last executing test programs:

17.128140406s ago: executing program 1 (id=2727):
writev(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x1000000}]}) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x181, 0x0) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32)
socket(0x1d, 0x2, 0x6) (async, rerun: 32)
add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r8 = open(0x0, 0x64842, 0x389b0d52417bb201)
pwritev2(r8, 0x0, 0x0, 0x7000, 0x0, 0x3) (async)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000140)={@local})

16.939489717s ago: executing program 1 (id=2730):
syz_usb_connect$uac1(0x2, 0xd4, &(0x7f0000002a80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x40, 0x2c025ab656051f63, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x0, 0x5, 0x2, 0x1, 0x9, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x1, "bf6f94"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x9, 0x9, {0x7, 0x25, 0x1, 0x0, 0x6, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x2, 0x8d}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x3, 0xfe, "6452f441928c"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0x10, 'y'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x2f4eed75658be0c3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9, 0x3, "bcac8b", 'd'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0xfd, "eb", "98"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf, 0xc, 0x9, {0x7, 0x25, 0x1, 0x0, 0x6, 0x9}}}}}}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x250, 0xc, 0x6, 0xfe, 0x0, 0x7}, 0x20, &(0x7f0000002bc0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x11, "27fa6d5dc791489039bef7cff50360eb"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x7, 0x40}]}, 0x9, [{0xed, &(0x7f0000002c00)=@string={0xed, 0x3, "c891d225a62172c2421dfedeaabe283d995df6bedff8b10d16d08555665ddb4930374fa9d6e74f3933fa18ed9a91dc618ce750425793c75558e2859135dba1e834896c03c60ab8da20c1f2b21339ad7a67911df511a07c0f6881e3758b8e9673a6eb18f4caa0ab734923cc3e6cb38d59657f8190c0df8c5da566532b6cd5145e37e30a549ee24d655be3d872970dc77e30f442c7ba5156a4767527b07d60026060d5d63cf0b2bf58ba89298b086f86383943b313d344b911d7057b968794a2d85295244a544e99299540f9a8b5aed8a8f1fd896b09449838112ff71926ffdc944f9ae4db6fe1a67cbf7ae2"}}, {0xed, &(0x7f0000002d00)=@string={0xed, 0x3, "cceb43df88f975f8cc3381a5b3f0addeeefeb04013f90ff7ced74c7c4cfc646b04f8bcf20fa24bb9b47d59d3706c7b7aff170b0c6b875cafe59a543a391556639297a97aec82fe013e8170f6b48445e2fa28e6a9971dd8fbd51650f9c2ef68514994c2e89225eb1adfc3e18b4de9ad78284374d975b081bfc1e2a8a80fed838f6019756e7c9c8104fe688bb558ef2aca2ffb22b700c9da7885b0807773ce29c56eb584ea67ce3a4d3a5ad6d99f62887c85e5cea5263df47e0563e8ed234e0e2eb1243600524e2e49364e460d07a505b766f5e5ce55fdb0a8939022208b330faf201bc9cd646be29b6e71ed"}}, {0x8b, &(0x7f0000002e00)=@string={0x8b, 0x3, "abb00ddc38b60ca1d2a02d7fb588dd6cdd87fcf5a56ff0800153bd68c766f27c0649d31778afbc5f914de5404a5d21d58d0d7e41c0c7eeb310ea949b51bf6078a0b85c6bf29ee9e84787c12b6dbc8f0a1fa2fa8568d3fcd0ece8a492232f3c76429be9471a4727ef484ff11d44d64ddc42a34e32ae2787d26b60d93fdd5b11f79719da66e88eb497ad"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4}}, {0x4, &(0x7f0000002f00)=@lang_id={0x4, 0x3, 0x3801}}, {0x3d, &(0x7f0000002f40)=@string={0x3d, 0x3, "b96d628ed69267fd0f6dc8cdbf98691e4463ecba37f8807850eacb8c57164c650f94902fd1673612ac4e7012f9f72287b07286156efb4d89ecd80f"}}, {0xd7, &(0x7f0000002f80)=@string={0xd7, 0x3, "c4b7c6ba04e687465e79b2e581d49c3d2acbf2faa2935a1a847aba335e1de577768e348a0d4efae44d8c60476de704251e6b47b948f6514a6013d8c685dca54fa4f30762454915553033e8dfcc3d5cd3329521afd9bbdce6f4d0d579b53f8c862a4bf37671695260d6d1f2c3aee0a2a28b141688dca52b8e43076e382091b5e6d6fce3812058b6b94493bb6b9f6e3dde61d8b5a34cab638637aa0d9e422ddfc9cf14bd1fbb7bd097d134832bcb40538f46a8377ea043ad568cd9bf7dfc90d6cd758ada6d4c2bb6d0322cb28712021c92a4ba151d47"}}, {0xfa, &(0x7f0000003080)=@string={0xfa, 0x3, "1366d05b64691256a142652a3ca8ef34fd96cdc6b43dc0e483e79066462261f80115a0b9a6bce0b5ad9b8d66d84f879a739950384658ef787438867be68f2f564bfd41459b4a0ab9c74cf7f80a1e107374a585625a3f9d773f68ad0fbece71571cb625b6236bee8deda694f3a3cd2be9c29b544b6baa4b75e1e78568a93203797e411790f1735d2680c46be62801eaed99d58de0aa255adc28fb9b09028b72ec0ae0a1e4c9aa7007f6f7b1f64d93a659420f1ae92e6eee9ce39eb5224ed86c4122ff99f39c64e24d5158b6f609142aed2a2714e7154457788c744e6ca1bc1af5f20a113949811357345b486935defe16ed52603659fcc96c"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x861}}]})

14.677894066s ago: executing program 1 (id=2738):
socket$kcm(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x102b, 0x13, 0x2, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00')
lseek(r0, 0xffffffffffffffff, 0x1)
io_setup(0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000004b680)=""/102400, 0x19050)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
open(0x0, 0x4000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000180000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8}, 0x94)

12.677869678s ago: executing program 1 (id=2743):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x5)
r5 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0)
userfaultfd(0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00')
read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020)

10.304262087s ago: executing program 4 (id=2754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10c62}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc3}, 0xe040)

9.876074218s ago: executing program 0 (id=2756):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
r7 = syz_open_dev$media(&(0x7f00000000c0), 0xfffffffffffffc01, 0x0)
r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)})
ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000940)={{0x80000000, 0x0, 0x1, [0xf4b3, 0x80000000]}, {0x80000000, 0x0, 0x6, [0x2, 0xd]}, 0x2, [0x4, 0x8]})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800)
connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x148, 0x10, 0x713, 0x70bd25, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x3}, {0xfffffffffffffffc, 0x0, 0x4000000000000000}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0xfc, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x148}}, 0x0)

9.788991362s ago: executing program 1 (id=2757):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_uring_setup(0xab1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xb, 0x3, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x2000004, r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
keyctl$join(0x1, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004300010028bd7000fdd3df2500000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x40000d0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

9.788750007s ago: executing program 4 (id=2758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00+'], 0x34}, 0x1, 0x200000000000000}, 0xc088)

8.8817815s ago: executing program 0 (id=2759):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80)
close(r1)

8.516258429s ago: executing program 4 (id=2761):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00000000000000000000ffff"}, 0xe, 0x5})

7.432807698s ago: executing program 4 (id=2763):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {0x4, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x88a, 0x9000000}, 0x28)

7.308294698s ago: executing program 0 (id=2765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x0, @local, 0x2}}, 0x6, 0x1a8}, &(0x7f0000000000)=0x90)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000003f00000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.76080834s ago: executing program 3 (id=2768):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x400000000000000)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

6.565830123s ago: executing program 3 (id=2770):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
creat(0x0, 0x122)
personality(0x4000009)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000030101010000000000000000020000000c0019800800020022010000300002802c00018014000300fc020000000000000000000000000000100004"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x44080)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0)
readv(r5, &(0x7f0000001500)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)

6.488633297s ago: executing program 0 (id=2771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8}}]}}]}, 0x48}}, 0x20040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xf, 0x9, 0x800, 0x1, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x18, 0x10, 0x10000ff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000200010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

6.263755638s ago: executing program 2 (id=2772):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.892150399s ago: executing program 2 (id=2773):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x83, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}}}}]}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5.508808775s ago: executing program 0 (id=2774):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getpid()
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0xc8700, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
socket$xdp(0x2c, 0x3, 0x0)
r5 = syz_io_uring_setup(0x4000022f, &(0x7f0000000200)={0x0, 0xd11d, 0x20000, 0x0, 0x100002cf, 0x0, r0}, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x2f, &(0x7f0000000040), 0x3b)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)

5.411045593s ago: executing program 4 (id=2775):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)={0x11b0, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x1198, 0x103, 0x0, 0x1, [@typed={0x63, 0x144, 0x0, 0x0, @binary="8f6379acb22e34a7ba683f1ca605a01508d8dcf6e64227cec00bfa828271c086741daefe100590d833baaf0babb94cf26bdc6b193b3a789e3cc1cb95b3814998ed1d6c540cf1fd78f85a4d081de6cc78c8a03a52381b7752725c676ece47b1"}, @nested={0xba, 0x13f, 0x0, 0x1, [@typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9e}, @nested={0x4, 0x4b}, @nested={0x4, 0xe8}, @nested={0x4, 0xd4}, @generic="6db6eb31fcbe1000d0a0026c2b1eb0a2e434c5686a7b7ca7b9706eb0c4b7b0db6ced39d1bc0068782b430bd1f5ca6c2ad77d7a95137162265658ae50dec85d421821ee187e389ab0b73e6086331538cd0bab0431721d02f373c7bae8504be71071795d36a88be0d98f36b72f837a11de0a4fa0787ed4d3184ff50ef4a51545222c9c84f9bf881ade3d8e728af11f9cca7cc099dc18c6bcaa3310746ca8db"]}, @nested={0x69, 0xb3, 0x0, 0x1, [@generic="d51e0102cf3f66ade83834323a68e63c641ef0eddac024d8db26991a9881941ef7d792c55e48248e5541d4c671003c5828327a5144c72c", @typed={0x8, 0xbc, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x78}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="ee187171e815bea3569e", @nested={0x4, 0x8}]}, @nested={0x1008, 0x64, 0x0, 0x1, [@typed={0x1004, 0x10a, 0x0, 0x0, @binary="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"}]}]}, @nested={0x4, 0x3}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
socket$xdp(0x2c, 0x3, 0x0)
r6 = syz_io_uring_setup(0x4000022f, &(0x7f0000000200)={0x0, 0xd11d, 0x20000, 0x0, 0x100002cf}, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x2f, &(0x7f0000000040), 0x3b)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)

4.549500402s ago: executing program 3 (id=2776):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x800003ffffffffff, 0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000006, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4c080)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.359411778s ago: executing program 1 (id=2777):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40)

3.192277079s ago: executing program 0 (id=2778):
socket$vsock_stream(0x28, 0x1, 0x0)
getrlimit(0x1d, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@id, 0x10)
sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x101d0)
flock(0xffffffffffffffff, 0x2)
setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0)
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f6169427b2e44e953ff7f0000fc06b2855cd8c82b1b9951cf5a1dee93"}})
socket$kcm(0xa, 0x922000000003, 0x11)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r8, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c)
r9 = fspick(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)

2.436210845s ago: executing program 2 (id=2779):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0xf4000000, 0x0, 0x0, 0x0, 0x0, 0x75, "8000"}, 0x0, 0x2, {}, 0x20800})

2.431992685s ago: executing program 4 (id=2780):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x0, 0x0}], 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))

2.252586348s ago: executing program 2 (id=2781):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/sockstat6\x00')
read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0xede)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
r5 = gettid()
r6 = syz_open_procfs(r5, 0x0)
write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x1)
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x700}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x3, 0x4)

2.252162677s ago: executing program 3 (id=2782):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00')
pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
epoll_create1(0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0)
ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000ffcffc))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffe11, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3)
r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x231, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0xa, 0x2d, 0x1, {0x22, 0x14}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x8, 0xff}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x7, 0x7, 0x8, 0x6}, 0x4a, &(0x7f00000001c0)={0x5, 0xf, 0x4a, 0x2, [@ptm_cap={0x3}, @generic={0x42, 0x10, 0xa, "b877c6de148062244fd46051be054bd784f5031ebd196c444d60016b56664abf0b17b21ea97387efcc1c615a2232ede92efee038c73259f1f58a11baed365d"}]}, 0x1, [{0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "a6ca86c2908f00a63403b3be15643fdd196067198e214e5b7860827c6d5de8f5ad04d390350d812e82e0dfcb196b5633db275f2d158b32b83ff2941cc34ef78e7e8f623697a7c3ad5e8f657644455e1bb7787c3d201d5a88aedfa3aa7736a40d9bf01306c9f070ce2519dd0c6a3cf4bac41a9f184261ec4eeb413369f54401f9540896807084b75362315754a0316c41ac1ee4401da731fb7c66"}}]})
syz_usb_disconnect(r4)

1.171998817s ago: executing program 2 (id=2783):
r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r5, 0xb)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x70}}, 0x44000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]})

125.911147ms ago: executing program 3 (id=2784):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
mknod(0x0, 0x8001420, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
setreuid(0x0, 0xee00)
gettid()
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$alg(r0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, 0x0, 0x24000005)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

3.494808ms ago: executing program 3 (id=2785):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}}, 0x4000)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x2}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)})
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x4})

0s ago: executing program 2 (id=2786):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8a241, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002600010026bdf020fce1df2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xa, 0x6}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x2, 0x0, 0x573cde07, 0x6, 0xd, 0x5, 0x1}, &(0x7f0000000040)=0x20)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00001ac580)=[{0xa000006, 0x0, 0x0, 0x7, 0x101}]})

kernel console output (not intermixed with test programs):

lo speed is unknown, defaulting to 1000
[  588.797585][T13143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  588.850061][T13142] tipc: Resetting bearer <eth:syzkaller0>
[  588.964824][T13142] tipc: Disabling bearer <eth:syzkaller0>
[  589.031692][T13165] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1992'.
[  589.568737][T12380] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  590.081720][T12380] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  590.093002][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2002'.
[  590.105311][T12380] usb 4-1: config 0 has no interface number 0
[  590.113196][T12380] usb 4-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  590.127618][T12380] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  590.139904][T12380] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[  590.155834][T12380] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[  590.182747][T12380] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  590.214213][T12380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.230522][T12380] usb 4-1: Product: syz
[  590.234774][T12380] usb 4-1: Manufacturer: syz
[  590.240627][T12380] usb 4-1: SerialNumber: syz
[  590.245388][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'.
[  590.257154][T12380] usb 4-1: config 0 descriptor??
[  590.267226][T13177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  590.980448][T13214] lo speed is unknown, defaulting to 1000
[  591.359351][T13210] CUSE: unknown device info ""
[  591.364221][T13210] CUSE: unknown device info ""
[  591.369295][T13210] CUSE: unknown device info ""
[  591.374127][T13210] CUSE: unknown device info ""
[  591.378993][T13210] CUSE: unknown device info "�"
[  591.383905][T13210] CUSE: unknown device info ""
[  591.388822][T13210] CUSE: unknown device info ""
[  591.393642][T13210] CUSE: unknown device info "�"
[  591.398581][T13210] CUSE: DEVNAME unspecified
[  591.408484][T13210] xt_hashlimit: size too large, truncated to 1048576
[  591.456554][T13219] syzkaller0: entered promiscuous mode
[  591.463345][T13219] syzkaller0: entered allmulticast mode
[  591.530614][T13219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.558945][T13218] tipc: Resetting bearer <eth:syzkaller0>
[  591.599442][T13218] tipc: Disabling bearer <eth:syzkaller0>
[  593.586588][T13252] netlink: 'syz.0.2016': attribute type 4 has an invalid length.
[  594.517615][T13259] CUSE: unknown device info ""
[  594.522548][T13259] CUSE: unknown device info ""
[  594.527603][T13259] CUSE: unknown device info ""
[  594.532465][T13259] CUSE: unknown device info ""
[  594.537414][T13259] CUSE: unknown device info "�"
[  594.542412][T13259] CUSE: unknown device info ""
[  594.547404][T13259] CUSE: unknown device info ""
[  594.552271][T13259] CUSE: unknown device info "�"
[  594.557338][T13259] CUSE: DEVNAME unspecified
[  594.574334][T13259] xt_hashlimit: size too large, truncated to 1048576
[  595.403618][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2017'.
[  595.834141][T13279] lo speed is unknown, defaulting to 1000
[  598.164895][T13323] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  599.595762][ T5870] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  600.255743][ T5870] usb 2-1: Using ep0 maxpacket: 32
[  600.262947][ T5870] usb 2-1: descriptor type invalid, skip
[  600.273168][ T5870] usb 2-1: descriptor type invalid, skip
[  600.279538][ T5870] usb 2-1: descriptor type invalid, skip
[  600.285432][ T5870] usb 2-1: descriptor type invalid, skip
[  600.291403][ T5870] usb 2-1: descriptor type invalid, skip
[  600.304496][ T5870] usb 2-1: descriptor type invalid, skip
[  600.311922][ T5870] usb 2-1: descriptor type invalid, skip
[  600.590815][ T5870] usb 2-1: descriptor type invalid, skip
[  600.614047][ T5870] usb 2-1: descriptor type invalid, skip
[  600.634553][ T5870] usb 2-1: descriptor type invalid, skip
[  600.664264][ T5870] usb 2-1: descriptor type invalid, skip
[  600.676715][ T5870] usb 2-1: descriptor type invalid, skip
[  600.688809][ T5870] usb 2-1: descriptor type invalid, skip
[  600.694674][ T5870] usb 2-1: descriptor type invalid, skip
[  600.706095][ T5870] usb 2-1: descriptor type invalid, skip
[  600.711863][ T5870] usb 2-1: descriptor type invalid, skip
[  600.720165][ T5870] usb 2-1: descriptor type invalid, skip
[  600.727024][ T5870] usb 2-1: descriptor type invalid, skip
[  600.732759][ T5870] usb 2-1: descriptor type invalid, skip
[  600.763837][ T5870] usb 2-1: descriptor type invalid, skip
[  600.777202][ T5870] usb 2-1: descriptor type invalid, skip
[  600.782943][ T5870] usb 2-1: descriptor type invalid, skip
[  600.817294][ T5870] usb 2-1: descriptor type invalid, skip
[  600.823059][ T5870] usb 2-1: descriptor type invalid, skip
[  600.845886][ T5870] usb 2-1: descriptor type invalid, skip
[  600.871173][ T5870] usb 2-1: descriptor type invalid, skip
[  600.904824][ T5870] usb 2-1: descriptor type invalid, skip
[  600.960311][ T5870] usb 2-1: descriptor type invalid, skip
[  601.127432][ T5870] usb 2-1: descriptor type invalid, skip
[  601.152387][ T5870] usb 2-1: descriptor type invalid, skip
[  601.235702][ T5870] usb 2-1: descriptor type invalid, skip
[  601.250024][ T5870] usb 2-1: descriptor type invalid, skip
[  601.256330][ T5870] usb 2-1: descriptor type invalid, skip
[  601.262219][ T5870] usb 2-1: descriptor type invalid, skip
[  601.284985][ T5870] usb 2-1: descriptor type invalid, skip
[  601.308759][ T5870] usb 2-1: descriptor type invalid, skip
[  601.319394][ T5870] usb 2-1: descriptor type invalid, skip
[  601.330407][ T5870] usb 2-1: descriptor type invalid, skip
[  601.341942][ T5870] usb 2-1: descriptor type invalid, skip
[  601.365133][ T5870] usb 2-1: descriptor type invalid, skip
[  601.377718][ T5870] usb 2-1: descriptor type invalid, skip
[  601.409862][ T5870] usb 2-1: descriptor type invalid, skip
[  601.427768][ T5870] usb 2-1: descriptor type invalid, skip
[  601.444787][ T5870] usb 2-1: descriptor type invalid, skip
[  601.475608][ T5870] usb 2-1: descriptor type invalid, skip
[  601.492970][ T5870] usb 2-1: descriptor type invalid, skip
[  601.519625][ T5870] usb 2-1: descriptor type invalid, skip
[  601.552525][ T5870] usb 2-1: descriptor type invalid, skip
[  601.600839][ T5870] usb 2-1: descriptor type invalid, skip
[  601.617593][ T5870] usb 2-1: descriptor type invalid, skip
[  601.629817][ T5870] usb 2-1: descriptor type invalid, skip
[  601.635773][ T5870] usb 2-1: descriptor type invalid, skip
[  601.641678][ T5870] usb 2-1: descriptor type invalid, skip
[  601.722094][ T5870] usb 2-1: descriptor type invalid, skip
[  601.735767][ T5870] usb 2-1: descriptor type invalid, skip
[  601.745673][ T5870] usb 2-1: descriptor type invalid, skip
[  601.760715][ T5870] usb 2-1: descriptor type invalid, skip
[  601.788420][ T5870] usb 2-1: descriptor type invalid, skip
[  601.813731][ T5870] usb 2-1: descriptor type invalid, skip
[  601.832377][ T5870] usb 2-1: descriptor type invalid, skip
[  601.849923][ T5870] usb 2-1: descriptor type invalid, skip
[  601.880334][ T5870] usb 2-1: descriptor type invalid, skip
[  601.902364][ T5870] usb 2-1: descriptor type invalid, skip
[  601.918216][ T5870] usb 2-1: descriptor type invalid, skip
[  601.932705][ T5870] usb 2-1: descriptor type invalid, skip
[  601.950839][ T5870] usb 2-1: descriptor type invalid, skip
[  601.965965][ T5870] usb 2-1: descriptor type invalid, skip
[  601.989067][ T5870] usb 2-1: descriptor type invalid, skip
[  602.015056][ T5870] usb 2-1: descriptor type invalid, skip
[  602.025153][ T5870] usb 2-1: descriptor type invalid, skip
[  602.038815][ T5870] usb 2-1: descriptor type invalid, skip
[  602.044469][ T5870] usb 2-1: descriptor type invalid, skip
[  602.063198][ T5870] usb 2-1: descriptor type invalid, skip
[  602.073295][ T5870] usb 2-1: descriptor type invalid, skip
[  602.093462][ T5870] usb 2-1: descriptor type invalid, skip
[  602.103746][ T5870] usb 2-1: descriptor type invalid, skip
[  602.123948][ T5870] usb 2-1: descriptor type invalid, skip
[  602.131634][ T5870] usb 2-1: descriptor type invalid, skip
[  602.144000][ T5870] usb 2-1: descriptor type invalid, skip
[  602.155811][ T5870] usb 2-1: descriptor type invalid, skip
[  602.166755][ T5870] usb 2-1: descriptor type invalid, skip
[  602.181955][ T5870] usb 2-1: descriptor type invalid, skip
[  602.188023][ T5870] usb 2-1: descriptor type invalid, skip
[  602.197975][ T5870] usb 2-1: descriptor type invalid, skip
[  602.212382][ T5870] usb 2-1: descriptor type invalid, skip
[  602.273174][ T5870] usb 2-1: descriptor type invalid, skip
[  602.288526][ T5870] usb 2-1: descriptor type invalid, skip
[  602.314548][ T5870] usb 2-1: descriptor type invalid, skip
[  602.349717][ T5870] usb 2-1: descriptor type invalid, skip
[  602.355369][ T5870] usb 2-1: descriptor type invalid, skip
[  602.386217][ T5870] usb 2-1: descriptor type invalid, skip
[  602.392548][ T5870] usb 2-1: descriptor type invalid, skip
[  602.405243][ T5870] usb 2-1: descriptor type invalid, skip
[  602.420110][ T5870] usb 2-1: descriptor type invalid, skip
[  602.434273][ T5870] usb 2-1: descriptor type invalid, skip
[  602.443705][ T5870] usb 2-1: descriptor type invalid, skip
[  602.468833][ T5870] usb 2-1: descriptor type invalid, skip
[  602.483659][ T5870] usb 2-1: descriptor type invalid, skip
[  602.491182][ T5870] usb 2-1: descriptor type invalid, skip
[  602.497043][ T5870] usb 2-1: descriptor type invalid, skip
[  602.503602][ T5870] usb 2-1: descriptor type invalid, skip
[  602.509610][ T5870] usb 2-1: descriptor type invalid, skip
[  602.515693][ T5870] usb 2-1: descriptor type invalid, skip
[  602.542080][ T5870] usb 2-1: descriptor type invalid, skip
[  602.574042][   T29] audit: type=1400 audit(1771827821.009:958): avc:  denied  { connect } for  pid=13404 comm="syz.1.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  602.594708][ T5870] usb 2-1: descriptor type invalid, skip
[  602.674079][ T5870] usb 2-1: descriptor type invalid, skip
[  602.698761][ T5870] usb 2-1: descriptor type invalid, skip
[  602.715704][ T5870] usb 2-1: descriptor type invalid, skip
[  602.738135][ T5870] usb 2-1: descriptor type invalid, skip
[  602.745952][ T5870] usb 2-1: descriptor type invalid, skip
[  602.850480][ T5870] usb 2-1: descriptor type invalid, skip
[  602.869801][ T5870] usb 2-1: descriptor type invalid, skip
[  602.876153][ T5870] usb 2-1: descriptor type invalid, skip
[  602.881954][ T5870] usb 2-1: descriptor type invalid, skip
[  602.892969][ T5870] usb 2-1: descriptor type invalid, skip
[  602.902716][ T5870] usb 2-1: descriptor type invalid, skip
[  602.912836][ T5870] usb 2-1: descriptor type invalid, skip
[  602.929425][ T5870] usb 2-1: descriptor type invalid, skip
[  602.939058][ T5870] usb 2-1: descriptor type invalid, skip
[  602.961557][ T5870] usb 2-1: descriptor type invalid, skip
[  602.967984][ T5870] usb 2-1: descriptor type invalid, skip
[  603.012595][ T5870] usb 2-1: descriptor type invalid, skip
[  603.022734][ T5870] usb 2-1: descriptor type invalid, skip
[  603.032906][ T5870] usb 2-1: descriptor type invalid, skip
[  603.043034][ T5870] usb 2-1: descriptor type invalid, skip
[  603.050663][ T5870] usb 2-1: descriptor type invalid, skip
[  603.059120][ T5870] usb 2-1: descriptor type invalid, skip
[  603.070162][ T5870] usb 2-1: descriptor type invalid, skip
[  603.091953][ T5870] usb 2-1: descriptor type invalid, skip
[  603.107424][ T5870] usb 2-1: unable to read config index 0 descriptor/start: -71
[  603.123570][ T5870] usb 2-1: can't read configurations, error -71
[  603.235848][ T5884] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  603.399817][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.412900][ T5884] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  603.426633][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  603.436295][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.445915][ T5884] usb 3-1: Product: syz
[  603.455105][ T5884] usb 3-1: Manufacturer: syz
[  603.466586][ T5884] usb 3-1: SerialNumber: syz
[  603.496542][T11030] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  603.551504][ T5884] cdc_mbim 3-1:1.0: skipping garbage
[  603.675791][T11030] usb 5-1: device descriptor read/64, error -71
[  603.751718][T13412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  603.976199][T11030] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  604.125705][T11030] usb 5-1: device descriptor read/64, error -71
[  604.540471][T11030] usb usb5-port1: attempt power cycle
[  604.735213][T13412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  604.744560][ T5884] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  604.794982][ T5884] wwan wwan0: port wwan0mbim0 attached
[  604.872735][ T5884] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 5e:0b:cf:50:ab:d7
[  604.946605][T11030] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  604.975282][T11030] usb 5-1: device descriptor read/8, error -71
[  605.028382][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.035194][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.041526][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.048213][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.055917][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.062621][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.068971][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.075659][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.081992][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.088648][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.095074][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.101750][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.108110][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.114778][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.121999][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.128679][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.135021][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.141692][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.148006][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  605.154669][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  605.976549][   T29] audit: type=1400 audit(1771827823.489:959): avc:  denied  { read write } for  pid=13411 comm="syz.2.2059" name="cdc-wdm0" dev="devtmpfs" ino=3295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  605.991346][T13430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.010264][T13430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.246856][T11030] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  606.432726][   T10] usb 3-1: USB disconnect, device number 28
[  606.448258][   T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  606.460432][   T29] audit: type=1400 audit(1771827823.489:960): avc:  denied  { open } for  pid=13411 comm="syz.2.2059" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  606.491387][T11030] usb 5-1: device descriptor read/8, error -71
[  606.558329][   T29] audit: type=1400 audit(1771827824.399:961): avc:  denied  { read write } for  pid=13411 comm="syz.2.2059" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  606.618531][   T10] wwan wwan0: port wwan0mbim0 disconnected
[  606.656019][   T29] audit: type=1400 audit(1771827824.399:962): avc:  denied  { open } for  pid=13411 comm="syz.2.2059" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  606.656697][T11030] usb usb5-port1: unable to enumerate USB device
[  606.835766][   T29] audit: type=1400 audit(1771827824.399:963): avc:  denied  { ioctl } for  pid=13411 comm="syz.2.2059" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  606.906603][T13447] vivid-004: =================  START STATUS  =================
[  606.914921][T13447] vivid-004: RDS Tx I/O Mode: Controls
[  608.024926][T13447] vivid-004: RDS Program ID: 32904
[  608.056442][T13447] vivid-004: RDS Program Type: 3
[  608.482775][T13474] lo speed is unknown, defaulting to 1000
[  608.669520][T13447] vivid-004: RDS PS Name: VIVID-TX
[  608.708498][T13447] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[  608.782436][   T29] audit: type=1400 audit(1771827827.219:964): avc:  denied  { read write } for  pid=13463 comm="syz.1.2074" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  608.874949][   T29] audit: type=1400 audit(1771827827.219:965): avc:  denied  { open } for  pid=13463 comm="syz.1.2074" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  608.945860][T13447] vivid-004: RDS Stereo: true
[  608.950713][T13447] vivid-004: RDS Artificial Head: false
[  609.015795][T13447] vivid-004: RDS Compressed: false
[  609.042890][T13447] vivid-004: RDS Dynamic PTY: false
[  609.051672][   T29] audit: type=1400 audit(1771827827.219:966): avc:  denied  { ioctl } for  pid=13463 comm="syz.1.2074" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  609.105719][T13447] vivid-004: RDS Traffic Announcement: false
[  609.136794][T13447] vivid-004: RDS Traffic Program: true
[  609.147873][T13447] vivid-004: RDS Music: true
[  609.152611][T13447] vivid-004: ==================  END STATUS  ==================
[  609.537500][   T55] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  609.695753][   T55] usb 2-1: device descriptor read/64, error -71
[  610.028335][   T55] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  610.425728][   T55] usb 2-1: device descriptor read/64, error -71
[  610.556892][   T55] usb usb2-port1: attempt power cycle
[  611.085889][T12380] iguanair 4-1:0.255: failed to get version
[  611.122553][T12380] iguanair 4-1:0.255: probe with driver iguanair failed with error -110
[  611.179956][   T55] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  611.199314][T12380] usb 4-1: USB disconnect, device number 22
[  611.304297][T13531] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  611.312634][T13531] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  611.546182][   T55] usb 2-1: device descriptor read/8, error -71
[  611.821497][T13538] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2084'.
[  611.835696][   T55] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  611.906089][   T55] usb 2-1: device descriptor read/8, error -71
[  612.005615][   T29] audit: type=1400 audit(1771827830.459:967): avc:  denied  { append } for  pid=13543 comm="syz.4.2087" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  612.063309][   T55] usb usb2-port1: unable to enumerate USB device
[  612.136265][T13545] rdma_op ffff8880755971f0 conn xmit_rdma 0000000000000000
[  612.581967][T13557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  613.468553][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'.
[  613.805213][T13573] lo speed is unknown, defaulting to 1000
[  614.009280][   T29] audit: type=1400 audit(1771827832.459:968): avc:  denied  { ioctl } for  pid=13583 comm="syz.1.2094" path="socket:[40066]" dev="sockfs" ino=40066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  614.313864][T13595] FAULT_INJECTION: forcing a failure.
[  614.313864][T13595] name failslab, interval 1, probability 0, space 0, times 0
[  614.329652][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.2.2098 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  614.329678][T13595] Tainted: [L]=SOFTLOCKUP
[  614.329683][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  614.329693][T13595] Call Trace:
[  614.329699][T13595]  <TASK>
[  614.329705][T13595]  dump_stack_lvl+0x100/0x190
[  614.329736][T13595]  should_fail_ex.cold+0x5/0xa
[  614.329758][T13595]  ? tomoyo_realpath_from_path+0xb6/0x690
[  614.329784][T13595]  should_failslab+0xc2/0x120
[  614.329810][T13595]  __kmalloc_noprof+0xe0/0x850
[  614.329836][T13595]  tomoyo_realpath_from_path+0xb6/0x690
[  614.329861][T13595]  tomoyo_path_number_perm+0x23c/0x580
[  614.329880][T13595]  ? tomoyo_path_number_perm+0x22e/0x580
[  614.329898][T13595]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  614.329929][T13595]  ? find_held_lock+0x2b/0x80
[  614.329942][T13595]  ? __fget_files+0x215/0x3d0
[  614.329952][T13595]  ? hook_file_ioctl_common+0x146/0x410
[  614.329969][T13595]  ? __fget_files+0x21f/0x3d0
[  614.329981][T13595]  security_file_ioctl+0xd3/0x230
[  614.329993][T13595]  __x64_sys_ioctl+0xb7/0x210
[  614.330009][T13595]  do_syscall_64+0x106/0xf80
[  614.330019][T13595]  ? clear_bhb_loop+0x40/0x90
[  614.330032][T13595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.330043][T13595] RIP: 0033:0x7fee14f9c629
[  614.330052][T13595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.330062][T13595] RSP: 002b:00007fee15e7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  614.330073][T13595] RAX: ffffffffffffffda RBX: 00007fee15215fa0 RCX: 00007fee14f9c629
[  614.330079][T13595] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003
[  614.330085][T13595] RBP: 00007fee15e7b090 R08: 0000000000000000 R09: 0000000000000000
[  614.330091][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.330097][T13595] R13: 00007fee15216038 R14: 00007fee15215fa0 R15: 00007ffc6d681068
[  614.330112][T13595]  </TASK>
[  614.331080][T13595] ERROR: Out of memory at tomoyo_realpath_from_path.
[  614.615709][T11030] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  614.790959][T11030] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=5f.b1
[  614.868601][T11030] usb 2-1: New USB device strings: Mfr=137, Product=72, SerialNumber=3
[  614.885005][T11030] usb 2-1: Product: syz
[  614.905202][T11030] usb 2-1: Manufacturer: syz
[  614.915784][T11030] usb 2-1: SerialNumber: syz
[  614.981412][T11030] usb 2-1: config 0 descriptor??
[  615.002669][T11030] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  615.043372][T11030] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  615.138926][ T5884] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  615.243369][T11030] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  615.305763][ T5884] usb 5-1: device descriptor read/64, error -71
[  615.379916][T11030] usb 2-1: USB disconnect, device number 51
[  615.555716][ T5884] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  615.715744][ T5884] usb 5-1: device descriptor read/64, error -71
[  616.203936][ T5884] usb usb5-port1: attempt power cycle
[  616.555763][ T5884] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  617.066126][ T5884] usb 5-1: device descriptor read/8, error -71
[  617.306153][ T5884] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  617.336349][ T5884] usb 5-1: device descriptor read/8, error -71
[  617.414733][T12380] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  617.541543][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'.
[  617.614805][T13649] lo speed is unknown, defaulting to 1000
[  617.830329][ T5884] usb usb5-port1: unable to enumerate USB device
[  618.088232][T12380] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  618.113463][T12380] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  618.185158][T12380] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  618.207657][T12380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  618.217316][T12380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  618.225376][T12380] usb 1-1: SerialNumber: syz
[  618.325844][T12380] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  618.440619][T13662] xt_hashlimit: size too large, truncated to 1048576
[  618.499653][T12380] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  618.547546][T12380] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  618.684480][T12380] usb 1-1: USB disconnect, device number 48
[  619.123049][T13689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2118'.
[  619.187886][T13693] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  619.606607][T12380] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  619.802063][T12380] usb 2-1: Using ep0 maxpacket: 16
[  619.812325][T12380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.824525][T12380] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  619.835867][T12380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.845679][T13689] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  619.853411][T13689] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  619.865869][T11030] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  619.866865][T12380] usb 2-1: config 0 descriptor??
[  620.037539][T11030] usb 1-1: no configurations
[  620.042178][T11030] usb 1-1: can't read configurations, error -22
[  620.205762][T11030] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  620.290997][T12380] kye 0003:0458:5016.000A: control desc unexpectedly large
[  620.325321][T12380] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000A/input/input18
[  620.367848][T11030] usb 1-1: no configurations
[  620.384824][T11030] usb 1-1: can't read configurations, error -22
[  620.400761][T11030] usb usb1-port1: attempt power cycle
[  620.464818][T12380] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000A/input/input19
[  620.480015][T13706] CUSE: unknown device info ""
[  620.484993][T13706] CUSE: unknown device info ""
[  620.489980][T13706] CUSE: unknown device info ""
[  620.494822][T13706] CUSE: unknown device info ""
[  620.499683][T13706] CUSE: unknown device info "�"
[  620.504632][T13706] CUSE: unknown device info ""
[  620.509511][T13706] CUSE: unknown device info ""
[  620.514408][T13706] CUSE: unknown device info "�"
[  620.519355][T13706] CUSE: DEVNAME unspecified
[  620.534294][T13706] xt_hashlimit: size too large, truncated to 1048576
[  620.607620][T12380] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0
[  620.673932][T12380] usb 2-1: USB disconnect, device number 52
[  620.775060][T13710] fido_id[13710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  620.923701][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2126'.
[  620.932937][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2126'.
[  620.947581][T11030] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  620.967385][T11030] usb 1-1: no configurations
[  620.976627][T11030] usb 1-1: can't read configurations, error -22
[  621.125977][T11030] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  621.156616][T11030] usb 1-1: no configurations
[  621.168501][T11030] usb 1-1: can't read configurations, error -22
[  621.183433][T11030] usb usb1-port1: unable to enumerate USB device
[  622.583672][ T6271] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  622.714999][   T29] audit: type=1400 audit(1771827841.169:969): avc:  denied  { append } for  pid=13737 comm="syz.0.2135" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  622.752665][ T6271] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  622.774420][ T6271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.804122][ T6271] usb 3-1: Product: syz
[  622.804140][   T29] audit: type=1400 audit(1771827841.229:970): avc:  denied  { lock } for  pid=13739 comm="syz.1.2136" path="socket:[41115]" dev="sockfs" ino=41115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  622.815741][ T6271] usb 3-1: Manufacturer: syz
[  623.195980][ T6271] usb 3-1: SerialNumber: syz
[  623.207773][ T6271] usb 3-1: config 0 descriptor??
[  623.270590][T13748] overlayfs: failed to clone upperpath
[  623.751317][T13760] fuse: Bad value for 'user_id'
[  623.756244][T13760] fuse: Bad value for 'user_id'
[  624.504453][T13768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2144'.
[  625.077219][T11030] usb 3-1: USB disconnect, device number 29
[  625.917372][T11030] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  625.918676][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2149'.
[  626.092831][T13785] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  627.155693][T11030] usb 3-1: Using ep0 maxpacket: 16
[  627.162405][T11030] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  627.172087][T11030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.203957][T11030] usb 3-1: config 0 descriptor??
[  627.667400][T13793] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  628.813790][   T29] audit: type=1400 audit(1771827847.269:971): avc:  denied  { read } for  pid=13808 comm="syz.4.2158" path="socket:[40662]" dev="sockfs" ino=40662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  628.846076][T12380] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  628.865203][T13811] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2157'.
[  628.886420][T13811] bond0 (unregistering): left promiscuous mode
[  628.905834][T13811] bond_slave_0: left promiscuous mode
[  628.927615][T13811] bond_slave_1: left promiscuous mode
[  628.949914][T13811] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  628.981550][T13811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  629.034004][T12380] usb 2-1: Using ep0 maxpacket: 16
[  629.041473][T13811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  629.114926][T11030] usbhid 3-1:0.0: can't add hid device: -71
[  629.118901][T12380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.131917][T11030] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  629.143598][T13811] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  629.160294][T11030] usb 3-1: USB disconnect, device number 30
[  629.172255][T12380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.189976][T13811] bond0 (unregistering): Released all slaves
[  629.202599][T12380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  629.231447][T12380] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  629.245418][T12380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.285895][   T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  629.288292][T12380] usb 2-1: config 0 descriptor??
[  629.447083][   T10] usb 1-1: no configurations
[  629.460620][   T10] usb 1-1: can't read configurations, error -22
[  629.612628][   T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  629.701670][   T55] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  630.019220][   T10] usb 1-1: no configurations
[  630.031683][   T10] usb 1-1: can't read configurations, error -22
[  630.033992][T12380] microsoft 0003:045E:07DA.000B: unknown main item tag 0x1
[  630.038185][   T55] usb 5-1: Using ep0 maxpacket: 8
[  630.060079][   T10] usb usb1-port1: attempt power cycle
[  630.068023][T12380] microsoft 0003:045E:07DA.000B: unknown main item tag 0x7
[  630.069309][   T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  630.099981][T12380] microsoft 0003:045E:07DA.000B: unknown main item tag 0x7
[  630.099986][   T55] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  630.100009][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.248084][T12380] microsoft 0003:045E:07DA.000B: item fetching failed at offset 32/34
[  630.260306][T12380] microsoft 0003:045E:07DA.000B: parse failed
[  630.267059][T12380] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22
[  630.976540][   T55] usb 5-1: config 0 descriptor??
[  631.011811][   T10] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  631.039929][T12380] usb 2-1: USB disconnect, device number 53
[  631.068292][   T10] usb 1-1: no configurations
[  631.072896][   T10] usb 1-1: can't read configurations, error -22
[  631.241914][   T10] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  631.289190][   T10] usb 1-1: no configurations
[  631.293852][   T10] usb 1-1: can't read configurations, error -22
[  631.307150][   T10] usb usb1-port1: unable to enumerate USB device
[  631.461838][   T55] stadia 0003:18D1:9400.000C: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.4-1/input0
[  631.485355][   T55] stadia 0003:18D1:9400.000C: no inputs found
[  631.945400][   T55] stadia 0003:18D1:9400.000C: force feedback init failed
[  632.010348][   T55] usb 5-1: USB disconnect, device number 44
[  633.124544][T13863] overlay: Unknown parameter 'uid>00000000000000000000'
[  633.292130][T13874] CUSE: unknown device info ""
[  633.297118][T13874] CUSE: unknown device info ""
[  633.302017][T13874] CUSE: unknown device info ""
[  633.308007][T13874] CUSE: unknown device info ""
[  633.313205][T13874] CUSE: unknown device info "�"
[  633.319832][T13874] CUSE: unknown device info ""
[  633.324723][T13874] CUSE: unknown device info ""
[  633.329795][T13874] CUSE: unknown device info "�"
[  633.334760][T13874] CUSE: DEVNAME unspecified
[  633.637536][T13873] xt_hashlimit: size too large, truncated to 1048576
[  635.409071][T13899] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25370 sclass=netlink_xfrm_socket pid=13899 comm=syz.4.2185
[  635.497099][   T29] audit: type=1400 audit(1771827853.519:972): avc:  denied  { create } for  pid=13892 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  635.517471][T13903] FAULT_INJECTION: forcing a failure.
[  635.517471][T13903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  635.602688][T13903] CPU: 1 UID: 0 PID: 13903 Comm: syz.1.2186 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.602718][T13903] Tainted: [L]=SOFTLOCKUP
[  635.602724][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  635.602734][T13903] Call Trace:
[  635.602741][T13903]  <TASK>
[  635.602747][T13903]  dump_stack_lvl+0x100/0x190
[  635.602779][T13903]  should_fail_ex.cold+0x5/0xa
[  635.602802][T13903]  _copy_to_user+0x32/0xd0
[  635.602827][T13903]  simple_read_from_buffer+0xcb/0x170
[  635.602857][T13903]  proc_fail_nth_read+0x1af/0x230
[  635.602881][T13903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  635.602906][T13903]  ? rw_verify_area+0xce/0x6d0
[  635.602928][T13903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  635.602951][T13903]  vfs_read+0x1e4/0xb30
[  635.602979][T13903]  ? __pfx_vfs_read+0x10/0x10
[  635.603003][T13903]  ? __fget_files+0x215/0x3d0
[  635.603026][T13903]  ? __fget_files+0x21f/0x3d0
[  635.603050][T13903]  ksys_read+0x12a/0x250
[  635.603075][T13903]  ? __pfx_ksys_read+0x10/0x10
[  635.603107][T13903]  do_syscall_64+0x106/0xf80
[  635.603125][T13903]  ? clear_bhb_loop+0x40/0x90
[  635.603147][T13903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.603165][T13903] RIP: 0033:0x7f2eaa75cece
[  635.603180][T13903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  635.603196][T13903] RSP: 002b:00007f2eab5b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  635.603214][T13903] RAX: ffffffffffffffda RBX: 00007f2eab5b26c0 RCX: 00007f2eaa75cece
[  635.603225][T13903] RDX: 000000000000000f RSI: 00007f2eab5b20a0 RDI: 0000000000000005
[  635.603235][T13903] RBP: 00007f2eab5b2090 R08: 0000000000000000 R09: 0000000000000000
[  635.603244][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.603254][T13903] R13: 00007f2eaaa16038 R14: 00007f2eaaa15fa0 R15: 00007ffeae758e68
[  635.603279][T13903]  </TASK>
[  635.625754][   T29] audit: type=1400 audit(1771827853.979:973): avc:  denied  { read write } for  pid=13902 comm="syz.1.2186" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  635.939946][   T29] audit: type=1400 audit(1771827853.979:974): avc:  denied  { open } for  pid=13902 comm="syz.1.2186" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  637.433420][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'.
[  637.504869][T13933] lo speed is unknown, defaulting to 1000
[  638.112188][   T29] audit: type=1400 audit(1771827856.569:975): avc:  denied  { bind } for  pid=13940 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  638.204293][   T29] audit: type=1400 audit(1771827856.569:976): avc:  denied  { setopt } for  pid=13940 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  638.282464][   T29] audit: type=1400 audit(1771827856.569:977): avc:  denied  { write } for  pid=13940 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  639.360026][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2202'.
[  639.625262][T13972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2206'.
[  639.731314][T13974] team0: Port device team_slave_0 removed
[  639.757291][T13974] team0: Port device team_slave_1 removed
[  639.777975][T13974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.800966][T13974] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.823763][T13974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  640.126437][T12380] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  640.275789][T12380] usb 5-1: device descriptor read/64, error -71
[  640.515727][T12380] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  640.708803][T12380] usb 5-1: device descriptor read/64, error -71
[  640.943165][T12380] usb usb5-port1: attempt power cycle
[  641.785939][T12380] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  641.794668][T14008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2211'.
[  641.806302][T12380] usb 5-1: device descriptor read/8, error -71
[  642.215765][ T5870] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  642.425808][T12380] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  642.449770][T12380] usb 5-1: device descriptor read/8, error -71
[  642.540011][ T5870] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[  642.548778][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.566021][T12380] usb usb5-port1: unable to enumerate USB device
[  642.573157][ T5870] usb 3-1: config 0 has no interfaces?
[  642.585835][ T5870] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  642.665775][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.681995][ T5870] usb 3-1: config 0 descriptor??
[  642.761593][T14019] fuse: Bad value for 'fd'
[  642.903417][T14008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  643.419508][T14031] xt_TCPMSS: Only works on TCP SYN packets
[  644.556577][   T29] audit: type=1326 audit(1771827863.009:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  644.790151][   T10] usb 3-1: USB disconnect, device number 31
[  644.856275][   T29] audit: type=1326 audit(1771827863.009:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  644.895723][   T29] audit: type=1326 audit(1771827863.019:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  644.967277][   T29] audit: type=1326 audit(1771827863.019:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  645.034484][   T29] audit: type=1326 audit(1771827863.019:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  645.085906][   T29] audit: type=1326 audit(1771827863.019:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  645.135693][   T29] audit: type=1326 audit(1771827863.019:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  645.298354][   T29] audit: type=1326 audit(1771827863.019:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  645.318810][T14047] xt_TCPMSS: Only works on TCP SYN packets
[  645.332486][T14047] sit2: entered allmulticast mode
[  645.723104][   T29] audit: type=1326 audit(1771827863.019:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  645.756165][   T29] audit: type=1326 audit(1771827863.019:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6979c629 code=0x7ffc0000
[  648.638513][T11871] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  648.965495][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'.
[  649.776239][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  649.776254][   T29] audit: type=1400 audit(1771827868.239:990): avc:  denied  { read } for  pid=14092 comm="syz.0.2235" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  649.906488][   T29] audit: type=1400 audit(1771827868.239:991): avc:  denied  { open } for  pid=14092 comm="syz.0.2235" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  649.975771][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'.
[  649.984719][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2236'.
[  650.015074][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'.
[  650.035784][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2236'.
[  650.437867][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'.
[  650.512009][T14111] lo speed is unknown, defaulting to 1000
[  650.716152][T14093] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  650.800125][T14093] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  650.901153][T14093] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  650.953420][T14093] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  651.325557][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2241'.
[  651.381063][T14093] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  651.395845][T14093] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  651.458935][T14093] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  651.493230][T14093] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  651.533271][T14093] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  651.564696][T14093] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  651.898422][T14140] lo speed is unknown, defaulting to 1000
[  652.087213][T11915] Bluetooth: hci0: command 0x0406 tx timeout
[  652.291689][   T29] audit: type=1400 audit(1771827870.749:992): avc:  denied  { setopt } for  pid=14131 comm="syz.4.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  652.936418][T11915] Bluetooth: hci1: command 0x0406 tx timeout
[  653.053707][T14152] lo speed is unknown, defaulting to 1000
[  653.425746][T11915] Bluetooth: hci2: command 0x0406 tx timeout
[  653.488801][T11915] Bluetooth: hci3: command 0x0406 tx timeout
[  653.568966][T11915] Bluetooth: hci4: command 0x0406 tx timeout
[  653.730310][   T29] audit: type=1400 audit(1771827872.189:993): avc:  denied  { map } for  pid=14164 comm="syz.0.2248" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  653.778465][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  653.787464][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  653.797543][   T29] audit: type=1400 audit(1771827872.189:994): avc:  denied  { execute } for  pid=14164 comm="syz.0.2248" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  653.822347][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  653.915276][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  653.993105][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  654.014219][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  654.043121][T14169] netlink: 'syz.2.2249': attribute type 29 has an invalid length.
[  654.129941][T11915] Bluetooth: hci0: command 0x0406 tx timeout
[  654.264591][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2252'.
[  654.274369][T14178] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2251'.
[  654.725670][   T55] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  654.833864][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'.
[  654.908611][T14191] lo speed is unknown, defaulting to 1000
[  655.210489][T11915] Bluetooth: hci1: command 0x0406 tx timeout
[  655.245689][   T55] usb 1-1: Using ep0 maxpacket: 16
[  655.261384][   T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  655.277988][   T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  655.298175][   T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  655.308965][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.317001][   T55] usb 1-1: Product: syz
[  655.321164][   T55] usb 1-1: Manufacturer: syz
[  655.329530][   T55] usb 1-1: SerialNumber: syz
[  655.415412][T14204] overlayfs: unescaped trailing colons in lowerdir mount option.
[  655.435844][T14186] CUSE: unknown device info ""
[  655.440757][T14186] CUSE: unknown device info ""
[  655.445599][T14186] CUSE: unknown device info ""
[  655.450622][T14186] CUSE: unknown device info ""
[  655.455454][T14186] CUSE: unknown device info "�"
[  655.460394][T14186] CUSE: unknown device info ""
[  655.466764][T14186] CUSE: unknown device info ""
[  655.471608][T14186] CUSE: unknown device info "�"
[  655.476529][T14186] CUSE: DEVNAME unspecified
[  655.488533][T11915] Bluetooth: hci2: command 0x0406 tx timeout
[  655.968761][T11915] Bluetooth: hci3: command 0x0406 tx timeout
[  655.968761][T11871] Bluetooth: hci4: command 0x0406 tx timeout
[  655.987346][   T29] audit: type=1400 audit(1771827874.039:995): avc:  denied  { write } for  pid=14203 comm="syz.2.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  656.011907][   T55] usb 1-1: 0:2 : does not exist
[  656.020537][   T55] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  656.028921][T14186] xt_hashlimit: size too large, truncated to 1048576
[  656.622529][   T55] usb 1-1: USB disconnect, device number 57
[  656.662503][T13900] udevd[13900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  656.682753][T14208] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  656.693829][T14208] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  656.745710][T14196] lo speed is unknown, defaulting to 1000
[  656.836005][   T29] audit: type=1400 audit(1771827875.269:996): avc:  denied  { mount } for  pid=14215 comm="syz.1.2257" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  658.372427][T14251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2267'.
[  658.471625][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'.
[  658.550109][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'.
[  658.969752][T14261] XFS (nbd2): SB validate failed with error -5.
[  659.109542][T14253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14253 comm=syz.2.2264
[  659.502393][T14280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'.
[  660.007532][T12380] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  660.168118][T12380] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  660.205690][T12380] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  660.234746][T12380] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23
[  660.347004][T12380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.355038][T12380] usb 5-1: Product: syz
[  660.405691][T12380] usb 5-1: Manufacturer: syz
[  660.410341][T12380] usb 5-1: SerialNumber: syz
[  660.452943][T12380] usb 5-1: config 0 descriptor??
[  660.672301][ T5870] usb 5-1: USB disconnect, device number 49
[  660.839005][T14290] CUSE: unknown device info ""
[  660.843926][T14290] CUSE: unknown device info ""
[  660.848818][T14290] CUSE: unknown device info ""
[  660.853677][T14290] CUSE: unknown device info ""
[  660.858867][T14290] CUSE: unknown device info "�"
[  660.863831][T14290] CUSE: unknown device info ""
[  660.868779][T14290] CUSE: unknown device info ""
[  660.873653][T14290] CUSE: unknown device info "�"
[  660.878649][T14290] CUSE: DEVNAME unspecified
[  660.953890][T14289] xt_hashlimit: size too large, truncated to 1048576
[  661.523099][T14301] serio: Serial port ptm0
[  662.077186][   T29] audit: type=1400 audit(1771827880.539:997): avc:  denied  { connect } for  pid=14311 comm="syz.2.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  663.091666][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2283'.
[  663.913649][T14339] CUSE: unknown device info ""
[  663.928831][T14339] CUSE: unknown device info ""
[  663.961108][T14339] CUSE: unknown device info ""
[  663.967611][T14339] CUSE: unknown device info ""
[  663.972823][T14339] CUSE: unknown device info "�"
[  663.978662][T14339] CUSE: unknown device info ""
[  663.983973][T14339] CUSE: unknown device info ""
[  663.988872][T14339] CUSE: unknown device info "�"
[  663.994029][T14339] CUSE: DEVNAME unspecified
[  664.105985][ T5884] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  664.260850][T14347] lo speed is unknown, defaulting to 1000
[  664.340849][T14337] xt_hashlimit: size too large, truncated to 1048576
[  664.457522][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.477442][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.497784][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  664.511995][ T5884] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  664.615061][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.701475][ T5884] usb 3-1: config 0 descriptor??
[  665.346170][ T5884] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  666.052067][T14373] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  666.110871][T14375] syzkaller1: entered promiscuous mode
[  666.116501][T14375] syzkaller1: entered allmulticast mode
[  666.177589][   T29] audit: type=1400 audit(1771827884.569:998): avc:  denied  { create } for  pid=14369 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  666.277789][T12380] usb 3-1: USB disconnect, device number 32
[  667.095775][   T55] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  667.187098][T14391] CUSE: unknown device info ""
[  667.191962][T14391] CUSE: unknown device info ""
[  667.196831][T14391] CUSE: unknown device info ""
[  667.201656][T14391] CUSE: unknown device info ""
[  667.206543][T14391] CUSE: unknown device info "�"
[  667.211449][T14391] CUSE: unknown device info ""
[  667.216289][T14391] CUSE: unknown device info ""
[  667.221104][T14391] CUSE: unknown device info "�"
[  667.226017][T14391] CUSE: DEVNAME unspecified
[  667.236697][T14391] xt_hashlimit: size too large, truncated to 1048576
[  667.275093][   T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.288116][   T55] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  667.304583][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.334112][   T55] usb 1-1: config 0 descriptor??
[  667.346788][   T55] pwc: Askey VC010 type 2 USB webcam detected.
[  667.596227][   T55] pwc: send_video_command error -71
[  667.601458][   T55] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  667.610389][   T55] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  667.628807][   T29] audit: type=1400 audit(1771827886.089:999): avc:  denied  { read } for  pid=14400 comm="syz.2.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  667.630933][   T55] usb 1-1: USB disconnect, device number 58
[  668.047046][   T55] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  668.205819][   T55] usb 1-1: device descriptor read/64, error -71
[  668.480185][   T55] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  668.538392][T14422] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2309'.
[  668.805016][T14415] [U] 
[  668.907518][   T29] audit: type=1400 audit(1771827887.369:1000): avc:  denied  { create } for  pid=14423 comm="syz.2.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  668.936237][T14424] lo speed is unknown, defaulting to 1000
[  669.035776][   T55] usb 1-1: device descriptor read/64, error -71
[  669.124808][   T29] audit: type=1326 audit(1771827887.569:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.2.2310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee14f9c629 code=0x0
[  669.155839][   T55] usb usb1-port1: attempt power cycle
[  669.553104][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'.
[  669.578561][T14437] lo speed is unknown, defaulting to 1000
[  669.885770][   T55] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  670.127973][   T55] usb 1-1: device not accepting address 61, error -71
[  670.261955][T14446] CUSE: unknown device info ""
[  670.266866][T14446] CUSE: unknown device info ""
[  670.271697][T14446] CUSE: unknown device info ""
[  670.276567][T14446] CUSE: unknown device info ""
[  670.281445][T14446] CUSE: unknown device info "�"
[  670.286459][T14446] CUSE: unknown device info ""
[  670.291277][T14446] CUSE: unknown device info ""
[  670.296111][T14446] CUSE: unknown device info "�"
[  670.301012][T14446] CUSE: DEVNAME unspecified
[  671.365756][ T5884] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  671.566186][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  671.648905][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short
[  671.770092][ T5884] usb 3-1: config 1 has an invalid interface number: 102 but max is 0
[  671.797303][ T5884] usb 3-1: config 1 has no interface number 0
[  671.833299][ T5884] usb 3-1: config 1 interface 102 has no altsetting 0
[  671.955252][ T5884] usb 3-1: New USB device found, idVendor=12d1, idProduct=1413, bcdDevice= 0.00
[  672.013884][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.060741][ T5884] usb 3-1: Product: syz
[  672.083579][ T5884] usb 3-1: Manufacturer: syz
[  672.099439][ T5884] usb 3-1: SerialNumber: syz
[  672.213470][T14482] netlink: 'syz.4.2325': attribute type 10 has an invalid length.
[  672.737316][ T5884] usb-storage 3-1:1.102: USB Mass Storage device detected
[  673.078727][T14488] xt_hashlimit: size too large, truncated to 1048576
[  673.289808][T14497] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  673.673175][ T5884] usb 3-1: USB disconnect, device number 33
[  673.925168][T14503] netlink: 'syz.2.2329': attribute type 5 has an invalid length.
[  674.302947][T14519] lo speed is unknown, defaulting to 1000
[  674.625730][   T55] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  674.812396][   T55] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  674.867803][   T55] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23
[  674.899005][   T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.955701][   T55] usb 2-1: Product: syz
[  674.990292][   T55] usb 2-1: Manufacturer: syz
[  675.009853][   T55] usb 2-1: SerialNumber: syz
[  675.045185][   T55] usb 2-1: config 0 descriptor??
[  675.280043][   T55] usb 2-1: USB disconnect, device number 54
[  675.793783][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'.
[  675.814389][T14545] netlink: 'syz.2.2337': attribute type 1 has an invalid length.
[  676.443834][   T29] audit: type=1400 audit(1771827894.899:1002): avc:  denied  { getopt } for  pid=14555 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  676.444502][T14557] netlink: 'syz.4.2341': attribute type 3 has an invalid length.
[  676.785683][   T55] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  676.938518][   T55] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  676.957828][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.998930][   T55] usb 5-1: config 0 descriptor??
[  678.017200][   T55] usb 5-1: Cannot set autoneg
[  678.024989][   T55] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  678.081511][   T55] usb 5-1: USB disconnect, device number 50
[  682.833640][T14628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  683.463456][T14647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2366'.
[  683.549339][T14650] comedi comedi3: comedi_config --init_data is deprecated
[  683.632600][T14647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2366'.
[  684.122766][T14657] lo speed is unknown, defaulting to 1000
[  685.648192][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2376'.
[  685.724518][T14694] lo speed is unknown, defaulting to 1000
[  686.416930][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'.
[  686.607215][T14707] lo speed is unknown, defaulting to 1000
[  686.876045][ T5884] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  687.002592][T14720] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  687.427528][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  687.440757][ T5884] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  687.449507][ T5884] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  687.462739][ T5884] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  687.471922][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  687.483252][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  687.525713][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  687.541071][ T5884] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  687.550724][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.398928][ T5884] usb 3-1: config 0 descriptor??
[  688.425069][T14725] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  688.645658][ T5884] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  688.710248][ T5884] usb 3-1: USB disconnect, device number 34
[  688.739116][ T5884] usblp0: removed
[  688.915399][T14745] wireguard0: entered promiscuous mode
[  688.923090][T14745] wireguard0: entered allmulticast mode
[  688.944254][T14747] bridge0: entered allmulticast mode
[  690.182417][T14767] syzkaller0: entered promiscuous mode
[  690.486620][T14767] syzkaller0: entered allmulticast mode
[  690.954596][T14789] xt_hashlimit: size too large, truncated to 1048576
[  691.153049][T14793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.405387][T14813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2406'.
[  693.285516][T14821] netlink: 'syz.4.2408': attribute type 10 has an invalid length.
[  693.566953][T14831] CUSE: unknown device info ""
[  693.571883][T14831] CUSE: unknown device info ""
[  693.576897][T14831] CUSE: unknown device info ""
[  693.581779][T14831] CUSE: unknown device info ""
[  693.586674][T14831] CUSE: unknown device info "�"
[  693.591645][T14831] CUSE: unknown device info ""
[  693.596809][T14831] CUSE: unknown device info ""
[  693.601698][T14831] CUSE: unknown device info "�"
[  693.606686][T14831] CUSE: DEVNAME unspecified
[  693.674422][T14831] xt_hashlimit: size too large, truncated to 1048576
[  695.013337][T14848] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2414'.
[  697.702087][T14861] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2420'.
[  697.990757][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2423'.
[  698.000221][T14878] openvswitch: netlink: Invalid VLAN frame
[  699.148251][   T29] audit: type=1400 audit(1771827917.429:1003): avc:  denied  { setopt } for  pid=14891 comm="syz.4.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  699.661420][T14900] CUSE: unknown device info ""
[  699.676300][T14901] xt_connbytes: Forcing CT accounting to be enabled
[  699.683099][T14901] set match dimension is over the limit!
[  699.695706][T14900] CUSE: unknown device info ""
[  699.700667][T14900] CUSE: unknown device info ""
[  699.705567][T14900] CUSE: unknown device info ""
[  699.710570][T14900] CUSE: unknown device info "�"
[  699.748825][T14900] CUSE: unknown device info ""
[  699.765490][T14900] CUSE: unknown device info ""
[  699.787475][T14900] CUSE: unknown device info "�"
[  699.807793][T14900] CUSE: DEVNAME unspecified
[  699.932325][T14900] xt_hashlimit: size too large, truncated to 1048576
[  700.775662][   T29] audit: type=1326 audit(1771827918.859:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.125695][   T29] audit: type=1326 audit(1771827918.859:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.271704][T14930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2436'.
[  701.284005][T14932] pimreg: entered allmulticast mode
[  701.341432][   T29] audit: type=1326 audit(1771827918.859:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.415735][   T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  701.460208][   T29] audit: type=1326 audit(1771827918.859:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.462667][T14932] pimreg: left allmulticast mode
[  701.572717][   T29] audit: type=1326 audit(1771827918.859:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.605925][   T10] usb 5-1: config 0 has an invalid interface number: 93 but max is 0
[  701.624762][   T10] usb 5-1: config 0 has no interface number 0
[  701.643312][   T29] audit: type=1326 audit(1771827918.859:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.657517][   T10] usb 5-1: config 0 interface 93 has no altsetting 0
[  701.704095][   T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  701.725399][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.745689][   T29] audit: type=1326 audit(1771827918.859:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.795130][   T10] usb 5-1: config 0 descriptor??
[  701.815670][   T29] audit: type=1326 audit(1771827918.859:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  701.850429][   T10] cp210x 5-1:0.93: cp210x converter detected
[  701.905733][   T29] audit: type=1326 audit(1771827918.859:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.1.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  703.389467][   T10] cp210x 5-1:0.93: failed to get vendor val 0x000e size 3: -32
[  703.606938][   T10] cp210x 5-1:0.93: GPIO initialisation failed: -19
[  703.649307][   T10] usb 5-1: cp210x converter now attached to ttyUSB0
[  703.810287][T14927] tc_dump_action: action bad kind
[  703.816322][   T10] usb 5-1: USB disconnect, device number 51
[  703.833299][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  703.876058][   T10] cp210x 5-1:0.93: device disconnected
[  704.259225][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'.
[  705.029894][T14985] lo speed is unknown, defaulting to 1000
[  707.065935][T15013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2457'.
[  707.075021][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  707.305697][   T10] usb 1-1: Using ep0 maxpacket: 32
[  707.321503][   T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.335711][   T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.385853][   T10] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  707.405755][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  707.467922][   T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice=ff.fa
[  707.477391][   T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  707.507252][   T10] usb 1-1: Product: syz
[  707.515925][   T10] usb 1-1: Manufacturer: syz
[  707.541342][   T10] usb 1-1: config 0 descriptor??
[  708.207325][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'.
[  708.304212][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2464'.
[  708.316084][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.329631][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.356715][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.506528][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.518507][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.538830][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.551098][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.590061][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.602514][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.617210][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.637739][   T10] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0
[  708.786932][   T10] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf4 found
[  708.794918][   T10] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf3 found
[  708.815065][   T10] usb 1-1: USB disconnect, device number 63
[  709.189440][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'.
[  709.274855][T15046] lo speed is unknown, defaulting to 1000
[  710.153442][   T29] kauditd_printk_skb: 63 callbacks suppressed
[  710.153456][   T29] audit: type=1400 audit(1771827929.607:1076): avc:  denied  { mount } for  pid=15053 comm="syz.2.2471" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  710.154126][T15056] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  710.159817][   T29] audit: type=1400 audit(1771827929.607:1077): avc:  denied  { mounton } for  pid=15053 comm="syz.2.2471" path="/475/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  710.843813][   T29] audit: type=1400 audit(1771827930.267:1078): avc:  denied  { mounton } for  pid=15069 comm="syz.1.2474" path="/file0" dev="ramfs" ino=45930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  710.894356][   T29] audit: type=1400 audit(1771827930.347:1079): avc:  denied  { unmount } for  pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  711.077186][T15075] ����: entered promiscuous mode
[  711.785657][   T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  712.535734][ T5884] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  712.545856][   T10] usb 2-1: Using ep0 maxpacket: 32
[  712.564962][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  712.585916][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.631752][   T10] usb 2-1: New USB device found, idVendor=0545, idProduct=a4a1, bcdDevice= 0.40
[  712.648257][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.665868][   T10] usb 2-1: Product: syz
[  712.670111][   T10] usb 2-1: Manufacturer: syz
[  712.674815][   T10] usb 2-1: SerialNumber: syz
[  712.778223][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.785716][T11030] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  712.789577][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.826966][ T5884] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  712.869789][ T5884] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  712.888164][ T5884] usb 5-1: Manufacturer: syz
[  712.904011][ T5884] usb 5-1: config 0 descriptor??
[  712.964217][T15094] lo speed is unknown, defaulting to 1000
[  712.995694][T12380] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  713.025724][T11030] usb 1-1: Using ep0 maxpacket: 8
[  713.038992][T11030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  713.066640][T11030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  713.104606][T11030] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  713.136685][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.151271][T12380] usb 3-1: device descriptor read/64, error -71
[  713.195665][T11030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.206166][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.252699][T11030] usb 1-1: config 0 descriptor??
[  713.317747][T11030] hso 1-1:0.0: Can't find BULK IN endpoint
[  713.405829][T12380] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  714.014170][T12380] usb 3-1: device descriptor read/64, error -71
[  714.021470][   T24] usb 1-1: USB disconnect, device number 64
[  714.022111][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.116196][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.146678][T12380] usb usb3-port1: attempt power cycle
[  714.155462][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.208582][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.229252][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.246500][ T5884] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input20
[  714.276687][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.310571][T15110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2485'.
[  714.373269][ T5884] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000F/input/input21
[  714.407904][ T5884] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[  714.468928][T15086] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  714.477425][T15086] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  714.487532][   T29] audit: type=1400 audit(1771827933.947:1080): avc:  denied  { firmware_load } for  pid=15082 comm="syz.4.2479" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  714.487537][T15086] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  714.495820][T12380] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  714.524037][   T10] cdc_ncm 2-1:1.0: bind() failure
[  714.606153][T12380] usb 3-1: device descriptor read/8, error -71
[  714.637624][   T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  714.675543][   T10] cdc_ncm 2-1:1.1: bind() failure
[  714.712733][   T10] usb 2-1: USB disconnect, device number 55
[  714.865718][T12380] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  714.918578][T12380] usb 3-1: device descriptor read/8, error -71
[  715.015670][T15118] ipt_REJECT: TCP_RESET invalid for non-tcp
[  715.025962][T12380] usb usb3-port1: unable to enumerate USB device
[  715.140779][T15124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2490'.
[  715.362920][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'.
[  715.429995][T15132] lo speed is unknown, defaulting to 1000
[  715.704838][ T5884] usb 5-1: reset high-speed USB device number 52 using dummy_hcd
[  715.984462][T15142] netlink: 'syz.4.2494': attribute type 1 has an invalid length.
[  716.301691][T15153] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2492'.
[  717.027307][T12380] usb 5-1: USB disconnect, device number 52
[  717.099180][T15151] serio: Serial port ptm0
[  717.115857][   T29] audit: type=1400 audit(1771827936.577:1081): avc:  denied  { unmount } for  pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  717.212074][T15164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2500'.
[  717.407337][T15172] netlink: 'syz.3.2502': attribute type 1 has an invalid length.
[  717.456086][T15172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2502'.
[  717.485064][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'.
[  718.100502][T15185] fuse: Bad value for 'fd'
[  718.181327][T15187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2507'.
[  718.199670][   T55] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  718.363667][T15192] option changes via remount are deprecated (pid=15188 comm=syz.1.2508)
[  718.372962][T15192] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 ""
[  718.394573][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2508'.
[  718.500245][   T55] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  718.508461][   T55] usb 5-1: config 0 has no interface number 0
[  718.516674][   T29] audit: type=1400 audit(1771827937.817:1082): avc:  denied  { remount } for  pid=15188 comm="syz.1.2508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  718.517478][   T55] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  718.652306][   T55] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  718.669777][   T55] usb 5-1: config 0 interface 11 has no altsetting 0
[  718.677007][   T55] usb 5-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b
[  718.689017][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.756559][T15198] siw: device registration error -23
[  719.269315][T15197] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  719.392641][   T55] usb 5-1: config 0 descriptor??
[  719.406856][   T29] audit: type=1400 audit(1771827938.837:1083): avc:  denied  { connect } for  pid=15191 comm="syz.0.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  719.433092][T15182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  719.447575][   T55] keyspan 5-1:0.11: Keyspan 4 port adapter converter detected
[  719.508509][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81
[  719.556552][T15206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2512'.
[  719.651953][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1
[  719.710638][T15210] netlink: 'syz.4.2505': attribute type 1 has an invalid length.
[  719.719236][   T55] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  719.822633][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82
[  719.865286][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2
[  720.069177][   T55] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  720.514703][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83
[  720.527961][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3
[  720.537976][   T55] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  720.548315][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84
[  720.556397][   T55] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4
[  720.567810][   T55] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  720.966518][T12380] usb 5-1: USB disconnect, device number 53
[  721.030695][T12380] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  721.114770][T12380] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  721.161046][T12380] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  721.175363][   T29] audit: type=1400 audit(1771827940.627:1084): avc:  denied  { map } for  pid=15229 comm="syz.2.2519" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  721.200723][T12380] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  721.300232][T12380] keyspan 5-1:0.11: device disconnected
[  721.580739][   T29] audit: type=1400 audit(1771827941.037:1085): avc:  denied  { setcheckreqprot } for  pid=15227 comm="syz.4.2518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  721.971499][T15240] xt_hashlimit: size too large, truncated to 1048576
[  723.369856][T15270] mkiss: ax0: crc mode is auto.
[  723.518832][T15277] CUSE: unknown device info ""
[  723.523714][T15277] CUSE: unknown device info ""
[  723.528635][T15277] CUSE: unknown device info ""
[  723.533453][T15277] CUSE: unknown device info ""
[  723.538302][T15277] CUSE: unknown device info "�"
[  723.543207][T15277] CUSE: unknown device info ""
[  723.548061][T15277] CUSE: unknown device info ""
[  723.552875][T15277] CUSE: unknown device info "�"
[  723.557797][T15277] CUSE: DEVNAME unspecified
[  723.636390][T12380] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[  724.110184][T12380] usb 1-1: not running at top speed; connect to a high speed hub
[  724.119404][T12380] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  724.130807][T12380] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  724.140374][T12380] usb 1-1: config 1 has no interface number 1
[  724.161387][T12380] usb 1-1: Dual-Role OTG device on HNP port
[  724.172635][T12380] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  724.199142][T12380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.249094][T12380] usb 1-1: Product: 낫똸ꄌꃒ缭袵泝蟝澥胰匁梽曇糲䤆៓꽸徼䶑䃥嵊픡ඍ䅾쟀돮鮔뽑硠뢠歜黲蝇⯁뱭એꈟ藺퍨탼銤⼣瘼魂䟩䜚佈ᷱ홄ꍂ㉎➮튇恫㿙寝ᦗ曚軨鞴
[  724.279903][T15296] xt_hashlimit: size too large, truncated to 1048576
[  724.315665][T12380] usb 1-1: Manufacturer: 麗㏌ꖁﻮ䂰邏ퟎ籌ﱌ此ꈏ륋綴퍙汰穻៿ఋ蝫꽜髥㩔ᔹ捖鞒窩苬Ǿ脾蒴⣺ꧦᶗﯘᛕ縷全鑉▒᫫쏟诡碭䌨끵뾁ꢨ较ᥠ湵鱼ҁ棾떋쨪אָ뜢준磚낅瞀칳씩땮칧䴺娺抟粈ꗎ㴦维挅丣⸎⒱6乒䤮丶െꔇ뜅컥ﵕꢰ邓•㎋꼏ᬠ췉此鯢煮
[  724.594159][T15325] binder: 15315:15325 ioctl 8010aebb 200000000040 returned -22
[  724.674658][T12380] usb 1-1: 2:1 : unknown format tag 0xe0c3 is detected.  processed as MPEG.
[  724.684404][T12380] usb 1-1: found format II with max.bitrate = 0, frame size=2
[  724.692975][T12380] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  725.339487][T12380] usb 1-1: USB disconnect, device number 65
[  725.404529][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  725.736126][T11030] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  725.951937][T11030] usb 3-1: Using ep0 maxpacket: 16
[  726.011415][T11030] usb 3-1: unable to read config index 0 descriptor/start: -61
[  726.101431][T11030] usb 3-1: can't read configurations, error -61
[  726.214536][T15350] xt_hashlimit: size too large, truncated to 1048576
[  726.255870][T11030] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  726.435688][T11030] usb 3-1: Using ep0 maxpacket: 16
[  726.448857][T11030] usb 3-1: unable to read config index 0 descriptor/start: -61
[  726.464359][T11030] usb 3-1: can't read configurations, error -61
[  726.489320][T11030] usb usb3-port1: attempt power cycle
[  726.505565][T15360] option changes via remount are deprecated (pid=15354 comm=syz.0.2553)
[  726.514009][T15360] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 ""
[  727.135738][T11030] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  727.156164][T11030] usb 3-1: Using ep0 maxpacket: 16
[  727.163168][T11030] usb 3-1: unable to read config index 0 descriptor/start: -61
[  727.171189][T11030] usb 3-1: can't read configurations, error -61
[  727.315719][T11030] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  727.470901][T11030] usb 3-1: Using ep0 maxpacket: 16
[  727.491636][T11030] usb 3-1: unable to read config index 0 descriptor/start: -61
[  727.505965][T11030] usb 3-1: can't read configurations, error -61
[  727.522777][T11030] usb usb3-port1: unable to enumerate USB device
[  727.644632][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'.
[  727.671321][T15378] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  727.682817][T15378] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  727.763126][   T29] audit: type=1400 audit(1771827947.217:1086): avc:  denied  { ioctl } for  pid=15377 comm="syz.4.2559" path="socket:[47612]" dev="sockfs" ino=47612 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  727.791213][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'.
[  727.806440][T15378] macvlan2: entered promiscuous mode
[  727.812126][T15378] macvlan2: entered allmulticast mode
[  727.820709][T15378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=15378 comm=syz.4.2559
[  727.991097][T15387] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2560'.
[  728.195744][T12380] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  728.437277][T12380] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.448907][T12380] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  728.506528][T12380] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  728.539440][T12380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  728.644772][T15381] [U] 
[  728.678945][T12380] usb 5-1: SerialNumber: syz
[  729.039453][T12380] usb 5-1: 0:2 : does not exist
[  729.120468][T12380] usb 5-1: USB disconnect, device number 54
[  729.260903][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  729.581539][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'.
[  730.474791][T15429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15429 comm=syz.3.2576
[  731.384028][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2575'.
[  732.015922][T11030] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  732.190118][T11030] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  732.215561][T11030] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  732.239175][T11030] usb 5-1: config 0 has no interfaces?
[  732.250912][T11030] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  732.275369][T11030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.305379][T11030] usb 5-1: config 0 descriptor??
[  732.606091][T15430] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  733.151853][T15449] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2578'.
[  733.511822][T15457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2585'.
[  733.752332][T11030] usb 5-1: USB disconnect, device number 55
[  734.195761][   T55] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  734.269542][T12380] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  734.390742][   T55] usb 1-1: config 1 has an invalid interface number: 140 but max is 0
[  734.411337][   T55] usb 1-1: config 1 has no interface number 0
[  734.448255][   T55] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[  734.458012][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.521676][   T29] audit: type=1326 audit(1771827953.937:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  734.797762][T12380] usb 3-1: not running at top speed; connect to a high speed hub
[  734.808069][   T55] usb 1-1: MBOX3: Invalid descriptor size=18.
[  734.829072][T12380] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  734.838297][T12380] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  734.870781][T12380] usb 3-1: config 1 has no interface number 1
[  734.874859][   T29] audit: type=1326 audit(1771827953.937:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  734.881674][T12380] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  734.962428][T12380] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  734.993605][   T29] audit: type=1326 audit(1771827953.937:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  734.999164][T12380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.066475][T12380] usb 3-1: Product: 낫똸ꄌꃒ缭袵泝蟝澥胰匁梽曇糲䤆៓꽸徼䶑䃥嵊픡ඍ䅾쟀돮鮔뽑硠뢠歜黲蝇⯁뱭એꈟ藺퍨탼銤⼣瘼魂䟩䜚佈ᷱ홄ꍂ㉎➮튇恫㿙寝ᦗ曚軨鞴
[  735.200068][T12380] usb 3-1: Manufacturer: 麗㏌ꖁﻮ䂰邏ퟎ籌ﱌ此ꈏ륋綴퍙汰穻៿ఋ蝫꽜髥㩔ᔹ捖鞒窩苬Ǿ脾蒴⣺ꧦᶗﯘᛕ縷全鑉▒᫫쏟诡碭䌨끵뾁ꢨ较ᥠ湵鱼ҁ棾떋쨪אָ뜢준磚낅瞀칳씩땮칧䴺娺抟粈ꗎ㴦维挅丣⸎⒱6乒䤮丶െꔇ뜅컥ﵕꢰ邓•㎋꼏ᬠ췉此鯢煮
[  735.244300][T15492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.253528][   T29] audit: type=1326 audit(1771827953.937:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.363862][   T29] audit: type=1326 audit(1771827953.937:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.696481][   T29] audit: type=1326 audit(1771827953.937:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.707192][T15495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'.
[  735.721353][   T29] audit: type=1326 audit(1771827953.937:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.770802][   T29] audit: type=1326 audit(1771827953.937:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.818172][   T29] audit: type=1326 audit(1771827953.947:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.870863][   T29] audit: type=1326 audit(1771827953.947:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eaa79c629 code=0x7ffc0000
[  735.883982][T12380] usb 3-1: 2:1 : unknown format tag 0xe0c3 is detected.  processed as MPEG.
[  735.916665][T12380] usb 3-1: found format II with max.bitrate = 0, frame size=2
[  735.924213][T12380] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  736.163722][T12380] usb 3-1: USB disconnect, device number 43
[  736.227041][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  736.330710][T15506] syzkaller0: entered promiscuous mode
[  736.352488][T15506] syzkaller0: entered allmulticast mode
[  736.438770][T15506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  736.494334][T15505] tipc: Resetting bearer <eth:syzkaller0>
[  736.627415][   T55] usb 1-1: USB disconnect, device number 66
[  737.314170][T15505] tipc: Disabling bearer <eth:syzkaller0>
[  738.369465][T15548] fuse: root generation should be zero
[  738.545859][T12380] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  738.558820][T15557] erspan0: entered promiscuous mode
[  738.748272][T12380] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  738.781031][T12380] usb 2-1: config 0 interface 0 has no altsetting 0
[  738.797581][T12380] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  738.799473][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'.
[  738.822955][T12380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.854767][T12380] usb 2-1: config 0 descriptor??
[  738.865715][T15549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  738.985688][   T24] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[  739.157812][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  739.173136][   T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  739.580604][T12380] samsung 0003:0419:0001.0010: unknown main item tag 0x0
[  739.593856][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  739.605951][T12380] samsung 0003:0419:0001.0010: unknown main item tag 0x0
[  739.613012][   T24] usb 1-1: config 1 has no interface number 1
[  739.625962][T12380] samsung 0003:0419:0001.0010: item fetching failed at offset 2/3
[  739.634424][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  739.649933][T12380] samsung 0003:0419:0001.0010: parse failed
[  739.684782][T12380] samsung 0003:0419:0001.0010: probe with driver samsung failed with error -22
[  739.722513][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  739.743852][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.777624][   T55] usb 2-1: USB disconnect, device number 56
[  739.811607][   T24] usb 1-1: Product: 낫똸ꄌꃒ缭袵泝蟝澥胰匁梽曇糲䤆៓꽸徼䶑䃥嵊픡ඍ䅾쟀돮鮔뽑硠뢠歜黲蝇⯁뱭એꈟ藺퍨탼銤⼣瘼魂䟩䜚佈ᷱ홄ꍂ㉎➮튇恫㿙寝ᦗ曚軨鞴
[  739.884468][   T24] usb 1-1: Manufacturer: 麗㏌ꖁﻮ䂰邏ퟎ籌ﱌ此ꈏ륋綴퍙汰穻៿ఋ蝫꽜髥㩔ᔹ捖鞒窩苬Ǿ脾蒴⣺ꧦᶗﯘᛕ縷全鑉▒᫫쏟诡碭䌨끵뾁ꢨ较ᥠ湵鱼ҁ棾떋쨪אָ뜢준磚낅瞀칳씩땮칧䴺娺抟粈ꗎ㴦维挅丣⸎⒱6乒䤮丶െꔇ뜅컥ﵕꢰ邓•㎋꼏ᬠ췉此鯢煮
[  740.242668][   T24] usb 1-1: 2:1 : unknown format tag 0xe0c3 is detected.  processed as MPEG.
[  740.265485][   T24] usb 1-1: found format II with max.bitrate = 0, frame size=2
[  740.268913][   T55] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  740.280622][   T24] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  740.368854][   T24] usb 1-1: USB disconnect, device number 67
[  740.519631][   T55] usb 3-1: not running at top speed; connect to a high speed hub
[  740.529659][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  740.557564][   T55] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  740.568693][   T55] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  741.010129][   T55] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  741.034823][   T55] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  741.044806][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.064502][   T55] usb 3-1: Product: 낫똸ꄌꃒ缭袵泝蟝澥胰匁梽曇糲䤆៓꽸徼䶑䃥嵊픡ඍ䅾쟀돮鮔뽑硠뢠歜黲蝇⯁뱭એꈟ藺퍨탼銤⼣瘼魂䟩䜚佈ᷱ홄ꍂ㉎➮튇恫㿙寝ᦗ曚軨鞴
[  741.114430][   T55] usb 3-1: Manufacturer: 麗㏌ꖁﻮ䂰邏ퟎ籌ﱌ此ꈏ륋綴퍙汰穻៿ఋ蝫꽜髥㩔ᔹ捖鞒窩苬Ǿ脾蒴⣺ꧦᶗﯘᛕ縷全鑉▒᫫쏟诡碭䌨끵뾁ꢨ较ᥠ湵鱼ҁ棾떋쨪אָ뜢준磚낅瞀칳씩땮칧䴺娺抟粈ꗎ㴦维挅丣⸎⒱6乒䤮丶െꔇ뜅컥ﵕꢰ邓•㎋꼏ᬠ췉此鯢煮
[  741.169330][T15597] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2627'.
[  741.809556][T15599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  741.814069][   T55] usb 3-1: 0:2 : does not exist
[  741.925843][   T55] usb 3-1: USB disconnect, device number 44
[  741.977395][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  742.534775][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'.
[  742.612015][T15618] lo speed is unknown, defaulting to 1000
[  742.791905][   T55] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  743.275655][   T55] usb 1-1: Using ep0 maxpacket: 32
[  743.291530][   T55] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  743.299905][   T55] usb 1-1: config 0 has no interface number 0
[  743.373751][   T55] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  743.425650][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.525409][   T55] usb 1-1: Product: syz
[  743.530084][   T55] usb 1-1: Manufacturer: syz
[  743.534737][   T55] usb 1-1: SerialNumber: syz
[  743.568038][   T55] usb 1-1: config 0 descriptor??
[  743.728241][   T55] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  743.742106][   T55] usb 1-1: selecting invalid altsetting 1
[  743.747884][   T55] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  743.757804][   T55] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  743.768343][   T55] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  743.776780][   T55] usb 1-1: media controller created
[  744.201246][   T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  744.338574][T15643] kAFS: unable to lookup cell '(,c��L'
[  744.401228][T15649] No such timeout policy "syz1"
[  744.676719][T15652] CUSE: unknown device info ""
[  744.681612][T15652] CUSE: unknown device info ""
[  744.686500][T15652] CUSE: unknown device info ""
[  744.691337][T15652] CUSE: unknown device info ""
[  744.696252][T15652] CUSE: unknown device info "�"
[  744.701166][T15652] CUSE: unknown device info ""
[  744.706010][T15652] CUSE: unknown device info ""
[  744.710836][T15652] CUSE: unknown device info "�"
[  744.715773][T15652] CUSE: DEVNAME unspecified
[  745.364129][   T55] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  745.372152][   T55] zl10353_read_register: readreg error (reg=127, ret==-110)
[  745.380404][   T55] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  745.445576][T15662] CUSE: unknown device info ""
[  745.450532][T15662] CUSE: unknown device info ""
[  745.455380][T15662] CUSE: unknown device info ""
[  745.460248][T15662] CUSE: unknown device info ""
[  745.465071][T15662] CUSE: unknown device info "�"
[  745.470056][T15662] CUSE: unknown device info ""
[  745.474907][T15662] CUSE: unknown device info ""
[  745.479769][T15662] CUSE: unknown device info "�"
[  745.484685][T15662] CUSE: DEVNAME unspecified
[  745.562253][   T55] usb 1-1: USB disconnect, device number 68
[  747.796955][   T29] kauditd_printk_skb: 339 callbacks suppressed
[  747.796971][   T29] audit: type=1400 audit(1771827967.247:1436): avc:  granted  { setsecparam } for  pid=15701 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  747.883376][T15704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  748.447536][T15720] lo speed is unknown, defaulting to 1000
[  749.044110][T15734] netlink: 'syz.0.2659': attribute type 10 has an invalid length.
[  749.134524][   T29] audit: type=1400 audit(1771827968.587:1437): avc:  denied  { wake_alarm } for  pid=15740 comm="syz.2.2663" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  749.545678][   T24] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  749.757429][   T24] usb 3-1: config 8 has an invalid interface number: 177 but max is 0
[  749.787165][   T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  749.808920][   T24] usb 3-1: config 8 has no interface number 0
[  749.815084][   T24] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  749.845836][   T24] usb 3-1: config 8 interface 177 has no altsetting 0
[  749.867423][   T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  749.905698][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.434793][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'.
[  750.480886][   T24] ir_toy 3-1:8.177: required endpoints not found
[  750.679565][ T5884] usb 3-1: USB disconnect, device number 45
[  750.810529][   T55] kernel write not supported for file /ppp (pid: 55 comm: kworker/0:2)
[  750.826607][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'.
[  751.208653][T15768] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2665'.
[  751.359567][T15745] [U] 
[  751.799355][T15776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15776 comm=syz.4.2672
[  753.230057][T15783] SET target dimension over the limit!
[  753.565651][   T29] audit: type=1400 audit(1771827972.687:1438): avc:  denied  { name_bind } for  pid=15757 comm="syz.3.2668" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  753.705883][   T29] audit: type=1400 audit(1771827973.157:1439): avc:  denied  { getopt } for  pid=15784 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  755.029796][T15805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2682'.
[  755.181532][T15808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.222730][T15808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.415754][   T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  755.826392][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'.
[  755.904073][T15824] lo speed is unknown, defaulting to 1000
[  756.556591][T15831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2687'.
[  757.796543][T15838] CUSE: unknown device info ""
[  757.801479][T15838] CUSE: unknown device info ""
[  757.806496][T15838] CUSE: unknown device info ""
[  757.811314][T15838] CUSE: unknown device info ""
[  757.816141][T15838] CUSE: unknown device info "�"
[  757.821042][T15838] CUSE: unknown device info ""
[  757.825869][T15838] CUSE: unknown device info ""
[  757.830738][T15838] CUSE: unknown device info "�"
[  757.835676][T15838] CUSE: DEVNAME unspecified
[  758.319082][T15855] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  758.460368][T15856] lo speed is unknown, defaulting to 1000
[  758.745682][ T5884] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  758.896359][ T5884] usb 2-1: Using ep0 maxpacket: 32
[  758.940145][ T5884] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  758.965685][ T5884] usb 2-1: config 0 has no interface number 0
[  759.025055][ T5884] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  759.054083][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.093655][ T5884] usb 2-1: Product: syz
[  759.111022][ T5884] usb 2-1: Manufacturer: syz
[  759.128817][ T5884] usb 2-1: SerialNumber: syz
[  759.156824][ T5884] usb 2-1: config 0 descriptor??
[  759.202973][ T5884] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  759.229757][T15864] syzkaller0: entered promiscuous mode
[  759.239863][ T5884] usb 2-1: selecting invalid altsetting 1
[  759.260830][ T5884] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  759.274291][T15864] syzkaller0: entered allmulticast mode
[  759.286966][ T5884] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  759.323185][ T5884] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  759.354083][ T5884] usb 2-1: media controller created
[  759.412330][T15864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  759.422134][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  759.448383][T15863] tipc: Resetting bearer <eth:syzkaller0>
[  759.502273][T15863] tipc: Disabling bearer <eth:syzkaller0>
[  759.870559][T15869] netlink: 'syz.0.2695': attribute type 1 has an invalid length.
[  759.999570][   T29] audit: type=1400 audit(1771827979.457:1440): avc:  denied  { create } for  pid=15868 comm="syz.0.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  760.021939][   T29] audit: type=1400 audit(1771827979.477:1441): avc:  denied  { write } for  pid=15868 comm="syz.0.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  760.071866][T15869] 8021q: adding VLAN 0 to HW filter on device bond2
[  760.458620][T15872] bond2: (slave gretap1): making interface the new active one
[  760.482641][T15872] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  760.536175][ T5884] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  760.555708][ T5884] zl10353_read_register: readreg error (reg=127, ret==-110)
[  760.734711][ T5884] usb 2-1: USB disconnect, device number 57
[  760.884720][T15877] wireguard0: entered promiscuous mode
[  760.890751][T15877] wireguard0: entered allmulticast mode
[  761.502641][T15882] netlink: 'syz.2.2697': attribute type 3 has an invalid length.
[  761.894704][T15887] tc_dump_action: action bad kind
[  763.034409][T15914] lo speed is unknown, defaulting to 1000
[  763.703375][   T29] audit: type=1400 audit(1771827983.137:1442): avc:  denied  { audit_write } for  pid=15931 comm="syz.4.2707" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  763.716893][T15934] CUSE: info not properly terminated
[  764.437215][   T29] audit: type=1400 audit(1771827983.897:1443): avc:  denied  { bind } for  pid=15956 comm="syz.3.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  764.902079][T15963] No such timeout policy "syz1"
[  765.018002][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'.
[  765.970441][T15981] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2717'.
[  766.980416][   T29] audit: type=1400 audit(1771827985.757:1444): avc:  denied  { name_bind } for  pid=15993 comm="syz.3.2720" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  767.053491][T15991] lo speed is unknown, defaulting to 1000
[  767.148358][T15990] lo speed is unknown, defaulting to 1000
[  768.198140][T16008] xt_hashlimit: size too large, truncated to 1048576
[  768.715638][T11030] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  768.867453][T11030] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  768.878519][T11030] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  768.890759][T11030] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  768.900165][T11030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.908469][T11030] usb 1-1: Product: syz
[  768.912718][T11030] usb 1-1: Manufacturer: syz
[  768.917593][T11030] usb 1-1: SerialNumber: syz
[  768.933131][T11030] usb 1-1: config 0 descriptor??
[  768.940537][T16013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  768.947824][T15981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  768.967743][T16013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  769.182112][T16013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  769.208369][T16013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  769.306008][   T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  769.335661][   T29] audit: type=1400 audit(1771827988.777:1445): avc:  denied  { execute } for  pid=16033 comm="syz.3.2728" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  769.381905][T16040] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2731'.
[  770.135472][ T5884] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  770.149079][   T10] usb 5-1: Using ep0 maxpacket: 32
[  770.179402][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  770.195613][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  770.205366][   T10] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00
[  770.235660][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.245352][   T10] usb 5-1: config 0 descriptor??
[  770.298821][ T5884] usb 2-1: not running at top speed; connect to a high speed hub
[  770.309888][ T5884] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  770.325918][ T5884] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  770.345268][ T5884] usb 2-1: config 1 has no interface number 1
[  770.355377][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  770.384979][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  770.395172][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.404781][ T5884] usb 2-1: Product: 낫똸ꄌꃒ缭袵泝蟝澥胰匁梽曇糲䤆៓꽸徼䶑䃥嵊픡ඍ䅾쟀돮鮔뽑硠뢠歜黲蝇⯁뱭એꈟ藺퍨탼銤⼣瘼魂䟩䜚佈ᷱ홄ꍂ㉎➮튇恫㿙寝ᦗ曚軨鞴
[  770.444559][ T5884] usb 2-1: Manufacturer: 麗㏌ꖁﻮ䂰邏ퟎ籌ﱌ此ꈏ륋綴퍙汰穻៿ఋ蝫꽜髥㩔ᔹ捖鞒窩苬Ǿ脾蒴⣺ꧦᶗﯘᛕ縷全鑉▒᫫쏟诡碭䌨끵뾁ꢨ较ᥠ湵鱼ҁ棾떋쨪אָ뜢준磚낅瞀칳씩땮칧䴺娺抟粈ꗎ㴦维挅丣⸎⒱6乒䤮丶െꔇ뜅컥ﵕꢰ邓•㎋꼏ᬠ췉此鯢煮
[  770.683194][   T10] betop 0003:8380:1850.0011: unknown main item tag 0x0
[  770.691404][   T10] betop 0003:8380:1850.0011: unknown main item tag 0x0
[  770.698407][   T10] betop 0003:8380:1850.0011: unknown main item tag 0x0
[  770.705861][ T5884] usb 2-1: 2:1 : unknown format tag 0xe0c3 is detected.  processed as MPEG.
[  770.714643][   T10] betop 0003:8380:1850.0011: unknown main item tag 0x0
[  770.724764][   T10] betop 0003:8380:1850.0011: unknown main item tag 0x0
[  770.724771][ T5884] usb 2-1: found format II with max.bitrate = 0, frame size=2
[  770.724791][ T5884] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  770.748358][T11030] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  770.774240][T11030] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:0d:01:01:03
[  770.797235][   T10] betop 0003:8380:1850.0011: hidraw0: USB HID v0.00 Device [HID 8380:1850] on usb-dummy_hcd.4-1/input0
[  770.821315][   T10] betop 0003:8380:1850.0011: no inputs found
[  770.831947][T11030] usb 1-1: USB disconnect, device number 69
[  770.855774][T11030] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  770.889042][ T5884] usb 2-1: USB disconnect, device number 58
[  770.943780][T14975] udevd[14975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  771.527350][T16064] xt_hashlimit: size too large, truncated to 1048576
[  772.585922][T11030] usb 5-1: USB disconnect, device number 56
[  773.065823][ T5884] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  773.517015][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  773.537868][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short
[  773.570053][ T5884] usb 1-1: config 5 has an invalid interface number: 211 but max is 0
[  773.602616][ T5884] usb 1-1: config 5 has no interface number 0
[  773.622365][ T5884] usb 1-1: config 5 interface 211 altsetting 7 endpoint 0x6 has invalid maxpacket 983, setting to 64
[  773.653681][ T5884] usb 1-1: config 5 interface 211 has no altsetting 0
[  773.765921][ T5884] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=e9.a2
[  773.779889][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.815660][ T5884] usb 1-1: Product: syz
[  773.823361][ T5884] usb 1-1: Manufacturer: syz
[  773.835987][ T5884] usb 1-1: SerialNumber: syz
[  774.816179][T16114] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  774.823592][T16114] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  775.862863][ T5884] imon_raw 1-1:5.211: IR endpoint missing
[  775.893855][ T5884] usb 1-1: USB disconnect, device number 70
[  777.146279][T16154] CUSE: unknown device info ""
[  777.151348][T16154] CUSE: unknown device info ""
[  777.156446][T16154] CUSE: unknown device info ""
[  777.161338][T16154] CUSE: unknown device info ""
[  777.166253][T16154] CUSE: unknown device info "�"
[  777.171258][T16154] CUSE: unknown device info ""
[  777.176226][T16154] CUSE: unknown device info ""
[  777.181219][T16154] CUSE: unknown device info "�"
[  777.186341][T16154] CUSE: DEVNAME unspecified
[  777.411206][T16154] xt_hashlimit: size too large, truncated to 1048576
[  777.492599][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2758'.
[  778.915742][T16179] FAULT_INJECTION: forcing a failure.
[  778.915742][T16179] name failslab, interval 1, probability 0, space 0, times 0
[  778.985762][T16179] CPU: 0 UID: 0 PID: 16179 Comm: syz.2.2764 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  778.985790][T16179] Tainted: [L]=SOFTLOCKUP
[  778.985796][T16179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  778.985804][T16179] Call Trace:
[  778.985810][T16179]  <TASK>
[  778.985817][T16179]  dump_stack_lvl+0x100/0x190
[  778.985848][T16179]  should_fail_ex.cold+0x5/0xa
[  778.985870][T16179]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  778.985893][T16179]  should_failslab+0xc2/0x120
[  778.985917][T16179]  __kmalloc_noprof+0xe0/0x850
[  778.985943][T16179]  genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  778.985966][T16179]  ? cred_has_capability.isra.0+0x186/0x300
[  778.985990][T16179]  genl_family_rcv_msg_doit+0xc7/0x300
[  778.986015][T16179]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  778.986055][T16179]  ? bpf_lsm_capable+0x9/0x10
[  778.986071][T16179]  ? security_capable+0x80/0x260
[  778.986099][T16179]  ? ns_capable+0xd2/0xf0
[  778.986122][T16179]  genl_rcv_msg+0x560/0x800
[  778.986148][T16179]  ? __pfx_genl_rcv_msg+0x10/0x10
[  778.986170][T16179]  ? __pfx_ovs_meter_cmd_set+0x10/0x10
[  778.986206][T16179]  netlink_rcv_skb+0x159/0x420
[  778.986226][T16179]  ? __pfx_genl_rcv_msg+0x10/0x10
[  778.986250][T16179]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  778.986280][T16179]  ? netlink_deliver_tap+0x1ae/0xcc0
[  778.986303][T16179]  genl_rcv+0x28/0x40
[  778.986323][T16179]  netlink_unicast+0x5aa/0x870
[  778.986347][T16179]  ? __pfx_netlink_unicast+0x10/0x10
[  778.986377][T16179]  netlink_sendmsg+0x8b0/0xda0
[  778.986402][T16179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  778.986420][T16179]  ? __might_fault+0x20/0x140
[  778.986457][T16179]  ____sys_sendmsg+0xa54/0xc30
[  778.986482][T16179]  ? __pfx_____sys_sendmsg+0x10/0x10
[  778.986516][T16179]  ___sys_sendmsg+0x190/0x1e0
[  778.986541][T16179]  ? __pfx____sys_sendmsg+0x10/0x10
[  778.986597][T16179]  __sys_sendmsg+0x170/0x220
[  778.986615][T16179]  ? __pfx___sys_sendmsg+0x10/0x10
[  778.986649][T16179]  do_syscall_64+0x106/0xf80
[  778.986666][T16179]  ? clear_bhb_loop+0x40/0x90
[  778.986689][T16179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.986707][T16179] RIP: 0033:0x7fee14f9c629
[  778.986722][T16179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.986738][T16179] RSP: 002b:00007fee15e7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  778.986755][T16179] RAX: ffffffffffffffda RBX: 00007fee15215fa0 RCX: 00007fee14f9c629
[  778.986766][T16179] RDX: 0000000000004040 RSI: 0000200000000100 RDI: 0000000000000003
[  778.986777][T16179] RBP: 00007fee15e7b090 R08: 0000000000000000 R09: 0000000000000000
[  778.986786][T16179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.986795][T16179] R13: 00007fee15216038 R14: 00007fee15215fa0 R15: 00007ffc6d681068
[  778.986820][T16179]  </TASK>
[  779.638728][T16185] netlink: 'syz.3.2768': attribute type 10 has an invalid length.
[  779.773409][T16192] CUSE: unknown device info ""
[  779.778287][T16192] CUSE: unknown device info ""
[  779.783109][T16192] CUSE: unknown device info ""
[  779.787976][T16192] CUSE: unknown device info ""
[  779.792795][T16192] CUSE: unknown device info "�"
[  779.797709][T16192] CUSE: unknown device info ""
[  779.802531][T16192] CUSE: unknown device info ""
[  779.807765][T16192] CUSE: unknown device info "�"
[  779.812674][T16192] CUSE: DEVNAME unspecified
[  779.826783][T16192] xt_hashlimit: size too large, truncated to 1048576
[  779.874567][T16196] syzkaller0: entered promiscuous mode
[  779.880113][T16196] syzkaller0: entered allmulticast mode
[  779.987211][T16203] netlink: 'syz.2.2772': attribute type 18 has an invalid length.
[  780.005413][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'.
[  780.086494][T16196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  780.101821][T16203] netlink: 'syz.2.2772': attribute type 18 has an invalid length.
[  780.110120][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'.
[  780.119053][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  780.129544][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  780.222406][T16193] tipc: Resetting bearer <eth:syzkaller0>
[  780.289840][T16193] tipc: Disabling bearer <eth:syzkaller0>
[  780.313508][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  780.342464][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  780.436139][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'.
[  780.935705][T11030] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  781.472324][T11030] usb 3-1: Using ep0 maxpacket: 16
[  781.576111][T11030] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  781.585140][T11030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.625689][T11030] usb 3-1: config 0 descriptor??
[  782.080586][T16224] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  783.067798][T16229] netlink: 'syz.1.2777': attribute type 1 has an invalid length.
[  783.571604][   T29] audit: type=1400 audit(1771828002.787:1446): avc:  denied  { connect } for  pid=16230 comm="syz.0.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  783.731534][T11030] usbhid 3-1:0.0: can't add hid device: -71
[  783.737728][T11030] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  783.748301][T11030] usb 3-1: USB disconnect, device number 47
[  783.895657][ T5884] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  783.949414][T16229] 8021q: adding VLAN 0 to HW filter on device bond2
[  784.120969][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  784.129731][ T5884] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  784.175681][   T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  785.075658][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.215680][   T24] usb 5-1: Using ep0 maxpacket: 32
[  785.310654][ T5884] usb 1-1: Product: syz
[  785.314828][ T5884] usb 1-1: Manufacturer: syz
[  785.435643][ T5884] usb 1-1: SerialNumber: syz
[  785.446437][   T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  785.454449][   T24] usb 5-1: config 0 has no interface number 0
[  785.543122][   T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  785.742359][T16255] ceph: No mds server is up or the cluster is laggy
[  785.754378][ T6271] libceph: connect (1)[c::]:6789 error -13
[  785.862161][ T5884] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  785.879462][ T6271] libceph: mon0 (1)[c::]:6789 connect error
[  785.887535][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.913946][ T5884] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  785.932672][   T24] usb 5-1: Product: syz
[  785.941078][   T24] usb 5-1: Manufacturer: syz
[  785.955897][   T24] usb 5-1: SerialNumber: syz
[  785.965024][ T5884] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  785.987946][   T24] usb 5-1: config 0 descriptor??
[  785.995084][ T5884] usb 1-1: media controller created
[  786.007020][   T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  786.026529][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  786.040043][   T24] usb 5-1: selecting invalid altsetting 1
[  786.053197][   T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  786.076504][   T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  786.106126][   T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  786.115153][   T24] usb 5-1: media controller created
[  786.131619][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  786.302170][T16268] virt_wifi0 speed is unknown, defaulting to 1000
[  786.315961][ T5884] zl10353_read_register: readreg error (reg=127, ret==-110)
[  786.316095][T16243] ------------[ cut here ]------------
[  786.329085][T16243] usb 1-1: BOGUS control dir, pipe 80004780 doesn't match bRequestType c0
[  786.337615][T16243] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.4.2780/16243
[  786.347971][T16243] Modules linked in:
[  786.352122][T16243] CPU: 0 UID: 0 PID: 16243 Comm: syz.4.2780 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.363088][T16243] Tainted: [L]=SOFTLOCKUP
[  786.367414][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  786.377749][T16243] RIP: 0010:usb_submit_urb+0x157e/0x1910
[  786.383374][T16243] Code: d2 74 5d 48 89 54 24 40 e8 6f bd b8 fa 4c 89 ef e8 e7 c0 de fe 48 89 c6 48 8d 3d 2d 36 96 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 43 bd b8 fa 89 ee bf ff 00 00 00
[  786.403172][T16243] RSP: 0018:ffffc9001d0f7918 EFLAGS: 00010283
[  786.409304][T16243] RAX: ffffffff8c80ab20 RBX: ffff88802dc9e900 RCX: 0000000080004780
[  786.417313][T16243] RDX: ffff888020ec3a00 RSI: ffffffff8c80ab20 RDI: ffffffff90e61830
[  786.425279][T16243] RBP: ffff888030eb5058 R08: 00000000000000c0 R09: 0000000000000000
[  786.433254][T16243] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802bc994c0
[  786.441267][T16243] R13: ffff888030eb50b0 R14: 0000000080004780 R15: 00000000000000c0
[  786.449293][T16243] FS:  00007f6d035126c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000
[  786.458258][T16243] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  786.464835][T16243] CR2: 00007fee14fe9d40 CR3: 0000000075138000 CR4: 00000000003526f0
[  786.472960][T16243] DR0: 0000000000000007 DR1: 0000000000010005 DR2: 000000000000000f
[  786.480951][T16243] DR3: 0000000000007fff DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  786.488986][T16243] Call Trace:
[  786.492257][T16243]  <TASK>
[  786.495168][T16243]  ? __init_swait_queue_head+0xca/0x150
[  786.500733][T16243]  usb_start_wait_urb+0x106/0x4c0
[  786.505865][T16243]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  786.511404][T16243]  ? __asan_memset+0x23/0x50
[  786.516023][T16243]  usb_control_msg+0x326/0x4a0
[  786.520789][T16243]  ? __pfx_usb_control_msg+0x10/0x10
[  786.526086][T16243]  ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0
[  786.532742][T16243]  ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0
[  786.539329][T16243]  gl861_ctrl_msg+0x1a5/0x4a0
[  786.543992][T16243]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  786.549198][T16243]  gl861_i2c_master_xfer+0x545/0x690
[  786.554481][T16243]  ? mark_held_locks+0x40/0x70
[  786.559256][T16243]  __i2c_transfer+0x5d9/0x17f0
[  786.564004][T16243]  ? __pfx___i2c_transfer+0x10/0x10
[  786.569217][T16243]  i2c_transfer+0x15f/0x380
[  786.573812][T16243]  i2cdev_ioctl_rdwr+0x3ec/0x700
[  786.578774][T16243]  i2cdev_ioctl+0x19d/0x830
[  786.583269][T16243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  786.588420][T16243]  ? selinux_file_ioctl+0x139/0x290
[  786.593610][T16243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  786.598668][T16243]  __x64_sys_ioctl+0x18e/0x210
[  786.603442][T16243]  do_syscall_64+0x106/0xf80
[  786.608092][T16243]  ? clear_bhb_loop+0x40/0x90
[  786.612764][T16243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.618653][T16243] RIP: 0033:0x7f6d0259c629
[  786.623050][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.642666][T16243] RSP: 002b:00007f6d03512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  786.651069][T16243] RAX: ffffffffffffffda RBX: 00007f6d02815fa0 RCX: 00007f6d0259c629
[  786.659046][T16243] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007
[  786.667015][T16243] RBP: 00007f6d02632b39 R08: 0000000000000000 R09: 0000000000000000
[  786.674969][T16243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  786.683038][T16243] R13: 00007f6d02816038 R14: 00007f6d02815fa0 R15: 00007fff23f9eb98
[  786.691037][T16243]  </TASK>
[  786.694041][T16243] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  786.701301][T16243] CPU: 0 UID: 0 PID: 16243 Comm: syz.4.2780 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.712229][T16243] Tainted: [L]=SOFTLOCKUP
[  786.716526][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  786.726555][T16243] Call Trace:
[  786.729814][T16243]  <TASK>
[  786.732719][T16243]  dump_stack_lvl+0x100/0x190
[  786.737393][T16243]  vpanic+0x552/0x970
[  786.741362][T16243]  ? __pfx_vpanic+0x10/0x10
[  786.745860][T16243]  panic+0xd1/0xe0
[  786.749569][T16243]  ? __pfx_panic+0x10/0x10
[  786.753983][T16243]  check_panic_on_warn.cold+0x19/0x34
[  786.759343][T16243]  ? usb_submit_urb+0x1573/0x1910
[  786.764346][T16243]  __warn.cold+0x191/0x348
[  786.768744][T16243]  __report_bug+0x296/0x3d0
[  786.773232][T16243]  ? usb_submit_urb+0x1573/0x1910
[  786.778241][T16243]  ? __pfx___report_bug+0x10/0x10
[  786.783263][T16243]  ? mark_held_locks+0x40/0x70
[  786.788024][T16243]  ? stack_depot_save_flags+0x479/0x9d0
[  786.793552][T16243]  report_bug_entry+0xe1/0x290
[  786.798299][T16243]  ? usb_submit_urb+0x157e/0x1910
[  786.803307][T16243]  handle_bug+0x1c9/0x2a0
[  786.807611][T16243]  exc_invalid_op+0x17/0x50
[  786.812097][T16243]  asm_exc_invalid_op+0x1a/0x20
[  786.816944][T16243] RIP: 0010:usb_submit_urb+0x157e/0x1910
[  786.822582][T16243] Code: d2 74 5d 48 89 54 24 40 e8 6f bd b8 fa 4c 89 ef e8 e7 c0 de fe 48 89 c6 48 8d 3d 2d 36 96 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 43 bd b8 fa 89 ee bf ff 00 00 00
[  786.842163][T16243] RSP: 0018:ffffc9001d0f7918 EFLAGS: 00010283
[  786.848207][T16243] RAX: ffffffff8c80ab20 RBX: ffff88802dc9e900 RCX: 0000000080004780
[  786.856154][T16243] RDX: ffff888020ec3a00 RSI: ffffffff8c80ab20 RDI: ffffffff90e61830
[  786.864114][T16243] RBP: ffff888030eb5058 R08: 00000000000000c0 R09: 0000000000000000
[  786.872063][T16243] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802bc994c0
[  786.880192][T16243] R13: ffff888030eb50b0 R14: 0000000080004780 R15: 00000000000000c0
[  786.888145][T16243]  ? usb_submit_urb+0x1569/0x1910
[  786.893167][T16243]  ? __init_swait_queue_head+0xca/0x150
[  786.898708][T16243]  usb_start_wait_urb+0x106/0x4c0
[  786.903731][T16243]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  786.909269][T16243]  ? __asan_memset+0x23/0x50
[  786.913844][T16243]  usb_control_msg+0x326/0x4a0
[  786.918604][T16243]  ? __pfx_usb_control_msg+0x10/0x10
[  786.923881][T16243]  ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0
[  786.930549][T16243]  ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0
[  786.937131][T16243]  gl861_ctrl_msg+0x1a5/0x4a0
[  786.941789][T16243]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  786.946977][T16243]  gl861_i2c_master_xfer+0x545/0x690
[  786.952248][T16243]  ? mark_held_locks+0x40/0x70
[  786.957000][T16243]  __i2c_transfer+0x5d9/0x17f0
[  786.961743][T16243]  ? __pfx___i2c_transfer+0x10/0x10
[  786.966931][T16243]  i2c_transfer+0x15f/0x380
[  786.971423][T16243]  i2cdev_ioctl_rdwr+0x3ec/0x700
[  786.976365][T16243]  i2cdev_ioctl+0x19d/0x830
[  786.980852][T16243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  786.985884][T16243]  ? selinux_file_ioctl+0x139/0x290
[  786.991076][T16243]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  786.996085][T16243]  __x64_sys_ioctl+0x18e/0x210
[  787.000844][T16243]  do_syscall_64+0x106/0xf80
[  787.005410][T16243]  ? clear_bhb_loop+0x40/0x90
[  787.010071][T16243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.015952][T16243] RIP: 0033:0x7f6d0259c629
[  787.020363][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.039955][T16243] RSP: 002b:00007f6d03512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  787.048338][T16243] RAX: ffffffffffffffda RBX: 00007f6d02815fa0 RCX: 00007f6d0259c629
[  787.056284][T16243] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007
[  787.064228][T16243] RBP: 00007f6d02632b39 R08: 0000000000000000 R09: 0000000000000000
[  787.072175][T16243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.080127][T16243] R13: 00007f6d02816038 R14: 00007f6d02815fa0 R15: 00007fff23f9eb98
[  787.088084][T16243]  </TASK>
[  787.091364][T16243] Kernel Offset: disabled
[  787.095667][T16243] Rebooting in 86400 seconds..