last executing test programs:

9.496300105s ago: executing program 2 (id=5480):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.085895379s ago: executing program 0 (id=5481):
unshare(0x68040200)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = io_uring_setup(0x1b7c, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
r8 = getpid()
syz_pidfd_open(r8, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r5, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8d0, 0x50}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x34}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd4a}, 0x29)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000001050005000a000000050001000700000005000400000000080900080080007a310000000015000300686173681a69702c706f72742c6e6574000300000c000780080012400000000759cc3e2eeb6510e4b1cd922889c7536ddc7088b6c945152060fb577e38a3c1f586a3e5cd5b7efe8b1e8109b1215249248ce9379f841ee34335885397de3932702f221f7209933fc3f6efaa5b2e4a175fd4f4665adaa8416af58ba84015af92f3e71b5a2887274474aba6457220f68d461432aca9f2f4d8bee7cc4272ba33b8e1d95eb18339c50d43227bfa8f9f302d533a192aba0c9c7c36bfcd2bf19cfcf54f6422593f4a910dbbb40ca2555b022b0aea35d89f34576d93"], 0x5c}}, 0x0)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800180, 0x0)
unshare(0x20000000)
mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x3, 0x12, r11, 0x241f6000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

9.02689225s ago: executing program 1 (id=5482):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000140)='1\x00', 0x2)
write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2)

8.603682884s ago: executing program 1 (id=5483):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@gettaction={0x17c, 0x32, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x98, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x101f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20024004}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fallocate(r3, 0x11, 0xa, 0x200000008ca6)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x90)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x40000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSW(r12, 0x5403, &(0x7f0000000100)={0x68e7, 0x89, 0x7fffffff, 0x0, 0x14, "1b10b9ad000000aacd86279300"})
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e90000000000000004000b0051a96e11723ca424b754c6ebe128c4a9714932fbf0d795eab52fcef2bef616c67e96e3319ffc25454206491e4276967f0daf47b54b3d15a9b3586f672e0a5ecabb6a16feb0df7992b8a46f136909e103bb0635d4cd1884c0490603"], 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000006800010003000000000000800000070000000000140002000100000003000000020000000300000004000b00d311624e2b72c21281c3ff42acc76ae9dfd8a2ce20305eb1abe0f9b529b34ce96a4df9085a81be06992a34efb9b5ca4ba0ceefa2ae7b6a8d82416a733152c866bbd9bd37a1219861fbb08448fc1000fc005129db362f8a560a4fa5a0ffa49ee69dae27850f11ac011831649ce08d2dd12c5b2304fb426007b71c7d4797ad60e456acbdd9bfa5fdfe3700ff293d7e0f6236c0789f78ca96c8d00b3bffb2a464c0503cd9bc863fd869272e2cb9e01ef9401f1440f2ff5e02e16c970f818074f89937817678b85702576242ef80c09232fab33c00b23301ca9c0a64bb7d767bdbfbe2880472a833970c88dd3e70ee539f49aa634f613081b941"], 0x30}}, 0x4000)

7.846814497s ago: executing program 0 (id=5485):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

7.716000773s ago: executing program 0 (id=5486):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @mcast1, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0), &(0x7f0000000480)=0x8)
shutdown(r0, 0x1)

7.576563447s ago: executing program 4 (id=5488):
syz_emit_ethernet(0x56, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af25, &(0x7f00000001c0)={@host})
r1 = socket(0x10, 0x803, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d068994114ee6097436700008800fe88001e000000000000000000000001fe8000000000000000000000000000aa00010000000000000106000000000000"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab})
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r5)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe4)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000008000000a00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)

7.506509291s ago: executing program 0 (id=5489):
socket$nl_route(0x10, 0x3, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x10, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, @echo}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000180)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/181, 0x47}], 0x1, 0xfffffffd, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

5.552852087s ago: executing program 4 (id=5490):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0)
write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x86}, 0x4)
r1 = socket(0x2a, 0x800, 0x8001)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xb, 0xfff1}, {0xe, 0xfff3}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x80)
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000200)=0x9)
r3 = syz_open_dev$hidraw(&(0x7f0000000240), 0x4, 0x521080)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000280)={0xfd4, "1b5ad21e113c7654d87c5c5ad66da4e79a2f480207e7e450238391446957f25ef98c08cbc28eec886c6060dd5a3e5082c6c220d45dfe7b1f048163d6cd52d5479d472db510f785ac5e908acd93e5793d976967e7dfcf9c6a74a3ca9d3f1eb4096329df1b1bfd4e46e0a990eeffea717a6e630b858f4e8f958f788ecd87be927e1607bd5e33d816f487e5ec31c6af9c05d9b8eeb0f29e5d7b16ff4ee4fbc1a4d2bc9578ee5ae42395c0abace5455e088bfc02fa1699964d42123d408aed3c8b8a6c582c0fd6c0517e151a794677ac5b1bc0986109e6b568ee26940d0bf0659ba63755da5b98a53285c7cfed7d3937a2afc74312ea07564fda4e4ddb8849a94dd4a8cfece407237c5268dc06284fae10992896be2d3786327e712fca8b993dc0d28cdd1bbb4e7ceec583d4c6271e0d95af964d2d455bf95d70fe53e71c0fa4f6a4207e651db598bfedec1c4de17fb743d03a140906bb3b04d9712fcbe2be6ab5863530bb6c431acc3b31dbf380554bae6ee1e62674e35f7d8b87da4a044c696ec6f6a1980460a453236666cf611e9e2efd867ce907a8986f503904146c834946a3950921f605450978fd3343bd726747daa2b0bfd01854787669e0ac1a0c129e971d39652770a0acb678a3168d2ebcdbe366200480f7fdbdb031db4902ff6be9ff1cb0058f0a91b7f31e6bae534ab98fad2c7b9486f5733c71fa808c1450df6b39c9f5d36babdad1419beff6d6cdde9caf66d2e29ffadbd59a5c63de679af21102ffd7f67f9b4e21de03f6a5f59ae5d496aa0ede7d285ac16aa6083fc499c65abae2592ad398cbb1dae474c8fc4cfb66b85a2ba31aae954ffd159af56ded622c5e2b0d331a433290dd56ce8aa14f625150b67d33c353276befbec2205dd848aaa7fbeab1e903cfe7eaece7b7a5439deb35891776f603dbc457a5c93c9cb4f3e6cc44b432f9ff2d45cee0c3d2a852fc86dd0dfdf000c6a2af7e1cc8d182db2771ab0482cbdbcd669a591ff9cfac057d8c0cfa28bef475ff353c2f07719d4cc03af1eb247f38590df144961e0d10b29b70c2b70b60f72d670ccef26c4faa14ef8b4c42a469ee6a1908fd1ca665d172586b683bc30c6d01f91de47fdc79e3135969080793e1b85f4c59ebb5d5a95614f60dd19b60e1dd35043c47721101965b368c0ceb856a76225ae08839948679fc3b7621fef444322ae7a5ff28c0fc11a699d00e88470fab3d2ae7b7d91bc3451cfefc55f5ea3a6ba175b0010c205923df0f35dd2ed238824042eceec384e93e6b6df841f528300de3603fe63dd404c74a39420cb4ee352b8ec2c9b173f2abbc54f8c420e04dbaed350406b7feaca590120883bc0ec869331b92dde05a0f4926ce8a9552912bf7af3a4af221346afe1b15734483ad932d1f99c9239ba2fe698f3c7abdc16ed42c27d1c85e2a48aa8a9059f83f06cbd802663c37e00a013629c1125cc92efc01748243e38f72dec9c172e410ef89a1a1eb7c0daeaf9687956aa7a0ee3cd0280c14d9b61dfc8bc7ffd8a8c1fdf52a82a0f0eb6fecf85ab220644b4feae3b888800b60ea5fcbdb09c6a8d65967753f17d25ff00cfb2941ee1e96c9f0434837e16be60a8613c5431ab8825d372e00fc2dec69d6bac253b4f7b215f309b4a6dfec0c5061dc01ac93f703498305c528da9b20fcc8d8943b245a05d150c2b0f29c385809e3c0debfde4b6860991f8157f02e1468fd1fc5e15c85884df5f263583a3a418bbc5b86819ca27a6c216f7932903d4314fb7e2234de08ec1042b901a9cd9a248930fb5e20c865df9b1d8322460275a0ce2c5417973fee1a52dc8ce0d54c03bcd9c808ebb5fcd3d2b905e88307cdb0c8dd41e8dd3caf6cad75c6ef711deab16095607c43ebdf9df932b668dae028f5a7456de7a76192a9d40f8a4432bfad35e2971e537bbaeac702cb793adb36255df16f7679f35de8826f981b2fc5cfb003243f61e929e0a81e6802a9225a4b50cac3244556dffe7b19c40e975345ff9b5c0ec99fdaf70ac5c5f948702a95c19265578373bbbd89e6287e7d45bf7be727cee05226b07e9363e4561778ea93bf7be34703460da89599fa0eae7d971bd74cda68800973d0c6ee7ddfac2d052741860c72c3cbff477545208cb9d78f67bb28b96d51f75cbe0871b30db35a7cfb0d5ebccf4f18f2c50f94bb119cf0154843274f308e03305bce95eb94aa65e4109ce4146df0f45ae5cb0f0b1cf9888f7ed699f8a877178cdafe70196bc98a3a34f4cb7dde7f2f2a9fdf8edd06886e31259b4ffd21ce163545d2aa3d3464698283388b853749d4553386bc21f0c3ddd504093327d274b25a08653cb143e17d2c1e4e7152eea14d1099bf683d880fa2985f2a745cde9cda62536bc67af16ccf94496f823c4dfa388cd252bde62945975b0d4e491271b76ed3879892add054d7ad34bafef92dd05e21d9bf82827b1f08bb32caa0e7c9528959d3ebb0527d6be5ab98170438443e3bccc684bea092d2b5e2ab072e935dd4a0cdabdb6d496a0fbe9cb7425648b536298c97e26377845e760a6f9845b6c5b210f6b2a35afd1caabb716d38713cb72eaec812b8541d39899dc83d4ad625a02a4b7adc826e89773d6902c10e13dc0da3f63ac0b9075c29ad828ce4028fef070f7b8e4a68456d79230b91782711f0cb4d232dcc84c0c59010f14958cf3c475fff51bf0a30598fdbf6ac60dcd2bafc04135c8f96b8d2e9270ad0ee490900d1e74f1d90fb785c61703e777d79871f1ca14b8482c4e6159a8a7bb10154f6a564d36b4eb447bd19bfb2a380729233ab3b82e83061306f1a0245ec839d7ce5be23388fba880282ddea85244162068294640b0fa969584e04746014bf2aab33741202e31932d78c49b8e903fd4aa33e6d8517d0905e569203ebc6afce3a84de10369bdbe6a720fbc7b98ffc4809c9ea7c8db90cc0b88b4c9d68ab9a42d648b913dabdc1a17e8f013533c9668fc50ac45749e96c2992f022a3fa434fccd1bdeac7802d05ffb443326c141083297e9a42be5e3f1f01409dde23560a693953d4a077417ece7e7efc626f5570f5f502e53ce4a937535a378b1a3b758963852b3675cb62741ca0378e07d13db2b24505e31487df511779bc70895663e9df709d18c98441ebb881c9546f2349fff3fe343adf7cdcaea8c0823a03de09838f78857cc55a7daf344239c76c215ee3c218a2eced37acc4869f53476ac066fa27bda18d7bdf7201e672fcd51ec9f6e130a8089a2e70c20d3b6feb84947373fe805f0a98ec51de3c85a317f6e93fd43f9d5c03f582d83e07f9fdc067a27e42d997b77bd36ad146e0436594a43c9e1ad49145daee4df25719f88d68024da2c8067e483bcd3857b41d8939d56e5d6b0d0a01ec841313327db757919697a6aaf172878e9816e0f884114f16b4e4f8dc4001c5dba78c46dd2f702d969137507fa8df0ebd324cbc6185d382cd37b9f9a4b3b3f26547394952d8066a5761f19564fbeb353e290773038eeecca5c324b5f7cf87f570e9c42ab9508f0ee54d4d1534b359f13d56047627dbdcff67cbb29493b9ff30f0555836c15f910bc4d9f19a564868b4b161acecbf1ffbe1169acca4cb31a572a43628ad9780be856836e2eab954729232fcfe3f92442d5bf0b6a89d5425167ef3f13d4427d3c66de7d48711eb85c0c33ad9e8b3a510cdc182ff43458d03671bfabefe68cedd5589adbee3a9b0fe2f93bbf10e6360f43b322a65f54c068bcb03c9eb793abd6f84ade79067714831bcd93c7063234acd589dffb1925e6039edbb905783926db290d208a200826187da439c24609f209af012ab25926c83480f6ed4c7f6a3054bf1fc15be595cf4e70280c3233101ca80de051e9a935da9757f14b3d86bc6d242aef00c43a2480c0138c14845893c6b381e0d8de2b0bd6aa5a84ff32392e81f5f2e3737f2e5ed0a1c1d855b26ca2399357b314352e0c3d709faaeb9957633cc1036749d87242208b410150fbdffadee82393f4ebca50633b84870c76ddc7b1c41eceedd2bba87a7d7b58f046fb698c1d60808a7af41a86fcf47d86526c71f5f69966c15c96903ab872b24bc8839dddbcfc3c88682ddac9f922fd79c561f7e256d30ab1eaff969bf040b2b0d62d8ca19faf528c5de7aa74587cf19dc31f33b6252c7565e675410a139d1a53664c255d84ef5f666acde9e9d3518201d8a7153f63a927e7aad73343489c757a9a1ff4e5823d42bd2841bc469fee9ef05d737647e82d76f9cb5413e4e1cfc0dadc9b8644ae392c4a4f03b7e880dc71468d58b666bdc65b59fc4322f6549b366813fdff46ef3e2fc6ef0ec89a1bd0f83cd95701dfc9fa0d29234e745bec23e39d7c10879c2bbdddc38c23c1cf28fa981fed4e7b9fd7d911e8d9cd2dab98da985c6cbe30456f94053b98fbf4d41a708a5e45ca678f753e2cde1984997f0d883f93a1113863e5a4bad07e26e343450fad05be535d15e99542bfe696c9601112562d49b96b2c252c82061c64c4e8ed683ff1c4ba7ff9edf67dcfc4cef662c064b0af2c4e5994c2f134955a1ace2140855cc6335cd91322ed7a3b449568f9dccc9d4122cedd147326cbde370fa7abf008c914323dcbdbddcd1bcbc39f563f626d7255f68fa8131d71fd6212e14a1773cd88d65315c2617dbb59b67a4739c0662506338c874ac005bee10db3131b57874b8872e78e3e53f5feff8bac84de071a43dd3a6ff963b9ddaa5bf6d269291ba3dd7f2114387dabc70abe91fda0b481e2b50f2c6881153f11c8b1e013d593c7f62dc9da858b40363853178469f7dc96a5f2d63ccaf7f40ae7384251fc25c20a1eb863c8eb045e09775cfe9352c0476e945660a8d5b92245397d8a3e8a46fa04e4982eccfb116b2f4ae40a64b1c4ef4254466876fd3e468d5a7e80e8b3ef45f3574deb131bae44403e39c2913bfa5586a3f2d12549d13a860f6f65e2592f6f521cda3652b31aa123f77dd8a6cddd9ba7ecb2b9af41beef5b7b205979b37e13bebc540b45752a45cd3f92d7e3e763fb6db49e10ff1278634740dd11b48454310d21f836eeda91b6be693da69be4f66663f40cc62292ec63b09148bc17cd58cb7de5a9342aadd6315bd75494174ae64e1aeb74a85bccaa8d2bd4f3550da5b599456e53fb8c851ee7c2f57d22ae3336cbf8633c85edd884d23f64682a06932291f8679e2faf83dcc7be04e46175a07081ae3e0245efd962a079b745207ab7249f60693c665df751490a2e4b6653fba7e292ef8ce48b8b3b56dac3502fa360a6a909c2ee94ae4164bdcbcb874caa7d4d6e537b96d19c34541239f4e91a40b82f3daa9640f89f7896e7241b521f5c79228f707472f7800c1e46c6507973f51b92b689002cb48e69b1a8cd51e8f01e38b9e0e4236cf33783cebf08ce7428320ea5853bf30164544beb8b9634cb086659ed5e1dc9cf4959adb7b639d5250bdd9b9c92666cbd20f8505eb8418dad148fb723982deb680f2aba55f95eddd4c6b708950dc1d8744b0b618f1bfad73ea9cf54df860f7a74977813cfeefd71e67ae5c14e9e5343fbaf6d6c06d8c82e63e3c68b6129ac3c44d88fa8f786a56850db43eec99c258bad235a18571e678465e72e1b7bb672156858dedf0c906ad2d03b7a299f7fe8b0a9577a16db619f2ddad4899b3d3d4efc991b6fa6456fa4f41dd948d03f577d0bef5fcc90825d8986e37c6d110f9dd1f0f6f9de48aaec20a19580a99"})
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r1)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x44}}, 0x20004840)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001580)={'tunl0\x00', &(0x7f0000001480)={'sit0\x00', <r7=>r2, 0x700, 0x7800, 0x3e000000, 0x8, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x64, 0x0, 0xd7, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @noop, @ssrr={0x89, 0xb, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x1b, 0xba, [@empty, @broadcast, @loopback, @multicast2, @private=0xa010102, @remote]}, @generic={0x82, 0x12, "b92e75c61b044abddb4c624500d0c2c6"}, @lsrr={0x83, 0x13, 0x7, [@local, @private=0xa010101, @remote, @private=0xa010100]}, @timestamp={0x44, 0x1c, 0x2f, 0x0, 0x4, [0x1, 0x7, 0x7f, 0x0, 0x8, 0x800]}, @rr={0x7, 0x1f, 0x1f, [@local, @multicast1, @empty, @empty, @empty, @loopback, @empty]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x6, 0xd, "8c87c59b42b896d9908adc"}]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000001700)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xd8, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10001}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x50)
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000001740)={0x2, 0xffffffff, 0x6, 0x3e, 0x8, 0x80000000, 0x1, 0xee, 0x3, 0x6, 0x5, 0x9, 0x5, 0x9})
setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000001780)={@loopback, @loopback, @remote}, 0xc)
r8 = getpgid(0x0)
sched_setaffinity(r8, 0x8, &(0x7f00000017c0)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x5e17d4e3dcefce03, 0x20, &(0x7f0000001800)=@raw=[@call={0x85, 0x0, 0x0, 0x47}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x8a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x84}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x1, 0xb, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000001900)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xf, '\x00', r2, @fallback=0xf, r0, 0x8, &(0x7f0000001940)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x5, 0x10, 0x0, 0xb}, 0x10, 0x0, r0, 0x0, &(0x7f00000019c0)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x94)
openat$dsp(0xffffffffffffff9c, &(0x7f0000001ac0), 0x480042, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001b40)={<r9=>0x0, 0x5}, &(0x7f0000001b80)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001bc0)={r9, 0xe26}, &(0x7f0000001c00)=0x8)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000001c40)={0x400, 0x22, 0xfffffff8, 0xfffffff7, 0x1000000})
sendmmsg$alg(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001cc0)="b5ce446502b045b9e5dbdc0ff2fb37f6df57e43d7b2c2de3248136da875a744465d2ae69a6a8778a93a8d96121a275e0ef0a370cb270151e043bcc4cced81e9e335977f86b4f63628013f03a14c8dbcf7c90ff26f1cea1333e5dc9b1849a005474e85d0986aef1528148e38c335d2200f05ae58c0ea50301353ea65605fbf3dcd8f721e750623cd9eeaaf161180ab4774d44be1ddd862bd58ad58a28c8d6c4c1b9e183d2e78cefd65e0ae68cbd6c13cf03b1f348f471937e975f3740a5b3cea50b5103ee2032cd59205f0e5b46e97bc8cf6b418423f1d99576e8f9e477cb4567f7cadd4a270cdca6a4ae4714a0cb127f3049660760f34086553ddb1fbe0ed3263e9a61e5e0e96a109882558f73d9a47cae93ab5c29d32630bf633928ff5269f8ac3bd269857c430f8848ba98b422d57148dd49063b62071a8b804d8bcd95241d340a5ab14fb84145765fd31bf4ee58b854a979c8104242d02d4cecad3075891efc8ee44b121cf58c7e793dfaf26c562cf8803be830ab93d17279d7af0b13f55078e87c4b8dda9a6459274f44dbbf7bf3210d849ac9d7728f6016722a3a488ec3c90380a0d7c4e6e3b3d665f9f328f3d699901304fd547d1dfe1c7049818c9b1ebff0d46cd380aab7978f95c25552a7aaa4b649a14fbfa2255b5be459f3fd94b0b16a6f197606fedd04caf8a5a0675016b42bcb3fa618661703cb2861e8c4f96728a1ae74695350587dbf6a078b7704cd3cb2e9b2b6ceede02e1a2bff0889ca642fd7f8c48ac78b29a8a5648477a21dded2f20c798cf84f6eb02a043255525f64430f7d9d46b6b91d52b2dfcf5f545f2c948195ff4061e22b3dc88f6462b2750e87980e7c7956fb27ac0a5cdea8686c6876e1cc60773fff1a0db453c55467b1bbfea6e9e291a83527794cdbf95181f4e55baff52fbca2f99f9f25741e1dfa5eaf4c9905f0e92d3af2a3505087f216170b54c929726e78f725407c88e993f47c67bef69999b3efa7ff65e2a8a3a7a38d8c79a57de212d781e0f63de59abd492f80a2c59d9a038c9890d04dbcfc63a774e1f46f874c9fa1dc88b28ef2c07c642909f837fdb2cb96efc521e957e6cefc93fd181ce9a2e5fcd2e7b8b4ff10ba591c101f3fa00ae583270e3f3d7672e9845199d0715c1cb5645c0212a289dc50bc0a15a9af3c3386689ff41cf83ea4fd68d290aea916de90873d0f5a2dd19dde337a9dc7f56676e9aa727aad9358023d062e23a232f5384fa086ba8be5335b30116019a4484a51dcba4e8763c84d07e729d8fa9848ad254498c2c1a7c7d8a98f769f28efb56045e8fde76fff7341680d75b3b358c66116322cfe683f8ffe81fc7c35139a38143b8f6405759e7e767a56e92075e7fadfca4546c119793d91b4b79df40575f6f00abcac3bdb074682c15a383c508d27606771751bf8a74277f744f26a3ee475105f1186858f5e1787e6e96f3ac2990c3cfb0749b3ede19132d9726a1b53eeed88bd2390b469774d7655626104c1c668e0f0c987a98369239669707d3402043f8ad323b44160cc0a482944a0d3be4075efe34cec7fa2c0455a2769f7cffa315c1e7f32e1dfbacec5345d15e200b74fb1a81c44d78ba195d992618b076b5efb9bf67f00dbca2f60f06aaafe4ef0320bb1c1d74a2c29ffb267faa25a478d1b0916e5f3dbfeb51574879637fdeea333a985b5a1a7ca2925388ed7a31b82843a4b6743db6c2e54aa739c6ea6e969e5abf566988b7b8f7e122af143cae107a41f1bd1dd70727b6e3b655436e335ab824fb56a25acacb64cdb007b649fbbb9e889ea93184a94ac68be49f7c96a0e5bfdbf070de87ed708abc50ce6001bda66d7f9b933a5efeaae4919cf8a35da7cfff694f86bcf9a94a470aaa65ce8349e91e2a6876302e47c621879d02620f910e45e29728b8c2a74ff3df3efbecbc48e6daacbf63d28bb793bb1a18c182b2823fdf4e8171bff037c04c8976fced5eeb632f21ff7f0bb8da06ce5cbdf0b4c7ce6dda13bd057b7ace45cdddcd2eacdba6708649ae247e4483fe92046f7f00cf80a2cd73bc520f5767b190d10424624756a788c6a2810fb9e4b1a45d7b8909115aa4aa6266d40a0927cf3e9df8fa6f79eb849828af43fb77546ca17e1da77f92bf3ba023d67c9f62108353c15023dfdc55ad4d4720415af0daa94254b4f42e471156e6c41504ba94a769214a74e4779c6e6446f97f71b4978e3dc7e494482615604fbdbbef498fdea36acc7c256613fec7771056c8ae8758c47d07f77f1281e436ddbe26fcee7ca7459985abfbc481d64eb7b22429f82ea9db0fa8f9c0b77a5b534c93043d733392f042d299333bff19e933f50e3d59fd82294306d40e4e6243850baf3b987d8e1841449ef4eef7574bcf91adfa57b5a2ada6125bda9e71a14115b3ac7a40fd12b3135bf8ce08b521875f0da270998e39f27575ad3dcd677a33a576a30dc1cd02c3f75d7bbdab04af11d1d15a9a1c164c0a06d462349d0fa50f5eda97b8e3bb61701a16fc9c949d51a537381d60c544dbcd21fbe4ab09c9975fbb3fd087df7bab657d8d3b95dda27e5fff499a8b8a893271678ca3c8743bcee6230cbef65fe90a7c50761efa83b884d435ea91af790d2087065a4e72d178d457598f9c0bad6b095214293ab80f355c8d9fc5565cc03e6315f20c256a4b786b32cc0e93a29508701c2a65bc09b820b927f1b0bc3e9777d2224dd4e46f81e69996e9e8ad3484ea43a6dc704db149dcc1ac3ca32617a1c8abc5ee72dc3c0750f6f85a05744513107849fda9e19ac68b2dfa27e0505bde2378ca56ce76119f8b77a3b72e5c23e2497e71b2b20f243abab655a6c4a8928ccd75ecdac5ba29ae5fcc7d7fabf5079f97810a5fd4b22f5349db5b7fe51435ed61ffe57ebc2b6c1ba55ce257f4abd9b2c49c338eb2dcf8df7c10edf743f68308df25802711dab71ee6b3c8f499abf16f94926a30a61aacc2d3b5ba6acb355e4a4b505ed8f1e43ca2035b341fe61e782c087f311a6a2baea6b15529f4a6c6bc5d086be40b668dffac2d8c7dd476996b618ad30a8f1346aa4ec304d9970308132459affe49f24a5041ee462967bf6cab782756859d0a4119d5a5e5510dfa4f65e31c431813d477ccc3cbb10879eada22f62e7fe16f642ec800993735b01c39ae3d31ca4349a693a24230d67146caf49ddf01c6691d2957a94d8ea560e7bc3c897ddfdb97b4c9860d729cfe4b61460031100ae5c73179ba992105ab9c0f2d964ccd3245372cabaf4091049ae10f2c5f6532f0151331678a34213d2cabeffa754557fcc701a93bf09a5049afb6649a51c8401ba32ceda2cf85bbcdf885aa4f33c807abaea94ea2dab7ac67e3148502841919abbb7a75d59e88ca03a8826c2d46e3bcf7d5913cff1535783e011069d52ea628087dd96146fc5b921a8d7bb76f0213f4940c4a9732dbcad60da937d6560957fc2ec5f07468fcde18c6b28c14095ee5a898ae6cefeb7d2282a9fd3ee09a05ecc0fc7e67415e9c7702205940cdd047aa61694461fd84ce6a306bcbf34443bedeb6bd4df4a905a05bd30b58c831f2f98c05a134043df188e99fd7158f5984e0c173c186a808028acfda44392aee975da209bbd0c43a0da5c1fa17fe05918362b96d358c42d10e3665cbcefec2d15f782d98abca6bd1a78919cf98e0e3da3c1e578ed66e89c3b8502b5516af468b1d3cde85c5f88de297dc7de5883b78219f56c36f98a5fe7df0c22e0177b362f9a938617b09813a36a141ba2e26e5f087180709b8592b545419f7e4a1892bf854606837755d88a4eb4bfe1b3245e38215635061b8870e4ce0b1df9eae9bc813f30bb443a35c8daef26895aed1640ac26232717aee17d9c8c70b9a13d3e7d3e1d5a75662e52cd079cdcf4e48a48e9e2dc7673ba9253463c375342f1d3d454563064c56e33866bb97e6f355e23a2934c077ae9e61b36c36d10e8f0b6e9f7538138998ead3edb6e99a8c7fcf4e9b9b4cb315b8ba53d0899d302858c5b66b215dae11db31affb2788d5e974a088969240458dc5fd573f5f14d7953950d6986509c89016b59c376a7e234349b5c2c84352009c8b5e4cd97b9d29f7ad30fd7381143aa5c7dc2405a4dfd2aa1d4163229c68c28f491e6b61901cc2a1c0d562e75ad2c5fafc6d6ef67f6ad48054a4482e514f9092b628b843287a6647aad1a9d93acb8dd1493b680d57204cefbb798c0681a04d168724cdff6ec6f38490e16fa289f676ffa9162e62c3b916b7dc410251e4f83dc7044d8e6b530641b0ca2ad063320a559cc98b304d318f0b06510f052ad67d1bc91f944301fe572ff0e3c16ea8fca548c9d684470a61c916cc8bb19e088cb418bd8f75bbc05c1e2af928f6d16ee4dc1a836d531bbd14fb8ac4f6c30622371491f1d0a9e85d491c31db99d08383ff6a823877520308735352d92e22e0adbdf4535d80d8395dbe128625ce199006f17e4097fa3d6808ba3fd727ad6f2b056186b5ce1871495981f7a0d0e0730d32215f3a220776b7172c0bfe7a2ada950bd84ead020953fc3564f92e8ce080096ecda7caadcf84be7e3bb65d0e1428b73204b2fd1d381c9b00b355ae4db1d97af3c9f4a9f65ee89fd780990d94d64b1f86887a8d8f06b2ce879e281d20afc0f28b7ded5cae2f3bc2dbe407e18dbed56d2646b41fc8fd3b33b74b7e6fcce5ffada0e2fa70278d5337af9fad59889682a2d2b3cf078b4b51726ee42a9022569f9575dc7e89c003e26ad8a0d5dbea4761ab500d129371cf06885020e870cef403f05b679a2ade48b3d25f08d10325217c1aacb8bfe220d6e9056f3f5461d1e48cb265e5c17dfc3864b5e037589ef5f51ca52b43b493f9524e0df195ea583ffd53da4c531fa880ffb86c60e257d125816919af8266dcf01f5eb6062c039137caf1730a05a0eec3c7958b56a3984c6842a3484cc0de34460c1c6e2a1b55adfa3f119c48564f68b4f95c124fd085ffbb8f150c175c8c73e304ca4a2ff4433ace7a39326a595e6579fc65a94de272a871d4f7ff53cb1e7002d6d77efb465a4f9c5f68ae97f1d49568f455389ae7985e1b3661f63f413010f74c4b5296668331ea6a06252cc92aceb0a169b43627fae26c7358f17a6e1a359e0d924dcdeee296960527c4dd6a52af6cfcff43b9df3bfec1cdf93ed6c883633a729bc5d0a638d1e6f6902507420189c8b52df367385610ed9382854f1a0e8efd71e43511fe5241b7fcd68b9a075e47f15c7e0b22ed20bf4ef303760160f501793ae815a57d14237af604ed191a04af5442125739698eecbf5abbaf30fe68fe6fabf0f3396929be0a71e2ba49bb01663e8374151859e28d5b696a170ddf0c0d712632b5a4378166e03e8c573d6696be8b69bbe1762bf2bd55a91f350ab906507edde89b0e37010f9901de56bcfb95cc4f879555baa1a36863b5169ab35aeef1cd759f65fbf085d60ff4b165c023fb266fefec22d32f74280825898cbda746b9c5637ff1525e451b823d65e47f57bac864c9d06e31c5c070457b624e1b917a2b9c9830b69f383ef8d4c17b9a21d148aae09dba3b558e0fb16879a962d8d6598cc51a278cd781c878678d28f861bda3ce92efdcccd5e7da4c9919983688ac9ad01707e4ce2c1b5dffa352f35eed9b8bd35a2d1d372e86804954e700a1a5d90c25763d5781968ddb60d13c1d2194f27c6536d451d13a82082fb327271e0e0e5f0ab88c9165bb02b2127aaf33a67a2d779cfd3992a397fc18a6e849483bd9944396cdda2fc21d79bd2a88472c194abb97da1814594f4", 0x1000}], 0x1, &(0x7f0000002d00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xa}, @iv={0x20, 0x117, 0x2, 0x5, "f9d9775515"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1200}, @iv={0x98, 0x117, 0x2, 0x7f, "3e61c0cc0a62b1cbdd3c506b6e08a2cb9bf8dd7bd9f3c48cbb49c155ccfae1a0a3fe026e31ff1d0dbae27965a3f36c7aaeb51e23ff73be050a1e8bfea2b6eaec63bf3951a2e3ede6db4c26434ebc07e93667bf341dc253daaabb87e7051b0ee7590eb4c07dd164baead680a2fcdac91da27610ec645f5f2eded5758773fe51"}, @op={0x18}], 0x178}, {0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002e80)="8f453c15c3b937179d71b0973cf9cd3b02c99a2b1156c4640673687b442ebb201158e2535176f2ee0c7e54f4820ac2f83aced365155de3397d8e031593b9c667c8533f65d17b3aa0776090782a878549deb34f693d629016e6f3c710e19439daaf6f18c6f2dfd0024ca3dcf3c16c7e8d06fe17c2e3f490b2347f71ba03809e3bfeba17672acfc6c8b9e8ec62af4d4c49fc8cee0e9b5454a17452481f36d57f47911e638cd652ed1e468bf57cccc23fda64ef09c87dee688521fd35eb3701600c81fa4fb6c7d82bd5a8d9e2020bbf9edf66251a4fdfb2144580bac937f707c38c3ebb40efa071b16e8900dc", 0xeb}, {&(0x7f0000002f80)="c50def13946b3ab601bef540021487bed18c0e0e957f4ee4d3427ef02210840725516461d4c2319ef621459b3e7ef5ba9d96cd9b4c03b6db03c5d484bf4b3dfa0db556408dd02d0a342791de51c6dcea0e5747abd9eec2a5203b9d53071c7e706fd37a892558b5f9418d0dbd7ea3", 0x6e}, {&(0x7f0000003000)}, {&(0x7f0000003040)="252f4923523c9eaf0923c00cb56184a3aa8068ca58a0d5e5cd167282f7ec129b82d45c282dfd90d67c92919f5346c0707cac12e44c6849ff7ce14c1784e16dc12da0874e52112833ae3f303cce59bee733", 0x51}], 0x4, &(0x7f0000003100)=[@iv={0xe8, 0x117, 0x2, 0xd0, "df09e9e4ebc6552cb4fc95ee486c4b38c49ef75e9da58a3097798e1788a5353859a5bf3e5c2b0de808f1b547bc2ded3944478481b85d8f861f5ce4eea2dfe26da60e96b027d469015b8e422058da0031b3450d3313bd7443f9fbf93f873576256bd6fe5daa4b740d6c4b0b2af0d214e39975e8397da1a2b2dc82a5126a9b8096393eaa21bd9d09901f5d30463df69987f00d2f9c52718256986d582938d26ee5e05ef2ba485bfe18b79fe912ec10deffbe54bb9cef860b4b167c37850e8758af072b4e517c2dc6b967f6fbf75bb9651e"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x40, "62ab8c93ec0f4b57061b9affd54e274c84c4c9da78a768d2606395bd2a6b0217653904f0438fd369167ec9d7ad26326d04d8d0add3ca566379cd534477df8a7e"}, @assoc={0x18, 0x117, 0x4, 0x800}], 0x188, 0x40}], 0x2, 0x6de5805e74408b21)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003440)={&(0x7f0000003380)={0xb0, 0x1403, 0x10, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000034c0)={@id={0x2, 0x0, @c}})
socket$unix(0x1, 0x0, 0x0)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000003500)=0x2090)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000003540))

5.544438716s ago: executing program 3 (id=5491):
fsopen(&(0x7f0000000140)='9p\x00', 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r0=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r0, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, r0})
ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"])
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
fchdir(r2)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000002c0)=""/77)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r7, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xd81, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x0)
openat$cachefiles(0xffffff9c, &(0x7f0000000380), 0x101480, 0x0)
syz_ublk_setup_io_uring(0x100000, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x0, 0x1de, 0x0, r1}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000400)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}})

5.444808725s ago: executing program 2 (id=5492):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000012000173"], 0x3c}}, 0x0) (fail_nth: 1)

5.442665023s ago: executing program 0 (id=5493):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0)
r0 = io_uring_setup(0x1b7c, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf2501", @ANYRES64=r3], 0x18}}, 0x2080)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
r9 = getpid()
syz_pidfd_open(r9, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r6, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8d0, 0x50}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x34}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000440)="e27a21889e8974a03e771b45159011e9741b16ea9787d3cbbe7d3404a60ea1b1c67d5e13e46ba9feb9fc1fc1ebadfedb627f485d06a6543274263aa4019b28a0405e61fba1b2dd5e1eda37c74bad93016e1815f2c505bd7a9b", 0x59}, {&(0x7f00000004c0)="10871ef7ab96a710327d3d70b41ce8505b0b599720a897ee747d32c8bdb24d1248bb0b7c6ef5ce8afba18dd4bb8fee1c3efea3ffd79198a1ddc24e0c66fb5cc6149a7d862b3db2b6a4f90e9f1056a527a934884bf474f86dfb506e4aae2c140789d919f2da701326f85903c4b29d046cde2567ab9f95e7e0ba4b3f2c5fa1c3b64ae161a5e35729dd87682181819c685f4d078f09de62af05", 0x98}, {&(0x7f0000000680)="3ff86105000000002eea5e09899d5d511c3c02029c417e9dc9fd7924709d095dead6875afc9abacc6809facfd2182d77a4490819eb2ea97e3839215d3c57c70f5565838e3ebff1ea8aad210c06dc07574fdf3ac71b0f08b56bd42c3c40e96bf0b3d7330a0634cb404a804c3de1726ef31486856fec690f148dbfb3360e2083bae39b411762c508b99490ce3239df393403548bfeb59baecbf17d15eedd1699b5714ad1c6ac48593363fb87fecc5e8eab7663c684987f466084e7abf1febd78c3cc3eccb6a2c99026036aa0385bce36ff4ceb2e345b4d", 0xd6}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x4014)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18)
clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x800002000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x6, 0x0, 0x0, 0x240b, 0x3f, 0xb, 0x0, 0x0, 0xffffffffffeffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w\x00\x00\x00\x00')

5.32297361s ago: executing program 4 (id=5494):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r5 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000140))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x58)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r8, 0x0, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x800000, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x9, 0x3745bd, 0x2131db, 0x11})

5.290734988s ago: executing program 2 (id=5495):
r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000)
io_uring_enter(r0, 0x8a1, 0xb08a, 0x6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa2986dd6091040000000000000000000000000000000000000000aafe8000000000000000000000000000aa4e220e220b659078cca9b699ab5e67003f1c1724367d"], 0x0)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)

4.572765516s ago: executing program 3 (id=5496):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

4.316529898s ago: executing program 4 (id=5497):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x410fd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000200)={0x4c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x20044044)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
syz_open_dev$MSR(&(0x7f0000001280), 0x5, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket(0x10, 0x803, 0x4)
getsockname$packet(r8, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=<r9=>0x0)
syz_ublk_setup_queues(r2, r9, &(0x7f0000000580)={0x0, 0x1d8c, 0x8, 0x0, 0x228, 0x0, r2}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x100, 0x3, 0x81, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x8, 0x3, 0x8e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x2, 0x2, 0x168, 0x0, r2}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80))

4.014030365s ago: executing program 3 (id=5498):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0x10001400)
syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x5a4262)
r1 = socket$inet6(0xa, 0x3, 0x3c)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000121, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
mount(&(0x7f00000003c0)=@nullb, 0x0, &(0x7f0000000300)='udf\x00', 0x200480, 0x0)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r6, 0xc17a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

3.860023124s ago: executing program 2 (id=5499):
socket$nl_route(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.484728795s ago: executing program 1 (id=5500):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.848927727s ago: executing program 2 (id=5501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x1)

2.390339252s ago: executing program 0 (id=5502):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.164146114s ago: executing program 3 (id=5503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0)

2.084211191s ago: executing program 3 (id=5504):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

1.660422397s ago: executing program 4 (id=5505):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x8c}}, 0x0)

1.478097574s ago: executing program 4 (id=5506):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000008701700ff0000000000010902240001000000001f04004309010000f409210000fe01222900090581018000000800"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x2}})
syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f00000000c0)={0x2f, 0x2})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7)
syz_usb_connect$uac1(0x2, 0xaa, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="fd48bb76ce1bd80ef6742f9865c41938e1acb40863c9a45274212a13a56210b5c7f1bed98ba41edb30544046949bcb2d43398ce6e2c76cb3550ac3732d0654f5dbc4ddc94d2c889de12ab3f0f3913f1daf4ae87ac6bc597264951716d6dde512b794dc657064a52c7f1498fd37fb34601a8d43f43fa7e2845bb46c1c0ca4e1eeb3c9ddfb48d373b73a4626c4068601f848c1bb40793a1c05c0449df2c92b3685b4417d0bfee8bf264047ee23bb21b28a1fe8a9589de58ae6ee", 0xb9}, {&(0x7f0000000540)="5aee92e3d5df828dd0ee5012d512914d4bac69a1761434170f226e71", 0x1c}, {&(0x7f0000000700)="8d2ce336a6dbee62e7712bd13176d83c6749bf383b290c9230608f1e556f965de3745756a115f94fea31d5ee35ad0f9e0dffd6a5a7c0b02d329c079256488ad55ed53127953995ac1fd5772f158b33c8c7e8dbcf59da7f42215ffdc94a71345b24e8d5c39e3eddd2e6d818e3edb1e7e390398e3ed7b0f61683347486410c9822fc0e243243c9433d04b870c875317468acc9f453b10e8f5482f801fd", 0x9c}], 0x3}, 0x20004800)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000105, 0x0, 0x2000000}]})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x66e0b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

1.323021681s ago: executing program 1 (id=5507):
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, 0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0), 0x0)
writev(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x2)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x36a8)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x4000000)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
socket$netlink(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1.179660164s ago: executing program 1 (id=5508):
socket$inet6(0xa, 0x3, 0x5)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
gettid()
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0xc, 0xbc4, 0x0, &(0x7f0000000280)="f94125ec0e79591112223f2d469d52fa055e234a22ecc2194538fb438810c4a1afc1cec45a2d8fd6312fd261799699f4573657c56a49282f1f365199f40604f1093eaa9d6e4de4e201007a4d3cf8d32a606f6c12abd79f3ccf63da8ba0224f250d5e34210f254bbea42c9b951299ead8a0e1a580", 0x0, 0x74})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x8, 0x6})
r3 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCRMFF(r3, 0x801c581f, 0x0)
socket(0x10, 0x3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

268.80999ms ago: executing program 3 (id=5509):
r0 = socket(0x10, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3054803030303034303030302c757365725f69643db035e5e112fd591fe624f4e6b01f26a7364e0d52a5bcd04186365d5ec27ef94c6fe37c3ed3294f81f141b24e5d7328fb8d4d93ae2f3f8b6e79a016e9b5113daecb087f", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r1, &(0x7f000000a3c0)={0x2020, 0x0, <r2=>0x0}, 0xfffffffffffffca9)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0xa220a09, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='P'], 0x0, 0x0, 0x0})
getdents64(r3, 0x0, 0x20000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000180)=0xc2)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r4)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf2100000000000000008dfd62488d"], 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r7, @ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r8 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', <r9=>0x0, 0x2f, 0x2, 0x1, 0xfffffffc, 0x18, @mcast2, @empty, 0x8, 0x8000, 0x8000, 0xfffffffd}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES8=r8, @ANYRES64=r9, @ANYRES64=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x48004}, 0x20050880)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc40"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="ff7fffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()

77.552331ms ago: executing program 2 (id=5510):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x200, &(0x7f00000010c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}])
io_pgetevents(r6, 0x4, 0x0, &(0x7f0000000080), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x40000, 0x0, 0x2}])
io_destroy(r0)

0s ago: executing program 1 (id=5511):
socket(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xec3, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100ff, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0xeaf, 0x0, @gue={{0x1, 0x1, 0x2, 0xaf, 0x0, @void}, "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"}}}}, 0xed1)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc29, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

kernel console output (not intermixed with test programs):

sr debugfs directory
[ 1765.695795][T24710] Bluetooth: hci2: command tx timeout
[ 1765.980881][T27918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1765.980921][T27918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.001008][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'.
[ 1766.212570][ T5735] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1766.383367][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1766.383445][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1766.383514][ T5735] usb 4-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[ 1766.383543][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.390944][    T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1766.866815][ T5735] usb 4-1: config 0 descriptor??
[ 1766.885158][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1766.885243][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1766.885273][    T9] usb 3-1: Product: syz
[ 1766.885313][    T9] usb 3-1: Manufacturer: syz
[ 1766.885407][    T9] usb 3-1: SerialNumber: syz
[ 1767.168353][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1767.225994][T28061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1767.226372][T28061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1767.286545][T13794] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1767.357627][ T5735] usbhid 4-1:0.0: can't add hid device: -71
[ 1767.357716][ T5735] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1767.360165][ T5735] usb 4-1: USB disconnect, device number 99
[ 1767.421979][    C1] sd 0:0:1:0: [sda] tag#5298 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1767.422040][    C1] sd 0:0:1:0: [sda] tag#5298 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00
[ 1767.424051][T28077] loop9: detected capacity change from 0 to 2640
[ 1767.427199][T28077] buffer_io_error: 23 callbacks suppressed
[ 1767.427210][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.427285][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.427348][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.427392][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.427474][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.431924][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.432022][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.432098][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.432150][T28077] ldm_validate_partition_table(): Disk read failed.
[ 1767.432231][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.432307][T28077] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1767.432476][T28077] Dev loop9: unable to read RDB block 0
[ 1767.433476][T28077]  loop9: unable to read partition table
[ 1767.433651][T28077] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1767.486561][T27918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1767.487370][T27918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.599491][ T5812] usb 3-1: USB disconnect, device number 53
[ 1767.732340][T27918] bond0: (slave netdevsim1): Releasing backup interface
[ 1767.734118][T27918] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode
[ 1767.736773][T27918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1767.736802][T27918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.738625][T28085] netlink: 'syz.2.5195': attribute type 1 has an invalid length.
[ 1767.748163][T28084] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5196'.
[ 1767.808444][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5195'.
[ 1767.808465][T28081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5195'.
[ 1767.817752][T28085] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1767.909961][T27918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1767.909984][T27918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1768.114933][   T30] audit: type=1400 audit(1781885608.246:3174): avc:  denied  { setopt } for  pid=28091 comm="syz.3.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1768.114969][   T30] audit: type=1400 audit(1781885608.255:3175): avc:  denied  { read } for  pid=28091 comm="syz.3.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1768.142468][   T29] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1768.273856][T27918] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1768.291268][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1768.294976][T27918] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1768.297660][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1768.298347][T27918] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1768.301180][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1768.301978][T27918] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1768.307390][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1768.325250][   T29] usb 2-1: Using ep0 maxpacket: 32
[ 1768.328203][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1768.328233][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1768.328262][   T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1768.328276][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1768.329742][   T29] usb 2-1: config 0 descriptor??
[ 1768.335199][   T29] hub 2-1:0.0: USB hub found
[ 1768.397657][T27918] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1768.411877][T27918] 8021q: adding VLAN 0 to HW filter on device team0
[ 1768.454741][T13794] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1768.454881][T13794] ath9k_htc: Failed to initialize the device
[ 1768.456436][T25420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1768.456519][T25420] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1768.465920][ T5812] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1768.470800][T25420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1768.470865][T25420] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1768.557435][   T30] audit: type=1400 audit(1781885608.670:3176): avc:  denied  { egress } for  pid=9 comm="kworker/0:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[ 1768.560961][   T30] audit: type=1400 audit(1781885608.670:3177): avc:  denied  { sendto } for  pid=9 comm="kworker/0:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[ 1768.698107][   T29] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1768.710410][   T29] usbhid 2-1:0.0: can't add hid device: -71
[ 1768.710498][   T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1768.735038][   T29] usb 2-1: USB disconnect, device number 96
[ 1768.801610][ T5812] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1768.985617][ T5812] usb 3-1: Using ep0 maxpacket: 16
[ 1768.999498][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1768.999533][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1768.999555][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1768.999591][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1768.999612][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.018246][ T5812] usb 3-1: config 0 descriptor??
[ 1769.183373][T27918] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1769.233457][T27918] veth0_vlan: entered promiscuous mode
[ 1769.297105][T27918] veth1_vlan: entered promiscuous mode
[ 1769.350414][T27918] veth0_macvtap: entered promiscuous mode
[ 1769.360168][T27918] veth1_macvtap: entered promiscuous mode
[ 1769.394796][T27918] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1769.485964][ T5812] usbhid 3-1:0.0: can't add hid device: -71
[ 1769.486051][ T5812] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1769.688825][T27918] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1769.924127][ T5812] usb 3-1: USB disconnect, device number 54
[ 1770.062848][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5202'.
[ 1770.565770][T18925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1770.565816][T18925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1770.565843][T18925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1770.565867][T18925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1770.728975][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1770.729012][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1770.778778][T25426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1770.778797][T25426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1770.828621][   T30] audit: type=1400 audit(1781885610.766:3178): avc:  denied  { mounton } for  pid=27918 comm="syz-executor" path="/root/syzkaller.uS10wE/syz-tmp" dev="sda1" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1770.830878][   T30] audit: type=1400 audit(1781885610.766:3179): avc:  denied  { mounton } for  pid=27918 comm="syz-executor" path="/root/syzkaller.uS10wE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 1770.831663][   T30] audit: type=1400 audit(1781885610.766:3180): avc:  denied  { mounton } for  pid=27918 comm="syz-executor" path="/root/syzkaller.uS10wE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=104825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1770.834288][   T30] audit: type=1400 audit(1781885610.766:3181): avc:  denied  { unmount } for  pid=27918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1770.835884][   T30] audit: type=1400 audit(1781885610.766:3182): avc:  denied  { mounton } for  pid=27918 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1770.836105][   T30] audit: type=1400 audit(1781885610.766:3183): avc:  denied  { mount } for  pid=27918 comm="syz-executor" name="/" dev="gadgetfs" ino=6820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1770.837008][   T30] audit: type=1400 audit(1781885610.766:3184): avc:  denied  { mounton } for  pid=27918 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1770.934308][T28125] kvm: pic: non byte write
[ 1771.119408][T21864] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 1771.282090][T21864] usb 1-1: Using ep0 maxpacket: 32
[ 1771.287291][T21864] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[ 1771.287348][T21864] usb 1-1: config 0 has no interface number 0
[ 1771.287476][T21864] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1771.287506][T21864] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1771.300134][T21864] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1771.300193][T21864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1771.300220][T21864] usb 1-1: Product: syz
[ 1771.300282][T21864] usb 1-1: Manufacturer: syz
[ 1771.300344][T21864] usb 1-1: SerialNumber: syz
[ 1771.319266][T21864] usb 1-1: config 0 descriptor??
[ 1771.997772][T28127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1772.000057][T28127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1772.283733][T28135] netlink: 'syz.0.5145': attribute type 10 has an invalid length.
[ 1772.283780][T28135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5145'.
[ 1772.519167][T21864] radio-si470x 1-1:0.35: this is not a si470x device.
[ 1772.620436][T21864] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[ 1772.849180][T28135] bridge0: port 3(dummy0) entered blocking state
[ 1772.849275][T28135] bridge0: port 3(dummy0) entered disabled state
[ 1772.849478][T28135] dummy0: entered allmulticast mode
[ 1772.940987][T28135] dummy0: entered promiscuous mode
[ 1772.941500][T28135] bridge0: port 3(dummy0) entered blocking state
[ 1772.941572][T28135] bridge0: port 3(dummy0) entered forwarding state
[ 1773.074713][T28138] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5206'.
[ 1773.097045][ T5714] usb 1-1: USB disconnect, device number 106
[ 1773.712056][T28144] tipc: Started in network mode
[ 1773.712082][T28144] tipc: Node identity b2df598e93c2, cluster identity 4711
[ 1773.712175][T28144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1773.776767][T28144] syzkaller0: entered promiscuous mode
[ 1773.776791][T28144] syzkaller0: entered allmulticast mode
[ 1773.777424][T28144] tipc: Resetting bearer <eth:syzkaller0>
[ 1774.058444][T28143] tipc: Resetting bearer <eth:syzkaller0>
[ 1774.174781][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1774.636031][T21864] usb 1-1: new full-speed USB device number 107 using dummy_hcd
[ 1774.946382][T21864] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1774.946403][T21864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1774.947920][T21864] usb 1-1: config 0 descriptor??
[ 1774.956528][T21864] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1775.182123][T21864] gp8psk: usb in 128 operation failed.
[ 1775.400218][T21864] gp8psk: usb in 146 operation failed.
[ 1775.400236][T21864] gp8psk: failed to get FW version
[ 1775.400714][T21864] gp8psk: usb in 149 operation failed.
[ 1775.400727][T21864] gp8psk: failed to get FPGA version
[ 1776.515410][T28168] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1776.838031][T28166] kvm: pic: level sensitive irq not supported
[ 1776.838131][T28166] kvm: pic: non byte read
[ 1776.862218][T28166] kvm: pic: level sensitive irq not supported
[ 1776.862300][T28166] kvm: pic: non byte read
[ 1776.873651][T28166] kvm: pic: level sensitive irq not supported
[ 1776.873751][T28166] kvm: pic: non byte read
[ 1777.652676][T21864] gp8psk: usb out operation failed.
[ 1777.657903][T21864] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1777.668365][T21864] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1778.808406][T28143] tipc: Disabling bearer <eth:syzkaller0>
[ 1778.817997][ T5812] tipc: Node number set to 555571598
[ 1778.888321][T28175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5215'.
[ 1778.897665][T28175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5215'.
[ 1778.934804][ T5812] usb 1-1: USB disconnect, device number 107
[ 1779.208720][T28179] netlink: 'syz.4.5216': attribute type 1 has an invalid length.
[ 1779.225359][T28182] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5218'.
[ 1779.721580][T28179] netlink: 'syz.4.5216': attribute type 2 has an invalid length.
[ 1779.742067][T28179] netlink: 'syz.4.5216': attribute type 1 has an invalid length.
[ 1779.760132][T28179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5216'.
[ 1780.023513][T28193] netlink: 'syz.1.5220': attribute type 40 has an invalid length.
[ 1780.619575][ T5812] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1780.796598][ T5812] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1780.829176][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1780.841584][ T5812] usb 3-1: can't read configurations, error -71
[ 1780.865802][T28198] netlink: 'syz.1.5223': attribute type 13 has an invalid length.
[ 1781.010103][T28198] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1781.034765][T28198] syzkaller0: entered promiscuous mode
[ 1781.041072][T28203] kvm: pic: non byte write
[ 1781.046253][T28198] syzkaller0: entered allmulticast mode
[ 1781.095490][   T29] usb 4-1: new full-speed USB device number 100 using dummy_hcd
[ 1781.262235][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1781.284332][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1781.302226][   T29] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1781.303284][T28208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57624 sclass=netlink_route_socket pid=28208 comm=syz.1.5227
[ 1781.311465][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.337900][   T29] usb 4-1: config 0 descriptor??
[ 1781.886320][T20341] Bluetooth: hci5: command 0x1003 tx timeout
[ 1781.904201][T24710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1783.544710][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.567667][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.585758][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.618264][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.661495][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.693908][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.732741][   T29] isku 0003:1E7D:319C.0014: unknown main item tag 0x0
[ 1783.785206][   T29] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0
[ 1783.820348][   T29] isku 0003:1E7D:319C.0014: couldn't init struct isku_device
[ 1783.829001][   T29] isku 0003:1E7D:319C.0014: couldn't install keyboard
[ 1783.856147][   T29] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -5
[ 1783.904253][T28225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1783.919663][T28225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1783.977588][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5232'.
[ 1783.977611][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5232'.
[ 1784.089312][T13794] usb 4-1: USB disconnect, device number 100
[ 1784.111866][T28224] fido_id[28224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1785.883199][   T29] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1786.054473][   T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1786.054500][   T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1786.058421][   T29] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[ 1786.058440][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1786.058451][   T29] usb 4-1: Product: syz
[ 1786.058460][   T29] usb 4-1: Manufacturer: syz
[ 1786.058470][   T29] usb 4-1: SerialNumber: syz
[ 1786.504963][   T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1786.597045][   T29] usb 4-1: USB disconnect, device number 101
[ 1786.617391][T28261] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5239'.
[ 1786.631841][   T30] audit: type=1400 audit(1781885625.353:3185): avc:  denied  { ioctl } for  pid=28260 comm="syz.2.5239" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1786.664697][T23466] udevd[23466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1787.833085][   T29] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1788.766929][   T29] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1788.782978][   T30] audit: type=1400 audit(1781885627.328:3186): avc:  denied  { remount } for  pid=28280 comm="syz.0.5243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1788.828582][   T29] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1788.880317][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.910748][   T29] usb 4-1: config 0 descriptor??
[ 1788.934843][   T29] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1789.151340][    T9] usb 4-1: USB disconnect, device number 102
[ 1789.643119][T13794] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1789.701758][   T30] audit: type=1400 audit(1781885628.187:3187): avc:  denied  { ioctl } for  pid=28294 comm="syz.1.5246" path="socket:[104270]" dev="sockfs" ino=104270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1789.828463][T13794] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1789.872000][T13794] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1789.890551][T13794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1789.932097][T13794] usb 4-1: config 0 descriptor??
[ 1789.941396][T28302] netlink: 'syz.2.5248': attribute type 3 has an invalid length.
[ 1789.962254][T13794] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1
[ 1789.995569][T13794] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1790.016553][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5249'.
[ 1790.068828][T28305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5249'.
[ 1790.540922][    T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1790.726834][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1790.735211][    T9] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11
[ 1790.735233][    T9] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1790.735248][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1790.735266][    T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1790.735280][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1790.746039][    T9] usb 1-1: config 0 descriptor??
[ 1791.323408][ T5812] usb 4-1: USB disconnect, device number 103
[ 1791.566318][   T30] audit: type=1400 audit(1781885629.904:3188): avc:  denied  { setopt } for  pid=28352 comm="syz.3.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1792.005973][T28362] xt_recent: Unsupported userspace flags (000000b1)
[ 1792.006852][T28362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5255'.
[ 1792.403954][   T29] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1792.449407][    T9] usbhid 1-1:0.0: can't add hid device: -71
[ 1792.471095][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1792.503527][    T9] usb 1-1: USB disconnect, device number 108
[ 1792.594551][   T29] usb 3-1: Using ep0 maxpacket: 32
[ 1792.614051][   T29] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[ 1792.630788][   T29] usb 3-1: config 0 has no interface number 0
[ 1792.651625][   T29] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1792.684779][   T29] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1792.715045][   T29] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1792.730986][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1792.761439][   T29] usb 3-1: Product: syz
[ 1792.784928][   T29] usb 3-1: Manufacturer: syz
[ 1792.798876][   T29] usb 3-1: SerialNumber: syz
[ 1792.841682][   T29] usb 3-1: config 0 descriptor??
[ 1792.891594][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1792.988172][T28375] tap0: tun_chr_ioctl cmd 2147767511
[ 1793.025441][   T30] audit: type=1400 audit(1781885631.252:3189): avc:  denied  { listen } for  pid=28372 comm="syz.1.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1793.123728][T28365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1793.154990][T28365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1793.327326][T28382] netlink: 'syz.2.5256': attribute type 10 has an invalid length.
[ 1793.335945][T28382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5256'.
[ 1793.349718][T28382] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1793.369508][    T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1793.583686][   T29] radio-si470x 3-1:0.35: this is not a si470x device.
[ 1793.879607][   T29] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[ 1793.974821][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1793.988891][   T30] audit: type=1400 audit(1781885632.138:3190): avc:  denied  { getopt } for  pid=28379 comm="syz.0.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1794.018188][   T30] audit: type=1400 audit(1781885632.138:3191): avc:  denied  { ioctl } for  pid=28379 comm="syz.0.5261" path="socket:[104366]" dev="sockfs" ino=104366 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1794.018911][    T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1794.081602][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1794.141711][    T9] usb 2-1: config 0 has no interfaces?
[ 1794.173842][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1794.200087][    T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1794.215529][   T29] usb 3-1: USB disconnect, device number 57
[ 1794.215648][    T9] usb 2-1: Product: syz
[ 1794.225851][    T9] usb 2-1: Manufacturer: syz
[ 1794.237735][    T9] usb 2-1: SerialNumber: syz
[ 1794.270932][    T9] usb 2-1: config 0 descriptor??
[ 1794.390310][   T30] audit: type=1400 audit(1781885632.517:3192): avc:  denied  { map } for  pid=28388 comm="syz.3.5262" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1794.620315][T28373] tap0: tun_chr_ioctl cmd 1074025675
[ 1794.646219][T28373] tap0: persist disabled
[ 1794.677737][   T29] usb 2-1: USB disconnect, device number 97
[ 1796.032300][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1796.076500][ T5620] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1796.273127][ T5620] usb 5-1: Using ep0 maxpacket: 32
[ 1796.284457][ T5620] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1796.298512][ T5620] usb 5-1: config 0 has no interface number 0
[ 1796.305810][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1796.316558][ T5620] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1796.326459][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1796.342236][ T5620] usb 5-1: Product: syz
[ 1796.350853][ T5620] usb 5-1: Manufacturer: syz
[ 1796.361652][ T5620] usb 5-1: SerialNumber: syz
[ 1796.374608][ T5620] usb 5-1: config 0 descriptor??
[ 1797.005564][T28410] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1797.154222][ T5620] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1797.154243][ T5620] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1797.631124][T28423] netlink: 'syz.3.5270': attribute type 1 has an invalid length.
[ 1797.632389][T28423] netlink: 'syz.3.5270': attribute type 2 has an invalid length.
[ 1797.632419][T28423] netlink: 'syz.3.5270': attribute type 1 has an invalid length.
[ 1797.632443][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5270'.
[ 1798.177720][T24710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1799.671048][ T5620] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1799.671160][ T5620] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[ 1799.858409][ T5620] usb 5-1: USB disconnect, device number 118
[ 1799.906386][T28431] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5272'.
[ 1799.945654][   T30] audit: type=1400 audit(1781885637.622:3193): avc:  denied  { unlink } for  pid=28430 comm="syz.2.5272" name="#44" dev="tmpfs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1799.945697][   T30] audit: type=1400 audit(1781885637.640:3194): avc:  denied  { mount } for  pid=28430 comm="syz.2.5272" name="/" dev="overlay" ino=2527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1800.877436][T28438] ubi: mtd0 is already attached to ubi16
[ 1800.879056][T28438] trusted_key: encrypted_key: insufficient parameters specified
[ 1801.168147][    T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1801.340294][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1801.344431][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1801.350376][    T9] usb 2-1: config 87 has an invalid interface number: 248 but max is 0
[ 1801.350404][    T9] usb 2-1: config 87 has no interface number 0
[ 1801.350424][    T9] usb 2-1: config 87 interface 248 has no altsetting 0
[ 1801.353259][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1801.353286][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1801.353306][    T9] usb 2-1: Product: syz
[ 1801.353321][    T9] usb 2-1: Manufacturer: syz
[ 1801.353334][    T9] usb 2-1: SerialNumber: syz
[ 1802.217884][ T5735] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[ 1802.382729][ T5735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1802.382748][ T5735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1802.387169][ T5735] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1802.387186][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1802.387197][ T5735] usb 3-1: Product: syz
[ 1802.387207][ T5735] usb 3-1: Manufacturer: syz
[ 1802.387216][ T5735] usb 3-1: SerialNumber: syz
[ 1802.394811][ T5735] usb 3-1: 0:2 : does not exist
[ 1802.923412][ T5735] usb 3-1: USB disconnect, device number 58
[ 1803.150875][ T5350] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1803.322828][ T5350] usb 5-1: Using ep0 maxpacket: 32
[ 1803.338332][ T5350] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1803.348597][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1803.357599][ T5350] usb 5-1: Product: syz
[ 1803.363169][ T5350] usb 5-1: Manufacturer: syz
[ 1803.371783][ T5350] usb 5-1: SerialNumber: syz
[ 1803.385805][ T5350] usb 5-1: config 0 descriptor??
[ 1803.396623][ T5350] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1803.406100][ T5350] dvb-usb: bulk message failed: -22 (2/0)
[ 1803.414543][ T5350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1803.425211][ T5350] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1803.437122][ T5350] usb 5-1: media controller created
[ 1803.464000][ T5350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1803.520227][ T5350] usb 5-1: selecting invalid altsetting 7
[ 1803.538961][ T5350] cxusb: set interface failed
[ 1803.557125][ T5350] dvb-usb: bulk message failed: -22 (1/0)
[ 1803.620772][T28464] netlink: 'syz.2.5281': attribute type 13 has an invalid length.
[ 1803.651092][ T5350] DVB: Unable to find symbol lgdt330x_attach()
[ 1803.668248][ T5350] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1803.810114][ T5350] rc_core: IR keymap rc-dvico-portable not found
[ 1803.837894][ T5350] Registered IR keymap rc-empty
[ 1803.865841][ T5350] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 1803.903708][ T5350] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input185
[ 1803.927199][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5279'.
[ 1803.956371][ T5350] dvb-usb: schedule remote query interval to 100 msecs.
[ 1803.977738][ T5350] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1804.025807][    T9] rndis_host 2-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1804.092247][    T9] usb 2-1: USB disconnect, device number 98
[ 1804.092627][ T5350] dvb-usb: bulk message failed: -22 (1/0)
[ 1804.263868][T28471] syzkaller1: entered promiscuous mode
[ 1804.271571][ T5620] dvb-usb: bulk message failed: -22 (1/0)
[ 1804.311315][   T30] audit: type=1400 audit(1781885641.675:3195): avc:  denied  { bind } for  pid=28478 comm="syz.1.5282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1804.324776][T28471] syzkaller1: entered allmulticast mode
[ 1804.415514][   T30] audit: type=1400 audit(1781885641.767:3196): avc:  denied  { write } for  pid=28481 comm="syz.0.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1804.439631][ T5620] dvb-usb: bulk message failed: -22 (1/0)
[ 1804.611790][ T5620] dvb-usb: bulk message failed: -22 (1/0)
[ 1804.748120][T28475] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1804.785456][ T5620] dvb-usb: bulk message failed: -22 (1/0)
[ 1804.802789][T28475] syzkaller0: entered promiscuous mode
[ 1804.821959][T28475] syzkaller0: entered allmulticast mode
[ 1804.865033][ T5350] usb 5-1: USB disconnect, device number 119
[ 1804.959717][ T5350] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1805.041167][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'.
[ 1805.301421][T28492] kvm: pic: non byte write
[ 1805.510687][    T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[ 1805.685552][    T9] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[ 1805.701267][    T9] usb 3-1: config 150 has an invalid descriptor of length 50, skipping remainder of the config
[ 1805.714205][    T9] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3
[ 1805.735228][    T9] usb 3-1: config 150 has no interface number 0
[ 1805.745535][    T9] usb 3-1: config 150 interface 204 has no altsetting 0
[ 1805.757436][    T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1805.767804][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.779092][    T9] usb 3-1: Product: syz
[ 1805.783722][    T9] usb 3-1: Manufacturer: syz
[ 1805.788410][    T9] usb 3-1: SerialNumber: syz
[ 1806.300303][T13794] usb 5-1: new full-speed USB device number 120 using dummy_hcd
[ 1806.308315][   T30] audit: type=1326 audit(1781885643.373:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28491 comm="syz.2.5286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ba1d9ce59 code=0x0
[ 1806.410738][T20341] Bluetooth: hci5: command 0x1003 tx timeout
[ 1806.420149][T24710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1806.510535][T13794] usb 5-1: config 4 has an invalid interface number: 44 but max is 0
[ 1806.510569][T13794] usb 5-1: config 4 has no interface number 0
[ 1806.510588][T13794] usb 5-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1806.510604][T13794] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1806.510618][T13794] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1806.515447][T13794] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[ 1806.515464][T13794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1806.515476][T13794] usb 5-1: Product: syz
[ 1806.515484][T13794] usb 5-1: Manufacturer: syz
[ 1806.515493][T13794] usb 5-1: SerialNumber: syz
[ 1806.517490][T28504] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1806.763672][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1806.945707][T28520] netlink: 'syz.1.5296': attribute type 13 has an invalid length.
[ 1806.973463][T13794] dvb-usb: found a 'Gigabyte U7000' in warm state.
[ 1806.991944][T13794] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1807.020979][T13794] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[ 1807.042231][T13794] usb 5-1: media controller created
[ 1807.054007][T28074] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1807.074728][T13794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1807.086779][ T5812] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1807.162389][T28520] syzkaller1: entered promiscuous mode
[ 1807.177392][T13794] DVB: Unable to find symbol dib7000p_attach()
[ 1807.184503][T13794] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[ 1807.198846][T28520] syzkaller1: entered allmulticast mode
[ 1807.210866][T28520] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1807.229281][T28520] syzkaller0: entered promiscuous mode
[ 1807.235037][T28520] syzkaller0: entered allmulticast mode
[ 1807.266235][T13794] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1807.274077][ T5812] usb 4-1: Using ep0 maxpacket: 32
[ 1807.279276][T13794] Registered IR keymap rc-empty
[ 1807.284417][T13794] dvb-usb: could not initialize remote control.
[ 1807.291045][T28074] usb 1-1: Using ep0 maxpacket: 32
[ 1807.298111][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1807.309691][T13794] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[ 1807.317659][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1807.334588][T13794] dib0700: rc submit urb failed
[ 1807.340644][T28074] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1807.352828][ T5812] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1807.362629][T28074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1807.372464][T28074] usb 1-1: Product: syz
[ 1807.376925][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1807.386451][T28074] usb 1-1: Manufacturer: syz
[ 1807.391247][T28074] usb 1-1: SerialNumber: syz
[ 1807.420617][T28074] usb 1-1: config 0 descriptor??
[ 1807.425948][ T5812] usb 4-1: config 0 descriptor??
[ 1807.439545][T28074] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1807.447116][T28074] dvb-usb: bulk message failed: -22 (2/0)
[ 1807.455458][ T5812] hub 4-1:0.0: USB hub found
[ 1807.474227][T28074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1807.487019][T28074] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1807.495647][T28074] usb 1-1: media controller created
[ 1807.509371][T28074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1807.524829][T28074] usb 1-1: selecting invalid altsetting 7
[ 1807.531188][T28074] cxusb: set interface failed
[ 1807.545968][T28074] dvb-usb: bulk message failed: -22 (1/0)
[ 1807.629181][T28074] DVB: Unable to find symbol lgdt330x_attach()
[ 1807.642244][T28074] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1807.702706][T28504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1807.721983][T28074] rc_core: IR keymap rc-dvico-portable not found
[ 1807.728432][T28074] Registered IR keymap rc-empty
[ 1807.736151][T28074] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[ 1807.738579][T28504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1807.749828][T28074] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input187
[ 1807.770473][T28074] dvb-usb: schedule remote query interval to 100 msecs.
[ 1807.778564][T28074] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1807.871942][  T804] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1807.891001][T28504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1807.904517][T28074] dvb-usb: bulk message failed: -22 (1/0)
[ 1807.920931][T28504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1807.944940][ T5812] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1807.951834][T28504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1807.970746][T28504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1807.984230][T28504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1807.993876][T28504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1807.997433][ T5812] usbhid 4-1:0.0: can't add hid device: -71
[ 1808.010336][ T5812] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1808.034434][T28074] dvb-usb: bulk message failed: -22 (1/0)
[ 1808.041249][ T5812] usb 4-1: USB disconnect, device number 104
[ 1808.056887][  T804] usb 2-1: Using ep0 maxpacket: 16
[ 1808.065876][  T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1808.069380][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5294'.
[ 1808.076707][  T804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1808.094908][  T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1808.107887][  T804] usb 2-1: config 0 descriptor??
[ 1808.153695][  T804] dvb-usb: bulk message failed: -22 (1/0)
[ 1808.230949][ T5812] usb 5-1: USB disconnect, device number 120
[ 1808.247145][  T804] usb 1-1: USB disconnect, device number 109
[ 1808.277256][ T5812] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[ 1808.308008][  T804] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1808.486207][    T9] xr_serial 3-1:150.204: skipping garbage
[ 1808.511158][    T9] usb 3-1: USB disconnect, device number 59
[ 1808.633809][T28537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5297'.
[ 1809.296806][T28550] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1809.303312][T28550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1809.311103][T28550] vhci_hcd vhci_hcd.0: Device attached
[ 1809.388479][T28555] vhci_hcd: connection closed
[ 1809.388809][ T1326] vhci_hcd vhci_hcd.4: stop threads
[ 1809.411311][ T1326] vhci_hcd vhci_hcd.4: release socket
[ 1809.424810][ T1326] vhci_hcd vhci_hcd.4: disconnect device
[ 1810.027145][T28563] ubi: mtd0 is already attached to ubi16
[ 1810.034253][T28563] trusted_key: encrypted_key: insufficient parameters specified
[ 1810.309760][ T5350] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1810.558377][ T5350] usb 4-1: Using ep0 maxpacket: 32
[ 1810.571623][ T5350] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1810.581902][ T5350] usb 4-1: config 87 has an invalid interface number: 248 but max is 0
[ 1810.590307][ T5350] usb 4-1: config 87 has no interface number 0
[ 1810.598116][ T5350] usb 4-1: config 87 interface 248 has no altsetting 0
[ 1810.610212][ T5350] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1810.623585][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1810.632791][ T5350] usb 4-1: Product: syz
[ 1810.662437][ T5350] usb 4-1: Manufacturer: syz
[ 1810.674768][ T5350] usb 4-1: SerialNumber: syz
[ 1810.709891][   T29] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1810.884756][   T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1810.896092][   T29] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1810.906489][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1810.937737][   T29] usb 3-1: config 0 descriptor??
[ 1810.970003][  T804] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1811.106470][ T5812] usb 2-1: USB disconnect, device number 99
[ 1811.155151][  T804] usb 1-1: Using ep0 maxpacket: 32
[ 1811.167777][  T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1811.171682][T28567] dlm: Unknown command passed to DLM device : 14
[ 1811.171682][T28567] 
[ 1811.192042][  T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1811.208810][   T29] usbhid 3-1:0.0: can't add hid device: -71
[ 1811.215476][  T804] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1811.219648][   T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1811.234214][  T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.261194][   T29] usb 3-1: USB disconnect, device number 60
[ 1811.262067][  T804] usb 1-1: config 0 descriptor??
[ 1811.285854][  T804] hub 1-1:0.0: USB hub found
[ 1811.602167][T28583] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5312'.
[ 1813.160877][ T5350] rndis_host 4-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1813.202624][ T5350] usb 4-1: USB disconnect, device number 105
[ 1813.686300][T28594] futex_wake_op: syz.1.5315 tries to shift op by 144; fix this program
[ 1814.228347][   T29] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1814.548160][  T804] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1814.593185][  T804] usbhid 1-1:0.0: can't add hid device: -71
[ 1814.605534][  T804] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1814.630156][   T30] audit: type=1804 audit(1781885651.193:3198): pid=28604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.5318" name="/newroot/488/file0" dev="tmpfs" ino=2657 res=1 errno=0
[ 1814.675632][  T804] usb 1-1: USB disconnect, device number 110
[ 1816.186203][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5324'.
[ 1816.293044][T28626] kvm: pic: non byte write
[ 1816.484517][T20341] Bluetooth: hci5: command 0x1003 tx timeout
[ 1816.513057][T24710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1817.291188][T28638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5328'.
[ 1818.443808][T28074] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1818.451528][ T5812] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1818.592034][T28638] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1818.660906][T28074] usb 1-1: Using ep0 maxpacket: 32
[ 1818.669923][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1818.698164][T28074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1818.712841][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1818.736376][T28074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1818.748092][ T5812] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1818.768036][T28074] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1818.777339][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1818.788003][T28074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1818.805305][ T5812] usb 2-1: config 0 descriptor??
[ 1818.812557][T28074] usb 1-1: config 0 descriptor??
[ 1818.831299][T28074] hub 1-1:0.0: USB hub found
[ 1818.840143][ T5812] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1819.053361][   T24] usb 2-1: USB disconnect, device number 100
[ 1819.213206][T28074] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1819.231811][T28074] usbhid 1-1:0.0: can't add hid device: -71
[ 1819.238299][T28074] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1819.269801][T28074] usb 1-1: USB disconnect, device number 111
[ 1819.353728][ T5812] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1819.538631][ T5812] usb 3-1: Using ep0 maxpacket: 16
[ 1819.549870][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1819.560125][    T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1819.569298][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1819.585598][ T5812] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1819.595296][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1819.599956][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'.
[ 1819.603578][ T5812] usb 3-1: Product: syz
[ 1819.624446][ T5812] usb 3-1: Manufacturer: syz
[ 1819.631430][ T5812] usb 3-1: SerialNumber: syz
[ 1819.652692][ T5812] usb 3-1: 0:2 : does not exist
[ 1819.662343][ T5812] usb 3-1: unit 9 not found!
[ 1819.746754][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1819.759202][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1819.772719][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1819.785442][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1819.823901][T28662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5337'.
[ 1819.839159][    T9] usb 2-1: config 0 descriptor??
[ 1819.888620][    T9] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1
[ 1819.902635][ T5812] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 1819.912676][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1819.931493][ T5812] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 1820.302766][ T5812] usb 3-1: USB disconnect, device number 62
[ 1820.353286][T28668] netlink: 'syz.3.5339': attribute type 1 has an invalid length.
[ 1820.367828][   T30] audit: type=1400 audit(1781885656.483:3199): avc:  denied  { watch } for  pid=28667 comm="syz.3.5339" path="/394/net_prio.prioidx" dev="tmpfs" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1820.367866][T28668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5339'.
[ 1820.393323][   T30] audit: type=1400 audit(1781885656.483:3200): avc:  denied  { watch_sb watch_reads } for  pid=28667 comm="syz.3.5339" path="/394/net_prio.prioidx" dev="tmpfs" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1820.459125][T23466] udevd[23466]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1820.711173][T28074] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1820.776869][ T5812] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1820.902787][T28074] usb 4-1: Using ep0 maxpacket: 16
[ 1820.911218][T28074] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1820.925656][T28074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1820.945109][T28074] usb 4-1: config 0 has no interface number 0
[ 1820.958171][    T9] IPVS: starting estimator thread 0...
[ 1820.964436][T28678] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1820.973361][ T5812] usb 3-1: Using ep0 maxpacket: 16
[ 1820.981501][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1820.991864][T28074] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[ 1821.001312][T28074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1821.010315][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1821.019849][T28678] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1821.020689][T28074] usb 4-1: Product: syz
[ 1821.031470][T28074] usb 4-1: Manufacturer: syz
[ 1821.036947][T28074] usb 4-1: SerialNumber: syz
[ 1821.047474][ T5812] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1821.065229][T28679] IPVS: using max 51 ests per chain, 122400 per kthread
[ 1821.066618][T28074] usb 4-1: config 0 descriptor??
[ 1821.077799][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1821.085848][ T5812] usb 3-1: Product: syz
[ 1821.090818][ T5812] usb 3-1: Manufacturer: syz
[ 1821.098669][T28074] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[ 1821.113036][   T30] audit: type=1400 audit(1781885657.166:3201): avc:  denied  { ioctl } for  pid=28675 comm="syz.0.5341" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1821.138944][ T5812] usb 3-1: SerialNumber: syz
[ 1821.150691][T28074] uvcvideo 4-1:0.105: No valid video chain found.
[ 1821.165868][ T5812] usb 3-1: 0:2 : does not exist
[ 1821.179811][ T5812] usb 3-1: unit 9 not found!
[ 1821.262169][ T5350] usb 2-1: USB disconnect, device number 101
[ 1821.341040][T28074] usb 4-1: USB disconnect, device number 106
[ 1822.231023][T28689] netlink: 'syz.3.5344': attribute type 1 has an invalid length.
[ 1822.286799][T28689] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1822.623420][T28698] kvm: pic: non byte write
[ 1822.855395][T28707] ubi: mtd0 is already attached to ubi16
[ 1822.862601][T28707] trusted_key: encrypted_key: insufficient parameters specified
[ 1822.895441][   T29] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1823.460095][   T29] usb 1-1: Using ep0 maxpacket: 32
[ 1823.473902][   T29] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1823.488117][   T29] usb 1-1: config 0 has no interface number 0
[ 1823.502141][   T29] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1823.522481][   T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1823.533911][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1823.542205][   T29] usb 1-1: Product: syz
[ 1823.546748][   T29] usb 1-1: Manufacturer: syz
[ 1823.552512][   T29] usb 1-1: SerialNumber: syz
[ 1823.557304][ T5350] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1823.569273][T28713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5351'.
[ 1823.597284][   T29] usb 1-1: config 0 descriptor??
[ 1823.636441][    T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1823.742015][ T5350] usb 2-1: Using ep0 maxpacket: 32
[ 1823.754006][ T5350] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1823.756401][ T5812] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 1823.781332][ T5350] usb 2-1: config 87 has an invalid interface number: 248 but max is 0
[ 1823.783083][ T5812] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 1823.799992][    T9] usb 4-1: device descriptor read/64, error -71
[ 1823.813432][ T5350] usb 2-1: config 87 has no interface number 0
[ 1823.839053][ T5350] usb 2-1: config 87 interface 248 has no altsetting 0
[ 1823.855835][ T5812] usb 3-1: USB disconnect, device number 63
[ 1823.868162][ T5350] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1823.880398][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1823.899879][ T5350] usb 2-1: Product: syz
[ 1823.904843][ T5350] usb 2-1: Manufacturer: syz
[ 1823.910383][ T5350] usb 2-1: SerialNumber: syz
[ 1823.934939][T23839] udevd[23839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1823.955761][T28717] can0: slcan on ptm0.
[ 1823.959905][   T24] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1824.048048][T28716] can0 (unregistered): slcan off ptm0.
[ 1824.076480][    T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1824.135470][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1824.197387][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1824.208853][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1824.230934][   T24] usb 5-1: config 0 descriptor??
[ 1824.239600][    T9] usb 4-1: device descriptor read/64, error -71
[ 1824.251757][   T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1824.267435][   T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1824.288389][   T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1824.339636][   T30] audit: type=1400 audit(1781885660.167:3202): avc:  denied  { write } for  pid=28719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1824.365044][    T9] usb usb4-port1: attempt power cycle
[ 1824.419098][   T30] audit: type=1400 audit(1781885660.240:3203): avc:  denied  { write } for  pid=28734 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1824.471996][   T24] usb 5-1: USB disconnect, device number 121
[ 1824.489009][ T5812] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1824.650496][ T5812] usb 3-1: Using ep0 maxpacket: 16
[ 1824.661172][ T5812] usb 3-1: config 0 has an invalid interface number: 68 but max is 0
[ 1824.669871][ T5812] usb 3-1: config 0 has no interface number 0
[ 1824.676827][ T5812] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 254, setting to 64
[ 1824.689673][   T30] audit: type=1400 audit(1781885660.480:3204): avc:  denied  { write } for  pid=28736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1824.717010][ T5812] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1824.726157][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1824.735039][ T5812] usb 3-1: Product: syz
[ 1824.739404][    T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1824.747497][ T5812] usb 3-1: Manufacturer: syz
[ 1824.752550][ T5812] usb 3-1: SerialNumber: syz
[ 1824.760351][ T5812] usb 3-1: config 0 descriptor??
[ 1824.770361][    T9] usb 4-1: device descriptor read/8, error -71
[ 1824.796680][   T30] audit: type=1400 audit(1781885660.582:3205): avc:  denied  { write } for  pid=28747 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1824.821391][ T5812] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1824.987294][   T24] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1825.040790][    T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1825.073415][    T9] usb 4-1: device descriptor read/8, error -71
[ 1825.087147][T13635] usb 3-1: Failed to submit usb control message: -71
[ 1825.087332][ T5812] usb 3-1: USB disconnect, device number 64
[ 1825.094926][T13635] usb 3-1: unable to send the bmi data to the device: -71
[ 1825.110451][T13635] usb 3-1: unable to get target info from device
[ 1825.117063][T13635] usb 3-1: could not get target info (-71)
[ 1825.123565][T13635] usb 3-1: could not probe fw (-71)
[ 1825.183307][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1825.197504][   T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1825.204916][    T9] usb usb4-port1: unable to enumerate USB device
[ 1825.214773][   T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1825.214807][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1825.220002][   T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1825.242725][   T24] usb 5-1: config 0 descriptor??
[ 1825.261601][   T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1825.262755][   T30] audit: type=1400 audit(1781885661.016:3206): avc:  denied  { create } for  pid=28727 comm="syz.2.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1825.273897][   T24] aiptek 5-1:0.0: interface has no int in endpoints, but must have minimum 1
[ 1825.305708][   T29] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[ 1825.318342][   T29] usb 1-1: USB disconnect, device number 112
[ 1825.326276][   T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1825.771494][T28754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'.
[ 1825.923535][ T5350] rndis_host 2-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1825.977979][ T5350] usb 2-1: USB disconnect, device number 102
[ 1826.073948][T28761] ubi: mtd0 is already attached to ubi16
[ 1826.081820][T28761] trusted_key: encrypted_key: insufficient parameters specified
[ 1826.676088][   T24] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1826.979048][    T9] usb 5-1: USB disconnect, device number 122
[ 1826.990247][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1826.997090][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1827.008335][   T24] usb 1-1: config 87 has an invalid interface number: 248 but max is 0
[ 1827.016893][   T24] usb 1-1: config 87 has no interface number 0
[ 1827.041342][   T24] usb 1-1: config 87 interface 248 has no altsetting 0
[ 1827.066268][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1827.099532][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.125729][   T24] usb 1-1: Product: syz
[ 1827.141522][   T24] usb 1-1: Manufacturer: syz
[ 1827.154289][   T24] usb 1-1: SerialNumber: syz
[ 1827.242549][T28770] kvm: pic: non byte write
[ 1827.877591][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'.
[ 1828.056878][T28792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1828.065978][T28792] syzkaller0: entered promiscuous mode
[ 1828.071462][T28792] syzkaller0: entered allmulticast mode
[ 1828.106297][ T5350] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1828.136798][T28793] ubi: mtd0 is already attached to ubi16
[ 1828.144711][T28793] trusted_key: encrypted_key: insufficient parameters specified
[ 1828.495930][ T5350] usb 5-1: Using ep0 maxpacket: 16
[ 1828.503111][ T5350] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 110, changing to 7
[ 1828.516973][ T5350] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[ 1828.526702][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.535183][ T5350] usb 5-1: Product: syz
[ 1828.541939][ T5350] usb 5-1: Manufacturer: syz
[ 1828.546613][ T5350] usb 5-1: SerialNumber: syz
[ 1828.552403][T12147] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1828.680508][ T5714] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1828.723240][T12147] usb 4-1: Using ep0 maxpacket: 32
[ 1828.730105][T12147] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1828.738763][T12147] usb 4-1: config 87 has an invalid interface number: 248 but max is 0
[ 1828.747110][T12147] usb 4-1: config 87 has no interface number 0
[ 1828.753310][T12147] usb 4-1: config 87 interface 248 has no altsetting 0
[ 1828.762853][T12147] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1828.774566][T12147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.782756][T12147] usb 4-1: Product: syz
[ 1828.787030][T12147] usb 4-1: Manufacturer: syz
[ 1828.792198][T12147] usb 4-1: SerialNumber: syz
[ 1828.842768][ T5714] usb 3-1: Using ep0 maxpacket: 16
[ 1828.851884][   T30] audit: type=1400 audit(1781885664.330:3207): avc:  denied  { write } for  pid=28784 comm="syz.4.5365" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1828.852398][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1828.887630][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1828.896591][    T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1828.902467][ T5350] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1828.915685][ T5350] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1828.926283][ T5714] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1828.935431][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.951803][ T5714] usb 3-1: Product: syz
[ 1828.958117][ T5714] usb 3-1: Manufacturer: syz
[ 1828.979761][ T5350] usb 5-1: USB disconnect, device number 123
[ 1828.986488][ T5714] usb 3-1: SerialNumber: syz
[ 1829.008630][ T5714] usb 3-1: config 0 descriptor??
[ 1829.036659][ T5714] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1829.051899][ T5714] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1829.087541][   T24] rndis_host 1-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1829.110444][   T24] usb 1-1: USB disconnect, device number 113
[ 1829.130756][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1829.142040][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1829.152178][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1829.183026][    T9] usb 2-1: config 0 descriptor??
[ 1829.199441][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1829.423615][    T9] usb 2-1: USB disconnect, device number 103
[ 1829.672841][ T5714] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1829.689613][ T5714] em28xx 3-1:0.0: Config register raw data: 0x41
[ 1829.758853][   T30] audit: type=1400 audit(1781885665.170:3208): avc:  denied  { read write } for  pid=28814 comm="syz.4.5375" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1829.794528][T28074] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 1829.805161][T28074] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1829.817992][   T30] audit: type=1400 audit(1781885665.170:3209): avc:  denied  { open } for  pid=28814 comm="syz.4.5375" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1829.947568][    T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1829.985769][T28792] tipc: Resetting bearer <eth:syzkaller0>
[ 1829.997538][T28074] usb 3-1: USB disconnect, device number 65
[ 1830.004720][T28074] em28xx 3-1:0.0: Disconnecting em28xx
[ 1830.018598][T28791] tipc: Resetting bearer <eth:syzkaller0>
[ 1830.042124][T28074] em28xx 3-1:0.0: Freeing device
[ 1830.072171][T28791] tipc: Disabling bearer <eth:syzkaller0>
[ 1830.135927][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1830.157371][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1830.184099][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1830.222620][    T9] usb 2-1: config 0 descriptor??
[ 1830.242484][    T9] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1
[ 1830.276799][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1830.482719][T28819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1831.020097][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1831.347522][T12147] rndis_host 4-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1831.364216][T12147] usb 4-1: USB disconnect, device number 111
[ 1831.609140][T28842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5380'.
[ 1831.705794][T28844] netlink: 'syz.4.5380': attribute type 1 has an invalid length.
[ 1831.717411][T28841] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5381'.
[ 1831.939670][T28842] syz.4.5380 (28842): drop_caches: 2
[ 1832.562413][    T9] usb 2-1: USB disconnect, device number 104
[ 1833.393581][ T5714] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[ 1833.659260][ T5714] usb 3-1: config 4 has an invalid interface number: 44 but max is 0
[ 1833.801893][ T5714] usb 3-1: config 4 has no interface number 0
[ 1833.885805][T25425] Bluetooth: Error in BCSP hdr checksum
[ 1833.971428][ T5714] usb 3-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1834.056198][ T5714] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1834.071346][ T5714] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1834.088138][ T5714] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[ 1834.097525][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1834.119071][ T5714] usb 3-1: Product: syz
[ 1834.126038][ T5714] usb 3-1: Manufacturer: syz
[ 1834.136539][ T5714] usb 3-1: SerialNumber: syz
[ 1834.144356][T25425] Bluetooth: Error in BCSP hdr checksum
[ 1834.161459][T28847] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1834.638271][T28865] netlink: 'syz.0.5388': attribute type 15 has an invalid length.
[ 1834.744195][ T5714] dvb-usb: found a 'Gigabyte U7000' in warm state.
[ 1834.767561][ T5714] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1834.776461][ T5714] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[ 1834.784627][ T5714] usb 3-1: media controller created
[ 1834.793229][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1834.973270][T28875] ubi: mtd0 is already attached to ubi16
[ 1834.999238][T28875] trusted_key: encrypted_key: insufficient parameters specified
[ 1835.192056][ T5714] DVB: Unable to find symbol dib7000p_attach()
[ 1835.198734][ T5714] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[ 1835.361421][T28879] ceph: No mds server is up or the cluster is laggy
[ 1835.575437][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1835.597002][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1835.640669][ T5714] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1835.649825][ T5350] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1835.657591][ T5714] Registered IR keymap rc-empty
[ 1835.668441][ T5714] dvb-usb: could not initialize remote control.
[ 1835.681511][ T5714] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[ 1835.699766][ T5714] dib0700: rc submit urb failed
[ 1835.766437][   T30] audit: type=1400 audit(1781885670.719:3210): avc:  denied  { read } for  pid=28885 comm="syz.3.5391" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1835.800760][T28847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1835.809507][T28847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1835.823696][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'.
[ 1835.833959][T28847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1835.843367][T28847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1835.858104][T28847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1835.866685][ T5350] usb 2-1: Using ep0 maxpacket: 32
[ 1835.877915][ T5350] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1835.886548][T28847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1835.895320][ T5350] usb 2-1: config 87 has an invalid interface number: 248 but max is 0
[ 1835.898885][T28847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1835.905332][ T5350] usb 2-1: config 87 has no interface number 0
[ 1835.916763][T28847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1835.918402][ T5350] usb 2-1: config 87 interface 248 has no altsetting 0
[ 1835.935006][ T5350] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1835.937518][ T5812] usb 3-1: USB disconnect, device number 66
[ 1835.945324][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1835.958587][ T5350] usb 2-1: Product: syz
[ 1835.964745][T24710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1835.981933][ T5350] usb 2-1: Manufacturer: syz
[ 1835.986573][ T5350] usb 2-1: SerialNumber: syz
[ 1836.004255][ T5812] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[ 1836.132430][    T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1836.347656][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1836.500128][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1836.562853][    T9] usb 4-1: config 6 has an invalid interface number: 150 but max is 0
[ 1836.588574][    T9] usb 4-1: config 6 has an invalid descriptor of length 24, skipping remainder of the config
[ 1836.602847][    T9] usb 4-1: config 6 has no interface number 0
[ 1836.609209][    T9] usb 4-1: config 6 interface 150 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1836.624693][    T9] usb 4-1: config 6 interface 150 has no altsetting 0
[ 1836.644546][    T9] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f
[ 1836.654595][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1836.664333][    T9] usb 4-1: Product: syz
[ 1836.668752][    T9] usb 4-1: Manufacturer: syz
[ 1836.673392][    T9] usb 4-1: SerialNumber: syz
[ 1836.901494][ T5812] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1837.065652][ T5812] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1837.065689][ T5812] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1837.065704][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1837.068375][ T5812] usb 5-1: config 0 descriptor??
[ 1837.088514][ T5812] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1837.300534][  T804] usb 5-1: USB disconnect, device number 124
[ 1837.779223][ T5620] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1837.932177][ T5350] rndis_host 2-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1837.945430][ T5620] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1837.945456][ T5620] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1837.945470][ T5620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1837.947189][ T5620] usb 5-1: config 0 descriptor??
[ 1837.949301][ T5620] aiptek 5-1:0.0: interface has no int in endpoints, but must have minimum 1
[ 1837.949864][ T5620] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1837.960851][ T5350] usb 2-1: USB disconnect, device number 105
[ 1838.389202][ T5620] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[ 1838.560923][ T5620] usb 1-1: config 4 has an invalid interface number: 44 but max is 0
[ 1838.560976][ T5620] usb 1-1: config 4 has no interface number 0
[ 1838.561020][ T5620] usb 1-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1838.561045][ T5620] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1838.561069][ T5620] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1838.563503][ T5620] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[ 1838.563530][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1838.563550][ T5620] usb 1-1: Product: syz
[ 1838.563565][ T5620] usb 1-1: Manufacturer: syz
[ 1838.563580][ T5620] usb 1-1: SerialNumber: syz
[ 1838.567268][T28911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1839.019353][ T5620] dvb-usb: found a 'Gigabyte U7000' in warm state.
[ 1839.029926][ T5620] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1839.041577][ T5620] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[ 1839.050542][ T5620] usb 1-1: media controller created
[ 1839.069756][    T9] usb 4-1: USB disconnect, device number 112
[ 1839.072714][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1839.117662][T28918] xt_recent: Unsupported userspace flags (000000b1)
[ 1839.178802][T28918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5399'.
[ 1839.237338][ T5620] DVB: Unable to find symbol dib7000p_attach()
[ 1839.247477][ T5620] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[ 1839.354303][ T5620] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1839.374156][T28927] FAULT_INJECTION: forcing a failure.
[ 1839.374156][T28927] name failslab, interval 1, probability 0, space 0, times 0
[ 1839.382087][ T5620] Registered IR keymap rc-empty
[ 1839.399079][ T5620] dvb-usb: could not initialize remote control.
[ 1839.423910][ T5620] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[ 1839.451951][T28927] CPU: 0 UID: 0 PID: 28927 Comm: syz.3.5401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1839.451981][T28927] Tainted: [L]=SOFTLOCKUP
[ 1839.451987][T28927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1839.451997][T28927] Call Trace:
[ 1839.452004][T28927]  <TASK>
[ 1839.452011][T28927]  dump_stack_lvl+0x100/0x190
[ 1839.452037][T28927]  should_fail_ex.cold+0x5/0xa
[ 1839.452061][T28927]  should_failslab+0xc2/0x120
[ 1839.452082][T28927]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1839.452104][T28927]  ? binder_transaction+0x1b55/0x9c10
[ 1839.452129][T28927]  binder_transaction+0x1b55/0x9c10
[ 1839.452171][T28927]  ? __pfx___schedule+0x10/0x10
[ 1839.452198][T28927]  ? __pfx_binder_transaction+0x10/0x10
[ 1839.452216][ T5620] dib0700: rc submit urb failed
[ 1839.452222][T28927]  ? __lock_acquire+0x4a5/0x2630
[ 1839.452253][T28927]  ? find_held_lock+0x2b/0x80
[ 1839.452268][T28927]  ? is_bpf_text_address+0x8a/0x1a0
[ 1839.452288][T28927]  ? is_bpf_text_address+0x8a/0x1a0
[ 1839.452308][T28927]  ? bpf_ksym_find+0x128/0x1c0
[ 1839.452330][T28927]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1839.452348][T28927]  ? is_bpf_text_address+0x94/0x1a0
[ 1839.452368][T28927]  ? kernel_text_address+0x8d/0x100
[ 1839.452387][T28927]  ? find_held_lock+0x2b/0x80
[ 1839.452405][T28927]  ? __lock_acquire+0x4a5/0x2630
[ 1839.452428][T28927]  ? __lock_acquire+0x4a5/0x2630
[ 1839.452456][T28927]  ? find_held_lock+0x2b/0x80
[ 1839.452470][T28927]  ? __might_fault+0xc5/0x140
[ 1839.452492][T28927]  ? __might_fault+0xc5/0x140
[ 1839.452524][T28927]  binder_thread_write+0x1303/0x4db0
[ 1839.452549][T28927]  ? __lock_acquire+0x4a5/0x2630
[ 1839.452568][T28927]  ? __pfx_binder_thread_write+0x10/0x10
[ 1839.452587][T28927]  ? binder_debug+0xe0/0x190
[ 1839.452610][T28927]  ? __pfx_binder_debug+0x10/0x10
[ 1839.452633][T28927]  ? binder_debug+0xe0/0x190
[ 1839.452656][T28927]  ? __pfx_binder_debug+0x10/0x10
[ 1839.452692][T28927]  binder_ioctl+0x28f8/0x7550
[ 1839.452718][T28927]  ? tomoyo_path_number_perm+0x188/0x580
[ 1839.452746][T28927]  ? __pfx_binder_ioctl+0x10/0x10
[ 1839.452766][T28927]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1839.452786][T28927]  ? do_vfs_ioctl+0x226/0x13e0
[ 1839.452804][T28927]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1839.452821][T28927]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1839.452852][T28927]  ? hook_file_ioctl_common+0x149/0x410
[ 1839.452875][T28927]  ? selinux_file_ioctl+0x13b/0x290
[ 1839.452898][T28927]  ? selinux_file_ioctl+0xb6/0x290
[ 1839.452922][T28927]  ? __pfx_binder_ioctl+0x10/0x10
[ 1839.452940][T28927]  __x64_sys_ioctl+0x18e/0x210
[ 1839.452959][T28927]  do_syscall_64+0x115/0x870
[ 1839.452978][T28927]  ? clear_bhb_loop+0x40/0x90
[ 1839.452998][T28927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1839.453014][T28927] RIP: 0033:0x7fc7d659ce59
[ 1839.453029][T28927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1839.453044][T28927] RSP: 002b:00007fc7d47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1839.453060][T28927] RAX: ffffffffffffffda RBX: 00007fc7d6816090 RCX: 00007fc7d659ce59
[ 1839.453072][T28927] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003
[ 1839.453082][T28927] RBP: 00007fc7d47f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1839.453091][T28927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1839.453101][T28927] R13: 00007fc7d6816128 R14: 00007fc7d6816090 R15: 00007fffaf320808
[ 1839.453122][T28927]  </TASK>
[ 1839.833022][T28911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1839.841681][T28911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1839.854903][T28911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1839.864879][T28911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1839.929630][T28911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1839.975628][T28911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1839.992818][T28911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1840.003306][T28911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1840.026620][ T5812] usb 1-1: USB disconnect, device number 114
[ 1840.074543][ T5812] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[ 1840.281737][T28935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5402'.
[ 1840.700108][ T5714] usb 5-1: USB disconnect, device number 125
[ 1840.738750][T28937] netlink: 'syz.3.5404': attribute type 13 has an invalid length.
[ 1840.822906][T28074] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1841.137548][T28944] hub 1-0:1.0: USB hub found
[ 1841.149658][T28944] hub 1-0:1.0: 1 port detected
[ 1842.370073][T28956] ubi: mtd0 is already attached to ubi16
[ 1842.377400][T28956] trusted_key: encrypted_key: insufficient parameters specified
[ 1842.876620][T28074] usb 3-1: Using ep0 maxpacket: 32
[ 1842.958613][T28074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1842.969767][T28074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1842.980112][T28074] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1842.989279][T28074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1843.002264][T28074] usb 3-1: config 0 descriptor??
[ 1843.011009][T28074] hub 3-1:0.0: USB hub found
[ 1843.100684][  T804] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1843.112898][T28960] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1843.136346][T28960] syzkaller0: entered promiscuous mode
[ 1843.147931][T28960] syzkaller0: entered allmulticast mode
[ 1843.165304][T28948] syzkaller1: entered promiscuous mode
[ 1843.175661][T28948] syzkaller1: entered allmulticast mode
[ 1843.315566][  T804] usb 5-1: Using ep0 maxpacket: 32
[ 1843.326851][  T804] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1843.344015][  T804] usb 5-1: config 87 has an invalid interface number: 248 but max is 0
[ 1843.371121][  T804] usb 5-1: config 87 has no interface number 0
[ 1843.384973][T28074] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1843.392926][  T804] usb 5-1: config 87 interface 248 has no altsetting 0
[ 1843.414122][  T804] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1843.427544][T28074] usbhid 3-1:0.0: can't add hid device: -71
[ 1843.435858][T28074] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1843.444548][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1843.454436][  T804] usb 5-1: Product: syz
[ 1843.459382][  T804] usb 5-1: Manufacturer: syz
[ 1843.463995][  T804] usb 5-1: SerialNumber: syz
[ 1843.469462][T28074] usb 3-1: USB disconnect, device number 67
[ 1844.297069][ T5812] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1844.602830][ T5812] usb 2-1: Using ep0 maxpacket: 32
[ 1844.609412][ T5812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1844.640486][ T5812] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1844.652236][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1844.673361][ T5812] usb 2-1: Product: syz
[ 1844.678439][ T5812] usb 2-1: Manufacturer: syz
[ 1844.683894][ T5812] usb 2-1: SerialNumber: syz
[ 1844.692602][ T5812] usb 2-1: config 0 descriptor??
[ 1844.698680][T28975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1844.841177][   T29] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1844.961164][    T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1845.135944][ T5812] usb 2-1: USB disconnect, device number 106
[ 1845.368725][    T9] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1845.469615][  T804] rndis_host 5-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1845.507217][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1845.531815][    T9] usb 4-1: config 0 has no interface number 0
[ 1845.630007][    T9] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1845.856803][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1845.961669][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1846.028864][  T804] usb 5-1: USB disconnect, device number 126
[ 1846.127772][    T9] usb 4-1: Product: syz
[ 1846.239928][    T9] usb 4-1: Manufacturer: syz
[ 1846.338348][    T9] usb 4-1: SerialNumber: syz
[ 1846.692640][    T9] usb 4-1: config 0 descriptor??
[ 1847.111449][T28994] slcan: can't register candev
[ 1847.196060][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1847.211665][   T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1847.732127][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1847.776236][   T29] usb 1-1: config 0 descriptor??
[ 1847.865290][    T9] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1847.962420][   T29] usb 1-1: can't set config #0, error -71
[ 1847.979002][   T29] usb 1-1: USB disconnect, device number 115
[ 1848.021036][T29007] netlink: 'syz.2.5420': attribute type 13 has an invalid length.
[ 1848.051928][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5418'.
[ 1848.204905][T29005] syzkaller1: entered promiscuous mode
[ 1848.213565][T29005] syzkaller1: entered allmulticast mode
[ 1848.225588][T29005] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1848.241180][T29005] syzkaller0: entered promiscuous mode
[ 1848.247737][T29005] syzkaller0: entered allmulticast mode
[ 1848.407394][   T29] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1848.589153][   T29] usb 1-1: Using ep0 maxpacket: 32
[ 1848.606505][   T29] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1848.633200][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1848.648246][   T29] usb 1-1: Product: syz
[ 1848.653191][   T29] usb 1-1: Manufacturer: syz
[ 1848.659805][   T29] usb 1-1: SerialNumber: syz
[ 1848.671469][   T29] usb 1-1: config 0 descriptor??
[ 1848.681203][   T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1848.689047][   T29] dvb-usb: bulk message failed: -22 (4/0)
[ 1848.694899][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1848.709137][   T29] dvb-usb: bulk message failed: -22 (5/0)
[ 1848.714962][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1848.729419][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1848.746137][   T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1848.755311][   T29] usb 1-1: media controller created
[ 1848.768897][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1848.786163][   T29] usb 1-1: selecting invalid altsetting 3
[ 1848.792024][   T29] ttusb2: set interface to alts=3 failed
[ 1848.818536][   T29] DVB: Unable to find symbol tda10086_attach()
[ 1848.824906][   T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1848.836648][   T29] dvb-usb: bulk message failed: -22 (4/0)
[ 1848.843184][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1848.854149][   T29] dvb-usb: bulk message failed: -22 (5/0)
[ 1848.860923][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1848.875988][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1848.965307][T29009] /dev/sg0: Can't lookup blockdev
[ 1849.000774][ T5714] usb 5-1: new full-speed USB device number 127 using dummy_hcd
[ 1849.067646][T28989] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1849.073832][T28989] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1849.172682][    C0] usb 4-1: yurex_control_callback - control failed: -2
[ 1849.192953][ T5714] usb 5-1: config 4 has an invalid interface number: 44 but max is 0
[ 1849.208694][ T5714] usb 5-1: config 4 has no interface number 0
[ 1849.219967][ T5714] usb 5-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1849.234399][   T29] usb 4-1: USB disconnect, device number 113
[ 1849.240488][ T5714] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1849.255366][ T5714] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1849.268376][   T29] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1849.279240][ T5714] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[ 1849.289613][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1849.300633][ T5714] usb 5-1: Product: syz
[ 1849.314231][ T5714] usb 5-1: Manufacturer: syz
[ 1849.328357][ T5714] usb 5-1: SerialNumber: syz
[ 1849.343951][T29017] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1849.435583][T29029] dvb-usb: bulk message failed: -22 (7/0)
[ 1849.447756][T29029] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[ 1849.470458][T29029] ttusb2: i2c transfer failed.
[ 1849.649846][T29031] ubi: mtd0 is already attached to ubi16
[ 1849.658788][T29031] trusted_key: encrypted_key: insufficient parameters specified
[ 1849.951268][ T5714] dvb-usb: found a 'Gigabyte U7000' in warm state.
[ 1849.980192][ T5714] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1850.005735][ T5714] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[ 1850.019982][ T5714] usb 5-1: media controller created
[ 1850.028949][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1850.154377][ T5714] DVB: Unable to find symbol dib7000p_attach()
[ 1850.166306][ T5714] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[ 1850.231064][ T5714] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1850.237411][ T5714] Registered IR keymap rc-empty
[ 1850.243712][ T5714] dvb-usb: could not initialize remote control.
[ 1850.250372][ T5714] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[ 1850.266693][T29039] PKCS7: Unknown OID: [4] 0.0
[ 1850.271603][T29039] PKCS7: Only support pkcs7_signedData type
[ 1850.340502][T29039] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1850.578616][ T5714] dib0700: rc submit urb failed
[ 1850.616635][   T29] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1850.697742][T29040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1850.707787][T29040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1850.719360][T29040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1850.728765][T29040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1850.739396][T29040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1850.749039][T29040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1850.760676][T29040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1850.770398][T29040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1850.789146][   T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 1850.802857][   T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[ 1850.821787][   T29] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1850.831953][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1850.842388][ T5714] usb 5-1: USB disconnect, device number 127
[ 1850.849544][   T29] usb 4-1: Product: syz
[ 1850.855295][   T29] usb 4-1: Manufacturer: syz
[ 1850.861207][   T29] usb 4-1: SerialNumber: syz
[ 1850.869660][ T5714] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[ 1850.874604][    T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1851.056103][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1851.080287][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1851.098220][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1851.117962][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1851.143871][    T9] usb 2-1: config 0 descriptor??
[ 1851.151146][   T30] audit: type=1400 audit(1781885684.908:3211): avc:  denied  { append } for  pid=29035 comm="syz.3.5430" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1851.192069][   T29] usb 4-1: Can't get UAC3 power state for id 10
[ 1851.220411][   T29] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1851.235390][   T29] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1851.270017][   T29] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1
[ 1851.398343][    T9] usbhid 2-1:0.0: can't add hid device: -71
[ 1851.408855][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1851.436419][    T9] usb 2-1: USB disconnect, device number 107
[ 1851.449021][ T5735] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1851.534127][T29062] openvswitch: netlink: IP tunnel dst address not specified
[ 1851.612693][ T5735] usb 3-1: Using ep0 maxpacket: 8
[ 1851.630970][ T5735] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11
[ 1851.661415][T29068] netlink: 'syz.4.5434': attribute type 13 has an invalid length.
[ 1851.685385][ T5735] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1851.720124][ T5735] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1851.727764][ T5735] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1851.731652][   T29] usb 4-1: USB disconnect, device number 114
[ 1851.747117][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1851.790116][ T5735] usb 3-1: config 0 descriptor??
[ 1851.970223][    T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1852.146620][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1852.171875][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1852.194805][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1852.216397][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1852.247009][    T9] usb 2-1: config 0 descriptor??
[ 1852.319019][T29079] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1852.427524][  T804] usb 1-1: USB disconnect, device number 116
[ 1852.460750][T29079] syzkaller0: entered promiscuous mode
[ 1852.495798][T29079] syzkaller0: entered allmulticast mode
[ 1852.518917][T29071] syzkaller1: entered promiscuous mode
[ 1852.542714][T29071] syzkaller1: entered allmulticast mode
[ 1852.550125][  T804] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1852.653080][T29091] netlink: 'syz.0.5438': attribute type 1 has an invalid length.
[ 1852.661611][T29091] netlink: 'syz.0.5438': attribute type 2 has an invalid length.
[ 1852.669561][T29091] netlink: 'syz.0.5438': attribute type 1 has an invalid length.
[ 1852.677862][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'.
[ 1853.363394][T29105] ubi: mtd0 is already attached to ubi16
[ 1853.370167][T29105] trusted_key: encrypted_key: insufficient parameters specified
[ 1853.779066][    T9] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[ 1853.812462][    T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input195
[ 1853.918248][  T804] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[ 1853.944071][    T9] input: failed to attach handler kbd to device input195, error: -5
[ 1853.994229][ T5735] usbhid 3-1:0.0: can't add hid device: -71
[ 1854.017868][ T5735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1854.028264][    T9] usb 2-1: USB disconnect, device number 108
[ 1854.115145][  T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1854.129038][ T5735] usb 3-1: USB disconnect, device number 68
[ 1854.154660][  T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1854.199360][  T804] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1854.249543][  T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.274889][T29114] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.5443' sets config #0
[ 1854.289510][  T804] usb 5-1: config 0 descriptor??
[ 1854.351557][T28074] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1854.525351][T28074] usb 1-1: Using ep0 maxpacket: 8
[ 1854.608050][T29126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'.
[ 1854.618699][T29126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5445'.
[ 1854.652720][T28074] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11
[ 1854.704982][T28074] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1854.759471][T28074] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1854.791077][T28074] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 1854.822429][T28074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.832387][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1854.852723][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1854.864417][T28074] usb 1-1: config 0 descriptor??
[ 1854.881838][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1854.901795][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1854.923387][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1854.973919][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1855.010269][  T804] isku 0003:1E7D:319C.0016: unknown main item tag 0x0
[ 1855.046072][  T804] isku 0003:1E7D:319C.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[ 1855.259463][   T30] audit: type=1400 audit(1781885688.703:3212): avc:  denied  { listen } for  pid=29136 comm="syz.1.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1855.419602][ T5714] usb 5-1: USB disconnect, device number 2
[ 1855.794551][T29150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5450'.
[ 1856.279149][T29162] ubi: mtd0 is already attached to ubi16
[ 1856.286703][T29162] trusted_key: encrypted_key: insufficient parameters specified
[ 1856.718870][T29163] ±ÿÿÿòÿÿÿòÿÿ: renamed from lo (while UP)
[ 1856.769510][   T30] audit: type=1400 audit(1781885690.106:3213): avc:  denied  { unmount } for  pid=18489 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1856.864756][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1857.066337][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1857.072670][T29167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5456'.
[ 1857.113890][  T804] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1857.123025][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1857.155441][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1857.161356][T29169] FAULT_INJECTION: forcing a failure.
[ 1857.161356][T29169] name failslab, interval 1, probability 0, space 0, times 0
[ 1857.177378][ T5714] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1857.185771][T29169] CPU: 1 UID: 0 PID: 29169 Comm: syz.1.5457 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1857.185798][T29169] Tainted: [L]=SOFTLOCKUP
[ 1857.185805][T29169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1857.185815][T29169] Call Trace:
[ 1857.185822][T29169]  <TASK>
[ 1857.185828][T29169]  dump_stack_lvl+0x100/0x190
[ 1857.185855][T29169]  should_fail_ex.cold+0x5/0xa
[ 1857.185880][T29169]  should_failslab+0xc2/0x120
[ 1857.185899][T29169]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1857.185923][T29169]  ? do_getname+0x35/0x390
[ 1857.185952][T29169]  do_getname+0x35/0x390
[ 1857.185980][T29169]  user_path_at+0x26/0x60
[ 1857.186000][T29169]  __x64_sys_mount+0x1fb/0x310
[ 1857.186026][T29169]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1857.186053][T29169]  ? rcu_is_watching+0x12/0xc0
[ 1857.186080][T29169]  do_syscall_64+0x115/0x870
[ 1857.186101][T29169]  ? clear_bhb_loop+0x40/0x90
[ 1857.186121][T29169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.186138][T29169] RIP: 0033:0x7f6e1ab9ce59
[ 1857.186153][T29169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1857.186169][T29169] RSP: 002b:00007f6e1b9c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1857.186188][T29169] RAX: ffffffffffffffda RBX: 00007f6e1ae15fa0 RCX: 00007f6e1ab9ce59
[ 1857.186199][T29169] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000
[ 1857.186210][T29169] RBP: 00007f6e1b9c9090 R08: 0000200000000040 R09: 0000000000000000
[ 1857.186221][T29169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1857.186231][T29169] R13: 00007f6e1ae16038 R14: 00007f6e1ae15fa0 R15: 00007ffff45a6fe8
[ 1857.186256][T29169]  </TASK>
[ 1857.364706][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1857.387173][    T9] usb 5-1: config 0 descriptor??
[ 1857.401061][  T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1857.485344][  T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1857.502701][T28074] usbhid 1-1:0.0: can't add hid device: -71
[ 1857.516979][T28074] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1857.527001][  T804] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1857.555821][T28074] usb 1-1: USB disconnect, device number 117
[ 1857.565037][  T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1857.568548][ T5714] usb 4-1: Using ep0 maxpacket: 8
[ 1857.580979][ T5714] usb 4-1: config 0 has an invalid interface number: 151 but max is 1
[ 1857.595784][ T5714] usb 4-1: config 0 has no interface number 1
[ 1857.602297][  T804] usb 3-1: config 0 descriptor??
[ 1857.605099][ T5714] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1857.625192][ T5714] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[ 1857.637849][ T5714] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[ 1857.649935][ T5714] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1857.660201][ T5714] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1857.663886][    T9] usbhid 5-1:0.0: can't add hid device: -71
[ 1857.673424][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[ 1857.673460][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 1024
[ 1857.688718][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1857.711996][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'.
[ 1857.722878][T29176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'.
[ 1857.746503][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[ 1857.763246][    T9] usb 5-1: USB disconnect, device number 3
[ 1857.764416][ T5714] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[ 1857.782838][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1857.837909][ T5714] usb 4-1: Product: syz
[ 1857.858052][ T5714] usb 4-1: Manufacturer: syz
[ 1857.906970][ T5714] usb 4-1: SerialNumber: syz
[ 1858.009561][ T5714] usb 4-1: config 0 descriptor??
[ 1858.043082][T29158] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1858.149426][  T804] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1858.160289][ T5714] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1858.163448][  T804] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1858.171558][ T5714] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1858.174457][  T804] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1858.196280][  T804] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[ 1858.322448][  T804] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device
[ 1858.347762][  T804] pyra 0003:1E7D:2CF6.0017: couldn't install mouse
[ 1858.373795][  T804] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -32
[ 1858.386718][ T5714] usb 4-1: USB disconnect, device number 115
[ 1858.478488][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1858.535490][T29183] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1858.707992][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1858.719462][T29185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1858.737215][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1858.822216][T29185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1858.841455][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1858.850974][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.976715][    T9] usb 5-1: config 0 descriptor??
[ 1858.978330][T29188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5462'.
[ 1859.002906][T29188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5462'.
[ 1859.410016][   T29] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1859.619644][   T29] usb 4-1: Using ep0 maxpacket: 32
[ 1859.650714][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1859.752602][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1859.808457][   T29] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1859.854657][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1859.869618][    T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[ 1859.980567][   T29] usb 4-1: config 0 descriptor??
[ 1861.354015][T29191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1861.625308][    T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input196
[ 1861.710754][T29191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1861.755868][    T9] input: failed to attach handler kbd to device input196, error: -5
[ 1861.798076][T28074] usb 3-1: USB disconnect, device number 69
[ 1861.842352][    T9] usb 5-1: USB disconnect, device number 4
[ 1862.590653][   T29] usbhid 4-1:0.0: can't add hid device: -71
[ 1862.624226][   T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1862.655150][T29218] ubi: mtd0 is already attached to ubi16
[ 1862.662513][T29218] trusted_key: encrypted_key: insufficient parameters specified
[ 1863.005385][T29216] sg_write: data in/out 201523456/58 bytes for SCSI command 0x31-- guessing data in;
[ 1863.005385][T29216]    program syz.0.5469 not setting count and/or reply_len properly
[ 1863.045173][   T29] usb 4-1: USB disconnect, device number 116
[ 1863.179710][ T5714] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1863.225718][T29226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5471'.
[ 1863.696468][T29227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'.
[ 1863.712697][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5472'.
[ 1863.807829][ T5714] usb 3-1: Using ep0 maxpacket: 32
[ 1863.819810][   T30] audit: type=1400 audit(1781885696.605:3214): avc:  denied  { read } for  pid=29228 comm="syz.0.5473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1863.847313][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1863.860823][ T5714] usb 3-1: config 87 has an invalid interface number: 248 but max is 0
[ 1863.882271][ T5714] usb 3-1: config 87 has no interface number 0
[ 1863.896681][ T5714] usb 3-1: config 87 interface 248 has no altsetting 0
[ 1863.908089][ T5714] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e005, bcdDevice=9b.e1
[ 1863.922602][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1863.935137][ T5714] usb 3-1: Product: syz
[ 1863.939597][ T5714] usb 3-1: Manufacturer: syz
[ 1863.944360][ T5714] usb 3-1: SerialNumber: syz
[ 1865.610845][ T5714] rndis_host 3-1:87.248: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1865.923832][ T5714] usb 3-1: USB disconnect, device number 70
[ 1866.590204][T29253] netlink: 'syz.0.5481': attribute type 10 has an invalid length.
[ 1866.598156][T29253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5481'.
[ 1866.624669][ T5714] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1866.723671][T29264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5484'.
[ 1867.105970][   T30] audit: type=1400 audit(1781885699.643:3215): avc:  denied  { map } for  pid=29251 comm="syz.0.5481" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[ 1867.155011][T28074] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1867.297266][ T5714] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1867.308474][ T5714] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.321626][ T5714] usb 3-1: config 220 has no interface number 2
[ 1867.345935][T28074] usb 2-1: Using ep0 maxpacket: 32
[ 1867.346962][ T5714] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1867.364514][ T5714] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1867.374960][ T5714] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1867.382034][ T5714] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1867.391697][T28074] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1867.407007][ T5714] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1867.416560][T28074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1867.422042][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1867.435593][T28074] usb 2-1: Product: syz
[ 1867.442915][   T30] audit: type=1400 audit(1781885699.947:3216): avc:  denied  { name_bind } for  pid=29269 comm="syz.0.5486" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1867.448111][T28074] usb 2-1: Manufacturer: syz
[ 1867.475734][ T5714] usb 3-1: Product: syz
[ 1867.515779][ T5714] usb 3-1: Manufacturer: syz
[ 1867.547659][ T5714] usb 3-1: SerialNumber: syz
[ 1867.559015][T28074] usb 2-1: SerialNumber: syz
[ 1867.576330][   T30] audit: type=1400 audit(1781885699.956:3217): avc:  denied  { accept } for  pid=29269 comm="syz.0.5486" lport=46850 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1867.849630][T28074] usb 2-1: config 0 descriptor??
[ 1868.248152][T28074] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1868.405312][T28074] dvb-usb: bulk message failed: -22 (2/0)
[ 1868.871928][T28074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1868.881995][T28074] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1868.890323][T28074] usb 2-1: media controller created
[ 1868.904059][T28074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1869.387675][   T30] audit: type=1400 audit(1781885699.956:3218): avc:  denied  { getopt } for  pid=29269 comm="syz.0.5486" lport=46850 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1869.411639][   T30] audit: type=1400 audit(1781885700.307:3219): avc:  denied  { getopt } for  pid=29274 comm="syz.0.5489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1869.437695][ T5714] usb 3-1: selecting invalid altsetting 0
[ 1869.465248][ T5714] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1869.472753][ T5714] uvcvideo 3-1:220.0: No valid video chain found.
[ 1869.563350][ T5714] usb 3-1: selecting invalid altsetting 0
[ 1869.569223][ T5714] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1869.572931][T28074] usb 2-1: selecting invalid altsetting 7
[ 1869.594458][ T5714] usb 3-1: USB disconnect, device number 71
[ 1869.638628][T28074] cxusb: set interface failed
[ 1869.659834][T28074] dvb-usb: bulk message failed: -22 (1/0)
[ 1869.680628][   T30] audit: type=1326 audit(1781885702.158:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29286 comm="syz.3.5491" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7d659ce59 code=0x0
[ 1869.769997][T29292] FAULT_INJECTION: forcing a failure.
[ 1869.769997][T29292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1869.787495][T28074] DVB: Unable to find symbol lgdt330x_attach()
[ 1869.793704][   T30] audit: type=1400 audit(1781885702.219:3221): avc:  denied  { mounton } for  pid=29286 comm="syz.3.5491" path="/proc/1466/cgroup" dev="proc" ino=109956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[ 1869.800908][T29292] CPU: 1 UID: 0 PID: 29292 Comm: syz.2.5492 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1869.800941][T29292] Tainted: [L]=SOFTLOCKUP
[ 1869.800947][T29292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1869.800957][T29292] Call Trace:
[ 1869.800963][T29292]  <TASK>
[ 1869.800969][T29292]  dump_stack_lvl+0x100/0x190
[ 1869.800993][T29292]  should_fail_ex.cold+0x5/0xa
[ 1869.801015][T29292]  _copy_from_user+0x2e/0xd0
[ 1869.801036][T29292]  copy_msghdr_from_user+0x9f/0x4f0
[ 1869.801057][T29292]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1869.801086][T29292]  ___sys_sendmsg+0x106/0x1e0
[ 1869.801107][T29292]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1869.801151][T29292]  __sys_sendmsg+0x170/0x220
[ 1869.801175][T29292]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1869.801209][T29292]  ? rcu_is_watching+0x12/0xc0
[ 1869.801234][T29292]  do_syscall_64+0x115/0x870
[ 1869.801254][T29292]  ? clear_bhb_loop+0x40/0x90
[ 1869.801274][T29292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.801290][T29292] RIP: 0033:0x7f1ba1d9ce59
[ 1869.801303][T29292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.801318][T29292] RSP: 002b:00007f1ba2baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1869.801334][T29292] RAX: ffffffffffffffda RBX: 00007f1ba2015fa0 RCX: 00007f1ba1d9ce59
[ 1869.801345][T29292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1869.801354][T29292] RBP: 00007f1ba2baf090 R08: 0000000000000000 R09: 0000000000000000
[ 1869.801364][T29292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1869.801373][T29292] R13: 00007f1ba2016038 R14: 00007f1ba2015fa0 R15: 00007ffebf427ef8
[ 1869.801395][T29292]  </TASK>
[ 1869.822013][T29284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5483'.
[ 1870.362951][T28074] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1870.379999][   T30] audit: type=1400 audit(1781885702.870:3222): avc:  denied  { append } for  pid=29286 comm="syz.3.5491" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1870.467758][   T30] audit: type=1400 audit(1781885702.952:3223): avc:  denied  { sqpoll } for  pid=29301 comm="syz.2.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1870.500019][   T29] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1870.540006][T28074] rc_core: IR keymap rc-dvico-portable not found
[ 1870.561758][T28074] Registered IR keymap rc-empty
[ 1870.576095][T28074] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[ 1870.609469][T28074] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input197
[ 1870.708672][   T29] usb 1-1: Using ep0 maxpacket: 32
[ 1870.787195][T28074] dvb-usb: schedule remote query interval to 100 msecs.
[ 1870.798082][   T29] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[ 1870.865281][   T29] usb 1-1: config 0 has no interface number 0
[ 1870.914518][   T29] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1870.976737][   T29] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1871.005502][T28074] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1871.013461][   T29] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1871.065946][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.076391][   T29] usb 1-1: Product: syz
[ 1871.101685][   T29] usb 1-1: Manufacturer: syz
[ 1871.112854][   T29] usb 1-1: SerialNumber: syz
[ 1871.115133][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1871.158612][   T29] usb 1-1: config 0 descriptor??
[ 1871.167745][    T9] usb 2-1: USB disconnect, device number 109
[ 1871.295328][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1871.487442][T29294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1871.549798][T29311] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1871.575084][    T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1871.576249][T29294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1871.688438][ T5714] usb 5-1: Using ep0 maxpacket: 32
[ 1871.732617][   T29] radio-si470x 1-1:0.35: this is not a si470x device.
[ 1871.742137][T29318] netlink: 'syz.0.5493': attribute type 10 has an invalid length.
[ 1871.753145][T29318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5493'.
[ 1872.001009][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1872.045144][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1872.065559][   T29] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[ 1872.079459][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1872.098803][   T29] usb 1-1: USB disconnect, device number 118
[ 1872.117546][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1872.156027][ T5714] usb 5-1: config 0 descriptor??
[ 1872.170328][ T5714] hub 5-1:0.0: USB hub found
[ 1872.448873][   T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1872.631051][   T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1872.648051][   T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1872.662110][   T24] usb 2-1: config 220 has no interface number 2
[ 1872.670303][   T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1872.685724][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1872.720173][   T24] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1872.738626][   T24] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1872.751287][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1872.763313][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1872.781690][   T24] usb 2-1: Product: syz
[ 1872.791367][   T24] usb 2-1: Manufacturer: syz
[ 1872.812490][   T24] usb 2-1: SerialNumber: syz
[ 1872.833117][ T5714] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1872.888392][ T5714] usbhid 5-1:0.0: can't add hid device: -71
[ 1872.894594][ T5714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1872.933226][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1872.967336][T25413] Bluetooth: Error in BCSP hdr checksum
[ 1872.973310][ T5714] usb 5-1: USB disconnect, device number 5
[ 1873.064659][   T24] usb 2-1: selecting invalid altsetting 0
[ 1873.096817][   T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1873.105356][   T24] uvcvideo 2-1:220.0: No valid video chain found.
[ 1873.118806][   T24] usb 2-1: selecting invalid altsetting 0
[ 1873.127524][   T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1873.140101][   T24] usb 2-1: USB disconnect, device number 110
[ 1873.247309][    T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1873.249264][T25423] Bluetooth: Error in BCSP hdr checksum
[ 1873.425444][    T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1873.448187][    T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1873.483680][    T9] usb 1-1: config 220 has no interface number 2
[ 1873.503090][    T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1873.554104][    T9] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1873.578244][    T9] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1873.608924][    T9] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1873.635771][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1873.658436][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1873.689990][    T9] usb 1-1: Product: syz
[ 1873.706045][    T9] usb 1-1: Manufacturer: syz
[ 1873.724325][    T9] usb 1-1: SerialNumber: syz
[ 1873.959145][ T5714] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[ 1874.148077][ T5714] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config
[ 1874.194506][ T5714] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1874.228719][ T5714] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[ 1874.284189][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1874.344124][ T5714] usb 5-1: config 0 descriptor??
[ 1874.851259][T20341] Bluetooth: hci5: command 0x1003 tx timeout
[ 1874.863621][T24710] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1874.974259][T29346] fuse: Bad value for 'rootmode'
[ 1875.113461][T29350] 
[ 1875.115818][T29350] ======================================================
[ 1875.122843][T29350] WARNING: possible circular locking dependency detected
[ 1875.129858][T29350] syzkaller #0 Tainted: G             L     
[ 1875.135819][T29350] ------------------------------------------------------
[ 1875.142815][T29350] syz.2.5510/29350 is trying to acquire lock:
[ 1875.148855][T29350] ffffffff8e9b1de0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0
[ 1875.158675][T29350] 
[ 1875.158675][T29350] but task is already holding lock:
[ 1875.166014][T29350] ffff88803dde2ce0 (sk_lock-AF_INET){+.+.}-{0:0}, at: udp_sendmsg+0xfa7/0x2720
[ 1875.174955][T29350] 
[ 1875.174955][T29350] which lock already depends on the new lock.
[ 1875.174955][T29350] 
[ 1875.185330][T29350] 
[ 1875.185330][T29350] the existing dependency chain (in reverse order) is:
[ 1875.194318][T29350] 
[ 1875.194318][T29350] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[ 1875.201938][T29350]        lock_sock_nested+0x41/0xf0
[ 1875.207121][T29350]        inet_shutdown+0x67/0x410
[ 1875.212141][T29350]        nbd_mark_nsock_dead+0xae/0x5c0
[ 1875.217670][T29350]        recv_work+0x5fb/0x8c0
[ 1875.222419][T29350]        process_one_work+0xa0e/0x1980
[ 1875.227861][T29350]        worker_thread+0x5ef/0xe50
[ 1875.232952][T29350]        kthread+0x370/0x450
[ 1875.237520][T29350]        ret_from_fork+0x72b/0xd50
[ 1875.242615][T29350]        ret_from_fork_asm+0x1a/0x30
[ 1875.247881][T29350] 
[ 1875.247881][T29350] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1875.255499][T29350]        __mutex_lock+0x1a4/0x1b10
[ 1875.260594][T29350]        nbd_queue_rq+0x428/0x1080
[ 1875.265688][T29350]        blk_mq_dispatch_rq_list+0x422/0x1e70
[ 1875.271741][T29350]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[ 1875.278571][T29350]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[ 1875.285054][T29350]        blk_mq_run_hw_queue+0x23c/0x670
[ 1875.290666][T29350]        blk_mq_dispatch_list+0x51d/0x1360
[ 1875.296468][T29350]        blk_mq_flush_plug_list+0x130/0x600
[ 1875.302344][T29350]        __blk_flush_plug+0x2c4/0x4b0
[ 1875.307699][T29350]        __submit_bio+0x584/0x6c0
[ 1875.312704][T29350]        submit_bio_noacct_nocheck+0x543/0xbf0
[ 1875.318843][T29350]        submit_bio_noacct+0xd18/0x2000
[ 1875.324373][T29350]        submit_bh_wbc+0x681/0x890
[ 1875.329462][T29350]        block_read_full_folio+0x4c8/0x8e0
[ 1875.335249][T29350]        filemap_read_folio+0xfc/0x3b0
[ 1875.340693][T29350]        do_read_cache_folio+0x2d7/0x6b0
[ 1875.346309][T29350]        read_part_sector+0xd1/0x370
[ 1875.351573][T29350]        adfspart_check_ICS+0x91/0x7d0
[ 1875.357023][T29350]        bdev_disk_changed+0x7a3/0x1250
[ 1875.362546][T29350]        blkdev_get_whole+0x187/0x290
[ 1875.367899][T29350]        bdev_open+0x2c7/0xe40
[ 1875.372653][T29350]        blkdev_open+0x34e/0x4f0
[ 1875.377613][T29350]        do_dentry_open+0x6ab/0x14d0
[ 1875.382889][T29350]        vfs_open+0x82/0x3f0
[ 1875.387475][T29350]        path_openat+0x208c/0x31a0
[ 1875.392571][T29350]        do_file_open+0x20e/0x430
[ 1875.397579][T29350]        do_sys_openat2+0x10d/0x1e0
[ 1875.402758][T29350]        __x64_sys_openat+0x12d/0x210
[ 1875.408114][T29350]        do_syscall_64+0x115/0x870
[ 1875.413209][T29350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1875.419600][T29350] 
[ 1875.419600][T29350] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1875.426785][T29350]        __mutex_lock+0x1a4/0x1b10
[ 1875.431881][T29350]        nbd_queue_rq+0xba/0x1080
[ 1875.436890][T29350]        blk_mq_dispatch_rq_list+0x422/0x1e70
[ 1875.442945][T29350]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[ 1875.449775][T29350]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[ 1875.456266][T29350]        blk_mq_run_hw_queue+0x23c/0x670
[ 1875.461877][T29350]        blk_mq_dispatch_list+0x51d/0x1360
[ 1875.467666][T29350]        blk_mq_flush_plug_list+0x130/0x600
[ 1875.473540][T29350]        __blk_flush_plug+0x2c4/0x4b0
[ 1875.478890][T29350]        __submit_bio+0x584/0x6c0
[ 1875.483898][T29350]        submit_bio_noacct_nocheck+0x543/0xbf0
[ 1875.490036][T29350]        submit_bio_noacct+0xd18/0x2000
[ 1875.495564][T29350]        submit_bh_wbc+0x681/0x890
[ 1875.500648][T29350]        block_read_full_folio+0x4c8/0x8e0
[ 1875.506435][T29350]        filemap_read_folio+0xfc/0x3b0
[ 1875.511885][T29350]        do_read_cache_folio+0x2d7/0x6b0
[ 1875.517507][T29350]        read_part_sector+0xd1/0x370
[ 1875.522772][T29350]        adfspart_check_ICS+0x91/0x7d0
[ 1875.528818][T29350]        bdev_disk_changed+0x7a3/0x1250
[ 1875.534341][T29350]        blkdev_get_whole+0x187/0x290
[ 1875.539692][T29350]        bdev_open+0x2c7/0xe40
[ 1875.544440][T29350]        blkdev_open+0x34e/0x4f0
[ 1875.549359][T29350]        do_dentry_open+0x6ab/0x14d0
[ 1875.554623][T29350]        vfs_open+0x82/0x3f0
[ 1875.559192][T29350]        path_openat+0x208c/0x31a0
[ 1875.564286][T29350]        do_file_open+0x20e/0x430
[ 1875.569290][T29350]        do_sys_openat2+0x10d/0x1e0
[ 1875.574471][T29350]        __x64_sys_openat+0x12d/0x210
[ 1875.579825][T29350]        do_syscall_64+0x115/0x870
[ 1875.584919][T29350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1875.591310][T29350] 
[ 1875.591310][T29350] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1875.598410][T29350]        __synchronize_srcu+0xa2/0x300
[ 1875.603850][T29350]        blk_mq_quiesce_queue+0x149/0x1c0
[ 1875.609548][T29350]        elevator_switch+0x17b/0x7e0
[ 1875.614813][T29350]        elevator_change+0x352/0x530
[ 1875.620078][T29350]        elevator_set_default+0x29e/0x360
[ 1875.625777][T29350]        blk_register_queue+0x48e/0x630
[ 1875.631299][T29350]        __add_disk+0x73f/0xe40
[ 1875.636134][T29350]        add_disk_fwnode+0x118/0x5c0
[ 1875.641408][T29350]        nbd_dev_add+0x77a/0xb10
[ 1875.646330][T29350]        nbd_init+0x291/0x2b0
[ 1875.650991][T29350]        do_one_initcall+0x121/0x750
[ 1875.656268][T29350]        kernel_init_freeable+0x6ea/0x7b0
[ 1875.661963][T29350]        kernel_init+0x1f/0x1e0
[ 1875.666790][T29350]        ret_from_fork+0x72b/0xd50
[ 1875.671883][T29350]        ret_from_fork_asm+0x1a/0x30
[ 1875.677151][T29350] 
[ 1875.677151][T29350] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1875.684942][T29350]        __mutex_lock+0x1a4/0x1b10
[ 1875.690033][T29350]        elevator_change+0x1bc/0x530
[ 1875.695299][T29350]        elevator_set_none+0x92/0xf0
[ 1875.700561][T29350]        blk_mq_update_nr_hw_queues+0x4c1/0x15f0
[ 1875.706872][T29350]        nbd_start_device+0x1a6/0xbd0
[ 1875.712230][T29350]        nbd_genl_connect+0xff2/0x1a40
[ 1875.717672][T29350]        genl_family_rcv_msg_doit+0x214/0x300
[ 1875.723723][T29350]        genl_rcv_msg+0x560/0x800
[ 1875.728729][T29350]        netlink_rcv_skb+0x159/0x420
[ 1875.733991][T29350]        genl_rcv+0x28/0x40
[ 1875.738475][T29350]        netlink_unicast+0x585/0x850
[ 1875.743740][T29350]        netlink_sendmsg+0x8b0/0xda0
[ 1875.749005][T29350]        ____sys_sendmsg+0x9e1/0xb70
[ 1875.754267][T29350]        ___sys_sendmsg+0x190/0x1e0
[ 1875.759443][T29350]        __sys_sendmsg+0x170/0x220
[ 1875.764538][T29350]        do_syscall_64+0x115/0x870
[ 1875.769631][T29350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1875.776022][T29350] 
[ 1875.776022][T29350] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1875.784601][T29350]        blk_alloc_queue+0x610/0x790
[ 1875.789871][T29350]        blk_mq_alloc_queue+0x174/0x290
[ 1875.795404][T29350]        __blk_mq_alloc_disk+0x29/0x120
[ 1875.800933][T29350]        nbd_dev_add+0x492/0xb10
[ 1875.805854][T29350]        nbd_init+0x291/0x2b0
[ 1875.810528][T29350]        do_one_initcall+0x121/0x750
[ 1875.815793][T29350]        kernel_init_freeable+0x6ea/0x7b0
[ 1875.821488][T29350]        kernel_init+0x1f/0x1e0
[ 1875.826314][T29350]        ret_from_fork+0x72b/0xd50
[ 1875.831405][T29350]        ret_from_fork_asm+0x1a/0x30
[ 1875.836673][T29350] 
[ 1875.836673][T29350] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1875.843859][T29350]        __lock_acquire+0x14b8/0x2630
[ 1875.849209][T29350]        lock_acquire+0x1b1/0x370
[ 1875.854211][T29350]        fs_reclaim_acquire+0xc4/0x100
[ 1875.859648][T29350]        kmem_cache_alloc_node_noprof+0x53/0x6f0
[ 1875.865958][T29350]        __alloc_skb+0x140/0x710
[ 1875.870879][T29350]        alloc_skb_with_frags+0xdd/0x760
[ 1875.876493][T29350]        sock_alloc_send_pskb+0x801/0x980
[ 1875.882194][T29350]        __ip_append_data+0x20c9/0x44c0
[ 1875.887719][T29350]        ip_append_data+0x10f/0x1a0
[ 1875.892899][T29350]        udp_sendmsg+0x1198/0x2720
[ 1875.897993][T29350]        inet_sendmsg+0x105/0x140
[ 1875.903001][T29350]        sock_sendmsg+0x337/0x3d0
[ 1875.908003][T29350]        io_sendmsg_zc+0x706/0xbc0
[ 1875.913091][T29350]        __io_issue_sqe+0xe8/0x7a0
[ 1875.918181][T29350]        io_issue_sqe+0x88/0x13e0
[ 1875.923187][T29350]        io_submit_sqes+0xb17/0x24b0
[ 1875.928452][T29350]        __do_sys_io_uring_enter+0xa88/0x1b50
[ 1875.934499][T29350]        do_syscall_64+0x115/0x870
[ 1875.939602][T29350]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1875.945995][T29350] 
[ 1875.945995][T29350] other info that might help us debug this:
[ 1875.945995][T29350] 
[ 1875.956206][T29350] Chain exists of:
[ 1875.956206][T29350]   fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET
[ 1875.956206][T29350] 
[ 1875.968783][T29350]  Possible unsafe locking scenario:
[ 1875.968783][T29350] 
[ 1875.976207][T29350]        CPU0                    CPU1
[ 1875.981544][T29350]        ----                    ----
[ 1875.986883][T29350]   lock(sk_lock-AF_INET);
[ 1875.991277][T29350]                                lock(&nsock->tx_lock);
[ 1875.998196][T29350]                                lock(sk_lock-AF_INET);
[ 1876.005106][T29350]   lock(fs_reclaim);
[ 1876.009065][T29350] 
[ 1876.009065][T29350]  *** DEADLOCK ***
[ 1876.009065][T29350] 
[ 1876.017181][T29350] 2 locks held by syz.2.5510/29350:
[ 1876.022350][T29350]  #0: ffff8880847f80a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xa7e/0x1b50
[ 1876.032869][T29350]  #1: ffff88803dde2ce0 (sk_lock-AF_INET){+.+.}-{0:0}, at: udp_sendmsg+0xfa7/0x2720
[ 1876.042245][T29350] 
[ 1876.042245][T29350] stack backtrace:
[ 1876.048112][T29350] CPU: 0 UID: 0 PID: 29350 Comm: syz.2.5510 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1876.048134][T29350] Tainted: [L]=SOFTLOCKUP
[ 1876.048139][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1876.048148][T29350] Call Trace:
[ 1876.048153][T29350]  <TASK>
[ 1876.048159][T29350]  dump_stack_lvl+0x100/0x190
[ 1876.048176][T29350]  print_circular_bug.cold+0x178/0x1c7
[ 1876.048200][T29350]  check_noncircular+0x146/0x160
[ 1876.048220][T29350]  __lock_acquire+0x14b8/0x2630
[ 1876.048240][T29350]  lock_acquire+0x1b1/0x370
[ 1876.048256][T29350]  ? kmem_cache_alloc_node_noprof+0x53/0x6f0
[ 1876.048280][T29350]  ? lock_acquire+0x5e/0x370
[ 1876.048298][T29350]  fs_reclaim_acquire+0xc4/0x100
[ 1876.048314][T29350]  ? kmem_cache_alloc_node_noprof+0x53/0x6f0
[ 1876.048336][T29350]  kmem_cache_alloc_node_noprof+0x53/0x6f0
[ 1876.048358][T29350]  ? __alloc_skb+0x140/0x710
[ 1876.048379][T29350]  __alloc_skb+0x140/0x710
[ 1876.048398][T29350]  ? __alloc_skb+0x5b7/0x710
[ 1876.048418][T29350]  ? __pfx___alloc_skb+0x10/0x10
[ 1876.048441][T29350]  alloc_skb_with_frags+0xdd/0x760
[ 1876.048456][T29350]  ? update_curr_dl_se+0x4aa/0xc90
[ 1876.048474][T29350]  ? update_se+0x444/0x770
[ 1876.048490][T29350]  sock_alloc_send_pskb+0x801/0x980
[ 1876.048513][T29350]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1876.048535][T29350]  ? __lock_acquire+0x4a5/0x2630
[ 1876.048553][T29350]  __ip_append_data+0x20c9/0x44c0
[ 1876.048573][T29350]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1876.048590][T29350]  ? find_held_lock+0x2b/0x80
[ 1876.048605][T29350]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750
[ 1876.048627][T29350]  ? __pfx___ip_append_data+0x10/0x10
[ 1876.048648][T29350]  ip_append_data+0x10f/0x1a0
[ 1876.048667][T29350]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1876.048685][T29350]  udp_sendmsg+0x1198/0x2720
[ 1876.048704][T29350]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1876.048721][T29350]  ? avc_has_perm+0x135/0x1e0
[ 1876.048737][T29350]  ? mark_held_locks+0x40/0x70
[ 1876.048756][T29350]  ? sock_has_perm+0x25a/0x2f0
[ 1876.048773][T29350]  ? __pfx_sock_has_perm+0x10/0x10
[ 1876.048794][T29350]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1876.048811][T29350]  inet_sendmsg+0x105/0x140
[ 1876.048832][T29350]  sock_sendmsg+0x337/0x3d0
[ 1876.048848][T29350]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1876.048868][T29350]  ? __pfx_sock_sendmsg+0x10/0x10
[ 1876.048886][T29350]  ? find_held_lock+0x2b/0x80
[ 1876.048898][T29350]  ? __fget_files+0x215/0x3d0
[ 1876.048919][T29350]  ? __fget_files+0x215/0x3d0
[ 1876.048937][T29350]  io_sendmsg_zc+0x706/0xbc0
[ 1876.048952][T29350]  __io_issue_sqe+0xe8/0x7a0
[ 1876.048967][T29350]  ? io_file_get_normal+0xc3/0x300
[ 1876.048985][T29350]  io_issue_sqe+0x88/0x13e0
[ 1876.049003][T29350]  ? io_send_zc_prep+0x5dc/0x9b0
[ 1876.049017][T29350]  io_submit_sqes+0xb17/0x24b0
[ 1876.049040][T29350]  __do_sys_io_uring_enter+0xa88/0x1b50
[ 1876.049060][T29350]  ? __sys_sendmsg+0x18f/0x220
[ 1876.049081][T29350]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1876.049101][T29350]  ? __x64_sys_futex+0x34f/0x4d0
[ 1876.049121][T29350]  ? __x64_sys_futex+0x358/0x4d0
[ 1876.049140][T29350]  ? xfd_validate_state+0x129/0x190
[ 1876.049158][T29350]  ? rcu_is_watching+0x12/0xc0
[ 1876.049180][T29350]  do_syscall_64+0x115/0x870
[ 1876.049198][T29350]  ? clear_bhb_loop+0x40/0x90
[ 1876.049214][T29350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1876.049228][T29350] RIP: 0033:0x7f1ba1d9ce59
[ 1876.049240][T29350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1876.049254][T29350] RSP: 002b:00007f1ba2baf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1876.049268][T29350] RAX: ffffffffffffffda RBX: 00007f1ba2015fa0 RCX: 00007f1ba1d9ce59
[ 1876.049277][T29350] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[ 1876.049286][T29350] RBP: 00007f1ba1e32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1876.049295][T29350] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[ 1876.049304][T29350] R13: 00007f1ba2016038 R14: 00007f1ba2015fa0 R15: 00007ffebf427ef8
[ 1876.049318][T29350]  </TASK>
[ 1876.063290][T29354] netlink: 'syz.1.5511': attribute type 13 has an invalid length.
[ 1876.111680][    T9] usb 1-1: selecting invalid altsetting 0
[ 1876.456071][    T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1876.463709][    T9] uvcvideo 1-1:220.0: No valid video chain found.
[ 1876.474319][    T9] usb 1-1: selecting invalid altsetting 0
[ 1876.480304][    T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[ 1876.482679][    T9] usb 1-1: USB disconnect, device number 119
[ 1876.618536][T29354] syzkaller1: entered promiscuous mode
[ 1876.625290][T29354] syzkaller1: entered allmulticast mode
[ 1876.646748][T29354] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1876.684223][T29354] syzkaller0: entered promiscuous mode
[ 1876.691619][T29354] syzkaller0: entered allmulticast mode
[ 1876.751068][   T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1876.935462][   T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1876.945381][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.959016][   T24] usb 4-1: config 0 descriptor??
[ 1878.100963][ T5350] usb 5-1: USB disconnect, device number 6
[ 1878.306346][   T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1878.314017][   T24] [drm:udl_init] *ERROR* Selecting channel failed
[ 1878.323140][   T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[ 1878.329907][   T24] [drm] Initialized udl on minor 2
[ 1878.335472][   T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1878.343490][   T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1878.353262][ T5350] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1878.362378][   T24] usb 4-1: USB disconnect, device number 117
[ 1878.368630][ T5350] udl 4-1:0.0: [drm] Cannot find any crtc or sizes