last executing test programs:

7m0.617219151s ago: executing program 2 (id=909):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0xa888}], 0x1, 0x0)

7m0.081349411s ago: executing program 2 (id=911):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x80002, 0x0)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r5, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14)
sendmmsg(r5, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x6ab091a24dcb2c58, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000200000085100000f8ffffff85000000a800000055531800000000000cb1800001000000183a0000010000000000000000000000185e00000a0000000000000000000000da4b80000400000018460000fbffff0080000000000000001846000003000000000000000000000095000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x317fffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x8, 0xa6d, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, r2, r2, r2, r2], 0x0, 0x10, 0x80}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001", @ANYRESDEC=r3, @ANYRESOCT=r0], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802)
r9 = fanotify_init(0x0, 0x0)
writev(r9, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2)

6m58.336873678s ago: executing program 2 (id=917):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x40, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0, 0xfcfd}])
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

6m56.456030743s ago: executing program 2 (id=922):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r2, 0x851, 0x0)
r3 = eventfd(0x0)
io_setup(0x25dc, 0x0)
io_submit(0x0, 0x35, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r3, &(0x7f0000000140)="20004075f40d00004b", 0x9, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x1000d, 0x0, 0x3, r3}])
sendto$packet(r0, &(0x7f00000002c0)="05033900d3fcbabe0000478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r1, 0x1, 0x10, 0x6, @multicast}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0xed, 0x7fff0001}]})
ustat(0x5, &(0x7f0000000000))
mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x300}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)

6m51.761297469s ago: executing program 2 (id=934):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r4], 0x27)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030328bd7000fddbdf253d000000ec85ac26883eb72e95a7a3c78eba136bd8f149dbb0dd6405f57ec75a03a01bfa42644064c53e91877a60df883d9fbcf1317674b0c8bc219595bf91419eb4cf0eb72738aa8f3ed08d76ba450bcc50bcf068c42982f6882233d2000034299db5e05600000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000010)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080))

6m51.167872211s ago: executing program 2 (id=936):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x3862}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1ff, @remote, 0xdbe}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @empty}], 0x68)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x1c1e82, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = io_uring_setup(0x550f, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0}, 0x20)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000101030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000)
io_uring_enter(r6, 0x64f5, 0x90f4, 0x1, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x9})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m35.330097874s ago: executing program 32 (id=936):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x3862}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1ff, @remote, 0xdbe}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @empty}], 0x68)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x1c1e82, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = io_uring_setup(0x550f, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0}, 0x20)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000101030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000)
io_uring_enter(r6, 0x64f5, 0x90f4, 0x1, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x9})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m48.412863721s ago: executing program 1 (id=1546):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000003030000100003800400010008000380"], 0x3c}}, 0x0)

3m45.548178995s ago: executing program 1 (id=1559):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
syz_usb_connect(0x0, 0x495, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xda, 0x7, 0x3, 0x8, 0x1fc9, 0x9b, 0x567f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x483, 0x1, 0x7, 0x86, 0x80, 0x36, "", [{{0x9, 0x4, 0x65, 0x51, 0x10, 0xe, 0x1, 0x0, 0x8, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x6, 0x0, 0x60, 0xeb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x3, 0xd, 0xe1}, @as_header={0x7, 0x24, 0x1, 0xfa, 0x4, 0x3}]}], [{{0x9, 0x5, 0x5, 0xc, 0x40, 0x8, 0x80, 0x2, [@generic={0xd7, 0x22, "6d6bf1f27b015055404d4cb1c23c4f84d053caf2e32be8b66ff770782f10290b66ed8c6d4987b1f5f98615b072b8d990de89e384e2eb7b698ed5f1811e5e01c912fc0bac5acc765cb6aa4026394f4b910fa755b9cfade0b98a4cd61f00c0d3dc7e65ba916bcbfc35772bf05d20d006233e97d886b0593802fdba270c94d65123645ff9fa3d454b41c13eb32abd814893723af5a0fbab7b46e9e97a23a12e92504a30274da3df57bb0a52e33474bb0503e52d363848867702ccb89b0791d50a1eb1666acfff66bd1117a63eb7ea45ee39804bf67137"}, @generic={0x69, 0x10, "6f0f3d1c71ae473509aae3a5a7d350fe5d345a7ef1011b0beaef403a81496d118a35426db60a9d27cec106312938cb1779a8d47edb35b19a622dea97cd6cd325700298f1850736b142d450d2ae91a58f3ff5a60296a643bb36e392954ad501fd5004e4af17eee3"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0xb, 0x7f, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x77, 0x82}]}}, {{0x9, 0x5, 0xe, 0x5, 0x400, 0x8, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x31, 0x0, 0x48, [@generic={0x96, 0xd, "b125860a45f6c75b6165c65ee2e56d8cfe2cc31650ebb749a02598aefc786ffec47b9392e5f47737527302d16ea69e054cff3ff092ad92367bb1c675cfa4ddc8a027f0eecb613b6ca3f09018378060023828ae8111f51e83aa5d1cc070cd7b3f1ae4d4642d8468dfe1356010389e388e9c577ab38d904eea043ca7d9ac76c652803114e446ebd91ee23004c1459cef177ab181c5"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x5, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x81}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0x55, 0xf2, [@generic={0x3d, 0x31, "af022bb14d3edde4408a5e172da487ce4446f05dd1122d91f6316c470dca6658168e11813445f792f941d89efec9666100001a3f95d98264e5cb9b"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x3, 0xa6, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xd73}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x9, 0x7a, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x6, 0xd, [@generic={0x8e, 0x3, "addb1b531ccf8107185626ed08a5f563120bdd0dcf2f94b116c0f59da3f567379a81bbf441d162dc6c4bc9f192f3ec07aa22bbd9e060fe17ea01270becc76c60938291471e9f2006a5f1c05d9319a902455e8214e94d3b2991a42598b68bf7f7069386e1823cc9f2915a4edce39d224fffddf919ec3ad494b8385c3eaa177e7f01a1b4722252c007f1f994b8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xd7, 0xf, 0x9}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x60, 0x6, 0x4}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xa, 0x2, 0x5, [@generic={0xef, 0x3, "0b659f8aa9ec10892113f7d890c4d0087b3214d1ff98e057faf67cf7cd6ad65701ecece03d30ee0d12907530a02d3aa61f6928988533b51f8ab8986e85b5696801c25850228c86f5a56d738763ecce71128dd88ff0010204d72fb9c1ed6241071d8d0442287e7c961812380cdbf50999c499135a00d7176ac896e9dba055a757cd5e3cd2512b8e4658c91e151f174f89e332e6c2c5f2fe868450e3b7395d40a2831cf31c599b5687b54ab6b16f0521713d6454a2f17b4afd2288b6b7a056e234f312f8d83c9881777dd57f86483c1b9229d799e8a4bbe11263623d62a7420d2649299f53cc3f39c6dd53d13f7d"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x3, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xb, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x7}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x5, 0x3, 0xf9, 0x10, 0x7f}, 0xfd, &(0x7f0000000b80)={0x5, 0xf, 0xfd, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x1c000, 0x0, 0x121, [0xff3f6f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x77, 0x50, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "39eb7a4712ee32c5d21561f7b635b16d"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x6, 0xf00f, 0xfeff, [0xfe8000, 0xff00c0, 0x3f00]}, @generic={0xae, 0x10, 0x5, "fee9f8cf7a92ac518f006e9bacb8556e8b1d687f0c263c1e4c634f155051043bee6b51359af32e473d149edb3bde637d0777b117b8c357e191da5711d599f80b91d248fca30a87737a02aadd1bde44f5e5b835c929de837b485c114ddf6645ebea00d960c06f48b8f672c8520dfd503d5f2e6171108f5b324de2256322c61b9dba4600240ee7b322447c0a37d167894f0e2e5ef8906b1c8d88deb25548dba28d9cde7ee0b56c4ec47fa665"}]}, 0x3, [{0x83, &(0x7f0000000c80)=@string={0x83, 0x3, "62bbe636152519b02442d25df1a30189f5dbcd8d40c772ee25aa52cf57998e528001e97089e9e51f5aa4807af42266228400b5fdd2adc77561c65fd72b4c9653575e526f43d171cb51a74e084dddc942cfb65de96362434c59785ccbd71353638b98a55a4cd2e8554cd66968afadf9f6aa17bf93991f580d041d62e812b01eff7b"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x810}}]})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$netlink(0x10, 0x3, 0x8)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
tee(r7, r6, 0x9, 0x2)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe})
close(r10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
mknodat(r9, &(0x7f0000000280)='./file0\x00', 0x8000, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x7}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @st={0x4, [{0x3, @svalue=0xfda}, {0x0, @svalue=0x2}, {0x2, @svalue=0x6}, {0x0, @svalue=0x1}]}, 0x74}, {0x2f, '\x00', @data, 0x2}, {0x9, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @uvalue=0x3a5}, {0x1, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x7}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x3, @svalue=0x4}, {0x1, @svalue}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x7fffffff, 0x7}, {0x2a, '\x00', @st={0x4, [{0x2, @uvalue=0xc}, {0x0, @svalue=0xffffffffffffffff}, {0x3, @svalue}, {0x1, @svalue=0x3ff}]}, 0x3}]})

3m37.558799698s ago: executing program 1 (id=1577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x9814, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4824)

3m34.927424677s ago: executing program 1 (id=1587):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) (async)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) (async, rerun: 32)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') (async)
listen(r2, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) (async, rerun: 64)
syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@lsrr={0x83, 0x7, 0xe3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async, rerun: 64)
recvfrom$inet6(r2, &(0x7f0000000580)=""/26, 0x1a, 0x0, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

3m34.098654512s ago: executing program 1 (id=1594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
r1 = socket(0x1, 0x803, 0x0)
r2 = socket(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8004)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18208}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="100026bd7000006100000004005f000a00340001010101010100000a003400010101010101000004005f000a00340002020202020200002b002a008225075a04040000000802110000007f00000040000000090000000101ffffffffffff01feffff00170034001b77463c658c4e05324252e07aed07c7118c270006003600040000001a002a000301b400090303030300000a0006005050505050500000"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20000080)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
semtimedop(r4, &(0x7f0000000480)=[{0x1, 0x1ff}], 0x1, 0x0)
semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000001c0)=""/16)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x208000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
unshare(0x24060400)
r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xd)

3m29.587971885s ago: executing program 1 (id=1605):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd33e32f4399000000a0000000bd19a432ebf20eb05a86458405e869fe74b9842d9c92be0054aa20f9dbfe010000009c09000000000000008618c709000000434c678807c5ab4264c8ba94065d"], 0xfffffd47, 0x40800}, {0x0, 0x0, &(0x7f0000019400)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb5", 0x6a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}, {&(0x7f0000000180)}, {&(0x7f0000019300)="ebd1d1a0e0f23a781c715aa13d5eca7d618f44d6d6b58d826d59c45722fb916554a96238c2875121bdf8766c39f4556c0f201a5e2e9ca5ebd520605a90b87d2eafc8e9afa77471e5726193195b5030fb9dc25d2aecef6366dbecb556871c746ddc90181dce75a780f02ec549fbbfbf2a0dc63ad32a4b7a1c96c28e0fde60d8a94ec0b1f361e1c6acc0df9b40440f7234ae6c0cc58388b8868ee2b817c87065dcf0dbd290db8379d797665dd1a18773115cb1c273da33e47f0f22a7f75a10d60c1321c0b6938d7e", 0xc7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000019540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000)
getrlimit(0xa, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700e00000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="bb29a6b9"], 0x3c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019480)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010028bd70000000000001000000500008804c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002535365dfbe1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c060006004e2100001400020077673000000000000000000000000000f147b53cce132378"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)

3m12.309549864s ago: executing program 33 (id=1605):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd33e32f4399000000a0000000bd19a432ebf20eb05a86458405e869fe74b9842d9c92be0054aa20f9dbfe010000009c09000000000000008618c709000000434c678807c5ab4264c8ba94065d"], 0xfffffd47, 0x40800}, {0x0, 0x0, &(0x7f0000019400)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb5", 0x6a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}, {&(0x7f0000000180)}, {&(0x7f0000019300)="ebd1d1a0e0f23a781c715aa13d5eca7d618f44d6d6b58d826d59c45722fb916554a96238c2875121bdf8766c39f4556c0f201a5e2e9ca5ebd520605a90b87d2eafc8e9afa77471e5726193195b5030fb9dc25d2aecef6366dbecb556871c746ddc90181dce75a780f02ec549fbbfbf2a0dc63ad32a4b7a1c96c28e0fde60d8a94ec0b1f361e1c6acc0df9b40440f7234ae6c0cc58388b8868ee2b817c87065dcf0dbd290db8379d797665dd1a18773115cb1c273da33e47f0f22a7f75a10d60c1321c0b6938d7e", 0xc7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000019540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000)
getrlimit(0xa, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700e00000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="bb29a6b9"], 0x3c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019480)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010028bd70000000000001000000500008804c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002535365dfbe1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c060006004e2100001400020077673000000000000000000000000000f147b53cce132378"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)

7.588557356s ago: executing program 0 (id=2389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x541040, 0x0)
ioctl$PPPIOCGIDLE(r4, 0x8010743f, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3800)
r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r12=>0x0)
r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000280)={0x6, 'veth1_vlan\x00', {}, 0xb3})
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
r14 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r15 = dup(r14)
ioctl$TCSETAF(r15, 0x5408, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$UHID_INPUT(r15, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006)
syz_ublk_setup_queues(r13, r12, &(0x7f0000001300)={0x0, 0xc808, 0x0, 0x2, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x8, 0x1, 0x2aa, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c35, 0x2, 0x0, 0x330, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x0, 0x2, 0x2db, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x15027, 0x2, 0x0, 0x2b7}}], 0x4, &(0x7f0000001f40)={0x2e, 0x1c, 0x0, r13, 0xc0107523, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r11, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, 0x0)

7.256016054s ago: executing program 3 (id=2390):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x200feff}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xb4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x80)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x20000000, 0x4000, 0x1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000005c0)="b9ff03076804268c989e140500c9", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
modify_ldt$read(0x0, &(0x7f0000000140)=""/4106, 0xfffffffffffffec9)

5.568590673s ago: executing program 6 (id=2394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)

5.568252047s ago: executing program 3 (id=2395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904"], 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
write$UHID_INPUT(r7, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000580)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)

5.473283418s ago: executing program 6 (id=2397):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x7c}}, 0x20000090)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100080000000000000000000002", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

5.320218081s ago: executing program 6 (id=2399):
r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0x8001, 0x8}}}, &(0x7f0000000080)={0x43, 0x0, 0x0, 0x0, 0x0, 0x0})

4.98784906s ago: executing program 4 (id=2400):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x3, 0x4, 0x4, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfa, 0x2, 0x3, 0xfffffff7, 0x7fffffff, 0x6, 0x5, 0x0, 0x1, 0x7, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0xffffffff, 0x5, 0x4006, 0x0, 0x13]})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00ff002000028004001200060018000900000005001700010000000500160002000000"], 0x54}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x400, 0x4)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20600)
connect$llc(r3, &(0x7f0000000080)={0x1a, 0x1, 0x6, 0x2, 0x9, 0x1}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.836850445s ago: executing program 4 (id=2401):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
splice(r2, &(0x7f00000001c0)=0x8, r1, &(0x7f0000000200)=0x3, 0x40, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x8, 0x9})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x20], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x73e9})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000))
munlockall()
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140))
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040))
mlockall(0x7)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f00000002c0)=0x1)

4.56047825s ago: executing program 6 (id=2402):
r0 = fsopen(&(0x7f0000000080)='minix\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='cifs\x00', 0x1200010, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={<r8=>0x0, @in={{0x2, 0x4e22, @empty}}, 0x40, 0xff}, &(0x7f0000000300)=0x90)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000340)={r8, @in={{0x2, 0x4e24, @loopback}}}, 0x84)
write(r6, &(0x7f00000006c0)="5c000000010001", 0x7)
shutdown(r1, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={<r9=>0x0, 0x8}, &(0x7f0000000140)=0x8)
r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xd)
read(r10, 0x0, 0x0)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r9, 0x3c, &(0x7f0000000200)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}, 0xe}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10)

4.187559727s ago: executing program 5 (id=2403):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd33e32f4399000000a0000000bd19a432ebf20eb05a86458405e869fe74b9842d9c92be0054aa20f9dbfe010000009c09000000000000008618c709000000434c678807c5ab4264c8ba94065d"], 0xfffffd47, 0x40800}, {0x0, 0x0, &(0x7f0000019400)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb5", 0x6a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}, {&(0x7f0000000180)}, {&(0x7f0000019300)="ebd1d1a0e0f23a781c715aa13d5eca7d618f44d6d6b58d826d59c45722fb916554a96238c2875121bdf8766c39f4556c0f201a5e2e9ca5ebd520605a90b87d2eafc8e9afa77471e5726193195b5030fb9dc25d2aecef6366dbecb556871c746ddc90181dce75a780f02ec549fbbfbf2a0dc63ad32a4b7a1c96c28e0fde60d8a94ec0b1f361e1c6acc0df9b40440f7234ae6c0cc58388b8868ee2b817c87065dcf0dbd290db8379d797665dd1a18773115cb1c273da33e47f0f22a7f75a10d60c1321c0b6938d7e", 0xc7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000019540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000)
getrlimit(0xa, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700a70000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="bb29a6b9"], 0x3c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019480)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010028bd70000000000001000000500008804c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002535365dfbe1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c060006004e2100001400020077673000000000000000000000000000f147b53cce132378"], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)

3.967541752s ago: executing program 0 (id=2404):
setreuid(0xffffffffffffffff, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

3.583916733s ago: executing program 3 (id=2405):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_UNLOCK(r5, 0xc)
shmctl$SHM_LOCK(r5, 0xb)
socket$inet6_sctp(0xa, 0x1, 0x84)

3.424296914s ago: executing program 0 (id=2406):
syz_emit_ethernet(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x40000000015, 0x5, 0x0)
io_setup(0x6, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_submit(r2, 0x2, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x5be, r5, 0x0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000000540)="896fc1ba2c99", 0x6, 0x5}])
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = fanotify_init(0x500, 0x400)
r8 = fcntl$dupfd(r6, 0x406, r6)
fanotify_mark(r7, 0x241, 0x40000019, r8, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

3.423975238s ago: executing program 5 (id=2407):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)

3.351443803s ago: executing program 4 (id=2408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0xf00, 0x0, 0x4008011}, 0x4000800)

3.236517304s ago: executing program 5 (id=2409):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400008f7bfcffffff00000001", @ANYRES32=r4, @ANYBLOB="0198ff04020800001800128008000100677265000c00028008000700ac141429"], 0x38}}, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0)
ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x138d, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003})

3.174937242s ago: executing program 0 (id=2410):
unshare(0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010c90a0400000004ffffffff0000006884f48ad2581e0a11614000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000240012800b00010067656e657665000014000280060005004e2300000500080003000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20048880)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f0000000040), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4044cd3)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$inet(0x2, 0x3, 0x1)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000200))
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000100))
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, 0x0, 0x40000})
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x70}, 0x1, 0x0, 0x0, 0x44840}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @random="0163014030d9"})
socket$inet6(0xa, 0x800000000000002, 0x10000)

3.174080845s ago: executing program 4 (id=2411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}, 0x1, 0x0, 0x3c000000}, 0x0)

3.012936077s ago: executing program 3 (id=2412):
r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0x8001, 0x8}}}, &(0x7f0000000080)={0x43, 0x0, 0x0, 0x0, 0x0, 0x0})

2.182251423s ago: executing program 5 (id=2413):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, 0x0, &(0x7f0000000180)=<r2=>0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880005d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

1.976931897s ago: executing program 0 (id=2414):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x200000001, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8000)
setpriority(0x2, 0x0, 0x6340)
syz_open_dev$tty1(0xc, 0x4, 0x2)
socket$kcm(0x2, 0xa, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, 0x0, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(0x0, r7, r8, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40})
syz_ublk_add_dev(r6, 0x0, r7, r8, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0)
syz_io_uring_complete(0x0, r7)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x4, 0x257, 0x0, r11}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1e8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bd, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x2000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x6b}}], 0x1, &(0x7f0000000340)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x3f, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x11b, 0x0, 0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r12=>0x0})
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
r13 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r13, 0x89ee, &(0x7f0000000300)=0xff00)
sendmsg$NL80211_CMD_NEW_MPATH(r11, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48)
getsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000000000)=0x4, &(0x7f00000000c0)=0x2)

1.913241365s ago: executing program 4 (id=2415):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80005002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5, 0x0, 0x0, 0x7c000000}, 0x0)

1.283017604s ago: executing program 5 (id=2416):
shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000)
mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r3 = fsopen(0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
fsmount(r3, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000500000004473148da000000030005000000000002000000ac1414aa0000000000000000"], 0x28}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x5, 0x1e)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x0, 0x7, 0x1)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)

1.238777133s ago: executing program 3 (id=2417):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000000)="d28458836ae731a230973736073c12e1c983985ab857af362d53a26e791669bb08ffd0ddc77bd7584d15ad77193c5acd40ccdda0f4913c284ff946f65812", 0x3e}, {&(0x7f00000000c0)="29aa43f2cfda485c243d0ffccfbe2a5add6e37a6b39b772f9f704e0487345ce741481b53927c0e297699b98fdfa6a318630a5dc1ca85d99bee5fb3231b90b52010e48b16555923ff4cc499a5c54cf2eb83b2950a9d15f505d2517f9dc0a7917f2439f43c358bec8bfb7a009eb81f9d7d15f8ebcc0fb39ec55f84ec158049ad21df605495c43257ef5f0caf240aebca8274cda8a07f85a583dbd247e6026e45241c57e287cf0e9b62d0cc30a0dbef6cea92fd103000f04ab1068b2d76fd03321cff20ab28c0bdb7a7cd6cc50314", 0xcd}, {&(0x7f0000000200)="6c255f7fc29c4a88cd6856e9ca853ffd128a4222c260e56cfd334bc8bb73c1bd2eae9cefbc51fc5ae42138ad7a71843428f75f8a26c9443dd6327df2585f27cf05c814256cca5b2dd81f6a61ad02284456126d5d79fa71ebab516018b46f7e011f7266922fb5d456ac8bb6c49eb88610779f2e7c4a1488f177fc1c1694c953446e92b479227779be8fec97660dc6e9e23fd3a82dc29be50a23e72205bf1a6c8cf9", 0xa1}, {&(0x7f0000000440)="f12c67980a5a88cda2e8be1c9c0a99eea15d8bbee22cda2aa83546dda2fe2826a4198bf0e6dbeb0c06461ba76ae1c514b7d05d3626b63b865c3a7d917b7df79815ff26860f538a6a6040299d089c8b5ede68efa7474f6cfd7284bec3721ba7869da042adfb521ba6e6368cfe4d75f11b86b48a9d8627", 0x76}, {&(0x7f00000004c0)="d16f04b128720c26bd98bd4305e25e12c5ba45aca295349b870cbe8cd44ec8ecb4666fa9a561f882ba00f945a656571b9732ab288833fb570ffaf3640e27a6738ecbabddb0cbc40daf27c48e19ca768170777dd2fd39e26a8802ea0423a5f21f6bf852ee1893c0b8736382386e542fda02977ceeb18584536ad49dfc9fe967243720c65076795bc93aca847b71ecaa3a1b02aed5142730f2ff55de32c3ea677346002126f9cc64737bf9791d9650f6ba5e5556c22d157e80c818d8b57f81b059f9319f5a00ec622aadd63087a553fb2eeeb9a1cb6fba2c23028b22010ff1428afdbe3f96f4699b127c2d4f2b34", 0xed}], 0x5, 0xc)
socket(0x2, 0x2, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x13, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000000)="d28458836ae731a230973736073c12e1c983985ab857af362d53a26e791669bb08ffd0ddc77bd7584d15ad77193c5acd40ccdda0f4913c284ff946f65812", 0x3e}, {&(0x7f00000000c0)="29aa43f2cfda485c243d0ffccfbe2a5add6e37a6b39b772f9f704e0487345ce741481b53927c0e297699b98fdfa6a318630a5dc1ca85d99bee5fb3231b90b52010e48b16555923ff4cc499a5c54cf2eb83b2950a9d15f505d2517f9dc0a7917f2439f43c358bec8bfb7a009eb81f9d7d15f8ebcc0fb39ec55f84ec158049ad21df605495c43257ef5f0caf240aebca8274cda8a07f85a583dbd247e6026e45241c57e287cf0e9b62d0cc30a0dbef6cea92fd103000f04ab1068b2d76fd03321cff20ab28c0bdb7a7cd6cc50314", 0xcd}, {&(0x7f0000000200)="6c255f7fc29c4a88cd6856e9ca853ffd128a4222c260e56cfd334bc8bb73c1bd2eae9cefbc51fc5ae42138ad7a71843428f75f8a26c9443dd6327df2585f27cf05c814256cca5b2dd81f6a61ad02284456126d5d79fa71ebab516018b46f7e011f7266922fb5d456ac8bb6c49eb88610779f2e7c4a1488f177fc1c1694c953446e92b479227779be8fec97660dc6e9e23fd3a82dc29be50a23e72205bf1a6c8cf9", 0xa1}, {&(0x7f0000000440)="f12c67980a5a88cda2e8be1c9c0a99eea15d8bbee22cda2aa83546dda2fe2826a4198bf0e6dbeb0c06461ba76ae1c514b7d05d3626b63b865c3a7d917b7df79815ff26860f538a6a6040299d089c8b5ede68efa7474f6cfd7284bec3721ba7869da042adfb521ba6e6368cfe4d75f11b86b48a9d8627", 0x76}, {&(0x7f00000004c0)="d16f04b128720c26bd98bd4305e25e12c5ba45aca295349b870cbe8cd44ec8ecb4666fa9a561f882ba00f945a656571b9732ab288833fb570ffaf3640e27a6738ecbabddb0cbc40daf27c48e19ca768170777dd2fd39e26a8802ea0423a5f21f6bf852ee1893c0b8736382386e542fda02977ceeb18584536ad49dfc9fe967243720c65076795bc93aca847b71ecaa3a1b02aed5142730f2ff55de32c3ea677346002126f9cc64737bf9791d9650f6ba5e5556c22d157e80c818d8b57f81b059f9319f5a00ec622aadd63087a553fb2eeeb9a1cb6fba2c23028b22010ff1428afdbe3f96f4699b127c2d4f2b34", 0xed}], 0x5, 0xc) (async)

1.062491943s ago: executing program 4 (id=2418):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
unshare(0x6a040000)
syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
fcntl$setstatus(r1, 0x4, 0x2400)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm_base(xchacha12-arm,sha224-ssse3))\x00'}, 0x58)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000040)=0x101)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000002c0)={0xfffffffb, 0x5, 0x10, 0x7fd, 0x6, 0x9})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000180c000b40eacea4ac0000000108000640ffffff"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async)
unshare(0x6a040000) (async)
syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async)
fcntl$setstatus(r1, 0x4, 0x2400) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm_base(xchacha12-arm,sha224-ssse3))\x00'}, 0x58) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000040)=0x101) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000002c0)={0xfffffffb, 0x5, 0x10, 0x7fd, 0x6, 0x9}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000180c000b40eacea4ac0000000108000640ffffff"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)

991.108536ms ago: executing program 6 (id=2419):
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[], 0x41)

76.360704ms ago: executing program 5 (id=2420):
syz_emit_ethernet(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x40000000015, 0x5, 0x0)
io_setup(0x6, &(0x7f0000000100))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = fanotify_init(0x500, 0x400)
r5 = fcntl$dupfd(r3, 0x406, r3)
fanotify_mark(r4, 0x241, 0x40000019, r5, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

75.878034ms ago: executing program 3 (id=2421):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000140)=0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xffffffffffffffff}}, './file0\x00'})
link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="12447d0c4cbfe16b52191685e7737d953622507a8abc4842a01575494da454576655bb76bc2d9836a871aa6157d4054cd528d428657d6943a5983a41e91e45e805965996b3ddb093d512018b191978a07a286ff7f83c1abba6a813ada9e79d7b05961100c6959448fe395fc914297d0a61c97d4abc1a657accbe2b0594e656a5318c6f190c81e548b854a09c8a1d4021e818c4a09ab5df19170efe3929de5cbcb1e40b576e9d061da677f13993987668b46462103289a5b8cfa8f20643b80aa2d32f658c8019542ecde072c4ac611284b55f623432433f0b5bd2173a7f1921318082"], 0x38}, 0x1, 0x300, 0x0, 0x2400c011}, 0x4000004)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000440)=@req3={0xe8d, 0x312, 0x9, 0xff, 0x101, 0x8, 0x70146f12}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0xe, 0x11, r2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil)
syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYRES8=0x0], 0xb4}}, 0x0)
close(0xffffffffffffffff)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
close(0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
write(0xffffffffffffffff, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40)
mprotect(&(0x7f0000568000/0x1000)=nil, 0x1000, 0x1000008)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x800c884, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2d, 0x25d7dbfd, {0x0, 0x0, 0x0, r0, {0xfff2, 0x1}, {0xffff, 0xb}, {0xf, 0x7}}, ["", "", ""]}, 0x24}}, 0x4090)

68.801698ms ago: executing program 0 (id=2422):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x1, 0x1e5}, 0x0, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x400, 0x20002, 0x17d}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040), 0x0)
syz_io_uring_submit(r2, r0, r1, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
r3 = getpid()
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_open_dev$ptys(0xc, 0x3, 0x1)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x3, 0x1000}, {0xa47, 0x5}})
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001140)='team0\x00', 0x10)
connect$inet(r7, &(0x7f0000001200)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x10, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

0s ago: executing program 6 (id=2423):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x8cffffff, 0x4008000}, 0x0)

kernel console output (not intermixed with test programs):

an error during control message transfer. (rlen = 0, was 0)
[  623.659511][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  623.662113][    T9] usb 1-1: USB disconnect, device number 27
[  624.843540][T13177] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1864'.
[  624.851571][   T30] audit: type=1400 audit(1783901995.216:923): avc:  denied  { write } for  pid=13150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  624.908169][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  625.214815][   T30] audit: type=1400 audit(1783901995.535:924): avc:  denied  { write } for  pid=13186 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  625.252927][ T5721] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  625.272890][ T5721] uvcvideo 6-1:220.0: No valid video chain found.
[  625.308725][ T5721] usb 6-1: selecting invalid altsetting 0
[  625.345587][T13188] XFS (nbd0): SB validate failed with error -5.
[  625.503885][ T5721] usb 6-1: selecting invalid altsetting 0
[  625.510023][ T5721] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  625.798821][T13210] Cannot find map_set index 135 as target
[  625.869521][ T5713] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  625.938464][ T5721] usb 6-1: USB disconnect, device number 11
[  626.020264][   T30] audit: type=1400 audit(1783901996.311:925): avc:  denied  { write } for  pid=13211 comm="syz.6.1870" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  626.115736][T13215] Bluetooth: hci0: unsupported parameter 255
[  626.115781][T13215] Bluetooth: hci0: unsupported parameter 255
[  626.265199][ T5713] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  626.295534][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.363273][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  626.415335][ T5713] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  626.426685][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'.
[  626.454147][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.493198][ T5713] usb 5-1: config 0 descriptor??
[  626.668484][T13208] xt_hashlimit: size too large, truncated to 1048576
[  627.271939][   T30] audit: type=1400 audit(1783901997.490:926): avc:  denied  { create } for  pid=13230 comm="syz.6.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  627.338134][   T30] audit: type=1400 audit(1783901997.508:927): avc:  denied  { setopt } for  pid=13230 comm="syz.6.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  627.400545][   T30] audit: type=1400 audit(1783901997.518:928): avc:  denied  { write } for  pid=13230 comm="syz.6.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  627.579011][ T5713] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  627.743652][ T5713] usb 1-1: Using ep0 maxpacket: 16
[  627.777869][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  627.812781][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  627.835045][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  627.845779][ T5713] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  627.865833][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  627.906399][ T5713] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  627.916389][ T5713] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  627.924392][ T5713] usb 1-1: Manufacturer: syz
[  627.941108][ T5713] usb 1-1: config 0 descriptor??
[  628.695297][T13247] xt_hashlimit: size too large, truncated to 1048576
[  628.744316][ T5713] rc_core: IR keymap rc-hauppauge not found
[  628.758181][ T5713] Registered IR keymap rc-empty
[  628.834861][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  628.872862][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  628.895565][ T5713] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  628.929896][ T5713] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22
[  628.952093][ T5806] usb 5-1: USB disconnect, device number 39
[  629.346517][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  629.396109][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  629.428692][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  629.471605][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  629.515168][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  630.372824][T13267] xt_hashlimit: size too large, truncated to 1048576
[  630.379796][T13267] xt_NFQUEUE: number of queues (10) out of range (got 65542)
[  630.680393][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  630.722140][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  630.735819][T13265] loop5: detected capacity change from 0 to 7
[  630.744177][T13265] Dev loop5: unable to read RDB block 7
[  630.749928][T13265]  loop5: unable to read partition table
[  630.864077][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  630.889987][T13265] loop5: partition table beyond EOD, truncated
[  630.914447][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  630.946435][T13265] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  630.956793][ T5713] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  630.992806][ T5713] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  631.032519][ T5713] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  631.064009][ T5713] usb 1-1: USB disconnect, device number 28
[  631.244493][T13285] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  632.369729][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  632.381941][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  632.739545][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1898'.
[  633.228051][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1901'.
[  633.280458][T13318] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1901'.
[  633.339892][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1901'.
[  633.351174][T13318] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1901'.
[  633.721071][T13330] dlm: non-version read from control device 0
[  633.950078][ T5721] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  634.315699][ T5721] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  634.365641][ T5721] usb 7-1: config 0 interface 0 has no altsetting 0
[  634.399512][ T5721] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  634.433163][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.488296][ T5721] usb 7-1: config 0 descriptor??
[  635.584922][   T30] audit: type=1400 audit(1783902005.255:929): avc:  denied  { read } for  pid=13327 comm="syz.6.1904" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  635.852187][ T5721] usbhid 7-1:0.0: can't add hid device: -71
[  635.952176][ T5721] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  636.000799][ T5721] usb 7-1: USB disconnect, device number 6
[  637.696230][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1918'.
[  637.708786][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1918'.
[  637.709241][   T30] audit: type=1400 audit(1783902007.238:930): avc:  denied  { setopt } for  pid=13378 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  637.801849][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'.
[  637.821128][T13386] netlink: 'syz.5.1917': attribute type 4 has an invalid length.
[  637.988097][T13374] xt_hashlimit: size too large, truncated to 1048576
[  639.199010][T13399] 9p: Bad value for 'wfdno'
[  639.593758][T13410] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1925'.
[  640.026087][T13417] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1927'.
[  640.076707][T13417] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1927'.
[  640.284879][T13417] netlink: 1371 bytes leftover after parsing attributes in process `syz.5.1927'.
[  640.359057][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'.
[  640.368066][T13422] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1926'.
[  640.377180][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'.
[  640.386102][T13422] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1926'.
[  640.395342][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'.
[  641.085386][T13426] xt_hashlimit: max too large, truncated to 1048576
[  642.251755][T13429] xt_hashlimit: size too large, truncated to 1048576
[  642.411071][T13437] serio: Serial port ptm0
[  642.598030][   T30] audit: type=1400 audit(1783902011.831:931): avc:  denied  { create } for  pid=13442 comm="syz.0.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  642.606535][T13444] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1935'.
[  642.693356][T13443] syzkaller0: entered promiscuous mode
[  642.749243][T13443] syzkaller0: entered allmulticast mode
[  643.078391][   T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  643.131612][ T5721] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  643.473812][   T24] usb 5-1: Using ep0 maxpacket: 8
[  643.517708][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  643.543556][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  643.636647][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.651826][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.717278][   T24] usb 5-1: config 0 descriptor??
[  643.750277][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.967915][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short
[  643.985713][ T5721] usb 1-1: no configurations
[  644.024216][ T5721] usb 1-1: can't read configurations, error -22
[  644.181375][   T24] hid_parser_main: 28 callbacks suppressed
[  644.181393][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.215235][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.231882][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.249736][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.267186][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.287941][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.305801][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.323224][   T24] ryos 0003:1E7D:31CE.0011: unknown main item tag 0x0
[  644.340767][   T24] ryos 0003:1E7D:31CE.0011: collection stack underflow
[  644.357838][   T24] ryos 0003:1E7D:31CE.0011: item 0 0 0 12 parsing failed
[  644.377756][   T24] ryos 0003:1E7D:31CE.0011: parse failed
[  644.392889][   T24] ryos 0003:1E7D:31CE.0011: probe with driver ryos failed with error -22
[  645.025816][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  645.220990][   T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  645.245146][   T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  645.277001][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  645.303243][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  645.333706][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  645.370779][   T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  645.408282][   T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  645.428675][T13488] __nla_validate_parse: 3 callbacks suppressed
[  645.428696][T13488] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1950'.
[  645.444434][   T24] usb 6-1: Product: syz
[  645.452553][   T24] usb 6-1: Manufacturer: syz
[  645.528958][   T24] cdc_wdm 6-1:1.0: skipping garbage
[  645.593880][   T24] cdc_wdm 6-1:1.0: skipping garbage
[  645.944461][   T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  645.989888][   T24] cdc_wdm 6-1:1.0: Unknown control protocol
[  646.129370][   T24] usb 6-1: USB disconnect, device number 12
[  646.379769][ T5713] usb 5-1: USB disconnect, device number 40
[  646.992678][   T30] audit: type=1400 audit(1783902015.938:932): avc:  denied  { listen } for  pid=13501 comm="syz.4.1953" lport=59364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  647.053524][   T30] audit: type=1400 audit(1783902015.957:933): avc:  denied  { map } for  pid=13501 comm="syz.4.1953" path="socket:[38768]" dev="sockfs" ino=38768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  647.124618][   T30] audit: type=1400 audit(1783902015.957:934): avc:  denied  { read } for  pid=13501 comm="syz.4.1953" path="socket:[38768]" dev="sockfs" ino=38768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  647.194504][T13504] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1955'.
[  647.397384][ T5713] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  647.805881][ T5713] usb 5-1: not running at top speed; connect to a high speed hub
[  648.030989][ T5713] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 125, changing to 4
[  648.876272][ T5713] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1023
[  648.891658][ T5713] usb 5-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40
[  648.901451][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.910397][ T5713] usb 5-1: Product: Ї
[  648.917688][ T5713] usb 5-1: Manufacturer: చ
[  648.923776][ T5713] usb 5-1: SerialNumber: Џ
[  649.079363][T13525] loop5: detected capacity change from 0 to 7
[  649.123009][T13525] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  649.139656][T13525] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  649.148123][T13525] Dev loop5: unable to read RDB block 7
[  649.176213][ T5713] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  649.187963][T13525]  loop5: AHDI p2 p3
[  649.217181][ T5713] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc
[  649.227118][T13525] loop5: partition table partially beyond EOD, truncated
[  649.239198][T13525] loop5: p3 start 335544320 is beyond EOD, truncated
[  649.346551][T13531] FAULT_INJECTION: forcing a failure.
[  649.346551][T13531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  649.359911][ T5713] usb 5-1: USB disconnect, device number 41
[  649.438623][T13531] CPU: 0 UID: 0 PID: 13531 Comm: syz.3.1965 Not tainted syzkaller #0 PREEMPT(full) 
[  649.438653][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  649.438663][T13531] Call Trace:
[  649.438669][T13531]  <TASK>
[  649.438677][T13531]  dump_stack_lvl+0x100/0x190
[  649.438704][T13531]  should_fail_ex.cold+0x5/0xa
[  649.438727][T13531]  _copy_to_user+0x32/0xd0
[  649.438750][T13531]  bpf_vlog_reverse_ubuf+0x2c3/0x470
[  649.438784][T13531]  bpf_vlog_finalize+0x271/0x360
[  649.438811][T13531]  bpf_log_attr_finalize+0x86/0x1a0
[  649.438838][T13531]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  649.438872][T13531]  btf_new_fd+0x9c7/0x5bc0
[  649.438892][T13531]  ? avc_has_perm_noaudit+0x145/0x3b0
[  649.438919][T13531]  ? __pfx_btf_new_fd+0x10/0x10
[  649.438940][T13531]  ? rcu_is_watching+0x12/0xc0
[  649.438965][T13531]  ? cap_capable+0x107/0x430
[  649.438987][T13531]  ? security_capable+0x80/0x260
[  649.439009][T13531]  ? ns_capable+0xd2/0xf0
[  649.439032][T13531]  __sys_bpf+0x1e5f/0x4e80
[  649.439066][T13531]  ? __pfx___sys_bpf+0x10/0x10
[  649.439093][T13531]  ? find_held_lock+0x2b/0x80
[  649.439117][T13531]  ? get_pid_task+0xfc/0x250
[  649.439142][T13531]  ? get_pid_task+0xfc/0x250
[  649.439175][T13531]  ? find_held_lock+0x2b/0x80
[  649.439206][T13531]  ? rcu_read_lock_any_held+0x6a/0xa0
[  649.439234][T13531]  ? find_held_lock+0x2b/0x80
[  649.439258][T13531]  ? ksys_write+0x190/0x250
[  649.439283][T13531]  ? ksys_write+0x190/0x250
[  649.439325][T13531]  ? fput+0x79/0x100
[  649.439348][T13531]  ? __x64_sys_bpf+0xce/0x140
[  649.439363][T13531]  __x64_sys_bpf+0xce/0x140
[  649.439380][T13531]  ? do_syscall_64+0x90/0x870
[  649.439408][T13531]  do_syscall_64+0x115/0x870
[  649.439432][T13531]  ? clear_bhb_loop+0x40/0x90
[  649.439454][T13531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.439472][T13531] RIP: 0033:0x7fda8db9de59
[  649.439489][T13531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.439505][T13531] RSP: 002b:00007fda8eb36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  649.439523][T13531] RAX: ffffffffffffffda RBX: 00007fda8de25fa0 RCX: 00007fda8db9de59
[  649.439534][T13531] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000012
[  649.439545][T13531] RBP: 00007fda8eb36090 R08: 0000000000000000 R09: 0000000000000000
[  649.439556][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  649.439566][T13531] R13: 00007fda8de26038 R14: 00007fda8de25fa0 R15: 00007fff2f0acd58
[  649.439591][T13531]  </TASK>
[  650.589207][T13534] xt_hashlimit: size too large, truncated to 1048576
[  651.478101][ T9783] udevd[9783]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  651.533489][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  651.546631][T13545] fuse: Unknown parameter '0x0000000000000004'
[  651.801620][   T24] usb 4-1: Using ep0 maxpacket: 16
[  651.816787][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  651.840857][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  651.897098][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  651.910575][T13550] netlink: 'syz.0.1969': attribute type 4 has an invalid length.
[  651.916364][   T30] audit: type=1400 audit(1783902020.541:935): avc:  denied  { accept } for  pid=13553 comm="syz.5.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  651.939889][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  651.939920][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  651.942428][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  652.052951][   T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  652.074124][   T24] usb 4-1: Manufacturer: syz
[  652.092858][   T24] usb 4-1: config 0 descriptor??
[  652.452863][   T24] rc_core: IR keymap rc-hauppauge not found
[  653.198312][   T24] Registered IR keymap rc-empty
[  653.203329][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.223475][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.260533][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  653.598681][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23
[  653.755824][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  653.782529][T13570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13570 comm=syz.5.1976
[  654.067391][T13576] xt_hashlimit: size too large, truncated to 1048576
[  654.074534][T13570] netlink: 'syz.5.1976': attribute type 3 has an invalid length.
[  654.074557][T13570] netlink: 'syz.5.1976': attribute type 4 has an invalid length.
[  654.074569][T13570] netlink: 'syz.5.1976': attribute type 3 has an invalid length.
[  654.079345][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.119433][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.193389][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.291809][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.398498][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.426753][   T30] audit: type=1400 audit(1783902022.889:936): avc:  denied  { write } for  pid=13580 comm="syz.6.1977" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  654.430580][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.579963][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.624239][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.660948][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  654.693811][   T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  654.710709][   T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  654.717163][T13587] syzkaller0: entered promiscuous mode
[  654.737422][T13587] syzkaller0: entered allmulticast mode
[  654.748587][T13587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.750627][   T24] usb 4-1: USB disconnect, device number 24
[  654.797613][   T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  654.808579][T13586] tipc: Resetting bearer <eth:syzkaller0>
[  654.827110][T13589] 9p: Bad value for 'wfdno'
[  654.939580][T13592] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1980'.
[  654.970845][   T29] usb 6-1: Using ep0 maxpacket: 16
[  654.980974][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  654.991772][   T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  655.004913][   T29] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  655.021446][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.029838][   T29] usb 6-1: Product: syz
[  655.035310][   T29] usb 6-1: Manufacturer: syz
[  655.041763][   T29] usb 6-1: SerialNumber: syz
[  655.047771][T13586] tipc: Disabling bearer <eth:syzkaller0>
[  655.096715][   T29] usb 6-1: 0:2 : does not exist
[  655.431724][   T29] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  655.458768][   T30] audit: type=1400 audit(1783902023.862:937): avc:  denied  { append } for  pid=13598 comm="syz.3.1983" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  655.571569][   T30] audit: type=1400 audit(1783902023.881:938): avc:  denied  { ioctl } for  pid=13598 comm="syz.3.1983" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  655.636429][   T29] usb 6-1: USB disconnect, device number 13
[  655.713071][ T5806] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  656.774972][ T5806] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  656.810975][ T5806] usb 4-1: config 0 has no interface number 0
[  656.817814][ T5806] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  656.830273][ T5806] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  656.843269][ T5806] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  656.880802][T13609] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1986'.
[  656.901563][ T5806] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  656.912197][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  656.925238][ T5806] usb 4-1: Product: syz
[  656.930271][ T5806] usb 4-1: SerialNumber: syz
[  656.940656][ T5806] usb 4-1: config 0 descriptor??
[  656.953233][ T5806] cm109 4-1:0.8: invalid payload size 0, expected 4
[  656.970479][ T5806] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input24
[  657.170000][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  657.170734][ T1220] usb 4-1: USB disconnect, device number 25
[  657.177188][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  657.283358][ T1220] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  657.364609][T13618] netlink: 'syz.5.1988': attribute type 1 has an invalid length.
[  657.803339][T13620] xt_hashlimit: size too large, truncated to 1048576
[  658.141277][T13629] fuse: Bad value for 'fd'
[  658.202435][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1992'.
[  658.240625][T13630] l2tp_ppp: sess 2/0: no socket in recv
[  658.267933][ T1220] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  658.463563][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.487804][ T1220] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  658.526333][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.552405][ T1220] usb 4-1: config 0 descriptor??
[  658.727455][   T24] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  658.800888][T13625] netlink: 'syz.3.1991': attribute type 11 has an invalid length.
[  658.834232][   T29] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  658.895458][T13625] bridge0: port 3(dummy0) entered blocking state
[  658.902321][T13625] bridge0: port 3(dummy0) entered forwarding state
[  658.927446][T13625] 8021q: adding VLAN 0 to HW filter on device team0
[  658.949207][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.960422][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  658.973558][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  658.985040][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  658.997696][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  659.013437][   T24] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  659.019641][T13625] 8021q: adding VLAN 0 to HW filter on device bond1
[  659.022813][   T29] usb 5-1: Using ep0 maxpacket: 16
[  659.036248][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  659.047759][   T24] usb 6-1: Product: syz
[  659.055053][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  659.068289][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  659.081633][   T24] usb 6-1: Manufacturer: syz
[  659.086607][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  659.096202][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.096519][   T24] usb 6-1: SerialNumber: syz
[  659.105526][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.116755][   T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  659.128238][   T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  659.131410][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.149239][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.159173][   T24] usb 6-1: config 0 descriptor??
[  659.190063][   T29] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  659.205916][T13653] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  659.213310][   T29] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  659.222280][T13653] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  659.229451][   T29] usb 5-1: Manufacturer: syz
[  659.243345][   T29] usb 5-1: config 0 descriptor??
[  659.264025][ T1220] usb 4-1: string descriptor 0 read error: -71
[  659.300425][ T1220] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  659.327335][ T1220] earthmate ttyUSB0: required endpoint is missing
[  659.352928][ T1220] usb 4-1: USB disconnect, device number 26
[  659.367839][ T1220] cypress_m8 4-1:0.0: device disconnected
[  659.513069][T13654] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  659.759141][   T24] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110
[  659.866709][   T24] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5
[  659.978161][   T29] rc_core: IR keymap rc-hauppauge not found
[  659.990426][   T29] Registered IR keymap rc-empty
[  660.035613][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  660.184598][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  660.320564][   T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  660.357602][T13660] netlink: 'syz.0.2003': attribute type 1 has an invalid length.
[  660.633009][   T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25
[  660.719487][T13664] netlink: 'syz.3.2005': attribute type 21 has an invalid length.
[  660.774571][T13663] 9p: Bad value for 'rfdno'
[  660.962525][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  661.080055][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  661.197963][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  661.295462][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  661.400975][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  661.487552][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  661.789835][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'.
[  661.799817][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'.
[  663.365390][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  663.373483][   T24] usb 6-1: USB disconnect, device number 14
[  663.398731][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  663.420066][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  663.441478][   T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  663.892930][   T29] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  663.982236][   T29] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  664.088894][   T29] usb 5-1: USB disconnect, device number 42
[  664.425919][T13699] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2014'.
[  665.204343][T13705] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2015'.
[  665.310734][T13703] xt_hashlimit: size too large, truncated to 1048576
[  665.695518][T13713] openvswitch: netlink: IP tunnel TTL not specified.
[  665.813463][T13713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2017'.
[  666.327185][T13731] overlayfs: conflicting lowerdir path
[  666.605381][   T29] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  666.701632][ T5721] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  666.820383][   T29] usb 1-1: Using ep0 maxpacket: 16
[  666.846650][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.904306][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  666.945159][ T5721] usb 4-1: Using ep0 maxpacket: 8
[  666.983121][ T5721] usb 4-1: config 7 has an invalid interface number: 101 but max is 0
[  666.994581][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  667.014490][ T5721] usb 4-1: config 7 has no interface number 0
[  667.021914][   T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  667.046067][ T5721] usb 4-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  667.058961][   T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  667.073827][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  667.089044][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  667.114949][   T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  667.160334][   T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  667.194536][ T1220] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  667.205314][   T29] usb 1-1: Manufacturer: syz
[  667.209962][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  667.227408][   T29] usb 1-1: config 0 descriptor??
[  667.267481][ T5721] usb 4-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  667.312402][ T5721] usb 4-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  667.324668][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  667.335719][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  667.346957][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  667.357932][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  667.373181][ T5721] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  667.386010][ T1220] usb 7-1: Using ep0 maxpacket: 8
[  667.398920][ T5721] usb 4-1: config 7 interface 101 has no altsetting 0
[  667.423747][ T1220] usb 7-1: config 7 has an invalid interface number: 101 but max is 0
[  667.439964][ T1220] usb 7-1: config 7 has no interface number 0
[  667.449781][ T5721] usb 4-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  667.460737][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.494550][ T1220] usb 7-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  667.523574][ T5721] usb 4-1: Product: ࠐ
[  667.545559][ T5721] usb 4-1: Manufacturer: К
[  667.560413][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  667.581719][ T5721] usb 4-1: SerialNumber: syz
[  667.627734][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  667.738258][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  667.750841][ T1220] usb 7-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  667.762557][ T1220] usb 7-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  667.780010][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  667.874790][T13747] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  668.179988][   T29] rc_core: IR keymap rc-hauppauge not found
[  668.195159][   T29] Registered IR keymap rc-empty
[  668.200614][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.207780][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  668.218724][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  668.229744][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  668.240711][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.247896][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  668.259378][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  668.274037][   T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  668.286173][ T1220] usb 7-1: config 7 interface 101 has no altsetting 0
[  668.294868][   T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26
[  668.313197][ T1220] usb 7-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  668.326065][ T1220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.336734][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.354884][ T1220] usb 7-1: Product: ࠐ
[  668.362141][ T1220] usb 7-1: Manufacturer: К
[  668.377339][ T1220] usb 7-1: SerialNumber: syz
[  668.382385][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.415675][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'.
[  668.455210][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.521528][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.604678][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  668.691561][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.043590][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.876372][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.898169][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  669.919104][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  670.076459][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2023'.
[  670.438398][ T5721] uvcvideo 4-1:7.101: Found multiple Units with ID 1
[  671.228737][   T29] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  671.864625][   T29] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  671.873585][ T5721] uvcvideo 4-1:7.101: probe with driver uvcvideo failed with error -22
[  671.887855][   T29] usb 1-1: USB disconnect, device number 31
[  672.274085][ T5721] usb 4-1: USB disconnect, device number 27
[  672.323016][ T1220] uvcvideo 7-1:7.101: Found multiple Units with ID 1
[  672.678017][ T1220] uvcvideo 7-1:7.101: probe with driver uvcvideo failed with error -22
[  672.703523][T13768] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2031'.
[  672.779144][ T1220] usb 7-1: USB disconnect, device number 7
[  674.030875][T13793] netlink: 'syz.4.2037': attribute type 12 has an invalid length.
[  674.537154][ T1220] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  674.611615][   T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  674.718435][ T1220] usb 4-1: Using ep0 maxpacket: 16
[  674.726017][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.745593][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  674.765716][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  674.790247][ T1220] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  674.819548][   T10] usb 6-1: Using ep0 maxpacket: 8
[  674.843738][   T10] usb 6-1: config 7 has an invalid interface number: 101 but max is 0
[  674.855418][   T10] usb 6-1: config 7 has no interface number 0
[  674.871356][   T10] usb 6-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  674.918080][   T10] usb 6-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  674.958620][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  674.958633][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  674.992341][ T1220] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  675.006780][   T10] usb 6-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  675.009845][ T1220] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  675.017803][   T10] usb 6-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  675.017833][   T10] usb 6-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  675.047961][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  675.071074][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  675.092528][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  675.108839][ T1220] usb 4-1: Manufacturer: syz
[  675.108839][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  675.108865][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  675.141403][   T10] usb 6-1: config 7 interface 101 has no altsetting 0
[  675.147041][ T1220] usb 4-1: config 0 descriptor??
[  675.302894][ T5713] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  675.338666][T13815] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2046'.
[  675.374594][T13813] batadv_slave_1: entered promiscuous mode
[  675.431759][T13812] batadv_slave_1: left promiscuous mode
[  675.466850][ T1220] rc_core: IR keymap rc-hauppauge not found
[  675.473316][ T1220] Registered IR keymap rc-empty
[  675.478981][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.498770][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.522889][ T1220] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  675.540832][ T1220] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27
[  675.560752][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.607410][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.622208][T13824] input: syz1 as /devices/virtual/input/input28
[  675.644701][    C1] rc rc0: IR event FIFO is full!
[  675.644787][   T10] usb 6-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  675.649659][    C1] rc rc0: IR event FIFO is full!
[  675.649923][    C1] rc rc0: IR event FIFO is full!
[  675.649938][    C1] rc rc0: IR event FIFO is full!
[  675.649950][    C1] rc rc0: IR event FIFO is full!
[  675.650656][    C1] rc rc0: IR event FIFO is full!
[  675.684174][    C1] rc rc0: IR event FIFO is full!
[  675.689120][    C1] rc rc0: IR event FIFO is full!
[  675.694045][    C1] rc rc0: IR event FIFO is full!
[  675.698967][    C1] rc rc0: IR event FIFO is full!
[  675.703887][    C1] rc rc0: IR event FIFO is full!
[  675.708808][    C1] rc rc0: IR event FIFO is full!
[  675.713733][    C1] rc rc0: IR event FIFO is full!
[  675.718659][    C1] rc rc0: IR event FIFO is full!
[  675.724004][    C1] rc rc0: IR event FIFO is full!
[  675.728939][    C1] rc rc0: IR event FIFO is full!
[  675.733863][    C1] rc rc0: IR event FIFO is full!
[  675.739025][    C1] rc rc0: IR event FIFO is full!
[  675.743954][    C1] rc rc0: IR event FIFO is full!
[  675.749058][    C1] rc rc0: IR event FIFO is full!
[  675.753989][    C1] rc rc0: IR event FIFO is full!
[  675.759324][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.766576][    C1] rc rc0: IR event FIFO is full!
[  675.766592][    C1] rc rc0: IR event FIFO is full!
[  675.766603][    C1] rc rc0: IR event FIFO is full!
[  675.776655][    C1] rc rc0: IR event FIFO is full!
[  675.776672][    C1] rc rc0: IR event FIFO is full!
[  675.776685][    C1] rc rc0: IR event FIFO is full!
[  675.777436][ T5713] usb 1-1: Using ep0 maxpacket: 8
[  675.781977][    C1] rc rc0: IR event FIFO is full!
[  675.781994][    C1] rc rc0: IR event FIFO is full!
[  675.782006][    C1] rc rc0: IR event FIFO is full!
[  675.782019][    C1] rc rc0: IR event FIFO is full!
[  675.782032][    C1] rc rc0: IR event FIFO is full!
[  675.782046][    C1] rc rc0: IR event FIFO is full!
[  675.782253][    C1] rc rc0: IR event FIFO is full!
[  675.782267][    C1] rc rc0: IR event FIFO is full!
[  675.782281][    C1] rc rc0: IR event FIFO is full!
[  675.782467][    C1] rc rc0: IR event FIFO is full!
[  675.851138][    C1] rc rc0: IR event FIFO is full!
[  675.856065][    C1] rc rc0: IR event FIFO is full!
[  675.860988][    C1] rc rc0: IR event FIFO is full!
[  675.865909][    C1] rc rc0: IR event FIFO is full!
[  675.870830][    C1] rc rc0: IR event FIFO is full!
[  675.876371][    C1] rc rc0: IR event FIFO is full!
[  675.881313][    C1] rc rc0: IR event FIFO is full!
[  675.886243][    C1] rc rc0: IR event FIFO is full!
[  675.891174][    C1] rc rc0: IR event FIFO is full!
[  675.900501][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.915711][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.944732][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.963891][ T5713] usb 1-1: config 7 has an invalid interface number: 101 but max is 0
[  675.969235][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  675.973560][   T10] usb 6-1: Product: ࠐ
[  675.990529][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  676.005830][ T5713] usb 1-1: config 7 has no interface number 0
[  676.012069][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  676.033390][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  676.044673][   T10] usb 6-1: Manufacturer: К
[  676.059429][ T1220] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  676.063998][   T10] usb 6-1: SerialNumber: syz
[  676.078021][ T5713] usb 1-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  676.088459][ T1220] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  676.115934][ T1220] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  676.116306][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  676.152429][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  676.170457][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  676.185191][ T5713] usb 1-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  676.193131][ T1220] usb 4-1: USB disconnect, device number 28
[  676.199274][ T5713] usb 1-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  676.237296][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  676.252314][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  676.273360][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  676.288990][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  676.302729][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  676.326217][ T5713] usb 1-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  676.339635][ T5713] usb 1-1: config 7 interface 101 has no altsetting 0
[  676.352487][ T5713] usb 1-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  676.363676][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.373411][ T5713] usb 1-1: Product: ࠐ
[  676.377582][ T5713] usb 1-1: Manufacturer: К
[  676.382502][ T5713] usb 1-1: SerialNumber: syz
[  676.445338][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'.
[  677.606727][T13842] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  677.741669][T13836] xt_hashlimit: size too large, truncated to 1048576
[  677.824116][   T10] uvcvideo 6-1:7.101: Found multiple Units with ID 1
[  677.841649][   T10] uvcvideo 6-1:7.101: probe with driver uvcvideo failed with error -22
[  677.935593][   T10] usb 6-1: USB disconnect, device number 15
[  678.189255][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2044'.
[  679.329942][T13860] netlink: 'syz.5.2057': attribute type 10 has an invalid length.
[  679.542739][T13864] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2061'.
[  679.622595][ T5713] uvcvideo 1-1:7.101: Found multiple Units with ID 1
[  679.640690][ T5713] uvcvideo 1-1:7.101: probe with driver uvcvideo failed with error -22
[  679.720427][ T5713] usb 1-1: USB disconnect, device number 32
[  679.966118][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2062'.
[  679.975366][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2062'.
[  680.256640][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  680.441303][   T10] usb 6-1: Using ep0 maxpacket: 8
[  680.507169][   T10] usb 6-1: config 7 has an invalid interface number: 101 but max is 0
[  680.536815][   T10] usb 6-1: config 7 has no interface number 0
[  680.560980][   T10] usb 6-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  680.636244][   T10] usb 6-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  680.704309][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  680.857672][   T10] usb 6-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  681.131187][   T10] usb 6-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  681.308226][   T10] usb 6-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  681.401142][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  681.431275][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  681.455297][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  681.476944][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  681.496940][   T10] usb 6-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  681.513651][   T10] usb 6-1: config 7 interface 101 has no altsetting 0
[  681.532869][   T10] usb 6-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  681.544220][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.556409][   T10] usb 6-1: Product: ࠐ
[  681.563788][   T10] usb 6-1: Manufacturer: К
[  681.572638][   T10] usb 6-1: SerialNumber: syz
[  681.869618][ T1220] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  682.492704][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2064'.
[  682.667641][ T1220] usb 4-1: Using ep0 maxpacket: 8
[  682.880640][ T1220] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  682.966166][ T1220] usb 4-1: config 0 has no interface number 0
[  683.004201][ T1220] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  683.053816][ T1220] usb 4-1: config 0 interface 200 has no altsetting 0
[  683.104209][ T1220] usb 4-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9
[  683.142714][ T1220] usb 4-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3
[  683.169375][ T1220] usb 4-1: Product: syz
[  683.183555][ T1220] usb 4-1: Manufacturer: syz
[  683.198540][ T1220] usb 4-1: SerialNumber: syz
[  683.265313][ T1220] usb 4-1: config 0 descriptor??
[  683.593252][ T1220] usbhid 4-1:0.200: couldn't find an input interrupt endpoint
[  683.634707][ T1220] usb 4-1: USB disconnect, device number 29
[  683.754518][   T10] uvcvideo 6-1:7.101: Found multiple Units with ID 1
[  683.762937][   T10] uvcvideo 6-1:7.101: probe with driver uvcvideo failed with error -22
[  683.811893][   T10] usb 6-1: USB disconnect, device number 16
[  683.885584][T13901] macsec1: entered promiscuous mode
[  683.907303][T13901] virt_wifi0: entered promiscuous mode
[  684.025326][T13910] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2074'.
[  684.296330][ T5721] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  685.528002][ T5721] usb 5-1: Using ep0 maxpacket: 8
[  685.541086][ T5721] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  685.551791][ T5721] usb 5-1: config 0 has no interface number 0
[  685.560408][ T5721] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  685.572168][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.580989][ T5721] usb 5-1: Product: syz
[  685.585245][ T5721] usb 5-1: Manufacturer: syz
[  685.601792][ T5721] usb 5-1: SerialNumber: syz
[  685.774259][T13936] xt_hashlimit: size too large, truncated to 1048576
[  685.884938][ T5721] usb 5-1: config 0 descriptor??
[  685.912955][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  686.125653][   T10] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  686.135518][   T10] usb 6-1: config 0 has no interface number 0
[  686.145759][   T10] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  686.168446][   T10] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  686.181475][   T30] audit: type=1400 audit(1783902052.592:939): avc:  denied  { map } for  pid=13911 comm="syz.4.2075" path="/dev/video5" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  686.211954][   T10] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  686.223555][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.243009][   T10] usb 6-1: Product: syz
[  686.247305][   T10] usb 6-1: Manufacturer: syz
[  686.263725][   T10] usb 6-1: SerialNumber: syz
[  686.293795][ T5721] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  686.295711][   T10] usb 6-1: config 0 descriptor??
[  686.327152][ T5721] uvcvideo 5-1:0.31: No valid video chain found.
[  686.350516][T13931] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  686.371855][   T10] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  686.382821][   T10] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  686.395716][ T5721] usb 5-1: USB disconnect, device number 43
[  686.397115][   T10] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  686.799528][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.809726][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.930761][T13951] tipc: Enabled bearer <udp:s>, priority 10
[  686.988088][ T5713] usb 6-1: USB disconnect, device number 17
[  687.099457][ T5713] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  687.164372][ T5713] cyberjack 6-1:0.69: device disconnected
[  687.994785][   T10] tipc: Node number set to 316740907
[  688.062886][T13960] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2088'.
[  688.069364][   T30] audit: type=1400 audit(1783902054.360:940): avc:  denied  { write } for  pid=5721 comm="kworker/1:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40872 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  688.096669][T13962] comedi comedi4: bad chanlist[2]=0xffffffc3 chan=65475 range length=2
[  689.893276][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'.
[  689.905758][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'.
[  690.093997][T13993] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  690.108219][T13993] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  690.125118][T13993] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  690.138721][T13993] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  690.157846][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  690.172965][T13995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  690.334382][T13998] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2103'.
[  690.349248][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  690.366356][   T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  690.380109][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  690.391106][   T10] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  690.412511][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  690.427085][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  690.453043][ T5713] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  690.473738][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  690.487682][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  690.497518][   T10] usb 4-1: Product: syz
[  690.505064][   T10] usb 4-1: Manufacturer: syz
[  690.520936][T13991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  690.554199][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  690.569806][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  690.596488][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  690.609387][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[  690.634849][ T5713] usb 6-1: device descriptor read/64, error -71
[  690.720481][   T30] audit: type=1400 audit(1783902056.839:941): avc:  denied  { checkpoint_restore } for  pid=14003 comm="syz.4.2106" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  690.867674][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.874429][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.880910][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.887512][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.901418][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.908024][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.914284][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.920854][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.927064][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.933635][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.939894][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.946469][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.952754][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.959359][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.965701][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.972282][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.978515][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.985087][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  690.991329][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  690.997904][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  691.755553][T14016] FAULT_INJECTION: forcing a failure.
[  691.755553][T14016] name failslab, interval 1, probability 0, space 0, times 0
[  691.772894][T14016] CPU: 1 UID: 0 PID: 14016 Comm: syz.6.2109 Not tainted syzkaller #0 PREEMPT(full) 
[  691.772919][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  691.772929][T14016] Call Trace:
[  691.772935][T14016]  <TASK>
[  691.772941][T14016]  dump_stack_lvl+0x100/0x190
[  691.772968][T14016]  should_fail_ex.cold+0x5/0xa
[  691.772989][T14016]  should_failslab+0xc2/0x120
[  691.773008][T14016]  __kmalloc_cache_noprof+0x91/0x6c0
[  691.773032][T14016]  ? copy_mount_options+0x55/0x190
[  691.773057][T14016]  copy_mount_options+0x55/0x190
[  691.773079][T14016]  __x64_sys_mount+0x1ab/0x310
[  691.773097][T14016]  ? __pfx___x64_sys_mount+0x10/0x10
[  691.773125][T14016]  do_syscall_64+0x115/0x870
[  691.773147][T14016]  ? clear_bhb_loop+0x40/0x90
[  691.773166][T14016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.773183][T14016] RIP: 0033:0x7f301fd9de59
[  691.773197][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.773212][T14016] RSP: 002b:00007f3020c9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  691.773228][T14016] RAX: ffffffffffffffda RBX: 00007f3020025fa0 RCX: 00007f301fd9de59
[  691.773238][T14016] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000
[  691.773248][T14016] RBP: 00007f3020c9b090 R08: 0000200000000040 R09: 0000000000000000
[  691.773257][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.773268][T14016] R13: 00007f3020026038 R14: 00007f3020025fa0 R15: 00007fff5249ef38
[  691.773292][T14016]  </TASK>
[  691.778708][ T5713] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  691.783580][ T5721] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  692.188545][ T5713] usb 6-1: device descriptor read/64, error -71
[  692.309900][T14020] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  692.800500][ T5713] usb usb6-port1: attempt power cycle
[  693.074336][T14025] syzkaller0: entered promiscuous mode
[  693.080016][T14025] syzkaller0: entered allmulticast mode
[  693.099586][T14025] tipc: Started in network mode
[  693.106425][T14025] tipc: Node identity 5eecf7bf9105, cluster identity 4711
[  693.117800][T14025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.132532][   T30] audit: type=1400 audit(1783902059.103:942): avc:  denied  { setopt } for  pid=13990 comm="syz.3.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  693.178802][ T5713] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  693.200300][T14024] tipc: Resetting bearer <eth:syzkaller0>
[  693.233237][ T5713] usb 6-1: device descriptor read/8, error -71
[  693.305158][T14024] tipc: Disabling bearer <eth:syzkaller0>
[  693.549672][   T30] audit: type=1400 audit(1783902059.487:943): avc:  denied  { nlmsg_read } for  pid=14027 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  694.148320][T14037] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2115'.
[  694.369610][ T5806] usb 4-1: USB disconnect, device number 30
[  694.768196][T14047] dlm: non-version read from control device 0
[  695.322621][T14056] netlink: 'syz.3.2121': attribute type 10 has an invalid length.
[  695.330778][T14056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2121'.
[  695.968791][ T5342] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  696.262802][T14071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  696.288370][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2128'.
[  696.299574][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'.
[  696.309393][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'.
[  696.321444][   T30] audit: type=1400 audit(1783902062.078:944): avc:  denied  { setattr } for  pid=14070 comm="syz.5.2127" name="tun" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  696.387363][ T5342] usb 7-1: Using ep0 maxpacket: 16
[  696.404251][ T5342] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.435085][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'.
[  696.445774][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  696.465930][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'.
[  696.480076][ T5342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  696.502709][ T5342] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  696.526322][ T5342] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  696.560789][ T5342] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  696.576476][ T5342] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  696.585171][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2131'.
[  696.596013][ T5342] usb 7-1: Manufacturer: syz
[  696.621037][ T5342] usb 7-1: config 0 descriptor??
[  696.659490][T14086] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2134'.
[  696.824363][T14082] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2133'.
[  697.032610][   T30] audit: type=1400 audit(1783902062.658:945): avc:  denied  { setopt } for  pid=14087 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  697.312012][T14082] team0 (unregistering): Port device team_slave_0 removed
[  697.346722][T14082] team0 (unregistering): Port device team_slave_1 removed
[  697.370170][ T5342] rc_core: IR keymap rc-hauppauge not found
[  697.382037][ T5342] Registered IR keymap rc-empty
[  697.401409][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.439648][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.446260][T14099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.461881][T14099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.482143][ T5342] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  697.501041][ T5342] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input30
[  697.516965][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.540315][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.572127][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.595976][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.626171][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.646993][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.679497][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.700364][ T5713] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  697.711262][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.732543][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.753900][ T5342] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.777466][ T5342] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  697.787280][ T5342] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  697.799174][ T5342] usb 7-1: USB disconnect, device number 8
[  697.860732][ T5713] usb 5-1: Using ep0 maxpacket: 16
[  697.867250][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.880184][ T5713] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  697.890181][ T5713] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  697.904013][ T5713] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  697.919104][ T5713] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  697.928543][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  697.935504][ T5721] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  697.936806][ T5713] usb 5-1: SerialNumber: syz
[  697.951693][T14098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  697.959176][T14098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  697.967171][ T5713] hub 5-1:1.0: bad descriptor, ignoring hub
[  697.973878][ T5713] hub 5-1:1.0: probe with driver hub failed with error -5
[  698.032952][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  698.040933][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  698.185173][ T5713] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  698.208868][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  698.227054][ T5713] usb 5-1: USB disconnect, device number 44
[  698.235375][ T5721] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  698.267002][ T5721] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  698.281991][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.301729][ T5721] usb 6-1: config 0 descriptor??
[  698.576126][T14123] xt_hashlimit: max too large, truncated to 1048576
[  698.737679][T14126] xt_hashlimit: size too large, truncated to 1048576
[  698.973881][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  698.995743][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.007275][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.076669][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.091698][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.101086][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.114239][T14129] xt_hashlimit: size too large, truncated to 1048576
[  699.225212][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.234131][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.261125][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.269251][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0
[  699.885694][T14135] __nla_validate_parse: 5 callbacks suppressed
[  699.885705][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'.
[  699.900794][T14135] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2146'.
[  699.909959][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'.
[  699.918905][T14135] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2146'.
[  699.927963][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'.
[  699.943825][ T5721] aquacomputer_d5next 0003:0C70:F00B.0012: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.5-1/input0
[  700.099480][T14144] input: syz1 as /devices/virtual/input/input31
[  700.109680][ T5721] usb 6-1: USB disconnect, device number 22
[  700.226396][T14140] fido_id[14140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  700.310999][   T30] audit: type=1400 audit(1783902065.811:946): avc:  denied  { execute } for  pid=14143 comm="syz.0.2148" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  700.554388][ T5806] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  700.727791][ T5806] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  700.752060][ T5806] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  700.762643][T14160] xt_hashlimit: size too large, truncated to 1048576
[  700.772190][ T5806] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  700.784166][ T5806] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  700.800491][ T5721] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  700.825098][ T5806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  700.870951][ T5806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  700.937545][ T5806] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  700.948947][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  700.959667][ T5806] usb 4-1: Product: syz
[  700.971470][ T5721] usb 6-1: Using ep0 maxpacket: 8
[  700.983612][ T5806] usb 4-1: Manufacturer: syz
[  700.992147][ T5721] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  701.024170][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.049406][T14150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  701.070316][ T5806] cdc_wdm 4-1:1.0: skipping garbage
[  701.114374][ T5721] pvrusb2: Hardware description: Terratec Grabster AV400
[  701.122741][ T5806] cdc_wdm 4-1:1.0: skipping garbage
[  701.123734][T14169] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  701.146057][ T5721] pvrusb2: **********
[  701.158038][ T5721] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  701.172315][T14169] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  701.194545][ T5806] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  701.203066][ T5806] cdc_wdm 4-1:1.0: Unknown control protocol
[  701.209627][ T5721] pvrusb2: Important functionality might not be entirely working.
[  701.238545][ T5721] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  701.274884][ T5721] pvrusb2: **********
[  701.334385][ T2362] pvrusb2: Invalid write control endpoint
[  701.471740][    C0] wdm_int_callback: 17475 callbacks suppressed
[  701.471760][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.484481][    C0] wdm_int_callback: 17475 callbacks suppressed
[  701.484495][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.497008][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.503584][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.510086][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.516681][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.523466][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.530038][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.536266][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.542833][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.549077][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.555644][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.561917][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.568508][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.574749][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.581318][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.587531][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.594095][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.600308][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  701.606870][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  701.990651][ T5721] usb 6-1: USB disconnect, device number 23
[  702.013996][T14174] xt_hashlimit: size too large, truncated to 1048576
[  702.038133][ T1220] usb 4-1: USB disconnect, device number 31
[  702.038268][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  702.173742][ T2362] pvrusb2: Invalid write control endpoint
[  702.182728][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  702.193806][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  702.276936][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  702.293225][ T2362] pvrusb2: Device being rendered inoperable
[  702.320675][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  702.335835][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  702.358562][ T2362] pvrusb2: Attached sub-driver cx25840
[  702.365161][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  702.375722][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  702.462388][T14187] fuse: Bad value for 'fd'
[  702.649648][ T1220] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  702.653259][ T5713] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  702.693488][T14187] pim6reg1: tun_chr_ioctl cmd 1074025678
[  702.699713][T14187] pim6reg1: group set to 0
[  702.844165][T14189] xt_hashlimit: size too large, truncated to 1048576
[  702.865123][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.887503][ T5713] usb 1-1: Using ep0 maxpacket: 32
[  702.892051][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.908893][ T1220] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[  702.909333][ T5713] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.933055][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.988187][ T5713] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  702.988933][ T1220] usb 4-1: config 0 descriptor??
[  703.038284][ T5713] usb 1-1: config 0 interface 0 has no altsetting 0
[  703.056356][ T5713] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  703.076289][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.104519][ T5713] usb 1-1: config 0 descriptor??
[  703.554109][ T1220] lg-g15 0003:046D:0A07.0013: item fetching failed at offset 2/5
[  703.702306][ T1220] lg-g15 0003:046D:0A07.0013: probe with driver lg-g15 failed with error -22
[  703.833167][ T5713] usbhid 1-1:0.0: can't add hid device: -71
[  703.839225][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  703.847298][ T1220] usb 4-1: USB disconnect, device number 32
[  703.855771][ T5713] usb 1-1: USB disconnect, device number 34
[  703.975914][   T30] audit: type=1326 audit(1783902069.253:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.5.2166" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fea19de59 code=0x0
[  704.295442][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'.
[  704.442067][T14217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  704.564996][T14223] xt_hashlimit: size too large, truncated to 1048576
[  704.599792][T14205] netlink: 'syz.5.2166': attribute type 3 has an invalid length.
[  704.626237][T14205] netlink: 'syz.5.2166': attribute type 1 has an invalid length.
[  704.664698][T14205] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2166'.
[  705.022065][T14205] NCSI netlink: No device for ifindex 4294967295
[  705.367779][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2174'.
[  705.806798][T14237] bond4: (slave bond_slave_1): Device is not our slave
[  705.814944][T14237] bond4: option active_slave: invalid value (bond_slave_1)
[  705.833833][T14237] bond4 (unregistering): Released all slaves
[  706.221394][T14244] xt_hashlimit: size too large, truncated to 1048576
[  707.542270][T14270] xt_hashlimit: size too large, truncated to 1048576
[  707.734133][T14269] netlink: 'syz.5.2183': attribute type 4 has an invalid length.
[  707.881164][T14280] loop5: detected capacity change from 0 to 7
[  707.892488][T14280] Dev loop5: unable to read RDB block 7
[  707.902236][T14280]  loop5: AHDI p1 p2 p3
[  707.912163][T14280] loop5: partition table partially beyond EOD, truncated
[  707.921010][T14280] loop5: p1 start 1818582900 is beyond EOD, truncated
[  707.927965][T14280] loop5: p3 start 335544320 is beyond EOD, truncated
[  708.411129][ T5342] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  708.689174][ T5342] usb 5-1: device descriptor read/64, error -71
[  709.263996][ T5342] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  709.426475][ T5342] usb 5-1: device descriptor read/64, error -71
[  709.569013][ T5342] usb usb5-port1: attempt power cycle
[  709.662603][T14313] 9p: Bad value for 'rfdno'
[  709.810665][T14317] xt_hashlimit: size too large, truncated to 1048576
[  710.236564][ T5342] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  710.379041][ T5342] usb 5-1: device descriptor read/8, error -71
[  711.229119][ T5342] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  711.256358][ T5342] usb 5-1: device descriptor read/8, error -71
[  711.395815][ T5342] usb usb5-port1: unable to enumerate USB device
[  712.536490][T14295] 8021q: adding VLAN 0 to HW filter on device bond1
[  713.093539][T14346] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  713.100073][T14346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  713.138712][T14359] CIFS mount error: No usable UNC path provided in device string!
[  713.138712][T14359] 
[  713.149226][T14346] vhci_hcd vhci_hcd.0: Device attached
[  713.159064][T14359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  713.173719][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  713.202695][T14348] vhci_hcd: connection closed
[  713.205003][   T13] vhci_hcd vhci_hcd.4: stop threads
[  713.220113][   T13] vhci_hcd vhci_hcd.4: release socket
[  713.229344][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  713.251308][T14362] netlink: 'syz.4.2209': attribute type 1 has an invalid length.
[  713.261825][T14362] netlink: 'syz.4.2209': attribute type 2 has an invalid length.
[  713.310995][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  713.330711][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  713.386003][T14366] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  713.395341][T14366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  713.478304][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  713.538771][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  713.676573][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  713.713167][ T6965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  713.741180][ T6965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  714.008064][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  714.056097][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  714.355558][T14387] netlink: 'syz.4.2218': attribute type 2 has an invalid length.
[  714.367485][T14387] netlink: 'syz.4.2218': attribute type 1 has an invalid length.
[  714.377759][T14389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26946 sclass=netlink_route_socket pid=14389 comm=syz.0.2219
[  714.454355][   T29] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  714.472232][ T5806] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  714.632165][   T29] usb 4-1: Using ep0 maxpacket: 8
[  714.649049][ T5806] usb 6-1: Using ep0 maxpacket: 16
[  714.662618][ T5806] usb 6-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  714.664728][   T29] usb 4-1: config 7 has an invalid interface number: 101 but max is 0
[  714.702300][ T5806] usb 6-1: config 0 interface 0 has no altsetting 0
[  714.709159][   T29] usb 4-1: config 7 has no interface number 0
[  714.722051][   T29] usb 4-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  714.733850][ T5806] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  714.734984][   T29] usb 4-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  714.755799][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  714.766957][   T29] usb 4-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  714.778181][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.778390][   T29] usb 4-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  714.799085][ T5806] usb 6-1: config 0 descriptor??
[  714.803443][T14394] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2221'.
[  714.820977][   T29] usb 4-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  714.833774][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  714.846433][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  714.857625][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  714.868790][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  714.879895][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  714.891783][   T29] usb 4-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  714.903053][   T29] usb 4-1: config 7 interface 101 has no altsetting 0
[  714.912062][   T29] usb 4-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  714.921300][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.937760][T14393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  714.953683][T14393] syzkaller0: entered promiscuous mode
[  714.959291][   T29] usb 4-1: Product: ࠐ
[  714.964086][T14393] syzkaller0: entered allmulticast mode
[  714.969874][   T29] usb 4-1: Manufacturer: К
[  714.976208][   T29] usb 4-1: SerialNumber: syz
[  715.067475][T14392] tipc: Resetting bearer <eth:syzkaller0>
[  715.107263][T14392] tipc: Disabling bearer <eth:syzkaller0>
[  715.303139][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'.
[  715.370226][ T5806] usbhid 6-1:0.0: can't add hid device: -71
[  716.698543][ T5806] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  717.403763][ T5806] usb 6-1: USB disconnect, device number 24
[  717.696133][   T29] uvcvideo 4-1:7.101: Found multiple Units with ID 1
[  717.703052][   T30] audit: type=1400 audit(1783902081.855:948): avc:  denied  { map } for  pid=14417 comm="syz.4.2229" path="/dev/ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  717.706830][   T29] uvcvideo 4-1:7.101: probe with driver uvcvideo failed with error -22
[  717.760796][   T30] audit: type=1400 audit(1783902081.855:949): avc:  denied  { execute } for  pid=14417 comm="syz.4.2229" path="/dev/ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  717.814221][   T29] usb 4-1: USB disconnect, device number 33
[  717.925741][T14427] CIFS mount error: No usable UNC path provided in device string!
[  717.925741][T14427] 
[  717.939084][T14427] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  718.493995][T14434] xt_hashlimit: size too large, truncated to 1048576
[  718.500866][T14434] xt_NFQUEUE: number of queues (10) out of range (got 65542)
[  718.726672][ T5806] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  718.736504][ T6963] net_ratelimit: 64 callbacks suppressed
[  718.736522][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  718.759987][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  718.858401][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2234'.
[  718.900056][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  718.908047][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  718.919721][ T5806] usb 6-1: Using ep0 maxpacket: 16
[  718.928196][T14439] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2234'.
[  718.952309][ T5806] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  718.984443][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2234'.
[  718.994196][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  719.005075][T14439] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2234'.
[  719.036867][T13894] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  719.057831][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  719.067556][T13894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  719.077138][ T5806] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  719.099562][ T5806] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  719.131751][ T5806] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  719.157638][ T5806] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  719.196691][T13894] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  719.207383][T13894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  719.306074][ T5806] usb 6-1: Manufacturer: syz
[  719.313017][ T5806] usb 6-1: config 0 descriptor??
[  719.813232][T14451] Cannot find map_set index 135 as target
[  719.842503][  T142] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  719.956052][  T142] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  720.190571][ T5806] rc_core: IR keymap rc-hauppauge not found
[  720.198230][ T5806] Registered IR keymap rc-empty
[  720.226821][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  720.258167][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'.
[  720.277998][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  720.288697][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'.
[  720.529512][ T5806] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  720.615046][ T5806] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32
[  720.919983][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  720.961291][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  720.985224][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.035666][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.068652][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.099241][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.133901][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.164828][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.195758][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.228882][ T5806] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  721.262272][ T5806] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  721.277810][ T5806] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  721.309336][ T5806] usb 6-1: USB disconnect, device number 25
[  721.657076][T14481] FAULT_INJECTION: forcing a failure.
[  721.657076][T14481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.670403][T14481] CPU: 0 UID: 0 PID: 14481 Comm: syz.4.2245 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.670432][T14481] Tainted: [L]=SOFTLOCKUP
[  721.670439][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  721.670450][T14481] Call Trace:
[  721.670457][T14481]  <TASK>
[  721.670465][T14481]  dump_stack_lvl+0x100/0x190
[  721.670492][T14481]  should_fail_ex.cold+0x5/0xa
[  721.670516][T14481]  _copy_from_user+0x2e/0xd0
[  721.670538][T14481]  copy_msghdr_from_user+0x9f/0x4c0
[  721.670566][T14481]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  721.670589][T14481]  ? rcu_is_watching+0x12/0xc0
[  721.670617][T14481]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  721.670643][T14481]  ? rcu_is_watching+0x12/0xc0
[  721.670670][T14481]  ___sys_sendmsg+0x106/0x1e0
[  721.670695][T14481]  ? __pfx____sys_sendmsg+0x10/0x10
[  721.670722][T14481]  ? __lock_acquire+0x49f/0x1a40
[  721.670743][T14481]  ? get_pid_task+0x106/0x250
[  721.670795][T14481]  __sys_sendmsg+0x160/0x210
[  721.670814][T14481]  ? __pfx___sys_sendmsg+0x10/0x10
[  721.670845][T14481]  do_syscall_64+0x115/0x870
[  721.670871][T14481]  ? clear_bhb_loop+0x40/0x90
[  721.670894][T14481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.670913][T14481] RIP: 0033:0x7f811f19de59
[  721.670928][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.670945][T14481] RSP: 002b:00007f811d3b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  721.670963][T14481] RAX: ffffffffffffffda RBX: 00007f811f426180 RCX: 00007f811f19de59
[  721.670975][T14481] RDX: 0000000000000080 RSI: 0000200000001100 RDI: 0000000000000009
[  721.670985][T14481] RBP: 00007f811d3b4090 R08: 0000000000000000 R09: 0000000000000000
[  721.670996][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.671007][T14481] R13: 00007f811f426218 R14: 00007f811f426180 R15: 00007fff4b9ed2c8
[  721.671031][T14481]  </TASK>
[  721.894897][T14482] macvtap0: entered promiscuous mode
[  723.382606][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.391578][T14505] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.400714][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.409614][T14505] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.419077][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.768217][T14504] CIFS mount error: No usable UNC path provided in device string!
[  723.768217][T14504] 
[  723.807646][T14504] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  723.963088][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.972152][T14505] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2252'.
[  723.981247][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'.
[  724.084000][ T6963] net_ratelimit: 53 callbacks suppressed
[  724.084020][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  724.131686][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  724.275340][ T6957] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  724.306483][ T6957] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  724.456111][ T6957] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  724.643155][ T6957] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  724.787362][ T6957] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  724.807594][ T6957] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  724.936800][ T6965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  724.957217][ T6965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  725.520879][T14542] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication
[  725.546566][ T5342] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[  725.739591][T14548] __nla_validate_parse: 2 callbacks suppressed
[  725.739609][T14548] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2264'.
[  725.765705][ T5342] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.779092][ T5342] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  725.791748][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.907349][   T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  725.934285][ T5342] usb 5-1: config 0 descriptor??
[  725.985911][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2266'.
[  726.134144][   T29] usb 6-1: Using ep0 maxpacket: 16
[  726.155705][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  726.172894][   T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.302481][T14530] netlink: 'syz.4.2259': attribute type 11 has an invalid length.
[  726.353095][   T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  726.412170][   T29] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  726.452161][   T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  726.473451][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  726.506661][ T5342] usb 5-1: string descriptor 0 read error: -71
[  726.513523][   T29] usb 6-1: SerialNumber: syz
[  726.533169][T14561] xt_hashlimit: size too large, truncated to 1048576
[  726.551735][ T5342] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected
[  726.562232][   T29] hub 6-1:1.0: bad descriptor, ignoring hub
[  726.573115][   T29] hub 6-1:1.0: probe with driver hub failed with error -5
[  726.586057][ T5342] earthmate ttyUSB0: required endpoint is missing
[  726.596569][   T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  726.616033][ T5342] usb 5-1: USB disconnect, device number 49
[  726.632178][ T5342] cypress_m8 5-1:0.0: device disconnected
[  727.383864][T14568] xt_hashlimit: size too large, truncated to 1048576
[  728.977268][ T5806] usb 6-1: USB disconnect, device number 26
[  729.263382][T14595] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  729.603351][   T57] net_ratelimit: 68 callbacks suppressed
[  729.603364][   T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  729.646731][   T57] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  729.759521][T14599] netlink: 'syz.4.2278': attribute type 2 has an invalid length.
[  729.784221][   T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  729.805569][   T57] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  729.828148][T14599] netlink: 'syz.4.2278': attribute type 2 has an invalid length.
[  729.928530][ T6965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  729.947335][ T6965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  730.099684][ T5806] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  730.110236][ T6965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  730.152021][ T6965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  730.229399][T14605] Bluetooth: hci2: Frame reassembly failed (-84)
[  730.245111][ T6965] Bluetooth: hci2: Frame reassembly failed (-84)
[  730.281976][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'.
[  730.296404][ T6965] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  730.313428][ T5806] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  730.330295][ T6965] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  730.339862][ T5806] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  730.354303][T14607] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2280'.
[  730.388177][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'.
[  730.389111][ T5806] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  730.499951][ T5806] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  730.511420][ T5806] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  730.525147][ T5806] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  730.538027][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  730.553024][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  730.562287][ T5806] usb 1-1: Product: syz
[  730.772948][   T10] usb 4-1: Using ep0 maxpacket: 16
[  730.793710][   T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  731.045927][T14607] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2280'.
[  731.055501][ T5806] usb 1-1: Manufacturer: syz
[  731.062979][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  731.085887][ T5806] cdc_wdm 1-1:1.0: skipping garbage
[  731.093393][   T10] usb 4-1: config 0 has no interface number 0
[  731.100268][ T5806] cdc_wdm 1-1:1.0: skipping garbage
[  731.112036][   T10] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  731.121958][ T5806] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  731.129089][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.137582][ T5806] cdc_wdm 1-1:1.0: Unknown control protocol
[  731.148138][   T10] usb 4-1: Product: syz
[  731.150543][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'.
[  731.158137][   T10] usb 4-1: Manufacturer: syz
[  731.185301][   T10] usb 4-1: SerialNumber: syz
[  731.203203][   T10] usb 4-1: config 0 descriptor??
[  731.213957][   T10] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  731.223360][   T10] uvcvideo 4-1:0.105: No valid video chain found.
[  731.352972][ T1220] usb 1-1: USB disconnect, device number 35
[  731.471047][ T5806] usb 4-1: USB disconnect, device number 34
[  731.519395][T14616] bond1: (slave bond_slave_1): Device is not our slave
[  731.554544][T14616] bond1: option active_slave: invalid value (bond_slave_1)
[  731.565644][T14616] bond1 (unregistering): Released all slaves
[  732.410087][ T5620] Bluetooth: hci2: command 0x1003 tx timeout
[  732.418385][T11901] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  732.729793][ T5342] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  732.793896][T14631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  732.909521][ T5342] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  732.925048][ T5342] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  732.938647][ T5342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  732.949980][ T5342] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  732.962443][ T5342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  732.974513][ T5342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  732.988599][ T5342] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  732.998680][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  733.008206][ T5342] usb 1-1: Product: syz
[  733.013389][ T5342] usb 1-1: Manufacturer: syz
[  733.025552][T14625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  733.037742][ T5342] cdc_wdm 1-1:1.0: skipping garbage
[  733.058578][ T5342] cdc_wdm 1-1:1.0: skipping garbage
[  733.088696][ T5342] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  733.098435][ T5342] cdc_wdm 1-1:1.0: Unknown control protocol
[  733.473944][ T5342] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  733.547880][T14639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  733.566383][T14639] syzkaller0: entered promiscuous mode
[  733.571879][T14639] syzkaller0: entered allmulticast mode
[  733.585724][T14644] binder: 14624:14644 ioctl 50009403 200000000c80 returned -22
[  733.618325][    C0] wdm_int_callback: 2146 callbacks suppressed
[  733.618354][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.631010][    C0] wdm_int_callback: 2146 callbacks suppressed
[  733.631028][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.645803][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.652380][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.658938][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.665528][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.671971][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.678555][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.684810][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.691396][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.698671][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.705244][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.711698][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.718291][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.724598][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.731203][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.737469][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.744057][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.750299][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  733.756879][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  733.998504][T14646] tipc: Resetting bearer <eth:syzkaller0>
[  734.151518][T14638] tipc: Resetting bearer <eth:syzkaller0>
[  734.768957][T14638] tipc: Disabling bearer <eth:syzkaller0>
[  735.082806][ T5342] usb 4-1: Using ep0 maxpacket: 16
[  735.088198][   T48] net_ratelimit: 100 callbacks suppressed
[  735.088221][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  735.150665][ T5342] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config
[  735.163266][ T5342] usb 4-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30
[  735.174181][ T5342] usb 4-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56
[  735.187373][ T5342] usb 4-1: config 0 interface 0 has no altsetting 0
[  735.198421][ T5342] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  735.207563][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.215830][ T5342] usb 4-1: Product: syz
[  735.222179][ T5342] usb 4-1: Manufacturer: syz
[  735.226800][ T5342] usb 4-1: SerialNumber: syz
[  735.236517][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  735.247799][ T5342] usb 4-1: config 0 descriptor??
[  735.629771][ T5609] tipc: Node number set to 3488217023
[  735.794155][T13894] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  735.802249][T13894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  735.915644][T14658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2291'.
[  736.049785][   T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  736.081596][   T57] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  736.224466][   T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  736.251806][   T57] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  736.407873][  T142] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  736.437146][  T142] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  736.735270][T14667] xt_policy: output policy not valid in PREROUTING and INPUT
[  737.233333][ T5342] usb 4-1: USB disconnect, device number 35
[  737.354816][T14673] xt_socket: unknown flags 0x4c
[  738.083213][ T5342] usb 1-1: USB disconnect, device number 36
[  738.949244][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'.
[  739.001474][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'.
[  739.059982][T14690] bond0: entered promiscuous mode
[  739.081429][T14690] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.253004][T14700] FAULT_INJECTION: forcing a failure.
[  739.253004][T14700] name failslab, interval 1, probability 0, space 0, times 0
[  739.281313][T14700] CPU: 0 UID: 0 PID: 14700 Comm: syz.5.2306 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  739.281344][T14700] Tainted: [L]=SOFTLOCKUP
[  739.281350][T14700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  739.281359][T14700] Call Trace:
[  739.281366][T14700]  <TASK>
[  739.281374][T14700]  dump_stack_lvl+0x100/0x190
[  739.281401][T14700]  should_fail_ex.cold+0x5/0xa
[  739.281427][T14700]  should_failslab+0xc2/0x120
[  739.281448][T14700]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  739.281466][T14700]  ? __alloc_skb+0x5b7/0x710
[  739.281490][T14700]  ? __alloc_skb+0x140/0x710
[  739.281517][T14700]  __alloc_skb+0x140/0x710
[  739.281540][T14700]  ? __alloc_skb+0x5b7/0x710
[  739.281565][T14700]  ? __pfx___alloc_skb+0x10/0x10
[  739.281595][T14700]  netlink_alloc_large_skb+0x69/0x150
[  739.281621][T14700]  netlink_sendmsg+0x680/0xda0
[  739.281650][T14700]  ? __pfx_netlink_sendmsg+0x10/0x10
[  739.281678][T14700]  ? selinux_socket_sendmsg+0x198/0x2f0
[  739.281706][T14700]  ____sys_sendmsg+0xa4d/0xbe0
[  739.281729][T14700]  ? __pfx_netlink_sendmsg+0x10/0x10
[  739.281756][T14700]  ? __pfx_____sys_sendmsg+0x10/0x10
[  739.281788][T14700]  ___sys_sendmsg+0x190/0x1e0
[  739.281814][T14700]  ? __pfx____sys_sendmsg+0x10/0x10
[  739.281837][T14700]  ? __lock_acquire+0x49f/0x1a40
[  739.281858][T14700]  ? get_pid_task+0x106/0x250
[  739.281910][T14700]  __sys_sendmsg+0x160/0x210
[  739.281930][T14700]  ? __pfx___sys_sendmsg+0x10/0x10
[  739.281962][T14700]  do_syscall_64+0x115/0x870
[  739.281988][T14700]  ? clear_bhb_loop+0x40/0x90
[  739.282010][T14700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.282028][T14700] RIP: 0033:0x7f7fea19de59
[  739.282045][T14700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.282063][T14700] RSP: 002b:00007f7fe83d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  739.282080][T14700] RAX: ffffffffffffffda RBX: 00007f7fea426090 RCX: 00007f7fea19de59
[  739.282092][T14700] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000009
[  739.282103][T14700] RBP: 00007f7fe83d5090 R08: 0000000000000000 R09: 0000000000000000
[  739.282114][T14700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.282125][T14700] R13: 00007f7fea426128 R14: 00007f7fea426090 R15: 00007fffcf5e2348
[  739.282149][T14700]  </TASK>
[  739.782448][T14708] Cannot find map_set index 135 as target
[  740.305389][T14711] syzkaller0: entered promiscuous mode
[  740.328115][T14711] syzkaller0: entered allmulticast mode
[  740.358651][T14711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  740.369651][T14709] tipc: Resetting bearer <eth:syzkaller0>
[  740.399008][T14709] tipc: Disabling bearer <eth:syzkaller0>
[  740.471830][   T13] net_ratelimit: 61 callbacks suppressed
[  740.471844][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  740.514025][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  740.655467][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  740.674260][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  740.953902][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  740.968570][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  741.110142][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  741.138349][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  741.188722][T14726] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2315'.
[  741.198275][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2314'.
[  741.219511][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2314'.
[  741.269780][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  741.293311][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  742.142698][T14746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  742.391209][T14744] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.617852][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2323'.
[  742.644822][T14754] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2323'.
[  742.659441][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2323'.
[  742.681850][T14754] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2323'.
[  743.228397][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2327'.
[  745.270048][T14818] vxcan1: tx drop: invalid da for name 0x000000000000fdff
[  745.519336][T14824] __nla_validate_parse: 2 callbacks suppressed
[  745.519354][T14824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2341'.
[  745.563513][   T30] audit: type=1400 audit(1783902108.152:950): avc:  denied  { ioctl } for  pid=14820 comm="syz.4.2341" path="socket:[46026]" dev="sockfs" ino=46026 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  745.877738][   T13] net_ratelimit: 75 callbacks suppressed
[  745.877758][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  745.940586][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  745.965545][   T30] audit: type=1400 audit(1783902108.527:951): avc:  denied  { ioctl } for  pid=14829 comm="syz.6.2342" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  746.112217][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  746.119979][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  746.251576][   T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  746.261563][   T57] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  746.390885][T14839] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2344'.
[  746.452682][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  746.482804][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  746.886514][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  746.928356][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  747.036730][   T30] audit: type=1400 audit(1783902109.528:952): avc:  denied  { getopt } for  pid=14854 comm="syz.5.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  747.098938][   T30] audit: type=1400 audit(1783902109.556:953): avc:  denied  { ioctl } for  pid=14854 comm="syz.5.2349" path="socket:[47112]" dev="sockfs" ino=47112 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  747.161807][ T5609] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  747.416034][ T5609] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7
[  747.623055][ T5609] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024
[  747.695772][ T5609] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  747.706290][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.722745][ T5609] usb 1-1: Product: syz
[  747.731877][ T5609] usb 1-1: Manufacturer: syz
[  747.751109][ T5609] usb 1-1: SerialNumber: syz
[  748.030096][ T5609] usb 1-1: Can't get UAC3 power state for id 10
[  748.058647][ T5609] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[  748.097947][ T5609] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  748.129751][ T5609] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  748.152911][ T5609] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[  748.345505][   T30] audit: type=1400 audit(1783902110.753:954): avc:  denied  { read } for  pid=14878 comm="syz.6.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  748.346788][ T5609] usb 1-1: USB disconnect, device number 37
[  748.567345][T14886] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2359'.
[  749.079356][   T30] audit: type=1400 audit(1783902111.436:955): avc:  denied  { append } for  pid=14899 comm="syz.6.2366" name="video0" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  749.162655][   T30] audit: type=1400 audit(1783902111.501:956): avc:  denied  { append } for  pid=14899 comm="syz.6.2366" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  749.236284][T14907] 9p: Bad value for 'wfdno'
[  750.448758][T14930] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2375'.
[  750.571625][T14925] xt_hashlimit: size too large, truncated to 1048576
[  751.302516][   T48] net_ratelimit: 77 callbacks suppressed
[  751.302548][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  751.317923][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  751.569796][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  751.595737][ T1220] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  751.632145][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  751.719261][T14955] xt_hashlimit: size too large, truncated to 1048576
[  751.759098][T14960] syzkaller1: entered promiscuous mode
[  751.773613][T14960] syzkaller1: entered allmulticast mode
[  751.787961][ T6963] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  751.809304][ T6963] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  751.821069][ T1220] usb 7-1: Using ep0 maxpacket: 8
[  751.835926][ T1220] usb 7-1: config 7 has an invalid interface number: 101 but max is 0
[  751.854425][ T1220] usb 7-1: config 7 has no interface number 0
[  751.872194][ T1220] usb 7-1: config 7 interface 101 altsetting 81 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  751.904827][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  751.942188][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  751.954856][ T5863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  751.988180][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has an invalid descriptor for endpoint zero, skipping
[  752.006197][ T5863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  752.019924][ T1220] usb 7-1: config 7 interface 101 altsetting 81 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  752.055307][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  752.075632][ T1220] usb 7-1: config 7 interface 101 altsetting 81 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  752.101735][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  752.126116][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  752.137165][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  752.171330][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  752.193420][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x8, skipping
[  752.210328][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0xE, skipping
[  752.225771][ T1220] usb 7-1: config 7 interface 101 altsetting 81 has a duplicate endpoint with address 0x5, skipping
[  752.258264][ T1220] usb 7-1: config 7 interface 101 has no altsetting 0
[  752.275057][ T1220] usb 7-1: New USB device found, idVendor=1fc9, idProduct=009b, bcdDevice=56.7f
[  752.285544][ T1220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.296972][ T1220] usb 7-1: Product: ࠐ
[  752.304483][ T1220] usb 7-1: Manufacturer: К
[  752.309210][ T1220] usb 7-1: SerialNumber: syz
[  753.053980][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2384'.
[  754.741277][T14980] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2391'.
[  754.817231][ T1220] uvcvideo 7-1:7.101: Found multiple Units with ID 1
[  754.848990][ T1220] uvcvideo 7-1:7.101: probe with driver uvcvideo failed with error -22
[  754.896499][ T1220] usb 7-1: USB disconnect, device number 9
[  754.969048][   T30] audit: type=1400 audit(1783902116.946:957): avc:  denied  { map } for  pid=14983 comm="syz.5.2392" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  755.113857][T15001] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2397'.
[  755.212080][ T5806] usb 4-1: new low-speed USB device number 36 using dummy_hcd
[  755.415965][ T5806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.438697][ T5806] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  755.462387][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.490784][ T5806] usb 4-1: config 0 descriptor??
[  755.727074][T14989] netlink: 'syz.3.2395': attribute type 11 has an invalid length.
[  755.759724][ T5806] usb 4-1: string descriptor 0 read error: -71
[  755.769850][ T5806] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected
[  755.781062][ T5806] earthmate ttyUSB0: required endpoint is missing
[  755.791997][ T5806] usb 4-1: USB disconnect, device number 36
[  755.801454][ T5806] cypress_m8 4-1:0.0: device disconnected
[  755.945550][T15017] CIFS mount error: No usable UNC path provided in device string!
[  755.945550][T15017] 
[  755.967307][T15017] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  756.702976][   T48] net_ratelimit: 73 callbacks suppressed
[  756.703144][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  756.784402][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  756.986674][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  757.025658][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  757.141693][T15033] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2406'.
[  757.167499][   T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  757.203841][   T57] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  757.346693][   T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  757.382799][   T48] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  757.517443][ T5863] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  757.537880][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51472 sclass=netlink_route_socket pid=15044 comm=syz.0.2410
[  757.560154][ T5863] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  758.918908][T15057] netlink: 'syz.4.2415': attribute type 21 has an invalid length.
[  758.960947][T15057] netlink: 'syz.4.2415': attribute type 5 has an invalid length.
[  759.666524][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'.
[  760.606959][T15084] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2420'.
[  760.649583][   T30] audit: type=1400 audit(1783902122.260:958): avc:  denied  { write } for  pid=15081 comm="syz.3.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  872.783018][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  872.789986][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=73157, q=771 ncpus=2)
[  872.797691][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10498 (4295021531-4295011033), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  872.811037][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g73157 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  872.822214][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  872.832166][    C1] rcu: RCU grace-period kthread stack dump:
[  872.838038][    C1] task:rcu_preempt     state:R  running task     stack:28568 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  872.851518][    C1] Call Trace:
[  872.854785][    C1]  <TASK>
[  872.857719][    C1]  __schedule+0x125c/0x6730
[  872.862237][    C1]  ? __pfx___schedule+0x10/0x10
[  872.867082][    C1]  ? find_held_lock+0x2b/0x80
[  872.871755][    C1]  ? schedule+0x225/0x2c0
[  872.876081][    C1]  schedule+0xdd/0x2c0
[  872.880143][    C1]  schedule_timeout+0x127/0x280
[  872.884984][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  872.890345][    C1]  ? __pfx_process_timeout+0x10/0x10
[  872.895631][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  872.901432][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  872.906885][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  872.911641][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  872.916916][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  872.921847][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  872.927036][    C1]  ? rcu_is_watching+0x12/0xc0
[  872.931792][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  872.937598][    C1]  rcu_gp_kthread+0x179/0x230
[  872.942264][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  872.947450][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  872.953259][    C1]  ? __kthread_parkme+0x18c/0x230
[  872.958280][    C1]  ? kthread+0x13a/0x450
[  872.962524][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  872.967712][    C1]  kthread+0x370/0x450
[  872.971775][    C1]  ? __pfx_kthread+0x10/0x10
[  872.976361][    C1]  ret_from_fork+0x72b/0xd50
[  872.980946][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  872.986066][    C1]  ? __switch_to+0x800/0x10f0
[  872.990741][    C1]  ? __pfx_kthread+0x10/0x10
[  872.995328][    C1]  ret_from_fork_asm+0x1a/0x30
[  873.000112][    C1]  </TASK>
[  873.003117][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  873.009420][    C1] Sending NMI from CPU 1 to CPUs 0:
[  873.014610][    C0] NMI backtrace for cpu 0
[  873.014625][    C0] CPU: 0 UID: 0 PID: 15086 Comm: syz.0.2422 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  873.014644][    C0] Tainted: [L]=SOFTLOCKUP
[  873.014649][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  873.014657][    C0] RIP: 0010:preempt_count_add+0x2d/0x150
[  873.014675][    C0] Code: fa 48 c7 c0 00 c6 72 9b 55 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 83 e0 07 89 fb 48 c1 e9 03 83 c0 03 65 01 3d 33 19 8e 12 <0f> b6 14 11 38 d0 7c 08 84 d2 0f 85 de 00 00 00 8b 15 ed 8e 9d 19
[  873.014688][    C0] RSP: 0018:ffffc90000007d80 EFLAGS: 00000086
[  873.014699][    C0] RAX: 0000000000000003 RBX: 0000000000000001 RCX: 1ffffffff36e58c0
[  873.014708][    C0] RDX: dffffc0000000000 RSI: ffffffff8bd2f980 RDI: 0000000000000001
[  873.014717][    C0] RBP: 0000000000000006 R08: 0000000000000005 R09: 0000000000000000
[  873.014725][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff9b8fc130
[  873.014733][    C0] R13: dffffc0000000000 R14: ffff88807a543300 R15: 1ffff92000000fb8
[  873.014743][    C0] FS:  00007f92d0f8f6c0(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000
[  873.014757][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  873.014767][    C0] CR2: 0000200000003ec0 CR3: 0000000078bc6000 CR4: 00000000003526f0
[  873.014776][    C0] Call Trace:
[  873.014781][    C0]  <IRQ>
[  873.014787][    C0]  _raw_spin_lock_irqsave+0x1e/0x60
[  873.014805][    C0]  debug_object_deactivate+0x135/0x3b0
[  873.014822][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[  873.014839][    C0]  ? timerqueue_linked_add+0x260/0x430
[  873.014857][    C0]  __hrtimer_run_queues+0x2e9/0x9c0
[  873.014879][    C0]  hrtimer_interrupt+0x3e5/0x940
[  873.014901][    C0]  __sysvec_apic_timer_interrupt+0x109/0x470
[  873.014921][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[  873.014940][    C0]  </IRQ>
[  873.014944][    C0]  <TASK>
[  873.014950][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  873.014965][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70
[  873.014981][    C0] Code: f3 0f 1e fa 65 8b 05 c5 74 59 12 48 8b 34 24 65 48 8b 15 a1 74 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 <e9> d1 95 b2 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83
[  873.014994][    C0] RSP: 0018:ffffc900039b75e0 EFLAGS: 00000246
[  873.015005][    C0] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc900064f1000
[  873.015014][    C0] RDX: 0000000000080000 RSI: ffffffff824828fc RDI: ffff88802992ca80
[  873.015023][    C0] RBP: ffffc900039b7740 R08: 0000000000000007 R09: 0000000000000002
[  873.015032][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  873.015040][    C0] R13: ffff888057870580 R14: 000000000000057f R15: dffffc0000000000
[  873.015052][    C0]  ? next_uptodate_folio+0x21c/0xdd0
[  873.015072][    C0]  next_uptodate_folio+0x21c/0xdd0
[  873.015093][    C0]  filemap_map_pages+0x7e7/0x1fe0
[  873.015116][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  873.015137][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  873.015156][    C0]  do_fault+0x985/0x1750
[  873.015175][    C0]  __handle_mm_fault+0x187d/0x2a00
[  873.015195][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  873.015215][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  873.015234][    C0]  ? pte_offset_map_lock+0x174/0x320
[  873.015249][    C0]  ? find_held_lock+0x2b/0x80
[  873.015270][    C0]  ? follow_page_pte+0x4d0/0x13f0
[  873.015287][    C0]  handle_mm_fault+0x37b/0xa30
[  873.015307][    C0]  __get_user_pages+0x1178/0x32a0
[  873.015326][    C0]  ? __pfx___get_user_pages+0x10/0x10
[  873.015349][    C0]  populate_vma_page_range+0x267/0x3f0
[  873.015366][    C0]  ? __pfx_populate_vma_page_range+0x10/0x10
[  873.015383][    C0]  ? __pfx_find_vma_intersection+0x10/0x10
[  873.015398][    C0]  ? do_mmap+0x93f/0x12f0
[  873.015414][    C0]  __mm_populate+0x107/0x3a0
[  873.015431][    C0]  ? __pfx___mm_populate+0x10/0x10
[  873.015449][    C0]  ? up_write+0x2e5/0x5c0
[  873.015466][    C0]  vm_mmap_pgoff+0x37f/0x470
[  873.015483][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  873.015500][    C0]  ? __pfx_do_futex+0x10/0x10
[  873.015520][    C0]  ksys_mmap_pgoff+0xe4/0x610
[  873.015536][    C0]  ? __x64_sys_futex+0x358/0x4d0
[  873.015553][    C0]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  873.015569][    C0]  ? __pfx___x64_sys_futex+0x10/0x10
[  873.015588][    C0]  __x64_sys_mmap+0x125/0x190
[  873.015606][    C0]  do_syscall_64+0x115/0x870
[  873.015625][    C0]  ? clear_bhb_loop+0x40/0x90
[  873.015640][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.015654][    C0] RIP: 0033:0x7f92d019de59
[  873.015666][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.015678][    C0] RSP: 002b:00007f92d0f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  873.015690][    C0] RAX: ffffffffffffffda RBX: 00007f92d0425fa0 RCX: 00007f92d019de59
[  873.015700][    C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  873.015709][    C0] RBP: 00007f92d0233e6f R08: ffffffffffffffff R09: 0000000000000000
[  873.015717][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  873.015726][    C0] R13: 00007f92d0426038 R14: 00007f92d0425fa0 R15: 00007ffc75111258
[  873.015740][    C0]  </TASK>