101002c00018014000300fe80000000000000000000000000000c140004000000000000000000000000000000000006000340000200004c00198008000200220e000008000100200000000800020005050000080002001000000008000100000400000800020002000000080002004100000008000200c7ddffff0700010008030000b60f9f8e0800074000000e0c"], 0xe8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000240)=ANY=[], 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x1, 0x1, 0x81, 0x8, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x7d, 0x29, 0x0, @local, @multicast1}}}})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x2, 0xfffffffffffffffe, 0x4000000000008, 0xfffffffd, 0x6e, {0x3, 0x7, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0xfff, 0x8, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
ioctl$FS_IOC_SETFLAGS(r5, 0xc0606610, &(0x7f0000000040)=0x60)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x8800)
openat$autofs(0xffffffffffffff9c, 0x0, 0x888000, 0x0)
getpid()

5.05524284s ago: executing program 0 (id=828):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x1, 0x5}, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="1b", 0x1}], 0x1}}], 0x1, 0x24008080)
accept4$unix(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
close(0xffffffffffffffff)

4.915500303s ago: executing program 1 (id=829):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0003001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0)

4.760789374s ago: executing program 1 (id=830):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a000907000000000000000000400005001a"], 0x38}}, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881af, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

4.69582246s ago: executing program 3 (id=831):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4004000}, 0x4000)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0)
ioctl$KDSETLED(r3, 0x4b32, 0x2)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x2, 0x1f7c, 0x9}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6bde2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xc00d080)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000104010100000000000000000190b310a628fcf0000008"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x80)

3.490978746s ago: executing program 1 (id=832):
r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$rfkill(r0, 0x0, 0x0)

3.267877523s ago: executing program 3 (id=833):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000040)={0x283})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x41624800ab11328b, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)

3.259842729s ago: executing program 0 (id=834):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xfffd, 0x6, 0x1, 0x4000, 0x0, "0510000000000010"})
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000700)="0324", 0x2}], 0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)

3.139722402s ago: executing program 4 (id=835):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x11, 0x3, 'fo\x00', 0x8, 0x4, 0x71}, 0x2c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000, 0x3000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

3.139305873s ago: executing program 1 (id=836):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x0, 0x1})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0xff)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = dup(r6)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x54}}, 0x0)

3.096195147s ago: executing program 4 (id=837):
eventfd(0xfffffffe)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000000), 0xf944, 0x40002)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x4, 0x7a7d00)
pipe2(0x0, 0x800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009554000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0xd, "6a58bea88a0000000000001900"})
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xe0, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002380)={0x1c7c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c4c, 0x3, 0x0, 0x1, [{0x488, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc8, 0x6, 0x1, 0x0, "3ebc2d14a7b7d255e58828209f44a0d81fcd46c2334c6c766367bdcbb52bbdea55bd4ca232694a1d197050b3c915c3bd64ae5bb1c0922b4b0f5783b966e8c9e01924d4bb8566dec7179d753f22e17e2f66a74da291083e2d7b64601be345a86e97145b278a87136d3a470d16540381fbb1be8b1f5ea3b1fd76ca903a691066578d1f367936708f57d015346648b7f453c678e6dbfc0ee46437ebfb6707c00bf3140c70d0524b5bacae39dcd644fe66269e54f025c5af5f88bd720f2ff63487bf6aca619d"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0xf7}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x2d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "9031ec0ede4aed3e7a9b8b9fc3cd3c40d279e47e33bf662d28434873485a0fd34cd618b63556ba592346f74b1541e2787540aeb7c16b7c16d037df512a4a6ab9fe882cd7b2a1203a9c9a6dfb6a894ccb2ba95b5f3602cd851052993d488a51e961043c87e671a743bac185daf138ed02411e314f9ab9e8409b0a845b83711b14a4a1c29b08e2b1"}, @NFTA_DATA_VALUE={0xff, 0x1, "3cbb040cfd9f509bd1b9593e7a1aaaaba7703c063dec875e271ab179736276b482ac481243886efc9a3f47a8be129514042c9e56c53d37b043165457704698875c1767b67fbdd98973fe02139f2a33c5ead5ca76e1182227ccdfaf12cc307a675844508484c4605023a921ac237f0ae871d31655a5a0cb7a0c51a84f2a20cab4ed6eef3f8585b287c525ea4d5e00c28abe354301de6df88ba38fb97984f0f7ac243154d1b3fcb60a257c800882cfb4be2470d9acfd0019822308bb5a5aa2431d4fb051a2fa3353995a1f685fd85519cc4f2436c025253aebdfd30c22096dce5348f3a7be127d91ecf9f38cd110d4e14413b61a696f9e802d5fd904"}, @NFTA_DATA_VALUE={0xdd, 0x1, "4c9a6be3b2f7cb7fa65c3d3b397fa7e6b71197e1f7cd4d7fd94a880d299a01534e04248f5a3c27fb686c8bc7e61cee74985b477621372983b9e73a9fcb7a71c7c26b22b411f3d42bbc27e5c7e35a33ec23742ee74d48d1af660ca65ae414d94dc555cba881f39aa6dc08f56e106173e755c41b8ed203eed7383ce932e0ff7d20dfcf7473300e2648fee226d01407a2f8c26f7cb267ac0ef8cf87e704c0897b71ef6eed8bf1deb1af2d497cb9a43b25a9a5341d81449440cc2ded029ca0b14e6b69af22eb58d6f1f402a48454f95b4cc4d741838f09129d8698"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x560, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "2b5b172760ecaa75aa3bcb38a2b67d934a2298bb6599ebb942f6aa37a409f3b2e3bbf3402dd01b04e99d224b7225533cb009611740aecf3f232e10a1d755dc77d97a79c5bbf012c455f2bffa4feb8cdc670de54f19d6864eed0acb1dde96eff12f72ce37e9198a08a486c10490bb4989cc92b730df1bb458567b58e5c5e3202f6707a4fdce9e2d1ee0fbfb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "8bf0200dfae32711378573503c654f05ad19aa905e4016ac330b9369fa2ab8e1e194b8e9eed91181a789222282be54c2b6d3e3429c51cea51e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000003}]}, @NFTA_DATA_VALUE={0xef, 0x1, "54bfb953191b4cc303f42e297308e02d2b0ca42727f30af09eba18fbfbc386f3033aa15b103402f2e6ea0bf6e04819faf31aca16b03c6a2b0d293827474abfdd1b987ce28b29434bc4c54e018810699c8568f3d591b2b05c06e30a4eae5cecf457db8321e31d6274d3397c7c77dd28db275158155980c77639bdc614e1eaa6a57e0c0e63821d36c69c87872e8e603d815ca08619a13d0b2510d339a6080ed1f947c0879953af260ea7f2e82d16b98ae5d06cf126d70cf28125a902f1f63285d0dd1be125c322e2acc0a70b2b30c92db55188a74a58eab98d2974c68b3a1ec7fa4fde2ad1873e247b88d37f"}, @NFTA_DATA_VALUE={0xd2, 0x1, "a0055229f73a53cb86774123248131229e8698ea25fe395b19caa852c54d6989db585357049264ab0c8425d918ac38277d199f779270bf1a01d55979d18c39dbab8cb82fd990ec140d763751f86f79e69e9074517b740de28bbc8349e00625760652bfd93560e754b87731bc7c50976ca06ddc73b3fe22815920bb570f732da2271aa74ff4be39c9b0b055f6f0a3e4cc3915ad07187a1761c6992d22c63abf7c045afb6e4e3a145c8c78b6a05d97269be7a82aa062419be15a5c0538bf3eb114fc18de15ab94ebf2c7225035bab6"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x1f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "a947b64fcdc7b88edf63ab9fc376ed083596e5da5415643bd7678f43ac8217cce06e5c07de404c4c3e4d5bb1953bc75917fbf6b6dc34af889f20b7f59a9974b8c34cf45f5f1140d2e751d157abfba70eaf60ad2919fdda0361792f8ac9ff4a5af2c7a0cc5be4305a6bda25f963db83e2ea399caa7ba310c794d07da49cdd9a541b7ede03776744832bdb52e6a424d5a7909e0fea97ff9650c5ea724388419aede178e1a35558f8e7e524b199ffdaab8d01c709f91d8f8ebd3add50be477feba90a6125b4968c981efbfb77206825"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x40, 0x1, "55aef6270597a896e458ecb1be5b7824c77d8f33123a1fb83aac3814a02d7891190e421a22f61fe462d19b2039b8de66eb562cc46c79dfff681bb6b8"}, @NFTA_DATA_VALUE={0x4d, 0x1, "3b04538e43fdaa9c115866e897a52906e9da0901529335c2f105ba5e810fde44327d6e18038c3185032dff1692fcde8b25223272e931d3e2df4bb88373ee867769e6e2c9f2adb71509"}, @NFTA_DATA_VALUE={0x74, 0x1, "6d8aa47060a8bb02e6d5d1f9bdb03e26413dbe9eb3f3ceed0a17df22f4fcb2046c3ffab29a0df9880e89d035900ba2415e7f2614fd1d37c17e071a5cabb8c11a8499edb851dc497e18a065bdfc6b30eddb7340a19fa6001ad45256bda73f6defbab0ea18d6c43a8ad1426217c08a1bfb"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6f}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x47c41e78c85ac659}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x11f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x99}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x100}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x5b}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_DATA={0x109c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "747368d90c1543c45d89e277876a97378f21231cdea18b84c4f4e24cd443bb15ef3b109a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "870071b859d619563efcbcfa8d0227c4b77ceb4f1603cdc4a930f6fc6eae97f2d787fed01270ccb9ef71d4459dd20509c7d20c65693f63f8e16feece0ff17b09cdd6371148efdb8bfe2df352570b82878f3edc85f13904379375d083cd91259ca3c2b6472ef568606a45f6980d95864ca3aaeb30a121757b2e3381c101c1363bf0147478604a3070e47436db4ae1c9479443a0100dc664ccebe1375a26fccfebc68f71bc4cdd7ee4c03c46febf4f0fc62fa28b85d68fc756e3551ba638d2193b21daeb044cd28d9f1453b802ce44a54137ef1de050c6f4ec32af0839a375326bd58b8a680987b0802428179160f735a8993827468f85550a09cb8779add467faa4422027b1baf3c42667ef2c8494a4a075a8033624244ebd08f7bfc77c0e5ef8bad359c2826c790d86f69a1f1b638ae576339f3972d3b93b5fa19a5cf1d7c38adb94fa8ad5d83048d06e49da1ac5080ef0e1bfad82e22af17127c138c8dd9bbe3620b62d5fe7f42917b0c28b1f0e643f5c79228b06ee5cccabdfae3892751bfad9e2002d7562416662e3e6c784497387d913a41277a1ca45c4d10e45f1a1832db0d993396d4440054a18f1213f55b0d7f023a5906172bdf398f6321bfbf1f7ecb0b3706e824cae9deadaf610b088389dec4687b8e674c4855667043245fd51dfc8d66e7505c4395dc63fc44cfe00ff14e35df622a098a8d49c02c9a31625ec17f56e7be25c7ec065a4d7313064e6c7bd1e5d1098a1f36748c2417f495fbcbc48786ba40ffde482fb23abb53d307fa0990ee26da3b1b84e21d34c71045ecd5444be20b2e9e5fdc5d78be49f7b6710fe3c87164706d338f5d843b2515a03e92d8f0f619a18839b3869ee2e214e3af0a2523b2170cc312dab9e5a0dad303ab6013cc75b4a34fbd3a74b3d80254b0a987ee2cde648696dd85b22d651b1f5b90053415e1124ec01522cc872b82366507429126b8d5e8572727cd37b1a9cbfb364f2549aa66ad385c9d328388e8f3fb1823d9a969ce31190f7c8ddd06c9bf7d1e7c328b260bfe70217e5a9fa8d434f140f45e52369e77b3c6a91253ffe99eb48ceecc5a4541942ff1e7d6911e30189f325ec1bba80f4527224d5a4bac07e69027e22e8970a615d6b2f937c9c7b444d8d05fef438964cf5d6f2d1b5ab2ce559b362eb7524994b762b62387349ebded2fb9475ee7de667416f3a07cfa2135e4c4fce0aa37ea73ef8c1c7fd1b3f32ded5eea78aa2381298bf3cd1594061aef59e5d99e95c2694e4f238ab3a3295f42dc893c49c786f6694bc07b50e06edd8dc1622ce225a76c8711e429d212b91202bccbbc20f44221dbea6cf2c449eef33f0ec44ec325f3322bbbe6c679c93843da5bccd18a44ecebc3271c1e2957f08e7c622b4cc7d177c96c95974d25e2ac0b7342041446f9d3b56723689cc5ca97a08d335f0983cf5beb6a354c07c70db3e3020d941f8a5dde84ae47bb5bd12156043fffc7aea129ccf2aef769e21c1bf7eb1d02ef13a1c0e2e1fc348d22fb5e9e4a0ad894bdfe4c7cba70c52ba105097f46f79e359b277ced31abbeb0fd437d576138ff4f8e8ac6a5cf9c9c3c030a0aba6d343c332178b28008f3fe0ec290fbf5dbe7c3e91abf0030ddd2296a3bfcd7cec17eb251efd32f73f933796ab87cc0e7e07f88c96e8085a9922507abacd8c9aeb8c534326210aa971bece4456377664dee27a2fb5e8521ea6bd354142089532cc11812bdce63f6d81a3eeeceb1806f6a1316ee072cf546ca918f12d45692dd3ff2d33d0ba33af4afdc4003732cff4357c72aded219486cdae5f437389b594ce619e6f23a919aaa8831d3b16c73c50ecf6dbf0d33e334d3f84531d6a4489e54ba3f083b07fb884a939b33b806e66fe922c1aa8a116b562ce6fee07c55fb7d8b07727efc29990c50730b22348bc4b358f958e5bc1b146771c22ec5dbb0a8d3d48b9779c821ae40466ea504b3ce795d45b6c243d454155ff233362ecab0f7fa5ab3aa10c0a438f9f29995ad2f889747478a9d1709e88097357908a0962f9e4fa15f95dd9f4210bd786400064c0b5c19c2eae4ad9a21230c48851afb78f0b5353b696bcb768d7408b8a303e7c72139b49f6e0c2afdec4c643650165962798264a9beacefa01a40e47c4d23ed5f9e354701babdb44559edc8e26136ee243d553fb8555a83e68af30d9a9ea6d06129fcd538402528ab310db78deca3fdca87e63cfd42a9c97beece2821bfcb6c4df4cda08ed326a12387cfcd00140030cb052cd91bf49603beae685539d25e2259092bc6153b94a5ce05ad58683bed407e3c52d2774c0b5679cba57236066076713781ca29e8cb874176d2c81d390dac7ea5da855530c3c532e7f5d642e43f6aabedac569894ce82b57e928576bd1a5ac8c08d90b69e822b4ca5100d746724c76193731b971298851d2ddcd76347f09c324f1556d4301f10d0bba9e59c417918fa3b91b13b07512fb4913c843996853d51f32e118350dcce7cddcf7bd82f939fc41af6434c8a2e35b90eaad69e0e723b88fc66fee5ca8fe1f6b77a886ffe4e1b3397a4bb8d968cfd7f451024e7f6620af481b35002095847d679a4f48f982b92cc7c084597005987c0a8d414f2c34eee40a487aae071b653acc6c2c46cdc6403a3f7f47020d32f74d5c7e6c5302fd6856ae45278bc3f1286e05fa057d09a1faeace1f151a1e4fb089a6d00797a7b48472ac9c5d67468e0f68f3cff2d5ba86cc5a36505c3b816eb5de6ae4e12cd31c4abc0a76b376e0b13caac4e7ae30871df4ee69d83e68a1f844e46610c91dfa33cf0780a6747972e8c50b6cb6e1336085ca45aabac6b1d9683f374f61b9c28d27043c9f225ec64d51811c3ed9b3f1ddf33b4b5e93a75ac2067d6a70d64f4e4e0c039cf525aa7a2d267cd87c9cc133a9e14be46e50639d9da681a1329c3b31d7af9b71bf8dcd014e961f38ae34dd8d7fbee293c3e3642ce0e24462422dddb54a5f18e1c4ed0a20443fff9a2018d505216a09e7c75eb9965ae35fbbd9a9fa525a3ca9830f937bcd57b5705ffd8c58153e6f037bf67c99ab8d157bdc7fe173e448497da26931efe944bae66e76895223935e7864bf87a54b9ab0a048e5ef9ff415be937cad03e21c84e1a99fc4ef377f51b642db4fc7d7072f2b0d1c05996e32ee5c24d7b49600b228575fe19ebd342983019be37f9d4913062a5cdc799938b5c43b4cb5a3531019bd15bb6eb7adc5e80683d2c217658be813357cd90667301fc2839fc853379f1142e4bb47bc71ae95c19a831cd326df1ba3b5774eb54a12f6b2b3a46fd5c4bda69f8fb48d5bd0f50049693f3f2adaa07d766191694c767876f5d29302c5a4fc9939acca123f3aeb5fae835b5a912822d3c3289b9085ce82b6ec452399ae374d153e5902ca328230fa373bf0e3fe5b4b5435268d64b100dbd77b5e1e4b962b7cb9411193e376ce2a6d6601754562ee8b60efdd37f0fcb7d87e57814382ad3936ad66ffeb6db411366dba56f8d2fcf405ef4e7b2f051e31433a7cba0cf02176529bf8589a13170b1778d4e947f3f7c9b01e01d9e106b1a654dcdd0874487fdd0590a1169350ac6b6ff23b90958305ff8e918873f4255299da9905513fdc39cbdb6c994fe041c1b597b83cb77209a0929f410987c92158858ea9c890a204c348a0510468c1e405977e737b7df84f2a9b75960edfc604ee159382284ea5df6189a0edcff87ed042ff68556a301ef1966cfebea0b7173ae98e893a6cb11f51803ba24ff93f00182c47012b97382a91e911d5eabbc0fb34676eb308aad2adaf70cc5c9aeb555e3c998e8d5a965ef1e12ffb585d9b8674d611538374cc7ee339336d0ecfa0ef785809d1bdf9e960690ae166d09090c6bac417af6490aa64da086677c25ca5bedb2d92764781a97f36036dba22dfb1743419f58aef5fc1528bb024e6b3f5d8e847578f04c9e83a566d33cf25289f41425e793f4c6085b1cf0d4286e71b13733112b9158a182b4f472c8ea311d20b98a76ce5db2fe78614618f269fa044c899696868df8caf11aa637421a10c5ba67c60453a7d3d4c42aec8329ba33ab533acca4d7eb2b3fe9906fa11bc44ed71b4234cd18537731f2bd90af97229357e41a35bffd3ab98234ad4efcef3785f574505718eb6623e3db4df3ca7ff55a7b87579704d56055c6ffd71e912d889114ad2fb7dbfaab31105832d2960b7862b94910a6598b310fcb332f828d974625540d1f83b7ffd268b87aa3f0cf917412e7b0ee99391ed4647a99bcc9b47d963b1ccf88333238d2d6d4ec3e0c8cbcd2fe97363f14458aae81ff755613697ed9eb047a2d310d9430f678220697dd91a6d06d28f9e2cb0138b75ba1adba9a209378bd7698fa33730ea59c494e65c384d05f6accb6332bb83f0f2a7bc6f5b5586ef50bf46a17a6f190e33688d1a1eacf3ffa79cfdbc10b0f2a6ec3088d3444b389b32cb3da6a1f0a0178c4d03ea46d64a88205a0b03038d923acf2b5ce34b139904c97787c86c7d57593941ecda77f4913b18b15baec755934ee0b2b832d78bd29bca3ec75440743b6c99df974b16c974622aff19ca7a4d01aa1b676fb44b1bf72485ea344922a0824199361fe3177959af05a53911f853ac4527b71fe2699ee329161837cee4c7f85bfa4f546e7a4ab8a5c04bb74ee26fbd1cbac8e421d1aafac887470ee9651b69fe6c94c4d44470ca5aad7fe7914b68e315cc616c81d388ba813d96625659f1c7c2ef06647fb6b20880fae87d286bd0caa731da6e141c5fa50728d55d40984bb00ee051680efa0c7a6da246982ee9d2fe1dd81ba3e387527b192846dd3f1b8af03e0671e158e087d120b7453f6fb85a062a2fb79c4b17d47a5b5a2cf2b36fe868c1225540be7271b33a489210f030d45ce4084bec504e99959d96bf2ebcf401d3d19b22608165732f0c50fdeb91a1be26ef6b32e6915cd30e61d4df22659cff8574ca474079adbd452ca2c78d9049f64b1a65e30b0fb20af1b9074aabab9fafb6eb82db965b8a69f38ae28b92a71c3bcd55caf8c03d8052d4c9ef9247340d8d22cf213df60e828930265d19527482182c65b19e8cecadb8d31f9b7e772211498e6f9d76a0787bebcae9fd4c80f5e746380e6c8ad2ffc68f15b94cf26cb04cf8fe38f5f5ba36dfe98e8f7b8cc6a2984234d00536b39fa5e8aa2ab44519a8082de165a0f88520bda2bf82ebb7e50aef2e1566f8204d8bfae9be5df720d5e2a7e9455fefc49df88364da7008268f246ef3d95a69dec59b13f96004fa8e338a5f4ae2904d95660bfc42983d3a937c3f6de6a7bf0124f6a4cc9d0f61d88da48c8141d6b23d6e1d2c68a75b2ebcdfe225f32e3955a0262a8b8d47c20ea4298ff90ea14f855b52be820343460a6b62f9720132fe969d3b0d6ee75c04bec9a9e0d21c58a866356243d707f4b4ffc9095dc1820e383e3691f1422a79adb61091627414045ac59cd082a3650768d8c5d58f7076bd8eb526bc590a165e15e101341b65bde0a2325dc0f84c4a7e35d50503404f1f0914b801da168ce0d9b216d68a752cbe0141a064c90af7106f4357aa9cd76410eb42adc60c7a58a97824fc184d0e3efbb6f0046c5da0033d0269b846744940b3719077395ed8ba58286c0246666627701f01baacd2ecc0a88d67034a92bd1d5d5d68bbabf079ee5d785cc08417d397c95d24ad31e37cd62c9dbec6a617fd5ce7876c066ad9ba3501e302b65bae92520e5bf05baae0e49dfc40810aa0b419c0cd6b8557d147a30d1b99e0dcc9991eed73d4049ab9febc73"}]}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1d}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x1c7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x7fffffff}, 0x0, 0x0)

2.883161226s ago: executing program 0 (id=838):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x5000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030300300303030303030300900000000d5932d1ba2bbbce30000003030302ccaeba0b951b59107c40db883c97fc3a5a05826e70c2feb87461af73df906000000c87adacc9f5d39f301c37b2d0cc80029de7e944b607994737e350dfe3f127563d8bb09140bfd5b4f832aa8e3ed7ddd4f74cd7a8e2fcfbe3f9e79d77cb218a8000000000000", @ANYRES16=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r4, 0x1, 0x5, 0x0, &(0x7f0000000180))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
syz_usb_connect(0x0, 0x66, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xea, 0x0, 0xcd, 0x8, 0x19d2, 0x189, 0x6c2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x2, 0x1, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0x4, 0xe9, 0x3, 0x98, 0x72, 0xb4, 0xd5, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x4}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x1, '9'}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x1, "42cc34"}]}], [{{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x2}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x0, 0x3, 0x7}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x4, 0x20, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81}]}}]}}, {{0x9, 0x4, 0x87, 0x8, 0x0, 0x4b, 0xb1, 0xc6, 0x1}}]}}]}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000001010102000000000000000001000005f200198008001400000008000200010000000600124000040000140005800e00016d705f74d06170000000"], 0x44}}, 0x800)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
flock(r8, 0x5)

2.667742577s ago: executing program 3 (id=839):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x208340, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xbd71, '\x00', 0x0, r1, 0x5, 0x1, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='cq_drain_complete\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x2, 0x0, [{0x1dddd0000, 0xb9, &(0x7f00000001c0)=""/185}, {0x100000, 0xef, &(0x7f0000000280)=""/239}]})
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)

2.635590899s ago: executing program 3 (id=840):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffa0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41102, 0x9, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)

2.549704594s ago: executing program 3 (id=841):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0)
recvfrom$inet(r2, &(0x7f0000000200)=""/245, 0xf5, 0x2, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e21, 0x7, @remote, 0x20003}, 0xffffffffffffffff, 0x40000007}}, 0x48)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x9)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x40)
socket$inet(0x2, 0x3, 0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)=0x7)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8800, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x2c0, 0xb8, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'wg2\x00', {0x1}}}}, {{@ip={@loopback, @multicast2, 0xff, 0x0, 'team0\x00', 'tunl0\x00', {0xff}, {}, 0x21, 0x1, 0x658d50addd3a1f88}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'snmp\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x4, 0x2, 0x3, 0x3], 0x5, 0x4}, {0x1, [0x0, 0x7, 0x1, 0x2, 0x6, 0x5], 0x0, 0x1}}}}, {{@ip={@private=0xa010101, @remote, 0xffffffff, 0xff, 'ip6erspan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x67, 0x7, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x104, 0x1}}, @common=@ttl={{0x28}, {0x3, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8c5b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

2.279655642s ago: executing program 1 (id=842):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4004000}, 0x4000)
madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0)
ioctl$KDSETLED(r3, 0x4b32, 0x2)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x2, 0x1f7c, 0x9}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6bde2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xc00d080)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000104010100000000000000000190b310a628fcf0000008"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x80)

1.143871768s ago: executing program 4 (id=843):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (fail_nth: 11)

1.084336049s ago: executing program 1 (id=844):
pipe2$9p(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000480)=0x7f, 0x4)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0)
pwrite64(r2, 0x0, 0x0, 0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
prlimit64(r5, 0x2, &(0x7f0000000000)={0x3ff, 0xff}, &(0x7f0000000080))
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

835.884828ms ago: executing program 4 (id=845):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140)={'geneve1', 0x32, 0x31}, 0xa)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6f5}, [@IFLA_IFALIASn={0x4}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x4})

0s ago: executing program 4 (id=846):
r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$rfkill(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

d
[  149.200907][   T30] audit: type=1400 audit(1762551701.651:448): avc:  denied  { bind } for  pid=7081 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  149.224584][ T7079] mmap: syz.1.315 (7079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  149.305810][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.343716][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.358462][ T7086] syzkaller1: entered promiscuous mode
[  149.366539][ T7086] syzkaller1: entered allmulticast mode
[  149.469137][ T7087] netlink: 60 bytes leftover after parsing attributes in process `syz.2.316'.
[  149.520602][ T5828] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  149.650281][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  149.757800][ T5828] usb 1-1: no configurations
[  149.796598][ T5828] usb 1-1: can't read configurations, error -22
[  149.973681][ T7090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7090 comm=syz.4.322
[  149.996964][ T7090] netlink: 'syz.4.322': attribute type 1 has an invalid length.
[  150.017355][ T5828] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  150.030806][   T30] audit: type=1400 audit(1762551702.471:449): avc:  denied  { read } for  pid=7089 comm="syz.3.323" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  150.062805][   T30] audit: type=1400 audit(1762551702.471:450): avc:  denied  { open } for  pid=7089 comm="syz.3.323" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  150.105751][   T10] cdc_subset 3-1:0.150: probe with driver cdc_subset failed with error -71
[  150.193477][   T10] usb 3-1: USB disconnect, device number 11
[  150.221079][ T5828] usb 1-1: no configurations
[  150.225872][ T5828] usb 1-1: can't read configurations, error -22
[  150.240032][ T5828] usb usb1-port1: attempt power cycle
[  150.280269][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  150.440395][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  150.447588][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.473325][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.494038][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.506938][ T5880] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.526892][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.551742][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  150.561244][ T5880] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  150.569867][ T5880] usb 4-1: Manufacturer: syz
[  150.580952][ T7096] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[7096]
[  150.589225][ T5880] usb 4-1: config 0 descriptor??
[  150.605567][   T30] audit: type=1400 audit(1762551703.071:451): avc:  denied  { watch watch_reads } for  pid=7095 comm="syz.4.324" path="/dev/pts/1" dev="devpts" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1
[  150.629962][ T5828] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  150.693680][ T5828] usb 1-1: no configurations
[  150.698286][ T5828] usb 1-1: can't read configurations, error -22
[  150.962819][ T5828] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  150.991500][ T5828] usb 1-1: no configurations
[  150.996315][ T5828] usb 1-1: can't read configurations, error -22
[  151.292064][   T30] audit: type=1401 audit(1762551703.761:452): op=fscreate invalid_context=DC
[  151.305817][ T5828] usb usb1-port1: unable to enumerate USB device
[  151.370302][ T5880] rc_core: IR keymap rc-hauppauge not found
[  151.437745][ T5880] Registered IR keymap rc-empty
[  151.462391][ T7109] netlink: 92 bytes leftover after parsing attributes in process `syz.1.327'.
[  151.472486][   T30] audit: type=1400 audit(1762551703.911:453): avc:  denied  { create } for  pid=7100 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  151.474228][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  151.506310][   T30] audit: type=1400 audit(1762551703.911:454): avc:  denied  { write } for  pid=7100 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  151.540717][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  151.564256][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  151.598432][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  151.754709][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.046033][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.072383][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.137685][ T7120] batadv_slave_1: entered promiscuous mode
[  152.148187][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.253195][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.290286][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.311713][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.360875][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.420836][ T7124] bridge0: entered promiscuous mode
[  152.426106][ T7124] bridge0: entered allmulticast mode
[  152.489721][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.790270][ T5880] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  152.814246][ T5880] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  152.844869][ T5880] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  152.880561][ T5880] usb 4-1: USB disconnect, device number 12
[  153.469931][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.477944][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.485804][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.493590][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.501341][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.508971][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.516623][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.524324][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.531990][ T7133] netlink: 'syz.0.332': attribute type 3 has an invalid length.
[  153.584578][ T7135] ip6t_srh: unknown srh match flags  4000
[  154.198275][ T7145] vxfs: WRONG superblock magic 00000000 at 1
[  154.206133][ T7145] vxfs: WRONG superblock magic 00000000 at 8
[  154.212198][ T7145] vxfs: can't find superblock.
[  154.452333][   T30] audit: type=1400 audit(1762551706.911:455): avc:  denied  { search } for  pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.486259][ T5828] libceph: connect (1)[c::]:6789 error -101
[  154.503670][   T30] audit: type=1400 audit(1762551706.911:456): avc:  denied  { search } for  pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.565637][ T5828] libceph: mon0 (1)[c::]:6789 connect error
[  154.597636][   T30] audit: type=1400 audit(1762551706.911:457): avc:  denied  { search } for  pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  154.643767][ T7144] ceph: No mds server is up or the cluster is laggy
[  154.662275][ T5880] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  154.683279][   T30] audit: type=1400 audit(1762551706.911:458): avc:  denied  { read } for  pid=5477 comm="dhcpcd" name="n101" dev="tmpfs" ino=3443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  154.758423][ T7152] openvswitch: netlink: Missing valid actions attribute.
[  154.766260][ T7152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.041512][   T30] audit: type=1400 audit(1762551706.911:459): avc:  denied  { open } for  pid=5477 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  155.122763][ T5880] usb 4-1: device descriptor read/all, error -71
[  155.139323][   T30] audit: type=1400 audit(1762551706.911:460): avc:  denied  { getattr } for  pid=5477 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  155.262477][ T7164] vlan0: entered promiscuous mode
[  155.340284][   T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  155.780730][   T10] usb 1-1: config 0 has an invalid interface number: 150 but max is 0
[  155.834360][   T10] usb 1-1: config 0 has no interface number 0
[  155.886745][ T7184] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  156.162216][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=9b.8a
[  156.175265][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.203181][ T5880] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  156.210427][   T10] usb 1-1: Product: syz
[  156.384051][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.387146][   T10] usb 1-1: Manufacturer: syz
[  156.406692][   T10] usb 1-1: SerialNumber: syz
[  156.440705][ T5896] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  156.464323][   T10] usb 1-1: config 0 descriptor??
[  156.485304][ T5880] usb 4-1: config 0 has no interfaces?
[  156.547013][ T5880] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  156.556291][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  156.556304][   T30] audit: type=1400 audit(1762551709.011:463): avc:  denied  { add_name } for  pid=7150 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.597616][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.606163][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.628616][ T5880] usb 4-1: config 0 descriptor??
[  156.657193][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.667024][   T30] audit: type=1400 audit(1762551709.011:464): avc:  denied  { create } for  pid=7150 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  156.695409][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  156.695563][   T30] audit: type=1400 audit(1762551709.011:465): avc:  denied  { write } for  pid=7150 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  156.739773][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.760035][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.779382][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  156.796253][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.804877][    T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  156.816089][ T5896] usb 2-1: Product: syz
[  156.932049][   T30] audit: type=1400 audit(1762551709.011:466): avc:  denied  { append } for  pid=7150 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.475439][    T9] usb 3-1: device descriptor read/64, error -71
[  157.672434][ T7200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.337'.
[  157.687413][   T30] audit: type=1400 audit(1762551709.171:467): avc:  denied  { remove_name } for  pid=7195 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.821854][    T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  157.843241][ T5896] usb 2-1: Manufacturer: syz
[  157.847899][ T5896] usb 2-1: SerialNumber: syz
[  157.878910][   T30] audit: type=1400 audit(1762551709.171:468): avc:  denied  { unlink } for  pid=7195 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3476 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  157.886503][ T5896] usb 2-1: config 0 descriptor??
[  158.171314][   T10] cdc_subset 1-1:0.150: probe with driver cdc_subset failed with error -71
[  158.250262][   T10] usb 1-1: USB disconnect, device number 18
[  158.444950][ T7215] IPVS: fo: FWM 3 0x00000003 - no destination available
[  159.115970][ T7231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'.
[  159.164409][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'.
[  159.331243][ T5896] snd-usb-6fire 2-1:0.0: unable to receive device firmware state.
[  159.348044][ T5896] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -110
[  159.691641][   T30] audit: type=1400 audit(1762551712.151:469): avc:  denied  { mount } for  pid=7240 comm="syz.1.355" name="/" dev="hugetlbfs" ino=14716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  159.879703][ T5896] usb 2-1: USB disconnect, device number 17
[  159.992054][ T7245] netlink: 44 bytes leftover after parsing attributes in process `syz.4.356'.
[  160.049556][  T977] usb 4-1: USB disconnect, device number 14
[  160.286963][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'.
[  160.710580][ T5896] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  161.090391][ T5896] usb 2-1: Using ep0 maxpacket: 8
[  161.117889][ T7261] batadv_slave_1: entered promiscuous mode
[  161.118336][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  161.133507][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.150230][ T5896] usb 2-1: Product: syz
[  161.155267][ T5896] usb 2-1: Manufacturer: syz
[  161.164709][ T5896] usb 2-1: SerialNumber: syz
[  161.201675][ T5896] usb 2-1: config 0 descriptor??
[  161.339363][ T7274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.363'.
[  161.510234][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  161.537840][ T5896] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  161.686695][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.005221][    T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  162.031214][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.042842][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.125709][    T9] usb 4-1: Product: syz
[  162.204013][    T9] usb 4-1: Manufacturer: syz
[  162.244564][    T9] usb 4-1: SerialNumber: syz
[  162.340758][    T9] cdc_mbim 4-1:1.0: skipping garbage
[  162.544146][ T7273] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  163.067167][   T30] audit: type=1400 audit(1762551715.531:470): avc:  denied  { setopt } for  pid=7295 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  163.154023][ T7247] sp0: Synchronizing with TNC
[  163.200230][ T5880] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  163.226435][ T5896] usb write operation failed. (-71)
[  163.235232][ T5896] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  163.246157][ T5896] dvbdev: DVB: registering new adapter (Terratec H7)
[  163.254020][ T5896] usb 2-1: media controller created
[  163.260290][ T5896] usb read operation failed. (-71)
[  163.267158][ T5896] usb write operation failed. (-71)
[  163.275074][ T5896] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  163.287539][ T5896] usb 2-1: USB disconnect, device number 18
[  163.350289][ T5880] usb 5-1: Using ep0 maxpacket: 16
[  163.372450][ T5880] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  163.388216][ T5880] usb 5-1: config 0 has no interface number 0
[  163.398020][ T5880] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  163.408753][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.417895][ T5880] usb 5-1: Product: syz
[  163.422403][ T5880] usb 5-1: Manufacturer: syz
[  163.427203][ T5880] usb 5-1: SerialNumber: syz
[  163.445046][ T5880] usb 5-1: config 0 descriptor??
[  163.551606][ T5880] hub 5-1:0.132: bad descriptor, ignoring hub
[  163.557754][ T5880] hub 5-1:0.132: probe with driver hub failed with error -5
[  163.577404][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input12
[  163.602295][ T7308] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  163.614949][    T9] cdc_mbim 4-1:1.0: setting tx_max = 48
[  163.940503][    T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  163.964069][    T9] wwan wwan0: port wwan0mbim0 attached
[  163.991903][   T30] audit: type=1400 audit(1762551716.461:471): avc:  denied  { read } for  pid=7306 comm="syz.2.372" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  164.028720][   T30] audit: type=1400 audit(1762551716.461:472): avc:  denied  { open } for  pid=7306 comm="syz.2.372" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  164.046491][    T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, c6:d2:bd:25:8c:7a
[  164.220064][   T30] audit: type=1400 audit(1762551716.481:473): avc:  denied  { ioctl } for  pid=7306 comm="syz.2.372" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  164.373693][ T7326] batadv_slave_0: entered promiscuous mode
[  164.543066][   T30] audit: type=1400 audit(1762551716.831:474): avc:  denied  { ioctl } for  pid=7293 comm="syz.4.369" path="socket:[14831]" dev="sockfs" ino=14831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  165.663124][ T5880] usb 4-1: USB disconnect, device number 15
[  165.674190][ T5880] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  165.710242][ T5828] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  165.868972][ T7320] batadv_slave_0: left promiscuous mode
[  165.894392][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  166.016358][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  166.061293][ T5866] usb 5-1: USB disconnect, device number 5
[  166.107028][   T30] audit: type=1400 audit(1762551718.571:475): avc:  denied  { bind } for  pid=7343 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  166.290295][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.354387][ T5880] wwan wwan0: port wwan0mbim0 disconnected
[  166.374590][ T5828] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  166.421288][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.452463][   T30] audit: type=1400 audit(1762551718.601:476): avc:  denied  { write } for  pid=7343 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  166.500650][ T5828] usb 3-1: config 0 descriptor??
[  166.516994][   T30] audit: type=1400 audit(1762551718.911:477): avc:  denied  { create } for  pid=7353 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  166.548126][ T7338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  166.655258][   T30] audit: type=1400 audit(1762551719.121:478): avc:  denied  { ioctl } for  pid=7353 comm="syz.4.380" path="socket:[14027]" dev="sockfs" ino=14027 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  166.781072][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.795734][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.903395][   T30] audit: type=1400 audit(1762551719.301:479): avc:  denied  { getopt } for  pid=7353 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  167.567708][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.700775][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.243570][    T9] usb 3-1: USB disconnect, device number 14
[  169.398101][ T7404] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  169.404830][ T7404] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  169.480998][ T7407] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.602829][   T30] audit: type=1400 audit(1762551722.071:480): avc:  denied  { getopt } for  pid=7411 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  169.849913][   T30] audit: type=1400 audit(1762551722.311:481): avc:  denied  { connect } for  pid=7411 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  170.208937][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  170.361815][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.372773][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.386881][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.417464][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.457056][    T9] usb 4-1: Product: syz
[  170.526111][    T9] usb 4-1: Manufacturer: syz
[  170.549384][    T9] usb 4-1: SerialNumber: syz
[  170.606320][    T9] cdc_mbim 4-1:1.0: skipping garbage
[  170.680821][    T9] usb 4-1: selecting invalid altsetting 1
[  171.153164][ T7427] geneve2: entered promiscuous mode
[  171.158501][ T7427] geneve2: entered allmulticast mode
[  171.823749][    T9] cdc_mbim 4-1:1.0: bind() failure
[  171.908158][   T30] audit: type=1401 audit(1762551724.371:482): op=fscreate invalid_context=DC
[  172.315747][    T9] usb 4-1: USB disconnect, device number 16
[  174.178037][   T30] audit: type=1400 audit(1762551726.641:483): avc:  denied  { connect } for  pid=7450 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  174.260980][ T7451] input: syz0 as /devices/virtual/input/input13
[  174.752745][ T7464] FAULT_INJECTION: forcing a failure.
[  174.752745][ T7464] name failslab, interval 1, probability 0, space 0, times 0
[  174.790975][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.1.405 Not tainted syzkaller #0 PREEMPT(full) 
[  174.790999][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  174.791009][ T7464] Call Trace:
[  174.791015][ T7464]  <TASK>
[  174.791021][ T7464]  dump_stack_lvl+0x16c/0x1f0
[  174.791052][ T7464]  should_fail_ex+0x512/0x640
[  174.791069][ T7464]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  174.791086][ T7464]  should_failslab+0xc2/0x120
[  174.791100][ T7464]  kmem_cache_alloc_noprof+0x75/0x6e0
[  174.791115][ T7464]  ? security_file_alloc+0x34/0x2b0
[  174.791130][ T7464]  ? security_file_alloc+0x34/0x2b0
[  174.791142][ T7464]  security_file_alloc+0x34/0x2b0
[  174.791154][ T7464]  init_file+0x93/0x4c0
[  174.791168][ T7464]  alloc_empty_file+0x73/0x1e0
[  174.791181][ T7464]  alloc_file_pseudo+0x13a/0x230
[  174.791196][ T7464]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  174.791209][ T7464]  ? alloc_fd+0x471/0x7d0
[  174.791222][ T7464]  sock_alloc_file+0x50/0x210
[  174.791238][ T7464]  __sys_socket+0x1c0/0x260
[  174.791249][ T7464]  ? __pfx___sys_socket+0x10/0x10
[  174.791260][ T7464]  ? do_user_addr_fault+0x843/0x1370
[  174.791274][ T7464]  __x64_sys_socket+0x72/0xb0
[  174.791283][ T7464]  ? lockdep_hardirqs_on+0x7c/0x110
[  174.791300][ T7464]  do_syscall_64+0xcd/0xfa0
[  174.791310][ T7464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.791321][ T7464] RIP: 0033:0x7f5ba49915e7
[  174.791331][ T7464] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.791342][ T7464] RSP: 002b:00007f5ba58a8fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  174.791352][ T7464] RAX: ffffffffffffffda RBX: 00007f5ba4be6090 RCX: 00007f5ba49915e7
[  174.791359][ T7464] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  174.791365][ T7464] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  174.791370][ T7464] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000001
[  174.791376][ T7464] R13: 00007f5ba4be6128 R14: 00007f5ba4be6090 R15: 00007ffe0eec1858
[  174.791390][ T7464]  </TASK>
[  175.628513][ T7469] overlayfs: missing 'lowerdir'
[  175.753167][   T30] audit: type=1400 audit(1762551728.221:484): avc:  denied  { map } for  pid=7475 comm="syz.1.407" path="socket:[14250]" dev="sockfs" ino=14250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  175.964913][ T7479] binder: BINDER_SET_CONTEXT_MGR already set
[  176.132914][   T30] audit: type=1400 audit(1762551728.221:485): avc:  denied  { read accept } for  pid=7475 comm="syz.1.407" path="socket:[14250]" dev="sockfs" ino=14250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  176.157983][   T30] audit: type=1400 audit(1762551728.321:486): avc:  denied  { listen } for  pid=7462 comm="syz.0.404" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  176.182845][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  176.201106][ T7479] binder: 7477:7479 ioctl 4018620d 2000000002c0 returned -16
[  176.493300][ T7487] vivid-000: disconnect
[  176.499073][ T7483] vivid-000: reconnect
[  176.541260][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  176.551198][ T5866] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  176.567880][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  176.578026][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  177.006125][ T5866] usb 1-1: SerialNumber: syz
[  177.046795][ T5866] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  177.147213][ T7496] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.412'.
[  177.753499][ T7510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.210314][ T5866] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  178.534662][ T5896] usb 1-1: USB disconnect, device number 19
[  178.585404][ T5866] usb 4-1: config 0 has an invalid interface number: 150 but max is 0
[  178.618339][ T5866] usb 4-1: config 0 has no interface number 0
[  178.856560][ T5866] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=9b.8a
[  178.865889][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.874019][ T5866] usb 4-1: Product: syz
[  178.879470][ T5866] usb 4-1: Manufacturer: syz
[  178.885270][ T5866] usb 4-1: SerialNumber: syz
[  178.892046][ T5866] usb 4-1: config 0 descriptor??
[  179.103438][ T7525] binder: BINDER_SET_CONTEXT_MGR already set
[  179.106036][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.109510][ T7525] binder: 7524:7525 ioctl 4018620d 2000000002c0 returned -16
[  179.129678][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.218748][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.416'.
[  179.559989][   T30] audit: type=1400 audit(1762551732.021:487): avc:  denied  { write } for  pid=7528 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  180.786360][ T7542] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  181.169078][ T5866] cdc_subset 4-1:0.150: probe with driver cdc_subset failed with error -71
[  181.274541][ T5866] usb 4-1: USB disconnect, device number 17
[  181.810368][ T7556] binder: BINDER_SET_CONTEXT_MGR already set
[  181.886805][ T7556] binder: 7554:7556 ioctl 4018620d 2000000002c0 returned -16
[  182.072017][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'.
[  182.085145][ T7569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=7569 comm=syz.0.434
[  182.189138][ T7573] FAULT_INJECTION: forcing a failure.
[  182.189138][ T7573] name failslab, interval 1, probability 0, space 0, times 0
[  182.219545][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: syz.4.435 Not tainted syzkaller #0 PREEMPT(full) 
[  182.219577][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  182.219588][ T7573] Call Trace:
[  182.219594][ T7573]  <TASK>
[  182.219601][ T7573]  dump_stack_lvl+0x16c/0x1f0
[  182.219635][ T7573]  should_fail_ex+0x512/0x640
[  182.219655][ T7573]  ? __kmalloc_cache_noprof+0x5f/0x780
[  182.219683][ T7573]  ? __pfx_shmem_fill_super+0x10/0x10
[  182.219705][ T7573]  should_failslab+0xc2/0x120
[  182.219725][ T7573]  ? __pfx_shmem_fill_super+0x10/0x10
[  182.219745][ T7573]  __kmalloc_cache_noprof+0x72/0x780
[  182.219770][ T7573]  ? shmem_fill_super+0xd1/0x1380
[  182.219791][ T7573]  ? lockdep_init_map_type+0x5c/0x280
[  182.219809][ T7573]  ? __pfx_shmem_fill_super+0x10/0x10
[  182.219830][ T7573]  ? shmem_fill_super+0xd1/0x1380
[  182.219850][ T7573]  shmem_fill_super+0xd1/0x1380
[  182.219874][ T7573]  ? __pfx_shmem_fill_super+0x10/0x10
[  182.219893][ T7573]  ? sget_fc+0x808/0xc20
[  182.219912][ T7573]  ? __pfx_shmem_fill_super+0x10/0x10
[  182.219933][ T7573]  get_tree_nodev+0xdd/0x190
[  182.219952][ T7573]  vfs_get_tree+0x8e/0x340
[  182.219977][ T7573]  path_mount+0x7b9/0x23a0
[  182.220002][ T7573]  ? __pfx_path_mount+0x10/0x10
[  182.220024][ T7573]  ? kmem_cache_free+0x2d4/0x6c0
[  182.220038][ T7573]  ? putname+0x154/0x1a0
[  182.220063][ T7573]  ? putname+0x154/0x1a0
[  182.220082][ T7573]  ? putname+0x154/0x1a0
[  182.220108][ T7573]  ? __x64_sys_mount+0x293/0x310
[  182.220125][ T7573]  __x64_sys_mount+0x293/0x310
[  182.220143][ T7573]  ? __pfx___x64_sys_mount+0x10/0x10
[  182.220172][ T7573]  do_syscall_64+0xcd/0xfa0
[  182.220191][ T7573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.220210][ T7573] RIP: 0033:0x7f74d0b8f6c9
[  182.220225][ T7573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.220242][ T7573] RSP: 002b:00007f74d1a5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  182.220259][ T7573] RAX: ffffffffffffffda RBX: 00007f74d0de5fa0 RCX: 00007f74d0b8f6c9
[  182.220271][ T7573] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000
[  182.220281][ T7573] RBP: 00007f74d1a5a090 R08: 0000200000000800 R09: 0000000000000000
[  182.220292][ T7573] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000002
[  182.220303][ T7573] R13: 00007f74d0de6038 R14: 00007f74d0de5fa0 R15: 00007fff546928c8
[  182.220329][ T7573]  </TASK>
[  183.030336][  T977] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  183.130302][ T5866] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  183.241078][  T977] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[  183.286411][  T977] usb 5-1: config 0 has no interface number 0
[  183.312287][ T5866] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  183.321913][  T977] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=9b.8a
[  183.334020][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.349714][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.361046][  T977] usb 5-1: Product: syz
[  183.366949][  T977] usb 5-1: Manufacturer: syz
[  183.373540][ T5866] usb 4-1: config 0 descriptor??
[  183.392857][  T977] usb 5-1: SerialNumber: syz
[  183.409969][ T5866] cp210x 4-1:0.0: cp210x converter detected
[  183.422109][  T977] usb 5-1: config 0 descriptor??
[  183.566679][ T7592] batadv_slave_1: entered promiscuous mode
[  183.616195][ T5866] usb 4-1: cp210x converter now attached to ttyUSB0
[  183.636290][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.671578][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.829905][ T5866] usb 4-1: USB disconnect, device number 18
[  184.091528][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.437'.
[  184.104021][   T30] audit: type=1400 audit(1762551736.391:488): avc:  denied  { write } for  pid=7593 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  184.265532][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  184.335594][ T5866] cp210x 4-1:0.0: device disconnected
[  184.493424][  T977] cdc_subset 5-1:0.150: probe with driver cdc_subset failed with error -71
[  184.540585][  T977] usb 5-1: USB disconnect, device number 6
[  184.782680][ T7612] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  184.789307][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  184.797097][ T7612] vhci_hcd vhci_hcd.0: Device attached
[  185.037711][ T7618] syzkaller1: entered promiscuous mode
[  185.043385][ T7618] syzkaller1: entered allmulticast mode
[  185.070057][ T7618] 9pnet_fd: Insufficient options for proto=fd
[  185.071100][   T30] audit: type=1400 audit(1762551737.531:489): avc:  denied  { mounton } for  pid=7617 comm="syz.2.449" path="/95/file0" dev="tmpfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  185.130204][  T869] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[  185.294341][   T30] audit: type=1400 audit(1762551737.761:490): avc:  denied  { ioctl } for  pid=7617 comm="syz.2.449" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  185.391569][ T7613] vhci_hcd: connection reset by peer
[  185.885719][ T6522] vhci_hcd: stop threads
[  185.890053][ T6522] vhci_hcd: release socket
[  185.895506][ T5812] Bluetooth: hci0: command 0x0406 tx timeout
[  185.902471][ T5812] Bluetooth: hci2: command 0x0405 tx timeout
[  185.909000][ T5812] Bluetooth: hci1: command 0x0406 tx timeout
[  185.915084][ T5812] Bluetooth: hci4: command 0x0406 tx timeout
[  185.921139][ T5812] Bluetooth: hci3: command 0x0406 tx timeout
[  185.964675][ T6522] vhci_hcd: disconnect device
[  186.007760][   T30] audit: type=1400 audit(1762551738.471:491): avc:  denied  { read } for  pid=7601 comm="syz.1.438" path="socket:[15732]" dev="sockfs" ino=15732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  186.204797][ T7627] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  186.239355][ T7627] x_tables: ip_tables: osf match: only valid for protocol 6
[  186.877627][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'.
[  186.935576][ T5828] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[  187.100247][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  187.300307][ T5828] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  187.341553][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.872646][    T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  187.892199][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.915869][    T9] usb 1-1: config 0 descriptor??
[  187.982875][ T5828] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  187.992328][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.004444][ T5828] usb 3-1: config 0 descriptor??
[  188.650551][   T30] audit: type=1401 audit(1762551740.741:492): op=fscreate invalid_context=DC
[  188.705729][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'.
[  188.714655][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'.
[  188.960260][ T5828] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  189.175927][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  189.188354][ T5828] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  189.212675][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  189.219580][ T5828] [drm] Initialized udl on minor 2
[  189.237094][    T9] usb 1-1: USB disconnect, device number 20
[  189.392379][ T7668] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  189.399022][ T7668] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  189.407081][ T7668] vhci_hcd vhci_hcd.0: Device attached
[  189.444095][ T5828] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  189.473157][ T5828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  189.547120][  T977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  189.597406][ T5828] usb 3-1: USB disconnect, device number 15
[  189.628066][  T977] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  189.683792][   T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  190.011115][ T7669] vhci_hcd: connection reset by peer
[  190.034073][ T6522] vhci_hcd: stop threads
[  190.040472][ T6522] vhci_hcd: release socket
[  190.053805][ T6522] vhci_hcd: disconnect device
[  190.290706][  T869] vhci_hcd: vhci_device speed not set
[  190.468375][ T7694] F2FS-fs: Conflicting test_dummy_encryption options
[  191.010284][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  191.169343][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'.
[  191.425665][ T5896] usb 1-1: Using ep0 maxpacket: 16
[  191.435962][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.447219][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.460161][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.492878][ T5896] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.600185][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.621725][ T5896] usb 1-1: config 0 descriptor??
[  192.826615][ T7683] validate_nla: 45 callbacks suppressed
[  192.826631][ T7683] netlink: 'syz.0.467': attribute type 4 has an invalid length.
[  192.833301][ T5896] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input15
[  192.870265][ T7683] netlink: 17 bytes leftover after parsing attributes in process `syz.0.467'.
[  192.907435][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[  193.131718][ T5896] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  193.215512][ T7726] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  193.303886][ T7732] sctp: [Deprecated]: syz.4.480 (pid 7732) Use of int in max_burst socket option deprecated.
[  193.303886][ T7732] Use struct sctp_assoc_value instead
[  193.753806][   T30] audit: type=1400 audit(1762551746.221:493): avc:  denied  { remount } for  pid=7735 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  193.773682][ T7737] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  193.820937][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  193.827442][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.243372][ T7750] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  194.250005][ T7750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  194.317490][ T7754] fuse: Unknown parameter ''
[  194.644206][ T7750] vhci_hcd vhci_hcd.0: Device attached
[  195.030235][   T10] vhci_hcd: vhci_device speed not set
[  195.052699][  T977] usb 1-1: USB disconnect, device number 21
[  195.069217][ T7751] vhci_hcd: connection closed
[  195.071322][   T12] vhci_hcd: stop threads
[  195.102557][   T12] vhci_hcd: release socket
[  195.134717][   T12] vhci_hcd: disconnect device
[  195.437312][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.486'.
[  197.736373][  T869] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  197.911465][  T869] usb 1-1: device descriptor read/64, error -71
[  198.320273][   T30] audit: type=1400 audit(1762551750.691:494): avc:  denied  { map } for  pid=7778 comm="syz.4.494" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  198.515624][   T30] audit: type=1400 audit(1762551750.701:495): avc:  denied  { execute } for  pid=7778 comm="syz.4.494" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  198.570202][  T869] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  198.630258][  T977] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  198.722360][  T869] usb 1-1: device descriptor read/64, error -71
[  198.791585][  T977] usb 2-1: config 0 has an invalid interface number: 157 but max is 0
[  198.810266][  T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.830495][  T869] usb usb1-port1: attempt power cycle
[  198.886714][  T977] usb 2-1: config 0 has no interface number 0
[  198.920452][  T977] usb 2-1: config 0 interface 157 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  198.998717][  T977] usb 2-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=df.a2
[  199.011366][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.019464][  T977] usb 2-1: Product: syz
[  199.038853][  T977] usb 2-1: Manufacturer: syz
[  199.066992][  T977] usb 2-1: SerialNumber: syz
[  199.227829][ T7805] batadv_slave_1: entered promiscuous mode
[  199.243528][  T869] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  199.387267][  T869] usb 1-1: device descriptor read/8, error -71
[  199.432836][  T977] usb 2-1: config 0 descriptor??
[  199.463684][  T977] ax88179_178a 2-1:0.157: probe with driver ax88179_178a failed with error -22
[  199.631109][  T869] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  199.663017][  T869] usb 1-1: device descriptor read/8, error -71
[  199.669626][ T5896] usb 2-1: USB disconnect, device number 19
[  199.801629][  T869] usb usb1-port1: unable to enumerate USB device
[  200.047072][ T7823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  200.053704][ T7823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  200.167854][ T7823] vhci_hcd vhci_hcd.0: Device attached
[  200.210273][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  200.600316][  T869] usb 39-1: new low-speed USB device number 5 using vhci_hcd
[  200.727043][ T7824] vhci_hcd: connection reset by peer
[  200.740296][ T6514] vhci_hcd: stop threads
[  200.746369][ T6514] vhci_hcd: release socket
[  200.754863][ T6514] vhci_hcd: disconnect device
[  201.079591][   T30] audit: type=1400 audit(1762551753.541:496): avc:  denied  { accept } for  pid=7846 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  201.198804][   T30] audit: type=1400 audit(1762551753.661:497): avc:  denied  { create } for  pid=7851 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  201.600172][  T977] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  202.376554][ T7857] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  202.472009][  T977] usb 1-1: Using ep0 maxpacket: 32
[  202.596378][  T977] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.608082][  T977] usb 1-1: config 0 interface 0 has no altsetting 0
[  202.615851][  T977] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  202.636037][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.650343][  T977] usb 1-1: config 0 descriptor??
[  202.668753][   T30] audit: type=1400 audit(1762551755.131:498): avc:  denied  { getopt } for  pid=7865 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  202.941861][ T7875] netlink: 'syz.3.520': attribute type 11 has an invalid length.
[  202.970474][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  203.420717][   T30] audit: type=1400 audit(1762551755.891:499): avc:  denied  { getopt } for  pid=7863 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  203.421672][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.451559][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.605106][   T10] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  203.620671][ T7854] syzkaller1: entered promiscuous mode
[  203.646526][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.648896][ T7854] syzkaller1: entered allmulticast mode
[  203.680619][   T10] usb 3-1: Product: syz
[  203.682254][  T977] lg-g15 0003:046D:C225.0006: item fetching failed at offset 0/6
[  203.692388][   T10] usb 3-1: Manufacturer: syz
[  203.697103][   T10] usb 3-1: SerialNumber: syz
[  203.717879][  T977] lg-g15 0003:046D:C225.0006: probe with driver lg-g15 failed with error -22
[  203.719784][   T10] usb 3-1: config 0 descriptor??
[  203.764602][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[  203.773519][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[  203.931686][    T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  204.501413][   T48] usb 1-1: USB disconnect, device number 26
[  204.501631][   T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  204.585096][    T9] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.671027][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  204.695606][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  204.701335][ T7862] dib0700: tx buffer length is larger than 4. Not supported.
[  204.717842][ T7889] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  204.724469][ T7889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  204.733779][ T7889] vhci_hcd vhci_hcd.0: Device attached
[  204.735460][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.745383][   T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  204.760430][   T30] audit: type=1400 audit(1762551757.201:500): avc:  denied  { bind } for  pid=7861 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  204.760589][    T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00
[  204.789486][   T10] usb 3-1: media controller created
[  204.789948][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.803724][ T7893] FAULT_INJECTION: forcing a failure.
[  204.803724][ T7893] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  204.808831][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  204.816895][   T30] audit: type=1400 audit(1762551757.201:501): avc:  denied  { listen } for  pid=7861 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  204.844774][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.847231][    T9] usb 2-1: config 0 descriptor??
[  204.855742][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.4.527 Not tainted syzkaller #0 PREEMPT(full) 
[  204.855767][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  204.855776][ T7893] Call Trace:
[  204.855781][ T7893]  <TASK>
[  204.855787][ T7893]  dump_stack_lvl+0x16c/0x1f0
[  204.855814][ T7893]  should_fail_ex+0x512/0x640
[  204.855835][ T7893]  _copy_from_iter+0x29f/0x1720
[  204.855856][ T7893]  ? __alloc_skb+0x200/0x380
[  204.855875][ T7893]  ? __pfx__copy_from_iter+0x10/0x10
[  204.855893][ T7893]  ? netlink_autobind.isra.0+0x158/0x370
[  204.855922][ T7893]  netlink_sendmsg+0x820/0xdd0
[  204.855946][ T7893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.855975][ T7893]  ____sys_sendmsg+0xa98/0xc70
[  204.855990][ T7893]  ? copy_msghdr_from_user+0x10a/0x160
[  204.856009][ T7893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.856033][ T7893]  ___sys_sendmsg+0x134/0x1d0
[  204.856054][ T7893]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.856071][ T7893]  ? __lock_acquire+0x622/0x1c90
[  204.856119][ T7893]  __sys_sendmsg+0x16d/0x220
[  204.856150][ T7893]  ? __pfx___sys_sendmsg+0x10/0x10
[  204.856182][ T7893]  do_syscall_64+0xcd/0xfa0
[  204.856198][ T7893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.856213][ T7893] RIP: 0033:0x7f74d0b8f6c9
[  204.856225][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.856239][ T7893] RSP: 002b:00007f74d1a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.856253][ T7893] RAX: ffffffffffffffda RBX: 00007f74d0de5fa0 RCX: 00007f74d0b8f6c9
[  204.856263][ T7893] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007
[  204.856272][ T7893] RBP: 00007f74d1a5a090 R08: 0000000000000000 R09: 0000000000000000
[  204.856281][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.856305][ T7893] R13: 00007f74d0de6038 R14: 00007f74d0de5fa0 R15: 00007fff546928c8
[  204.856329][ T7893]  </TASK>
[  205.176521][ T7890] vhci_hcd: connection closed
[  205.179344][   T13] vhci_hcd: stop threads
[  205.189376][   T13] vhci_hcd: release socket
[  205.194409][   T13] vhci_hcd: disconnect device
[  205.222979][   T10] DVB: Unable to find symbol dib7000p_attach()
[  205.229156][   T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  205.308598][   T10] rc_core: IR keymap rc-dib0700-rc5 not found
[  205.318659][   T10] Registered IR keymap rc-empty
[  205.324263][   T10] dvb-usb: could not initialize remote control.
[  205.331051][   T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  205.652725][   T10] usb 3-1: USB disconnect, device number 16
[  205.700062][   T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  205.730402][  T869] vhci_hcd: vhci_device speed not set
[  205.785561][    T9] hid (null): invalid report_size 29535
[  205.796873][    T9] hid (null): nested delimiters
[  205.806433][    T9] hid (null): global environment stack underflow
[  205.838739][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.853483][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.865350][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.880541][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.894738][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.936035][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.957393][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  205.978453][   T30] audit: type=1400 audit(1762551758.431:502): avc:  denied  { read } for  pid=7911 comm="syz.2.533" path="socket:[16330]" dev="sockfs" ino=16330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  205.986839][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  206.035683][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  206.052187][    T9] asus 0003:0B05:1A30.0007: unknown main item tag 0x0
[  206.069751][    T9] asus 0003:0B05:1A30.0007: invalid report_size 29535
[  206.094859][    T9] asus 0003:0B05:1A30.0007: item 0 2 1 7 parsing failed
[  206.211893][    T9] asus 0003:0B05:1A30.0007: Asus hid parse failed: -22
[  206.223325][    T9] asus 0003:0B05:1A30.0007: probe with driver asus failed with error -22
[  206.238178][    T9] usb 2-1: USB disconnect, device number 20
[  207.238281][  T869] libceph: connect (1)[c::]:6789 error -101
[  207.248308][  T869] libceph: mon0 (1)[c::]:6789 connect error
[  207.276508][ T7931] ceph: No mds server is up or the cluster is laggy
[  207.298021][ T7931] ALSA: mixer_oss: invalid OSS volume 'et/ip6_flowlabel'
[  207.390212][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  207.912252][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  207.921340][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  207.933351][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.959386][    T9] usb 2-1: config 0 descriptor??
[  208.389384][   T30] audit: type=1400 audit(1762551760.851:503): avc:  denied  { ioctl } for  pid=7948 comm="syz.0.543" path="socket:[17420]" dev="sockfs" ino=17420 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  208.413945][    C1] vkms_vblank_simulate: vblank timer overrun
[  208.486737][   T30] audit: type=1400 audit(1762551760.851:504): avc:  denied  { module_request } for  pid=7948 comm="syz.0.543" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  208.777825][ T7958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[  208.784453][ T7958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  208.801760][ T7958] vhci_hcd vhci_hcd.0: Device attached
[  209.041060][    T9] usb 39-1: new low-speed USB device number 6 using vhci_hcd
[  209.389421][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.398134][ T7959] vhci_hcd: connection reset by peer
[  209.418760][ T6522] vhci_hcd: stop threads
[  209.425429][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.438112][ T6522] vhci_hcd: release socket
[  209.447653][ T6522] vhci_hcd: disconnect device
[  209.539964][   T30] audit: type=1400 audit(1762551762.001:505): avc:  denied  { execute } for  pid=7979 comm="syz.0.549" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  209.565999][    C1] vkms_vblank_simulate: vblank timer overrun
[  209.624701][ T7980] netlink: 'syz.0.549': attribute type 1 has an invalid length.
[  209.651624][  T869] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  209.729238][ T7980] bond1: (slave bridge2): making interface the new active one
[  209.770869][ T7980] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  209.840149][  T869] usb 3-1: Using ep0 maxpacket: 32
[  209.853137][  T869] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  209.862872][  T869] usb 3-1: config 0 has no interface number 0
[  209.870672][  T869] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  209.879779][  T869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.887794][  T869] usb 3-1: Product: syz
[  209.893160][  T869] usb 3-1: Manufacturer: syz
[  209.897783][  T869] usb 3-1: SerialNumber: syz
[  209.912020][  T869] usb 3-1: config 0 descriptor??
[  209.932036][  T869] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  210.196318][  T869] usb 3-1: qt2_attach - failed to power on unit: -71
[  210.204330][  T869] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[  210.262668][  T869] usb 3-1: USB disconnect, device number 17
[  210.919001][   T30] audit: type=1804 audit(1762551763.001:506): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.552" name="/newroot/125/file0" dev="tmpfs" ino=664 res=1 errno=0
[  211.213878][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  211.266560][ T5828] usb 2-1: USB disconnect, device number 21
[  211.414516][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  211.444347][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.460223][   T10] usb 4-1: Product: syz
[  211.464574][   T10] usb 4-1: Manufacturer: syz
[  211.469200][   T10] usb 4-1: SerialNumber: syz
[  211.880635][   T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  211.935553][ T5921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  212.027985][ T8003] loop8: detected capacity change from 0 to 7
[  212.038627][ T8003]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  212.046242][ T8003] loop8: partition table partially beyond EOD, truncated
[  212.055950][ T8003] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  212.200917][ T8003] loop8: p2 start 956478 is beyond EOD, truncated
[  212.395090][   T10] usb 4-1: USB disconnect, device number 19
[  212.970721][ T8015] binder: BINDER_SET_CONTEXT_MGR already set
[  212.977588][ T8015] binder: 8014:8015 ioctl 4018620d 2000000002c0 returned -16
[  213.014849][ T5921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  213.046352][ T5921] ath9k_htc: Failed to initialize the device
[  213.144799][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  213.208058][ T8017] xt_l2tp: missing protocol rule (udp|l2tpip)
[  213.304242][ T8022] overlayfs: conflicting options: nfs_export=on,index=off
[  213.340723][   T30] audit: type=1326 audit(1762551765.801:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  213.399096][   T30] audit: type=1326 audit(1762551765.801:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  213.500290][   T30] audit: type=1326 audit(1762551765.801:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  213.607342][   T30] audit: type=1326 audit(1762551765.801:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  213.636083][   T30] audit: type=1326 audit(1762551765.801:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  213.934902][   T30] audit: type=1326 audit(1762551765.801:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  214.097389][   T30] audit: type=1326 audit(1762551765.831:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  214.121537][   T30] audit: type=1326 audit(1762551765.831:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  214.306943][   T30] audit: type=1326 audit(1762551765.831:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  214.310219][    T9] vhci_hcd: vhci_device speed not set
[  214.331753][   T30] audit: type=1326 audit(1762551765.841:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  214.369893][   T30] audit: type=1326 audit(1762551765.841:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  215.792858][ T8065] xt_l2tp: missing protocol rule (udp|l2tpip)
[  218.542600][ T8102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=8102 comm=syz.3.584
[  218.792553][ T8105] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  219.366928][ T8109] FAULT_INJECTION: forcing a failure.
[  219.366928][ T8109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.389303][ T8109] CPU: 1 UID: 0 PID: 8109 Comm: syz.0.586 Not tainted syzkaller #0 PREEMPT(full) 
[  219.389328][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  219.389338][ T8109] Call Trace:
[  219.389344][ T8109]  <TASK>
[  219.389351][ T8109]  dump_stack_lvl+0x16c/0x1f0
[  219.389383][ T8109]  should_fail_ex+0x512/0x640
[  219.389408][ T8109]  _copy_from_user+0x2e/0xd0
[  219.389431][ T8109]  copy_msghdr_from_user+0x98/0x160
[  219.389461][ T8109]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  219.389496][ T8109]  ___sys_sendmsg+0xfe/0x1d0
[  219.389520][ T8109]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.389541][ T8109]  ? __lock_acquire+0x622/0x1c90
[  219.389599][ T8109]  __sys_sendmsg+0x16d/0x220
[  219.389622][ T8109]  ? __pfx___sys_sendmsg+0x10/0x10
[  219.389661][ T8109]  do_syscall_64+0xcd/0xfa0
[  219.389680][ T8109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.389696][ T8109] RIP: 0033:0x7f1320d8f6c9
[  219.389710][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.389727][ T8109] RSP: 002b:00007f1321b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.389748][ T8109] RAX: ffffffffffffffda RBX: 00007f1320fe5fa0 RCX: 00007f1320d8f6c9
[  219.389759][ T8109] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  219.389769][ T8109] RBP: 00007f1321b3f090 R08: 0000000000000000 R09: 0000000000000000
[  219.389779][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.389789][ T8109] R13: 00007f1320fe6038 R14: 00007f1320fe5fa0 R15: 00007ffc9f9212f8
[  219.389813][ T8109]  </TASK>
[  220.188462][ T8123] xt_l2tp: missing protocol rule (udp|l2tpip)
[  220.760202][   T48] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  220.832199][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  220.940224][   T48] usb 4-1: Using ep0 maxpacket: 16
[  220.950223][   T48] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  220.962024][   T48] usb 4-1: config 0 has no interface number 0
[  220.987286][   T48] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  221.000234][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.020654][   T48] usb 4-1: Product: syz
[  221.024927][   T48] usb 4-1: Manufacturer: syz
[  221.033988][    T9] usb 2-1: Using ep0 maxpacket: 8
[  221.033997][   T48] usb 4-1: SerialNumber: syz
[  221.039484][   T48] usb 4-1: config 0 descriptor??
[  221.073180][   T48] hub 4-1:0.132: bad descriptor, ignoring hub
[  221.079448][   T48] hub 4-1:0.132: probe with driver hub failed with error -5
[  221.080173][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  221.090026][   T48] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input17
[  221.140211][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.149942][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.210193][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.253779][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.309708][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.616502][ T8146] batadv_slave_0: entered promiscuous mode
[  222.109225][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  222.123955][    T9] usbtmc 2-1:16.0: can't read capabilities
[  222.421925][ T5828] usb 2-1: USB disconnect, device number 22
[  223.476991][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  223.477009][   T30] audit: type=1400 audit(1762551775.441:528): avc:  denied  { setopt } for  pid=8130 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  223.568878][ T8147] batadv_slave_0: left promiscuous mode
[  223.604140][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'.
[  223.613043][ T8169] netlink: 348 bytes leftover after parsing attributes in process `syz.0.601'.
[  223.622138][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'.
[  223.630962][ T8169] netlink: 348 bytes leftover after parsing attributes in process `syz.0.601'.
[  223.639972][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'.
[  224.099724][ T5866] usb 4-1: USB disconnect, device number 20
[  224.332536][ T8174] xt_l2tp: missing protocol rule (udp|l2tpip)
[  226.390259][ T8192] Invalid ELF header magic: != ELF
[  226.479213][   T30] audit: type=1400 audit(1762551778.851:529): avc:  denied  { module_load } for  pid=8184 comm="syz.0.607" path=2F6D656D66643AFB2261268F65118CD634F920202864656C6574656429 dev="hugetlbfs" ino=18014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1
[  226.690549][ T8185] IPVS: persistence engine module ip_vs_pe_ not found
[  226.763496][  T977] IPVS: starting estimator thread 0...
[  226.844324][ T8198] loop8: detected capacity change from 0 to 7
[  226.859397][ T8198]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  226.868116][ T8198] loop8: partition table partially beyond EOD, truncated
[  226.870157][ T8200] IPVS: using max 47 ests per chain, 112800 per kthread
[  226.878532][ T8198] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  226.980617][ T8198] loop8: p2 start 956478 is beyond EOD, truncated
[  227.543007][ T8213] SELinux:  Context � is not valid (left unmapped).
[  228.243968][   T30] audit: type=1400 audit(1762551780.711:530): avc:  denied  { read } for  pid=8229 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  228.410602][   T48] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  228.499448][ T8236] xt_l2tp: missing protocol rule (udp|l2tpip)
[  228.514457][ T8241] FAULT_INJECTION: forcing a failure.
[  228.514457][ T8241] name failslab, interval 1, probability 0, space 0, times 0
[  228.532564][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT(full) 
[  228.532587][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  228.532596][ T8241] Call Trace:
[  228.532602][ T8241]  <TASK>
[  228.532608][ T8241]  dump_stack_lvl+0x16c/0x1f0
[  228.532638][ T8241]  should_fail_ex+0x512/0x640
[  228.532651][ T8241]  ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[  228.532665][ T8241]  should_failslab+0xc2/0x120
[  228.532677][ T8241]  __kmalloc_node_track_caller_noprof+0xde/0x8a0
[  228.532689][ T8241]  ? kvasprintf_const+0x66/0x1a0
[  228.532706][ T8241]  ? kvasprintf+0xbc/0x160
[  228.532718][ T8241]  kvasprintf+0xbc/0x160
[  228.532731][ T8241]  ? __pfx_kvasprintf+0x10/0x10
[  228.532746][ T8241]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  228.532762][ T8241]  ? __debug_object_init+0x2de/0x3d0
[  228.532780][ T8241]  kvasprintf_const+0x66/0x1a0
[  228.532795][ T8241]  kobject_set_name_vargs+0x5a/0x140
[  228.532807][ T8241]  dev_set_name+0xc7/0x100
[  228.532822][ T8241]  ? __pfx_dev_set_name+0x10/0x10
[  228.532837][ T8241]  ? lockdep_init_map_type+0x5c/0x280
[  228.532848][ T8241]  ? __init_waitqueue_head+0xca/0x150
[  228.532863][ T8241]  wakeup_source_device_create+0x204/0x2e0
[  228.532878][ T8241]  wakeup_source_sysfs_add+0x1c/0x90
[  228.532891][ T8241]  wakeup_source_register+0x154/0x3e0
[  228.532903][ T8241]  ep_create_wakeup_source+0x1dd/0x2e0
[  228.532915][ T8241]  ? __pfx_ep_create_wakeup_source+0x10/0x10
[  228.532929][ T8241]  ? do_epoll_ctl+0x1565/0x3790
[  228.532943][ T8241]  do_epoll_ctl+0x1f60/0x3790
[  228.532961][ T8241]  ? __pfx_do_epoll_ctl+0x10/0x10
[  228.532971][ T8241]  ? find_held_lock+0x2b/0x80
[  228.532983][ T8241]  ? __might_fault+0xe3/0x190
[  228.532998][ T8241]  ? __might_fault+0xe3/0x190
[  228.533019][ T8241]  ? __x64_sys_epoll_ctl+0x15c/0x1e0
[  228.533030][ T8241]  __x64_sys_epoll_ctl+0x15c/0x1e0
[  228.533041][ T8241]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  228.533058][ T8241]  do_syscall_64+0xcd/0xfa0
[  228.533068][ T8241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.533079][ T8241] RIP: 0033:0x7f9d7f18f6c9
[  228.533088][ T8241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.533098][ T8241] RSP: 002b:00007f9d800f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  228.533108][ T8241] RAX: ffffffffffffffda RBX: 00007f9d7f3e6090 RCX: 00007f9d7f18f6c9
[  228.533115][ T8241] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007
[  228.533120][ T8241] RBP: 00007f9d800f1090 R08: 0000000000000000 R09: 0000000000000000
[  228.533127][ T8241] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  228.533133][ T8241] R13: 00007f9d7f3e6128 R14: 00007f9d7f3e6090 R15: 00007fff887ce4a8
[  228.533147][ T8241]  </TASK>
[  228.641915][   T48] usb 5-1: Using ep0 maxpacket: 8
[  228.857171][   T48] usb 5-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config
[  228.867476][   T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.880195][ T5866] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  228.918258][   T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.926647][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'.
[  229.055458][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.082039][   T48] usb 5-1: Product: syz
[  229.086658][   T48] usb 5-1: Manufacturer: syz
[  229.096496][   T48] usb 5-1: SerialNumber: syz
[  229.111418][ T5866] usb 2-1: config 0 has an invalid interface number: 150 but max is 0
[  229.119662][ T5866] usb 2-1: config 0 has no interface number 0
[  229.129079][ T5866] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=9b.8a
[  229.149267][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.169873][ T5866] usb 2-1: Product: syz
[  229.186548][ T5866] usb 2-1: Manufacturer: syz
[  229.196634][ T5866] usb 2-1: SerialNumber: syz
[  229.222106][ T5866] usb 2-1: config 0 descriptor??
[  229.447709][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.456381][   T48] usb 5-1: cannot find UAC_HEADER
[  229.510510][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.706948][ T8252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.620'.
[  229.917800][   T48] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  230.066286][ T5866] cdc_subset 2-1:0.150: probe with driver cdc_subset failed with error -71
[  230.133020][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  230.162675][   T48] usb 5-1: USB disconnect, device number 7
[  230.192596][ T5866] usb 2-1: USB disconnect, device number 23
[  232.207125][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2040
[  232.377503][ T8292] ip6t_rpfilter: unknown options
[  232.550307][   T30] audit: type=1400 audit(1762551785.001:531): avc:  denied  { connect } for  pid=8290 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  232.630887][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  232.770321][ T5828] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  232.790169][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  232.797292][ T5866] usb 3-1: config 129 has an invalid interface number: 184 but max is 0
[  232.807106][ T5866] usb 3-1: config 129 has no interface number 0
[  232.814200][ T5866] usb 3-1: config 129 interface 184 has no altsetting 0
[  232.826041][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=34.7d
[  232.836360][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.860413][ T5866] usb 3-1: Product: syz
[  232.864971][ T5866] usb 3-1: Manufacturer: syz
[  232.869803][ T5866] usb 3-1: SerialNumber: syz
[  232.923650][ T5828] usb 2-1: Using ep0 maxpacket: 16
[  232.936442][ T5828] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  232.945347][ T5828] usb 2-1: config 0 has no interface number 0
[  232.999055][ T5828] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  233.010434][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.018484][ T5828] usb 2-1: Product: syz
[  233.023885][ T5828] usb 2-1: Manufacturer: syz
[  233.028515][ T5828] usb 2-1: SerialNumber: syz
[  233.039953][ T5828] usb 2-1: config 0 descriptor??
[  233.047747][ T5828] hub 2-1:0.132: bad descriptor, ignoring hub
[  233.057057][ T5828] hub 2-1:0.132: probe with driver hub failed with error -5
[  233.068963][ T5828] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input19
[  233.106394][ T5866] gspca_main: vc032x-2.14.0 probing 046d:0897
[  233.118960][ T5866] gspca_vc032x: reg_r err -71
[  233.132786][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.141807][ T6469] Bluetooth: hci5: Frame reassembly failed (-84)
[  233.149216][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.159732][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.165151][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.170949][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.176310][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.181780][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.187127][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.192602][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.197932][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.203807][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.209192][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.303054][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.651926][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.657299][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.667952][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.673410][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.678772][ T5866] gspca_vc032x: I2c Bus Busy Wait 00
[  233.684474][ T5866] gspca_vc032x: Unknown sensor...
[  233.690198][ T5866] vc032x 3-1:129.184: probe with driver vc032x failed with error -22
[  233.743384][ T5866] usb 3-1: USB disconnect, device number 18
[  233.759738][ T8302] batadv_slave_0: entered promiscuous mode
[  234.234383][ T8305] tmpfs: Bad value for 'nr_inodes'
[  234.953686][ T8313] xt_l2tp: missing protocol rule (udp|l2tpip)
[  235.190304][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  235.196804][ T5810] Bluetooth: hci5: command 0x1003 tx timeout
[  235.380432][   T30] audit: type=1400 audit(1762551787.841:532): avc:  denied  { shutdown } for  pid=8329 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  235.435736][   T30] audit: type=1400 audit(1762551787.901:533): avc:  denied  { ioctl } for  pid=8329 comm="syz.4.643" path="socket:[19532]" dev="sockfs" ino=19532 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  235.460345][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.490536][   T30] audit: type=1400 audit(1762551787.941:534): avc:  denied  { read } for  pid=8329 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  235.504928][ T8303] batadv_slave_0: left promiscuous mode
[  235.611830][ T8335] tipc: Started in network mode
[  235.617010][ T8335] tipc: Node identity ac14141b, cluster identity 4711
[  235.627870][ T8335] tipc: New replicast peer: 255.255.255.255
[  235.635439][ T8335] tipc: Enabled bearer <udp:syz2>, priority 10
[  236.099513][ T8339] syzkaller1: entered promiscuous mode
[  236.105458][ T8339] syzkaller1: entered allmulticast mode
[  236.130911][ T5866] usb 2-1: USB disconnect, device number 24
[  237.082174][   T30] audit: type=1400 audit(1762551789.011:535): avc:  denied  { ioctl } for  pid=8346 comm="syz.1.649" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  237.140908][ T5828] tipc: Node number set to 2886997019
[  237.165942][ T8353] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  237.174222][ T8353] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  237.416159][ T8361] Bluetooth: MGMT ver 1.23
[  238.085944][ T8366] FAULT_INJECTION: forcing a failure.
[  238.085944][ T8366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.100824][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT(full) 
[  238.100848][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.100857][ T8366] Call Trace:
[  238.100862][ T8366]  <TASK>
[  238.100868][ T8366]  dump_stack_lvl+0x16c/0x1f0
[  238.100897][ T8366]  should_fail_ex+0x512/0x640
[  238.100919][ T8366]  _copy_from_user+0x2e/0xd0
[  238.100938][ T8366]  copy_from_sockptr_offset+0x15c/0x1b0
[  238.100958][ T8366]  ? __pfx_copy_from_sockptr_offset+0x10/0x10
[  238.100979][ T8366]  ? bpf_lsm_capable+0x9/0x10
[  238.100995][ T8366]  ? security_capable+0x7e/0x260
[  238.101021][ T8366]  do_ip6t_set_ctl+0x479/0xb00
[  238.101040][ T8366]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  238.101072][ T8366]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  238.101092][ T8366]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  238.101121][ T8366]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  238.101148][ T8366]  nf_setsockopt+0x8d/0xf0
[  238.101178][ T8366]  ipv6_setsockopt+0x135/0x170
[  238.101200][ T8366]  tcp_setsockopt+0xa7/0x100
[  238.101222][ T8366]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  238.101248][ T8366]  do_sock_setsockopt+0xf3/0x1d0
[  238.101277][ T8366]  __sys_setsockopt+0x1a0/0x230
[  238.101301][ T8366]  __x64_sys_setsockopt+0xbd/0x160
[  238.101319][ T8366]  ? do_syscall_64+0x91/0xfa0
[  238.101334][ T8366]  ? lockdep_hardirqs_on+0x7c/0x110
[  238.101359][ T8366]  do_syscall_64+0xcd/0xfa0
[  238.101375][ T8366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.101391][ T8366] RIP: 0033:0x7f1320d8f6c9
[  238.101405][ T8366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.101421][ T8366] RSP: 002b:00007f131efd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  238.101436][ T8366] RAX: ffffffffffffffda RBX: 00007f1320fe6180 RCX: 00007f1320d8f6c9
[  238.101447][ T8366] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  238.101457][ T8366] RBP: 00007f131efd5090 R08: 00000000000003f8 R09: 0000000000000000
[  238.101466][ T8366] R10: 000020000001b1c0 R11: 0000000000000246 R12: 0000000000000001
[  238.101476][ T8366] R13: 00007f1320fe6218 R14: 00007f1320fe6180 R15: 00007ffc9f9212f8
[  238.101498][ T8366]  </TASK>
[  238.319008][    C0] vkms_vblank_simulate: vblank timer overrun
[  239.046551][ T8375] loop8: detected capacity change from 0 to 7
[  239.059703][ T8375]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  239.116064][ T8375] loop8: partition table partially beyond EOD, truncated
[  239.215096][ T8375] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  239.225077][ T8375] loop8: p2 start 956478 is beyond EOD, truncated
[  239.391725][ T8382] netlink: 'syz.4.657': attribute type 4 has an invalid length.
[  239.735599][ T5813] udevd[5813]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  241.041514][ T8405] �����2: renamed from veth0_vlan (while UP)
[  242.104058][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2035
[  242.230178][   T48] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  242.350791][  T977] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  242.438168][   T48] usb 5-1: config 0 has an invalid interface number: 46 but max is 0
[  242.470157][   T48] usb 5-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  242.513342][   T48] usb 5-1: config 0 has no interface number 0
[  242.519466][   T48] usb 5-1: config 0 interface 46 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85
[  242.526011][ T8431] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  242.620308][  T977] usb 4-1: Using ep0 maxpacket: 32
[  242.792596][  T977] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  242.828372][   T48] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x85 has invalid maxpacket 26187, setting to 64
[  242.841146][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.871060][  T977] usb 4-1: config 0 descriptor??
[  242.876977][   T48] usb 5-1: config 0 interface 46 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.895095][  T977] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  242.931052][   T48] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  242.943687][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.969389][   T48] usb 5-1: Product: syz
[  242.976244][ T5921] libceph: connect (1)[c::]:6789 error -101
[  242.984792][   T48] usb 5-1: Manufacturer: syz
[  242.990279][   T48] usb 5-1: SerialNumber: syz
[  243.005676][   T48] usb 5-1: config 0 descriptor??
[  243.076793][ T8408] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  243.076990][ T5921] libceph: mon0 (1)[c::]:6789 connect error
[  243.119350][ T8437] ceph: No mds server is up or the cluster is laggy
[  243.430406][ T5921] libceph: connect (1)[c::]:6789 error -101
[  243.436866][ T5921] libceph: mon0 (1)[c::]:6789 connect error
[  243.450323][ T5866] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  243.458130][    C1] raw-gadget.2 gadget.1: ignoring, device is not running
[  243.561580][ T8445] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  243.583092][   T30] audit: type=1400 audit(1762551796.011:536): avc:  denied  { getopt } for  pid=8407 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  243.861086][  T977] gspca_vc032x: reg_w err -110
[  243.871646][   T48] ums-karma 5-1:0.46: USB Mass Storage device detected
[  243.893322][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.902357][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.910027][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.921063][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.926449][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.940998][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.947394][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  243.983238][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.010148][ T5866] usb 2-1: device descriptor read/64, error -32
[  244.067504][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.121098][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.126796][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.205279][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.320376][ T5866] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  244.331899][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.391866][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.402639][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.408142][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.413542][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.418845][  T977] gspca_vc032x: I2c Bus Busy Wait 00
[  244.424472][  T977] gspca_vc032x: Unknown sensor...
[  244.429556][  T977] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  244.447596][  T977] usb 4-1: USB disconnect, device number 21
[  244.553561][ T5866] usb 2-1: Using ep0 maxpacket: 16
[  244.579033][   T30] audit: type=1326 audit(1762551797.041:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.602892][   T30] audit: type=1326 audit(1762551797.041:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.632001][ T5866] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  244.641875][ T5866] usb 2-1: config 0 has no interface number 0
[  244.650851][   T30] audit: type=1326 audit(1762551797.041:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.701474][ T5866] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  244.711474][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.719819][ T5866] usb 2-1: Product: syz
[  244.724261][ T5866] usb 2-1: Manufacturer: syz
[  244.729063][   T30] audit: type=1326 audit(1762551797.041:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.754760][ T5866] usb 2-1: SerialNumber: syz
[  244.761083][   T30] audit: type=1326 audit(1762551797.041:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.785639][ T5866] usb 2-1: config 0 descriptor??
[  244.791087][   T30] audit: type=1326 audit(1762551797.071:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.815350][ T5866] hub 2-1:0.132: bad descriptor, ignoring hub
[  244.821564][ T5866] hub 2-1:0.132: probe with driver hub failed with error -5
[  244.833608][ T5866] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input21
[  244.844143][   T30] audit: type=1326 audit(1762551797.071:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.873398][   T30] audit: type=1326 audit(1762551797.071:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.901825][   T30] audit: type=1326 audit(1762551797.071:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  244.963987][  T977] usb 5-1: USB disconnect, device number 8
[  245.048714][ T8457] comedi comedi0: Minor 7 could not be opened
[  245.303996][ T8461] batadv_slave_0: entered promiscuous mode
[  245.773527][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'.
[  246.132310][ T5823] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  246.142435][ T5823] Bluetooth: hci1: Injecting HCI hardware error event
[  246.152620][ T5810] Bluetooth: hci1: hardware error 0x00
[  246.493188][ T5823] Bluetooth: hci1: unexpected event for opcode 0x200c
[  246.603225][ T8478] FAULT_INJECTION: forcing a failure.
[  246.603225][ T8478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.620497][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.4.687 Not tainted syzkaller #0 PREEMPT(full) 
[  246.620526][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  246.620536][ T8478] Call Trace:
[  246.620542][ T8478]  <TASK>
[  246.620549][ T8478]  dump_stack_lvl+0x16c/0x1f0
[  246.620583][ T8478]  should_fail_ex+0x512/0x640
[  246.620608][ T8478]  _copy_from_user+0x2e/0xd0
[  246.620632][ T8478]  core_sys_select+0x2c8/0xc20
[  246.620657][ T8478]  ? __pfx_core_sys_select+0x10/0x10
[  246.620699][ T8478]  ? set_user_sigmask+0x21b/0x2b0
[  246.620720][ T8478]  ? __pfx_set_user_sigmask+0x10/0x10
[  246.620746][ T8478]  do_pselect.constprop.0+0x19f/0x1e0
[  246.620765][ T8478]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  246.620793][ T8478]  __x64_sys_pselect6+0x182/0x240
[  246.620811][ T8478]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  246.620836][ T8478]  do_syscall_64+0xcd/0xfa0
[  246.620855][ T8478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.620872][ T8478] RIP: 0033:0x7f74d0b8f6c9
[  246.620887][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.620904][ T8478] RSP: 002b:00007f74d1a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  246.620922][ T8478] RAX: ffffffffffffffda RBX: 00007f74d0de5fa0 RCX: 00007f74d0b8f6c9
[  246.620934][ T8478] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  246.620944][ T8478] RBP: 00007f74d1a5a090 R08: 0000000000000000 R09: 0000000000000000
[  246.620954][ T8478] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  246.620964][ T8478] R13: 00007f74d0de6038 R14: 00007f74d0de5fa0 R15: 00007fff546928c8
[  246.620990][ T8478]  </TASK>
[  246.881571][ T8462] batadv_slave_0: left promiscuous mode
[  247.280409][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  247.360526][ T5866] libceph: connect (1)[c::]:6789 error -101
[  247.366641][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  247.372761][   T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  247.440205][    T9] usb 3-1: Using ep0 maxpacket: 16
[  247.461967][    T9] usb 3-1: config 0 has an invalid descriptor of length 165, skipping remainder of the config
[  247.493502][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  247.521067][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  247.535019][  T977] usb 2-1: USB disconnect, device number 26
[  247.571985][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.699167][  T977] libceph: connect (1)[c::]:6789 error -101
[  247.705574][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  247.710539][    T9] usb 3-1: config 0 descriptor??
[  247.712695][   T48] usb 4-1: config 11 has an invalid interface number: 184 but max is 0
[  247.725729][   T48] usb 4-1: config 11 has no interface number 0
[  247.742543][   T48] usb 4-1: config 11 interface 184 has no altsetting 0
[  247.752801][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  247.779862][   T48] usb 4-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=6d.9a
[  247.789121][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.798569][   T48] usb 4-1: Product: syz
[  247.831498][   T48] usb 4-1: Manufacturer: syz
[  247.846798][   T48] usb 4-1: SerialNumber: syz
[  248.224753][   T48] libceph: connect (1)[c::]:6789 error -101
[  248.232396][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  248.265908][ T5810] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  248.589755][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.603951][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.634005][ T5896] usb 4-1: USB disconnect, device number 22
[  249.421243][   T48] libceph: connect (1)[c::]:6789 error -101
[  249.427483][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  249.583147][ T8482] ceph: No mds server is up or the cluster is laggy
[  249.647210][ T5896] usb 3-1: USB disconnect, device number 19
[  250.500645][ T5896] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  251.211048][ T5896] usb 3-1: Using ep0 maxpacket: 8
[  251.316603][ T5896] usb 3-1: config 0 has no interfaces?
[  251.325962][ T5896] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  251.361493][ T8536] syzkaller0: entered promiscuous mode
[  251.366992][ T8536] syzkaller0: entered allmulticast mode
[  251.584648][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.147649][ T5896] usb 3-1: config 0 descriptor??
[  253.121723][ T5921] usb 3-1: USB disconnect, device number 20
[  253.146091][ T8553] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  253.152708][ T8553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  253.160269][ T8553] vhci_hcd vhci_hcd.0: Device attached
[  253.285148][ T8554] vhci_hcd: connection closed
[  253.285319][   T12] vhci_hcd: stop threads
[  253.303182][   T12] vhci_hcd: release socket
[  253.312558][   T12] vhci_hcd: disconnect device
[  253.350926][  T977] vhci_hcd: vhci_device speed not set
[  254.820204][ T5896] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  254.970206][ T5896] usb 1-1: device descriptor read/64, error -71
[  255.269592][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  255.290021][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  255.330350][ T5896] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  255.346143][ T8579] netem: change failed
[  255.417139][ T8573] tmpfs: Bad value for 'mpol'
[  255.560117][ T5896] usb 1-1: device descriptor read/64, error -71
[  255.655986][ T8589] FAULT_INJECTION: forcing a failure.
[  255.655986][ T8589] name failslab, interval 1, probability 0, space 0, times 0
[  255.678463][ T8589] CPU: 1 UID: 0 PID: 8589 Comm: syz.3.715 Not tainted syzkaller #0 PREEMPT(full) 
[  255.678488][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.678499][ T8589] Call Trace:
[  255.678505][ T8589]  <TASK>
[  255.678511][ T8589]  dump_stack_lvl+0x16c/0x1f0
[  255.678542][ T8589]  should_fail_ex+0x512/0x640
[  255.678562][ T8589]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  255.678592][ T8589]  should_failslab+0xc2/0x120
[  255.678612][ T8589]  kmem_cache_alloc_node_noprof+0x78/0x770
[  255.678638][ T8589]  ? __alloc_skb+0x2b2/0x380
[  255.678664][ T8589]  ? __alloc_skb+0x2b2/0x380
[  255.678683][ T8589]  __alloc_skb+0x2b2/0x380
[  255.678703][ T8589]  ? __pfx___alloc_skb+0x10/0x10
[  255.678724][ T8589]  ? netlink_autobind.isra.0+0x158/0x370
[  255.678756][ T8589]  netlink_alloc_large_skb+0x69/0x140
[  255.678783][ T8589]  netlink_sendmsg+0x698/0xdd0
[  255.678813][ T8589]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.678849][ T8589]  __sys_sendto+0x4a3/0x520
[  255.678871][ T8589]  ? __pfx___sys_sendto+0x10/0x10
[  255.678899][ T8589]  ? find_held_lock+0x2b/0x80
[  255.678943][ T8589]  __x64_sys_sendto+0xe0/0x1c0
[  255.678963][ T8589]  ? do_syscall_64+0x91/0xfa0
[  255.678979][ T8589]  ? lockdep_hardirqs_on+0x7c/0x110
[  255.679006][ T8589]  do_syscall_64+0xcd/0xfa0
[  255.679024][ T8589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.679041][ T8589] RIP: 0033:0x7f9d7f19155c
[  255.679056][ T8589] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  255.679073][ T8589] RSP: 002b:00007f9d800efec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  255.679090][ T8589] RAX: ffffffffffffffda RBX: 00007f9d800effc0 RCX: 00007f9d7f19155c
[  255.679101][ T8589] RDX: 0000000000000020 RSI: 00007f9d800f0010 RDI: 0000000000000005
[  255.679111][ T8589] RBP: 0000000000000000 R08: 00007f9d800eff14 R09: 000000000000000c
[  255.679122][ T8589] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  255.679137][ T8589] R13: 00007f9d800eff68 R14: 00007f9d800f0010 R15: 0000000000000000
[  255.679161][ T8589]  </TASK>
[  255.884424][    C1] vkms_vblank_simulate: vblank timer overrun
[  255.909891][ T5896] usb usb1-port1: attempt power cycle
[  255.952059][ T8591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  256.310180][ T5896] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  256.767615][ T5896] usb 1-1: device descriptor read/8, error -71
[  257.450749][ T5896] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  257.540667][ T5896] usb 1-1: device descriptor read/8, error -71
[  257.586347][ T8616] sctp: [Deprecated]: syz.2.724 (pid 8616) Use of int in max_burst socket option deprecated.
[  257.586347][ T8616] Use struct sctp_assoc_value instead
[  257.651718][ T5896] usb usb1-port1: unable to enumerate USB device
[  257.888534][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  257.888552][   T30] audit: type=1401 audit(1762551810.351:588): op=fscreate invalid_context=DC
[  258.017458][ T8625] ip6gre1: entered promiscuous mode
[  258.035665][ T8625] ip6gre1: entered allmulticast mode
[  258.110235][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  258.194475][   T30] audit: type=1804 audit(1762551810.661:589): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.728" name="/newroot/111/file0" dev="tmpfs" ino=601 res=1 errno=0
[  258.235921][   T30] audit: type=1400 audit(1762551810.701:590): avc:  denied  { create } for  pid=8628 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  258.264059][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  258.273429][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.281460][ T5921] usb 5-1: Product: syz
[  258.285846][ T5921] usb 5-1: Manufacturer: syz
[  258.291443][ T5921] usb 5-1: SerialNumber: syz
[  258.547186][   T30] audit: type=1400 audit(1762551811.001:591): avc:  denied  { read write } for  pid=8613 comm="syz.4.723" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  258.575298][   T30] audit: type=1400 audit(1762551811.001:592): avc:  denied  { open } for  pid=8613 comm="syz.4.723" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  258.696015][   T30] audit: type=1326 audit(1762551811.141:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  258.791782][   T30] audit: type=1326 audit(1762551811.141:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  258.817748][   T30] audit: type=1326 audit(1762551811.141:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  258.841373][   T30] audit: type=1326 audit(1762551811.141:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  258.867135][   T30] audit: type=1326 audit(1762551811.151:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b8f6c9 code=0x7ffc0000
[  259.135433][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  259.168555][ T8643] xt_l2tp: missing protocol rule (udp|l2tpip)
[  259.200144][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  259.220216][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  259.261009][ T5921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  259.326772][ T5921] usb 5-1: USB disconnect, device number 9
[  259.588656][ T8656] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  259.611378][ T8656] netlink: 'syz.2.736': attribute type 3 has an invalid length.
[  260.673449][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  260.683032][ T8667] netlink: 348 bytes leftover after parsing attributes in process `syz.3.738'.
[  260.692060][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  260.700879][ T8667] netlink: 348 bytes leftover after parsing attributes in process `syz.3.738'.
[  260.709886][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  260.771679][ T8669] sctp: [Deprecated]: syz.4.741 (pid 8669) Use of int in max_burst socket option deprecated.
[  260.771679][ T8669] Use struct sctp_assoc_value instead
[  261.432252][ T8678] =======================================================
[  261.432252][ T8678] WARNING: The mand mount option has been deprecated and
[  261.432252][ T8678]          and is ignored by this kernel. Remove the mand
[  261.432252][ T8678]          option from the mount to silence this warning.
[  261.432252][ T8678] =======================================================
[  261.467142][    C1] vkms_vblank_simulate: vblank timer overrun
[  262.207681][ T8689] xt_l2tp: missing protocol rule (udp|l2tpip)
[  262.299113][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  263.434844][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  263.434858][   T30] audit: type=1400 audit(1762551815.901:611): avc:  denied  { write } for  pid=8708 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  264.849670][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  264.858655][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  264.867457][ T8721] netlink: 'syz.0.755': attribute type 14 has an invalid length.
[  264.886469][ T8728] xt_l2tp: missing protocol rule (udp|l2tpip)
[  265.345597][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.755'.
[  266.609560][   T30] audit: type=1400 audit(1762551819.071:612): avc:  denied  { map } for  pid=8735 comm="syz.3.760" path="socket:[19432]" dev="sockfs" ino=19432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  267.976529][ T8759] netlink: 'syz.1.764': attribute type 10 has an invalid length.
[  267.988409][ T8759] bridge0: port 3(batadv0) entered disabled state
[  267.995554][ T8759] batadv0: left allmulticast mode
[  268.011864][ T8759] batadv0: left promiscuous mode
[  268.022726][ T8759] bridge0: port 3(batadv0) entered disabled state
[  268.052708][   T13] Bluetooth: hci5: Frame reassembly failed (-84)
[  268.165403][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.180404][ T8764] netlink: 'syz.1.764': attribute type 10 has an invalid length.
[  268.181919][ T8759] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  268.645573][ T8764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.764'.
[  268.654618][ T8764] batadv0: entered promiscuous mode
[  268.659877][ T8764] batadv0: entered allmulticast mode
[  268.766502][ T8764] bond0: (slave batadv0): Releasing backup interface
[  268.873671][ T8764] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  270.050402][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  270.546098][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.557018][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.577942][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.594580][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.607328][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.619610][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.620228][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.628798][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.646672][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  270.657094][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  271.296772][   T30] audit: type=1400 audit(1762551823.761:613): avc:  denied  { setattr } for  pid=8790 comm="syz.1.774" path="/dev/vcs4" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  271.334083][   T30] audit: type=1400 audit(1762551823.801:614): avc:  denied  { listen } for  pid=8790 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  271.365504][   T30] audit: type=1400 audit(1762551823.801:615): avc:  denied  { accept } for  pid=8790 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  271.392634][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  271.406552][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  271.406582][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  271.406594][ T5810] Workqueue: hci2 hci_rx_work
[  271.406627][ T5810] Call Trace:
[  271.406633][ T5810]  <TASK>
[  271.406639][ T5810]  dump_stack_lvl+0x16c/0x1f0
[  271.406667][ T5810]  sysfs_warn_dup+0x7f/0xa0
[  271.406691][ T5810]  sysfs_create_dir_ns+0x24b/0x2b0
[  271.406712][ T5810]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  271.406733][ T5810]  ? find_held_lock+0x2b/0x80
[  271.406761][ T5810]  ? do_raw_spin_unlock+0x172/0x230
[  271.406782][ T5810]  kobject_add_internal+0x2c4/0x9b0
[  271.406811][ T5810]  kobject_add+0x16e/0x240
[  271.406829][ T5810]  ? __pfx_kobject_add+0x10/0x10
[  271.406851][ T5810]  ? do_raw_spin_unlock+0x172/0x230
[  271.406872][ T5810]  ? kobject_put+0xab/0x5a0
[  271.406898][ T5810]  device_add+0x288/0x1aa0
[  271.406922][ T5810]  ? __pfx_dev_set_name+0x10/0x10
[  271.406946][ T5810]  ? __pfx_device_add+0x10/0x10
[  271.406969][ T5810]  ? mgmt_send_event_skb+0x2fb/0x460
[  271.407001][ T5810]  hci_conn_add_sysfs+0x17e/0x230
[  271.407020][ T5810]  le_conn_complete_evt+0x1260/0x2150
[  271.407053][ T5810]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  271.407078][ T5810]  ? hci_event_packet+0x459/0x11c0
[  271.407112][ T5810]  hci_le_conn_complete_evt+0x23c/0x370
[  271.407143][ T5810]  hci_le_meta_evt+0x357/0x5e0
[  271.407170][ T5810]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  271.407200][ T5810]  hci_event_packet+0x685/0x11c0
[  271.407226][ T5810]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  271.407256][ T5810]  ? __pfx_hci_event_packet+0x10/0x10
[  271.407284][ T5810]  ? kcov_remote_start+0x3c9/0x6d0
[  271.407304][ T5810]  ? lockdep_hardirqs_on+0x7c/0x110
[  271.407336][ T5810]  hci_rx_work+0x2c5/0x16b0
[  271.407372][ T5810]  ? rcu_is_watching+0x12/0xc0
[  271.407401][ T5810]  process_one_work+0x9cf/0x1b70
[  271.407434][ T5810]  ? __pfx_process_one_work+0x10/0x10
[  271.407463][ T5810]  ? assign_work+0x1a0/0x250
[  271.407485][ T5810]  worker_thread+0x6c8/0xf10
[  271.407518][ T5810]  ? __pfx_worker_thread+0x10/0x10
[  271.407537][ T5810]  kthread+0x3c5/0x780
[  271.407562][ T5810]  ? __pfx_kthread+0x10/0x10
[  271.407582][ T5810]  ? rcu_is_watching+0x12/0xc0
[  271.407605][ T5810]  ? __pfx_kthread+0x10/0x10
[  271.407624][ T5810]  ret_from_fork+0x675/0x7d0
[  271.407640][ T5810]  ? __pfx_kthread+0x10/0x10
[  271.407660][ T5810]  ret_from_fork_asm+0x1a/0x30
[  271.407702][ T5810]  </TASK>
[  271.407777][ T5810] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  271.663958][ T5810] Bluetooth: hci2: failed to register connection device
[  271.692614][ T8802] binder: BINDER_SET_CONTEXT_MGR already set
[  271.698686][ T8802] binder: 8799:8802 ioctl 4018620d 2000000002c0 returned -16
[  271.866789][   T30] audit: type=1400 audit(1762551824.331:616): avc:  denied  { read } for  pid=8808 comm="syz.0.780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  272.189448][   T30] audit: type=1400 audit(1762551824.361:617): avc:  denied  { open } for  pid=8808 comm="syz.0.780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  272.500168][   T48] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  272.521739][ T8822] netlink: 'syz.4.781': attribute type 1 has an invalid length.
[  272.660165][   T48] usb 1-1: Using ep0 maxpacket: 16
[  272.828676][ T8831] gretap1: entered promiscuous mode
[  272.854337][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.865426][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.889300][   T48] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  272.926629][   T30] audit: type=1400 audit(1762551825.391:618): avc:  denied  { connect } for  pid=8826 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  273.002369][   T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.025263][   T48] usb 1-1: config 0 descriptor??
[  273.047140][   T48] xbox_remote_probe: endpoint_in message size==0?
[  273.284494][   T48] usbhid 1-1:0.0: can't add hid device: -71
[  273.290760][   T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  273.391692][   T48] usb 1-1: USB disconnect, device number 31
[  273.516468][ T8840] tipc: Started in network mode
[  273.521496][ T8840] tipc: Node identity ac14141b, cluster identity 4711
[  273.529744][ T8840] tipc: New replicast peer: 255.255.255.255
[  273.537087][ T8840] tipc: Enabled bearer <udp:syz2>, priority 10
[  273.548053][ T5866] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  273.716351][ T5866] usb 2-1: config 1 has an invalid interface number: 164 but max is 2
[  273.851606][ T5866] usb 2-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  273.869142][ T5866] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  273.878994][ T5866] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  273.889355][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.898657][ T5866] usb 2-1: config 1 has no interface number 0
[  273.906953][ T5866] usb 2-1: config 1 interface 164 altsetting 154 endpoint 0x6 has invalid maxpacket 11890, setting to 1024
[  273.920538][ T5866] usb 2-1: config 1 interface 164 altsetting 154 bulk endpoint 0x6 has invalid maxpacket 1024
[  273.932089][ T5866] usb 2-1: config 1 interface 164 altsetting 154 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  273.945682][ T5866] usb 2-1: config 1 interface 164 has no altsetting 0
[  273.954976][ T5866] usb 2-1: New USB device found, idVendor=0b3c, idProduct=c005, bcdDevice=f8.62
[  273.965454][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.974598][ T5866] usb 2-1: Product: ꩤᨉṸꗏ艀拷ᒍᬌ꿪ᚵ쬝䢄ʬ㰖ᡴ຋崮뒹ɢ騫錦魉₻롌ۄ⾯滻톫㴸䙴๩卮嚡炘뜌첝ᱝ⨃ꂐ㨡㔔胅厵ܫꧦ奻䥶媝閔눩푬଍㪻⣼닍⮻撉ꆶ셢⭻㎺醆ꦀ⿶戔夙䑒퉚꼭뜘혥㋬犃ጶ씃弛뱒꾃䬾㵘자虭䝚酹췭⿆짲
[  274.004406][ T5866] usb 2-1: Manufacturer: ఇ
[  274.010154][ T5866] usb 2-1: SerialNumber: syz
[  274.018230][ T8836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  274.404505][ T8849] xt_l2tp: missing protocol rule (udp|l2tpip)
[  274.481741][   T30] audit: type=1400 audit(1762551826.941:619): avc:  denied  { ioctl } for  pid=8835 comm="syz.1.784" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  274.632156][ T5866] option 2-1:1.164: GSM modem (1-port) converter detected
[  274.658628][   T48] tipc: Node number set to 2886997019
[  274.680367][   T30] audit: type=1400 audit(1762551826.951:620): avc:  denied  { read } for  pid=8835 comm="syz.1.784" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  274.703954][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.713010][ T8852] binder: BINDER_SET_CONTEXT_MGR already set
[  274.719220][ T8852] binder: 8851:8852 ioctl 4018620d 2000000002c0 returned -16
[  274.888490][ T5866] usb 2-1: USB disconnect, device number 27
[  275.036399][ T5866] option 2-1:1.164: device disconnected
[  275.070224][   T30] audit: type=1400 audit(1762551826.951:621): avc:  denied  { ioctl } for  pid=8835 comm="syz.1.784" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x743a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  275.760687][ T8870] ipt_REJECT: TCP_RESET invalid for non-tcp
[  276.883528][ T5823] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  277.079453][ T8892] sctp: [Deprecated]: syz.3.802 (pid 8892) Use of int in max_burst socket option deprecated.
[  277.079453][ T8892] Use struct sctp_assoc_value instead
[  277.763516][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  277.773354][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  277.782277][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  277.793840][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  277.813930][ T5821] Bluetooth: hci2: command 0x0405 tx timeout
[  278.223725][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  278.236147][   T30] audit: type=1400 audit(1762551830.701:622): avc:  denied  { mounton } for  pid=8905 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  278.392818][ T8911] binder: BINDER_SET_CONTEXT_MGR already set
[  278.398844][ T8911] binder: 8910:8911 ioctl 4018620d 2000000002c0 returned -16
[  279.225387][ T8905] chnl_net:caif_netlink_parms(): no params data found
[  279.653221][  T977] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  280.233218][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.258714][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.276095][ T8905] bridge_slave_0: entered allmulticast mode
[  280.303985][  T977] usb 5-1: Using ep0 maxpacket: 32
[  280.310478][ T5810] Bluetooth: hci5: command tx timeout
[  280.323666][ T8905] bridge_slave_0: entered promiscuous mode
[  280.332010][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.346667][  T977] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  280.347873][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.361966][ T8905] bridge_slave_1: entered allmulticast mode
[  280.368816][ T8905] bridge_slave_1: entered promiscuous mode
[  280.444150][   T30] audit: type=1326 audit(1762551832.911:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  280.467376][    C0] vkms_vblank_simulate: vblank timer overrun
[  280.474781][  T977] usb 5-1: config 0 has no interface number 0
[  280.490798][  T977] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  280.509458][   T30] audit: type=1326 audit(1762551832.941:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  280.532699][    C0] vkms_vblank_simulate: vblank timer overrun
[  280.579415][   T30] audit: type=1326 audit(1762551832.941:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  280.584074][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.602691][    C0] vkms_vblank_simulate: vblank timer overrun
[  280.666106][  T977] usb 5-1: config 0 interface 85 has no altsetting 0
[  280.811732][ T8946] xt_policy: neither incoming nor outgoing policy selected
[  280.819850][  T977] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  281.374802][   T30] audit: type=1326 audit(1762551832.941:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  281.397957][    C0] vkms_vblank_simulate: vblank timer overrun
[  281.404224][   T30] audit: type=1326 audit(1762551832.941:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  281.408075][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.435925][   T30] audit: type=1326 audit(1762551832.941:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  281.500707][   T30] audit: type=1326 audit(1762551832.941:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  281.540589][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.608772][  T977] usb 5-1: Product: syz
[  281.616728][  T977] usb 5-1: Manufacturer: syz
[  281.664240][   T30] audit: type=1326 audit(1762551832.941:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1320d8df10 code=0x7ffc0000
[  281.695968][  T977] usb 5-1: SerialNumber: syz
[  281.724781][   T30] audit: type=1326 audit(1762551832.941:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1320d8f6c9 code=0x7ffc0000
[  281.753558][ T8905] team0: Port device team_slave_0 added
[  281.759415][  T977] usb 5-1: config 0 descriptor??
[  281.768589][ T8905] team0: Port device team_slave_1 added
[  281.783535][  T977] usb 5-1: can't set config #0, error -71
[  281.830401][  T977] usb 5-1: USB disconnect, device number 10
[  281.918697][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.930504][ T8959] __nla_validate_parse: 66 callbacks suppressed
[  281.930516][ T8959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'.
[  281.960119][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.986009][    C1] vkms_vblank_simulate: vblank timer overrun
[  282.031083][ T8957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.818'.
[  282.077587][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.138480][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.145605][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.175592][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.382791][ T5810] Bluetooth: hci5: command tx timeout
[  282.954178][ T8905] hsr_slave_0: entered promiscuous mode
[  282.966200][ T8905] hsr_slave_1: entered promiscuous mode
[  283.061179][ T8960] pim6reg: entered allmulticast mode
[  283.077755][ T8956] pim6reg: left allmulticast mode
[  283.630266][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'.
[  284.450133][ T5810] Bluetooth: hci5: command tx timeout
[  284.650249][ T8905] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  284.680656][ T8905] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  284.704873][ T8905] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  284.833469][ T8905] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  285.039097][ T8905] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.199902][ T8905] 8021q: adding VLAN 0 to HW filter on device team0
[  286.477073][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.484260][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.527007][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.534201][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.545755][ T5810] Bluetooth: hci5: command tx timeout
[  286.565885][ T9017] [U] $
[  286.946369][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  286.946384][   T30] audit: type=1400 audit(1762551839.411:637): avc:  denied  { checkpoint_restore } for  pid=9026 comm="syz.4.837" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  286.952878][ T9033] fuse: Bad value for 'rootmode'
[  287.178886][ T8905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.270986][   T48] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  287.385552][ T9052] x_tables: ip_tables: osf match: only valid for protocol 6
[  287.440249][   T48] usb 1-1: Using ep0 maxpacket: 8
[  287.448308][   T48] usb 1-1: config 1 has an invalid interface number: 4 but max is 1
[  287.468115][   T48] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping
[  287.492979][   T48] usb 1-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config
[  288.472555][   T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  288.616304][   T48] usb 1-1: config 1 has no interface number 0
[  288.739503][   T48] usb 1-1: config 1 interface 4 altsetting 233 endpoint 0x4 has an invalid bInterval 36, changing to 7
[  288.757337][ T8905] veth0_vlan: entered promiscuous mode
[  288.783524][   T48] usb 1-1: config 1 interface 4 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  288.785725][ T8905] veth1_vlan: entered promiscuous mode
[  288.802515][   T48] usb 1-1: config 1 interface 4 has no altsetting 0
[  288.813352][   T48] usb 1-1: New USB device found, idVendor=19d2, idProduct=0189, bcdDevice=6c.2f
[  288.830013][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.841674][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.853293][   T48] usb 1-1: Product: syz
[  288.857483][   T48] usb 1-1: Manufacturer: syz
[  288.907238][   T48] usb 1-1: SerialNumber: syz
[  288.976618][   T30] audit: type=1400 audit(1762551841.421:638): avc:  denied  { read } for  pid=9059 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  289.405661][ T9067] netlink: 830 bytes leftover after parsing attributes in process `syz.0.838'.
[  289.415196][ T9067] bond_slave_0: entered promiscuous mode
[  289.421174][ T9067] bond_slave_1: entered promiscuous mode
[  289.625269][ T8905] veth0_macvtap: entered promiscuous mode
[  289.727395][ T6514] ------------[ cut here ]------------
[  289.733174][ T6514] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
[  289.747688][ T6514] WARNING: CPU: 1 PID: 6514 at net/mac80211/tx.c:751 ieee80211_tx_h_rate_ctrl+0x13b3/0x1ae0
[  289.757802][ T6514] Modules linked in:
[  289.761932][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  289.771514][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  289.781616][ T6514] Workqueue: events_unbound cfg80211_wiphy_work
[  289.787869][ T6514] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13b3/0x1ae0
[  289.794405][ T6514] Code: c1 ea 03 80 3c 02 00 0f 85 65 06 00 00 49 8b 77 68 89 d9 48 89 ea 48 c7 c7 80 51 e3 8c 48 81 c6 48 0a 00 00 e8 ee 0c 9d f6 90 <0f> 0b 90 90 bb 01 00 00 00 e9 8e f8 ff ff e8 2a dd de f6 e8 b5 be
[  289.814060][ T6514] RSP: 0018:ffffc90002f475f8 EFLAGS: 00010286
[  289.820170][ T6514] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817b3ee8
[  289.828132][ T6514] RDX: ffff888032682480 RSI: ffffffff817b3ef5 RDI: 0000000000000001
[  289.836127][ T6514] RBP: ffff888061429a44 R08: 0000000000000001 R09: 0000000000000000
[  289.844133][ T6514] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807d818000
[  289.852116][ T6514] R13: 0000000000000000 R14: ffff888063ca0dfd R15: ffffc90002f47858
[  289.860100][ T6514] FS:  0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  289.869026][ T6514] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  289.875623][ T6514] CR2: 0000200000179030 CR3: 0000000047c3c000 CR4: 00000000003526f0
[  289.883610][ T6514] Call Trace:
[  289.886882][ T6514]  <TASK>
[  289.889818][ T6514]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  289.895910][ T6514]  ? find_held_lock+0x2b/0x80
[  289.900623][ T6514]  invoke_tx_handlers_late+0x1172/0x27d0
[  289.906260][ T6514]  ? invoke_tx_handlers_early+0x669/0x28a0
[  289.912087][ T6514]  ieee80211_tx+0x304/0x460
[  289.916588][ T6514]  ? __pfx_ieee80211_tx+0x10/0x10
[  289.921640][ T6514]  ? br_fill_vlan_tunnel_info+0x1f9/0x390
[  289.927362][ T6514]  ? ieee80211_skb_resize+0x22a/0x630
[  289.932748][ T6514]  ? ieee80211_set_qos_hdr+0xba/0x3f0
[  289.938126][ T6514]  ieee80211_xmit+0x30f/0x3e0
[  289.942824][ T6514]  __ieee80211_tx_skb_tid_band+0x2c2/0x720
[  289.948631][ T6514]  ieee80211_scan_state_send_probe+0x34c/0xad0
[  289.954814][ T6514]  ieee80211_scan_work+0x772/0x2080
[  289.960022][ T6514]  ? __queue_work+0x43b/0x1160
[  289.964805][ T6514]  ? __pfx_ieee80211_scan_work+0x10/0x10
[  289.970462][ T6514]  cfg80211_wiphy_work+0x2c7/0x580
[  289.975573][ T6514]  process_one_work+0x9cf/0x1b70
[  289.980549][ T6514]  ? __pfx_addrconf_dad_work+0x10/0x10
[  289.986011][ T6514]  ? __pfx_process_one_work+0x10/0x10
[  289.991402][ T6514]  ? assign_work+0x1a0/0x250
[  289.995993][ T6514]  worker_thread+0x6c8/0xf10
[  290.000624][ T6514]  ? __pfx_worker_thread+0x10/0x10
[  290.005732][ T6514]  kthread+0x3c5/0x780
[  290.009794][ T6514]  ? __pfx_kthread+0x10/0x10
[  290.014412][ T6514]  ? rcu_is_watching+0x12/0xc0
[  290.019178][ T6514]  ? __pfx_kthread+0x10/0x10
[  290.023809][ T6514]  ret_from_fork+0x675/0x7d0
[  290.028396][ T6514]  ? __pfx_kthread+0x10/0x10
[  290.033007][ T6514]  ret_from_fork_asm+0x1a/0x30
[  290.037787][ T6514]  </TASK>
[  290.040845][ T6514] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  290.048114][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  290.057647][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  290.067694][ T6514] Workqueue: events_unbound cfg80211_wiphy_work
[  290.073940][ T6514] Call Trace:
[  290.077215][ T6514]  <TASK>
[  290.080138][ T6514]  dump_stack_lvl+0x3d/0x1f0
[  290.084733][ T6514]  vpanic+0x640/0x6f0
[  290.088720][ T6514]  ? ieee80211_tx_h_rate_ctrl+0x13b3/0x1ae0
[  290.094604][ T6514]  panic+0xca/0xd0
[  290.098323][ T6514]  ? __pfx_panic+0x10/0x10
[  290.102750][ T6514]  ? check_panic_on_warn+0x1f/0xb0
[  290.107867][ T6514]  check_panic_on_warn+0xab/0xb0
[  290.112806][ T6514]  __warn+0xf6/0x3c0
[  290.116697][ T6514]  ? ieee80211_tx_h_rate_ctrl+0x13b3/0x1ae0
[  290.122586][ T6514]  report_bug+0x3c3/0x580
[  290.126917][ T6514]  ? ieee80211_tx_h_rate_ctrl+0x13b3/0x1ae0
[  290.132801][ T6514]  handle_bug+0x184/0x210
[  290.137126][ T6514]  exc_invalid_op+0x17/0x50
[  290.141625][ T6514]  asm_exc_invalid_op+0x1a/0x20
[  290.146471][ T6514] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13b3/0x1ae0
[  290.152961][ T6514] Code: c1 ea 03 80 3c 02 00 0f 85 65 06 00 00 49 8b 77 68 89 d9 48 89 ea 48 c7 c7 80 51 e3 8c 48 81 c6 48 0a 00 00 e8 ee 0c 9d f6 90 <0f> 0b 90 90 bb 01 00 00 00 e9 8e f8 ff ff e8 2a dd de f6 e8 b5 be
[  290.172637][ T6514] RSP: 0018:ffffc90002f475f8 EFLAGS: 00010286
[  290.178684][ T6514] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817b3ee8
[  290.186637][ T6514] RDX: ffff888032682480 RSI: ffffffff817b3ef5 RDI: 0000000000000001
[  290.194589][ T6514] RBP: ffff888061429a44 R08: 0000000000000001 R09: 0000000000000000
[  290.202537][ T6514] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807d818000
[  290.210499][ T6514] R13: 0000000000000000 R14: ffff888063ca0dfd R15: ffffc90002f47858
[  290.218456][ T6514]  ? __warn_printk+0x198/0x350
[  290.223205][ T6514]  ? __warn_printk+0x1a5/0x350
[  290.227956][ T6514]  ? ieee80211_tx_h_rate_ctrl+0x13b2/0x1ae0
[  290.233838][ T6514]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  290.239903][ T6514]  ? find_held_lock+0x2b/0x80
[  290.244578][ T6514]  invoke_tx_handlers_late+0x1172/0x27d0
[  290.250196][ T6514]  ? invoke_tx_handlers_early+0x669/0x28a0
[  290.255998][ T6514]  ieee80211_tx+0x304/0x460
[  290.260485][ T6514]  ? __pfx_ieee80211_tx+0x10/0x10
[  290.265499][ T6514]  ? br_fill_vlan_tunnel_info+0x1f9/0x390
[  290.271212][ T6514]  ? ieee80211_skb_resize+0x22a/0x630
[  290.276561][ T6514]  ? ieee80211_set_qos_hdr+0xba/0x3f0
[  290.281923][ T6514]  ieee80211_xmit+0x30f/0x3e0
[  290.286586][ T6514]  __ieee80211_tx_skb_tid_band+0x2c2/0x720
[  290.292378][ T6514]  ieee80211_scan_state_send_probe+0x34c/0xad0
[  290.298525][ T6514]  ieee80211_scan_work+0x772/0x2080
[  290.303712][ T6514]  ? __queue_work+0x43b/0x1160
[  290.308461][ T6514]  ? __pfx_ieee80211_scan_work+0x10/0x10
[  290.314082][ T6514]  cfg80211_wiphy_work+0x2c7/0x580
[  290.319176][ T6514]  process_one_work+0x9cf/0x1b70
[  290.324101][ T6514]  ? __pfx_addrconf_dad_work+0x10/0x10
[  290.329541][ T6514]  ? __pfx_process_one_work+0x10/0x10
[  290.334897][ T6514]  ? assign_work+0x1a0/0x250
[  290.339493][ T6514]  worker_thread+0x6c8/0xf10
[  290.344088][ T6514]  ? __pfx_worker_thread+0x10/0x10
[  290.349183][ T6514]  kthread+0x3c5/0x780
[  290.353233][ T6514]  ? __pfx_kthread+0x10/0x10
[  290.357804][ T6514]  ? rcu_is_watching+0x12/0xc0
[  290.362554][ T6514]  ? __pfx_kthread+0x10/0x10
[  290.367126][ T6514]  ret_from_fork+0x675/0x7d0
[  290.371695][ T6514]  ? __pfx_kthread+0x10/0x10
[  290.376266][ T6514]  ret_from_fork_asm+0x1a/0x30
[  290.381028][ T6514]  </TASK>
[  290.384234][ T6514] Kernel Offset: disabled
[  290.388536][ T6514] Rebooting in 86400 seconds..