last executing test programs:

8m53.911057103s ago: executing program 0 (id=812):
r0 = socket$key(0xf, 0x3, 0x2)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0)
r7 = timerfd_create(0x0, 0x0)
syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x521f, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000240)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a})
timerfd_settime(r7, 0x2, &(0x7f00000005c0), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000200030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000)

8m51.628944169s ago: executing program 0 (id=817):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8, 0xffff, 0x7}, 0x10)
r1 = getpid()
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
openat$hwrng(0xffffffffffffff9c, 0x0, 0xc40, 0x0)
r4 = syz_io_uring_setup(0x9e, 0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)
close_range(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(r3, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)

8m50.176823849s ago: executing program 0 (id=822):
r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, 0x0)

8m49.106446392s ago: executing program 0 (id=827):
r0 = socket(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
chdir(&(0x7f00000000c0)='./file0/../file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')
write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24)

8m47.910680085s ago: executing program 0 (id=829):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xc0b}, {}, {}, {0x10, 0x0, 0x800000}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_open_dev$loop(0x0, 0x10, 0x202a80)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)=r1)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}})
sendmsg$NFT_BATCH(r0, 0x0, 0x20049854)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000840)
syz_emit_ethernet(0x56, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000020, &(0x7f0000000240)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x80)
fadvise64(0xffffffffffffffff, 0x4, 0x10001, 0x2)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621, 0x70bd26}, 0x10}}, 0x0)

8m47.449896352s ago: executing program 0 (id=833):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8, 0xffff, 0x7}, 0x10)
r1 = getpid()
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
openat$hwrng(0xffffffffffffff9c, 0x0, 0xc40, 0x0)
r4 = syz_io_uring_setup(0x9e, 0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)
close_range(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(r3, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)

8m47.263969222s ago: executing program 32 (id=833):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8, 0xffff, 0x7}, 0x10)
r1 = getpid()
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
openat$hwrng(0xffffffffffffff9c, 0x0, 0xc40, 0x0)
r4 = syz_io_uring_setup(0x9e, 0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)
close_range(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(r3, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)

20.188463131s ago: executing program 2 (id=2502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)

18.597924626s ago: executing program 2 (id=2507):
r0 = socket$tipc(0x1e, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2})
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)
connect$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x3}}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000004000000850000007b000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.940879786s ago: executing program 1 (id=2508):
syz_usb_connect(0x5, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094a778084e080110aeed0102030109022200010000000009"], 0x0)

17.672172377s ago: executing program 2 (id=2509):
r0 = semget(0x1, 0x1, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x5bb1, 0x3])
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xb, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20200, 0x0)
r3 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6)
lseek(r3, 0xa3c, 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x8000)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "23bfbc65", "ffff0033057e00f4"}, 0x38)
write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
close_range(r5, r6, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, 0x0, 0x0)

17.496955436s ago: executing program 3 (id=2510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000340)={'bridge_slave_0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r2])
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000100)={0xffffff7d, 0x5, 0x0, {0x0, 0x1, 0x0, 0xb99}}, 0x30)
read$FUSE(r7, &(0x7f0000004200)={0x2020}, 0x2020)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc004ae02, &(0x7f00000001c0)={0x2bcf469fcc894c92})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

17.420816533s ago: executing program 2 (id=2511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffb, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x92, 0x401}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x1, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xff}, 0x14)

16.915853974s ago: executing program 5 (id=2513):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x3, 0x10e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
getpgid(r7)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
sendfile(r0, r1, 0x0, 0x2000fb)

16.36112077s ago: executing program 1 (id=2515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x86dd, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800)

14.294907759s ago: executing program 4 (id=2517):
r0 = socket(0x22, 0x2, 0x100002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0xba, &(0x7f0000019100)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000019240), 0x0, 0x40002021, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000019240)=ANY=[@ANYRESHEX=r2], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="1f1053b00000009837a0324d7df546bcb8e8c94efe76cef3e208000008", 0x1d)
io_uring_setup(0x1d5a, &(0x7f00000191c0)={0x0, 0xe02d, 0x40, 0x20001, 0x80a2})
r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x3, 0x4)
r5 = socket$kcm(0x2, 0x0, 0x106)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]})
r7 = socket$inet(0x2, 0xa, 0x0)
sendmmsg$sock(r7, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x36}, 0x3a83618cfb35f332)
socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'dvmrp1\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x20, 0x16, "96a59c9afac652c23f7985a90e284976c9e7b3a11861c6d21b1e2b1487298a60"}})

13.190961534s ago: executing program 4 (id=2518):
socket(0x10, 0x80805, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xffffe000)
openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
close(0x3)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0xfffff8a8, 0x5]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000000008, 0x88}, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)

13.031412715s ago: executing program 5 (id=2519):
socket(0x10, 0x80805, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xffffe000)
openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
close(0x3)
r3 = socket$kcm(0x2b, 0x1, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0xfffff8a8, 0x5]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000000008, 0x88}, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)

11.012630171s ago: executing program 4 (id=2520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)

9.585031068s ago: executing program 4 (id=2521):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20008850)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r7, 0x8d, 0x0, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

9.530820336s ago: executing program 5 (id=2522):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

7.240404424s ago: executing program 3 (id=2523):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x9d73, 0x20000, 0x3, 0xab}, &(0x7f0000000000), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x4)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x80c01, 0x102)
io_uring_setup(0x400516, &(0x7f0000000380)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e, 0x0, r0})
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000180)={0xdddd1000, 0xc000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x7fffffff}, 0x94)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10)
bind$tipc(r2, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0xa1ff, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0)
mknodat$loop(r1, 0x0, 0xc000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)

7.129530123s ago: executing program 3 (id=2524):
socket(0x40000000015, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa8, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0xffffffffffffffde, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r3)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0)

5.911673255s ago: executing program 3 (id=2525):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000000180)="15", 0x1, 0x8000000000000000})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x7, 0x0, r1, 0x1000, 0x0, 0x3ffe})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001080)}])
syz_open_dev$sndctrl(0x0, 0x0, 0x801)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000500)={0x20, 0x13, 0x3, "83337a"}, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff})
file_getattr(r5, 0x0, &(0x7f0000000040), 0x18, 0x1000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000008}, 0x20000000)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x70, 0xd, 0x1, "ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.248446655s ago: executing program 5 (id=2526):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0)
syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x3fe, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x20, 0xad, 0xe7, 0x8, 0xe66, 0x25, 0x2186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ec, 0x2, 0x81, 0xa, 0xc0, 0x0, "", [{{0x9, 0x4, 0x12, 0x7, 0x5, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0xf, 0xf8, 0x3, [@generic={0x37, 0x30, "914242ee9a00e4f90103acdfed8d1840d90c1ad9475bbd726e48f4acdd084f95a9ee62353fe6cec6b0405025de169d61b715b1da2f"}, @generic={0x6a, 0x3, "73af0fa9055041c6df2240c90bccc764e7c3912e99f8d4f09ebc7d999995eab832d7c70156176902e28b711cf6e770014fc3ce52eb63b5734c795b044aebd57c7e8828b0f0f80c1809db221e06bf171d58b536f096101dffd3390a65c7b9c962a57c38fa06a8d9da"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x85, 0x8, 0x2}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0xf, 0x1, 0x1, [@generic={0x8, 0x8, "d81962b6678d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xc000}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x5, 0x55, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x78}]}}]}}, {{0x9, 0x4, 0xe1, 0x4f, 0xe, 0x11, 0xb3, 0x35, 0x10, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0xa}}, @uac_control={{0xa, 0x24, 0x1, 0xff, 0x39}, [@processing_unit={0xc, 0x24, 0x7, 0x5, 0x6, 0x6, "625982f41f"}, @extension_unit={0x7, 0x24, 0x8, 0x5}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x4, 0x9, "9c54e88c"}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x4, 0xf, 0x8, 0xa, 0x3], 0xfc}]}], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x1, 0x2}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x75, 0x9, 0x1, [@generic={0x45, 0x22, "4a1a4cda465e57f8c203601526a1be50a689ebeaac83e5d7a77f9b40dafeafc40309df84f67baf688276966bf5eff4af2e240a1963b53e2b0fdf3e6b35bc58eb45f9ae"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x8, 0x8, [@generic={0xa5, 0xa, "d7d9f2f36748dd58bd373bbba1a3e9b55e59e983975a90656d2de930e5bc2d51092a52f46dd976e15a757177f49fcf8e245194ea4021e969a520bfcea56ac0e1b393ba3492470278f054a5a13fb45638537a9c72f0949f714614126e61cce19be6e7ce35b4d8c79bf23b66c03636ed8752fa389dee5852632a52207edba330e5324ac56238bcd888e4532d596fe7419c2a4b0b413b26514a4090fb0780562a9bac8486"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7f, 0xf4, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x8, 0x9, 0x26}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0x90, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x8, 0x6, [@generic={0x6d, 0xe, "57c75c6a018319e2cb3d6ad0f61e1aed798fe661c9664179292b24411e700a6c01cd05677aa29082d22bb00aa59f16f15a7c275fd0d5320f5f892cdc4d170baa187ff045dc29a2d204d7e70deb32cc6c16db938d3e7dc762334f7c02f9fc9fbe1ed821852d1159d9fc9f82"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x401}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x5, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}, @generic={0x34, 0x21, "f78aff765f3145b91fbde1a2ff42672a574225100630e1ec02508ff0eb79c887e03338a1c6bddbb9a0e9375adef9ac957abe"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xff, 0x7, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xe, 0xd, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x7, 0x5}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x3, 0x9, 0x55, [@generic={0x3b, 0x11, "73a330fe4e1a569b3a80ea4d0e65dbe531e8d1886b9912e0119bec022281b8fff3d407a89c47a8638adc569d589a30b6bc40c4aed6c75c6773"}, @generic={0x3c, 0x4, "37c7281284b428e95e5bad14e427f7edf64a591305586796094fc2469c4a3cd35fd4e81b664623e5b07f5110f63dfade1285c516d56e5eda0e74"}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x9, 0x5, 0xc4, 0x8, 0x8}, 0xc7, &(0x7f0000000800)={0x5, 0xf, 0xc7, 0x4, [@generic={0xaa, 0x10, 0xd, "67f98eafc337ede9060110b4d5e049799cb65f5c778b57a6a1626fdd1b3b08d3486ccc27e2fd21aaeca3d40ae0ba1ed559c4b08833892e188ce220d4fa93316f0a47866bbcded51edbc5d418422abc71db2d91ca087b308c39dd8575ef3712f84d38758dd78a04b748ff3ccb462aa6731e0d7132db482d837a0c4f88c08a285643694548ce86f34cd7cf470b1c5aa0582e16212f3233f2bc78a5d0be64a24e79311d6a89e67ad5"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xf7, 0xd44}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xa, 0x1}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x82c}}, {0x77, &(0x7f0000000780)=@string={0x77, 0x3, "524c99035b2062a3698c72c2eeb28ba385a7433a7adc2b041664ae69a0d359b3314f6f9a30476d56282868b2a0e0d8cf4b3076e49d7125016b03bb8173d1f46caff93de81ec4d6978e9bd778c99d3f3bc4db6b111404e306f7ee93e8e649035714dad151aae7418016cb9aa334af42de0e03fe82ab"}}, {0xb8, &(0x7f0000000600)=@string={0xb8, 0x3, "2fe161b56708f0671dd07f1632a6fdd596cd76308df4426b0da59887374314e870b1b960ee50610411d61024ce2782139d7b41a54cc20b9850b7c2bc461aed86c3043e49a765e2729f697e39e88a2b0bb67a034438f56f859e947239cddcaf6d642f759b0234e9adbb124d8e0f4532adc4f0ba106c7e6823b881e1d6c7db320a6f64bf985fae3253521fa2fec272c1d89c03f74874f46f7c427dca9b167d2b552031181482b2bf19eca807bf1346d0740f97918b65f5"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x812}}]})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a5167"], 0x0)

4.198054862s ago: executing program 2 (id=2527):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905030000000000000905042d75"], 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x8000, 0x1}, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r3)
ptrace$peeksig(0x4212, r3, &(0x7f0000000140)={0x80, 0x1}, &(0x7f0000000900))
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019840)=""/102375, 0x18fe7)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x130, 0x190, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388)
getpid()
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)

4.197373729s ago: executing program 1 (id=2528):
mq_open(&(0x7f0000000080)='\x8a\x97\xefB-\xc3\x00l)\x17\xa7\xed\x88u\xd5\x89\x13\xbd^f*\xcd\x15<\x0e\xf9N\ak\xa2+\xf7)\xb5\x144\x05{o\x04J\x01\t[U\x14\x1d0!.\x8b\xa2\x1b\xae\x96\x1f\x83\x96M\x81\xd0T\xcd\xce;\x87c\xb0\xf82#[\xbd\xc9/*\a\x81$W\xbf$\x8b\xea\xa7o[\xa3k\v\xe2\x05', 0x2, 0xa, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x4006})
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x802, 0xfffffffffffffffd})
r1 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

4.094017851s ago: executing program 4 (id=2529):
syz_open_dev$vim2m(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
socket$alg(0x26, 0x5, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newsa={0x180, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x4}, {@in6=@remote, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xfffc, 0x8251c, 0x4, 0x5, 0xfffe}, {0x6, 0x0, 0x1f, 0x1ff}, {0xffffffff, 0xfffffffc}, 0x70bd2e, 0x34ff, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x8d, 0x3, {{'deflate\x00'}, 0x228, "7dcbeed3ed3574de8f66050d53cc21661586fd7a9f80005e95106253c5652badf9ffadba52f1133825260627617bcee0e4db0be423cfe67ae014b7eef4d9b9381325fd51cb"}}]}, 0x180}}, 0x10)

3.703032574s ago: executing program 1 (id=2530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0903000000ffffffa6002e"], 0x14}}, 0x0)

3.244278121s ago: executing program 1 (id=2531):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xbc14, 0x800, 0x3, 0x10e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
getpgid(r7)
kcmp(r6, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
sendfile(r0, r1, 0x0, 0x2000fb)

2.03933418s ago: executing program 1 (id=2532):
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, 0x0})
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40054}, 0x4040884)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x3fd, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r3 = syz_clone(0x2000080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = getpgid(0x0)
fcntl$setownex(r4, 0xf, &(0x7f00000000c0)={0x2, r5})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='bpf\x00', 0x2, 0x0)
listen(0xffffffffffffffff, 0x1ad72f7)
bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6)

1.928476659s ago: executing program 3 (id=2533):
inotify_init1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040)=0x6, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020)

1.855460736s ago: executing program 4 (id=2534):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00')
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000002480)=""/4123, 0x101b}], 0x1, 0x9ce7, 0x408001)
ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0x6})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

840.185631ms ago: executing program 5 (id=2535):
socket(0x40000000015, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa8, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0xffffffffffffffde, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$netlink(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r3)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0)

91.721466ms ago: executing program 5 (id=2536):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd604dd318001c0600fc0100000000000000000008000d0002fe800000000000000000d400000000aa00004001094bef660aef347b38db86755014b08d1ddf3456923e2aa50ae9528d4db1981cef604d52536162a3ebe1b1219387de186f09989e181f134cc86e873acb231aa3d15be5269d47e9ad1f7d7c99d43129d781025a169896143585a812b955323dbc103f1152e3265fff40df1b657791131b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000c90780000fe07f989feff9800"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x3c, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0xfffffffd, 0x200, 0xb, 0x9f, 0x3, [0x100, 0xfffffff9]}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

353.1µs ago: executing program 3 (id=2537):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sendmsg(r2, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xfbffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae886", 0x48}, {&(0x7f0000000300)="00000000000000bad0c072705dc59d07602d2d5846a2b8a5c7d02dc3b22d63f2ba3c7c06a6ec550b6aee8e6b50d5b83e758c62db80b33d31eec1ad9c54cf968dead5429ee0830b9da69775a33dbf9269fc58b44fc38eac6fdb90c4dd610c30f18475d6e3e840009a8da9a71190f2d872cca200ad6d647306413d9f0afc95ea9d", 0x80}, {&(0x7f0000000b80)="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", 0x16c}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="60000000000000001d000000e7a000007f713318d7efefb27c404556c8840cae7aa3db177953cde8e73aa68bc1525f9af651eab593cff9e2ca67afb506ac3306512742c5dd3f71d7af67c6a7155a8b5b9ce7bba73b7a1f62c53cac1614d90000e0000000000000000e01000006000000fdebe371b85fd727a646776a0f5b917f7ea1eed1073eaf18eb9815dca4ca0c556319d7d822cb0a05f9602926ae88f54aed4e12b9c9c0032330ae148878bee28745dd588d2b73270100000000000000288d22982dbf309ff96279308ce34a54716d637c1681b43912ca0410477c5c02b7a3bb4d401185df2dbcaf18bf9ad0887aa7301061891c24f0f0f55a8693eb2c09f53aa951aaa86832b40967e7788a1ca05692f9e8988fef59b803c6f168e635607278328920da40838bd4383d96b1a772915b5ab74f0601bd614e6bd2949fbd6f10b15ff9250000000000000074f2450fb1247d2d72b5c92aa5485afed5ce68d9984ff20616f41c88f89cc80846bd5f387e2a3adaa36816ff8b0c26520e597b23b1"], 0x140}, 0x20000014)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x2, 0x8, 0x0, 0x1}}, 0x26)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x2000, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x60143)
ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0305602, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r2, @ANYBLOB='\x00'/20, @ANYRESOCT=r10, @ANYRES8=r3, @ANYRESHEX], 0x50)

0s ago: executing program 2 (id=2538):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x2962, 0x400, 0x3, 0x288}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0xa1ff)

kernel console output (not intermixed with test programs):

2
[  538.654798][   T10] quatech2 3-1:0.51: device disconnected
[  538.672762][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.733938][ T5862] usb 2-1: Product: syz
[  538.738133][ T5862] usb 2-1: Manufacturer: syz
[  539.627311][ T5862] usb 2-1: SerialNumber: syz
[  539.643650][ T5862] usb 2-1: config 0 descriptor??
[  540.912418][ T5862] appletouch 2-1:0.85: Geyser mode initialized.
[  540.953831][ T5862] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input31
[  541.126848][    C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -1
[  541.148606][T15948] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  541.156519][T15948] overlayfs: failed to set xattr on upper
[  541.164278][T15948] overlayfs: ...falling back to redirect_dir=nofollow.
[  541.171126][T15948] overlayfs: ...falling back to index=off.
[  541.207446][T15948] overlayfs: ...falling back to uuid=null.
[  541.243746][ T5862] usb 2-1: USB disconnect, device number 51
[  541.308193][ T5862] appletouch 2-1:0.85: input: appletouch disconnected
[  543.426304][T15998] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1805'.
[  544.130010][  T791] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  544.222284][T15983] Bluetooth: hci0: command 0x0406 tx timeout
[  544.343996][  T791] usb 3-1: config 0 has no interfaces?
[  544.351385][  T791] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  544.360852][  T791] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  544.382703][  T791] usb 3-1: Product: syz
[  544.404345][  T791] usb 3-1: Manufacturer: syz
[  544.415606][  T791] usb 3-1: SerialNumber: syz
[  544.445529][ T5862] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  544.476680][  T791] usb 3-1: config 0 descriptor??
[  544.812445][ T5862] usb 2-1: config 4 has an invalid interface number: 248 but max is 0
[  545.254345][ T5862] usb 2-1: config 4 has no interface number 0
[  545.260504][ T5862] usb 2-1: config 4 interface 248 has no altsetting 0
[  545.269825][ T5862] usb 2-1: string descriptor 0 read error: -22
[  545.276150][ T5862] usb 2-1: New USB device found, idVendor=10c4, idProduct=8a5b, bcdDevice= d.02
[  545.347512][   T10] usb 3-1: USB disconnect, device number 55
[  545.472555][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.595160][ T5862] cp210x 2-1:4.248: cp210x converter detected
[  545.802294][ T5862] cp210x 2-1:4.248: failed to get vendor val 0x370b size 1: -71
[  545.821791][ T5862] cp210x 2-1:4.248: querying part number failed
[  545.861497][ T5862] usb 2-1: cp210x converter now attached to ttyUSB0
[  545.892433][ T5862] usb 2-1: USB disconnect, device number 52
[  545.939603][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  545.976163][ T5862] cp210x 2-1:4.248: device disconnected
[  546.029771][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'.
[  546.417697][T16073] lo speed is unknown, defaulting to 1000
[  546.572306][  T791] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  546.863029][  T791] usb 3-1: Using ep0 maxpacket: 8
[  546.881527][  T791] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  546.909590][  T791] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  546.942204][  T791] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  546.964183][  T791] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  546.982276][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.992248][  T791] usb 3-1: Product: syz
[  547.009006][  T791] usb 3-1: Manufacturer: syz
[  547.017910][  T791] usb 3-1: SerialNumber: syz
[  547.030427][  T791] usb 3-1: config 0 descriptor??
[  547.172248][ T5862] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  547.473206][ T5862] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  547.495976][ T5862] usb 2-1: config 1 interface 0 has no altsetting 0
[  547.519106][ T5862] usb 2-1: string descriptor 0 read error: -22
[  547.527987][ T5862] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40
[  547.555915][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.000280][T16134] input: syz0 as /devices/virtual/input/input32
[  548.324076][T16142] netlink: 'syz.4.1822': attribute type 1 has an invalid length.
[  549.061767][ T5862] usbhid 2-1:1.0: can't add hid device: -71
[  549.071599][ T5862] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  549.102110][ T5862] usb 2-1: USB disconnect, device number 53
[  549.467496][   T24] usb 3-1: USB disconnect, device number 56
[  551.257114][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'.
[  552.802093][   T29] audit: type=1400 audit(1774849958.590:750): avc:  denied  { append } for  pid=16203 comm="syz.2.1832" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  554.123803][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'.
[  554.144937][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'.
[  554.273148][T16254] bond2: entered allmulticast mode
[  555.814880][T16303] lo speed is unknown, defaulting to 1000
[  556.834899][T16333] loop6: detected capacity change from 0 to 8
[  556.973080][T16333] loop6: detected capacity change from 8 to 7
[  556.994115][T16360] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1853'.
[  557.056468][    C0] blk_print_req_error: 10 callbacks suppressed
[  557.056487][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.072311][    C0] buffer_io_error: 10 callbacks suppressed
[  557.072325][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.185346][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.194985][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.203003][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.212628][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.224091][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.233754][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.242179][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.251758][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.313095][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.322707][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.335711][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  557.891497][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.901141][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.910085][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.919653][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.927674][T16333] ldm_validate_partition_table(): Disk read failed.
[  557.928631][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.943833][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  557.952281][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  557.961891][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  558.039039][T16333] Dev loop6: unable to read RDB block 0
[  558.060325][T16333]  loop6: unable to read partition table
[  558.089363][T16333] loop6: partition table beyond EOD, truncated
[  558.117246][T16333] loop_reread_partitions: partition scan of loop6 (aQ�"��AZD���0�̹���<w�?��F4�"@/}�~Z�.�-��b	?�e9u׮/5���) failed (rc=-5)
[  558.517611][T16368] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.524811][T16368] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.642637][T16368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.748932][T16368] .70�: left allmulticast mode
[  559.755481][T16368] hsr_slave_0: left allmulticast mode
[  559.762702][T16368] hsr_slave_1: left allmulticast mode
[  559.924323][T16368] vti0: left promiscuous mode
[  559.929409][T16368] vti0: left allmulticast mode
[  560.047735][T16368] bond2: left allmulticast mode
[  560.062633][ T5862] lo speed is unknown, defaulting to 1000
[  560.072384][ T5862] syz0: Port: 1 Link DOWN
[  560.078792][ T4901] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.093082][ T4901] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.184764][ T4901] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.232508][ T4901] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.262244][   T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  560.308159][T16407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1859'.
[  560.358494][T16404] lo speed is unknown, defaulting to 1000
[  560.461326][   T24] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  560.491864][   T24] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  560.600498][   T24] usb 6-1: Product: syz
[  560.614758][   T24] usb 6-1: Manufacturer: syz
[  560.623732][   T24] usb 6-1: SerialNumber: syz
[  560.786838][   T24] usb 6-1: config 0 descriptor??
[  560.803712][   T24] ch341 6-1:0.0: ch341-uart converter detected
[  562.132061][T16460] bridge0: port 3(erspan0) entered blocking state
[  562.139629][T16460] bridge0: port 3(erspan0) entered disabled state
[  562.152178][T16460] erspan0: entered allmulticast mode
[  562.161492][   T29] audit: type=1400 audit(1774849968.040:751): avc:  denied  { remove_name } for  pid=16392 comm="syz.5.1857" name="binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  562.164731][T16460] erspan0: entered promiscuous mode
[  562.184777][   T24] ch341-uart ttyUSB0: failed to read break control: -121
[  562.191795][T16460] bridge0: port 3(erspan0) entered blocking state
[  562.198228][   T29] audit: type=1400 audit(1774849968.040:752): avc:  denied  { unlink } for  pid=16392 comm="syz.5.1857" name="binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  562.203318][T16460] bridge0: port 3(erspan0) entered forwarding state
[  562.233718][   T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  562.484712][   T10] usb 6-1: USB disconnect, device number 22
[  562.490764][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  562.497127][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  562.506716][   T10] ch341 6-1:0.0: device disconnected
[  562.862204][   T24] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  562.974145][T16487] overlayfs: failed to clone upperpath
[  562.981666][T16487] netlink: 'syz.3.1871': attribute type 8 has an invalid length.
[  562.992206][   T24] usb 2-1: device descriptor read/64, error -71
[  563.700352][   T24] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  563.876968][   T24] usb 2-1: device descriptor read/64, error -71
[  563.992398][   T24] usb usb2-port1: attempt power cycle
[  565.017301][   T24] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  565.079081][   T24] usb 2-1: device descriptor read/8, error -71
[  565.402197][   T24] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  565.422649][   T24] usb 2-1: device descriptor read/8, error -71
[  565.553909][   T24] usb usb2-port1: unable to enumerate USB device
[  565.769393][T16525] binder: BINDER_SET_CONTEXT_MGR already set
[  565.776529][T16525] binder: 16524:16525 ioctl 4018620d 200000000040 returned -16
[  566.394646][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1882'.
[  566.604723][   T29] audit: type=1400 audit(1774849972.400:753): avc:  denied  { ioctl } for  pid=16537 comm="syz.5.1882" path="socket:[38492]" dev="sockfs" ino=38492 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  566.930159][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'.
[  567.364978][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  567.594323][   T24] usb 5-1: Using ep0 maxpacket: 8
[  567.739616][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  567.756277][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  568.262417][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  568.323116][   T24] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  568.354818][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.375779][   T24] usb 5-1: Product: syz
[  568.392282][   T24] usb 5-1: Manufacturer: syz
[  568.396980][   T24] usb 5-1: SerialNumber: syz
[  568.418065][   T24] usb 5-1: config 0 descriptor??
[  570.492410][   T24] usb 5-1: USB disconnect, device number 36
[  571.332036][T16647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1901'.
[  571.351999][T16647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1901'.
[  572.026719][T16659] netlink: 'syz.3.1903': attribute type 3 has an invalid length.
[  574.657269][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1910'.
[  577.644500][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'.
[  578.054719][   T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  578.511094][   T10] usb 2-1: config 128 has an invalid interface number: 148 but max is 0
[  578.526098][   T10] usb 2-1: config 128 has no interface number 0
[  578.568448][   T10] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  578.582895][   T10] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 101, changing to 10
[  578.597073][   T10] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has invalid maxpacket 25104, setting to 1024
[  578.610113][   T10] usb 2-1: config 128 interface 148 has no altsetting 0
[  578.620484][   T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  578.639233][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.652876][   T10] usb 2-1: Product: syz
[  578.657058][   T10] usb 2-1: Manufacturer: syz
[  578.661737][   T10] usb 2-1: SerialNumber: syz
[  578.912410][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  579.061801][   T10] usb 2-1: USB disconnect, device number 58
[  579.074040][   T24] usb 5-1: Using ep0 maxpacket: 16
[  579.093104][   T24] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  579.153912][   T24] usb 5-1: config 0 has no interface number 0
[  579.160039][   T24] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  579.212025][   T24] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  579.274186][   T24] usb 5-1: config 0 interface 41 has no altsetting 0
[  579.287946][   T24] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  579.329814][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.370912][   T24] usb 5-1: Product: syz
[  579.395387][   T24] usb 5-1: Manufacturer: syz
[  579.405682][   T24] usb 5-1: SerialNumber: syz
[  579.421999][   T24] usb 5-1: config 0 descriptor??
[  579.422207][   T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  579.444072][T16764] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.451848][T16764] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.507584][T16791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.520329][T16791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.554601][T16799] gretap1: entered promiscuous mode
[  579.560267][T16799] batman_adv: batadv0: Adding interface: gretap1
[  579.575990][T16799] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  579.610694][T16799] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  579.628882][   T10] usb 2-1: Using ep0 maxpacket: 8
[  579.635626][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  579.644482][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  579.654669][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  579.665024][T16764] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.673042][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 29200, setting to 1024
[  579.685872][T16764] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.693343][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  579.705673][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  579.719877][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  579.720679][   T24] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  579.729617][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.746694][ T5862] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  579.948736][   T24] usb 5-1: USB disconnect, device number 37
[  579.965245][   T10] usb 2-1: GET_CAPABILITIES returned 0
[  579.974950][   T10] usbtmc 2-1:16.0: can't read capabilities
[  579.983534][ T5862] usb 6-1: Using ep0 maxpacket: 8
[  580.083811][ T5862] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  580.093197][ T5862] usb 6-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[  580.274461][ T5862] usb 6-1: config 0 has no interface number 0
[  580.293697][ T5862] usb 6-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  580.442385][ T5862] usb 6-1: config 0 interface 200 has no altsetting 0
[  580.589847][ T5862] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  580.635585][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.977346][ T5862] usb 6-1: Product: syz
[  580.989295][ T5862] usb 6-1: Manufacturer: syz
[  581.005283][ T5862] usb 6-1: SerialNumber: syz
[  581.095637][ T5862] usb 6-1: config 0 descriptor??
[  581.415278][   T10] usb 2-1: USB disconnect, device number 59
[  583.176160][T16851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'.
[  583.236406][ T5862] usbhid 6-1:0.200: couldn't find an input interrupt endpoint
[  583.388502][T16864] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  583.561819][ T5862] usb 6-1: USB disconnect, device number 23
[  585.165354][   T29] audit: type=1400 audit(1774850247.029:754): avc:  denied  { setopt } for  pid=16883 comm="syz.4.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  589.593272][T16952] autofs: Unknown parameter 'fd00000000000000000000'
[  589.736499][T16954] delete_channel: no stack
[  589.760980][   T29] audit: type=1400 audit(1774850251.619:755): avc:  denied  { map } for  pid=16953 comm="syz.5.1956" path="socket:[40226]" dev="sockfs" ino=40226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  589.828153][   T29] audit: type=1400 audit(1774850251.629:756): avc:  denied  { setopt } for  pid=16953 comm="syz.5.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  590.454749][T16965] overlayfs: missing 'lowerdir'
[  590.481479][T16965] netlink: 'syz.3.1954': attribute type 33 has an invalid length.
[  590.489574][T16965] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1954'.
[  591.780318][T16980] input: syz1 as /devices/virtual/input/input34
[  592.311892][T17012] Cannot find set identified by id 0 to match
[  592.514695][   T29] audit: type=1400 audit(1774850254.389:757): avc:  denied  { connect } for  pid=17002 comm="syz.5.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  592.781120][ T1331] Bluetooth: hci5: Frame reassembly failed (-84)
[  592.822263][ T5862] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  593.007705][T17032] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  593.035441][ T5862] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  593.099320][ T5862] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  593.223376][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  593.255105][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  593.268566][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  593.324768][ T5862] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  593.354695][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  593.374909][ T5862] usb 3-1: Product: syz
[  593.379101][ T5862] usb 3-1: Manufacturer: syz
[  593.407164][ T5862] cdc_wdm 3-1:1.0: skipping garbage
[  593.413089][ T5862] cdc_wdm 3-1:1.0: skipping garbage
[  593.423208][ T5862] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  593.430025][ T5862] cdc_wdm 3-1:1.0: Unknown control protocol
[  594.471512][T17062] FAULT_INJECTION: forcing a failure.
[  594.471512][T17062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  594.485705][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.2.1967 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  594.485723][T17062] Tainted: [L]=SOFTLOCKUP
[  594.485727][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  594.485733][T17062] Call Trace:
[  594.485737][T17062]  <TASK>
[  594.485741][T17062]  dump_stack_lvl+0x100/0x190
[  594.485763][T17062]  should_fail_ex.cold+0x5/0xa
[  594.485779][T17062]  _copy_to_user+0x32/0xd0
[  594.485796][T17062]  wdm_read+0x69d/0xad0
[  594.485811][T17062]  ? get_pid_task+0xfc/0x250
[  594.485820][T17062]  ? get_pid_task+0xfc/0x250
[  594.485832][T17062]  ? __pfx_wdm_read+0x10/0x10
[  594.485845][T17062]  ? avc_policy_seqno+0x9/0x20
[  594.485856][T17062]  ? selinux_file_permission+0x8f/0x6d0
[  594.485874][T17062]  ? bpf_lsm_file_permission+0x9/0x10
[  594.485895][T17062]  ? security_file_permission+0x76/0x210
[  594.485920][T17062]  ? rw_verify_area+0xce/0x6d0
[  594.485943][T17062]  ? __pfx_wdm_read+0x10/0x10
[  594.485958][T17062]  vfs_read+0x1e4/0xb30
[  594.485977][T17062]  ? __pfx_vfs_read+0x10/0x10
[  594.485993][T17062]  ? find_held_lock+0x2b/0x80
[  594.486006][T17062]  ? __fget_files+0x215/0x3d0
[  594.486018][T17062]  ? __fget_files+0x215/0x3d0
[  594.486031][T17062]  ? __fget_files+0x21f/0x3d0
[  594.486046][T17062]  ksys_read+0x12a/0x250
[  594.486056][T17062]  ? __pfx_ksys_read+0x10/0x10
[  594.486069][T17062]  do_syscall_64+0x106/0xf80
[  594.486086][T17062]  ? clear_bhb_loop+0x40/0x90
[  594.486099][T17062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.486111][T17062] RIP: 0033:0x7fc6b6d9c799
[  594.486120][T17062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.486130][T17062] RSP: 002b:00007fc6b7d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  594.486141][T17062] RAX: ffffffffffffffda RBX: 00007fc6b7016090 RCX: 00007fc6b6d9c799
[  594.486148][T17062] RDX: 00000000000000db RSI: 0000200000000300 RDI: 000000000000000b
[  594.486154][T17062] RBP: 00007fc6b7d0d090 R08: 0000000000000000 R09: 0000000000000000
[  594.486160][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.486166][T17062] R13: 00007fc6b7016128 R14: 00007fc6b7016090 R15: 00007fff0996d8f8
[  594.486180][T17062]  </TASK>
[  594.842231][ T5862] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  594.855201][T15983] Bluetooth: hci5: command 0x1003 tx timeout
[  594.862426][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  595.002955][ T5862] usb 6-1: Using ep0 maxpacket: 32
[  595.011945][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.022218][ T5923] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  595.024054][ T5862] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  595.040038][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.049483][ T5862] usb 6-1: Product: syz
[  595.061146][ T5862] usb 6-1: Manufacturer: syz
[  595.068991][ T5862] usb 6-1: SerialNumber: syz
[  595.092949][ T5862] usb 6-1: config 0 descriptor??
[  595.103358][ T5862] usb 6-1: bad CDC descriptors
[  595.111402][ T5862] usb 6-1: unsupported MDLM descriptors
[  595.192385][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  595.199198][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  595.211360][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  595.230851][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  595.255115][ T5923] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  595.268972][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.286034][ T5923] usb 2-1: Product: syz
[  595.290445][ T5923] usb 2-1: Manufacturer: syz
[  595.296999][ T5923] usb 2-1: SerialNumber: syz
[  595.319606][ T5923] usb 2-1: config 0 descriptor??
[  595.445075][   T29] audit: type=1400 audit(1774850257.329:758): avc:  denied  { map } for  pid=17065 comm="syz.5.1973" path="socket:[41560]" dev="sockfs" ino=41560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  595.616646][   T29] audit: type=1400 audit(1774850257.329:759): avc:  denied  { read accept } for  pid=17065 comm="syz.5.1973" path="socket:[41560]" dev="sockfs" ino=41560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  595.702927][T17104] ��: renamed from batadv_slave_1
[  596.150508][ T5862] usb 6-1: USB disconnect, device number 24
[  596.201076][T17108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17108 comm=syz.4.1981
[  596.262267][   T10] usb 2-1: USB disconnect, device number 60
[  596.376754][ T5923] usb 3-1: USB disconnect, device number 57
[  596.762239][ T5923] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  597.025194][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  597.033304][ T5923] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  597.045329][ T5923] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  597.055768][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  597.122485][T17165] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1989'.
[  597.137512][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.166863][ T5923] usb 3-1: config 0 descriptor??
[  597.189652][T17165] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1989'.
[  597.907675][ T5923] usb 3-1: string descriptor 0 read error: -71
[  597.916227][ T5923] usb 3-1: USB disconnect, device number 58
[  597.934733][T17181] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  597.955506][   T29] audit: type=1400 audit(1774850259.839:760): avc:  denied  { map } for  pid=17180 comm="syz.1.1991" path="socket:[40672]" dev="sockfs" ino=40672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  598.012400][   T29] audit: type=1400 audit(1774850259.839:761): avc:  denied  { accept } for  pid=17180 comm="syz.1.1991" path="socket:[40672]" dev="sockfs" ino=40672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  598.049260][T17188] netlink: 'syz.1.1991': attribute type 1 has an invalid length.
[  598.794563][   T29] audit: type=1400 audit(1774850260.679:762): avc:  denied  { bind } for  pid=17204 comm="syz.5.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  599.056174][T17207] SELinux: ebitmap: truncated map
[  599.070222][T17218] lo speed is unknown, defaulting to 1000
[  599.133766][T17207] SELinux: failed to load policy
[  599.602226][   T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  599.763958][   T10] usb 3-1: config 0 has no interfaces?
[  599.783047][   T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  599.953581][ T5923] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  599.985274][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.232690][ T5923] usb 6-1: Using ep0 maxpacket: 16
[  600.232851][   T10] usb 3-1: Product: syz
[  600.256160][   T10] usb 3-1: Manufacturer: syz
[  600.261179][   T10] usb 3-1: SerialNumber: syz
[  600.261535][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  600.346459][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  600.347890][   T10] usb 3-1: config 0 descriptor??
[  600.386796][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  600.408764][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.436004][ T5923] usb 6-1: Product: syz
[  600.442957][ T5923] usb 6-1: Manufacturer: syz
[  600.450878][ T5923] usb 6-1: SerialNumber: syz
[  600.511907][ T5923] usb 6-1: config 0 descriptor??
[  600.555292][ T5923] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  600.589666][ T5923] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  600.633961][   T24] usb 3-1: USB disconnect, device number 59
[  601.263137][ T5923] em28xx 6-1:0.0: unknown em28xx chip ID (131)
[  601.290357][T17311] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2015'.
[  601.305518][T17311] netlink: 'syz.2.2015': attribute type 1 has an invalid length.
[  601.475599][ T5923] em28xx 6-1:0.0: Config register raw data: 0xab
[  601.481967][ T5923] em28xx 6-1:0.0: I2S Audio (3 sample rate(s))
[  601.519065][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'.
[  601.528245][ T5923] em28xx 6-1:0.0: No AC97 audio processor
[  601.557008][T17320] overlayfs: failed to clone upperpath
[  601.684810][ T5923] usb 6-1: USB disconnect, device number 25
[  601.921536][   T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  602.267684][   T24] usb 2-1: Using ep0 maxpacket: 16
[  602.276112][   T24] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  602.297575][   T24] usb 2-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  602.446628][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'.
[  602.474932][   T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  602.548351][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'.
[  602.560010][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.575957][T17347] netlink: 'syz.3.2023': attribute type 11 has an invalid length.
[  602.608241][   T24] usbhid 2-1:128.0: couldn't find an input interrupt endpoint
[  602.626288][T17347] netlink: 'syz.3.2023': attribute type 13 has an invalid length.
[  602.684093][T16733] Bluetooth: hci5: Frame reassembly failed (-84)
[  602.904213][   T29] audit: type=1400 audit(1774850264.789:763): avc:  denied  { append } for  pid=17378 comm="syz.4.2028" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  602.930228][T17379] loop3: detected capacity change from 0 to 7
[  602.940904][    C0] blk_print_req_error: 15 callbacks suppressed
[  602.940915][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  602.956759][    C0] buffer_io_error: 15 callbacks suppressed
[  602.956769][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  602.971718][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  602.981307][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  602.990556][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.000192][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.008350][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.017936][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.026779][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.036393][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.044556][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.054142][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.083570][T17381] Invalid logical block size (1022)
[  603.083581][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  603.192215][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.201801][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.217958][T17379] ldm_validate_partition_table(): Disk read failed.
[  603.280895][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  603.342212][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.351853][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.467446][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.477068][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.485335][   T24] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.499222][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  603.508819][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  603.522715][T17379] Dev loop3: unable to read RDB block 0
[  603.528383][   T24] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  603.553944][T17379]  loop3: unable to read partition table
[  603.562842][T17379] loop3: partition table beyond EOD, truncated
[  603.569076][T17379] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  603.584015][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  603.640011][   T24] usb 3-1: string descriptor 0 read error: -22
[  603.646417][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[  603.680704][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.917543][   T29] audit: type=1326 audit(1774850265.789:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.3.2032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a3f19c799 code=0xffff0000
[  604.112204][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  604.121574][   T24] hid_parser_main: 85 callbacks suppressed
[  604.121587][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.141785][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.155947][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.174572][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.194837][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.210904][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.227878][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.242058][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.252352][   T10] usb 5-1: device descriptor read/64, error -71
[  604.265269][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.283850][   T24] apple 0003:05AC:0253.0019: unknown main item tag 0x0
[  604.381199][   T24] apple 0003:05AC:0253.0019: hidraw0: USB HID vff.7e Device [HID 05ac:0253] on usb-dummy_hcd.2-1/input0
[  604.512611][   T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  604.648331][   T24] usb 2-1: USB disconnect, device number 61
[  604.662229][   T10] usb 5-1: device descriptor read/64, error -71
[  604.685468][   T29] audit: type=1400 audit(1774850266.569:765): avc:  denied  { name_bind } for  pid=17418 comm="syz.1.2033" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  604.692623][T15983] Bluetooth: hci5: command 0x1003 tx timeout
[  604.717562][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  605.644982][   T10] usb usb5-port1: attempt power cycle
[  605.859991][   T24] usb 3-1: USB disconnect, device number 60
[  605.993012][   T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  606.032869][   T10] usb 5-1: device descriptor read/8, error -71
[  606.255885][T17456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  606.522451][   T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  606.565666][   T10] usb 5-1: device descriptor read/8, error -71
[  606.732884][   T10] usb usb5-port1: unable to enumerate USB device
[  607.030156][T17471] syzkaller0: entered promiscuous mode
[  607.053014][T17471] 0: reclassify loop, rule prio 0, protocol 800
[  607.473112][   T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  607.508798][   T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  607.674577][   T10] usb 6-1: Using ep0 maxpacket: 16
[  608.070671][   T10] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  608.086309][   T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  608.158345][   T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  608.158370][   T10] usb 6-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  608.182090][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  608.258530][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  608.432266][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  608.441377][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.472041][   T10] usbhid 6-1:128.0: couldn't find an input interrupt endpoint
[  608.479365][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  608.541472][   T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  608.567809][   T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  608.582271][   T24] usb 2-1: Product: syz
[  608.587882][   T24] usb 2-1: Manufacturer: syz
[  608.600191][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  608.608097][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  608.614864][T17509] netlink: 'syz.2.2046': attribute type 1 has an invalid length.
[  608.668771][   T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  608.676183][T17509] macvlan2: entered promiscuous mode
[  608.681535][   T24] cdc_wdm 2-1:1.0: Unknown control protocol
[  608.780153][T17509] macvlan2: entered allmulticast mode
[  608.817589][T17509] bond1: entered promiscuous mode
[  608.845247][T17509] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  608.968353][T17509] bond1: left promiscuous mode
[  609.951028][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'.
[  609.960143][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'.
[  610.303575][   T10] usb 2-1: USB disconnect, device number 62
[  610.475920][T17593] netlink: 'syz.3.2056': attribute type 8 has an invalid length.
[  610.522972][   T10] usb 6-1: USB disconnect, device number 26
[  612.149243][T17632] FAULT_INJECTION: forcing a failure.
[  612.149243][T17632] name failslab, interval 1, probability 0, space 0, times 0
[  612.183757][T17632] CPU: 0 UID: 0 PID: 17632 Comm: syz.1.2065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.183789][T17632] Tainted: [L]=SOFTLOCKUP
[  612.183794][T17632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  612.183804][T17632] Call Trace:
[  612.183810][T17632]  <TASK>
[  612.183817][T17632]  dump_stack_lvl+0x100/0x190
[  612.183853][T17632]  should_fail_ex.cold+0x5/0xa
[  612.183877][T17632]  should_failslab+0xc2/0x120
[  612.183896][T17632]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  612.183923][T17632]  ? __alloc_skb+0x140/0x710
[  612.183951][T17632]  __alloc_skb+0x140/0x710
[  612.183973][T17632]  ? __alloc_skb+0x5b7/0x710
[  612.183994][T17632]  ? __pfx___alloc_skb+0x10/0x10
[  612.184024][T17632]  netlink_alloc_large_skb+0x69/0x150
[  612.184055][T17632]  netlink_sendmsg+0x680/0xda0
[  612.184086][T17632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.184123][T17632]  sock_write_iter+0x524/0x5a0
[  612.184141][T17632]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.184168][T17632]  ? __pfx_sock_write_iter+0x10/0x10
[  612.184195][T17632]  ? bpf_lsm_file_permission+0x9/0x10
[  612.184223][T17632]  ? security_file_permission+0x76/0x210
[  612.184251][T17632]  ? rw_verify_area+0xce/0x6d0
[  612.184279][T17632]  vfs_write+0x6ac/0x1070
[  612.184297][T17632]  ? __pfx_sock_write_iter+0x10/0x10
[  612.184317][T17632]  ? __pfx_vfs_write+0x10/0x10
[  612.184332][T17632]  ? find_held_lock+0x2b/0x80
[  612.184371][T17632]  ksys_write+0x1f8/0x250
[  612.184388][T17632]  ? __pfx_ksys_write+0x10/0x10
[  612.184411][T17632]  do_syscall_64+0x106/0xf80
[  612.184444][T17632]  ? clear_bhb_loop+0x40/0x90
[  612.184467][T17632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.184486][T17632] RIP: 0033:0x7f3efb79c799
[  612.184503][T17632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.184520][T17632] RSP: 002b:00007f3efc665028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  612.184538][T17632] RAX: ffffffffffffffda RBX: 00007f3efba15fa0 RCX: 00007f3efb79c799
[  612.184551][T17632] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  612.184561][T17632] RBP: 00007f3efc665090 R08: 0000000000000000 R09: 0000000000000000
[  612.184572][T17632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.184582][T17632] R13: 00007f3efba16038 R14: 00007f3efba15fa0 R15: 00007fff74a07128
[  612.184607][T17632]  </TASK>
[  612.554499][T17639] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2066'.
[  612.745190][T17651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2070'.
[  614.997803][T17681] xt_CT: You must specify a L4 protocol and not use inversions on it
[  615.082354][   T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  615.334427][   T24] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  615.352227][   T24] usb 2-1: config 0 has no interface number 0
[  615.358913][   T24] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  615.380630][   T24] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  615.442435][   T24] usb 2-1: config 0 interface 153 has no altsetting 0
[  615.479877][   T24] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  615.497520][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.524304][   T24] usb 2-1: Product: syz
[  615.857721][   T24] usb 2-1: Manufacturer: syz
[  615.869163][   T24] usb 2-1: SerialNumber: syz
[  615.898095][   T24] usb 2-1: config 0 descriptor??
[  615.907649][   T24] hub 2-1:0.153: bad descriptor, ignoring hub
[  615.914883][   T24] hub 2-1:0.153: probe with driver hub failed with error -5
[  615.923534][   T24] sierra 2-1:0.153: Sierra USB modem converter detected
[  616.015831][T17714] lo speed is unknown, defaulting to 1000
[  616.034522][   T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1)
[  616.188840][   T24] usb 2-1: USB disconnect, device number 63
[  616.206372][   T24] sierra 2-1:0.153: device disconnected
[  616.457369][T17755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'.
[  616.471007][T17755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'.
[  617.689585][T17782] ALSA: seq fatal error: cannot create timer (-16)
[  618.446372][T17795] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.2096'.
[  618.564045][   T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  618.742504][   T24] usb 5-1: Using ep0 maxpacket: 32
[  618.750470][   T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  618.766822][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  618.780507][   T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  618.812182][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.831828][   T24] usb 5-1: config 0 descriptor??
[  619.042385][   T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  619.047182][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  619.059398][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  619.155398][   T24] usb 5-1: USB disconnect, device number 42
[  619.272287][   T10] usb 6-1: Using ep0 maxpacket: 32
[  619.294747][   T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  619.303285][   T10] usb 6-1: config 0 has no interface number 0
[  619.311345][   T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  619.323364][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.331478][   T10] usb 6-1: Product: syz
[  619.341837][   T10] usb 6-1: Manufacturer: syz
[  619.346761][   T10] usb 6-1: SerialNumber: syz
[  619.363317][   T10] usb 6-1: config 0 descriptor??
[  619.383976][   T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  619.582223][   T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  619.611483][   T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  619.683194][   T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  619.803266][T17805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.840778][T17805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.112317][   T24] usb 5-1: Using ep0 maxpacket: 32
[  620.115786][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  620.118744][   T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  620.125437][   T10] usb 6-1: USB disconnect, device number 27
[  620.279857][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  620.343913][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  620.359567][   T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  620.361074][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  620.391686][   T10] quatech2 6-1:0.51: device disconnected
[  620.399731][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.440342][   T24] usb 5-1: config 0 descriptor??
[  620.449160][T17841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.592182][ T5862] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  620.644392][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'.
[  620.742256][ T5862] usb 3-1: Using ep0 maxpacket: 16
[  620.749375][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  620.773205][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  620.813884][ T5862] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  620.837374][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.967004][   T24] corsair-cpro 0003:1B1C:0C10.001A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0
[  620.975975][ T5862] usb 3-1: Product: syz
[  621.007047][ T5862] usb 3-1: Manufacturer: syz
[  621.027117][ T5862] usb 3-1: SerialNumber: syz
[  621.039333][ T5862] usb 3-1: config 0 descriptor??
[  621.056738][ T5862] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  621.068514][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2110'.
[  621.078340][ T5862] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  621.306493][   T24] corsair-cpro 0003:1B1C:0C10.001A: probe with driver corsair-cpro failed with error -71
[  621.478256][   T10] usb 5-1: USB disconnect, device number 43
[  621.611313][T17927] IPv6: sit1: Disabled Multicast RS
[  622.000938][ T5862] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  622.023625][ T5862] em28xx 3-1:0.0: Config register raw data: 0xab
[  622.030014][ T5862] em28xx 3-1:0.0: I2S Audio (1 sample rate(s))
[  622.036572][ T5862] em28xx 3-1:0.0: No AC97 audio processor
[  622.236884][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'.
[  622.260961][ T5862] usb 3-1: USB disconnect, device number 61
[  623.895600][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  623.902164][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  624.086826][T17987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  624.094989][ T5862] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  624.197474][   T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  624.589511][T17987] syzkaller0: entered promiscuous mode
[  624.595048][T17987] syzkaller0: entered allmulticast mode
[  624.600995][T17987] tipc: Resetting bearer <eth:syzkaller0>
[  624.652335][ T5862] usb 3-1: Using ep0 maxpacket: 32
[  624.658895][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  624.671120][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  624.682525][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  624.693561][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  624.705395][ T5862] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  624.714537][   T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  624.722145][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.724973][   T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  624.730307][ T5862] usb 3-1: Product: syz
[  624.739900][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.744188][ T5862] usb 3-1: Manufacturer: syz
[  624.751872][   T24] usb 6-1: Product: syz
[  624.756264][ T5862] usb 3-1: SerialNumber: syz
[  624.760231][   T24] usb 6-1: Manufacturer: syz
[  624.760247][   T24] usb 6-1: SerialNumber: syz
[  624.771762][ T5862] usb 3-1: config 0 descriptor??
[  624.912910][   T10] usb 2-1: Using ep0 maxpacket: 8
[  624.921017][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.932660][   T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  624.943422][   T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  624.952723][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  624.960729][   T10] usb 2-1: SerialNumber: syz
[  624.972656][   T10] usb 2-1: config 0 descriptor??
[  625.193184][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'.
[  625.428377][ T5923] usb 2-1: USB disconnect, device number 64
[  625.440041][T17986] tipc: Resetting bearer <eth:syzkaller0>
[  625.816490][ T5923] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  625.963060][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  625.969887][ T5923] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[  625.979588][ T5923] usb 5-1: config 251 has no interface number 0
[  625.994203][ T5923] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  626.008515][ T5923] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  626.018718][ T5923] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  626.029901][ T5923] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  626.041671][ T5923] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  626.054249][ T5923] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  626.067097][ T5923] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  626.078752][ T5923] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  626.097804][ T5923] usb 5-1: config 251 interface 202 has no altsetting 0
[  626.122827][ T5923] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  626.132555][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  626.147245][ T5923] usb 5-1: Product: syz
[  626.155237][ T5923] usb 5-1: SerialNumber: syz
[  626.172858][T18028] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  626.189004][   T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  626.209100][   T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  626.220413][   T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  626.252029][   T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  626.294616][   T24] usb 6-1: USB disconnect, device number 28
[  626.958501][   T10] usb 3-1: USB disconnect, device number 62
[  628.277220][ T5923] cxacru 5-1:251.202: cxacru_bind: interface has incorrect endpoints
[  628.285516][ T5923] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19!
[  628.774009][ T5923] usb 5-1: USB disconnect, device number 44
[  630.124874][T17986] tipc: Disabling bearer <eth:syzkaller0>
[  630.148650][T18085] lo speed is unknown, defaulting to 1000
[  630.763359][T18157] fuse: Bad value for 'user_id'
[  630.768329][T18157] fuse: Bad value for 'user_id'
[  630.780458][   T29] audit: type=1400 audit(1774850292.665:766): avc:  denied  { ioctl } for  pid=18145 comm="syz.1.2146" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  630.968618][T18161] Cannot find add_set index 0 as target
[  631.654725][T18167] batman_adv: batadv0: Adding interface: macvtap1
[  631.661251][T18167] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  631.883164][T18177] lo speed is unknown, defaulting to 1000
[  631.957702][   T29] audit: type=1400 audit(1774850549.828:767): avc:  denied  { shutdown } for  pid=18197 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  633.162776][ T5812] Bluetooth: hci5: command 0xfc11 tx timeout
[  633.282212][   T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  633.289886][ T5817] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  633.309344][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[  633.442220][   T10] usb 6-1: device descriptor read/64, error -32
[  633.571109][T18248] overlayfs: failed to clone upperpath
[  633.621813][T18250] overlayfs: failed to resolve './file1': -2
[  633.717469][   T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  633.902224][   T10] usb 6-1: Using ep0 maxpacket: 32
[  633.911919][   T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  633.921420][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.935618][   T10] usb 6-1: config 0 descriptor??
[  634.143732][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  634.157433][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  634.175123][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  634.182835][   T10] usb 6-1: media controller created
[  634.196927][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  634.553140][T18226] netlink: 'syz.5.2160': attribute type 32 has an invalid length.
[  634.982494][   T10] az6027: usb out operation failed. (-71)
[  634.988239][   T10] stb0899_attach: Driver disabled by Kconfig
[  634.994450][   T10] az6027: no front-end attached
[  634.994450][   T10] 
[  635.001705][   T10] az6027: usb out operation failed. (-71)
[  635.007502][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  635.015864][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35
[  635.030265][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  635.037354][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  635.052686][   T10] usb 6-1: USB disconnect, device number 30
[  635.084550][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  685.336769][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  685.343128][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  690.652793][T18313] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  691.449856][T18348] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2178'.
[  691.479289][T18350] ucma_write: process 1369 (syz.2.2181) changed security contexts after opening file descriptor, this is not allowed.
[  691.529726][T18347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2179'.
[  691.842185][ T5923] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  692.019908][ T5923] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  692.035710][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  692.059488][ T5923] usb 3-1: Product: syz
[  692.071126][ T5923] usb 3-1: Manufacturer: syz
[  692.080713][ T5923] usb 3-1: SerialNumber: syz
[  692.106065][ T5923] usb 3-1: config 0 descriptor??
[  692.152380][ T5923] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  692.168993][ T5923] dvb-usb: bulk message failed: -22 (2/0)
[  692.448671][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  692.489491][ T5923] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  692.502136][ T5923] usb 3-1: media controller created
[  692.542799][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  693.222854][ T5923] cxusb: set interface failed
[  693.227565][ T5923] dvb-usb: bulk message failed: -22 (1/0)
[  693.352497][ T5923] DVB: Unable to find symbol mt352_attach()
[  693.363169][ T5923] dvb-usb: bulk message failed: -22 (5/0)
[  693.401020][ T5923] zl10353_read_register: readreg error (reg=127, ret==-121)
[  693.408461][ T5923] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  693.782367][ T5862] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  694.073877][ T5923] rc_core: IR keymap rc-dvico-mce not found
[  694.079882][ T5923] Registered IR keymap rc-empty
[  694.322602][ T5862] usb 6-1: device descriptor read/64, error -71
[  694.416733][ T5923] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  694.442006][T18413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  694.456938][ T5923] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input36
[  694.488576][ T5923] dvb-usb: schedule remote query interval to 100 msecs.
[  694.535048][ T5923] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  694.572185][ T5862] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  694.578167][ T5923] usb 3-1: USB disconnect, device number 63
[  694.683943][ T5923] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  694.712280][ T5862] usb 6-1: device descriptor read/64, error -71
[  694.756713][T18422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2195'.
[  695.346202][ T5862] usb usb6-port1: attempt power cycle
[  695.872370][ T5862] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  695.902621][ T5862] usb 6-1: device descriptor read/8, error -71
[  696.075830][T18439] comedi comedi3: comedi_config --init_data is deprecated
[  696.152216][ T5862] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  696.172888][ T5862] usb 6-1: device descriptor read/8, error -71
[  696.283300][ T5862] usb usb6-port1: unable to enumerate USB device
[  697.412913][T18473] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.420091][T18473] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.196313][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  699.526627][T18455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.630650][T18473] gretap1: left promiscuous mode
[  699.657372][T15641] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.696322][T15641] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.732882][T15641] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.874393][T18493] ISOFS: Unable to identify CD-ROM format.
[  700.062901][T15641] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.074595][T15641] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  700.083079][T15641] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.091512][T15641] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  700.142419][T15641] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.842225][ T5923] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  700.949578][T18509] QAT: Invalid ioctl 1076910122
[  701.003940][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  701.021558][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short
[  701.055690][ T5923] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  701.144798][ T5923] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[  701.162416][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.170434][ T5923] usb 5-1: Product: syz
[  701.184769][ T5923] usb 5-1: Manufacturer: syz
[  701.189391][ T5923] usb 5-1: SerialNumber: syz
[  701.747410][   T29] audit: type=1400 audit(1774850619.618:768): avc:  denied  { write } for  pid=18496 comm="syz.4.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  701.907550][T18525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2205'.
[  701.947436][T18525] syz_tun (unregistering): left allmulticast mode
[  701.954320][T18525] syz_tun (unregistering): left promiscuous mode
[  701.972637][T18525] bridge0: port 4(syz_tun) entered disabled state
[  703.961860][T18547] netlink: 'syz.2.2219': attribute type 4 has an invalid length.
[  703.969968][T18547] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2219'.
[  703.994560][T18547] .`: renamed from bond0
[  704.382503][ T5923] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  704.523313][ T5923] usb 5-1: USB disconnect, device number 45
[  707.183955][   T29] audit: type=1400 audit(1774850625.068:769): avc:  denied  { name_bind } for  pid=18603 comm="syz.5.2229" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  710.115773][   T29] audit: type=1400 audit(1774850627.978:770): avc:  denied  { set_context_mgr } for  pid=18647 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  711.069941][T18653] blktrace: Concurrent blktraces are not allowed on nullb0
[  711.322911][   T29] audit: type=1400 audit(1774850627.978:771): avc:  denied  { call } for  pid=18647 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  711.356945][T18642] netlink: 'syz.4.2238': attribute type 6 has an invalid length.
[  712.572137][ T5862] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  712.862326][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  712.868815][ T5862] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  712.955301][ T5862] usb 5-1: config 0 has no interface number 0
[  712.961419][ T5862] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  713.422927][ T5862] usb 5-1: config 0 interface 85 has no altsetting 0
[  713.433654][ T5862] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  713.443594][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.451594][ T5862] usb 5-1: Product: syz
[  713.455792][ T5862] usb 5-1: Manufacturer: syz
[  713.460407][ T5862] usb 5-1: SerialNumber: syz
[  713.476960][ T5862] usb 5-1: config 0 descriptor??
[  713.767045][ T5862] appletouch 5-1:0.85: Failed to read mode from device.
[  713.784447][ T5862] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  713.958017][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  713.966246][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  713.978874][ T5862] usb 5-1: USB disconnect, device number 46
[  713.997395][   T29] audit: type=1400 audit(1774850631.868:772): avc:  denied  { write } for  pid=18699 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  715.866824][T18747] ALSA: seq fatal error: cannot create timer (-22)
[  716.139902][T18753] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2263'.
[  717.222245][ T5862] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  717.632451][ T5862] usb 2-1: Using ep0 maxpacket: 32
[  717.639779][ T5862] usb 2-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  717.671567][ T5862] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  717.719292][ T5862] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  717.738530][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.774242][ T5862] usb 2-1: config 0 descriptor??
[  718.138974][T18793] Invalid logical block size (83886080)
[  718.373889][ T5862] usb 2-1: string descriptor 0 read error: -71
[  718.386234][ T5862] usb 2-1: USB disconnect, device number 65
[  719.811546][T18819] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  720.557252][T18835] 9p: Bad value for 'wfdno'
[  721.608548][ T5923] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  721.914374][ T5923] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  721.937161][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.966522][ T5923] usb 2-1: config 0 descriptor??
[  722.088298][ T5923] cp210x 2-1:0.0: cp210x converter detected
[  723.089794][  T791] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  723.107750][ T5923] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32
[  723.132301][ T5923] cp210x 2-1:0.0: querying part number failed
[  723.192831][ T5923] usb 2-1: cp210x converter now attached to ttyUSB0
[  723.447630][  T791] usb 6-1: Using ep0 maxpacket: 32
[  723.478107][  T791] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  723.501102][  T791] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  723.526470][  T791] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  723.547132][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.578799][  T791] usb 6-1: config 0 descriptor??
[  723.759712][T18888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2289'.
[  725.436109][ T5862] usb 2-1: USB disconnect, device number 66
[  725.444676][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  725.467131][ T5862] cp210x 2-1:0.0: device disconnected
[  725.474937][  T791] usb 6-1: string descriptor 0 read error: -71
[  725.493093][  T791] usb 6-1: USB disconnect, device number 35
[  726.967481][T18928] netlink: 'syz.4.2297': attribute type 2 has an invalid length.
[  727.177847][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'.
[  727.502460][ T5862] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  727.644354][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'.
[  727.832460][ T5862] usb 3-1: Using ep0 maxpacket: 8
[  727.844861][ T5862] usb 3-1: config 2 has an invalid interface number: 4 but max is 0
[  727.872750][ T5862] usb 3-1: config 2 has no interface number 0
[  727.879043][ T5862] usb 3-1: config 2 interface 4 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024
[  727.926988][ T5862] usb 3-1: config 2 interface 4 has no altsetting 0
[  727.968721][ T5862] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0296, bcdDevice=f7.a6
[  727.997068][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.012187][  T791] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  728.042107][ T5862] usb 3-1: Product: 話ᦔ犯㱠Ⱈ팖幣釰ʪ驫雳㙷␭ʸṟ挳敍쌀䮠雯╎랥ᚵ몡럡撿쩎멟簔甔ᇈ诚摛ⅱ眥㐐爄ᗙ롊㬏艌⢵ऴꂦ컼ሓ쏸ﾸ⬧켂᝱Ω甾뼡恀庇㸝紙韬싽춽ᖒ뽷쌻烕횚늲淵㩭㆚慦䪘겛⯠퍼鮋㮬텧曭飺뜅ᐐr몖接⼀本캜孢䜅ﶗ抩궀軓넫錽農씕匝꿳ݒ
[  728.242288][ T5862] usb 3-1: Manufacturer: 㮨䲄쟵ꌥᾂ芰㖫姃튲伈⩺褃즄爋᪔촏ብ阡癜髦延鿗༻졮싖洮⿷睅ᒁI鰑溅氈ᒯ⟠腒坅↻굊漢䯼Ƨ⎎ꂦ벙ꉓꔈ撧ܣ饷ް䭜辒䇜᥀ᲶⲌ玒윙े嘺헅噏㊕怬漻ⓚᜅꚜ艪鍞⌈䄼
[  728.242409][  T791] usb 2-1: Using ep0 maxpacket: 32
[  728.364347][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'.
[  728.401445][  T791] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  728.411252][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.432135][ T5862] usb 3-1: SerialNumber: syz
[  728.436878][  T791] usb 2-1: Product: syz
[  728.458040][  T791] usb 2-1: Manufacturer: syz
[  728.489089][T18935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  728.497477][  T791] usb 2-1: SerialNumber: syz
[  728.609001][  T791] usb 2-1: config 0 descriptor??
[  728.743412][   T29] audit: type=1800 audit(1774850646.618:773): pid=18971 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2304" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0
[  728.842903][  T791] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32
[  728.860234][  T791] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -32)
[  728.929085][   T29] audit: type=1400 audit(1774850646.808:774): avc:  denied  { ioctl } for  pid=18934 comm="syz.2.2298" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x64ac scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  728.955756][  T791] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32
[  728.974762][  T791] usb 2-1: USB disconnect, device number 67
[  729.372540][T19005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.383043][T19005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.542403][ T5862] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  729.862214][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  730.002723][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  730.032910][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  730.064631][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  730.148402][ T5862] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  730.161267][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.180874][ T5862] usb 5-1: Product: syz
[  730.189704][ T5862] usb 5-1: Manufacturer: syz
[  730.203181][ T5862] usb 5-1: SerialNumber: syz
[  730.220536][ T5862] usb 5-1: config 0 descriptor??
[  730.239908][ T5862] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39
[  730.350139][    C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  730.571089][ T5862] usb 5-1: USB disconnect, device number 47
[  730.577036][    C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  730.577235][    C0] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[  730.986094][ T5862] usb 3-1: USB disconnect, device number 64
[  731.873227][   T29] audit: type=1400 audit(1774850649.748:775): avc:  denied  { bind } for  pid=19065 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  731.938181][   T29] audit: type=1400 audit(1774850649.778:776): avc:  denied  { listen } for  pid=19065 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  732.012202][   T29] audit: type=1400 audit(1774850649.778:777): avc:  denied  { accept } for  pid=19065 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  732.116073][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  732.185158][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  732.194071][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  732.201934][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  732.210345][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  732.277567][T19079] binder: 19071:19079 ioctl c018620c 200000000240 returned -1
[  732.285977][   T29] audit: type=1326 audit(1774850650.168:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.2.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b6d9c799 code=0x7ffc0000
[  732.313568][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'.
[  732.338922][T19073] lo speed is unknown, defaulting to 1000
[  732.419681][   T29] audit: type=1326 audit(1774850650.168:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.2.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b6d9c799 code=0x7ffc0000
[  732.488646][   T29] audit: type=1326 audit(1774850650.198:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.2.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc6b6d9c799 code=0x7ffc0000
[  732.514708][   T29] audit: type=1326 audit(1774850650.198:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.2.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b6d9c799 code=0x7ffc0000
[  732.550493][   T29] audit: type=1326 audit(1774850650.198:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.2.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b6d9c799 code=0x7ffc0000
[  732.637482][T19124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2325'.
[  733.547060][T19073] chnl_net:caif_netlink_parms(): no params data found
[  734.292290][ T5817] Bluetooth: hci5: command tx timeout
[  734.449698][T19073] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.502226][T19073] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.552023][T19073] bridge_slave_0: entered allmulticast mode
[  734.572413][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  734.572427][   T29] audit: type=1400 audit(1774850652.458:817): avc:  denied  { read } for  pid=19216 comm="syz.1.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  734.603465][T19073] bridge_slave_0: entered promiscuous mode
[  734.645403][T19073] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.669637][T19073] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.708521][T19073] bridge_slave_1: entered allmulticast mode
[  734.723813][T19073] bridge_slave_1: entered promiscuous mode
[  734.735949][T19230] fuse: Unknown parameter 'euid<00000000000000000000'
[  735.293132][T19251] C: renamed from team_slave_0 (while UP)
[  735.326324][T19073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.355851][T19073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.987928][T19073] team0: Port device team_slave_0 added
[  736.003647][T19073] team0: Port device team_slave_1 added
[  736.181454][T19073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.208991][T19073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.442173][T19073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.446775][ T5817] Bluetooth: hci5: command tx timeout
[  736.520066][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2335'.
[  736.635949][T19316] input: syz1 as /devices/virtual/input/input40
[  736.781063][T19073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.788531][T19073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.888883][T19073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.989502][T19326] netlink: 'syz.5.2335': attribute type 13 has an invalid length.
[  737.521252][T19326] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2335'.
[  737.550272][T19333] overlayfs: missing 'lowerdir'
[  737.711788][T19073] hsr_slave_0: entered promiscuous mode
[  737.729458][T19073] hsr_slave_1: entered promiscuous mode
[  737.760381][T19073] debugfs: 'hsr0' already exists in 'hsr'
[  737.788883][T19073] Cannot create hsr debugfs directory
[  737.942159][  T791] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  738.092376][  T791] usb 3-1: Using ep0 maxpacket: 8
[  738.109634][  T791] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  738.160647][  T791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  738.204255][ T1157] bridge_slave_1: left allmulticast mode
[  738.206894][  T791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  738.243300][ T1157] bridge_slave_1: left promiscuous mode
[  738.249245][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.268149][  T791] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  738.307477][  T791] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  738.388242][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.389013][T19419] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2343'.
[  738.600815][ T5817] Bluetooth: hci5: command tx timeout
[  738.617806][ T1157] bridge_slave_0: left allmulticast mode
[  738.625371][ T1157] bridge_slave_0: left promiscuous mode
[  738.632623][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.842552][  T791] usb 3-1: GET_CAPABILITIES returned 0
[  738.874464][  T791] usbtmc 3-1:16.0: can't read capabilities
[  739.469551][ T5862] usb 3-1: USB disconnect, device number 65
[  740.612502][ T5817] Bluetooth: hci5: command tx timeout
[  741.622137][   T29] audit: type=1400 audit(1774850659.498:818): avc:  denied  { ioctl } for  pid=19462 comm="syz.1.2348" path="socket:[46771]" dev="sockfs" ino=46771 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  742.144558][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.199200][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.228482][ T1157] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  742.259253][ T1157] bond0 (unregistering): Released all slaves
[  742.291863][ T1157] bond1 (unregistering): Released all slaves
[  742.329966][ T1157] bond2 (unregistering): Released all slaves
[  742.594796][T19492] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  743.020157][ T1157] tipc: Disabling bearer <udp:syz2>
[  743.053648][ T1157] tipc: Left network mode
[  743.844312][   T29] audit: type=1400 audit(1774850661.728:819): avc:  denied  { bind } for  pid=19538 comm="syz.1.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  745.348126][T19536] SELinux: failed to load policy
[  745.359160][   T29] audit: type=1400 audit(1774850663.228:820): avc:  denied  { mount } for  pid=19576 comm="syz.1.2361" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  745.556753][T19583] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  745.976161][T19602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2349'.
[  746.369283][T19620] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2349'.
[  746.776839][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  746.783266][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  746.802628][T19620] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  747.439407][T19637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2360'.
[  747.912272][T19642] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  748.436310][ T1157] hsr_slave_0: left promiscuous mode
[  748.458861][ T1157] hsr_slave_1: left promiscuous mode
[  748.464856][ T1157] batman_adv: batadv0: Removing interface: 
2
6��
[  748.481413][   T29] audit: type=1326 audit(1774850666.358:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.5.2370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46ecf9c799 code=0xffff0000
[  749.844750][T19652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2371'.
[  752.813883][ T1157] team0 (unregistering): Port device team_slave_1 removed
[  753.236062][ T1157] vcan0 (unregistering): left allmulticast mode
[  753.365283][T19686] netlink: 'syz.4.2374': attribute type 21 has an invalid length.
[  753.530663][T19703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2372'.
[  754.646528][T19674] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2375'.
[  754.675552][T19686] netlink: 'syz.4.2374': attribute type 1 has an invalid length.
[  754.712843][T19686] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2374'.
[  754.847432][T19073] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  755.097746][T19073] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  755.144955][T19073] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  755.193823][T19073] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  755.890162][T19742] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  756.100564][T19073] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.110742][ T1157] IPVS: stop unused estimator thread 0...
[  757.074704][T19073] 8021q: adding VLAN 0 to HW filter on device team0
[  757.117401][T16733] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.124550][T16733] bridge0: port 1(bridge_slave_0) entered forwarding state
[  757.233147][T16733] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.240237][T16733] bridge0: port 2(bridge_slave_1) entered forwarding state
[  758.684979][T19073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  759.180028][T19073] veth0_vlan: entered promiscuous mode
[  759.283267][T19073] veth1_vlan: entered promiscuous mode
[  759.381011][T19073] veth0_macvtap: entered promiscuous mode
[  759.415270][T19823] syzkaller0: entered promiscuous mode
[  759.426030][T19073] veth1_macvtap: entered promiscuous mode
[  759.482634][   T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  759.663742][   T24] usb 3-1: Using ep0 maxpacket: 8
[  759.677331][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  759.704023][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  759.736129][   T24] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  759.751423][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.771145][   T24] usb 3-1: Product: syz
[  759.781011][   T24] usb 3-1: Manufacturer: syz
[  759.851223][   T24] usb 3-1: SerialNumber: syz
[  759.858793][   T24] usb 3-1: config 0 descriptor??
[  760.310379][ T5862] usb 3-1: USB disconnect, device number 66
[  762.172672][   T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  762.323284][   T24] usb 2-1: device descriptor read/64, error -71
[  762.563338][   T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  762.712277][   T24] usb 2-1: device descriptor read/64, error -71
[  762.845783][   T24] usb usb2-port1: attempt power cycle
[  763.132786][T19073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.257338][T19073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.272220][   T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  763.281070][   T29] audit: type=1400 audit(1774850681.158:822): avc:  denied  { write } for  pid=19892 comm="syz.2.2395" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  763.316127][   T24] usb 2-1: device descriptor read/8, error -71
[  763.344746][T15641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.365457][T15641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.506498][T15641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  764.001918][T15641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  764.052251][   T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  764.074426][   T24] usb 2-1: device descriptor read/8, error -71
[  764.194502][   T24] usb usb2-port1: unable to enumerate USB device
[  764.274872][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.294276][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.412361][T19937] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  764.421147][   T29] audit: type=1326 audit(1774850682.298:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  764.448438][   T29] audit: type=1326 audit(1774850682.298:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  764.474037][   T29] audit: type=1326 audit(1774850682.328:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  764.553243][T15641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.577345][T15641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.605805][   T29] audit: type=1326 audit(1774850682.328:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  764.715246][   T29] audit: type=1326 audit(1774850682.328:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  764.739915][   T29] audit: type=1326 audit(1774850682.328:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  764.772204][  T792] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  764.996517][  T792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  765.235778][   T29] audit: type=1326 audit(1774850682.328:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  765.274615][  T792] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  765.303569][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.311656][   T29] audit: type=1326 audit(1774850682.328:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  765.348121][  T792] usb 6-1: Product: syz
[  765.362268][  T792] usb 6-1: Manufacturer: syz
[  765.371077][  T792] usb 6-1: SerialNumber: syz
[  765.535604][   T29] audit: type=1326 audit(1774850682.328:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63e2b9c799 code=0x7ffc0000
[  765.559549][  T792] usb 6-1: config 0 descriptor??
[  765.567146][  T792] mcba_usb 6-1:0.0: Can't find endpoints
[  765.831732][T19942] mkiss: ax0: crc mode is auto.
[  767.452131][  T792] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  767.762156][  T792] usb 4-1: Using ep0 maxpacket: 32
[  767.778359][  T792] usb 4-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  767.789132][  T792] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  767.862101][  T792] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  768.328817][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.370814][  T792] usb 4-1: config 0 descriptor??
[  768.745008][ T5923] usb 6-1: USB disconnect, device number 36
[  769.004201][T20023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.016616][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  769.016631][   T29] audit: type=1400 audit(1774850686.888:837): avc:  denied  { connect } for  pid=20009 comm="syz.1.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  769.176620][T20028] netlink: 'syz.5.2411': attribute type 1 has an invalid length.
[  769.182375][T20027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2413'.
[  769.609690][  T792] usb 4-1: string descriptor 0 read error: -71
[  769.630997][  T792] usb 4-1: USB disconnect, device number 4
[  769.760921][T20028] 8021q: adding VLAN 0 to HW filter on device bond3
[  770.106242][T20031] bond3: (slave veth5): Enslaving as an active interface with a down link
[  771.027184][T20037] bond2: (slave dummy0): Releasing active interface
[  771.109314][T20037] bond3: (slave dummy0): making interface the new active one
[  771.124286][T20037] dummy0: entered promiscuous mode
[  771.136776][T20037] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  773.435067][T20122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2421'.
[  774.061790][T20134] batman_adv: batadv0: Adding interface: macvtap3
[  774.092770][T20134] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  774.162238][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'.
[  774.177971][T20134] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active
[  774.328566][T20122] netdevsim netdevsim5: Direct firmware load for 
 failed with error -2
[  774.337505][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'.
[  774.449192][   T29] audit: type=1400 audit(1774850692.308:838): avc:  denied  { firmware_load } for  pid=20121 comm="syz.5.2421" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  774.477794][T20122] netdevsim netdevsim5: Falling back to sysfs fallback for: 

[  775.574503][ T5862] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  775.852149][ T5862] usb 6-1: device descriptor read/64, error -71
[  776.114480][ T5862] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  776.302652][ T5862] usb 6-1: device descriptor read/64, error -71
[  776.448260][ T5862] usb usb6-port1: attempt power cycle
[  776.497172][T20180] FAULT_INJECTION: forcing a failure.
[  776.497172][T20180] name failslab, interval 1, probability 0, space 0, times 0
[  776.510409][T20180] CPU: 1 UID: 0 PID: 20180 Comm: syz.2.2437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  776.510428][T20180] Tainted: [L]=SOFTLOCKUP
[  776.510432][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  776.510438][T20180] Call Trace:
[  776.510443][T20180]  <TASK>
[  776.510448][T20180]  dump_stack_lvl+0x100/0x190
[  776.510470][T20180]  should_fail_ex.cold+0x5/0xa
[  776.510484][T20180]  should_failslab+0xc2/0x120
[  776.510497][T20180]  __kvmalloc_node_noprof+0xfa/0xa00
[  776.510514][T20180]  ? seq_read_iter+0x819/0x1270
[  776.510527][T20180]  seq_read_iter+0x819/0x1270
[  776.510544][T20180]  seq_read+0x33b/0x4c0
[  776.510555][T20180]  ? __pfx_seq_read+0x10/0x10
[  776.510568][T20180]  ? avc_policy_seqno+0x9/0x20
[  776.510579][T20180]  ? selinux_file_permission+0x8f/0x6d0
[  776.510598][T20180]  ? rw_verify_area+0xce/0x6d0
[  776.510613][T20180]  ? __pfx_seq_read+0x10/0x10
[  776.510624][T20180]  vfs_read+0x1e4/0xb30
[  776.510642][T20180]  ? __pfx_vfs_read+0x10/0x10
[  776.510658][T20180]  ? __fget_files+0x215/0x3d0
[  776.510672][T20180]  ? __fget_files+0x21f/0x3d0
[  776.510699][T20180]  ksys_read+0x12a/0x250
[  776.510709][T20180]  ? __pfx_ksys_read+0x10/0x10
[  776.510717][T20180]  ? set_current_groups+0x91/0xd0
[  776.510733][T20180]  do_syscall_64+0x106/0xf80
[  776.510750][T20180]  ? clear_bhb_loop+0x40/0x90
[  776.510763][T20180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.510775][T20180] RIP: 0033:0x7fc6b6d9c799
[  776.510784][T20180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.510794][T20180] RSP: 002b:00007fc6b7d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  776.510806][T20180] RAX: ffffffffffffffda RBX: 00007fc6b7016090 RCX: 00007fc6b6d9c799
[  776.510812][T20180] RDX: 0000000000002020 RSI: 0000200000003680 RDI: 0000000000000005
[  776.510818][T20180] RBP: 00007fc6b7d0d090 R08: 0000000000000000 R09: 0000000000000000
[  776.510827][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.510835][T20180] R13: 00007fc6b7016128 R14: 00007fc6b7016090 R15: 00007fff0996d8f8
[  776.510859][T20180]  </TASK>
[  777.043614][ T5862] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  777.315725][ T5862] usb 6-1: device descriptor read/8, error -71
[  777.812459][  T791] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  777.822170][ T5862] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  777.843355][ T5862] usb 6-1: device descriptor read/8, error -71
[  777.952415][ T5862] usb usb6-port1: unable to enumerate USB device
[  778.011102][  T791] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  778.031363][  T791] usb 3-1: config 0 interface 0 has no altsetting 0
[  778.058833][  T791] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  778.077496][T20199] xt_TPROXY: Can be used only with -p tcp or -p udp
[  778.087555][  T791] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  778.126072][  T791] usb 3-1: Product: syz
[  778.130261][  T791] usb 3-1: Manufacturer: syz
[  778.149446][  T791] usb 3-1: SerialNumber: syz
[  778.185356][  T791] usb 3-1: config 0 descriptor??
[  778.204040][  T791] usb 3-1: selecting invalid altsetting 0
[  778.488932][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'.
[  778.505825][T20243] openvswitch: netlink: Missing key (keys=200040, expected=100)
[  778.507270][  T791] usb 3-1: USB disconnect, device number 67
[  778.639265][T20190] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow!
[  778.724266][T19936] udevd[19936]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  779.617736][T20270] Timeout policy `syz0' can only be used by L3 protocol number 34984
[  780.622140][  T791] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  780.792908][  T791] usb 3-1: Using ep0 maxpacket: 16
[  780.816162][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.865837][  T791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  780.949219][  T791] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  780.981816][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.010787][  T791] usb 3-1: config 0 descriptor??
[  781.312234][   T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  781.454749][  T791] hid_parser_main: 4007 callbacks suppressed
[  781.454763][  T791] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  781.486771][  T791] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  781.506429][  T791] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  781.522956][  T791] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  781.543661][  T791] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  781.552106][   T24] usb 6-1: Using ep0 maxpacket: 32
[  781.565857][   T24] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  781.577688][  T791] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  781.596510][  T791] belkin 0003:1020:0006.001B: unexpected long global item
[  781.606658][   T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  781.624648][  T791] belkin 0003:1020:0006.001B: parse failed
[  781.630645][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  781.645283][  T791] belkin 0003:1020:0006.001B: probe with driver belkin failed with error -22
[  781.655603][T20304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.667314][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.675772][T20304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.702135][   T24] usb 6-1: config 0 descriptor??
[  781.714337][T20350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.752575][T20350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.773512][  T791] usb 3-1: USB disconnect, device number 68
[  782.823289][   T24] usb 6-1: string descriptor 0 read error: -71
[  782.849360][   T24] usb 6-1: USB disconnect, device number 41
[  782.896790][T20389] FAULT_INJECTION: forcing a failure.
[  782.896790][T20389] name failslab, interval 1, probability 0, space 0, times 0
[  782.909469][T20389] CPU: 1 UID: 0 PID: 20389 Comm: syz.4.2463 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  782.909486][T20389] Tainted: [L]=SOFTLOCKUP
[  782.909490][T20389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  782.909496][T20389] Call Trace:
[  782.909501][T20389]  <TASK>
[  782.909505][T20389]  dump_stack_lvl+0x100/0x190
[  782.909527][T20389]  should_fail_ex.cold+0x5/0xa
[  782.909541][T20389]  should_failslab+0xc2/0x120
[  782.909553][T20389]  __kvmalloc_node_noprof+0xfa/0xa00
[  782.909570][T20389]  ? bpf_test_run_xdp_live+0x16f/0x760
[  782.909584][T20389]  ? find_held_lock+0x1/0x80
[  782.909599][T20389]  ? synchronize_rcu_expedited+0x3c3/0x450
[  782.909611][T20389]  bpf_test_run_xdp_live+0x16f/0x760
[  782.909626][T20389]  ? __mutex_unlock_slowpath+0x15c/0x790
[  782.909644][T20389]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  782.909659][T20389]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  782.909676][T20389]  ? __pfx___schedule+0x10/0x10
[  782.909690][T20389]  ? find_held_lock+0x2b/0x80
[  782.909706][T20389]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  782.909730][T20389]  ? 0xffffffffa02057c0
[  782.909739][T20389]  ? 0xffffffffa02057c0
[  782.909747][T20389]  ? bpf_dispatcher_change_prog+0x2dc/0xa60
[  782.909763][T20389]  bpf_prog_test_run_xdp+0xd7d/0x1670
[  782.909784][T20389]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  782.909804][T20389]  ? fput+0x79/0x100
[  782.909816][T20389]  ? __bpf_prog_get+0x97/0x2a0
[  782.909832][T20389]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  782.909848][T20389]  __sys_bpf+0x1725/0x4b90
[  782.909862][T20389]  ? __pfx___sys_bpf+0x10/0x10
[  782.909872][T20389]  ? proc_fail_nth_write+0x9f/0x220
[  782.909888][T20389]  ? find_held_lock+0x2b/0x80
[  782.909905][T20389]  ? find_held_lock+0x2b/0x80
[  782.909918][T20389]  ? ksys_write+0x190/0x250
[  782.909930][T20389]  ? __mutex_unlock_slowpath+0x15c/0x790
[  782.909947][T20389]  ? __fget_files+0x215/0x3d0
[  782.909966][T20389]  ? fput+0x79/0x100
[  782.909978][T20389]  ? ksys_write+0x1ac/0x250
[  782.909987][T20389]  ? __pfx_ksys_write+0x10/0x10
[  782.909999][T20389]  __x64_sys_bpf+0x7b/0xc0
[  782.910015][T20389]  ? lockdep_hardirqs_on+0x78/0x100
[  782.910031][T20389]  do_syscall_64+0x106/0xf80
[  782.910046][T20389]  ? clear_bhb_loop+0x40/0x90
[  782.910059][T20389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.910070][T20389] RIP: 0033:0x7f63e2b9c799
[  782.910079][T20389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.910089][T20389] RSP: 002b:00007f63e3ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  782.910100][T20389] RAX: ffffffffffffffda RBX: 00007f63e2e15fa0 RCX: 00007f63e2b9c799
[  782.910107][T20389] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  782.910113][T20389] RBP: 00007f63e3ac6090 R08: 0000000000000000 R09: 0000000000000000
[  782.910118][T20389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  782.910124][T20389] R13: 00007f63e2e16038 R14: 00007f63e2e15fa0 R15: 00007ffdcc542838
[  782.910138][T20389]  </TASK>
[  783.524814][   T29] audit: type=1326 audit(1774850957.400:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.064909][   T29] audit: type=1326 audit(1774850957.400:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.128031][   T29] audit: type=1326 audit(1774850957.400:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.212127][   T29] audit: type=1326 audit(1774850957.400:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.332135][   T29] audit: type=1326 audit(1774850957.400:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.452200][T20402] use of bytesused == 0 is deprecated and will be removed in the future,
[  784.461675][T20402] use the actual size instead.
[  784.494218][   T29] audit: type=1326 audit(1774850957.400:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.555055][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[  784.736381][   T29] audit: type=1326 audit(1774850957.400:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  784.966749][   T29] audit: type=1326 audit(1774850957.400:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f120859c799 code=0x7ffc0000
[  785.726386][T15641] dummy0: left promiscuous mode
[  785.735183][T20439] FAULT_INJECTION: forcing a failure.
[  785.735183][T20439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.195364][   T29] audit: type=1326 audit(1774850957.400:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f120859c502 code=0x7ffc0000
[  786.239091][T20439] CPU: 0 UID: 0 PID: 20439 Comm: syz.2.2475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.239121][T20439] Tainted: [L]=SOFTLOCKUP
[  786.239127][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  786.239138][T20439] Call Trace:
[  786.239143][T20439]  <TASK>
[  786.239150][T20439]  dump_stack_lvl+0x100/0x190
[  786.239182][T20439]  should_fail_ex.cold+0x5/0xa
[  786.239205][T20439]  _copy_to_user+0x32/0xd0
[  786.239226][T20439]  simple_read_from_buffer+0xcb/0x170
[  786.239245][T20439]  proc_fail_nth_read+0x1af/0x230
[  786.239272][T20439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  786.239297][T20439]  ? rw_verify_area+0xce/0x6d0
[  786.239321][T20439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  786.239346][T20439]  vfs_read+0x1e4/0xb30
[  786.239375][T20439]  ? __pfx_vfs_read+0x10/0x10
[  786.239400][T20439]  ? __fget_files+0x215/0x3d0
[  786.239424][T20439]  ? __fget_files+0x21f/0x3d0
[  786.239448][T20439]  ksys_read+0x12a/0x250
[  786.239463][T20439]  ? __pfx_ksys_read+0x10/0x10
[  786.239485][T20439]  do_syscall_64+0x106/0xf80
[  786.239511][T20439]  ? clear_bhb_loop+0x40/0x90
[  786.239531][T20439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.239548][T20439] RIP: 0033:0x7fc6b6d5cfce
[  786.239563][T20439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  786.239579][T20439] RSP: 002b:00007fc6b7d2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  786.239595][T20439] RAX: ffffffffffffffda RBX: 00007fc6b7d2e6c0 RCX: 00007fc6b6d5cfce
[  786.239605][T20439] RDX: 000000000000000f RSI: 00007fc6b7d2e0a0 RDI: 0000000000000005
[  786.239615][T20439] RBP: 00007fc6b7d2e090 R08: 0000000000000000 R09: 0000000000000000
[  786.239625][T20439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.239634][T20439] R13: 00007fc6b7016038 R14: 00007fc6b7015fa0 R15: 00007fff0996d8f8
[  786.239658][T20439]  </TASK>
[  786.431011][   T29] audit: type=1326 audit(1774850957.400:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20392 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f120859c502 code=0x7ffc0000
[  787.039183][  T792] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  787.438825][  T792] usb 2-1: Using ep0 maxpacket: 16
[  787.453891][  T792] usb 2-1: config 251 has an invalid interface number: 202 but max is 0
[  787.477370][  T792] usb 2-1: config 251 has no interface number 0
[  787.647122][  T792] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  787.833184][  T792] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  787.873755][  T792] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  788.832150][  T792] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  788.852555][  T792] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  789.294209][  T792] usb 2-1: config 251 interface 202 altsetting 1 has a duplicate endpoint with address 0x81, skipping
[  789.343876][  T792] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  789.413473][  T792] usb 2-1: config 251 interface 202 has no altsetting 0
[  789.428950][  T792] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  789.456893][  T792] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=3
[  789.503038][  T792] usb 2-1: Product: syz
[  789.512290][  T792] usb 2-1: SerialNumber: syz
[  789.758688][  T792] gspca_main: spca501-2.14.0 probing 0000:0000
[  789.942419][  T792] gspca_spca501: reg write: error -71
[  789.947788][  T792] spca501 2-1:251.202: Reg write failed for 0x02,0x0f,0x05
[  790.555590][  T792] spca501 2-1:251.202: probe with driver spca501 failed with error -22
[  790.639017][  T792] usb 2-1: USB disconnect, device number 72
[  790.825707][T20499] sp0: Synchronizing with TNC
[  790.957657][T20510] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2485'.
[  791.792167][  T792] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  791.799282][  T791] IPVS: starting estimator thread 0...
[  792.075413][T20523] IPVS: using max 41 ests per chain, 98400 per kthread
[  792.423795][  T792] usb 3-1: Using ep0 maxpacket: 32
[  792.445372][  T792] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  792.479045][  T792] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  792.567237][  T792] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  792.606575][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.642178][  T791] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  792.659816][  T792] usb 3-1: config 0 descriptor??
[  792.859905][  T791] usb 4-1: New USB device found, idVendor=0499, idProduct=2000, bcdDevice= 0.40
[  792.869991][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.887411][  T791] usb 4-1: Product: syz
[  792.898459][  T791] usb 4-1: Manufacturer: syz
[  792.917161][  T791] usb 4-1: SerialNumber: syz
[  793.110661][   T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  793.351250][  T791] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  793.389072][  T792] usb 3-1: string descriptor 0 read error: -71
[  793.401005][   T10] usb 5-1: Using ep0 maxpacket: 8
[  793.408922][  T791] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  793.413675][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  793.446677][  T791] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  793.452223][  T792] usb 3-1: USB disconnect, device number 69
[  793.463252][ T5862] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  793.466736][  T791] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  793.495785][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  793.539391][   T10] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  793.557613][  T791] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  793.572903][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.589778][   T10] usb 5-1: Product: syz
[  793.600729][   T10] usb 5-1: Manufacturer: syz
[  793.621185][   T10] usb 5-1: SerialNumber: syz
[  793.717776][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  793.736464][   T10] usb 5-1: config 0 descriptor??
[  793.818415][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  793.825980][  T791] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  793.868505][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  793.882834][  T791] usb 4-1: USB disconnect, device number 5
[  793.906315][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  793.928430][T19931] udevd[19931]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  793.975955][   T10] usb 5-1: USB disconnect, device number 48
[  794.005843][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.039962][ T5862] usb 6-1: config 0 descriptor??
[  794.514769][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.557841][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.609748][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.651460][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.692021][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.752935][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.800727][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.828220][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.848837][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.869027][ T5862] logitech 0003:046D:C286.001C: unknown main item tag 0x0
[  794.901023][ T5862] logitech 0003:046D:C286.001C: hidraw0: USB HID v0.04 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0
[  794.952219][ T5862] logitech 0003:046D:C286.001C: no inputs found
[  794.958688][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2498'.
[  794.982148][   T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  795.153659][   T24] usb 5-1: Using ep0 maxpacket: 32
[  795.160202][   T24] usb 5-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  795.194535][   T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  795.273512][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  795.352191][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  795.352222][   T29] audit: type=1400 audit(1774850969.140:882): avc:  denied  { mount } for  pid=20543 comm="syz.5.2491" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  795.395963][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.528204][   T24] usb 5-1: config 0 descriptor??
[  796.269222][T20622] serio: Serial port ptm0
[  796.373733][   T24] usb 5-1: string descriptor 0 read error: -71
[  796.390425][   T24] usb 5-1: USB disconnect, device number 49
[  796.925464][T20640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20640 comm=syz.3.2501
[  797.486262][   T24] usb 6-1: USB disconnect, device number 42
[  797.547271][T20651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2503'.
[  798.558941][   T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  798.737065][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  799.092635][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  799.135183][   T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  799.153772][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  799.185794][   T24] usb 5-1: SerialNumber: syz
[  799.413489][ T5923] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  799.503947][   T24] usb 5-1: 0:2 : does not exist
[  799.583627][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  799.605954][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  799.626027][   T24] usb 5-1: USB disconnect, device number 50
[  799.649709][ T5923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  799.709943][T20249] udevd[20249]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  799.754777][ T5923] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  799.771733][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.803451][ T5923] usb 2-1: Product: syz
[  799.804949][T20694] syzkaller0: entered promiscuous mode
[  799.807679][ T5923] usb 2-1: Manufacturer: syz
[  799.858578][ T5923] usb 2-1: SerialNumber: syz
[  799.862189][T20694] syzkaller0: entered allmulticast mode
[  799.903487][ T5923] usb 2-1: config 0 descriptor??
[  800.054776][T20710] syzkaller0: entered promiscuous mode
[  800.097941][T20710] syzkaller0: entered allmulticast mode
[  800.131203][ T5923] usb 2-1: USB disconnect, device number 73
[  800.840515][   T29] audit: type=1400 audit(1774850974.720:883): avc:  denied  { sys_module } for  pid=20737 comm="syz.1.2515" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  801.513438][T20747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20747 comm=syz.4.2516
[  801.559931][T20747] 9pnet_virtio: no channels available for device syz
[  808.222454][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  808.228815][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  808.312365][   T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  808.472133][   T24] usb 5-1: Using ep0 maxpacket: 8
[  808.492750][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  808.519956][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  808.549173][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  808.578473][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  808.607705][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  808.635215][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  808.655916][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.682630][   T24] usb 5-1: config 0 descriptor??
[  808.705084][T20783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  809.965165][T20804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2524'.
[  811.101022][ T5817] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  812.036237][  T791] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  812.206449][  T791] usb 4-1: Using ep0 maxpacket: 16
[  812.240477][  T791] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  812.252148][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  812.300729][  T791] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  812.323098][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.331149][  T791] usb 4-1: Product: syz
[  812.342741][  T791] usb 4-1: Manufacturer: syz
[  812.347400][  T791] usb 4-1: SerialNumber: syz
[  812.370377][  T791] usb 4-1: config 0 descriptor??
[  812.390890][  T791] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  812.407776][  T791] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  812.698284][T20780] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  812.736353][ T5923] usb 5-1: USB disconnect, device number 51
[  812.910046][   T29] audit: type=1400 audit(1774850986.790:884): avc:  denied  { lock } for  pid=20846 comm="syz.1.2528" path="socket:[50578]" dev="sockfs" ino=50578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  812.913049][T20850] xt_hashlimit: size too large, truncated to 1048576
[  813.042352][  T791] em28xx 4-1:0.0: unknown em28xx chip ID (131)
[  813.172295][ T5923] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[  813.182140][   T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  813.244180][  T791] em28xx 4-1:0.0: Config register raw data: 0xab
[  813.261880][  T791] em28xx 4-1:0.0: I2S Audio (3 sample rate(s))
[  813.271843][  T791] em28xx 4-1:0.0: No AC97 audio processor
[  813.344440][   T24] usb 6-1: config 0 has no interfaces?
[  813.350026][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  813.359913][   T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  813.369174][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  813.390323][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.399146][ T5923] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  813.462604][   T24] usb 6-1: config 0 descriptor??
[  813.505863][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.564593][  T791] usb 4-1: USB disconnect, device number 6
[  813.690261][ T5923] usb 3-1: config 0 descriptor??
[  813.784552][T20839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.794182][T20839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.814998][   T24] usb 6-1: USB disconnect, device number 43
[  814.975060][ T5923] ath6kl: Failed to submit usb control message: -110
[  814.992148][ T5923] ath6kl: unable to send the bmi data to the device: -110
[  815.002103][   T29] audit: type=1400 audit(1774850988.880:885): avc:  denied  { create } for  pid=20842 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  815.032910][ T5923] ath6kl: Unable to send get target info: -110
[  815.050930][ T5923] ath6kl: Failed to init ath6kl core: -110
[  815.062756][ T5923] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110
[  815.076260][   T29] audit: type=1400 audit(1774850988.880:886): avc:  denied  { bind } for  pid=20842 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  815.150716][   T29] audit: type=1326 audit(1774850989.020:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20842 comm="syz.2.2527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6b6d9c799 code=0x0
[  815.624724][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'.
[  815.672258][   T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  815.832407][   T24] usb 6-1: Using ep0 maxpacket: 8
[  815.922256][ T5923] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  816.182792][   T24] usb 6-1: device descriptor read/all, error -71
[  816.288294][T20908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2535'.
[  816.922116][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  817.003821][ T5813] usb 3-1: USB disconnect, device number 70
[  817.026870][ T1157] ------------[ cut here ]------------
[  817.032614][ T1157] conntrack cleanup blocked for 60s
[  817.032626][ T1157] WARNING: net/netfilter/nf_conntrack_core.c:2511 at nf_conntrack_cleanup_net_list+0x4f7/0x690, CPU#1: kworker/u8:7/1157
[  817.050542][ T1157] Modules linked in:
[  817.055311][ T1157] CPU: 1 UID: 0 PID: 1157 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  817.066426][ T1157] Tainted: [L]=SOFTLOCKUP
[  817.070745][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  817.080986][ T1157] Workqueue: netns cleanup_net
[  817.085800][ T1157] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690
[  817.092752][ T1157] Code: 29 c3 48 89 de e8 89 ec 59 f8 48 85 db 78 0f e8 9f f1 59 f8 e8 9a 1a e3 01 e9 0e fc ff ff e8 90 f1 59 f8 48 8d 3d 09 4f 39 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 78 f1 59 f8 48 b8 00 00 00
[  817.112491][ T1157] RSP: 0018:ffffc900052af970 EFLAGS: 00010293
[  817.118588][ T1157] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffffffff89af0637
[  817.126628][ T1157] RDX: ffff888029584980 RSI: ffffffff89af0650 RDI: ffffffff90e85560
[  817.134636][ T1157] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[  817.142627][ T1157] R10: fffffffffffffffb R11: 0000000000000000 R12: 0000000000000001
[  817.150602][ T1157] R13: 0000000000000001 R14: ffffc900052afb28 R15: dffffc0000000000
[  817.158586][ T1157] FS:  0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000
[  817.167533][ T1157] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  817.175597][ T1157] CR2: 00007f12093456b8 CR3: 0000000031041000 CR4: 00000000003526f0
[  817.183850][ T1157] Call Trace:
[  817.187115][ T1157]  <TASK>
[  817.190022][ T1157]  ? nf_conntrack_cleanup_net_list+0x158/0x690
[  817.196213][ T1157]  ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10
[  817.202717][ T1157]  ? nf_conntrack_pernet_exit+0xaa/0x150
[  817.208332][ T1157]  ? kfree+0x1f6/0x6b0
[  817.212446][ T1157]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  817.218535][ T1157]  ops_undo_list+0x363/0xab0
[  817.223149][ T1157]  ? __pfx_ops_undo_list+0x10/0x10
[  817.228242][ T1157]  ? cleanup_net+0x332/0x920
[  817.232865][ T1157]  ? idr_destroy+0x62/0x2e0
[  817.237346][ T1157]  cleanup_net+0x499/0x920
[  817.241749][ T1157]  ? __pfx_cleanup_net+0x10/0x10
[  817.246716][ T1157]  ? rcu_is_watching+0x12/0xc0
[  817.251468][ T1157]  process_one_work+0xa23/0x19a0
[  817.256643][ T1157]  ? __pfx_process_one_work+0x10/0x10
[  817.262010][ T1157]  ? __pfx_cleanup_net+0x10/0x10
[  817.266996][ T1157]  worker_thread+0x5ef/0xe50
[  817.271577][ T1157]  ? kthread+0x13a/0x450
[  817.275887][ T1157]  ? __pfx_worker_thread+0x10/0x10
[  817.281008][ T1157]  kthread+0x370/0x450
[  817.285076][ T1157]  ? __pfx_kthread+0x10/0x10
[  817.289733][ T1157]  ret_from_fork+0x754/0xd80
[  817.294338][ T1157]  ? __pfx_ret_from_fork+0x10/0x10
[  817.299440][ T1157]  ? __switch_to+0x7b4/0x1120
[  817.304146][ T1157]  ? __pfx_kthread+0x10/0x10
[  817.308719][ T1157]  ret_from_fork_asm+0x1a/0x30
[  817.313589][ T1157]  </TASK>
[  817.316594][ T1157] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  817.323930][ T1157] CPU: 1 UID: 0 PID: 1157 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  817.334919][ T1157] Tainted: [L]=SOFTLOCKUP
[  817.339228][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  817.349252][ T1157] Workqueue: netns cleanup_net
[  817.354005][ T1157] Call Trace:
[  817.357291][ T1157]  <TASK>
[  817.360211][ T1157]  dump_stack_lvl+0x100/0x190
[  817.364874][ T1157]  vpanic+0x552/0x970
[  817.368830][ T1157]  ? __pfx_vpanic+0x10/0x10
[  817.373323][ T1157]  panic+0xd1/0xe0
[  817.377016][ T1157]  ? __pfx_panic+0x10/0x10
[  817.381410][ T1157]  ? check_panic_on_warn+0x1f/0x90
[  817.386502][ T1157]  check_panic_on_warn.cold+0x19/0x34
[  817.391847][ T1157]  ? nf_conntrack_cleanup_net_list+0x4f7/0x690
[  817.397970][ T1157]  __warn.cold+0x191/0x348
[  817.402366][ T1157]  __report_bug+0x296/0x3d0
[  817.406966][ T1157]  ? nf_conntrack_cleanup_net_list+0x4f7/0x690
[  817.413113][ T1157]  ? __pfx___report_bug+0x10/0x10
[  817.418115][ T1157]  ? nf_conntrack_cleanup_net_list+0x4f0/0x690
[  817.424251][ T1157]  ? nf_conntrack_cleanup_net_list+0x4d7/0x690
[  817.430380][ T1157]  ? nf_ct_iterate_cleanup_net+0xd9/0x110
[  817.436079][ T1157]  ? nf_ct_iterate_cleanup_net+0xd9/0x110
[  817.441768][ T1157]  ? irqentry_exit+0x180/0x670
[  817.446509][ T1157]  report_bug_entry+0xe1/0x290
[  817.451247][ T1157]  ? nf_conntrack_cleanup_net_list+0x4f7/0x690
[  817.457371][ T1157]  handle_bug+0x1cd/0x2a0
[  817.461673][ T1157]  exc_invalid_op+0x17/0x50
[  817.466146][ T1157]  asm_exc_invalid_op+0x1a/0x20
[  817.470966][ T1157] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690
[  817.477787][ T1157] Code: 29 c3 48 89 de e8 89 ec 59 f8 48 85 db 78 0f e8 9f f1 59 f8 e8 9a 1a e3 01 e9 0e fc ff ff e8 90 f1 59 f8 48 8d 3d 09 4f 39 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 78 f1 59 f8 48 b8 00 00 00
[  817.497383][ T1157] RSP: 0018:ffffc900052af970 EFLAGS: 00010293
[  817.503421][ T1157] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffffffff89af0637
[  817.511361][ T1157] RDX: ffff888029584980 RSI: ffffffff89af0650 RDI: ffffffff90e85560
[  817.519300][ T1157] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[  817.527249][ T1157] R10: fffffffffffffffb R11: 0000000000000000 R12: 0000000000000001
[  817.535193][ T1157] R13: 0000000000000001 R14: ffffc900052afb28 R15: dffffc0000000000
[  817.543148][ T1157]  ? nf_conntrack_cleanup_net_list+0x4d7/0x690
[  817.549274][ T1157]  ? nf_conntrack_cleanup_net_list+0x4f0/0x690
[  817.555401][ T1157]  ? nf_conntrack_cleanup_net_list+0x158/0x690
[  817.561526][ T1157]  ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10
[  817.568010][ T1157]  ? nf_conntrack_pernet_exit+0xaa/0x150
[  817.573616][ T1157]  ? kfree+0x1f6/0x6b0
[  817.577676][ T1157]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  817.583722][ T1157]  ops_undo_list+0x363/0xab0
[  817.588289][ T1157]  ? __pfx_ops_undo_list+0x10/0x10
[  817.593387][ T1157]  ? cleanup_net+0x332/0x920
[  817.597953][ T1157]  ? idr_destroy+0x62/0x2e0
[  817.602428][ T1157]  cleanup_net+0x499/0x920
[  817.606823][ T1157]  ? __pfx_cleanup_net+0x10/0x10
[  817.611738][ T1157]  ? rcu_is_watching+0x12/0xc0
[  817.616483][ T1157]  process_one_work+0xa23/0x19a0
[  817.621400][ T1157]  ? __pfx_process_one_work+0x10/0x10
[  817.626746][ T1157]  ? __pfx_cleanup_net+0x10/0x10
[  817.631676][ T1157]  worker_thread+0x5ef/0xe50
[  817.636240][ T1157]  ? kthread+0x13a/0x450
[  817.640450][ T1157]  ? __pfx_worker_thread+0x10/0x10
[  817.645529][ T1157]  kthread+0x370/0x450
[  817.649571][ T1157]  ? __pfx_kthread+0x10/0x10
[  817.654131][ T1157]  ret_from_fork+0x754/0xd80
[  817.658696][ T1157]  ? __pfx_ret_from_fork+0x10/0x10
[  817.663789][ T1157]  ? __switch_to+0x7b4/0x1120
[  817.668441][ T1157]  ? __pfx_kthread+0x10/0x10
[  817.672999][ T1157]  ret_from_fork_asm+0x1a/0x30
[  817.677742][ T1157]  </TASK>
[  817.681028][ T1157] Kernel Offset: disabled
[  817.685326][ T1157] Rebooting in 86400 seconds..