last executing test programs:

15.739366101s ago: executing program 0 (id=5861):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x700, 0x0, 0x20000050}, 0x20000884)

15.635945091s ago: executing program 0 (id=5862):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1})
move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x2, 0x22ac})
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000340)={0x10200, 0x5, 0xffffffff, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x3, r3})
clock_gettime(0x2, &(0x7f0000000040))
open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6erspan0\x00'})

13.038066204s ago: executing program 4 (id=5871):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'})

10.246963906s ago: executing program 4 (id=5873):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
unshare(0x6a040000)
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

9.756687454s ago: executing program 3 (id=5874):
socket$inet6_tcp(0xa, 0x1, 0x0)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(0xffffffffffffffff, 0xffff)
connect$l2tp(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0xa, 0x2, 0xfff)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
syz_create_resource$binfmt(0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x7fff, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={[{@uuid_off, 0x3a}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}], [], 0x2f})
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r6, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
dup3(r8, r7, 0x80000)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)="2cde8618b35bda549ffcfa26720028102db521bed9bd37309aa31a460359d5", 0x1f}, 0x1, 0x0, 0x0, 0x4000}, 0x4480)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
gettid()

8.639570589s ago: executing program 0 (id=5876):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYRES64, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x20)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r8 = socket(0x10, 0x2, 0x0)
sendto(r8, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, @value=r1}, 0x28)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket(0x2, 0x3, 0xff)
io_uring_setup(0x20006ca3, &(0x7f0000000380)={0x0, 0x3d68, 0x8000, 0x2, 0xb5, 0x0, r1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0)
syz_open_dev$evdev(&(0x7f0000001140), 0xb588, 0x101600)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)

7.984703991s ago: executing program 4 (id=5877):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x348, 0x348, 0xffffffff, 0x290, 0x1e0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x6, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x7d2}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x13, @ipv4=@broadcast, @ipv4=@private=0xa010102, @gre_key=0x4, @port=0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv4=@local, @ipv4=@private=0xa010102, @icmp_id=0x68, @port=0x4e21}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x12, @local, @empty, @gre_key=0x9, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
sendmsg$netlink(r1, 0x0, 0x60000c4)
syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000826bd7000fedbdf250a0000000800028004000400a0a91c4234d3fe1893892a7cb4f387f010155a190bce5a137522817062ef025e29ca1ffec6046d8c74d1d574e67f82c0c3c8e395d8a6a6032f3b866f70e32b022d9c3b0164c525c97a61d790e304b522b95bfdb38da7ea5c7b46c22bddb77763e953ef9bf517d0a0f34d15e67e6228b1d20f0084a42e536e6e02046ea7"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040044)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002840)={&(0x7f0000001840)=[0x4, 0x3, 0x1, 0x2, 0x63a, 0x5, 0x40, 0x2, 0x0, 0x1, 0x10000, 0xdde, 0x38c, 0x4, 0x1, 0x101, 0x7fffffff, 0x2, 0x6, 0xa75, 0x5, 0x7, 0x10001, 0x5, 0x7, 0xc, 0x2, 0xf19, 0x8000, 0x400, 0x7, 0x8, 0x0, 0x9, 0xe967, 0x6, 0x4, 0x9, 0x6, 0x2, 0x10, 0xff, 0x3, 0x2, 0x1, 0xb7, 0xb7f7, 0x4, 0x4, 0xffffffff, 0xffffffff, 0xbe9, 0x8, 0x200, 0x3, 0x8000, 0x358, 0x9, 0x1dd9, 0x3, 0x2, 0x200, 0x5, 0xe41e, 0x7, 0xffff, 0xf, 0x4, 0x8001, 0x1a, 0x2, 0x3, 0x2, 0x100, 0x5, 0xe69, 0x3, 0x1, 0x0, 0x1, 0x8001, 0x5a, 0x0, 0x1, 0xc, 0x9f78, 0xff, 0x1, 0x3, 0x0, 0x6, 0x10, 0xb, 0x8, 0x200, 0x8001, 0x7, 0x8e, 0x5, 0xfffffffa, 0x2, 0xb9e, 0x9, 0x7, 0x1, 0x4, 0x0, 0x1000, 0x1400, 0x80000000, 0x7, 0x84, 0x7, 0x0, 0x7, 0xf, 0x7, 0xe, 0x2, 0x53, 0x6, 0x1ff, 0xa2e, 0x68, 0x62, 0x400, 0x7, 0x4, 0x439, 0xd, 0x3, 0x9, 0xd5, 0xd, 0x337, 0x7fff, 0x9, 0x0, 0xd2, 0xb2, 0x4, 0x1, 0x9, 0x2, 0x9, 0x0, 0x4, 0x1, 0x13, 0xf8, 0x3, 0x78f8, 0x1, 0xa, 0x3, 0x3, 0x69, 0x400, 0x9, 0x1, 0x3, 0x9, 0x0, 0x2, 0xfffffffa, 0xb6, 0x2, 0x7, 0xb37e, 0xbf, 0x6, 0xffff, 0x80, 0x5, 0x8, 0x8, 0x6, 0x1, 0x26, 0x1, 0xffffffff, 0x100, 0x6, 0x2a81, 0x5, 0xb9, 0x10, 0xa, 0xd91, 0x4, 0x3, 0x46, 0x1, 0x9, 0x401, 0x864b57e, 0xf, 0x81, 0x8, 0x1, 0x0, 0x5, 0x8, 0x1a1, 0xf, 0x6, 0x0, 0x9, 0x7, 0x6, 0x101, 0x9, 0x8, 0xe0c, 0x5, 0x1ff, 0x2, 0x6, 0x4, 0x4, 0x81, 0x80000001, 0x2, 0x7, 0x3, 0x4, 0x3, 0x6, 0x80000001, 0x95, 0x8, 0x80000001, 0x1d, 0x2, 0x8, 0x0, 0x1, 0x8, 0x99, 0x5, 0x5, 0x3, 0x6, 0x1000, 0x5, 0x5, 0x3, 0x0, 0x80, 0x17, 0x40, 0x1, 0x5, 0x3ff, 0x3, 0x200, 0xba, 0x0, 0x7, 0x9d0, 0x4c, 0x5, 0x7fffffff, 0xb839, 0x2, 0x7, 0x8000, 0x1ff, 0x6, 0x4, 0x9, 0x7, 0x5, 0x3, 0x40, 0xaf5, 0x1, 0x401, 0xec0e, 0x5, 0x3, 0xffffffff, 0x5, 0x3, 0x2, 0x2318, 0x5, 0x7e949f55, 0xfffffffd, 0x1, 0x81, 0x1, 0xd3, 0x10001, 0xffffff80, 0xd4, 0x1000, 0x1, 0x6, 0x0, 0x6, 0x1, 0x0, 0x7, 0x10001, 0x8, 0x3ff, 0x6, 0x0, 0x9, 0x61, 0x6, 0x8, 0x5, 0xc, 0x6, 0x1ff, 0x8, 0x0, 0xa43, 0x81, 0xf, 0x7ff, 0x3, 0xc, 0x0, 0xbfa, 0x81, 0x53, 0x6, 0x3, 0xfff, 0x1ff, 0x6, 0x1, 0x10, 0x2, 0x3, 0x4, 0x7, 0x5, 0xc, 0x781100ec, 0xed, 0x2, 0x40, 0x6, 0x5, 0x10001, 0x28982d5c, 0x4, 0x3, 0x4, 0x8, 0x202, 0x8000, 0x1, 0x4, 0x9, 0xffff, 0x1, 0x9, 0x6, 0x800, 0xffff, 0xffffffff, 0x3, 0xfc, 0x761b, 0x9, 0xf3c, 0x9, 0xd7d, 0xb92, 0x5ff, 0x0, 0x0, 0xfffffff5, 0x1, 0xfffffff5, 0xfffffff8, 0x6, 0x5, 0x6, 0x4, 0xc, 0x7, 0x0, 0x4, 0x0, 0x7ff, 0x7, 0x5, 0x0, 0x5, 0xfffffffa, 0x3, 0x1000, 0x1, 0x2, 0x3, 0x8, 0x400, 0x2, 0xad26, 0x9cd, 0x9, 0x6, 0x1000, 0x80000000, 0x4, 0x6, 0x6accfdfd, 0xfff, 0xffff, 0x9, 0xc, 0x29ab, 0xa0e9, 0x6, 0x5, 0x4, 0x1, 0x10, 0x4, 0xffff, 0x4, 0xfffffffc, 0xb1, 0x2, 0x7f, 0x20, 0x9, 0x800, 0xffff, 0x5, 0x1, 0x6, 0x4, 0x80000001, 0xfffffffa, 0xaeb, 0xfffffff9, 0x400, 0x7, 0x414, 0x7fff, 0x7, 0x1, 0x6, 0x3, 0x3, 0x4, 0x9, 0x101, 0x1, 0x2, 0x8, 0x3, 0x8, 0x80000000, 0xe000, 0x5, 0x5, 0x6, 0xee, 0x1e17, 0x1, 0x1ff, 0x3, 0x4, 0x3, 0x6, 0xe95, 0x7, 0x1, 0x4, 0x10000, 0x1, 0x87d9, 0x401, 0x8, 0x6, 0x0, 0x0, 0x7, 0x6, 0x1, 0x7, 0x9, 0xb1b, 0xfffff000, 0x0, 0xef7, 0x2, 0x5, 0x0, 0x7, 0x9, 0x4, 0xf, 0x4, 0xfe7, 0x100000, 0x87, 0x7f, 0xfffffffa, 0xff, 0x8000, 0xffff65b2, 0x2, 0x6fb, 0x9f, 0x7, 0x1, 0xd09a, 0x80, 0x8, 0x7089, 0x6, 0xfff, 0x4, 0x7, 0x8, 0x3, 0x7, 0x2, 0x0, 0x8, 0x7, 0x6, 0xbb0, 0x5, 0xffffffff, 0x11, 0x8, 0x8, 0x7b9, 0x6, 0xa, 0x7, 0x9, 0xf, 0x3, 0x5, 0x4, 0x2, 0xfffffff7, 0x4, 0x4, 0x2, 0x1, 0x2, 0x2, 0x1ff, 0x4, 0xfffffa2a, 0xd, 0x8, 0x7, 0xfffffff9, 0x7, 0x5, 0x2008000, 0x4, 0x1, 0x7, 0x1a69, 0x4, 0x9, 0x6, 0x18d5, 0x0, 0x93, 0xe4, 0x1000, 0x7, 0x6, 0x7, 0xffff, 0x9, 0x8001, 0x5, 0x0, 0x5, 0x7, 0x7, 0x574, 0x8, 0x9, 0x5, 0xfffff976, 0x10000, 0x6, 0xd1, 0x6, 0x100, 0x9, 0x9, 0x5, 0x3, 0xfffffff7, 0xfffffe00, 0x17, 0x2e48, 0xfff, 0x10000, 0x800, 0x3, 0x6, 0x1ff, 0x80, 0x3, 0x400, 0x3, 0xcb7, 0xf, 0x10, 0x7fff, 0x2, 0xffff, 0x100, 0x62, 0x1000, 0xff, 0x2, 0xf, 0x8, 0x4, 0x1, 0x8, 0x8000, 0x40, 0x3, 0x1, 0xfffff89d, 0xd, 0x6, 0x6, 0x5, 0xe8d8, 0x9, 0x5, 0x8, 0x7, 0x1, 0x4, 0x9, 0x0, 0xc36, 0xa, 0x4, 0x9, 0xdfe, 0x153, 0x4, 0xfffffffb, 0x6, 0x81, 0xb, 0xa, 0x400000, 0x5, 0x2, 0xf, 0x0, 0x6, 0x4, 0x8, 0xfff, 0xffff652a, 0x7, 0x1543, 0x7, 0x3ff, 0x3, 0x1, 0x6, 0x3, 0x3, 0x4, 0xfffffffa, 0x3, 0xfffffffe, 0xa2, 0xe7, 0x2, 0x6, 0x8, 0x3, 0x4, 0x44, 0x0, 0x6, 0xc2a, 0x4, 0x2, 0x8, 0x6, 0x7fffffff, 0x0, 0x8, 0x3ff, 0x8000, 0x2, 0x9, 0x5, 0x7, 0x9f89, 0x0, 0x4, 0x4, 0x8001, 0x1, 0x0, 0x8001, 0x4, 0x200, 0x8, 0x10000, 0x3, 0x9, 0x80000001, 0x5, 0xff, 0x7, 0x9591, 0x1, 0x8ae8, 0x8001, 0x8, 0x8, 0x1, 0x1, 0x5, 0x9, 0x1, 0x800, 0x9, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x9, 0x7, 0x7ff, 0xffff, 0x4, 0xcf2e, 0xe0000000, 0xfffffffe, 0x5, 0x1, 0xc41, 0x3, 0x8, 0x9, 0x3, 0x8, 0xfffff800, 0x6, 0x4b3, 0x9, 0x10000, 0x20000, 0x5, 0x3, 0x133, 0x8, 0x0, 0xa8, 0x2, 0x200, 0x0, 0x9, 0x1, 0x2, 0xb71, 0x7fffffff, 0x160, 0x3e3, 0x1, 0x3, 0x7, 0x6, 0x2, 0x7, 0x200, 0xdb7, 0xb1, 0x1d0, 0x0, 0x8, 0x0, 0x8, 0x8, 0x5, 0x1ff, 0x1, 0x7, 0x9, 0x400, 0x1ff, 0x3, 0x10, 0x80000000, 0x7, 0x5, 0x7, 0xe, 0x0, 0x1, 0x5, 0x3, 0xff, 0x81, 0x3, 0x8, 0x9, 0x400, 0x800, 0xf1, 0xe, 0x3, 0x1, 0x2, 0x9, 0x0, 0x6, 0x4, 0x40, 0x5, 0x6, 0x6, 0x1, 0xa8, 0x3, 0x2, 0x9, 0x8, 0x1, 0x80000001, 0x86b, 0x5, 0x49e, 0x8, 0x0, 0x7, 0x3, 0x1d, 0x0, 0x81, 0x7, 0x8, 0x10, 0x4, 0xfffffff8, 0xcc3, 0x4, 0x9, 0x1, 0x5, 0x4d4b, 0x4, 0x7, 0x8, 0x3, 0xfffffffc, 0x7, 0x7, 0x0, 0x7fff, 0x4c7, 0x4130, 0x401, 0x5c73, 0x1, 0xc00, 0x5, 0x0, 0x9, 0x7, 0x100, 0x200, 0x6, 0x8, 0x400, 0x5c16, 0x6, 0x4, 0x5f, 0xef7, 0xda6c, 0xc, 0x3, 0x10001, 0x40800000, 0x6, 0xc, 0x3, 0x1, 0xe7, 0x3, 0x4, 0x2, 0x8, 0x9, 0x30000, 0x1ff, 0x1a, 0x6, 0x9, 0x4, 0x2, 0xfffffffd, 0x400, 0xfffffffc, 0x6, 0x1, 0x200, 0x6, 0xfffffff9, 0x10001, 0x3, 0x8, 0x3, 0x40, 0xcd4, 0x8001, 0x7fff, 0x7fffffff, 0xfb85, 0x4, 0xfffffffc, 0x6, 0x0, 0x7c, 0x3, 0xff, 0x1, 0x8, 0x8, 0x5, 0x7, 0x7f, 0x9, 0x3, 0x7, 0xf, 0x4, 0xfffffe01, 0xffff8000, 0x233, 0x4, 0x5, 0x40, 0xfffffbff, 0x0, 0x0, 0x2de, 0x8, 0x354b, 0x8, 0xffffffff, 0x7, 0xec2, 0x5, 0x0, 0xc, 0xd, 0x1, 0x9, 0x9, 0x4, 0x5, 0x3, 0xfffffff7, 0x5, 0x9, 0xc2f, 0x9545, 0xc73e, 0x7e06, 0xfffffffc, 0x3, 0x1, 0xe7, 0xd, 0x8, 0x9, 0x7, 0x2, 0x8f, 0x10000, 0x80, 0xf4, 0x6, 0x18000, 0x101, 0x5, 0x9, 0xa, 0x7, 0xffffffff, 0xfffffffa, 0x6b3f, 0xa3, 0x7, 0x5, 0xfffffff8, 0xf, 0x3ff, 0x200, 0x1, 0x2, 0x200, 0x5, 0x7, 0x0, 0x3, 0xb], 0x2, 0x400, 0x20})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0xa0000000000, 0x1000)
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb080045000030fff800000001"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.3059824s ago: executing program 3 (id=5878):
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
syz_emit_ethernet(0x2c3, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0xa, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a9"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x19, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e21340"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
getpriority(0x0, r1)
r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
ptrace(0x10, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)

7.107513742s ago: executing program 0 (id=5880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000f1000000000000000000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x4000000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.103002575s ago: executing program 2 (id=5881):
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x40000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x14)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000580)={0x6, 0xb0, 0x8001})
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd)
fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00fba3010cff4a635bc48ac1a11e421e42075c8a9a32dfd58f215cfebb8c3448e0a1de828b0be119310c991c8d88177ab470d0de4a33acbc40dffb1e91b399b084c6ee0bc4cc532dd5f98a0c75c3127ba02f7bd52734cb4c09072467a583a43fd418f5ed06900c795b64c8b7876e542e65e6ea4b9378e4176de73cc9a57cd224dbceb099bbcc50ec4874fd3d0c43b79cfc5c79e886c27cb83aaa98a6b613d8b74d5edb"], 0xa3, 0x1)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

6.907621716s ago: executing program 0 (id=5883):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ffddc1559f78314d9cf313888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x144)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x81849c, &(0x7f0000000740)=ANY=[@ANYBLOB='mpol=interleave:2-N:N/', @ANYRESOCT])
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '\x00\x00'}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$uac3(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x0, 0x31, 0x2, 'lR'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
syz_open_dev$sndpcmc(0x0, 0x7ff, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

5.852861939s ago: executing program 4 (id=5884):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x28, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x800, 0x0, 0x0, 0x1f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x10, 0x80000000}, 0x94)
syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}})

5.259622493s ago: executing program 1 (id=5886):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x20, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

3.963217197s ago: executing program 2 (id=5887):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x9)
r5 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f2800adfe5ed905dbb256d8f900000000008500000011000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x1, @local}, 0x11, {0x2, 0x4e24, @dev}, 'vcan0\x00'})

3.773993097s ago: executing program 2 (id=5888):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
epoll_create1(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x4})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x41, 0x0, 0x60000000000000, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200202})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
unshare(0x6a040000)
r4 = socket(0x8, 0x4, 0x3)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x40106183, &(0x7f0000000000)={{r0, 0x0, 0x101040, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0})

3.579258698s ago: executing program 1 (id=5889):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
socket(0xa, 0x3, 0x3a)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000440)="22162ffc487d37d13abc22825472ab1c12143ba6e4ef498f7efde9eeb42a1b425f524356d18c790bb620b2ebaf94f8279fcd1d5e20e5a0cbb9cfb9014e1cf3eb47511ebc11d89bd2d1b8d481fc0dd459d786c71fcd047a8f2fec797817c9f6c12fc1f7244ca076d28ed64801274f9bbe88e9cef84286dfd9d787fa49c2cec6ba5ede846c5a381b09901bffa3ecb94f9c3189ca30b5dd8f97494c", 0x9a}, {&(0x7f0000000500)="95db189c7b0c15a96a4e1a5704534cec1023e5b1b562a6827faf95dd1d5b68da0079a7ed38e519e92ea38b01343d6d1e8bb654ee4644d2d79bbe8ae8b81e374e1c77e8210c383510c690d86b24b7c56538cb76ee3aa9c4a325255aaae8dbae08f8f1ce2c9f21a4b29927d02678750e2b315bdce80fd32c31feeef28afe46f0435c7254dc54a3d3d5db73cf1bce83a328864b38b9e3afa339ab6d6e0de664e6f8a0886e5caf6add950253fbae6e76a91a6477473e6001b377b11ac9e1cd02", 0xbe}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="a7a3e0583400e0d7dd8a440da8a3479dd8dd04c64d5191a1c86fdf489a7141b036d0f617b53db9e491659677ca5f3a3ad330662108e50265a3fa92d3e6e8c52bc30ad71317bd7cac447db00102c42eb67fb6e27b62b82cbd77759d4211bf0678f8757e56659819d5252bd461bfd61a8d763374", 0x73}], 0x4, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x20000884}}, {{&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000021c0)="c41645f1d7715c6436cb6e093c32a71218e7d3679b445aa5153602", 0x1b}, {&(0x7f0000002200)="ff0af62b174c7dd855d8060eb6bf4f359362f0d89b53a4f8d8b4e2574ff90f4a06b545a9e957e3a49a42833c768f4f7a9ed237e7360b1a69a0ece9d29eed713a894f1d67c33e7c92d02097bf2981aa9968233411db070f882f7d5eef6d79473d76a0f6f40c6c9561d451f0f3d888b9", 0x6f}, {&(0x7f0000002280)="a460e178502a2c38d1b9129f9c3a111cc9bffeff1bb24cd51fae8e95e0e857ceb46601c2840cb294c6f8b4601c2c650b7b654c780d7c4d4544890bcf208e080a8e18b17c2f4595014a72122555eef1aaf350d87b1c80f002fc68a796b83a", 0x5e}, {&(0x7f0000002300)="207f37458991a8f70fcf0b9e5ae1b74257b971e991a1bbcfc46db1777bb5440bd5b5a5e2ec744300ae699c07aa47c6693bbda9af61742c8b790cbbd3835a524189d068b1be5f79d3516218c3532c19a67f482cb6a22ad32cafa5deedc6a63971b5ccf0855fd9cd5becd20cee6342653ffed9", 0x72}], 0x4, &(0x7f00000023c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xa0, 0x4040000}}, {{&(0x7f0000002480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003900)=[{&(0x7f0000002500)="25643e82ad612adf981c67efc4fd14d75ab3549f3f1a98db76462a8c597b3aa4327566d66e7f18ace16a50b7a7a461e1c40f99c9f50f3f96755b4c1365756e6deb3be7d7c13a35924cd6d5cc3a8952b15e97e91d47db4f516ad3b505393dee6193b26cf62e8eb3d47c23cba5970996d67db0d9", 0x73}, {&(0x7f0000002580)="a6cb64", 0x3}, {&(0x7f00000025c0)="63703a41d78ba646288402e10f9c937a88ffc80bc33b30b8a40d515bc0d8444c2e6348857200b55ed7db8c0dd41a3441dabda7c44cff08cf7ad79b8798d49c576480638dc22b64795b457bd75ed9b1ca6b296d3d059db61f4cd4012ed907afd732fe4b8ea79c79e838c114163be348df7c7f041e277aacff1c5540483c9d1358857800c57922fc7233a75e578e43773b68b7232f7622cce518669b540b0b3ce7270a86a57f51c323aadd757992b89de4fd420cdc60013ad388e6fbcef1ed40055d8990d525c4be02", 0xc8}, {&(0x7f00000026c0)="865dde9709bc14d6e39976b5f49394be90e48d60a534eb48b22a31e84c360a2e7c6a1153fe32efe01935bf6111d51c55590eedd898961c696fa4d89cac46ab66e931a3d8faf276b660f2acae040dbbc6e28bc48aa0f4e48559e72bc3bcd2621534382abedd41b842189a1a3434c8a5a16a2f905a5a3217f8d4610f2cbcfba7683dc0292cf227056b05616b667741b305fb0415243400a6cc12ae93c018d74070a6624a2f029688f3ed5498fa0d37cff53856705170246c7a13", 0xb9}, {&(0x7f00000005c0)="caf35a8e7184b2894391e6025a71e0dfa4b4f8e86f495aaf85f659e7a13607d9c0fff071ef9ce17ac826031c5d26b32a680b5b0ddc5d25bc0f6c0ec9ce234200544f6f86c8180ac998f689c08c01685f86d20f72cbe109adc1cb32acfb88fc47d7f96355bd7457ac4b7d24a349", 0x6d}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="192f95700d44dd5fe7673c11708abb77ad6c78769392dd9794cd3d821b6210a4c055506957f5cd16c4668103d23feb26ea5f4d4d51c9ddfe74ad7fc9a998af75d3082d522804ece2df50b69a8aece1ca7b3e27f601b94acfd44c4b96fe6fb8c93bb2edfed3ff107c5f1bdc068824f2abc8c0578f686a9a1ef50b19cf1bbb2faa380055abc8995e85724237f9c1918475d547d719ac97c1cf8d985bf558ce49756131dcc0dd51b1cd8934e96738ac85c5ef30ccb91496f5dad58285e55e154d7900ea6b7d", 0xc4}], 0x7, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003980)="4d15a21cde7189c4022a77133123789842beb432a680d02bf0ebaed79d90de79ce7a59dad1e3f612e664c56687c6d0bf626420d40a91a19cb7555a304cde4ed968cb3be4d4020c2b1473ca4837470ba51c6772fcaca8279bea30cc10dc2c96033ee584d7a7a9f48c5349238d01e6707e1a10b74166035f5b1366ad3c107a9fd234a83650c77b3f1cf258b9f23f3692a87ded758bc82a36cd54e6ce314b005802f7d12fc3948a179fbf0f73a47ef20596afa6e606e7cd65a45376f2906e492e20841c1260f3c48e983abf0f7a701fcde6e700c14b32231661f00f672e66ad2e8e46c866ae883690be316b", 0xea}, {&(0x7f0000003a80)="3e44eec538bc8d0aa08c7e454f669b7ce58aac431185ff6503c0f87f86e30988f1a6404003d2ef3e029820ad28dc6a010270815218d8b0c3671d148254f6ced2532a081887e2cb1b043a0e40a90a8b2ac7", 0x51}, {&(0x7f0000003b00)="e49cd232556a7158cb9142ce429ee999400a28723e2fae301f0a65c57ce08199a79748f45cb5bc6dc2878eb3ed", 0x2d}, {&(0x7f0000003b40)="895ea85b397700b01ce705c5b6e06f68bf5b7bf5448fb3aa5e2ac66ca6ebad1611071eb8038cb0a7adcf675fb8ac263b5b850a5905ad512f648b8f869c69b0f8c4e8f42a158de9dfaa365d03cb3f57608ca55ab36696", 0x56}, {&(0x7f0000003bc0)="ebc5", 0x2}, {&(0x7f0000003c00)="562570fef1b0aa5f18851c8a8ab99716cf9f32cf96977dba14d0a8d9a2e154ab028d5644c6ca653c18e22417b7d2a9cead586057b2992370a83a74fa9e9bd2915246a197f7419cfc818904fbb8515f0b52d701d25f889af8f1eef69e3e9cddc34ed203e562e4acce55c00819e5ff9e0d3f9e0e62b74ea1ea98238d230a75954521d916cfaa3a5eb31bcdef7d13f56e2cebff3b5de899fb0331d8a732", 0x9c}, {&(0x7f0000003cc0)="1423404eda3ec9c588a6a71c9a251e9267a69daf64308c514b5d6576826fcc", 0x1f}], 0x7, &(0x7f0000003d80)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x20000400)
pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50)
io_setup(0x4fe, &(0x7f00000009c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r2, &(0x7f0000000200)='8', 0x1, 0x10000000005971}])
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="15000000651ad850e105ffff050000000800395032"], 0x15)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
getsockopt(r6, 0x200000000114, 0x2718, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

3.25240112s ago: executing program 3 (id=5890):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r2, 0xfffa}, &(0x7f0000000300)=0x8)
r3 = dup(r0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000080)={0x800, 0x3, 0x80000000, 0x6, 0xaec5, 0x0, 0xfffffffffffffff8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x3554000)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00')
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
cachestat(r4, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
fadvise64(r3, 0x85f5, 0x4000000005, 0x4)

3.204030458s ago: executing program 2 (id=5891):
syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @remote}, {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x81, 0x4)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00')
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7, 0x10810401, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x6, {0x4, 0x5, 0x7, 0x6, 0x8003, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, r3, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4)

2.919559477s ago: executing program 4 (id=5892):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x50, 0x6, 0x4}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="016f0800010000000000200000004500002800000000008490783fffffffffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="035b40c474288b2279cf4fba8a8fd327617c4b5a0000feb0"], 0x36)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000f1000000000000000000000850000008700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.464805996s ago: executing program 3 (id=5893):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

2.436034286s ago: executing program 1 (id=5894):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c500", "f8ffffff", "362d3017f069109d"}, 0x28)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.35979608s ago: executing program 3 (id=5895):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="2ea448ac0aeb7be112d609c9c72f504055b260709299b3d742ba2b4a38e204c9da829456fd3d5e6463a36f286b82dfa1310ff296b0a6968567e9fe4e4e9643bd8b2a77e54e814d45786360749db9a94675f7cdd44ba0a0f64686594b00633c0aa7832117d00b8b21c87a528a6e84ae91e496", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000080)=<r9=>0x0)
sched_setaffinity(r9, 0x8, &(0x7f0000000200)=0x3)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
timer_create(0x5, &(0x7f00000005c0)={0x0, 0x2, 0x0, @thr={&(0x7f0000000440)="c8f9c1edcb0af516a3fa992432b0d9f06e24f539731ba974f21c7ca3c3e5566c2dc4165262bac06e49bd1839de20dfdc4d7ec140b2516bb60b676805947e27d4d57830c6ca32f238260ba63af5add4d2b9f89f8666c00a2916226ba2254d3bfb77152f75e4627a1fb8fab8cc080ddd220108b2c6d3bff2a121e1e07b48850e00783fe4813279a0e09c3576dbf46936c90b2fba2da8b9080caf055bae1355c215482f46ac24c3321604cd", &(0x7f0000000500)="860452dd69f46e01741ca49c5747cca0b41ce7d9890561466be09a2a63d5ea93d8bcc3713e07893cd1f6abbef85a8cbff4c8e65549b61c1b9402505bb5519e1549e7c9788f4c0065a367f5b54cdb074d4b66a1426ee27d8c6b3f2dcd6ed1ff7fab366caf9b260e4f1c987b85437614aff13329e1e1d06dbf6f3c3c830941e89898eeb04cbf946950e76fbb1acc3b3b4970545699031233a211be70a79a6f400897b310b1d5b2275a8a9fdd"}}, &(0x7f0000000600)=<r11=>0x0)
timer_settime(r11, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b05, &(0x7f0000000880)={'wlan0\x00'})
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f0000000340)={r12, r0, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'})

2.326167859s ago: executing program 1 (id=5896):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

2.207917897s ago: executing program 2 (id=5897):
fchdir(0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x80)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x8020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x407b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xc3)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = syz_clone(0x80000000, &(0x7f0000000080)="c18c8a913b03b918bb19815e73cf6587b48407a0977e9267cdbaa6562e7bab3deb079738f7e3f15bfa951370f6bb98ff72a68d9e058e6ebfcdda382e95ada305bcf251daca48e1e5fd9ceb7bbfe2f93338d7bfbd30f9cb7ec131f31c9e764cf4b9ae0b342919b1de14efb9af98cdcb3d2cba8097f27c1589fe19f5176b57ed31ba1146b2823ab3370a12e3f517ff9820ac0bbbe0515dff97c8468c614600f0df55c5814ac3fba8a16e", 0xa9, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000007c0)="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")
timer_create(0x1, &(0x7f00000017c0)={0x0, 0x1f, 0x1, @tid=r9}, &(0x7f0000001800))
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb)
getpid()
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0xffffffff, 0x80000, <r10=>r8})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b80)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x0, '\x00', 0x0, 0x0, 0x25}, 0x50)
writev(r5, &(0x7f0000001a80)=[{&(0x7f0000000640)="ebe9b777484beb11053117bc571392cae58f2054b83fbdfdb0aa41efe741aeda2879c6a23d7c14daba87edb57f7749dae8cdcc92965760c758cc7711ce70b73c69047b71bfe0251287bfc4ff9dee740a09b8dfbe02ff9426cedd856c07a754ec70748000b6713860af71e01de585299290a38d5c25d3174e148dc5b6cf4462c2f505868bb552fbc0ae322eb69b5a0928398424cc8f46096a562a761accec6aad08d5", 0xa2}, {&(0x7f0000000700)="45540cdf983744", 0x7}, {&(0x7f0000000740)="598800583f37fc9cf02c2d2206708a5a2518103b0b5ed98890dc8a0ef42356c52465217219eb44636bd52611edac1b139f0798178c239f7023da2dd10ccd8375b2a0bef7c14a4eaf366989", 0x4b}, {&(0x7f0000001840)="ed73", 0x2}, {&(0x7f0000001880)="81c74380ccc7fbec95758fd7d9759b7269b0b34a639d9d62c033f1d9533f477c7edb078ba1944ed9f49e1c653a", 0x2d}, {&(0x7f00000018c0)="9a100fa7beef278a269122870153a47892e083b1480f46fa9d106bd292e43f267bf2708d2cdec843282017648e3be6cae31324e82125ecbef7e29d47a2cc9607cf1ee883be8fd337340e6b36de516cf10ff0ec1086e77e32bdbd447037053930648a9292f9ea9785a896bf7498c6525f7e22c42fb5c68130c5b945b752c2363371508f1a81ad5076c0b1c40a3b1aff2305b79d6c5c7a10267fcd", 0x9a}, {&(0x7f0000001980)="ca09e9f76d87b4e1f9e6c37f17a4a917323f6d68d8203c27374989be716a551472a66ce33b4cca92e058bdf6836d8a8b736e12cd9c3318cf5c1968dd8e959fa6e654465deb6c9b53bae9f33032382355b7c33a9607b53a74564f8469aa7506893b51442d68acbbd7c5a5fa9b758d216639f037c08d62b3a72688f5fa8ec332e27f41f18ff355de06ed16670bfd2e8a757ecdf79ec43e5b9e3110dfff7f33aa2e73cb061e9b52e1e6d2cf2eadde244b22ca455ca90d9bfd5d7917c1ecb385b511c61f3883a6484dd7deb3f5438c2dfcaca10ab4a1236bb8a581aa5c844684347ea17f", 0xe2}], 0x7)

2.201079921s ago: executing program 1 (id=5898):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x18, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94)

2.055549479s ago: executing program 3 (id=5899):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[], 0x0)
socket$unix(0x1, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@private2, 0x29})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r5 = socket(0x2b, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c8)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0xc000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES8, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)

2.03709916s ago: executing program 1 (id=5900):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0}, 0xff00)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x400, 0x82)
lseek(r0, 0x0, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b2c, &(0x7f0000000040))
socket$inet6(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x40800)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x20, 0x22, 0x3, "3ca653"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008090}], 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000301010200"], 0x30}}, 0x4c080)
socket$inet(0x2, 0x80001, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x7, 0xc, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)="e92b92104948e98cf44a39553459c30f53f24a1072ee15715445396334a39bdcf30b6b784612a37149bae312b01f6caddfa233c91a402b416e50bc1e8140cdb482c2a7795901925fe58b3f6f04000000000000007c32233151d9176aec151d0aff1f36d7e826ccd84ed9491d22fd3465e6b1f666316115c273f84eb500"/138, &(0x7f00000004c0), 0xce, r9}, 0x38)

116.272339ms ago: executing program 4 (id=5901):
socket$unix(0x1, 0x1, 0x0)
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1f)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406307032040000102030109026e"], 0x0)
shutdown(0xffffffffffffffff, 0x2)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x24040010)

85.161553ms ago: executing program 2 (id=5902):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$loop(0x0, 0x8, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000240)={0x0, <r6=>0x0, 0x6})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f00000002c0)={r6, 0x7, 0x40000, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x6})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 0 (id=5903):
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x5, 0x2, 0xc7a, 0x32344d59, [0x3, 0x7], [0x0, 0x6], 0x2}})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="00fbff0000000c0000f7bc8ad400020000738a00f805bd5584b9ee49d2ddaa0f98548ff00000000000000000"], 0x0, 0x28}, 0x28)
r3 = socket(0x2, 0x80805, 0x0)
flistxattr(r3, &(0x7f0000000240)=""/53, 0x35)
sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)='j', 0x1}, {&(0x7f00000005c0)="5eaa4afb470bcd8293e080be3510a3028b1cabe1ffd195ca5f98de3ee1e372c852c03422e43fee24d855289233019a9986dd0d79efd1eba6409de5ee168dbfdc1c38c2eae26f3ae0fae8b6999ad3f01b226a3d9cdc500f91e34f870cc7ba555916ca30f950594caf11f12f6ee6fcc3d503fc9a199053bd6104fe9590b18b51d025b2334f6ac7a0203b43ae4c1356d4ccae3f0a29f548120b01fc51a6e149a4fa9ae579d8a9b6f0a378a60187f9b1a2eb9ae8606debbcdf9ce49ba10edf83e0df765d57c5a6f70ac8a7b3853e8bece258a3889625662186d7aae31c774e", 0xdd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x20004005}, 0x4084)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

kernel console output (not intermixed with test programs):

06] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5512'.
[ 1625.767758][T25406] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1626.064291][   T30] audit: type=1400 audit(1777786995.716:1871): avc:  denied  { ioctl } for  pid=25403 comm="syz.2.5513" path="socket:[114621]" dev="sockfs" ino=114621 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1626.152074][  T802] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1626.322578][  T802] usb 5-1: Using ep0 maxpacket: 16
[ 1626.330626][  T802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1626.344118][  T802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1626.355533][  T802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1626.398693][  T802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1626.414011][  T802] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1626.430000][  T802] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1626.439290][  T802] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1626.448202][  T802] usb 5-1: Manufacturer: syz
[ 1626.455315][ T8761] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1626.487679][  T802] usb 5-1: config 0 descriptor??
[ 1626.632536][ T8761] usb 4-1: Using ep0 maxpacket: 8
[ 1626.642934][ T8761] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1626.652108][ T8761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.703099][ T8761] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1626.711244][ T8761] pvrusb2: **********
[ 1626.734891][ T8761] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1626.767900][ T8761] pvrusb2: Important functionality might not be entirely working.
[ 1626.792496][ T8761] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1626.812782][ T8761] pvrusb2: **********
[ 1626.837000][  T802] rc_core: IR keymap rc-hauppauge not found
[ 1626.843180][  T802] Registered IR keymap rc-empty
[ 1626.849898][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1626.878046][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1626.901378][  T802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1626.946079][  T802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input193
[ 1626.990127][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.028613][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.081797][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.116190][ T2356] pvrusb2: Invalid write control endpoint
[ 1627.127958][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.138966][ T8761] usb 4-1: USB disconnect, device number 73
[ 1627.177194][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.272745][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.316542][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.358759][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.390136][ T2356] pvrusb2: Invalid write control endpoint
[ 1627.398452][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1627.403211][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.409024][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1627.422828][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1627.432887][ T2356] pvrusb2: Device being rendered inoperable
[ 1627.449093][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1627.455215][  T802] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1627.456190][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1627.476591][ T2356] pvrusb2: Attached sub-driver cx25840
[ 1627.482091][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1627.492291][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1627.630655][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5520'.
[ 1627.642122][  T987] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1627.651707][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5520'.
[ 1628.044051][  T987] usb 2-1: Using ep0 maxpacket: 8
[ 1628.215679][  T987] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1628.418552][  T802] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1628.429817][  T802] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1628.450737][  T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.496133][  T802] usb 5-1: USB disconnect, device number 92
[ 1628.591311][  T987] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1628.626143][  T987] pvrusb2: **********
[ 1628.634122][  T987] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1628.666529][T17588] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1628.683838][T17588] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1628.712631][  T987] pvrusb2: Important functionality might not be entirely working.
[ 1628.715257][T17588] usb 3-1: can't read configurations, error -71
[ 1628.754243][  T987] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1628.790976][   T30] audit: type=1400 audit(1777786998.242:1872): avc:  denied  { bind } for  pid=25434 comm="syz.4.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1628.874666][  T987] pvrusb2: **********
[ 1628.940690][T25441] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1629.464219][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5526'.
[ 1629.501398][T25448] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.5523'.
[ 1629.531296][ T2356] pvrusb2: Invalid write control endpoint
[ 1629.551270][  T987] usb 2-1: USB disconnect, device number 104
[ 1629.934102][T17588] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1630.576459][T25453] syz.3.5528 (25453): drop_caches: 2
[ 1630.620977][T17588] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1630.643414][ T2356] pvrusb2: Invalid write control endpoint
[ 1630.663382][T17588] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7
[ 1630.717164][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1630.732486][T17588] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[ 1630.769115][T17588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.795006][T17588] usb 3-1: Product: syz
[ 1630.797860][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1630.804246][T17588] usb 3-1: Manufacturer: syz
[ 1630.821021][T17588] usb 3-1: SerialNumber: syz
[ 1630.826057][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1630.866320][ T2356] pvrusb2: Device being rendered inoperable
[ 1630.906252][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1630.914311][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1630.926131][ T2356] pvrusb2: Attached sub-driver cx25840
[ 1630.946427][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1630.970579][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1631.100918][T17588] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1631.123649][T17588] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1631.188043][T17588] usb 3-1: USB disconnect, device number 94
[ 1631.232648][T21808] udevd[21808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1631.334049][ T5711] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1631.505045][ T5711] usb 5-1: Using ep0 maxpacket: 16
[ 1631.513629][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1631.525386][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1631.542723][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1631.555262][ T5711] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1631.566926][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1631.708271][ T5711] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1631.740815][ T5711] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1631.756579][ T5711] usb 5-1: Manufacturer: syz
[ 1631.776561][ T5711] usb 5-1: config 0 descriptor??
[ 1632.234014][T25482] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5535'.
[ 1633.407198][ T5711] rc_core: IR keymap rc-hauppauge not found
[ 1633.420731][ T5711] Registered IR keymap rc-empty
[ 1633.436193][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1633.518145][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1633.559208][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1633.641188][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input194
[ 1633.799778][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.123340][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.177000][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.219543][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.256198][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.305004][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.370672][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.422917][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.469914][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.542322][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1634.732860][T17588] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1635.080231][T17588] usb 3-1: Using ep0 maxpacket: 32
[ 1635.205325][T17588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1635.494761][T17588] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1635.609610][ T5711] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1635.621764][ T5711] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1635.636321][ T5711] usb 5-1: USB disconnect, device number 93
[ 1635.656598][T17588] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1635.700919][T17588] usb 3-1: Product: syz
[ 1635.722956][T17588] usb 3-1: Manufacturer: syz
[ 1635.768420][T17588] usb 3-1: SerialNumber: syz
[ 1635.874260][T17588] usb 3-1: config 0 descriptor??
[ 1636.303113][ T5711] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1636.506225][ T5711] usb 5-1: Using ep0 maxpacket: 8
[ 1636.515852][ T5711] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1636.565795][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1636.650656][ T5711] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1636.658440][ T5711] pvrusb2: **********
[ 1636.663035][ T5711] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1636.814456][ T5711] pvrusb2: Important functionality might not be entirely working.
[ 1636.858732][ T8761] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1636.930831][ T5711] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1637.041951][ T8761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1637.067887][ T8761] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1637.085691][ T5711] pvrusb2: **********
[ 1637.124275][ T8761] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1637.191943][ T8761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1637.225775][ T8761] usb 2-1: config 0 descriptor??
[ 1637.271623][ T8761] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1637.324843][T25522] syz.0.5547 (25522): drop_caches: 2
[ 1637.420298][ T5711] usb 5-1: USB disconnect, device number 94
[ 1637.428324][ T2356] pvrusb2: Invalid write control endpoint
[ 1637.606105][ T5718] usb 2-1: USB disconnect, device number 105
[ 1637.612588][   T30] audit: type=1400 audit(1777787006.506:1873): avc:  denied  { call } for  pid=25519 comm="syz.1.5546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1637.687533][ T2356] pvrusb2: Invalid write control endpoint
[ 1637.707307][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1637.722163][   T30] audit: type=1400 audit(1777787006.599:1874): avc:  denied  { unmount } for  pid=21805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1637.757833][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1637.855509][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1637.973042][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'.
[ 1638.004320][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'.
[ 1638.169748][ T2356] pvrusb2: Device being rendered inoperable
[ 1638.466511][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1638.797842][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1638.935718][ T2356] pvrusb2: Attached sub-driver cx25840
[ 1638.951468][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1638.975409][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1639.018095][  T987] usb 3-1: USB disconnect, device number 95
[ 1639.453230][T25543] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1639.464789][T25543] SELinux: failed to load policy
[ 1641.849272][  T987] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[ 1643.074056][  T987] usb 3-1: device descriptor read/all, error -71
[ 1643.409245][ T8761] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1643.561991][T25557] SELinux: failed to load policy
[ 1644.354738][ T8761] usb 5-1: device descriptor read/64, error -71
[ 1644.648776][ T8761] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1645.388460][ T8761] usb 5-1: device descriptor read/64, error -71
[ 1645.568163][ T8761] usb usb5-port1: attempt power cycle
[ 1646.254773][T25581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5562'.
[ 1648.471738][T25596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1648.751922][T25603] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1648.762553][T25603] SELinux: failed to load policy
[ 1648.891744][ T8761] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1649.607144][ T8761] usb 2-1: Using ep0 maxpacket: 32
[ 1649.684931][ T8761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1649.712687][T25605] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[ 1649.712687][T25605]    program syz.3.5569 not setting count and/or reply_len properly
[ 1649.766916][ T8761] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1649.798711][ T8761] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1649.863058][ T8761] usb 2-1: Product: syz
[ 1649.880796][ T8761] usb 2-1: Manufacturer: syz
[ 1649.899488][ T8761] usb 2-1: SerialNumber: syz
[ 1649.923914][T25605] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1649.926367][ T8761] usb 2-1: config 0 descriptor??
[ 1650.269797][T25605] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[ 1650.857748][ T8761] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1650.943077][ T5718] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1651.055197][ T8761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1651.085013][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'.
[ 1651.122235][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'.
[ 1651.403591][  T987] usb 2-1: USB disconnect, device number 106
[ 1651.498427][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1651.972917][ T8761] usb 1-1: config 0 has no interfaces?
[ 1651.981214][ T8761] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[ 1651.990490][ T8761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1651.998505][ T8761] usb 1-1: Product: syz
[ 1652.004010][ T8761] usb 1-1: Manufacturer: syz
[ 1652.008641][ T8761] usb 1-1: SerialNumber: syz
[ 1652.019327][ T5718] usb 3-1: config 114 has an invalid interface number: 240 but max is 0
[ 1652.055557][ T8761] usb 1-1: config 0 descriptor??
[ 1652.109703][ T5718] usb 3-1: config 114 has no interface number 0
[ 1652.117128][ T5718] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1652.136542][ T5718] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1652.150957][ T5718] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1652.161739][ T5718] usb 3-1: config 114 interface 240 has no altsetting 0
[ 1652.193541][ T5718] usb 3-1: string descriptor 0 read error: -22
[ 1652.200615][ T5718] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1652.234336][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.310340][T25622] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1652.313949][ T8761] usb 1-1: USB disconnect, device number 10
[ 1652.345030][T25622] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1652.378756][ T5718] ir_usb 3-1:114.240: IR Dongle converter detected
[ 1652.563959][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5581'.
[ 1652.684737][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5581'.
[ 1653.689583][T25645] SELinux: failed to load policy
[ 1654.151251][ T5718] usb 3-1: IRDA class descriptor not found, device not bound
[ 1655.682472][T17588] usb 3-1: USB disconnect, device number 98
[ 1656.343045][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1656.356871][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1656.794379][T25662] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1656.810692][T25662] SELinux: failed to load policy
[ 1657.149979][T25651] syz.3.5582 (25651): drop_caches: 2
[ 1658.727705][    T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1660.668380][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5589'.
[ 1660.698366][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5589'.
[ 1662.208868][T25679] FAULT_INJECTION: forcing a failure.
[ 1662.208868][T25679] name failslab, interval 1, probability 0, space 0, times 0
[ 1662.258480][T25679] CPU: 1 UID: 0 PID: 25679 Comm: syz.0.5590 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1662.258511][T25679] Tainted: [L]=SOFTLOCKUP
[ 1662.258517][T25679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1662.258528][T25679] Call Trace:
[ 1662.258534][T25679]  <TASK>
[ 1662.258542][T25679]  dump_stack_lvl+0x100/0x190
[ 1662.258568][T25679]  should_fail_ex.cold+0x5/0xa
[ 1662.258592][T25679]  ? tomoyo_encode2+0xfb/0x3c0
[ 1662.258614][T25679]  should_failslab+0xc2/0x120
[ 1662.258632][T25679]  __kmalloc_noprof+0xe0/0x850
[ 1662.258657][T25679]  ? d_absolute_path+0x136/0x1b0
[ 1662.258679][T25679]  tomoyo_encode2+0xfb/0x3c0
[ 1662.258705][T25679]  tomoyo_encode+0x29/0x50
[ 1662.258727][T25679]  tomoyo_realpath_from_path+0x18c/0x690
[ 1662.258755][T25679]  tomoyo_path_number_perm+0x23c/0x580
[ 1662.258774][T25679]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1662.258795][T25679]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1662.258839][T25679]  ? find_held_lock+0x2b/0x80
[ 1662.258856][T25679]  ? __fget_files+0x215/0x3d0
[ 1662.258875][T25679]  ? hook_file_ioctl_common+0x149/0x410
[ 1662.258899][T25679]  ? __fget_files+0x215/0x3d0
[ 1662.258928][T25679]  ? __fget_files+0x21f/0x3d0
[ 1662.258952][T25679]  security_file_ioctl+0xd3/0x230
[ 1662.258975][T25679]  __x64_sys_ioctl+0xb7/0x210
[ 1662.258996][T25679]  do_syscall_64+0x10b/0xf80
[ 1662.259015][T25679]  ? clear_bhb_loop+0x40/0x90
[ 1662.259036][T25679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.259053][T25679] RIP: 0033:0x7f8fb939cdd9
[ 1662.259068][T25679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1662.259084][T25679] RSP: 002b:00007f8fba185028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1662.259100][T25679] RAX: ffffffffffffffda RBX: 00007f8fb9615fa0 RCX: 00007f8fb939cdd9
[ 1662.259111][T25679] RDX: 0000000000000000 RSI: 00000000c1105511 RDI: 0000000000000003
[ 1662.259121][T25679] RBP: 00007f8fba185090 R08: 0000000000000000 R09: 0000000000000000
[ 1662.259131][T25679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.259142][T25679] R13: 00007f8fb9616038 R14: 00007f8fb9615fa0 R15: 00007ffe1f1ea858
[ 1662.259166][T25679]  </TASK>
[ 1662.259200][T25679] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1662.742642][T25681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5591'.
[ 1662.761849][T25681] netlink: 'syz.4.5591': attribute type 7 has an invalid length.
[ 1662.852608][T25681] netlink: 'syz.4.5591': attribute type 8 has an invalid length.
[ 1662.887425][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5591'.
[ 1662.947112][T25672] syz.1.5588 (25672): drop_caches: 2
[ 1663.485498][T25695] syz.4.5595 (25695): drop_caches: 2
[ 1663.498997][    T9] usb 3-1: device descriptor read/64, error -71
[ 1663.795745][T25702] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1663.808134][T25702] SELinux: failed to load policy
[ 1663.970368][    T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1664.555449][T25694] syz.3.5594 (25694): drop_caches: 2
[ 1664.711073][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1664.796798][    T9] usb 3-1: config 114 has an invalid interface number: 240 but max is 0
[ 1664.824683][    T9] usb 3-1: config 114 has no interface number 0
[ 1664.857966][    T9] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1665.567369][T25708] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[ 1665.567369][T25708]    program syz.1.5597 not setting count and/or reply_len properly
[ 1665.745108][    T9] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1665.763701][    T9] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1665.765458][T25708] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1665.775320][    T9] usb 3-1: config 114 interface 240 has no altsetting 0
[ 1665.842345][T25708] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[ 1665.985555][    T9] usb 3-1: string descriptor 0 read error: -22
[ 1665.992952][    T9] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1666.008532][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1666.054142][T25688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1666.072185][T25688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1666.133686][    T9] ir_usb 3-1:114.240: IR Dongle converter detected
[ 1666.258832][   T30] audit: type=1400 audit(1777787033.335:1875): avc:  denied  { read write } for  pid=25723 comm="syz.3.5602" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1666.308062][   T30] audit: type=1400 audit(1777787033.335:1876): avc:  denied  { ioctl open } for  pid=25723 comm="syz.3.5602" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1666.439175][    T9] usb 3-1: IRDA class descriptor not found, device not bound
[ 1666.499657][    T9] usb 3-1: USB disconnect, device number 100
[ 1666.505060][T25727] can0: slcan on ttyS3.
[ 1666.596070][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5603'.
[ 1666.830210][T25734] IPVS: Error connecting to the multicast addr
[ 1666.892333][T25724] can0 (unregistered): slcan off ttyS3.
[ 1667.008964][T25742] netlink: 'syz.4.5604': attribute type 3 has an invalid length.
[ 1667.527673][ T5711] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1667.576183][   T30] audit: type=1400 audit(1777787034.570:1877): avc:  denied  { write } for  pid=25735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1667.698951][ T5711] usb 5-1: Using ep0 maxpacket: 16
[ 1667.699819][ T8761] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1667.717710][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1667.751694][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1667.801269][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1667.843855][ T5711] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1667.869653][   T30] audit: type=1400 audit(1777787034.823:1878): avc:  denied  { write } for  pid=25765 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1667.891796][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1667.908416][   T30] audit: type=1400 audit(1777787034.879:1879): avc:  denied  { ioctl } for  pid=25760 comm="syz.2.5609" path="socket:[118281]" dev="sockfs" ino=118281 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1667.978125][ T8761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1667.997856][  T802] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1668.027824][ T8761] usb 4-1: config 0 has no interfaces?
[ 1668.045418][ T8761] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[ 1668.087947][ T8761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.114400][ T8761] usb 4-1: Product: syz
[ 1668.131117][ T8761] usb 4-1: Manufacturer: syz
[ 1668.145886][ T8761] usb 4-1: SerialNumber: syz
[ 1668.179633][  T802] usb 2-1: Using ep0 maxpacket: 16
[ 1668.189026][  T802] usb 2-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config
[ 1668.206571][ T8761] usb 4-1: config 0 descriptor??
[ 1668.231517][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1668.261489][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1668.278481][  T802] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1668.284272][ T5711] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1668.297291][  T802] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1668.308543][  T802] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1668.313077][ T5711] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1668.313099][ T5711] usb 5-1: Manufacturer: syz
[ 1668.328332][ T5711] usb 5-1: config 0 descriptor??
[ 1668.350819][  T802] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1668.359021][  T802] usb 2-1: Manufacturer: syz
[ 1668.367093][  T802] usb 2-1: config 0 descriptor??
[ 1668.402437][   T30] audit: type=1400 audit(1777787035.338:1880): avc:  denied  { write } for  pid=25767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1668.482074][T17588] usb 4-1: USB disconnect, device number 74
[ 1668.522798][ T8761] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1668.535026][   T30] audit: type=1400 audit(1777787035.469:1881): avc:  denied  { write } for  pid=25787 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1668.639449][  T802] rc_core: IR keymap rc-hauppauge not found
[ 1668.645374][  T802] Registered IR keymap rc-empty
[ 1668.651698][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.671061][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.694656][ T8761] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1668.705334][ T8761] usb 3-1: config 114 has an invalid interface number: 240 but max is 0
[ 1668.720751][  T802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1668.734444][ T5737] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1668.742230][ T8761] usb 3-1: config 114 has no interface number 0
[ 1668.750415][  T802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input195
[ 1668.756473][ T5711] rc_core: IR keymap rc-hauppauge not found
[ 1668.762805][ T8761] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1668.762837][ T8761] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1668.762863][ T8761] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1668.762885][ T8761] usb 3-1: config 114 interface 240 has no altsetting 0
[ 1668.806281][ T8761] usb 3-1: string descriptor 0 read error: -22
[ 1668.815446][ T5711] Registered IR keymap rc-empty
[ 1668.819259][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.824288][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1668.833244][ T8761] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1668.849878][ T8761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.862670][T25778] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1668.870203][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.874243][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1668.878284][T25778] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1668.915458][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.916562][ T5711] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[ 1668.939843][ T8761] ir_usb 3-1:114.240: IR Dongle converter detected
[ 1668.946848][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input196
[ 1668.947713][ T5737] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1668.970011][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.977785][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1668.977884][ T5737] usb 1-1: config 0 has no interfaces?
[ 1668.991732][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1669.001477][ T5737] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[ 1669.011119][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1669.019534][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1669.023742][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.026988][ T5737] usb 1-1: Product: syz
[ 1669.038526][ T5737] usb 1-1: Manufacturer: syz
[ 1669.043304][ T5737] usb 1-1: SerialNumber: syz
[ 1669.048453][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1669.057473][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.065686][ T5737] usb 1-1: config 0 descriptor??
[ 1669.078012][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1669.098497][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1669.109466][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.114467][ T8761] usb 3-1: IRDA class descriptor not found, device not bound
[ 1669.133934][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1669.158260][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.176792][ T8761] usb 3-1: USB disconnect, device number 101
[ 1669.184211][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.185241][  T802] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1669.210834][  T802] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1669.222231][T25794] tmpfs: Group quota inode hardlimit too large.
[ 1669.225495][  T802] usb 2-1: USB disconnect, device number 107
[ 1669.233289][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.251909][T25794] x_tables: duplicate underflow at hook 1
[ 1669.271022][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.334731][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.366086][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1669.414856][ T5711] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1669.425093][ T5711] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1669.442138][ T5711] usb 5-1: USB disconnect, device number 98
[ 1669.491975][T25798] FAULT_INJECTION: forcing a failure.
[ 1669.491975][T25798] name failslab, interval 1, probability 0, space 0, times 0
[ 1669.522590][T25798] CPU: 0 UID: 0 PID: 25798 Comm: syz.3.5615 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1669.522618][T25798] Tainted: [L]=SOFTLOCKUP
[ 1669.522622][T25798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1669.522628][T25798] Call Trace:
[ 1669.522632][T25798]  <TASK>
[ 1669.522637][T25798]  dump_stack_lvl+0x100/0x190
[ 1669.522655][T25798]  should_fail_ex.cold+0x5/0xa
[ 1669.522671][T25798]  should_failslab+0xc2/0x120
[ 1669.522683][T25798]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1669.522698][T25798]  ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850
[ 1669.522717][T25798]  snd_pcm_hw_param_near.constprop.0+0xbc/0x850
[ 1669.522732][T25798]  ? lockdep_hardirqs_on+0x78/0x100
[ 1669.522751][T25798]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[ 1669.522765][T25798]  ? snd_pcm_oss_change_params_locked+0xa60/0x39f0
[ 1669.522779][T25798]  ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0
[ 1669.522793][T25798]  ? kfree+0x223/0x6c0
[ 1669.522809][T25798]  snd_pcm_oss_change_params_locked+0xae1/0x39f0
[ 1669.522828][T25798]  ? find_held_lock+0x2b/0x80
[ 1669.522839][T25798]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1669.522854][T25798]  ? __pfx___mutex_lock+0x10/0x10
[ 1669.522878][T25798]  snd_pcm_oss_get_active_substream+0x175/0x1d0
[ 1669.522894][T25798]  snd_pcm_oss_set_channels+0x23a/0x370
[ 1669.522910][T25798]  ? __pfx_snd_pcm_oss_set_channels+0x10/0x10
[ 1669.522928][T25798]  snd_pcm_oss_ioctl+0x229c/0x37c0
[ 1669.522943][T25798]  ? __fget_files+0x215/0x3d0
[ 1669.522955][T25798]  ? hook_file_ioctl_common+0x149/0x410
[ 1669.522973][T25798]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1669.522989][T25798]  ? selinux_file_ioctl+0x13b/0x290
[ 1669.523004][T25798]  ? selinux_file_ioctl+0xb6/0x290
[ 1669.523018][T25798]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1669.523033][T25798]  __x64_sys_ioctl+0x18e/0x210
[ 1669.523046][T25798]  do_syscall_64+0x10b/0xf80
[ 1669.523058][T25798]  ? clear_bhb_loop+0x40/0x90
[ 1669.523071][T25798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.523082][T25798] RIP: 0033:0x7f576019cdd9
[ 1669.523092][T25798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1669.523102][T25798] RSP: 002b:00007f5761067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1669.523113][T25798] RAX: ffffffffffffffda RBX: 00007f5760416090 RCX: 00007f576019cdd9
[ 1669.523120][T25798] RDX: 0000200000000180 RSI: 00000000c0045006 RDI: 0000000000000006
[ 1669.523126][T25798] RBP: 00007f5761067090 R08: 0000000000000000 R09: 0000000000000000
[ 1669.523133][T25798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1669.523139][T25798] R13: 00007f5760416128 R14: 00007f5760416090 R15: 00007ffc16cd5bd8
[ 1669.523153][T25798]  </TASK>
[ 1671.974498][ T5711] usb 1-1: USB disconnect, device number 11
[ 1672.171937][T25810] dlm: non-version read from control device 4096
[ 1672.308804][T25805] SELinux: failed to load policy
[ 1672.616500][T25814] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1673.117527][    T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1673.305291][T25820] SELinux: failed to load policy
[ 1673.368749][T25828] tipc: Started in network mode
[ 1673.444594][T25828] tipc: Node identity eef28af5130f, cluster identity 4711
[ 1673.501385][T25828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1673.839380][T13547] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1673.858708][T13547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1673.877478][T13547] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1673.887916][   T30] audit: type=1400 audit(1777787040.475:1882): avc:  denied  { mount } for  pid=25821 comm="syz.3.5624" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 1673.922114][T25821] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.932814][T13547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1673.966098][T13547] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1674.006796][    T9] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[ 1674.078795][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1674.104420][    T9] usb 5-1: string descriptor 0 read error: -22
[ 1674.126938][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1674.151279][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1674.267718][ T7459] tipc: Resetting bearer <eth:syzkaller0>
[ 1674.559716][  T987] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1674.580617][  T802] tipc: Node number set to 4261251829
[ 1674.740965][ T5711] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1674.774479][T25812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1674.775320][  T987] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1674.825471][  T987] usb 4-1: config 114 has an invalid interface number: 240 but max is 0
[ 1674.842973][T25840] SELinux: failed to load policy
[ 1674.855304][  T987] usb 4-1: config 114 has no interface number 0
[ 1674.874813][T25812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1674.909672][  T987] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1674.933209][ T5711] usb 3-1: Using ep0 maxpacket: 8
[ 1674.958728][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[ 1674.973231][  T987] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1675.002504][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1675.024675][  T987] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1675.063059][    T9] usbhid 5-1:1.0: can't add hid device: -71
[ 1675.074966][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[ 1675.087358][  T987] usb 4-1: config 114 interface 240 has no altsetting 0
[ 1675.102873][    T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1675.116550][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 128
[ 1675.138401][  T987] usb 4-1: string descriptor 0 read error: -22
[ 1675.145494][    T9] usb 5-1: USB disconnect, device number 99
[ 1675.170697][  T987] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1675.207286][  T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1675.227672][ T5711] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[ 1675.245592][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1675.253618][ T5711] usb 3-1: Product: syz
[ 1675.259173][ T5711] usb 3-1: Manufacturer: syz
[ 1675.269221][ T5711] usb 3-1: SerialNumber: syz
[ 1675.280182][ T5711] usb 3-1: config 0 descriptor??
[ 1675.346382][T25843] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1675.355090][T25839] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1675.363111][T25839] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1675.456313][  T987] ir_usb 4-1:114.240: IR Dongle converter detected
[ 1675.557974][ T5711] kvaser_usb 3-1:0.0: error -EPROTO: Cannot get software info
[ 1675.566448][ T5711] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -71
[ 1675.634895][T25826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1675.642023][T25826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1675.649353][T25826] bridge_slave_0: entered allmulticast mode
[ 1675.656095][T25826] bridge_slave_0: entered promiscuous mode
[ 1675.663448][T25826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1675.670711][T25826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1675.688685][T25826] bridge_slave_1: entered allmulticast mode
[ 1675.698800][T25826] bridge_slave_1: entered promiscuous mode
[ 1675.715278][  T987] usb 4-1: IRDA class descriptor not found, device not bound
[ 1675.746720][T25826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1675.755859][  T802] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1675.767446][T25826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1675.795991][T25826] team0: Port device team_slave_0 added
[ 1675.804366][T25826] team0: Port device team_slave_1 added
[ 1675.833258][T25826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1675.840266][T25826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1675.866556][T25826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1675.879197][T25826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1675.886408][T25826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1675.920042][T25826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1675.943352][  T987] usb 4-1: USB disconnect, device number 75
[ 1675.948223][  T802] usb 2-1: Using ep0 maxpacket: 16
[ 1675.961800][T25860] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1675.964427][  T802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1675.987099][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1676.014029][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1676.026607][  T802] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1676.035510][T25826] hsr_slave_0: entered promiscuous mode
[ 1676.042167][  T802] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1676.042589][T25826] hsr_slave_1: entered promiscuous mode
[ 1676.061413][T25826] debugfs: 'hsr0' already exists in 'hsr'
[ 1676.067143][T25826] Cannot create hsr debugfs directory
[ 1676.080622][  T802] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1676.090585][  T802] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1676.099632][  T802] usb 2-1: Manufacturer: syz
[ 1676.115223][  T802] usb 2-1: config 0 descriptor??
[ 1676.229603][ T5624] Bluetooth: hci5: command tx timeout
[ 1676.331861][T25826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1676.375639][T25826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1676.416857][T25867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5632'.
[ 1676.430519][  T802] rc_core: IR keymap rc-hauppauge not found
[ 1676.436453][  T802] Registered IR keymap rc-empty
[ 1676.457195][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.493402][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.537617][  T802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1676.562882][  T802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input197
[ 1676.633516][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.653487][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.675740][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.692398][T25876] tipc: Resetting bearer <eth:syzkaller0>
[ 1676.698388][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.719062][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.752252][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.762393][   T30] audit: type=1326 audit(1777787043.170:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1676.765856][T25826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1676.799695][T25826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1676.816120][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.836744][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.868345][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.877105][   T30] audit: type=1326 audit(1777787043.217:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1676.906800][   T30] audit: type=1326 audit(1777787043.217:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1676.945333][  T802] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1676.990806][   T30] audit: type=1326 audit(1777787043.236:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1677.022012][  T802] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1677.032022][   T30] audit: type=1326 audit(1777787043.245:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1677.081669][  T802] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1677.118801][T25877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1677.124632][  T802] usb 2-1: USB disconnect, device number 108
[ 1677.127070][  T987] usb 3-1: USB disconnect, device number 102
[ 1677.165209][   T30] audit: type=1326 audit(1777787043.245:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1677.219146][   T30] audit: type=1326 audit(1777787043.245:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1677.221533][T25876] syzkaller0: MTU too low for tipc bearer
[ 1677.245687][   T30] audit: type=1326 audit(1777787043.254:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b8d9cdd9 code=0x7ffc0000
[ 1677.245730][   T30] audit: type=1326 audit(1777787043.254:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25865 comm="syz.4.5632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0b8d5d60e code=0x7ffc0000
[ 1677.308713][T25876] tipc: Disabling bearer <eth:syzkaller0>
[ 1677.406897][T25826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1677.417776][T25826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.618286][T25826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1677.644597][T25826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.773025][T25896] xt_hashlimit: size too large, truncated to 1048576
[ 1677.822828][T25897] x_tables: duplicate underflow at hook 1
[ 1677.942718][T25901] netlink: 'syz.3.5641': attribute type 1 has an invalid length.
[ 1678.109299][T25901] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1678.120398][T25901] bond1: (slave vxcan3): Error -95 calling set_mac_address
[ 1678.390205][ T5624] Bluetooth: hci5: command tx timeout
[ 1678.466777][T25906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5641'.
[ 1678.535417][T25906] bond1: (slave bridge1): Enslaving as an active interface with a down link
[ 1678.628327][T25901] macvlan2: entered promiscuous mode
[ 1678.634225][T25901] macvlan2: entered allmulticast mode
[ 1678.640290][T25901] bond1: entered promiscuous mode
[ 1678.650026][T25901] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1678.668515][T25901] bond1: left promiscuous mode
[ 1678.934854][T25913] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1678.945383][T25913] SELinux: failed to load policy
[ 1678.951562][T11775] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1679.764826][  T802] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1680.003561][  T802] usb 5-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config
[ 1680.153751][  T802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1680.315125][  T802] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 562
[ 1680.365374][  T802] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1680.414434][  T802] usb 5-1: config 1 interface 1 has no altsetting 0
[ 1680.468000][  T802] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1680.545338][  T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1680.607269][ T5624] Bluetooth: hci5: command tx timeout
[ 1680.652054][  T802] usb 5-1: Product: syz
[ 1680.724978][  T802] usb 5-1: Manufacturer: syz
[ 1680.750764][  T802] usb 5-1: SerialNumber: syz
[ 1680.786139][  T802] cdc_ncm 5-1:1.0: skipping garbage
[ 1680.788676][T11775] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1680.807630][  T802] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[ 1680.816919][T25826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1680.830471][T11775] usb 3-1: config 114 has an invalid interface number: 240 but max is 0
[ 1680.830539][  T802] cdc_ncm 5-1:1.0: bind() failure
[ 1680.839684][T11775] usb 3-1: config 114 has no interface number 0
[ 1680.851761][T11775] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1680.868503][T11775] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1680.881602][T11775] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1680.885526][T25826] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1680.892809][T11775] usb 3-1: config 114 interface 240 has no altsetting 0
[ 1680.929083][T25826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1680.966323][T25826] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1680.974285][T25826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1680.985089][T25826] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1680.995657][T25915] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1681.007595][T25826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1681.017591][T25826] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1681.063500][T25826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1681.077154][T25826] 8021q: adding VLAN 0 to HW filter on device team0
[ 1681.087306][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1681.094377][ T7446] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1681.148928][T11775] usb 3-1: string descriptor 0 read error: -22
[ 1681.156061][T11775] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1681.185789][T11775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.186244][T23149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1681.200990][T23149] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1681.211155][T25911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1681.219459][T17588] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1681.233599][T25911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1681.255765][T11775] ir_usb 3-1:114.240: IR Dongle converter detected
[ 1681.376854][T17588] usb 2-1: device descriptor read/64, error -71
[ 1681.430283][  T802] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1681.660586][T11775] usb 3-1: IRDA class descriptor not found, device not bound
[ 1681.665651][  T802] usb 4-1: Using ep0 maxpacket: 8
[ 1681.675966][T17588] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1681.688536][ T5711] usb 5-1: USB disconnect, device number 100
[ 1681.722222][  T802] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[ 1681.753363][  T802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1681.764161][  T802] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[ 1681.774343][  T802] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 128
[ 1681.788130][  T802] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[ 1681.805920][T25826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1681.817143][  T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.825169][T25826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1681.837458][  T802] usb 4-1: Product: syz
[ 1681.842040][  T802] usb 4-1: Manufacturer: syz
[ 1681.846688][  T802] usb 4-1: SerialNumber: syz
[ 1681.869619][  T802] usb 4-1: config 0 descriptor??
[ 1681.878916][T17588] usb 2-1: device descriptor read/64, error -71
[ 1681.896407][T25928] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1681.911212][ T8761] usb 3-1: USB disconnect, device number 103
[ 1681.923375][  T802] kvaser_usb 4-1:0.0: error -EPROTO: Cannot get software info
[ 1681.940526][  T802] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -71
[ 1681.996704][T17588] usb usb2-port1: attempt power cycle
[ 1682.373427][T17588] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1682.403161][T17588] usb 2-1: device descriptor read/8, error -71
[ 1682.517265][T25826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1682.611214][T25826] veth0_vlan: entered promiscuous mode
[ 1682.633173][T25826] veth1_vlan: entered promiscuous mode
[ 1682.662112][T17588] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1682.684883][T25826] veth0_macvtap: entered promiscuous mode
[ 1682.692206][T17588] usb 2-1: device descriptor read/8, error -71
[ 1682.698978][T25826] veth1_macvtap: entered promiscuous mode
[ 1682.730216][T25826] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1682.757423][T25826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1682.791717][T23149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1682.809883][T17588] usb usb2-port1: unable to enumerate USB device
[ 1682.816425][T23149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1682.830758][ T5624] Bluetooth: hci5: command tx timeout
[ 1682.837456][ T7444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1682.871725][ T7444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1682.872728][  T802] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1683.055970][  T802] usb 3-1: Using ep0 maxpacket: 16
[ 1683.061266][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1683.062515][  T802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1683.069074][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1683.097439][  T802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1683.117012][  T802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1683.135473][  T802] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1683.145794][ T7459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1683.155247][ T7459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1683.163959][  T802] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1683.190527][  T802] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1683.203449][  T802] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1683.212544][  T802] usb 3-1: Manufacturer: syz
[ 1683.221948][  T802] usb 3-1: config 0 descriptor??
[ 1683.694186][  T802] rc_core: IR keymap rc-hauppauge not found
[ 1683.706203][  T802] Registered IR keymap rc-empty
[ 1683.717260][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1683.751784][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1683.781885][ T5711] usb 4-1: USB disconnect, device number 76
[ 1683.838963][  T802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1683.859209][T25958] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1683.984598][T25958] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 1683.995587][T25958] overlayfs: failed to look up (tracing) for ino (-66)
[ 1684.097261][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 1684.097302][   T30] audit: type=1400 audit(1777787049.805:1907): avc:  denied  { mount } for  pid=25950 comm="syz.0.5649" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1684.320478][  T802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input198
[ 1684.473025][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.529113][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.582821][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.735401][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.785571][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.813284][   T30] audit: type=1400 audit(1777787050.703:1908): avc:  denied  { unmount } for  pid=25826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1684.860349][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.903280][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1684.946184][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1685.011235][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1685.064347][  T802] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1685.130538][  T802] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1685.314418][  T802] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1685.448347][ T5704] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1686.152554][  T802] usb 3-1: USB disconnect, device number 104
[ 1686.338335][ T5704] usb 1-1: Using ep0 maxpacket: 16
[ 1686.376638][ T5704] usb 1-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config
[ 1686.414432][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1686.458204][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1686.471332][   T30] audit: type=1400 audit(1777787052.257:1909): avc:  denied  { mounton } for  pid=25977 comm="syz.1.5657" path="/411/file0" dev="tmpfs" ino=2183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1686.521560][ T5704] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1686.553699][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1686.567509][T25972] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[ 1686.611165][ T5704] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1686.648241][ T5704] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1686.668120][ T5704] usb 1-1: Manufacturer: syz
[ 1686.685868][ T5704] usb 1-1: config 0 descriptor??
[ 1686.858818][   T30] audit: type=1400 audit(1777787052.612:1910): avc:  denied  { getopt } for  pid=25984 comm="syz.2.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1687.663207][ T5704] rc_core: IR keymap rc-hauppauge not found
[ 1687.782862][ T5704] Registered IR keymap rc-empty
[ 1687.803368][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1687.843021][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1687.877366][ T5704] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1687.910454][ T5704] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input199
[ 1687.951823][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1687.991456][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.012935][ T5737] usb 3-1: new full-speed USB device number 105 using dummy_hcd
[ 1688.026323][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.058381][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.087771][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.120501][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.151689][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.183767][ T8761] usb 5-1: new low-speed USB device number 101 using dummy_hcd
[ 1688.191610][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.202741][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[ 1688.228288][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 136, setting to 64
[ 1688.240580][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.262093][ T5737] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1688.274828][ T5704] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1688.289845][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.310893][ T5737] usb 3-1: Product: syz
[ 1688.319232][ T5704] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1688.334090][ T5737] usb 3-1: Manufacturer: syz
[ 1688.345374][ T5737] usb 3-1: SerialNumber: syz
[ 1688.354115][ T5704] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1688.373370][ T5737] usb 3-1: config 0 descriptor??
[ 1688.389304][ T8761] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1688.400025][T25991] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1688.410675][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5660'.
[ 1688.426578][ T8761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt
[ 1688.438310][ T5704] usb 1-1: USB disconnect, device number 12
[ 1688.451198][T25991] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1688.471413][ T8761] usb 5-1: string descriptor 0 read error: -22
[ 1688.492130][ T8761] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[ 1688.531304][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[ 1688.546408][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[ 1688.580676][ T8761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1688.595333][ T5737] port100 3-1:0.0: NFC: Could not get supported command types
[ 1688.623509][T25993] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1688.662906][ T8761] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1688.706627][ T8761] usb 5-1: MIDIStreaming interface descriptor not found
[ 1688.779762][   T30] audit: type=1400 audit(1777787054.409:1911): avc:  denied  { shutdown } for  pid=25995 comm="syz.1.5660" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1688.993423][  T987] usb 3-1: USB disconnect, device number 105
[ 1689.388872][ T8761] usb 5-1: USB disconnect, device number 101
[ 1689.525685][T25972] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1689.543199][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1689.666911][T25972] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1689.703124][T25972] usb 4-1: can't read configurations, error -71
[ 1689.738974][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1690.670671][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1690.681809][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.718083][    T9] usb 1-1: config 0 descriptor??
[ 1690.985838][   T30] audit: type=1400 audit(1777787056.477:1912): avc:  denied  { append } for  pid=26007 comm="syz.2.5663" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:load_policy_exec_t:s0"
[ 1691.306238][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.355255][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.373650][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.396577][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.417039][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.447392][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.472391][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.485702][T17588] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1691.524570][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.553627][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.594770][    T9] logitech 0003:046D:C29C.001D: unknown main item tag 0x0
[ 1691.633045][    T9] logitech 0003:046D:C29C.001D: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0
[ 1691.690138][T17588] usb 4-1: Using ep0 maxpacket: 32
[ 1691.735227][T17588] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1691.776939][T17588] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1691.789464][T17588] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1691.798090][T17588] usb 4-1: Product: syz
[ 1691.798813][  T987] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1691.802320][T17588] usb 4-1: Manufacturer: syz
[ 1691.802344][T17588] usb 4-1: SerialNumber: syz
[ 1691.804953][T17588] usb 4-1: config 0 descriptor??
[ 1691.894270][    T9] logitech 0003:046D:C29C.001D: no inputs found
[ 1691.965929][    T9] usb 1-1: USB disconnect, device number 13
[ 1692.084637][  T987] usb 3-1: Using ep0 maxpacket: 16
[ 1692.111240][  T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.174832][  T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1692.547555][  T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1692.554271][T25972] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1692.582391][  T987] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1692.607827][  T987] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1692.651160][  T987] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1692.702020][  T987] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1692.734904][  T987] usb 3-1: Manufacturer: syz
[ 1692.750794][T25972] usb 5-1: Using ep0 maxpacket: 8
[ 1692.751904][  T987] usb 3-1: config 0 descriptor??
[ 1692.777608][T25972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[ 1692.805517][T25972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 1692.826004][T25972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[ 1692.848328][T25972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 128
[ 1692.884828][T25972] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[ 1692.908308][T25972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.924604][T25972] usb 5-1: Product: syz
[ 1692.933257][T25972] usb 5-1: Manufacturer: syz
[ 1692.942599][T25972] usb 5-1: SerialNumber: syz
[ 1693.025152][T25972] usb 5-1: config 0 descriptor??
[ 1693.061085][T26019] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1693.149556][T25972] kvaser_usb 5-1:0.0: error -EPROTO: Cannot get software info
[ 1693.186284][T25972] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -71
[ 1693.195521][  T987] rc_core: IR keymap rc-hauppauge not found
[ 1693.646193][  T987] Registered IR keymap rc-empty
[ 1694.124171][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.157404][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.200086][ T8761] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[ 1694.201723][  T987] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1694.234149][  T987] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input200
[ 1694.257659][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.316402][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.339038][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.360429][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.372558][ T8761] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[ 1694.381754][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.388982][ T8761] usb 2-1: config 8 has no interface number 0
[ 1694.389028][ T8761] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1694.389055][ T8761] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1694.389081][ T8761] usb 2-1: config 8 interface 177 has no altsetting 0
[ 1694.389112][ T8761] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1694.389136][ T8761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.441476][T26030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1694.441556][T26030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1694.459581][    C1] ir_toy 2-1:8.177: out urb status: -71
[ 1694.511414][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1694.606252][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1695.001450][ T8761] ir_toy 2-1:8.177: could not write reset command: -110
[ 1695.381234][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1695.409682][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1695.471972][ T8761] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110
[ 1695.504292][  T987] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1695.603219][  T987] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1695.603310][ T8761] usb 2-1: USB disconnect, device number 113
[ 1695.623845][  T987] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1695.692753][  T987] usb 3-1: USB disconnect, device number 106
[ 1695.825611][   T30] audit: type=1400 audit(1777787060.988:1913): avc:  denied  { remount } for  pid=26038 comm="syz.2.5671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1695.847806][T11775] usb 5-1: USB disconnect, device number 102
[ 1696.039757][T26041] input: syz1 as /devices/virtual/input/input202
[ 1696.147614][ T8761] usb 4-1: USB disconnect, device number 79
[ 1698.111175][ T8761] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1698.364555][ T8761] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[ 1698.569584][ T8761] usb 2-1: config 8 has no interface number 0
[ 1698.647864][ T8761] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1698.762249][ T8761] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1698.922208][ T8761] usb 2-1: config 8 interface 177 has no altsetting 0
[ 1699.921719][ T8761] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1699.981360][ T8761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1700.018595][T26070] 9p: Bad value for 'wfdno'
[ 1700.054026][T26054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1700.076831][T26054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1700.131413][    C1] ir_toy 2-1:8.177: out urb status: -71
[ 1700.382752][T26071] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[ 1700.382752][T26071]    program syz.3.5680 not setting count and/or reply_len properly
[ 1700.678836][ T8761] ir_toy 2-1:8.177: could not write reset command: -110
[ 1700.693567][ T8761] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110
[ 1700.702261][T26071] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1700.734794][ T8761] usb 2-1: USB disconnect, device number 114
[ 1700.910846][ T5737] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1701.092694][ T5737] usb 3-1: Using ep0 maxpacket: 16
[ 1701.098778][T26071] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[ 1701.127093][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1701.167410][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1701.216070][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1701.244851][ T5737] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1701.278334][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1701.600536][ T5737] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1701.860227][ T5737] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1701.969797][ T5737] usb 3-1: Manufacturer: syz
[ 1702.022884][ T5737] usb 3-1: config 0 descriptor??
[ 1702.259633][   T30] audit: type=1400 audit(1777787067.033:1914): avc:  denied  { mount } for  pid=26068 comm="syz.4.5679" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1702.417491][ T5737] rc_core: IR keymap rc-hauppauge not found
[ 1702.427059][ T5737] Registered IR keymap rc-empty
[ 1702.442714][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.482831][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.525127][ T5737] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1702.562332][ T5737] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input204
[ 1702.593290][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.620693][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.642968][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.674160][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.695374][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.716789][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.738178][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.780882][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.802483][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.823604][ T5737] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1702.848092][ T5737] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1702.857245][ T5737] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1702.877546][ T5737] usb 3-1: USB disconnect, device number 107
[ 1705.706885][   T30] audit: type=1400 audit(1777787070.252:1915): avc:  denied  { append } for  pid=26093 comm="syz.4.5688" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1705.711302][T26094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5688'.
[ 1706.671150][T26102] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1706.773511][T26094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5688'.
[ 1706.820492][T26102] SELinux: failed to load policy
[ 1707.479139][   T30] audit: type=1400 audit(1777787071.843:1916): avc:  denied  { map } for  pid=26083 comm="syz.0.5683" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1708.188833][   T30] audit: type=1400 audit(1777787071.899:1917): avc:  denied  { execute } for  pid=26083 comm="syz.0.5683" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1714.785778][T26125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1715.099427][ T5711] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1715.110603][T26142] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1715.123803][T26142] SELinux: failed to load policy
[ 1715.358341][T25972] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1715.486861][ T5737] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1716.124201][ T5711] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1716.208877][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.224635][ T5711] usb 1-1: config 0 descriptor??
[ 1716.247753][ T5711] cp210x 1-1:0.0: cp210x converter detected
[ 1716.277411][T25972] usb 5-1: Using ep0 maxpacket: 32
[ 1716.282651][ T5737] usb 2-1: Using ep0 maxpacket: 16
[ 1716.289766][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1716.313373][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1716.324961][T25972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1716.408800][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1716.425542][ T5737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1716.425713][T25972] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1716.445940][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1716.460173][T25972] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1716.471920][ T5624] Bluetooth: hci2: unexpected event 0x06 length: 95 > 3
[ 1716.481499][ T5737] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1716.498671][T25972] usb 5-1: Product: syz
[ 1716.503039][ T5737] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1716.511253][T25972] usb 5-1: Manufacturer: syz
[ 1716.518728][T25972] usb 5-1: SerialNumber: syz
[ 1716.524046][ T5737] usb 2-1: Manufacturer: syz
[ 1716.589100][T26150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5699'.
[ 1717.593198][T26123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1717.624760][T26123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1717.647833][T25972] usb 5-1: config 0 descriptor??
[ 1717.660075][ T5737] usb 2-1: config 0 descriptor??
[ 1718.025609][ T5711] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1718.040779][ T5737] rc_core: IR keymap rc-hauppauge not found
[ 1718.062541][ T5711] cp210x 1-1:0.0: GPIO initialisation failed: -71
[ 1718.065670][ T5737] Registered IR keymap rc-empty
[ 1718.093979][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.119551][ T5711] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1718.137157][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.297933][ T5737] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1718.697960][ T5711] usb 1-1: USB disconnect, device number 14
[ 1718.752204][ T5711] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1718.783007][ T5737] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input205
[ 1718.800343][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.820907][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.842226][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.863618][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.885015][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.904165][ T5711] cp210x 1-1:0.0: device disconnected
[ 1718.933393][T25972] usb 5-1: USB disconnect, device number 103
[ 1718.940968][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1718.989683][T26166] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1719.003125][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1719.044672][T26166] SELinux: failed to load policy
[ 1719.045553][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1719.138630][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1719.194996][ T5737] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1719.221632][ T5737] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1719.232793][ T5737] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1719.288616][ T5737] usb 2-1: USB disconnect, device number 115
[ 1719.539708][T26178] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[ 1719.539708][T26178]    program syz.2.5706 not setting count and/or reply_len properly
[ 1719.970631][T26178] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1719.989712][T26187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5709'.
[ 1720.293699][T26178] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[ 1720.355352][T26194] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5707'.
[ 1721.984868][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1721.991223][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1723.010601][T13547] Bluetooth: hci2: command 0x0406 tx timeout
[ 1723.247650][T26221] FAULT_INJECTION: forcing a failure.
[ 1723.247650][T26221] name failslab, interval 1, probability 0, space 0, times 0
[ 1723.260761][T26221] CPU: 0 UID: 0 PID: 26221 Comm: syz.0.5716 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1723.260782][T26221] Tainted: [L]=SOFTLOCKUP
[ 1723.260786][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1723.260792][T26221] Call Trace:
[ 1723.260796][T26221]  <TASK>
[ 1723.260800][T26221]  dump_stack_lvl+0x100/0x190
[ 1723.260817][T26221]  should_fail_ex.cold+0x5/0xa
[ 1723.260832][T26221]  should_failslab+0xc2/0x120
[ 1723.260844][T26221]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1723.260860][T26221]  ? io_submit_one+0x124/0x1fb0
[ 1723.260880][T26221]  io_submit_one+0x124/0x1fb0
[ 1723.260897][T26221]  ? __lock_acquire+0x4a5/0x2630
[ 1723.260912][T26221]  ? irqentry_exit+0x246/0x790
[ 1723.260924][T26221]  ? lockdep_hardirqs_on+0x78/0x100
[ 1723.260937][T26221]  ? __pfx_io_submit_one+0x10/0x10
[ 1723.260959][T26221]  ? __might_fault+0xc5/0x140
[ 1723.260982][T26221]  ? __x64_sys_io_submit+0x1b1/0x3a0
[ 1723.260992][T26221]  __x64_sys_io_submit+0x1b1/0x3a0
[ 1723.261003][T26221]  ? __pfx___x64_sys_io_submit+0x10/0x10
[ 1723.261013][T26221]  ? fput+0x79/0x100
[ 1723.261031][T26221]  ? rcu_is_watching+0x12/0xc0
[ 1723.261049][T26221]  do_syscall_64+0x10b/0xf80
[ 1723.261061][T26221]  ? clear_bhb_loop+0x40/0x90
[ 1723.261074][T26221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.261085][T26221] RIP: 0033:0x7f8b7fb9cdd9
[ 1723.261094][T26221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1723.261105][T26221] RSP: 002b:00007f8b80a8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1723.261116][T26221] RAX: ffffffffffffffda RBX: 00007f8b7fe15fa0 RCX: 00007f8b7fb9cdd9
[ 1723.261123][T26221] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 00007f8b80a6e000
[ 1723.261129][T26221] RBP: 00007f8b80a8f090 R08: 0000000000000000 R09: 0000000000000000
[ 1723.261135][T26221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1723.261142][T26221] R13: 00007f8b7fe16038 R14: 00007f8b7fe15fa0 R15: 00007ffede51fc58
[ 1723.261156][T26221]  </TASK>
[ 1725.265174][T11775] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1725.389757][T26255] No memory to map
[ 1725.446171][T11775] usb 2-1: Using ep0 maxpacket: 32
[ 1725.461928][T11775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1725.604865][T11775] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1725.652542][T11775] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1725.665073][T11775] usb 2-1: Product: syz
[ 1725.724842][T11775] usb 2-1: Manufacturer: syz
[ 1725.734888][T11775] usb 2-1: SerialNumber: syz
[ 1725.812390][T11775] usb 2-1: config 0 descriptor??
[ 1726.268785][ T5737] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1726.482537][ T5737] usb 4-1: Using ep0 maxpacket: 32
[ 1726.505942][  T987] usb 2-1: USB disconnect, device number 116
[ 1726.877849][ T5737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1726.948705][ T5737] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1726.981748][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1727.023752][ T5737] usb 4-1: Product: syz
[ 1727.048898][ T5737] usb 4-1: Manufacturer: syz
[ 1727.086701][ T5737] usb 4-1: SerialNumber: syz
[ 1727.127443][ T5737] usb 4-1: config 0 descriptor??
[ 1730.380115][ T5737] usb 4-1: USB disconnect, device number 80
[ 1732.077581][T26285] syz.4.5733 (26285): drop_caches: 2
[ 1732.532629][T26308] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5735'.
[ 1732.564027][T26307] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[ 1732.564027][T26307]    program syz.3.5738 not setting count and/or reply_len properly
[ 1732.820765][T26304] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1733.085224][T26315] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1733.471372][T26315] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[ 1733.791150][T26324] FAULT_INJECTION: forcing a failure.
[ 1733.791150][T26324] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1733.807296][T26324] CPU: 0 UID: 0 PID: 26324 Comm: syz.4.5742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1733.807326][T26324] Tainted: [L]=SOFTLOCKUP
[ 1733.807332][T26324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1733.807341][T26324] Call Trace:
[ 1733.807347][T26324]  <TASK>
[ 1733.807353][T26324]  dump_stack_lvl+0x100/0x190
[ 1733.807379][T26324]  should_fail_ex.cold+0x5/0xa
[ 1733.807398][T26324]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1733.807418][T26324]  should_fail_alloc_page+0xeb/0x140
[ 1733.807439][T26324]  prepare_alloc_pages+0x1f0/0x5f0
[ 1733.807464][T26324]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[ 1733.807495][T26324]  ? __kernel_text_address+0xd/0x30
[ 1733.807520][T26324]  ? unwind_get_return_address+0x59/0xa0
[ 1733.807554][T26324]  ? arch_stack_walk+0xa6/0xf0
[ 1733.807588][T26324]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1733.807614][T26324]  ? stack_trace_save+0x8e/0xc0
[ 1733.807632][T26324]  ? __pfx_stack_trace_save+0x10/0x10
[ 1733.807651][T26324]  ? stack_depot_save_flags+0x27/0x9d0
[ 1733.807667][T26324]  ? __lock_acquire+0x4a5/0x2630
[ 1733.807692][T26324]  ? __lock_acquire+0x4a5/0x2630
[ 1733.807713][T26324]  ? ___sys_sendmsg+0x190/0x1e0
[ 1733.807732][T26324]  ? __sys_sendmsg+0x170/0x220
[ 1733.807763][T26324]  ? do_syscall_64+0x10b/0xf80
[ 1733.807782][T26324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1733.807803][T26324]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1733.807827][T26324]  ? policy_nodemask+0xed/0x4f0
[ 1733.807849][T26324]  alloc_pages_mpol+0x1fb/0x540
[ 1733.807870][T26324]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1733.807896][T26324]  ? bcm_sendmsg+0x34e3/0x4510
[ 1733.807920][T26324]  ___kmalloc_large_node+0xe5/0x120
[ 1733.807944][T26324]  __kmalloc_large_node_noprof+0x1c/0x70
[ 1733.807967][T26324]  __kmalloc_noprof+0x5be/0x850
[ 1733.807993][T26324]  ? lockdep_init_map_type+0x5c/0x250
[ 1733.808021][T26324]  bcm_sendmsg+0x34e3/0x4510
[ 1733.808053][T26324]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 1733.808076][T26324]  ? import_ubuf+0x1b6/0x220
[ 1733.808114][T26324]  ____sys_sendmsg+0x9e1/0xb70
[ 1733.808134][T26324]  ? __pfx_bcm_sendmsg+0x10/0x10
[ 1733.808161][T26324]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1733.808194][T26324]  ___sys_sendmsg+0x190/0x1e0
[ 1733.808218][T26324]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1733.808272][T26324]  __sys_sendmsg+0x170/0x220
[ 1733.808300][T26324]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1733.808338][T26324]  ? rcu_is_watching+0x12/0xc0
[ 1733.808369][T26324]  do_syscall_64+0x10b/0xf80
[ 1733.808388][T26324]  ? clear_bhb_loop+0x40/0x90
[ 1733.808411][T26324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1733.808429][T26324] RIP: 0033:0x7fd0b8d9cdd9
[ 1733.808445][T26324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1733.808462][T26324] RSP: 002b:00007fd0b9c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1733.808479][T26324] RAX: ffffffffffffffda RBX: 00007fd0b9016090 RCX: 00007fd0b8d9cdd9
[ 1733.808491][T26324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[ 1733.808502][T26324] RBP: 00007fd0b9c86090 R08: 0000000000000000 R09: 0000000000000000
[ 1733.808512][T26324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1733.808527][T26324] R13: 00007fd0b9016128 R14: 00007fd0b9016090 R15: 00007ffc47e4bb68
[ 1733.808551][T26324]  </TASK>
[ 1734.871203][   T30] audit: type=1400 audit(1777787097.484:1918): avc:  denied  { mount } for  pid=26327 comm="syz.4.5745" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1735.074116][ T8761] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1735.512450][   T30] audit: type=1400 audit(1777787097.493:1919): avc:  denied  { append } for  pid=26327 comm="syz.4.5745" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1735.664871][ T8761] usb 5-1: Using ep0 maxpacket: 32
[ 1735.698086][ T8761] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1735.724433][ T8761] usb 5-1: can't read configurations, error -61
[ 1735.898744][ T8761] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1735.995245][T26342] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1736.090790][ T8761] usb 5-1: Using ep0 maxpacket: 32
[ 1736.129722][ T8761] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1736.172984][ T8761] usb 5-1: can't read configurations, error -61
[ 1736.187536][ T8761] usb usb5-port1: attempt power cycle
[ 1736.791587][ T8761] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1737.682052][ T8761] usb 5-1: Using ep0 maxpacket: 32
[ 1737.704631][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'.
[ 1737.726606][ T8761] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1737.734267][ T8761] usb 5-1: can't read configurations, error -61
[ 1737.875224][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'.
[ 1739.797989][T11775] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1740.493381][T26380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5759'.
[ 1740.658948][T11775] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1740.790464][T11775] usb 4-1: config 114 has an invalid interface number: 240 but max is 0
[ 1740.799997][T11775] usb 4-1: config 114 has no interface number 0
[ 1740.807358][T11775] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1740.819375][T11775] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1740.833011][T11775] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1740.844509][T11775] usb 4-1: config 114 interface 240 has no altsetting 0
[ 1740.858869][T11775] usb 4-1: string descriptor 0 read error: -22
[ 1740.866280][T11775] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1740.876064][T11775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1740.999917][T26367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1741.007157][T26367] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1741.013898][T26388] tmpfs: Bad value for 'mpol'
[ 1741.157794][T11775] ir_usb 4-1:114.240: IR Dongle converter detected
[ 1741.488147][T11775] usb 4-1: IRDA class descriptor not found, device not bound
[ 1741.704407][T25972] usb 4-1: USB disconnect, device number 81
[ 1741.803130][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5766'.
[ 1741.855260][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5766'.
[ 1742.295380][T26406] fuse: Bad value for 'fd'
[ 1742.548886][ T5711] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1742.791633][ T5711] usb 3-1: Using ep0 maxpacket: 32
[ 1743.159875][T26420] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1743.171706][T26420] SELinux: failed to load policy
[ 1743.191536][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1744.266658][ T5711] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1744.295584][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1744.314003][ T5711] usb 3-1: Product: syz
[ 1744.322096][ T5711] usb 3-1: Manufacturer: syz
[ 1744.328043][ T5711] usb 3-1: SerialNumber: syz
[ 1744.334938][ T5711] usb 3-1: config 0 descriptor??
[ 1744.414051][   T30] audit: type=1400 audit(1777787106.468:1920): avc:  denied  { view } for  pid=26423 comm="syz.1.5774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1744.748959][T26433] syzkaller0: entered promiscuous mode
[ 1744.781872][T26433] syzkaller0: entered allmulticast mode
[ 1745.086945][ T8761] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1745.280171][ T8761] usb 4-1: Using ep0 maxpacket: 32
[ 1745.299673][ T8761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1745.383156][ T8761] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1745.434456][ T8761] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1745.466102][ T8761] usb 4-1: Product: syz
[ 1745.503682][ T8761] usb 4-1: Manufacturer: syz
[ 1745.529653][T26443] fuse: Bad value for 'fd'
[ 1745.640437][T26436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5778'.
[ 1745.658360][ T8761] usb 4-1: SerialNumber: syz
[ 1745.701957][ T8761] usb 4-1: config 0 descriptor??
[ 1747.385193][ T8761] usb 3-1: USB disconnect, device number 108
[ 1747.790035][T26460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5784'.
[ 1747.824816][   T30] audit: type=1400 audit(1777787109.668:1921): avc:  denied  { map } for  pid=26457 comm="syz.0.5785" path="socket:[123064]" dev="sockfs" ino=123064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1747.861711][T26451] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1748.428940][ T5737] usb 4-1: USB disconnect, device number 82
[ 1748.666749][T25972] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1748.851117][T25972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1748.870865][T25972] usb 3-1: config 0 has no interfaces?
[ 1748.890121][T25972] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[ 1748.919353][T25972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1748.945108][T25972] usb 3-1: Product: syz
[ 1748.954647][T25972] usb 3-1: Manufacturer: syz
[ 1748.965309][T25972] usb 3-1: SerialNumber: syz
[ 1748.979812][T25972] usb 3-1: config 0 descriptor??
[ 1749.112347][T26481] FAULT_INJECTION: forcing a failure.
[ 1749.112347][T26481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1749.125786][T26481] CPU: 1 UID: 0 PID: 26481 Comm: syz.3.5789 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1749.125813][T26481] Tainted: [L]=SOFTLOCKUP
[ 1749.125820][T26481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1749.125830][T26481] Call Trace:
[ 1749.125836][T26481]  <TASK>
[ 1749.125842][T26481]  dump_stack_lvl+0x100/0x190
[ 1749.125868][T26481]  should_fail_ex.cold+0x5/0xa
[ 1749.125891][T26481]  strncpy_from_user+0x3b/0x2d0
[ 1749.125915][T26481]  ? get_pid_task+0x106/0x250
[ 1749.125936][T26481]  path_setxattrat+0x127/0x3b0
[ 1749.125961][T26481]  ? __pfx_path_setxattrat+0x10/0x10
[ 1749.126007][T26481]  ? fput+0x79/0x100
[ 1749.126030][T26481]  ? ksys_write+0x1ac/0x250
[ 1749.126048][T26481]  ? __pfx_ksys_write+0x10/0x10
[ 1749.126069][T26481]  __x64_sys_fsetxattr+0xc5/0x140
[ 1749.126092][T26481]  ? do_syscall_64+0x90/0xf80
[ 1749.126115][T26481]  ? lockdep_hardirqs_on+0x78/0x100
[ 1749.126134][T26481]  do_syscall_64+0x10b/0xf80
[ 1749.126152][T26481]  ? clear_bhb_loop+0x40/0x90
[ 1749.126173][T26481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1749.126190][T26481] RIP: 0033:0x7f576019cdd9
[ 1749.126206][T26481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1749.126222][T26481] RSP: 002b:00007f5761088028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[ 1749.126244][T26481] RAX: ffffffffffffffda RBX: 00007f5760415fa0 RCX: 00007f576019cdd9
[ 1749.126255][T26481] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1749.126265][T26481] RBP: 00007f5761088090 R08: 0000000000000000 R09: 0000000000000000
[ 1749.126275][T26481] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001
[ 1749.126285][T26481] R13: 00007f5760416038 R14: 00007f5760415fa0 R15: 00007ffc16cd5bd8
[ 1749.126309][T26481]  </TASK>
[ 1749.479964][T25972] usb 3-1: USB disconnect, device number 109
[ 1750.445645][T26490] fuse: Bad value for 'fd'
[ 1750.504778][T25972] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[ 1750.680445][T25972] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1750.692876][T25972] usb 4-1: config 8 has no interface number 0
[ 1750.701177][T25972] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1750.715266][T25972] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1750.726749][T25972] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1750.736249][T25972] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1750.747564][T25972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1750.792158][T26488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1750.824113][T26488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1750.985270][T26459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1751.344493][    C1] ir_toy 4-1:8.177: out urb status: -71
[ 1751.674315][T26495] Bluetooth: MGMT ver 1.23
[ 1751.891610][T25972] ir_toy 4-1:8.177: could not write reset command: -110
[ 1751.950799][T25972] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110
[ 1752.035347][T25972] usb 4-1: USB disconnect, device number 83
[ 1752.315018][T26503] SELinux: failed to load policy
[ 1752.460376][ T5737] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1752.567907][T25972] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1752.738390][ T5737] usb 5-1: Using ep0 maxpacket: 32
[ 1752.791877][T25972] usb 3-1: Using ep0 maxpacket: 32
[ 1752.807687][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1752.848078][T25972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1752.904568][ T5737] usb 5-1: config 0 has no interfaces?
[ 1752.960392][T25972] usb 3-1: config 0 has no interfaces?
[ 1753.010877][T25972] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1753.035338][T25972] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1753.070848][ T5737] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1753.100606][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1753.119088][T25972] usb 3-1: Product: syz
[ 1753.135641][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'.
[ 1753.144930][T25972] usb 3-1: Manufacturer: syz
[ 1753.149607][ T5737] usb 5-1: Product: syz
[ 1753.153918][ T5737] usb 5-1: Manufacturer: syz
[ 1753.159394][T25972] usb 3-1: SerialNumber: syz
[ 1753.179427][ T5737] usb 5-1: SerialNumber: syz
[ 1753.214582][T25972] usb 3-1: config 0 descriptor??
[ 1753.232112][ T5737] usb 5-1: config 0 descriptor??
[ 1754.387421][T26541] fuse: Bad value for 'group_id'
[ 1754.392422][T26541] fuse: Bad value for 'group_id'
[ 1755.132033][   T30] audit: type=1400 audit(1777787115.807:1922): avc:  denied  { mounton } for  pid=26538 comm="syz.3.5804" path="/251/file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1755.311347][   T30] audit: type=1400 audit(1777787115.938:1923): avc:  denied  { read write } for  pid=26538 comm="syz.3.5804" name="file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1755.497682][   T30] audit: type=1400 audit(1777787115.938:1924): avc:  denied  { open } for  pid=26538 comm="syz.3.5804" path="/251/file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1755.567529][  T987] usb 5-1: USB disconnect, device number 108
[ 1755.639598][T26548] dvmrp6: entered allmulticast mode
[ 1756.877662][    T9] usb 3-1: USB disconnect, device number 110
[ 1757.287506][T26573] overlayfs: failed to resolve './file1': -2
[ 1760.027142][T26579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5814'.
[ 1760.038975][T26579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5814'.
[ 1760.270950][T26577] openvswitch: netlink: Tunnel attr 12766 out of range max 16
[ 1761.004968][T26601] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5820'.
[ 1764.401701][T26623] bridge_slave_0 (unregistering): left allmulticast mode
[ 1764.408805][T26623] bridge_slave_0 (unregistering): left promiscuous mode
[ 1764.415810][T26623] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1765.338288][T26640] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[ 1765.350756][T26640] SELinux: failed to load policy
[ 1766.722011][T26646] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5834'.
[ 1768.243801][  T987] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1768.383151][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5842'.
[ 1768.394924][  T987] usb 1-1: device descriptor read/64, error -71
[ 1768.471301][   T30] audit: type=1400 audit(1777787128.992:1925): avc:  denied  { read } for  pid=26670 comm="syz.1.5843" path="socket:[124309]" dev="sockfs" ino=124309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1768.661607][  T987] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1768.836136][  T987] usb 1-1: device descriptor read/64, error -71
[ 1769.082224][  T987] usb usb1-port1: attempt power cycle
[ 1769.385918][T11775] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1769.451115][  T987] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1769.590136][T11775] usb 5-1: Using ep0 maxpacket: 16
[ 1769.598932][  T987] usb 1-1: device descriptor read/8, error -71
[ 1769.621505][T11775] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[ 1769.644690][T11775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1769.674411][T11775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1769.694661][T11775] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1769.740079][T11775] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1769.778738][T11775] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1769.788831][T11775] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1769.798030][T11775] usb 5-1: Manufacturer: syz
[ 1769.812903][T11775] usb 5-1: config 0 descriptor??
[ 1769.913199][  T987] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1769.954375][  T987] usb 1-1: device descriptor read/8, error -71
[ 1770.092877][  T987] usb usb1-port1: unable to enumerate USB device
[ 1770.124414][T11775] rc_core: IR keymap rc-hauppauge not found
[ 1770.132025][T11775] Registered IR keymap rc-empty
[ 1770.143325][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.179158][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.201210][T11775] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1770.228539][T11775] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input207
[ 1770.263019][T26705] openvswitch: netlink: IPv4 tunnel dst address is zero
[ 1770.309906][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.429355][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.530618][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.563669][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.595962][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.637253][T17588] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1770.641809][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.695594][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.741634][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.777736][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.801858][T11775] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1770.829743][T17588] usb 4-1: Using ep0 maxpacket: 16
[ 1770.836544][T17588] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[ 1770.847295][T17588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1770.858517][T17588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1770.859158][T11775] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1770.868481][T17588] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1770.868507][T17588] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1770.869618][T17588] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1770.878592][T11775] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1770.922296][T11775] usb 5-1: USB disconnect, device number 109
[ 1771.006093][T17588] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1771.040263][T17588] usb 4-1: Manufacturer: syz
[ 1771.066117][T17588] usb 4-1: config 0 descriptor??
[ 1771.311508][T13547] Bluetooth: hci2: command 0x0406 tx timeout
[ 1771.486852][ T8761] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1771.509572][T17588] rc_core: IR keymap rc-hauppauge not found
[ 1771.561418][T26723] SELinux: failed to load policy
[ 1771.580176][T17588] Registered IR keymap rc-empty
[ 1771.657803][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1771.741971][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1771.753532][ T8761] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1771.816205][ T8761] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1771.830112][T17588] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1771.885177][ T8761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1771.971021][T17588] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input208
[ 1771.986586][ T8761] usb 1-1: Product: syz
[ 1772.020830][ T8761] usb 1-1: Manufacturer: syz
[ 1772.051525][ T8761] usb 1-1: SerialNumber: syz
[ 1772.115274][ T8761] usb 1-1: config 0 descriptor??
[ 1772.141812][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.224882][ T8761] usb 1-1: ucan: probing device on interface #0
[ 1772.264964][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.275784][ T8761] usb 1-1: ucan: invalid EP count (0)
[ 1772.293829][ T8761] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1772.316966][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.363410][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.422613][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.487328][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.528823][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.548004][T26739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5865'.
[ 1772.563815][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.586402][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5866'.
[ 1772.603663][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1772.696924][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5867'.
[ 1772.706616][T26742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5867'.
[ 1772.719496][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5867'.
[ 1772.728362][T26742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5867'.
[ 1772.774554][T17588] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1773.536229][ T5624] Bluetooth: hci2: command 0x0406 tx timeout
[ 1773.599541][T17588] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1773.618657][T17588] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1773.634427][T17588] usb 4-1: USB disconnect, device number 84
[ 1776.378672][T17588] usb 1-1: USB disconnect, device number 19
[ 1777.305384][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5872'.
[ 1777.594722][T26768] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5873'.
[ 1778.420746][T26772] overlay: Bad value for 'uuid'
[ 1778.433016][   T30] audit: type=1400 audit(1777787138.294:1926): avc:  denied  { mounton } for  pid=26771 comm="syz.3.5874" path="/263/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 1778.481342][T26772] ieee802154 phy0 wpan0: encryption failed: -22
[ 1778.811530][ T8761] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1779.028200][ T8761] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1779.084536][ T8761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1779.140266][ T8761] usb 3-1: Product: syz
[ 1779.262390][ T8761] usb 3-1: Manufacturer: syz
[ 1779.267070][ T8761] usb 3-1: SerialNumber: syz
[ 1779.280706][ T8761] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1779.302919][ T5704] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1779.560199][  T987] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[ 1779.687553][T17588] usb 3-1: USB disconnect, device number 111
[ 1779.745657][  T987] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[ 1779.782979][  T987] usb 5-1: config 8 has no interface number 0
[ 1779.800028][  T987] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1779.814817][  T987] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1779.845588][  T987] usb 5-1: config 8 interface 177 has no altsetting 0
[ 1779.880786][  T987] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1779.927638][  T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.993419][T26778] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1780.006924][T26802] tmpfs: Bad value for 'mpol'
[ 1780.015435][T26778] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1780.029597][    C0] ir_toy 5-1:8.177: out urb status: -71
[ 1780.123290][T26803] netlink: 'syz.1.5882': attribute type 1 has an invalid length.
[ 1780.213940][    T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1780.301270][ T8761] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1780.404577][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1780.423523][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1780.457143][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1780.468869][    T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1780.479238][    T9] usb 4-1: Product: syz
[ 1780.484370][    T9] usb 4-1: Manufacturer: syz
[ 1780.489447][    T9] usb 4-1: SerialNumber: syz
[ 1780.500019][    T9] usb 4-1: config 0 descriptor??
[ 1780.544329][ T5704] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1780.551553][ T8761] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1780.561048][ T8761] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1780.573802][ T8761] usb 1-1: Product: syz
[ 1780.579901][ T5704] ath9k_htc: Failed to initialize the device
[ 1780.586197][ T8761] usb 1-1: Manufacturer: syz
[ 1780.590845][ T8761] usb 1-1: SerialNumber: syz
[ 1780.596060][T17588] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1780.602177][  T987] ir_toy 5-1:8.177: could not write reset command: -110
[ 1780.616332][ T8761] usb 1-1: config 0 descriptor??
[ 1780.648608][  T987] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110
[ 1780.697209][ T8761] ch341 1-1:0.0: ch341-uart converter detected
[ 1780.787450][  T987] usb 5-1: USB disconnect, device number 110
[ 1780.823299][T26803] bond2: entered promiscuous mode
[ 1780.857154][T26803] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1780.969719][T26806] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1781.022547][T26806] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[ 1781.056362][T17588] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1781.072821][T26806] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[ 1781.164355][T26806] bond2: (slave vti0): making interface the new active one
[ 1781.171657][T26806] vti0: entered promiscuous mode
[ 1781.190890][T26806] bond2: (slave vti0): Enslaving as an active interface with an up link
[ 1781.237907][T17588] usb 3-1: Using ep0 maxpacket: 16
[ 1781.246286][T17588] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[ 1781.268109][T17588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1781.298670][T17588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1781.311428][T17588] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1781.340133][T17588] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1781.357825][T17588] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1781.373882][T17588] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1781.391940][T17588] usb 3-1: Manufacturer: syz
[ 1781.398287][T25972] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1781.422171][T17588] usb 3-1: config 0 descriptor??
[ 1781.585669][T26814] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5886'.
[ 1781.585678][T25972] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[ 1781.606313][T25972] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[ 1781.618033][T25972] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1781.639390][T25972] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[ 1781.670232][T25972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1781.693988][T25972] usb 5-1: Product: syz
[ 1781.709612][T25972] usb 5-1: Manufacturer: syz
[ 1781.721389][T25972] usb 5-1: SerialNumber: syz
[ 1781.738979][ T8761] usb 1-1: ch341-uart converter now attached to ttyUSB0
[ 1781.754919][T26810] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1781.768651][T26810] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1781.796000][T17588] rc_core: IR keymap rc-hauppauge not found
[ 1781.812789][T17588] Registered IR keymap rc-empty
[ 1781.821278][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1781.868405][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1781.903756][T17588] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1781.940325][T17588] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input210
[ 1781.964044][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.009403][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.051505][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.072759][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.093133][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.124868][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.167053][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.210386][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.296121][T26818] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5884'.
[ 1782.327929][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.370650][T17588] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1782.436025][T17588] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1782.457477][T17588] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1782.494192][T17588] usb 3-1: USB disconnect, device number 112
[ 1782.863804][T17588] usb 4-1: USB disconnect, device number 85
[ 1783.042051][T25972] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:0d:40:00:ed:71
[ 1783.100450][T25972] rtl8150 5-1:1.0: eth1: rtl8150 is detected
[ 1783.148294][T25972] usb 5-1: USB disconnect, device number 111
[ 1783.328147][T26826] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1784.520590][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5895'.
[ 1784.583502][T26850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5895'.
[ 1784.594972][T26850] bridge2: port 1(erspan0) entered blocking state
[ 1784.602597][T26850] bridge2: port 1(erspan0) entered disabled state
[ 1784.613809][T26850] erspan0: entered allmulticast mode
[ 1784.623362][T26850] erspan0: entered promiscuous mode
[ 1784.629991][T26850] bridge2: port 1(erspan0) entered blocking state
[ 1784.636573][T26850] bridge2: port 1(erspan0) entered forwarding state
[ 1784.862579][T26862] netlink: 'syz.1.5900': attribute type 8 has an invalid length.
[ 1784.884396][T26862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5900'.
[ 1785.009881][    T9] usb 1-1: USB disconnect, device number 20
[ 1785.346528][    T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[ 1785.375642][    T9] ch341 1-1:0.0: device disconnected
[ 1785.562111][   T30] audit: type=1400 audit(1777787144.976:1927): avc:  denied  { write } for  pid=26858 comm="syz.3.5899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1787.072460][T17588] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1787.084277][T26875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1787.094780][T26875] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1787.735521][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1787.741907][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1899.233123][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1899.240103][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7444/1:b..l
[ 1899.248836][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=213317, q=558 ncpus=2)
[ 1899.256630][    C1] task:kworker/u8:33   state:R  running task     stack:24056 pid:7444  tgid:7444  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1899.271346][    C1] Workqueue: krds_cp_wq#15/1 rds_connect_worker
[ 1899.277604][    C1] Call Trace:
[ 1899.280872][    C1]  <TASK>
[ 1899.283800][    C1]  __schedule+0x10e9/0x6820
[ 1899.288296][    C1]  ? __lock_acquire+0x4a5/0x2630
[ 1899.293250][    C1]  ? __pfx___schedule+0x10/0x10
[ 1899.298098][    C1]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1899.304168][    C1]  preempt_schedule_notrace+0x5f/0xd0
[ 1899.309714][    C1]  preempt_schedule_notrace_thunk+0x16/0x30
[ 1899.315611][    C1]  ? __inet6_bind+0x954/0x1b40
[ 1899.320383][    C1]  rcu_is_watching+0x8e/0xc0
[ 1899.324972][    C1]  __inet6_bind+0x12c1/0x1b40
[ 1899.329652][    C1]  inet6_bind+0xdb/0x120
[ 1899.333956][    C1]  kernel_bind+0xff/0x160
[ 1899.338280][    C1]  ? __pfx_kernel_bind+0x10/0x10
[ 1899.343219][    C1]  ? __sock_create+0xa3/0x860
[ 1899.347895][    C1]  rds_tcp_conn_path_connect+0x554/0xaa0
[ 1899.353547][    C1]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[ 1899.359727][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1899.365558][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[ 1899.371205][    C1]  rds_connect_worker+0x1b4/0x2d0
[ 1899.376253][    C1]  process_one_work+0xa0e/0x1980
[ 1899.381292][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1899.386679][    C1]  ? __pfx_rds_connect_worker+0x10/0x10
[ 1899.392225][    C1]  worker_thread+0x5ef/0xe50
[ 1899.396822][    C1]  ? kthread+0x13a/0x450
[ 1899.401058][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1899.406165][    C1]  kthread+0x370/0x450
[ 1899.410236][    C1]  ? __pfx_kthread+0x10/0x10
[ 1899.414822][    C1]  ret_from_fork+0x72b/0xd50
[ 1899.419410][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1899.424525][    C1]  ? __switch_to+0x800/0x1100
[ 1899.429202][    C1]  ? __pfx_kthread+0x10/0x10
[ 1899.433787][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1899.438564][    C1]  </TASK>
[ 1899.441574][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g213317 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 1899.453973][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=110629
[ 1899.461931][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g213317 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 1899.473368][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1899.483320][    C1] rcu: RCU grace-period kthread stack dump:
[ 1899.489193][    C1] task:rcu_preempt     state:I stack:27992 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1899.501105][    C1] Call Trace:
[ 1899.504374][    C1]  <TASK>
[ 1899.507296][    C1]  __schedule+0x10e9/0x6820
[ 1899.511805][    C1]  ? __pfx___schedule+0x10/0x10
[ 1899.516647][    C1]  ? find_held_lock+0x2b/0x80
[ 1899.521314][    C1]  ? schedule+0x2bf/0x390
[ 1899.525640][    C1]  schedule+0xdd/0x390
[ 1899.529698][    C1]  schedule_timeout+0x127/0x280
[ 1899.534548][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1899.539916][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1899.545194][    C1]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 1899.551000][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[ 1899.556460][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[ 1899.561216][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1899.566493][    C1]  ? prepare_to_swait_event+0xae/0x4a0
[ 1899.571943][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1899.576875][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[ 1899.582074][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1899.587872][    C1]  rcu_gp_kthread+0x179/0x230
[ 1899.592540][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1899.597732][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1899.603537][    C1]  ? __kthread_parkme+0x18c/0x230
[ 1899.608564][    C1]  ? kthread+0x13a/0x450
[ 1899.612800][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1899.617990][    C1]  kthread+0x370/0x450
[ 1899.622051][    C1]  ? __pfx_kthread+0x10/0x10
[ 1899.626664][    C1]  ret_from_fork+0x72b/0xd50
[ 1899.631248][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1899.636357][    C1]  ? __switch_to+0x800/0x1100
[ 1899.641121][    C1]  ? __pfx_kthread+0x10/0x10
[ 1899.645704][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1899.650487][    C1]  </TASK>
[ 1899.653506][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1899.659822][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1899.665037][    C0] NMI backtrace for cpu 0
[ 1899.665056][    C0] CPU: 0 UID: 0 PID: 26874 Comm: syz.2.5902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1899.665076][    C0] Tainted: [L]=SOFTLOCKUP
[ 1899.665082][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1899.665091][    C0] RIP: 0010:lock_is_held_type+0xe2/0x140
[ 1899.665112][    C0] Code: b6 c0 48 c7 c7 91 a9 ef 8d 89 44 24 04 e8 56 17 00 00 ba ff ff ff ff 65 0f c1 15 f1 e5 80 08 83 fa 01 8b 44 24 04 75 2d 9c 5a <80> e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 5b 5d 41
[ 1899.665125][    C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00000046
[ 1899.665137][    C0] RAX: 0000000000000001 RBX: ffff88804b93d2c0 RCX: 0000000000000001
[ 1899.665146][    C0] RDX: 0000000000000046 RSI: ffffffff8defa991 RDI: ffffffff8c1c3600
[ 1899.665155][    C0] RBP: ffff8880392ca500 R08: 0000000000000005 R09: 0000000000000000
[ 1899.665164][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff
[ 1899.665172][    C0] R13: 0000000000000046 R14: ffff8880392cb0b8 R15: 0000000000000001
[ 1899.665181][    C0] FS:  00007f29fddd16c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000
[ 1899.665196][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1899.665205][    C0] CR2: 00007f8b7fdec4b8 CR3: 000000008c8ff000 CR4: 00000000003526f0
[ 1899.665214][    C0] Call Trace:
[ 1899.665221][    C0]  <IRQ>
[ 1899.665229][    C0]  advance_sched+0x8c6/0xd20
[ 1899.665251][    C0]  ? find_held_lock+0x2b/0x80
[ 1899.665265][    C0]  ? __hrtimer_run_queues+0x383/0xa00
[ 1899.665286][    C0]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1899.665305][    C0]  ? __pfx_advance_sched+0x10/0x10
[ 1899.665324][    C0]  __hrtimer_run_queues+0x470/0xa00
[ 1899.665353][    C0]  hrtimer_interrupt+0x3e5/0x940
[ 1899.665371][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x460
[ 1899.665391][    C0]  sysvec_apic_timer_interrupt+0x9e/0xc0
[ 1899.665407][    C0]  </IRQ>
[ 1899.665412][    C0]  <TASK>
[ 1899.665417][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1899.665433][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 1899.665449][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 84 57 f6 48 89 df e8 be d4 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 05 a8 47 f6 65 8b 05 fe ae 7d 08 85 c0 74 16 5b
[ 1899.665461][    C0] RSP: 0018:ffffc9000807f838 EFLAGS: 00000246
[ 1899.665472][    C0] RAX: 0000000000000006 RBX: ffff8880361d7e00 RCX: 0000000000000040
[ 1899.665481][    C0] RDX: 0000000000000000 RSI: ffffffff8df1fea8 RDI: ffffffff8c1c3600
[ 1899.665490][    C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000
[ 1899.665498][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880361d7c90
[ 1899.665507][    C0] R13: ffff8880361d7e40 R14: ffff8880361d77e8 R15: ffff88805979c640
[ 1899.665522][    C0]  __unix_dgram_recvmsg+0x31a/0xc30
[ 1899.665544][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 1899.665570][    C0]  ? __lock_acquire+0x4a5/0x2630
[ 1899.665590][    C0]  ? iovec_from_user+0xda/0x140
[ 1899.665612][    C0]  unix_dgram_recvmsg+0xcd/0x100
[ 1899.665631][    C0]  ____sys_recvmsg+0x5b3/0x640
[ 1899.665648][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[ 1899.665667][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1899.665686][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1899.665706][    C0]  ? ___sys_recvmsg+0x177/0x1a0
[ 1899.665721][    C0]  ? kfree+0x1dd/0x6c0
[ 1899.665738][    C0]  ? ___sys_recvmsg+0xc8/0x1a0
[ 1899.665755][    C0]  ___sys_recvmsg+0x16a/0x1a0
[ 1899.665772][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1899.665794][    C0]  ? __pfx___might_resched+0x10/0x10
[ 1899.665816][    C0]  do_recvmmsg+0x301/0x760
[ 1899.665833][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1899.665849][    C0]  ? __sched_setaffinity+0x17c/0x280
[ 1899.665866][    C0]  ? do_futex+0x192/0x350
[ 1899.665889][    C0]  ? __x64_sys_futex+0x34f/0x4d0
[ 1899.665909][    C0]  __x64_sys_recvmmsg+0x22a/0x280
[ 1899.665923][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1899.665938][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1899.665959][    C0]  do_syscall_64+0x10b/0xf80
[ 1899.665974][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1899.665989][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1899.666004][    C0] RIP: 0033:0x7f29fcf9cdd9
[ 1899.666016][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1899.666029][    C0] RSP: 002b:00007f29fddd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1899.666042][    C0] RAX: ffffffffffffffda RBX: 00007f29fd216090 RCX: 00007f29fcf9cdd9
[ 1899.666051][    C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000007
[ 1899.666060][    C0] RBP: 00007f29fd032d69 R08: 0000000000000000 R09: 0000000000000000
[ 1899.666068][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1899.666077][    C0] R13: 00007f29fd216128 R14: 00007f29fd216090 R15: 00007ffd8fbc6cc8
[ 1899.666091][    C0]  </TASK>