last executing test programs:

14.484674751s ago: executing program 0 (id=3633):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000002340)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB="2751076a8b829ac4a1a9aec0ab8b9081abb1d62becfaad87ab2073e8af8965853391ade34c6016569e7c972d0747e109ead98e69fc7d265eea7c001d65fa6c2e5ed2c19b66a438eae507d71e4797d78abdf618eb1d08fe195d86dc13c648bfdbb9f974d7c0fea613f2fe001d0d84955bc33b7784cf4d974b6ec94b9899c5fb0148462b5bf11f00ac5532de292514e683556272765de02e08f1db0943cdaf838ef040d1edb731d4c4885afc0a5e4ad4f38bfec668612e0c3d49131705969aeb40d9bbc0a0d6279d9790d87488e3c5b42d3e3e5360eab12ec0786bc3e8c7aafe1eca0c199dc72a6b7ff4d6bee7304c532fa1dd91", @ANYRES64=r1, @ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="a93d5a0ba718f57231e11dc57c5e1d5b3ce586d5f1086ef81da6038279bddc7ed76fbbde9dd67aafb1516f91d35ecc0bffa421ea075528f25ebde6c73a9e441cc32d308ea696f2ab693e6de5bdb65d3410b5e65907934fe52f5de755e74e1712bb30a2d69b071f3b561e22e39fab8de8ff8270f88ccc74097a3d59190660362566220f1b7a78f8b3a2c28ef3b7f12d4e080a2faad82b232f2255736697ed3fb41c567ef83afb126c207d0892d9d9b641acef91301ce13c8b8341ef5d35e34f993ca7988ee866f3135bc22c6677af1f4ad2f568a03a7c355d2227fda61cc4a21e5e5f017c51fb784179f5154c158e048e2f633465f5d36fe01db6429971f1f084181e8e4a6beeea11ac7f9cd2d35caf1312c09f8ebfed5c935c61ed9e25ec9e4171ea2dad928f05c07db96da1a6abb7fd633d1fcd730250910e4e09f071029fc4384bd01f6e5224dfc08e7168d70e2580004ade2f52339b61ee471209e2c4d11be3cfaeb6f72fbe15842f0259f215a3626532f973787b57bd7dce780778a90c0ff45cbf4a9604c419f854926e5434f4f9c6af75cdaeaa1c5e4be2056f1d143190fde8c1d135ff6586ee0ce5764f566048c41c3fe457db114347b226c1b311903cfeaa5b010c52755e7293b78107f3bb498970eb05eb53e1d715207986699b25036506c93c4d8a56646a424e13f796bc137f409ef0f5b1732484bfad4436d93d01d4d865ef8c8ff6cc127d98ccae198090e198fa8f25021516c8053600f8deab5f3bbcd6b350e2072e58b3bf81c6817d9013f633d4085cd43d9edfa5d03002c94bcc748ade3a12efcf46ce660391495b2a8b1f0aaa0c82275a62a61c94ade689cebd5b55864848a6cc430c0c8e67001f0d006aa5a0be6628dcbb88b17b16cf947ad22011974af22a090eec5f4b6544b50bb31547c6a0bff723d6de1bcc0d9851b726f73e1c64a055859cb9c7c3267b484246e442c96484e595e3d562ccc567681c7866f3daec761768616a95c56d40f98fbf6ea3e8cd815bef9bcbacbde13e18226c998c667e"])
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0x5, 0xe, 0x0, &(0x7f0000000900)="0101000071a78326c799dbe888a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x40, 0x1})
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0)

11.633199327s ago: executing program 0 (id=3647):
listen(0xffffffffffffffff, 0x6d5)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x28)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a851000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
chroot(&(0x7f0000000080)='./file0\x00')
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
openat$sequencer2(0xffffff9c, 0x0, 0x80941, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x6, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xfc, 0xa, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x8, 0x5, 0x6}}}}}}}}]}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

10.740664474s ago: executing program 3 (id=3653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x34, 0xc, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4016}, 0x24004000)

10.683179443s ago: executing program 3 (id=3654):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000980)=<r1=>0x0)
syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'})
socket$tipc(0x1e, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
personality(0x4100001)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
dup2(0xffffffffffffffff, r6)
ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1})
accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9)
close_range(r2, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

9.864497117s ago: executing program 0 (id=3656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000001ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000480)=@newtclass={0x460, 0x28, 0x7be77b4e4e181723, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xffe0, 0xd}, {0xf, 0x1f}}, [@c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x800, 0x9, 0xffffffc0, 0x6, 0xb, 0x0, 0x9b8, 0xc2d4, 0x218, 0x3590cd10, 0x3, 0x80, 0x8, 0x0, 0x2, 0x0, 0x0, 0xfffffeff, 0x8c, 0x3, 0x3042, 0x6, 0x33960366, 0x7, 0x7fffffff, 0x7f, 0x4, 0x7, 0x9, 0x9, 0x9, 0xfffffff9, 0x7fe, 0x40, 0x3, 0x6, 0x40, 0x98, 0x3, 0x3, 0xfffffff8, 0x7, 0xc, 0x3, 0x8, 0xe, 0x6, 0xb, 0xb, 0x2e, 0x8000, 0x4, 0x2, 0x6, 0xfffffff8, 0x6, 0x9, 0x8, 0x8d3, 0x6, 0x8, 0x1, 0x1, 0x7, 0x2, 0xfffffff1, 0x4, 0xfff, 0x1, 0x7, 0xffffff7e, 0x5, 0x9, 0xa, 0x1, 0x0, 0x5e, 0x101, 0xffffffff, 0x8000, 0x4, 0x1, 0x0, 0x4, 0x2, 0xed, 0x400, 0x7, 0x9, 0xd, 0xe2d, 0xff, 0x8, 0x1001, 0x8, 0x0, 0x81, 0x9, 0x7, 0x1, 0x9, 0x2, 0x3, 0xb, 0x6, 0xc, 0x5, 0x10, 0x6, 0x9, 0x6, 0xfffffbb5, 0x80000001, 0x7780, 0x8, 0x59a9, 0x2083, 0x4, 0xbf, 0x1, 0xca92, 0x7fff, 0x6, 0xc, 0x9, 0x3, 0x2, 0x1e2, 0x9b, 0x9, 0x7, 0x6, 0x5, 0x3, 0x0, 0x0, 0x2, 0x8, 0x0, 0x3, 0x300, 0x2, 0x9, 0x7, 0x4, 0x1, 0x6, 0x101, 0x0, 0x4, 0x6, 0x6, 0x1, 0x3, 0xfffffffe, 0xffffffff, 0x5, 0x1, 0x4, 0x8, 0x100020, 0x7, 0x7ff, 0x8, 0x8, 0xffffffff, 0x6, 0x1000, 0x8001, 0x4, 0x7, 0x5, 0x19, 0x6, 0x6, 0x7fffffff, 0x6, 0x1, 0xcbb1, 0x6, 0x4, 0xa, 0x6, 0xa, 0xb, 0x1000, 0x7, 0xb, 0xbe39, 0x1, 0x2960, 0x1, 0xb, 0xfffffff7, 0x4, 0x5, 0x40000000, 0x10000000, 0x41f, 0x8, 0x8, 0x0, 0x401, 0x2, 0xe9, 0x1, 0x3, 0x81, 0xff, 0xfffffffc, 0x14000000, 0x3, 0x9, 0xbe, 0xe5a4fc8f, 0xfffffffd, 0x1, 0x8, 0x1, 0x94e, 0x2, 0x3, 0x400000, 0x3, 0x6, 0x5, 0x4, 0x10001, 0x5, 0x0, 0x7, 0xd, 0x8, 0x4, 0xfffff000, 0x4, 0x0, 0xab8, 0xfffffc00, 0xe, 0xfff, 0x659, 0x7fffffff, 0xfa2, 0x4, 0x6, 0xfb16, 0x200, 0x4, 0x7fffffff, 0xc, 0x5, 0xf1, 0x1ff, 0x401, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0xfb, 0x2, 0x9, 0x0, 0xc, 0x4}}]}}, @c_atm={{0x8}, {0x8, 0x2, [@TCA_ATM_HDR={0x4}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4008080}, 0x802)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000340)={0x3, 0x4, {0x51, 0x8, 0x7, {0x100, 0xffff}, {0x7, 0x401}, @cond=[{0x6, 0xffff, 0x4, 0x0, 0x6, 0x7fff}, {0x9, 0xfffd, 0xe, 0x4, 0x7b2, 0x8}]}, {0x53, 0x100, 0x9, {0x0, 0x4}, {0x7f, 0x3}, @const={0x6ff4, {0x1, 0x40, 0x8001, 0x7}}}})
ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3)
sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000304030000000000000000005500", @ANYRES32=r6, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setns(0xc9, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140), &(0x7f00000002c0)={'U+', 0x2}, 0x16, 0x3)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1800000052000100000000000000000002200000040002802d2ca0377b3126355c51153f7c374611a26ca52f6822c325825e9df4b9482ed669ef988292406ae69d2c9315e4e536ce8d436ba9af95651acb9baf"], 0x18}}, 0x0)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88)
pwritev(r11, &(0x7f0000000a40)=[{&(0x7f0000000900)="4ff1bcebb3d881052d1993d50d3d66214f719eb638f3e768104c5eb6fac59b0f41e5dc3990a39fa2ebb182be9356d9c97548244ae45ee71732215310b6235ff8acadce2c1c83abaa57e82278d27586744403cb1c36883dc0ee08d3155fb40b0a1f0e2a86461b5f78c23c756ad055d684776f0f58611a1865199bb0f4c633461fa0793de07ddfd5eb7e4b3fd66534ecb4bbec08616b6f0f863dd281047b7a45cbc3fb1215ad89a321b836ad84ffaade7af94d19ef4dfb326715a2a0843ce3cd5af1c1cf646385e5c788fc118a", 0xcc}, {&(0x7f0000000a00)="a3ecc5b0af8d82", 0x7}], 0x2, 0x8, 0x1)

8.47128735s ago: executing program 0 (id=3659):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r2, &(0x7f0000000600)="723a732f70202e2f66696c65303a300c5f5f9de957570839be9fbb298bcf293d", 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0x10}, {0x3, 0xfff2}, {0x3, 0x10}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
r6 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

8.299144705s ago: executing program 0 (id=3661):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x9, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x205, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {<r2=>0x80000000}}]})
sendto$inet6(r0, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85a7f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a562d00c0c24d26541368689396453ce13916abb6d9b26451a7d81036dfadbcae1721a6fde5ac10d35951300595ebc", 0x72, 0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)={r2})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000400)={0x1, 0xcda, "74bb23", 0xfe, 0xff})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {<r5=>0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0), &(0x7f0000000a00)})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r5, 0x0, &(0x7f0000000b00)})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd70000000000002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

6.847830073s ago: executing program 3 (id=3666):
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
listns(&(0x7f0000000880)={0x20, 0xf4240, 0x8000000000000000, 0x20000, 0x0, 0xffff}, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x5, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x7, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0x0, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f0000002080)=0x264, 0x23b)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)

6.194496782s ago: executing program 2 (id=3669):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000042000100000000000000000003"], 0x1c}}, 0x0) (fail_nth: 3)

6.096872204s ago: executing program 2 (id=3670):
fanotify_init(0x1, 0x3)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

6.046023669s ago: executing program 2 (id=3671):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x16, 0x0, 0x0, 0x600000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r2, r2, r1, 0xffffffffffffffff], 0x0, 0x10, 0x80000000}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x6, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0xfffffffe, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x63, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0xc23, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x0)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00', {0x2, 0xc, 0x3, 0x6}, 0x17, [0x5, 0x4885, 0x9, 0x4fc, 0x9c, 0xac, 0x4, 0x3, 0x8000000, 0x6, 0x9, 0x800, 0x0, 0x9, 0x9, 0x2, 0xf, 0x18000000, 0x8, 0x0, 0x1, 0x7f, 0xb, 0x9, 0x6, 0x4, 0x2b230794, 0x401, 0xfffffff9, 0x51a4, 0x8, 0x3, 0x5, 0x400, 0x0, 0x7, 0x3ff, 0x101, 0xa71f, 0x7, 0x2, 0x7, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffff801, 0x0, 0x5, 0x7, 0x80, 0x5e, 0x0, 0x1, 0x6, 0x7, 0x5, 0xffff7124, 0x5, 0x3, 0x8, 0x4, 0x7], [0x4, 0x7a, 0xd27d, 0x6, 0x2, 0x6, 0x1, 0x8, 0x3, 0x2, 0xfff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x69, 0x2, 0x16df, 0x7, 0x591, 0x3, 0xf1, 0x2, 0x8, 0x5, 0xbcc, 0x48b, 0x2, 0x401, 0x1, 0x4, 0xfffffff6, 0x6, 0x4, 0x1, 0x10000, 0x9c4, 0x5, 0x2, 0xd, 0x10001, 0x5, 0x7ff, 0x7fe, 0x9, 0x8, 0x1000, 0x1, 0x101, 0xfff, 0x0, 0x80, 0xcb, 0xe, 0x4, 0x8, 0xc, 0x9, 0x1f8d, 0x8, 0x6, 0x5, 0x6], [0x5, 0x5, 0xaa, 0x2, 0x9, 0xf11, 0x2, 0x6, 0x1, 0x7e22, 0x3, 0x2, 0x1, 0x0, 0x19fe, 0x7, 0x4, 0x10, 0x101, 0xffffffff, 0x9fc1, 0x1, 0x10001, 0x9b87, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3b, 0x5840, 0x4ba, 0x8, 0x7, 0x1, 0x10001, 0xfff, 0x1e, 0xfffffffe, 0x1, 0x4, 0xd, 0x5, 0xf214, 0x1, 0x3b0, 0x7f, 0x3, 0x8, 0x4, 0x6, 0x5, 0x0, 0x5, 0x52, 0x1, 0x2, 0x9, 0x800, 0x1, 0xffff, 0xffff, 0x2, 0x8], [0x0, 0x7, 0x6, 0x3d3, 0x8, 0x1, 0x656, 0xe, 0x7, 0x101, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2ef, 0x6, 0x2, 0x7, 0x8, 0x313, 0x6, 0x4, 0x3, 0x4, 0x101, 0x10, 0x6, 0x4, 0x9, 0x100, 0x7ff, 0xe364, 0x0, 0xd, 0x332f, 0x7, 0x6, 0x0, 0xfffffffe, 0x96e, 0x1, 0xa26b, 0xfff, 0x4, 0x2, 0x6, 0x4, 0x4160, 0x400, 0x2, 0x9, 0x0, 0xfffffff6, 0x8, 0x6, 0x6, 0x800, 0x2, 0x6, 0x100, 0x3, 0x4]}, 0x45c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.899280678s ago: executing program 3 (id=3672):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r2, &(0x7f0000000600)="723a732f70202e2f66696c65303a300c5f5f9de957570839be9fbb298bcf293d", 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0x10}, {0x3, 0xfff2}, {0x3, 0x10}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
r6 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

5.71822886s ago: executing program 2 (id=3674):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, &(0x7f0000000040))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r2 = gettid()
migrate_pages(r2, 0x3, 0x0, 0x0)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
mremap(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000080b000/0x3000)=nil)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast2}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

4.633186697s ago: executing program 3 (id=3676):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000980)=<r1=>0x0)
syz_io_uring_submit(0x0, r0, r1, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'})
socket$tipc(0x1e, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
personality(0x4100001)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000f1ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
dup2(0xffffffffffffffff, r6)
ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1})
accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9)
close_range(r2, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

4.532906345s ago: executing program 0 (id=3678):
socket$unix(0x1, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb")
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb")
write$char_usb(r1, &(0x7f0000000200)="5502000000000000", 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd3b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_usb_connect$midi(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000002})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x16, 0x64, 0xe1, 0x8, 0x1164, 0x622, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x34, 0x3, 0x1, 0xfe, 0xa6, 0x8b, 0x4, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x6, 0x7}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb5, 0x50, 0xa6, "", [{{0x9, 0x4, 0x0, 0xa2, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb8, 0x10, 0xa, 0x40, 0x2}, 0x8d, &(0x7f0000000180)={0x5, 0xf, 0x8d, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6c, 0x8, 0xe, 0x401, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0xd, 0x0, 0xc431}, @generic={0x69, 0x10, 0xd, "ec4a5b0fb7c7fdfdfa48dc70bce66806fb0c09efe5e34df435957cca1742d871bc2da4797262fb1685902499a12c183e9ef09d2aadcd7ef44f7ab8455c2e42bfd63f2e31da2d9463a4e9f04377dd543b5f8126c4d8053c8cf0884191d81b0a33192e953e5156"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x3ff}]}, 0x7, [{0x68, &(0x7f0000000240)=@string={0x68, 0x3, "8522e50e2de2e3db809db7660ce726adc200612aa79eebb7d1ba412974bbbe28c96511e880350b0f363ac8a923fb2689b4d55b7ee986baf719c5825013713e136839ea7217aabdbc5e6f5c6c8c8546207849ee0a81e794b081a15a355468a8b495dafb688a95"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x459}}, {0x77, &(0x7f0000000340)=@string={0x77, 0x3, "66251c3a055e9345e116611e1648e6db14984960e38c1b2eef7c0066c83f3af71edbf219a0d42b142b62688385b5bfa7e62b15522d295cd1ddaf9b107d4b3c3dcab2f73b84aea63a92a5aa11ff997ee9700d0d1eddadcaaf19c5454a630239c68530b161ebe485b6bb3cc3ab43b248a9c5bfee0e1d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xbe, &(0x7f0000000400)=@string={0xbe, 0x3, "d3b45ddd87a3c6fbf29531b40d42bf9cfd9f37235fe97e8eadcf46ce438098e7076cfa16444d22528f09405fb12c80c9920ec33163f49ed36d992ee2d44bd0bfba877784977f4529eb480540db0fc866a3f12049bf29450f2a762e3c281ffb81229d8c4534112f46b02c8b53e23d54f75579f129ca039c17c8bc2e71abc47c5b0854909a8922f8008e60fc1930efa689841162402863e3525aa971349bcd770ef83ef27e3d651bdb036e8f30d9cec2126b951d0f2090e9d35d7f5c1a"}}, {0x2d, &(0x7f00000004c0)=@string={0x2d, 0x3, "91699edf23847556691bb8f1f1ca3c6da4f2639e7c3bd865d584978eb1694210a23331c21507b37429c03c"}}, {0xa1, &(0x7f0000000500)=@string={0xa1, 0x3, "504d95d63df7ae5ee52c622778222cb23ebe5298aba33b035266bef2a290c7ddd6d5772ed04082b94c8c172ed2e126815d8d9acae5f0ddddcd086615a3fc863f6e26359ed444d8b1c73c804db83d0667e04bb9d29c36a0808f5baf2a06fdde7fe9ee4fc6c8db76bcf73cb52d2c1269ed7ae002dc4f1e97f48399ba70bd876e724d7e0922af2a433e112a8bad290a49493c1e033cf18bf4ab3a02808ee8b3d5"}}]})
syz_usb_control_io$printer(r5, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x20, 0x1, 0x7c, {0x7c, 0x21, "af0ec6389ca64c690d51c237b7ebe1e94d0ca62c69b07cc699bfccff8c455a48588c0e67fe2b12d0670d01fd75d5cd346f46fe79db8b0f0b03e0ae4bda13d225210b177fd8819a6caab79af9adc7b128ecb7cb7b22f894cfa3193c3ce3b87fcf476b70c85798838afa57c58ffba8e172e5a57daefed0655f2343"}}, &(0x7f0000000700)={0x0, 0x3, 0x30, @string={0x30, 0x3, "1913a02a260bc43060861fbdd9e3e0bfff46fea8d703ce8aa87c222b5aee60887835ac664f352fbc377ef7bc1064"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000780)={0x0, 0x7, 0x6f, "fd19721686529e4c2d4d6ca271af8c6e693b6fd106ea1918263b399d26a153e089b33e1f557aba781f66fd4d95ce1b6beb5f558b12dc4ae134a0e52ac718d3316263338395f4be92b5b575f29b8d7611de7146aa41b693d0588561e1b576e03c8eea56b26d0386d952da3e98f62df3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x84, {0x82, "da8d967fadc2f131d589ffe1879bd38c9d6bfff9df3b819d5737834b3fe2bbd4f4151ceb35c624d6aa67df3508e03ed4983d3249150aa6cbeb64657b9158406ce00956726508c76f73db8485a1327427ce7adb356058ef7bb70b763ea762e42a06e41ead6e4226f1613278c0bddeb743b468b89f1b9a83b0d60e0bea5efe9414e89a"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000009c0)={0x20, 0x0, 0x1}})
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
r6 = accept$alg(r2, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000a40)={0x20, 0x4, 0x100, {0x100, 0xf, "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"}}, &(0x7f0000000b80)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "0b7988a91e6df56e0edd28beb228700bc517aa77c8060ccf71d1c6339de27546acdfadc2e11d3e3adfab591442f8b830bb043734af43b9642c0f86cab44bc58ca400a3a90b62673de89e216b952ea876be7eb3b617f0e7ddbc5d6b7f95cb79a919747c86fb04b61dbe821dca9ca6061dd4c2aa558fab94fe08e84937b08af8926bb96fb69815b06e2d4b3715ff459e6a6db816d96bab84de9a619934b9dfeb29a808629010824c1f0e62d8d3fcf165f1a9b4dd7f0d9eb6bc4e07d4218a0bc31816ba0029a005b75dbd102c8262622865b2c43d32"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x40, 0x7, 0x79, "066a93caf3d64a1c8322ee52ea9ab8285828a0f0505df5979804cf1474a618a8e4803839ebb69e68956f172b2adad6648aaa199652f8fa6424d0d9ebe0a1ec219ba93087f7419df174a32238f7c5707e710021b4413eb5c22bf311b2904f34df85992eb0cd65601569f884bb53df8724b8f6a6af1ec066249b"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x81, 0x2, "ab1d"}, &(0x7f0000000e00)={0x20, 0x82, 0x2, "9e73"}, &(0x7f0000000e40)={0x20, 0x83, 0x2, "17ea"}, &(0x7f0000000e80)={0x20, 0x84, 0x3, "b73e87"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "d14399"}})
recvmsg(r6, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102)
sendmmsg$inet(r6, &(0x7f0000005d00), 0x4000000000001e3, 0x8044)

4.337123791s ago: executing program 4 (id=3679):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x1, 0xfd}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0x70)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0)

3.986335707s ago: executing program 1 (id=3681):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000000000000000f5ffffffff675274ba0000000000000000000000ffffac1414bb000103944e2300050000080000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000000a010101000000000000000000000000000000000000000009000000000000000600000000000080ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000083500000a0001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000000500)=""/102400, 0x19000)
sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7)
waitid(0x1, r5, 0x0, 0x8, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80408c0)

3.894263367s ago: executing program 2 (id=3682):
socket$unix(0x1, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb")
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb")
write$char_usb(r1, &(0x7f0000000200)="5502000000000000", 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd3b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_usb_connect$midi(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000002})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x16, 0x64, 0xe1, 0x8, 0x1164, 0x622, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x34, 0x3, 0x1, 0xfe, 0xa6, 0x8b, 0x4, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x6, 0x7}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb5, 0x50, 0xa6, "", [{{0x9, 0x4, 0x0, 0xa2, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb8, 0x10, 0xa, 0x40, 0x2}, 0x8d, &(0x7f0000000180)={0x5, 0xf, 0x8d, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6c, 0x8, 0xe, 0x401, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0xd, 0x0, 0xc431}, @generic={0x69, 0x10, 0xd, "ec4a5b0fb7c7fdfdfa48dc70bce66806fb0c09efe5e34df435957cca1742d871bc2da4797262fb1685902499a12c183e9ef09d2aadcd7ef44f7ab8455c2e42bfd63f2e31da2d9463a4e9f04377dd543b5f8126c4d8053c8cf0884191d81b0a33192e953e5156"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x3ff}]}, 0x7, [{0x68, &(0x7f0000000240)=@string={0x68, 0x3, "8522e50e2de2e3db809db7660ce726adc200612aa79eebb7d1ba412974bbbe28c96511e880350b0f363ac8a923fb2689b4d55b7ee986baf719c5825013713e136839ea7217aabdbc5e6f5c6c8c8546207849ee0a81e794b081a15a355468a8b495dafb688a95"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x459}}, {0x77, &(0x7f0000000340)=@string={0x77, 0x3, "66251c3a055e9345e116611e1648e6db14984960e38c1b2eef7c0066c83f3af71edbf219a0d42b142b62688385b5bfa7e62b15522d295cd1ddaf9b107d4b3c3dcab2f73b84aea63a92a5aa11ff997ee9700d0d1eddadcaaf19c5454a630239c68530b161ebe485b6bb3cc3ab43b248a9c5bfee0e1d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xbe, &(0x7f0000000400)=@string={0xbe, 0x3, "d3b45ddd87a3c6fbf29531b40d42bf9cfd9f37235fe97e8eadcf46ce438098e7076cfa16444d22528f09405fb12c80c9920ec33163f49ed36d992ee2d44bd0bfba877784977f4529eb480540db0fc866a3f12049bf29450f2a762e3c281ffb81229d8c4534112f46b02c8b53e23d54f75579f129ca039c17c8bc2e71abc47c5b0854909a8922f8008e60fc1930efa689841162402863e3525aa971349bcd770ef83ef27e3d651bdb036e8f30d9cec2126b951d0f2090e9d35d7f5c1a"}}, {0x2d, &(0x7f00000004c0)=@string={0x2d, 0x3, "91699edf23847556691bb8f1f1ca3c6da4f2639e7c3bd865d584978eb1694210a23331c21507b37429c03c"}}, {0xa1, &(0x7f0000000500)=@string={0xa1, 0x3, "504d95d63df7ae5ee52c622778222cb23ebe5298aba33b035266bef2a290c7ddd6d5772ed04082b94c8c172ed2e126815d8d9acae5f0ddddcd086615a3fc863f6e26359ed444d8b1c73c804db83d0667e04bb9d29c36a0808f5baf2a06fdde7fe9ee4fc6c8db76bcf73cb52d2c1269ed7ae002dc4f1e97f48399ba70bd876e724d7e0922af2a433e112a8bad290a49493c1e033cf18bf4ab3a02808ee8b3d5"}}]})
syz_usb_control_io$printer(r5, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x20, 0x1, 0x7c, {0x7c, 0x21, "af0ec6389ca64c690d51c237b7ebe1e94d0ca62c69b07cc699bfccff8c455a48588c0e67fe2b12d0670d01fd75d5cd346f46fe79db8b0f0b03e0ae4bda13d225210b177fd8819a6caab79af9adc7b128ecb7cb7b22f894cfa3193c3ce3b87fcf476b70c85798838afa57c58ffba8e172e5a57daefed0655f2343"}}, &(0x7f0000000700)={0x0, 0x3, 0x30, @string={0x30, 0x3, "1913a02a260bc43060861fbdd9e3e0bfff46fea8d703ce8aa87c222b5aee60887835ac664f352fbc377ef7bc1064"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000780)={0x0, 0x7, 0x6f, "fd19721686529e4c2d4d6ca271af8c6e693b6fd106ea1918263b399d26a153e089b33e1f557aba781f66fd4d95ce1b6beb5f558b12dc4ae134a0e52ac718d3316263338395f4be92b5b575f29b8d7611de7146aa41b693d0588561e1b576e03c8eea56b26d0386d952da3e98f62df3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x84, {0x82, "da8d967fadc2f131d589ffe1879bd38c9d6bfff9df3b819d5737834b3fe2bbd4f4151ceb35c624d6aa67df3508e03ed4983d3249150aa6cbeb64657b9158406ce00956726508c76f73db8485a1327427ce7adb356058ef7bb70b763ea762e42a06e41ead6e4226f1613278c0bddeb743b468b89f1b9a83b0d60e0bea5efe9414e89a"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000009c0)={0x20, 0x0, 0x1}})
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r6 = accept$alg(r2, 0x0, 0x0)
recvmsg(r6, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102)
sendmmsg$inet(r6, &(0x7f0000005d00), 0x4000000000001e3, 0x8044)

3.512640766s ago: executing program 1 (id=3683):
socket$igmp(0x2, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES8=r0], 0x2b)
sendfile(r3, r1, 0x0, 0x95e2)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r4, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1993)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xb}, {0xffff, 0x10}, {0xfff1, 0x4}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

3.389165192s ago: executing program 4 (id=3684):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8e, 0x0, 0x0, 0x100200c05, 0x38, 0x0, 0x21, 0x3e})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, <r3=>0x0})
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x717101, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
unshare(0x8000280)
syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x80000033}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x408100, 0x0)
close_range(r5, 0xffffffffffffffff, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, 0x0, 0x0)
shutdown(r6, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f0000003a00)='net/ip6_flowlabel\x00')
read$FUSE(r7, &(0x7f00000019c0)={0x2020}, 0x2020)
read$eventfd(r7, &(0x7f0000000000), 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x230, 0xffffffff, 0x230, 0x348, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000300), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'veth1_to_bridge\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x1, 0x5, 0x4, 0x4}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x8, 0xb, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x30, "1a65d8064b8dcefce6d95676ec6b2ce8250f6b3dc9e69397672a88306968"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'pim6reg\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x5, 0x0, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@private=0xa010100, @ipv6=@local, @gre_key=0x9, @port=0x4e20}}}, {{@ipv6={@mcast2, @remote, [0xff, 0x0, 0xffffff00], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'batadv_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x3b, 0x80, 0x0, 0x50}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv4=@private=0xa010102, @port=0x4e20, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv4=@empty, @ipv4=@loopback, @port=0x4e22, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00000000000000800154c416867b3c4dc297163effc43e637a03000000346b183f24c28dfa5bc22176831ae4f654a17c55920eae92b5faf2d58af9269e69ede9b2c7b8e94626f5f1e91343ed7dc2000fd5787948bd8725d0a1cd0e47f011d4b0eb2af4b714be7c287dd522db0579a3792fda658c635d07b9a6a8d32a16030e789911be598963b29782bea3b5e6df", @ANYRESHEX=r1, @ANYBLOB=',\x00'])

3.201203412s ago: executing program 4 (id=3685):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x1, 0xfd}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0x70)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0)

2.536809826s ago: executing program 1 (id=3686):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r2, &(0x7f0000000600)="723a732f70202e2f66696c65303a300c5f5f9de957570839be9fbb298bcf293d", 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
r6 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

2.378006069s ago: executing program 4 (id=3687):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d3f, &(0x7f0000000040)=0x121)

2.373897209s ago: executing program 1 (id=3688):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
set_mempolicy(0x1, &(0x7f0000000000)=0xe517, 0x3)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x64010101}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = dup(r6)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000004b80)='veno', 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

2.223512447s ago: executing program 4 (id=3689):
timer_create(0x0, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = fanotify_init(0x200, 0x0)
writev(r2, &(0x7f0000000380)=[{&(0x7f0000000240)="e0335d1583aaa5d4", 0x8}], 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x3, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0xc000, 0x1000000, 0x8})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000})
fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x229)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)

1.272141296s ago: executing program 1 (id=3690):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xa3, 0x1b1c07, 0xbf, 0x0, 0x1000})

1.210820346s ago: executing program 3 (id=3691):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x9, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x205, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {<r2=>0x80000000}}]})
sendto$inet6(r0, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85a7f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a562d00c0c24d26541368689396453ce13916abb6d9b26451a7d81036dfadbcae1721a6fde5ac10d35951300595ebc", 0x72, 0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)={r2})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {<r3=>0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0), &(0x7f0000000a00)})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r3, 0x0, &(0x7f0000000b00)})
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd70000000000002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

1.097114196s ago: executing program 1 (id=3692):
socket$unix(0x1, 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb")
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb")
write$char_usb(r1, &(0x7f0000000200)="5502000000000000", 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd3b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_usb_connect$midi(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000002})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x16, 0x64, 0xe1, 0x8, 0x1164, 0x622, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x34, 0x3, 0x1, 0xfe, 0xa6, 0x8b, 0x4, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x6, 0x7}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r5 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb5, 0x50, 0xa6, "", [{{0x9, 0x4, 0x0, 0xa2, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb8, 0x10, 0xa, 0x40, 0x2}, 0x8d, &(0x7f0000000180)={0x5, 0xf, 0x8d, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6c, 0x8, 0xe, 0x401, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0xd, 0x0, 0xc431}, @generic={0x69, 0x10, 0xd, "ec4a5b0fb7c7fdfdfa48dc70bce66806fb0c09efe5e34df435957cca1742d871bc2da4797262fb1685902499a12c183e9ef09d2aadcd7ef44f7ab8455c2e42bfd63f2e31da2d9463a4e9f04377dd543b5f8126c4d8053c8cf0884191d81b0a33192e953e5156"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x3ff}]}, 0x7, [{0x68, &(0x7f0000000240)=@string={0x68, 0x3, "8522e50e2de2e3db809db7660ce726adc200612aa79eebb7d1ba412974bbbe28c96511e880350b0f363ac8a923fb2689b4d55b7ee986baf719c5825013713e136839ea7217aabdbc5e6f5c6c8c8546207849ee0a81e794b081a15a355468a8b495dafb688a95"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x459}}, {0x77, &(0x7f0000000340)=@string={0x77, 0x3, "66251c3a055e9345e116611e1648e6db14984960e38c1b2eef7c0066c83f3af71edbf219a0d42b142b62688385b5bfa7e62b15522d295cd1ddaf9b107d4b3c3dcab2f73b84aea63a92a5aa11ff997ee9700d0d1eddadcaaf19c5454a630239c68530b161ebe485b6bb3cc3ab43b248a9c5bfee0e1d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xbe, &(0x7f0000000400)=@string={0xbe, 0x3, "d3b45ddd87a3c6fbf29531b40d42bf9cfd9f37235fe97e8eadcf46ce438098e7076cfa16444d22528f09405fb12c80c9920ec33163f49ed36d992ee2d44bd0bfba877784977f4529eb480540db0fc866a3f12049bf29450f2a762e3c281ffb81229d8c4534112f46b02c8b53e23d54f75579f129ca039c17c8bc2e71abc47c5b0854909a8922f8008e60fc1930efa689841162402863e3525aa971349bcd770ef83ef27e3d651bdb036e8f30d9cec2126b951d0f2090e9d35d7f5c1a"}}, {0x2d, &(0x7f00000004c0)=@string={0x2d, 0x3, "91699edf23847556691bb8f1f1ca3c6da4f2639e7c3bd865d584978eb1694210a23331c21507b37429c03c"}}, {0xa1, &(0x7f0000000500)=@string={0xa1, 0x3, "504d95d63df7ae5ee52c622778222cb23ebe5298aba33b035266bef2a290c7ddd6d5772ed04082b94c8c172ed2e126815d8d9acae5f0ddddcd086615a3fc863f6e26359ed444d8b1c73c804db83d0667e04bb9d29c36a0808f5baf2a06fdde7fe9ee4fc6c8db76bcf73cb52d2c1269ed7ae002dc4f1e97f48399ba70bd876e724d7e0922af2a433e112a8bad290a49493c1e033cf18bf4ab3a02808ee8b3d5"}}]})
syz_usb_control_io$printer(r5, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x20, 0x1, 0x7c, {0x7c, 0x21, "af0ec6389ca64c690d51c237b7ebe1e94d0ca62c69b07cc699bfccff8c455a48588c0e67fe2b12d0670d01fd75d5cd346f46fe79db8b0f0b03e0ae4bda13d225210b177fd8819a6caab79af9adc7b128ecb7cb7b22f894cfa3193c3ce3b87fcf476b70c85798838afa57c58ffba8e172e5a57daefed0655f2343"}}, &(0x7f0000000700)={0x0, 0x3, 0x30, @string={0x30, 0x3, "1913a02a260bc43060861fbdd9e3e0bfff46fea8d703ce8aa87c222b5aee60887835ac664f352fbc377ef7bc1064"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000780)={0x0, 0x7, 0x6f, "fd19721686529e4c2d4d6ca271af8c6e693b6fd106ea1918263b399d26a153e089b33e1f557aba781f66fd4d95ce1b6beb5f558b12dc4ae134a0e52ac718d3316263338395f4be92b5b575f29b8d7611de7146aa41b693d0588561e1b576e03c8eea56b26d0386d952da3e98f62df3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x84, {0x82, "da8d967fadc2f131d589ffe1879bd38c9d6bfff9df3b819d5737834b3fe2bbd4f4151ceb35c624d6aa67df3508e03ed4983d3249150aa6cbeb64657b9158406ce00956726508c76f73db8485a1327427ce7adb356058ef7bb70b763ea762e42a06e41ead6e4226f1613278c0bddeb743b468b89f1b9a83b0d60e0bea5efe9414e89a"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000009c0)={0x20, 0x0, 0x1}})
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
r6 = accept$alg(r2, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000a40)={0x20, 0x4, 0x100, {0x100, 0xf, "b923c7fd386041b36d8344845a902c32e9d842a43ef0db332422b97020761c56654f3150f91559c9ffeb0ca9897d1e7caa21b9a14e1ef8861d5bb3fe3b41cd16d5455b1b7f3282fc294b06a7f58df93e02983b0235dbb94e234c66fdbbe8e62f25e146d753a221a70e24b60d0b9fb95c056d570a32d55a65ee247773cc7abc6a11d3ed0b54e83ad5fbdeb9d9fd602d427f2aae29270f732a159cc223f61728fc50d4bd7e175a36f44fdd19fef3e3b57386e6cda5f583d41a52f8417ed341f6811e0f405f356b881e88a41d80d0baed610dc91bef363e9bf46800fcf5f328320086751c8494242b21ef76912dbb01e5a4bfe75034c272e7c2f6c32916a783"}}, &(0x7f0000000b80)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "0b7988a91e6df56e0edd28beb228700bc517aa77c8060ccf71d1c6339de27546acdfadc2e11d3e3adfab591442f8b830bb043734af43b9642c0f86cab44bc58ca400a3a90b62673de89e216b952ea876be7eb3b617f0e7ddbc5d6b7f95cb79a919747c86fb04b61dbe821dca9ca6061dd4c2aa558fab94fe08e84937b08af8926bb96fb69815b06e2d4b3715ff459e6a6db816d96bab84de9a619934b9dfeb29a808629010824c1f0e62d8d3fcf165f1a9b4dd7f0d9eb6bc4e07d4218a0bc31816ba0029a005b75dbd102c8262622865b2c43d32"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x40, 0x7, 0x79, "066a93caf3d64a1c8322ee52ea9ab8285828a0f0505df5979804cf1474a618a8e4803839ebb69e68956f172b2adad6648aaa199652f8fa6424d0d9ebe0a1ec219ba93087f7419df174a32238f7c5707e710021b4413eb5c22bf311b2904f34df85992eb0cd65601569f884bb53df8724b8f6a6af1ec066249b"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x81, 0x2, "ab1d"}, &(0x7f0000000e00)={0x20, 0x82, 0x2, "9e73"}, &(0x7f0000000e40)={0x20, 0x83, 0x2, "17ea"}, &(0x7f0000000e80)={0x20, 0x84, 0x3, "b73e87"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "d14399"}})
recvmsg(r6, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102)
sendmmsg$inet(r6, &(0x7f0000005d00), 0x4000000000001e3, 0x8044)

836.425743ms ago: executing program 4 (id=3693):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000002340)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB="2751076a8b829ac4a1a9aec0ab8b9081abb1d62becfaad87ab2073e8af8965853391ade34c6016569e7c972d0747e109ead98e69fc7d265eea7c001d65fa6c2e5ed2c19b66a438eae507d71e4797d78abdf618eb1d08fe195d86dc13c648bfdbb9f974d7c0fea613f2fe001d0d84955bc33b7784cf4d974b6ec94b9899c5fb0148462b5bf11f00ac5532de292514e683556272765de02e08f1db0943cdaf838ef040d1edb731d4c4885afc0a5e4ad4f38bfec668612e0c3d49131705969aeb40d9bbc0a0d6279d9790d87488e3c5b42d3e3e5360eab12ec0786bc3e8c7aafe1eca0c199dc72a6b7ff4d6bee7304c532fa1dd91", @ANYRES64=r1, @ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="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"])
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000900)="0101000071a78326c799dbe888a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x40, 0x1})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0)

0s ago: executing program 2 (id=3694):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_setup(0x5443, 0x0)
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r3 = fsmount(r2, 0x0, 0xa)
fchdir(r3)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x418103, 0x20, 0xf}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="76ea0900000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r5=>0x0)
connect$can_bcm(r4, &(0x7f0000000040), 0x10)
io_submit(r5, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}])
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3})
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xc9)
ioctl$UI_DEV_CREATE(r6, 0x5501)

kernel console output (not intermixed with test programs):

[ 1400.472580][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3186'.
[ 1400.892824][ T5808] usb 3-1: config 0 descriptor??
[ 1400.929426][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1401.112702][T15397] net_ratelimit: 1 callbacks suppressed
[ 1401.112719][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1401.142463][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1401.388106][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1401.584300][ T5808] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1401.594845][T15853] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1401.605410][   T49] Bluetooth: hci5: command 0x1003 tx timeout
[ 1401.671658][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1401.687880][ T5808] usb 3-1: USB disconnect, device number 45
[ 1401.701345][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1401.726621][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1401.775225][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1401.810801][T19159] bond3: option xmit_hash_policy: invalid value (6)
[ 1401.848517][T19159] bond3 (unregistering): Released all slaves
[ 1402.124046][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1402.205620][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1402.334959][T16107] nvmet: connect request for invalid subsystem testsubsys!
[ 1402.384985][T19178] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys"
[ 1403.626897][   T86] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1403.888359][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1404.749489][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1405.025607][T13498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.033897][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.059578][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.720602][T19225] netlink: 'syz.0.3211': attribute type 1 has an invalid length.
[ 1407.211342][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1407.219467][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1409.036322][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1409.044457][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1409.090964][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1409.310070][T19250] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3220'.
[ 1409.604573][   T29] audit: type=1400 audit(1786980945.399:887): avc:  denied  { write } for  pid=19260 comm="syz.3.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1409.894113][ T5808] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1409.955627][ T5698] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1410.054392][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1410.071744][ T5808] usb 2-1: Using ep0 maxpacket: 8
[ 1410.094625][ T5808] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1410.106891][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1410.119102][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1410.140843][   T29] audit: type=1400 audit(1786980945.939:888): avc:  denied  { mount } for  pid=19266 comm="syz.3.3227" name="/" dev="autofs" ino=49333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1410.201453][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.217646][ T5698] usb 3-1: Using ep0 maxpacket: 32
[ 1410.226940][ T5698] usb 3-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6
[ 1410.246466][ T5698] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1410.260618][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.269782][ T5698] usb 3-1: Product: syz
[ 1410.276979][ T5698] usb 3-1: Manufacturer: syz
[ 1410.281882][ T5698] usb 3-1: SerialNumber: syz
[ 1410.283200][ T5808] usb 2-1: config 0 descriptor??
[ 1410.293968][ T5698] usb 3-1: config 0 descriptor??
[ 1410.329373][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'.
[ 1410.347174][T19267] netlink: 'syz.3.3227': attribute type 10 has an invalid length.
[ 1410.511565][ T5698] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[ 1410.529203][ T5808] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1410.547574][ T5698] usb 3-1: USB disconnect, device number 46
[ 1410.692096][   T29] audit: type=1400 audit(1786980946.489:889): avc:  denied  { append } for  pid=19283 comm="syz.3.3231" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1410.771850][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.3.3231
[ 1411.206647][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1411.298610][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1411.576761][ T5698] usb 2-1: USB disconnect, device number 57
[ 1411.698690][T19304] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1411.826893][T16093] Bluetooth: Error in BCSP hdr checksum
[ 1411.873906][T15397] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[ 1411.937609][T19309] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1412.134942][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.342103][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1412.368971][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.484385][T15397] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1412.503348][T15397] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1412.527459][T15397] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1412.540874][T15397] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1412.553948][T15397] usb 5-1: Product: syz
[ 1412.562918][T15397] usb 5-1: Manufacturer: syz
[ 1412.568034][T13498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1412.592954][T15397] usb 5-1: SerialNumber: syz
[ 1412.598001][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1412.611946][T15397] usb 5-1: config 0 descriptor??
[ 1412.633473][T19316] FAULT_INJECTION: forcing a failure.
[ 1412.633473][T19316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1412.661712][T19316] CPU: 0 UID: 0 PID: 19316 Comm: syz.3.3240 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1412.661741][T19316] Tainted: [L]=SOFTLOCKUP
[ 1412.661746][T19316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1412.661756][T19316] Call Trace:
[ 1412.661763][T19316]  <TASK>
[ 1412.661770][T19316]  dump_stack_lvl+0x100/0x190
[ 1412.661796][T19316]  should_fail_ex.cold+0x5/0xa
[ 1412.661819][T19316]  _copy_from_user+0x2e/0xd0
[ 1412.661846][T19316]  __sys_bpf+0x2f5/0x4e80
[ 1412.661871][T19316]  ? __pfx___sys_bpf+0x10/0x10
[ 1412.661889][T19316]  ? find_held_lock+0x2b/0x80
[ 1412.661907][T19316]  ? get_pid_task+0xfc/0x250
[ 1412.661922][T19316]  ? get_pid_task+0xfc/0x250
[ 1412.661946][T19316]  ? find_held_lock+0x2b/0x80
[ 1412.661965][T19316]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1412.661982][T19316]  ? find_held_lock+0x2b/0x80
[ 1412.661996][T19316]  ? ksys_write+0x190/0x250
[ 1412.662012][T19316]  ? ksys_write+0x190/0x250
[ 1412.662047][T19316]  ? fput+0x79/0x100
[ 1412.662072][T19316]  ? __x64_sys_bpf+0xce/0x140
[ 1412.662088][T19316]  __x64_sys_bpf+0xce/0x140
[ 1412.662104][T19316]  ? do_syscall_64+0x90/0x870
[ 1412.662124][T19316]  do_syscall_64+0x115/0x870
[ 1412.662141][T19316]  ? clear_bhb_loop+0x70/0xc0
[ 1412.662162][T19316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1412.662178][T19316] RIP: 0033:0x7fa7cc19e0d9
[ 1412.662192][T19316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1412.662208][T19316] RSP: 002b:00007fa7cd0d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1412.662225][T19316] RAX: ffffffffffffffda RBX: 00007fa7cc425fa0 RCX: 00007fa7cc19e0d9
[ 1412.662236][T19316] RDX: 00000000000000a8 RSI: 0000200000000240 RDI: 0000000000000011
[ 1412.662260][T19316] RBP: 00007fa7cd0d8090 R08: 0000000000000000 R09: 0000000000000000
[ 1412.662271][T19316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1412.662280][T19316] R13: 00007fa7cc426038 R14: 00007fa7cc425fa0 R15: 00007ffe4742a018
[ 1412.662304][T19316]  </TASK>
[ 1412.869184][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1412.900569][T15397] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1412.923901][T11941] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1412.941201][T15397] usb 5-1: USB disconnect, device number 48
[ 1412.996053][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1413.073898][T11941] usb 2-1: Using ep0 maxpacket: 8
[ 1413.079679][T11941] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1413.090128][T11941] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1413.098731][T11941] usb 2-1: config 179 has no interface number 0
[ 1413.109144][T11941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1413.130920][T11941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1413.154847][T11941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1413.183863][T11941] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1413.203876][T11941] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1413.228919][T11941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.242446][T19314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1413.409729][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.484212][T15853] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1413.484225][ T5600] Bluetooth: hci5: command 0x1003 tx timeout
[ 1413.644790][T15853] Bluetooth: hci6: command 0x1003 tx timeout
[ 1413.653567][   T49] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1413.878886][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1413.914643][T11941] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1414.063930][T11941] usb 4-1: Using ep0 maxpacket: 32
[ 1414.073514][T11941] usb 4-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6
[ 1414.088692][T11941] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1414.098174][T11941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.106939][T11941] usb 4-1: Product: syz
[ 1414.112081][T11941] usb 4-1: Manufacturer: syz
[ 1414.121178][T11941] usb 4-1: SerialNumber: syz
[ 1414.137242][T11941] usb 4-1: config 0 descriptor??
[ 1414.363905][T11941] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22
[ 1414.389817][T11941] usb 4-1: USB disconnect, device number 48
[ 1414.450209][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1414.985140][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1415.001137][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3249'.
[ 1415.068087][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'.
[ 1415.164188][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1415.448467][T19351] syzkaller0: entered promiscuous mode
[ 1415.479002][T19351] syzkaller0: entered allmulticast mode
[ 1415.491701][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1415.591573][ T5808] usb 2-1: USB disconnect, device number 58
[ 1415.591585][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1415.934010][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1416.004298][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.458486][T19358] net_ratelimit: 722 callbacks suppressed
[ 1417.458509][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.472605][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.629749][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.638119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.664935][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1417.671317][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1417.707163][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.715505][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.728431][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.763258][T19369] netlink: 'syz.3.3255': attribute type 1 has an invalid length.
[ 1417.807069][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.815630][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1417.844339][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1418.763595][T19382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3257'.
[ 1419.263234][T19386] syzkaller0: entered promiscuous mode
[ 1419.299893][T19386] syzkaller0: entered allmulticast mode
[ 1419.357623][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1419.395903][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1421.555616][T19411] syzkaller0: entered promiscuous mode
[ 1421.647385][T19411] syzkaller0: entered allmulticast mode
[ 1421.680282][   T29] audit: type=1400 audit(1786980957.479:890): avc:  denied  { execute } for  pid=19418 comm="syz.4.3269" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1421.758067][   T29] audit: type=1400 audit(1786980957.489:891): avc:  denied  { read } for  pid=19421 comm="syz.3.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1421.773898][T15397] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1421.924311][   T86] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1421.954245][T15397] usb 2-1: Using ep0 maxpacket: 8
[ 1421.964410][T15397] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1421.986696][T15397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1422.010410][T15397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1422.039195][T15397] usb 2-1: config 0 descriptor??
[ 1422.104005][   T86] usb 4-1: Using ep0 maxpacket: 16
[ 1422.116260][   T86] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1422.136763][   T86] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1422.165619][   T86] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1422.204289][   T86] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.224638][   T86] usb 4-1: Product: я
[ 1422.232730][   T86] usb 4-1: Manufacturer: ⠉
[ 1422.244698][   T86] usb 4-1: SerialNumber: 퉩끧⩸羝⚐駜䋆嘶ࢰ砍ᰡ藙௷헡랕䱢둈挪Р퍦諍旮縷臨
[ 1422.277870][T15397] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1422.372422][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'.
[ 1422.508276][ T5698] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1422.635226][   T86] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1422.688890][T18441] net_ratelimit: 547 callbacks suppressed
[ 1422.688910][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1422.815650][ T5698] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[ 1422.848347][ T5698] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[ 1423.472363][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64
[ 1423.488765][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1423.497895][ T5698] usb 3-1: Product: syz
[ 1423.502109][ T5698] usb 3-1: Manufacturer: syz
[ 1423.507245][ T5698] usb 3-1: SerialNumber: syz
[ 1423.534228][T11941] usb 2-1: USB disconnect, device number 59
[ 1423.665601][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1423.709545][   T86] usb 4-1: USB disconnect, device number 49
[ 1423.735913][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1423.886229][ T5698] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1423.894209][ T5698] usb 3-1: MIDIStreaming interface descriptor not found
[ 1424.008703][T19451] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1424.510342][ T5698] usb 3-1: USB disconnect, device number 47
[ 1424.600257][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1424.814651][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1426.471884][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1426.671709][T19474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'.
[ 1426.697902][   T29] audit: type=1400 audit(1786980962.502:892): avc:  denied  { view } for  pid=19471 comm="syz.4.3285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1426.775990][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1426.826360][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1426.894136][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1426.907497][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.071960][T19487] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3291'.
[ 1427.389866][   T86] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1427.699125][T19481] net_ratelimit: 138 callbacks suppressed
[ 1427.699150][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.810722][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.841055][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.851407][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.860700][   T86] usb 3-1: Using ep0 maxpacket: 8
[ 1427.874341][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.876232][   T86] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[ 1427.903591][   T86] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1427.906298][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.913423][   T86] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[ 1427.923689][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.944086][   T86] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1427.967452][   T86] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1427.976618][   T86] usb 3-1: Product: syz
[ 1427.988011][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.020238][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.063333][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.117467][   T86] usb 3-1: Manufacturer: syz
[ 1428.122786][   T86] usb 3-1: SerialNumber: syz
[ 1428.206162][   T86] usb 3-1: config 0 descriptor??
[ 1428.235516][   T86] radioshark 3-1:0.0: Invalid radioSHARK device
[ 1428.352751][   T86] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[ 1428.450346][   T86] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1429.563622][T19508] netlink: 'syz.0.3294': attribute type 1 has an invalid length.
[ 1429.658099][T19487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1429.668499][T19487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.782027][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3300'.
[ 1431.895433][   T29] audit: type=1400 audit(1786980967.702:893): avc:  denied  { map } for  pid=19533 comm="syz.3.3302" path="/dev/video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1431.927021][   T29] audit: type=1400 audit(1786980967.702:894): avc:  denied  { execute } for  pid=19533 comm="syz.3.3302" path="/dev/video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 1432.171731][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1432.217666][T19539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3303'.
[ 1432.373113][ T5698] usb 3-1: USB disconnect, device number 48
[ 1432.521722][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1432.792193][T16100] net_ratelimit: 831 callbacks suppressed
[ 1432.792214][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1432.885084][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1432.996137][T19558] syzkaller0: entered promiscuous mode
[ 1433.050171][T19558] syzkaller0: entered allmulticast mode
[ 1433.846348][T16106] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1433.965990][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1434.044647][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1434.074740][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1434.089931][T19572] CUSE: unknown device info ""
[ 1434.095023][T19572] CUSE: unknown device info ""
[ 1434.099942][T19572] CUSE: unknown device info ""
[ 1434.104941][T19572] CUSE: unknown device info ""
[ 1434.109859][T19572] CUSE: unknown device info "�"
[ 1434.114876][T19572] CUSE: zero length info key specified
[ 1434.124145][T11941] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 1434.127472][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1434.163944][ T5698] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1434.334623][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1434.596157][T16105] Bluetooth: Error in BCSP hdr checksum
[ 1434.666370][T11941] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1434.679063][T11941] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1434.692004][T11941] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1434.704887][T11941] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1434.713546][T11941] usb 4-1: Product: syz
[ 1434.721692][T11941] usb 4-1: Manufacturer: syz
[ 1434.730132][T11941] usb 4-1: SerialNumber: syz
[ 1434.767588][ T5698] usb 5-1: Using ep0 maxpacket: 16
[ 1434.780109][ T5698] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1434.802241][T11941] usb 4-1: config 0 descriptor??
[ 1434.857004][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1434.912962][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1435.040941][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1435.176334][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1435.303762][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1435.317284][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1435.413696][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1435.420880][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1435.535670][ T5698] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1435.568058][ T5698] usb 5-1: Manufacturer: syz
[ 1435.590755][ T5698] usb 5-1: config 0 descriptor??
[ 1435.599055][T11941] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1435.648173][T11941] usb 4-1: USB disconnect, device number 50
[ 1435.698580][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1435.795728][T15397] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1435.873954][ T5698] rc_core: IR keymap rc-hauppauge not found
[ 1435.885896][T15853] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1435.886043][ T5600] Bluetooth: hci6: command 0x1003 tx timeout
[ 1435.893150][   T49] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1435.906496][ T5600] Bluetooth: hci5: command 0x1003 tx timeout
[ 1435.922778][ T5698] Registered IR keymap rc-empty
[ 1435.934059][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1435.953901][T15397] usb 3-1: Using ep0 maxpacket: 8
[ 1435.954589][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1435.959931][T15397] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1436.005328][ T5698] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1436.026110][T15397] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1436.028491][ T5698] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input92
[ 1436.040172][T15397] usb 3-1: config 179 has no interface number 0
[ 1436.059334][   T29] audit: type=1400 audit(1786980971.862:895): avc:  denied  { bind } for  pid=19598 comm="syz.0.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1436.061776][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'.
[ 1436.102288][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.105752][T15397] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1436.120956][T15397] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1436.134359][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.150713][T15397] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1436.165068][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.169718][T15397] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1436.183967][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.185109][T15397] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1436.205832][T15397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1436.213977][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.217717][T19586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1436.245405][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.275555][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.294100][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.317069][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.355033][ T5698] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1436.395677][ T5698] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1436.406105][ T5698] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1436.424518][ T5698] usb 5-1: USB disconnect, device number 49
[ 1436.452258][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1436.509385][T16105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.201302][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.209701][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.258717][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.267665][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.614360][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.636790][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.827897][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1438.986245][T19617] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1439.224822][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1439.354031][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1439.376775][T16089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1439.394935][ T5808] usb 3-1: USB disconnect, device number 49
[ 1439.400919][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1439.400969][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1439.555841][T19622] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[ 1439.969865][   T29] audit: type=1400 audit(1786980975.772:896): avc:  denied  { read } for  pid=19627 comm="syz.4.3328" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1440.005422][   T29] audit: type=1400 audit(1786980975.802:897): avc:  denied  { open } for  pid=19627 comm="syz.4.3328" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 1440.036055][T19629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3327'.
[ 1440.117434][T19615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3322'.
[ 1440.153987][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'.
[ 1440.181367][T19639] syzkaller0: entered promiscuous mode
[ 1440.230925][T19639] syzkaller0: entered allmulticast mode
[ 1440.411757][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1440.530617][T19638] CUSE: unknown device info ""
[ 1440.535670][T19638] CUSE: unknown device info ""
[ 1440.540611][T19638] CUSE: unknown device info ""
[ 1440.545569][T19638] CUSE: unknown device info ""
[ 1440.550473][T19638] CUSE: unknown device info "�"
[ 1440.555470][T19638] CUSE: zero length info key specified
[ 1442.034741][T15397] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1443.071926][T16100] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1443.128187][T15397] usb 4-1: New USB device found, idVendor=1430, idProduct=241b, bcdDevice=17.0a
[ 1443.168279][T15397] usb 4-1: config 1 has an invalid interface number: 37 but max is 0
[ 1443.205219][T15397] usb 4-1: config 1 has no interface number 0
[ 1443.229621][T15397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1443.238161][ T5808] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1443.238395][T16105] net_ratelimit: 1269 callbacks suppressed
[ 1443.238407][T16105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1443.259787][T16105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1443.358172][T19673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3339'.
[ 1443.385214][T18441] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1443.407487][T19673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3339'.
[ 1443.416811][ T5808] usb 3-1: Using ep0 maxpacket: 8
[ 1443.438034][ T5808] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1443.457362][ T5808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 1443.483223][   T29] audit: type=1400 audit(1786980979.282:898): avc:  denied  { append } for  pid=19654 comm="syz.3.3332" name="ubi_ctrl" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1443.506379][ T5808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 1443.517846][ T5808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[ 1443.528466][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1443.530897][T13412] usb 4-1: USB disconnect, device number 51
[ 1443.544120][T18441] usb 1-1: Using ep0 maxpacket: 16
[ 1443.550268][T18441] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1443.569616][T18441] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1443.571370][T19665] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1443.583163][T18441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1443.605403][T18441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1443.623108][T18441] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1443.635792][T19665] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1443.655801][T18441] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1443.698579][T19665] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1443.810418][ T5808] mdc800 3-1:1.0: Found Mustek MDC800 on USB.
[ 1443.827629][T18441] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1443.839015][T18441] usb 1-1: Manufacturer: syz
[ 1443.852582][T18441] usb 1-1: config 0 descriptor??
[ 1444.316245][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1444.374988][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1444.383884][T18441] rc_core: IR keymap rc-hauppauge not found
[ 1444.405307][T18441] Registered IR keymap rc-empty
[ 1444.419830][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.454072][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.487265][T18441] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1444.571190][T18441] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93
[ 1444.595187][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.634172][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.674810][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.709114][T19686] lo speed is unknown, defaulting to 1000
[ 1444.718071][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.757736][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.776998][T16089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1444.835453][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.866227][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.904047][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.941841][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1444.982934][T18441] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1445.036070][T18441] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1445.074201][T18441] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1445.083902][T17553] Bluetooth: hci5: command 0x1003 tx timeout
[ 1445.094460][T19597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1445.191634][T18441] usb 1-1: USB disconnect, device number 47
[ 1445.378041][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1445.496364][T19697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1445.855858][T19697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1445.905076][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1446.115335][T19697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1446.124428][T19697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1446.200153][T19702] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[ 1446.405414][   T29] audit: type=1400 audit(1786980982.182:899): avc:  denied  { getopt } for  pid=19685 comm="syz.3.3342" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1446.465788][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1446.619458][T19711] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1447.100608][   T29] audit: type=1400 audit(1786980982.902:900): avc:  denied  { read } for  pid=19685 comm="syz.3.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1447.670803][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1447.699359][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1447.919945][   T29] audit: type=1400 audit(1786980983.722:901): avc:  denied  { connect } for  pid=19719 comm="syz.1.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1448.206441][T19727] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1448.249065][ T5698] usb 3-1: USB disconnect, device number 50
[ 1448.643193][ T5698] mdc800 3-1:1.0: Mustek MDC800 disconnected from USB.
[ 1448.768901][T18441] net_ratelimit: 2 callbacks suppressed
[ 1448.768919][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1448.917695][   T29] audit: type=1400 audit(1786980984.712:902): avc:  denied  { append } for  pid=19736 comm="syz.1.3354" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1449.025318][T19737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1449.155137][   T29] audit: type=1326 audit(1786980984.962:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.1.3354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1449.219781][   T29] audit: type=1326 audit(1786980984.962:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.1.3354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1449.292916][   T29] audit: type=1326 audit(1786980984.992:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.1.3354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1449.352772][   T29] audit: type=1326 audit(1786980984.992:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.1.3354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1449.545703][   T29] audit: type=1326 audit(1786980985.012:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.1.3354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1449.573036][   T29] audit: type=1326 audit(1786980985.012:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.1.3354" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1449.725555][T19753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3357'.
[ 1449.928995][T16089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1450.034445][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1450.499125][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1450.604813][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1450.693907][T19776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3360'.
[ 1450.720826][T16096] Bluetooth: Error in BCSP hdr checksum
[ 1450.852108][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1450.952155][ T5721] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[ 1450.995120][T16096] Bluetooth: Error in BCSP hdr checksum
[ 1451.069680][T19749] CUSE: unknown device info ""
[ 1451.074727][T19749] CUSE: unknown device info ""
[ 1451.079676][T19749] CUSE: unknown device info ""
[ 1451.086306][T19749] CUSE: unknown device info ""
[ 1451.091277][T19749] CUSE: unknown device info "�"
[ 1451.096382][T19749] CUSE: zero length info key specified
[ 1451.377668][T16096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1451.391233][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1451.402199][T16105] Bluetooth: Error in BCSP hdr checksum
[ 1451.524472][ T5721] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1451.545169][ T5721] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1451.564818][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1451.586160][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1451.598253][ T5721] usb 2-1: Product: syz
[ 1451.607114][ T5721] usb 2-1: Manufacturer: syz
[ 1452.193853][ T5721] usb 2-1: SerialNumber: syz
[ 1452.198142][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1452.232181][ T5721] usb 2-1: config 0 descriptor??
[ 1452.378609][ T5721] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1452.393215][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1452.475227][T17553] Bluetooth: hci5: command 0x1003 tx timeout
[ 1452.479850][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1452.483748][T19597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1452.549818][T11941] usb 2-1: USB disconnect, device number 60
[ 1452.952323][T19807] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1453.098956][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1453.487993][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1453.613174][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'.
[ 1453.652142][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3371'.
[ 1453.667686][T19815] netlink: 'syz.1.3371': attribute type 6 has an invalid length.
[ 1453.743897][T13498] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1453.771731][T16107] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1453.810930][T16107] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1453.857387][T16107] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1454.103991][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.294035][T16105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1454.423890][T18441] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1454.534930][ T5698] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1454.772132][ T5698] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1454.926561][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1455.012529][ T5698] usb 5-1: Product: syz
[ 1455.057946][ T5698] usb 5-1: Manufacturer: syz
[ 1455.110489][ T5698] usb 5-1: SerialNumber: syz
[ 1455.188453][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1455.343928][T18441] usb 1-1: Using ep0 maxpacket: 8
[ 1455.353575][T18441] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1455.376591][T18441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1455.484727][T18441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.495194][T18441] usb 1-1: config 0 descriptor??
[ 1455.500710][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1455.959518][T19846] CUSE: unknown device info ""
[ 1455.965595][T19846] CUSE: unknown device info ""
[ 1455.972466][T19846] CUSE: unknown device info ""
[ 1455.977459][T19846] CUSE: unknown device info ""
[ 1455.982394][T19846] CUSE: unknown device info "�"
[ 1455.987505][T19846] CUSE: zero length info key specified
[ 1456.270961][ T5721] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1456.272386][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.289647][   T29] kauditd_printk_skb: 82 callbacks suppressed
[ 1456.289665][   T29] audit: type=1400 audit(1786980992.062:991): avc:  denied  { firmware_load } for  pid=5721 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 1456.325465][T18441] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1456.545464][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.554516][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.563004][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.574220][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.583042][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1456.623959][T12523] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[ 1456.774109][ T5698] usb 1-1: USB disconnect, device number 48
[ 1456.786770][T12523] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1456.819075][T12523] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1456.835106][T15397] usb 5-1: USB disconnect, device number 50
[ 1456.858967][T12523] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1456.885670][T12523] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1456.917476][T12523] usb 3-1: Product: syz
[ 1456.925100][T12523] usb 3-1: Manufacturer: syz
[ 1456.934420][T12523] usb 3-1: SerialNumber: syz
[ 1456.947582][T12523] usb 3-1: config 0 descriptor??
[ 1457.014995][T12523] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1457.075155][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1457.170676][T13412] usb 3-1: USB disconnect, device number 51
[ 1457.325565][ T5721] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1457.343085][ T5721] ath9k_htc: Failed to initialize the device
[ 1457.362596][T15397] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1459.486523][T18441] net_ratelimit: 251 callbacks suppressed
[ 1459.486544][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1460.441205][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1460.524998][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1460.692195][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1460.797836][T19913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1461.658216][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1461.779340][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3404'.
[ 1462.203268][T18441] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1462.207255][T19926] input: syz0 as /devices/virtual/input/input95
[ 1462.356854][T16098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1462.537998][T18441] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1462.568316][T18441] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.578839][T18441] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1462.588957][T18441] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1462.605069][T18441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1462.613746][T18441] usb 3-1: Product: syz
[ 1462.618791][T18441] usb 3-1: Manufacturer: syz
[ 1462.623620][T18441] usb 3-1: SerialNumber: syz
[ 1462.649994][T18441] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 1462.673961][T18441] cdc_ncm 3-1:1.0: bind() failure
[ 1462.684094][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1462.827296][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1462.879885][   T29] audit: type=1326 audit(1786980998.682:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1462.935098][   T29] audit: type=1326 audit(1786980998.712:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.003957][   T29] audit: type=1326 audit(1786980998.712:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2df6b5e90e code=0x7ffc0000
[ 1463.032601][T19597] Bluetooth: hci2: unexpected event for opcode 0x0c6d
[ 1463.079448][   T29] audit: type=1326 audit(1786980998.712:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2df6b5e90e code=0x7ffc0000
[ 1463.168772][   T29] audit: type=1326 audit(1786980998.712:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.253437][   T29] audit: type=1326 audit(1786980998.712:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.285895][T19944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3410'.
[ 1463.301979][   T29] audit: type=1326 audit(1786980998.712:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.349069][   T29] audit: type=1326 audit(1786980998.712:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.396981][   T29] audit: type=1326 audit(1786980998.712:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.420822][T19952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1463.433085][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1463.453461][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3410'.
[ 1463.453461][   T29] audit: type=1326 audit(1786980998.712:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19931 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2df6b9e0d9 code=0x7ffc0000
[ 1463.494189][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1463.633883][T13412] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 1463.784553][T13412] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1463.824853][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1463.867568][T18441] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1464.049741][T18441] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1464.092780][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1464.104092][T18441] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1464.159402][T18441] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1464.221826][T13412] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1464.222470][T18441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.232798][T13412] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1464.235894][T13412] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1464.242611][T18441] usb 5-1: Product: syz
[ 1464.256563][T13412] usb 1-1: Product: syz
[ 1464.256586][T13412] usb 1-1: Manufacturer: syz
[ 1464.256602][T13412] usb 1-1: SerialNumber: syz
[ 1464.266548][T13412] usb 1-1: config 0 descriptor??
[ 1464.275765][T18441] usb 5-1: Manufacturer: syz
[ 1464.275787][T18441] usb 5-1: SerialNumber: syz
[ 1464.329748][T13412] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1464.344501][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1464.364416][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1464.478319][T13412] usb 3-1: USB disconnect, device number 52
[ 1464.506002][ T5698] usb 1-1: USB disconnect, device number 49
[ 1464.580501][T18441] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1464.600915][T18441] usb 5-1: USB disconnect, device number 51
[ 1464.637242][T18441] usblp0: removed
[ 1464.709007][T19972] net_ratelimit: 2 callbacks suppressed
[ 1464.709026][T19972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.744205][T19972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.757419][T19972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.768711][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.781328][T16096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.790121][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.798277][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.806391][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.814528][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.822612][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1465.343937][   T49] Bluetooth: hci5: command 0x1003 tx timeout
[ 1465.351633][T19597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1466.513306][T19986] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1468.053090][   T29] kauditd_printk_skb: 47 callbacks suppressed
[ 1468.053109][   T29] audit: type=1400 audit(1786981003.842:1049): avc:  denied  { create } for  pid=20000 comm="syz.1.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[ 1468.196293][T20007] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1470.134170][T20022] net_ratelimit: 1274 callbacks suppressed
[ 1470.134184][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.148392][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.156570][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.164749][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.172879][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.181042][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.189238][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.197698][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.206054][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1470.214225][T20022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1471.094129][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3436'.
[ 1471.551990][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1471.772443][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'.
[ 1472.011881][T20058] libceph: resolve '.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�' (ret=-3): failed
[ 1474.478215][T13498] Bluetooth: Error in BCSP hdr checksum
[ 1474.543932][T15397] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[ 1474.707211][T15397] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1475.685947][T16098] Bluetooth: Error in BCSP hdr checksum
[ 1475.765048][T20109] netlink: 'syz.2.3450': attribute type 10 has an invalid length.
[ 1475.835651][T15397] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1475.836621][T20108] syzkaller0: entered promiscuous mode
[ 1475.862910][T18441] net_ratelimit: 744 callbacks suppressed
[ 1475.862928][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1475.886943][T15397] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1475.952305][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1475.977166][T15397] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1475.998743][T15397] usb 2-1: Product: syz
[ 1476.006208][T20108] syzkaller0: entered allmulticast mode
[ 1476.013018][T15397] usb 2-1: Manufacturer: syz
[ 1476.024295][T15397] usb 2-1: SerialNumber: syz
[ 1476.037458][T15397] usb 2-1: config 0 descriptor??
[ 1476.125845][T15397] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1476.199434][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1476.219488][T12474] Bluetooth: Error in BCSP hdr checksum
[ 1476.295239][   T49] Bluetooth: hci5: command 0x1003 tx timeout
[ 1476.306256][T19597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1476.357361][T15397] usb 2-1: USB disconnect, device number 61
[ 1476.544261][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.569001][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.577868][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.597874][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.608781][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.774251][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1476.947509][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1477.501118][T20126] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1478.196413][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1478.237734][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1479.183103][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1479.287777][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1479.585684][T11941] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1479.814031][T11941] usb 2-1: Using ep0 maxpacket: 8
[ 1479.870198][T11941] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1479.952128][T11941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1480.044977][T11941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.156209][T11941] usb 2-1: config 0 descriptor??
[ 1480.496139][T11941] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1480.747411][T20147] netlink: 'syz.0.3464': attribute type 10 has an invalid length.
[ 1481.004332][T18441] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1481.078029][T20158] syzkaller0: entered promiscuous mode
[ 1481.102374][T20158] syzkaller0: entered allmulticast mode
[ 1482.178808][T12523] net_ratelimit: 4 callbacks suppressed
[ 1482.178821][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1482.206118][T18441] usb 5-1: Using ep0 maxpacket: 8
[ 1482.221391][T18441] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1482.231970][T18441] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1482.240514][T18441] usb 5-1: config 179 has no interface number 0
[ 1482.289952][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1482.292394][T18441] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1482.311010][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1482.320881][T18441] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1482.332897][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1482.343223][T18441] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1482.366833][T18441] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1482.398816][T18441] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1482.431733][T18441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.471955][T20150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1482.538252][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1482.684785][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1483.072639][T16106] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1483.160380][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1483.168705][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1483.189032][T11941] usb 5-1: USB disconnect, device number 52
[ 1483.433153][T20179] netlink: 'syz.0.3467': attribute type 10 has an invalid length.
[ 1483.527895][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1483.554740][  T189] usb 2-1: USB disconnect, device number 62
[ 1484.326085][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1484.681819][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1484.945752][T20192] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1485.083927][   T49] Bluetooth: hci5: command 0x1003 tx timeout
[ 1485.086366][T19597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1485.735310][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1486.090488][T20206] netlink: 'syz.4.3476': attribute type 10 has an invalid length.
[ 1486.265074][T20202] input: syz0 as /devices/virtual/input/input96
[ 1486.650052][   T29] audit: type=1400 audit(1786981022.452:1050): avc:  denied  { read write } for  pid=20207 comm="syz.3.3477" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1486.683103][T20218] kvm: emulating exchange as write
[ 1486.697113][T18441] hid_parser_main: 14 callbacks suppressed
[ 1486.697134][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.714800][   T29] audit: type=1400 audit(1786981022.482:1051): avc:  denied  { open } for  pid=20207 comm="syz.3.3477" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1486.740112][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.755572][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.765482][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.773075][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.782922][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.799131][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.811778][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.824669][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.832922][T18441] asus 0003:048D:1239.0004: unknown main item tag 0x0
[ 1486.863996][ T5698] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1486.957457][T18441] asus 0003:048D:1239.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0
[ 1486.993515][T18441] asus 0003:048D:1239.0004: Asus handshake 5d failed to send: -5
[ 1487.003890][T18441] asus 0003:048D:1239.0004: Failed to initialize 0x5d: -5.
[ 1487.025149][ T5698] usb 3-1: Using ep0 maxpacket: 8
[ 1487.054148][ T5698] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1487.082866][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1487.105219][T20227] fido_id[20227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1487.118968][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.141484][ T5698] usb 3-1: config 0 descriptor??
[ 1487.552122][T20231] input: syz0 as /devices/virtual/input/input97
[ 1487.583960][ T5698] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1487.807737][ T5808] net_ratelimit: 4 callbacks suppressed
[ 1487.807755][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.051232][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.174672][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.488737][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.642413][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.764352][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.864754][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1489.406139][T20246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1489.691948][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1489.912488][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1490.324398][ T5698] usb 3-1: USB disconnect, device number 53
[ 1491.132167][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.201839][T18441] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1491.434913][T18441] usb 1-1: Using ep0 maxpacket: 32
[ 1491.440738][T18441] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[ 1491.451455][T18441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.468007][T18441] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1491.482509][T18441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.492044][T18441] usb 1-1: Product: syz
[ 1491.497318][T18441] usb 1-1: Manufacturer: syz
[ 1491.502108][T18441] usb 1-1: SerialNumber: syz
[ 1491.665694][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1491.707232][ T5808] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[ 1491.722904][T20257] overlayfs: conflicting options: userxattr,metacopy=on
[ 1491.812003][T18441] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1491.826890][T18441] usb 1-1: USB disconnect, device number 50
[ 1491.874906][ T5808] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1491.885995][ T5808] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1491.897518][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1491.912696][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1491.922915][ T5808] usb 2-1: Product: syz
[ 1491.927927][ T5808] usb 2-1: Manufacturer: syz
[ 1491.928109][T16105] Bluetooth: Error in BCSP hdr checksum
[ 1491.932671][ T5808] usb 2-1: SerialNumber: syz
[ 1491.960778][ T5808] usb 2-1: config 0 descriptor??
[ 1492.073656][ T5808] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1492.195810][T16105] Bluetooth: Error in BCSP hdr checksum
[ 1492.203423][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1492.375683][   T29] audit: type=1400 audit(1786981028.142:1052): avc:  denied  { create } for  pid=20279 comm="syz.2.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1492.452174][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3494'.
[ 1492.802890][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1492.814698][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1493.005855][   T29] audit: type=1400 audit(1786981028.252:1053): avc:  denied  { ioctl } for  pid=20279 comm="syz.2.3494" path="socket:[53360]" dev="sockfs" ino=53360 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1493.054123][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1493.090659][ T5808] usb 2-1: USB disconnect, device number 63
[ 1493.104891][   T29] audit: type=1400 audit(1786981028.282:1054): avc:  denied  { ioctl } for  pid=20279 comm="syz.2.3494" path="/697/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=499 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[ 1493.290800][T18441] net_ratelimit: 4 callbacks suppressed
[ 1493.290820][T18441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1493.407857][   T49] Bluetooth: hci5: command 0x1003 tx timeout
[ 1493.456893][T20302] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1493.488083][T19597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1493.614081][ T5808] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1493.844138][ T5808] usb 5-1: Using ep0 maxpacket: 8
[ 1493.850863][ T5808] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1493.864776][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1493.879869][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.894353][ T5808] usb 5-1: config 0 descriptor??
[ 1494.118739][ T5808] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1494.285950][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1494.347878][   T29] audit: type=1400 audit(1786981030.132:1055): avc:  denied  { map } for  pid=20311 comm="syz.0.3505" path="socket:[53420]" dev="sockfs" ino=53420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1494.380562][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1494.502840][T20322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3506'.
[ 1494.844005][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1494.947932][ T5698] usb 5-1: USB disconnect, device number 53
[ 1495.415279][T15397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1495.497442][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1495.951052][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1496.487326][T12523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1496.636643][T20352] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1497.014067][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1497.084853][T20348] CUSE: unknown device info ""
[ 1497.089817][T20348] CUSE: unknown device info ""
[ 1497.094763][T20348] CUSE: unknown device info ""
[ 1497.099616][T20348] CUSE: unknown device info ""
[ 1497.104479][T20348] CUSE: unknown device info "�"
[ 1497.109391][T20348] CUSE: zero length info key specified
[ 1497.564906][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1497.574969][T12523] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[ 1497.735954][T12523] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1497.753880][T12523] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1497.778733][T12523] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 131, changing to 4
[ 1497.800036][T12523] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0
[ 1497.822871][T12523] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0
[ 1497.851184][T12523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.869545][T12523] usb 3-1: Manufacturer: ㇚顧歕ᠨ䅾кꔛ
[ 1497.890973][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.038504][   T29] audit: type=1400 audit(1786981033.842:1056): avc:  denied  { append } for  pid=20366 comm="syz.0.3519" name="sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1498.064747][T20368] program syz.0.3519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1498.110303][T12523] usb 3-1: low speed audio streaming not supported
[ 1498.131127][T12523] usb 3-1: low speed audio streaming not supported
[ 1498.183044][T12523] usb 3-1: USB disconnect, device number 54
[ 1498.247532][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1498.343312][T20368] smpboot: CPU 1 is now offline
[ 1498.574464][ T5698] net_ratelimit: 2 callbacks suppressed
[ 1498.574476][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.675406][T20372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3520'.
[ 1498.752695][T20374] netlink: 'syz.4.3521': attribute type 10 has an invalid length.
[ 1499.348458][T12474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.786320][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1500.274944][T20390] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1500.959138][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1500.969396][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.257847][T20398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1501.368935][T20397] netlink: 'syz.2.3529': attribute type 10 has an invalid length.
[ 1501.528551][T16107] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1501.616685][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.855571][ T5698] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1502.001865][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1502.018601][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1502.041009][  T189] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1502.068826][T20415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'.
[ 1502.093248][T20417] FAULT_INJECTION: forcing a failure.
[ 1502.093248][T20417] name failslab, interval 1, probability 0, space 0, times 0
[ 1502.196500][T20417] CPU: 0 UID: 0 PID: 20417 Comm: syz.4.3535 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1502.196519][T20417] Tainted: [L]=SOFTLOCKUP
[ 1502.196523][T20417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1502.196530][T20417] Call Trace:
[ 1502.196534][T20417]  <TASK>
[ 1502.196538][T20417]  dump_stack_lvl+0x100/0x190
[ 1502.196557][T20417]  should_fail_ex.cold+0x5/0xa
[ 1502.196571][T20417]  should_failslab+0xc2/0x120
[ 1502.196586][T20417]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[ 1502.196599][T20417]  ? __alloc_skb+0x5b7/0x710
[ 1502.196613][T20417]  ? __alloc_skb+0x140/0x710
[ 1502.196628][T20417]  __alloc_skb+0x140/0x710
[ 1502.196640][T20417]  ? __alloc_skb+0x5b7/0x710
[ 1502.196652][T20417]  ? __pfx___alloc_skb+0x10/0x10
[ 1502.196669][T20417]  netlink_alloc_large_skb+0x69/0x150
[ 1502.196682][T20417]  netlink_sendmsg+0x680/0xda0
[ 1502.196696][T20417]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1502.196710][T20417]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1502.196728][T20417]  ____sys_sendmsg+0xa4d/0xbe0
[ 1502.196738][T20417]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1502.196750][T20417]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1502.196767][T20417]  ___sys_sendmsg+0x190/0x1e0
[ 1502.196778][T20417]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1502.196788][T20417]  ? __lock_acquire+0x49f/0x1a40
[ 1502.196807][T20417]  ? get_pid_task+0x106/0x250
[ 1502.196831][T20417]  __sys_sendmsg+0x160/0x210
[ 1502.196846][T20417]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1502.196867][T20417]  do_syscall_64+0x115/0x870
[ 1502.196879][T20417]  ? clear_bhb_loop+0x70/0xc0
[ 1502.196892][T20417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1502.196903][T20417] RIP: 0033:0x7f4c1f19e0d9
[ 1502.196912][T20417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1502.196923][T20417] RSP: 002b:00007f4c20049028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1502.196934][T20417] RAX: ffffffffffffffda RBX: 00007f4c1f425fa0 RCX: 00007f4c1f19e0d9
[ 1502.196941][T20417] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1502.196947][T20417] RBP: 00007f4c20049090 R08: 0000000000000000 R09: 0000000000000000
[ 1502.196953][T20417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1502.196959][T20417] R13: 00007f4c1f426038 R14: 00007f4c1f425fa0 R15: 00007fffd8918558
[ 1502.196973][T20417]  </TASK>
[ 1502.694543][ T5698] usb 1-1: Using ep0 maxpacket: 16
[ 1502.701017][ T5698] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1502.754527][  T189] usb 3-1: Using ep0 maxpacket: 8
[ 1502.760302][  T189] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1503.529668][T20422] input: syz0 as /devices/virtual/input/input98
[ 1503.547281][  T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1503.559744][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1503.572259][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1503.596098][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1503.628771][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1503.641502][  T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1503.654868][T19597] Bluetooth: hci5: command 0x1003 tx timeout
[ 1503.665409][   T49] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1503.698270][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1503.711755][  T189] usb 3-1: config 0 descriptor??
[ 1503.729515][ T5698] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1503.752445][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1503.828839][ T5698] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1503.861523][ T5698] usb 1-1: Manufacturer: syz
[ 1503.867165][T20427] netlink: 'syz.4.3538': attribute type 22 has an invalid length.
[ 1503.881839][ T5698] usb 1-1: config 0 descriptor??
[ 1503.888377][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3538'.
[ 1503.947888][  T189] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1503.975343][T20427] netlink: 'syz.4.3538': attribute type 22 has an invalid length.
[ 1503.998171][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1504.015612][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3538'.
[ 1504.047968][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.183912][ T5698] rc_core: IR keymap rc-hauppauge not found
[ 1504.191208][ T5698] Registered IR keymap rc-empty
[ 1504.196218][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1504.223917][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1504.255486][ T5698] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1504.288498][ T5698] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input99
[ 1504.320055][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1504.365103][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1504.404002][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1504.428952][  T189] usb 3-1: USB disconnect, device number 55
[ 1504.723917][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.790279][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1505.368955][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1505.404455][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1505.476263][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1505.525399][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1505.578738][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1506.366080][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1506.489595][T20450] input: syz0 as /devices/virtual/input/input100
[ 1506.503016][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1506.534196][ T5698] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1506.570950][ T5698] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1506.584430][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1506.635148][ T5698] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1506.688347][ T5698] usb 1-1: USB disconnect, device number 51
[ 1506.970730][T20471] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1507.084018][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1507.180698][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'.
[ 1507.258783][T20479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3552'.
[ 1507.583550][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1507.832251][T20490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3553'.
[ 1507.846471][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1508.015748][  T189] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1508.206352][T20470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1508.360474][T20497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3555'.
[ 1508.474432][  T189] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1508.517016][  T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1508.538763][   T29] audit: type=1400 audit(1786981044.342:1057): avc:  denied  { read write } for  pid=20499 comm="syz.1.3556" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1508.565035][  T189] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1508.583436][   T29] audit: type=1400 audit(1786981044.342:1058): avc:  denied  { open } for  pid=20499 comm="syz.1.3556" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1508.608369][T11941] net_ratelimit: 1 callbacks suppressed
[ 1508.608380][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1508.627072][  T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.649160][  T189] usb 3-1: Product: syz
[ 1508.662647][  T189] usb 3-1: Manufacturer: syz
[ 1508.680220][  T189] usb 3-1: SerialNumber: syz
[ 1508.740305][T20507] syz.0.3558 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1508.785658][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1509.013142][  T189] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1509.076185][  T189] usb 3-1: USB disconnect, device number 56
[ 1509.123218][  T189] usblp0: removed
[ 1509.896097][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.904701][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.954832][   T29] audit: type=1326 audit(1786981045.802:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.3.3562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cc19e0d9 code=0x7fc00000
[ 1510.982962][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.992074][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1512.963980][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1513.062550][   T29] audit: type=1326 audit(1786981045.802:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.3.3562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa7cc19e0d9 code=0x7fc00000
[ 1513.425393][T20534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3566'.
[ 1513.767609][T20546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3567'.
[ 1514.015181][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1514.049577][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1514.057912][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1514.167821][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1514.499757][T20565] syzkaller1: entered promiscuous mode
[ 1514.535467][T20565] syzkaller1: entered allmulticast mode
[ 1514.649911][T20565] syzkaller0: entered promiscuous mode
[ 1514.687040][T20565] syzkaller0: entered allmulticast mode
[ 1514.761396][T20565] 0: reclassify loop, rule prio 0, protocol 800
[ 1515.040096][   T49] Bluetooth: hci1: unexpected event for opcode 0x0004
[ 1515.061985][   T29] audit: type=1400 audit(1786981050.862:1061): avc:  denied  { open } for  pid=20573 comm="syz.0.3575" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1515.110531][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1515.164284][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1515.202271][   T29] audit: type=1400 audit(1786981050.902:1062): avc:  denied  { ioctl } for  pid=20573 comm="syz.0.3575" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1515.424466][   T29] audit: type=1400 audit(1786981050.922:1063): avc:  denied  { write } for  pid=20573 comm="syz.0.3575" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1515.547172][T20584] FAULT_INJECTION: forcing a failure.
[ 1515.547172][T20584] name failslab, interval 1, probability 0, space 0, times 0
[ 1515.582645][   T29] audit: type=1400 audit(1786981051.282:1064): avc:  denied  { ioctl } for  pid=20581 comm="syz.4.3578" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1515.659386][T20584] CPU: 0 UID: 0 PID: 20584 Comm: syz.4.3578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1515.659407][T20584] Tainted: [L]=SOFTLOCKUP
[ 1515.659411][T20584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1515.659418][T20584] Call Trace:
[ 1515.659422][T20584]  <TASK>
[ 1515.659427][T20584]  dump_stack_lvl+0x100/0x190
[ 1515.659446][T20584]  should_fail_ex.cold+0x5/0xa
[ 1515.659460][T20584]  should_failslab+0xc2/0x120
[ 1515.659475][T20584]  __kmalloc_noprof+0xfc/0x820
[ 1515.659488][T20584]  ? rcu_is_watching+0x12/0xc0
[ 1515.659505][T20584]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1515.659519][T20584]  tomoyo_realpath_from_path+0xb6/0x690
[ 1515.659533][T20584]  tomoyo_path_number_perm+0x23c/0x580
[ 1515.659549][T20584]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1515.659565][T20584]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1515.659593][T20584]  ? find_held_lock+0x2b/0x80
[ 1515.659606][T20584]  ? __fget_files+0x215/0x3d0
[ 1515.659617][T20584]  ? hook_file_ioctl_common+0x140/0x440
[ 1515.659629][T20584]  ? __fget_files+0x215/0x3d0
[ 1515.659642][T20584]  ? __fget_files+0x21f/0x3d0
[ 1515.659655][T20584]  security_file_ioctl+0xd3/0x230
[ 1515.659673][T20584]  __x64_sys_ioctl+0xb7/0x210
[ 1515.659690][T20584]  do_syscall_64+0x115/0x870
[ 1515.659702][T20584]  ? clear_bhb_loop+0x70/0xc0
[ 1515.659715][T20584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.659726][T20584] RIP: 0033:0x7f4c1f19e0d9
[ 1515.659736][T20584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1515.659746][T20584] RSP: 002b:00007f4c20028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1515.659758][T20584] RAX: ffffffffffffffda RBX: 00007f4c1f426090 RCX: 00007f4c1f19e0d9
[ 1515.659765][T20584] RDX: 0000200000002540 RSI: 0000000040047451 RDI: 0000000000000003
[ 1515.659771][T20584] RBP: 00007f4c20028090 R08: 0000000000000000 R09: 0000000000000000
[ 1515.659777][T20584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1515.659783][T20584] R13: 00007f4c1f426128 R14: 00007f4c1f426090 R15: 00007fffd8918558
[ 1515.659797][T20584]  </TASK>
[ 1515.659810][T20584] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1516.128818][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1516.719230][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1517.091606][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1517.175083][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1517.482024][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3583'.
[ 1517.947122][T20616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3587'.
[ 1518.284326][   T49] Bluetooth: hci0: Opcode 0x1407 failed: -110
[ 1518.400455][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1518.444317][   T49] Bluetooth: hci0: command 0x0406 tx timeout
[ 1518.476825][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1518.546993][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1518.735510][T20633] syzkaller0: entered promiscuous mode
[ 1518.741510][T20638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'.
[ 1518.769002][T20633] syzkaller0: entered allmulticast mode
[ 1519.174105][T11941] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1519.197767][T20655] i2c i2c-0: dtv_property_process_set: SET cmd 0x790f0000 undefined
[ 1519.247798][T13412] net_ratelimit: 5 callbacks suppressed
[ 1519.247812][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.328667][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.359628][T11941] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1519.375438][T11941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1519.421798][T11941] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1519.581608][T11941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.592186][T11941] usb 2-1: Product: syz
[ 1519.610757][T11941] usb 2-1: Manufacturer: syz
[ 1519.775244][T11941] usb 2-1: SerialNumber: syz
[ 1520.668618][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1520.677415][  T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1520.814058][ T5721] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[ 1521.016892][ T5721] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1521.052177][ T5721] usb 3-1: config 0 has an invalid interface number: 205 but max is 0
[ 1521.087064][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1521.136413][ T5721] usb 3-1: config 0 has no interface number 0
[ 1521.165263][ T5721] usb 3-1: config 0 interface 205 has no altsetting 0
[ 1521.196336][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1521.215149][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1521.244227][ T5721] usb 3-1: Product: syz
[ 1521.266669][ T5721] usb 3-1: Manufacturer: syz
[ 1521.289219][ T5721] usb 3-1: SerialNumber: syz
[ 1521.316314][ T5721] usb 3-1: config 0 descriptor??
[ 1521.352232][ T5721] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1521.398112][ T5721] dvb-usb: bulk message failed: -22 (3/0)
[ 1521.454948][ T5721] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1521.495766][ T5721] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1521.543488][ T5721] usb 3-1: media controller created
[ 1521.560828][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1521.621014][ T5721] dvb-usb: bulk message failed: -22 (6/0)
[ 1521.641143][ T5721] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1521.708653][ T5721] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input103
[ 1521.730319][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1521.777377][ T5721] dvb-usb: schedule remote query interval to 150 msecs.
[ 1521.816359][ T5721] dvb-usb: bulk message failed: -22 (3/0)
[ 1521.855325][ T5721] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1521.974553][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1521.993701][ T5721] dvb-usb: error while querying for an remote control event.
[ 1522.194619][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1522.200464][ T5721] dvb-usb: error while querying for an remote control event.
[ 1522.324119][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1522.385659][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1522.403182][ T5721] dvb-usb: error while querying for an remote control event.
[ 1522.594003][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1522.607760][ T5721] dvb-usb: error while querying for an remote control event.
[ 1522.769157][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1522.805027][ T5698] dvb-usb: bulk message failed: -22 (1/0)
[ 1522.829166][ T5698] dvb-usb: error while querying for an remote control event.
[ 1523.024345][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1523.043966][ T5721] dvb-usb: error while querying for an remote control event.
[ 1523.244604][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1523.271879][ T5721] dvb-usb: error while querying for an remote control event.
[ 1523.448488][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1523.457291][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1523.471481][ T5721] dvb-usb: error while querying for an remote control event.
[ 1523.647348][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1523.661192][ T5721] dvb-usb: error while querying for an remote control event.
[ 1523.725359][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1523.826889][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1523.840031][ T5721] dvb-usb: error while querying for an remote control event.
[ 1524.016046][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1524.021914][ T5721] dvb-usb: error while querying for an remote control event.
[ 1524.196587][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1524.202491][ T5721] dvb-usb: error while querying for an remote control event.
[ 1524.374376][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[ 1524.380221][ T5721] dvb-usb: error while querying for an remote control event.
[ 1524.554997][ T5698] dvb-usb: bulk message failed: -22 (1/0)
[ 1524.560883][ T5698] dvb-usb: error while querying for an remote control event.
[ 1524.578489][T16107] net_ratelimit: 1 callbacks suppressed
[ 1524.578512][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1524.746261][ T5698] dvb-usb: bulk message failed: -22 (1/0)
[ 1524.752099][ T5698] dvb-usb: error while querying for an remote control event.
[ 1524.849637][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1524.864219][T11941] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1524.971490][T11941] dvb-usb: bulk message failed: -22 (1/0)
[ 1524.997258][T11941] dvb-usb: error while querying for an remote control event.
[ 1525.010047][ T5698] usb 2-1: USB disconnect, device number 64
[ 1525.085110][ T5698] usblp0: removed
[ 1525.175671][T11941] usb 3-1: USB disconnect, device number 57
[ 1525.278098][T11941] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1525.476863][T20713] syzkaller0: entered promiscuous mode
[ 1525.488940][   T29] audit: type=1400 audit(1786981061.292:1065): avc:  denied  { audit_control } for  pid=20711 comm="syz.0.3610" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1525.611283][T20713] syzkaller0: entered allmulticast mode
[ 1525.735806][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.890898][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.916691][T16093] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1526.214125][T11941] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1526.406396][T11941] usb 3-1: Using ep0 maxpacket: 16
[ 1526.423238][T11941] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1526.443980][T11941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.457362][T20732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.474034][T11941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1526.485289][T20732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.502226][T20732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.511351][T11941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1526.526109][ T5721] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1526.620592][T20735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.629811][T11941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1526.641498][T20735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.649719][T11941] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1526.663486][T20735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.800475][T11941] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1526.812952][T11941] usb 3-1: Manufacturer: syz
[ 1526.830246][T11941] usb 3-1: config 0 descriptor??
[ 1526.874288][ T5721] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[ 1526.888856][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1526.913197][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1526.945279][ T5721] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1526.972488][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1526.994350][ T5721] usb 5-1: config 0 descriptor??
[ 1527.093839][T11941] rc_core: IR keymap rc-hauppauge not found
[ 1527.099829][T11941] Registered IR keymap rc-empty
[ 1527.105226][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.124329][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.154696][T11941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1527.167593][T11941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input104
[ 1527.182238][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.203953][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.223870][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.245454][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.274393][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.294028][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.469602][T20743] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1527.480208][ T5721] hid_parser_main: 1 callbacks suppressed
[ 1527.480222][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.516623][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.535473][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.545580][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.559152][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.576426][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.584136][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.598534][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.614984][T11941] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1527.625280][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.640821][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.655664][T11941] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1527.668736][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.683590][T11941] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1527.694049][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.701873][T20729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32834 sclass=netlink_route_socket pid=20729 comm=syz.4.3615
[ 1527.725637][ T5721] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0
[ 1527.741216][T11941] usb 3-1: USB disconnect, device number 58
[ 1527.775917][ T5721] gt683r_led 0003:1770:FF00.0005: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0
[ 1527.967970][T19597] Bluetooth: hci5: command 0x1003 tx timeout
[ 1527.977464][   T49] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1528.014523][ T5721] usb 5-1: USB disconnect, device number 54
[ 1528.083083][T11941] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19
[ 1528.121057][T11941] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19
[ 1528.298753][   T29] audit: type=1400 audit(1786981064.102:1066): avc:  denied  { read } for  pid=20753 comm="syz.0.3622" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1528.350827][T20754] x_tables: duplicate underflow at hook 1
[ 1528.439152][   T29] audit: type=1400 audit(1786981064.242:1067): avc:  denied  { bind } for  pid=20755 comm="syz.0.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1528.474208][T11941] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1528.559407][   T29] audit: type=1400 audit(1786981064.242:1068): avc:  denied  { connect } for  pid=20755 comm="syz.0.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1528.688758][T11941] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1529.535414][T11941] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1529.605544][T11941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.652964][T20769] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1529.677624][T11941] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1529.760511][T20769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3627'.
[ 1529.777294][T11941] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 66, changing to 7
[ 1529.805274][ T5721] net_ratelimit: 244 callbacks suppressed
[ 1529.805286][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1529.835225][T11941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.847352][T11941] usb 2-1: Product: syz
[ 1529.851533][T11941] usb 2-1: Manufacturer: syz
[ 1529.916241][T11941] usb 2-1: SerialNumber: syz
[ 1530.051041][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'.
[ 1530.326142][ T5721] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1530.349292][T11941] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1530.361105][T20788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3631'.
[ 1530.380780][T11941] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1530.401320][T11941] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[ 1530.494577][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.513879][ T5721] usb 1-1: Using ep0 maxpacket: 8
[ 1531.336558][ T5721] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1531.351603][T11941] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[ 1531.376212][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1531.390283][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1531.436102][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.472510][ T5721] usb 1-1: config 0 descriptor??
[ 1531.713744][ T5721] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1531.941354][ T5604] udevd[5604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1532.263953][T13412] usb 1-1: USB disconnect, device number 52
[ 1532.445223][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1532.456223][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1532.489154][T11941] usb 2-1: USB disconnect, device number 65
[ 1532.824450][T20831] input: syz0 as /devices/virtual/input/input105
[ 1532.845916][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1533.222828][T20839] netlink: 'syz.2.3649': attribute type 10 has an invalid length.
[ 1533.385176][T11941] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1533.457133][T20844] input: syz0 as /devices/virtual/input/input106
[ 1533.485045][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1533.574094][T11941] usb 2-1: Using ep0 maxpacket: 8
[ 1533.591268][T11941] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1533.615256][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1533.638743][T11941] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 1533.680876][T11941] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 1533.713141][T11941] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[ 1533.754179][T11941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.792285][T20841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1533.822602][T20841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1533.866505][T20841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1533.908372][T11941] mdc800 2-1:1.0: Found Mustek MDC800 on USB.
[ 1533.935426][T13412] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1534.093976][T13412] usb 3-1: Using ep0 maxpacket: 16
[ 1534.111976][T13412] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1534.148175][T13412] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1534.168949][T13412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1534.181620][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1534.197900][T13412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1534.219732][T13412] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1534.241017][T13412] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1534.268666][T13412] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1534.278474][T13412] usb 3-1: Manufacturer: syz
[ 1534.290732][T13412] usb 3-1: config 0 descriptor??
[ 1534.435712][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1534.524352][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1534.574222][T13412] rc_core: IR keymap rc-hauppauge not found
[ 1534.583036][T13412] Registered IR keymap rc-empty
[ 1534.594883][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1534.624663][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1534.656881][T13412] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1534.678006][   T29] audit: type=1400 audit(1786981070.472:1069): avc:  denied  { create } for  pid=20863 comm="syz.0.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1534.704558][T16100] Bluetooth: Error in BCSP hdr checksum
[ 1534.711233][T13412] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input107
[ 1534.725607][T20865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1534.754325][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1534.764741][T20865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1534.795749][   T29] audit: type=1400 audit(1786981070.542:1070): avc:  denied  { write } for  pid=20863 comm="syz.0.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1534.841589][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1534.851236][T20865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1534.879680][T20865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1534.895996][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1534.933983][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1534.963988][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1534.971591][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.000601][   T29] audit: type=1400 audit(1786981070.802:1071): avc:  denied  { setattr } for  pid=20863 comm="syz.0.3656" name="KCM" dev="sockfs" ino=56992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1535.035076][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.045566][T20864] netlink: 'syz.0.3656': attribute type 13 has an invalid length.
[ 1535.057284][T20864] netlink: 'syz.0.3656': attribute type 17 has an invalid length.
[ 1535.065239][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.084297][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.106051][T20870] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[ 1535.116136][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.144295][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.164517][T16100] Bluetooth: Error in BCSP hdr checksum
[ 1535.173903][T13412] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1535.209918][T13412] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1535.222291][T11941] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 1535.234935][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1535.246963][T13412] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1535.274437][T13412] usb 3-1: USB disconnect, device number 59
[ 1535.343005][T20864] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[ 1535.384640][T11941] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1535.402034][T11941] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1535.420960][T11941] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1535.429107][T16100] Bluetooth: Error in BCSP hdr checksum
[ 1535.446486][T11941] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1535.456552][T11941] usb 5-1: Product: syz
[ 1535.467164][T11941] usb 5-1: Manufacturer: syz
[ 1535.477180][T11941] usb 5-1: SerialNumber: syz
[ 1535.494082][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1535.500185][T11941] usb 5-1: config 0 descriptor??
[ 1535.565216][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.582120][T11941] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1535.646792][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1535.684592][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1535.755846][T16107] Bluetooth: Error in BCSP hdr checksum
[ 1535.796692][T11941] usb 5-1: USB disconnect, device number 55
[ 1535.884806][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.893273][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.965209][T17553] Bluetooth: hci5: command 0x1003 tx timeout
[ 1535.975399][   T49] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1536.014947][T16093] Bluetooth: Error in BCSP hdr checksum
[ 1536.147716][T11941] usb 2-1: USB disconnect, device number 66
[ 1536.173735][T11941] mdc800 2-1:1.0: Mustek MDC800 disconnected from USB.
[ 1536.274618][T16093] Bluetooth: Error in BCSP hdr checksum
[ 1536.329798][T16100] Bluetooth: hci7: Frame reassembly failed (-84)
[ 1536.535002][   T13] Bluetooth: Error in BCSP hdr checksum
[ 1536.584136][T13412] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1536.605667][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1536.684121][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1536.745886][T13412] usb 1-1: Using ep0 maxpacket: 16
[ 1536.760001][T13412] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1537.427410][T19597] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1537.486645][T13412] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1537.501157][T16106] Bluetooth: Error in BCSP hdr checksum
[ 1537.549855][T13412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1537.583228][T13412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1537.635111][T13412] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1537.645139][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1537.656863][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1537.743316][T13412] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1537.805534][T13412] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1537.825418][T13412] usb 1-1: Manufacturer: syz
[ 1537.847165][T13412] usb 1-1: config 0 descriptor??
[ 1538.155725][T13412] rc_core: IR keymap rc-hauppauge not found
[ 1538.181363][T13412] Registered IR keymap rc-empty
[ 1538.206847][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.244305][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.286325][T13412] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1538.332101][T13412] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input109
[ 1538.364233][T17553] Bluetooth: hci7: command 0x1003 tx timeout
[ 1538.372126][   T49] Bluetooth: hci7: Opcode 0x1003 failed: -110
[ 1538.387469][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.437346][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.466669][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.511735][T20920] input: syz1 as /devices/virtual/input/input110
[ 1538.519157][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.554099][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.612916][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.665373][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.687591][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.755602][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1538.895328][T16106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1539.700817][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1539.918949][T20935] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1539.955395][T13412] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1540.024782][T13412] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1540.069013][T13412] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1540.121674][T13412] usb 1-1: USB disconnect, device number 53
[ 1540.493873][T13412] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1540.525959][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1540.532392][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1540.612459][T20952] Bluetooth: Error in BCSP hdr checksum
[ 1540.823110][ T5721] net_ratelimit: 2 callbacks suppressed
[ 1540.823122][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1540.839756][T20950] Bluetooth: Error in BCSP hdr checksum
[ 1540.895039][T13412] usb 1-1: Using ep0 maxpacket: 8
[ 1540.934687][T20953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1540.968353][T13412] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1541.007654][T13412] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 1541.042317][T13412] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 1541.073252][T13412] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[ 1541.097648][T16093] Bluetooth: Error in BCSP hdr checksum
[ 1541.105361][ T5698] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1541.146497][T13412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.202862][T20975] syzkaller0: entered promiscuous mode
[ 1541.218962][T20974] x_tables: duplicate underflow at hook 1
[ 1541.226885][T20974] 9pnet_fd: Insufficient options for proto=fd
[ 1541.243418][T20942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1541.278619][T20942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1541.285946][ T5698] usb 3-1: Using ep0 maxpacket: 8
[ 1541.293894][T20975] syzkaller0: entered allmulticast mode
[ 1541.315383][ T5698] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1541.335443][T20942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1541.364458][T20949] Bluetooth: Error in BCSP hdr checksum
[ 1541.372012][ T5698] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 1541.391192][T13412] mdc800 1-1:1.0: Found Mustek MDC800 on USB.
[ 1541.407951][ T5698] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 1541.450823][ T5698] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[ 1541.489055][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1541.541693][T20968] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1541.569738][T20968] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1541.601918][T20968] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1541.614013][T20952] Bluetooth: Error in BCSP hdr checksum
[ 1541.647292][ T5698] mdc800 3-1:1.0: only one Mustek MDC800 is supported.
[ 1541.874130][T20953] Bluetooth: Error in BCSP hdr checksum
[ 1541.888800][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1541.969252][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1542.045418][   T49] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1542.053661][T17553] Bluetooth: hci5: command 0x1003 tx timeout
[ 1542.074905][T20949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1542.134024][T20952] Bluetooth: Error in BCSP hdr checksum
[ 1543.088659][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1543.097981][T20952] Bluetooth: Error in BCSP hdr checksum
[ 1543.110235][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.136646][T20998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.147616][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.167437][T20998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.263576][T20994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.321698][T20994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.331337][T20998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.369630][T20998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.643912][T13412] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1543.803994][T13412] usb 2-1: Using ep0 maxpacket: 8
[ 1543.809683][T13412] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1543.821032][T13412] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 1543.831298][T13412] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 1543.841384][T13412] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[ 1543.851580][T13412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1543.862440][T21005] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22
[ 1543.877757][T21005] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22
[ 1543.887001][T21005] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22
[ 1543.895803][T13412] mdc800 2-1:1.0: only one Mustek MDC800 is supported.
[ 1543.924096][T11941] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1543.995550][T20952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1544.083891][T11941] usb 5-1: Using ep0 maxpacket: 8
[ 1544.089576][T11941] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1544.110493][T11941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1544.131016][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1544.144386][T11941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.156017][T11941] usb 5-1: config 0 descriptor??
[ 1544.370617][T11941] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1544.485772][T11941] usb 3-1: USB disconnect, device number 60
[ 1544.577060][T21009] 
[ 1544.579405][T21009] ======================================================
[ 1544.586396][T21009] WARNING: possible circular locking dependency detected
[ 1544.593399][T21009] syzkaller #0 Tainted: G             L     
[ 1544.599347][T21009] ------------------------------------------------------
[ 1544.606332][T21009] syz.4.3693/21009 is trying to acquire lock:
[ 1544.612367][T21009] ffff88802981c218 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x22/0x450
[ 1544.621829][T21009] 
[ 1544.621829][T21009] but task is already holding lock:
[ 1544.629163][T21009] ffffffff9025d968 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220
[ 1544.637503][T21009] 
[ 1544.637503][T21009] which lock already depends on the new lock.
[ 1544.637503][T21009] 
[ 1544.647875][T21009] 
[ 1544.647875][T21009] the existing dependency chain (in reverse order) is:
[ 1544.656860][T21009] 
[ 1544.656860][T21009] -> #1 (minor_rwsem#2){++++}-{4:4}:
[ 1544.664303][T21009]        lock_acquire+0x1b9/0x370
[ 1544.669305][T21009]        down_write+0x8b/0x1f0
[ 1544.674041][T21009]        usb_register_dev+0x11d/0x570
[ 1544.679395][T21009]        mdc800_usb_probe+0x382/0x6d0
[ 1544.684750][T21009]        usb_probe_interface+0x303/0x8f0
[ 1544.690358][T21009]        really_probe+0x241/0xa60
[ 1544.695356][T21009]        __driver_probe_device+0x20e/0x450
[ 1544.701137][T21009]        driver_probe_device+0x4a/0x140
[ 1544.706655][T21009]        __device_attach_driver+0x1df/0x320
[ 1544.712522][T21009]        bus_for_each_drv+0x159/0x1e0
[ 1544.717864][T21009]        __device_attach+0x1e4/0x4d0
[ 1544.723123][T21009]        device_initial_probe+0xaf/0xd0
[ 1544.728646][T21009]        bus_probe_device+0x64/0x160
[ 1544.733901][T21009]        device_add+0x121d/0x1970
[ 1544.738911][T21009]        usb_set_configuration+0xd97/0x1c60
[ 1544.744777][T21009]        usb_generic_driver_probe+0xa1/0xe0
[ 1544.750645][T21009]        usb_probe_device+0xef/0x400
[ 1544.755907][T21009]        really_probe+0x241/0xa60
[ 1544.760905][T21009]        __driver_probe_device+0x20e/0x450
[ 1544.766697][T21009]        driver_probe_device+0x4a/0x140
[ 1544.772217][T21009]        __device_attach_driver+0x1df/0x320
[ 1544.778093][T21009]        bus_for_each_drv+0x159/0x1e0
[ 1544.783434][T21009]        __device_attach+0x1e4/0x4d0
[ 1544.788693][T21009]        device_initial_probe+0xaf/0xd0
[ 1544.794218][T21009]        bus_probe_device+0x64/0x160
[ 1544.799481][T21009]        device_add+0x121d/0x1970
[ 1544.804491][T21009]        usb_new_device.part.0+0xcc2/0x1686
[ 1544.810356][T21009]        hub_event.cold+0x1e3/0xe90
[ 1544.815526][T21009]        process_one_work+0xa23/0x1940
[ 1544.820956][T21009]        worker_thread+0x5ef/0xe50
[ 1544.826036][T21009]        kthread+0x370/0x450
[ 1544.830608][T21009]        ret_from_fork+0x72b/0xd50
[ 1544.835695][T21009]        ret_from_fork_asm+0x1a/0x30
[ 1544.840958][T21009] 
[ 1544.840958][T21009] -> #0 (&mdc800->io_lock){+.+.}-{4:4}:
[ 1544.848655][T21009]        check_prev_add+0xeb/0xe60
[ 1544.853740][T21009]        __lock_acquire+0x136c/0x1a40
[ 1544.859095][T21009]        lock_acquire+0x1b9/0x370
[ 1544.864132][T21009]        __mutex_lock+0x1a4/0x1bd0
[ 1544.869240][T21009]        mdc800_device_open+0x22/0x450
[ 1544.874687][T21009]        usb_open+0x189/0x220
[ 1544.879351][T21009]        chrdev_open+0x234/0x6a0
[ 1544.884262][T21009]        do_dentry_open+0x6ab/0x14d0
[ 1544.889545][T21009]        vfs_open+0x82/0x3f0
[ 1544.894128][T21009]        path_openat+0x2873/0x4280
[ 1544.899237][T21009]        do_file_open+0x20e/0x430
[ 1544.904235][T21009]        do_sys_openat2+0x10f/0x1e0
[ 1544.909409][T21009]        __x64_sys_openat+0x12d/0x210
[ 1544.914766][T21009]        do_syscall_64+0x115/0x870
[ 1544.919890][T21009]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1544.926291][T21009] 
[ 1544.926291][T21009] other info that might help us debug this:
[ 1544.926291][T21009] 
[ 1544.936488][T21009]  Possible unsafe locking scenario:
[ 1544.936488][T21009] 
[ 1544.943910][T21009]        CPU0                    CPU1
[ 1544.949255][T21009]        ----                    ----
[ 1544.954604][T21009]   rlock(minor_rwsem#2);
[ 1544.958918][T21009]                                lock(&mdc800->io_lock);
[ 1544.965911][T21009]                                lock(minor_rwsem#2);
[ 1544.972657][T21009]   lock(&mdc800->io_lock);
[ 1544.977142][T21009] 
[ 1544.977142][T21009]  *** DEADLOCK ***
[ 1544.977142][T21009] 
[ 1544.985265][T21009] 1 lock held by syz.4.3693/21009:
[ 1544.990347][T21009]  #0: ffffffff9025d968 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220
[ 1544.999122][T21009] 
[ 1544.999122][T21009] stack backtrace:
[ 1545.004987][T21009] CPU: 0 UID: 0 PID: 21009 Comm: syz.4.3693 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1545.005013][T21009] Tainted: [L]=SOFTLOCKUP
[ 1545.005018][T21009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1545.005025][T21009] Call Trace:
[ 1545.005032][T21009]  <TASK>
[ 1545.005038][T21009]  dump_stack_lvl+0x100/0x190
[ 1545.005054][T21009]  print_circular_bug.cold+0x178/0x1c7
[ 1545.005072][T21009]  check_noncircular+0x146/0x160
[ 1545.005086][T21009]  ? path_openat+0x2873/0x4280
[ 1545.005100][T21009]  check_prev_add+0xeb/0xe60
[ 1545.005114][T21009]  __lock_acquire+0x136c/0x1a40
[ 1545.005131][T21009]  lock_acquire+0x1b9/0x370
[ 1545.005144][T21009]  ? mdc800_device_open+0x22/0x450
[ 1545.005158][T21009]  ? __pfx___might_resched+0x10/0x10
[ 1545.005173][T21009]  __mutex_lock+0x1a4/0x1bd0
[ 1545.005188][T21009]  ? mdc800_device_open+0x22/0x450
[ 1545.005200][T21009]  ? mdc800_device_open+0x22/0x450
[ 1545.005214][T21009]  ? __pfx___mutex_lock+0x10/0x10
[ 1545.005228][T21009]  ? __pfx___might_resched+0x10/0x10
[ 1545.005242][T21009]  ? down_read+0x13b/0x4c0
[ 1545.005256][T21009]  ? __pfx_down_read+0x10/0x10
[ 1545.005270][T21009]  ? __pfx_mdc800_device_open+0x10/0x10
[ 1545.005283][T21009]  ? mdc800_device_open+0x22/0x450
[ 1545.005295][T21009]  mdc800_device_open+0x22/0x450
[ 1545.005308][T21009]  ? __pfx_mdc800_device_open+0x10/0x10
[ 1545.005320][T21009]  usb_open+0x189/0x220
[ 1545.005337][T21009]  ? __pfx_usb_open+0x10/0x10
[ 1545.005353][T21009]  chrdev_open+0x234/0x6a0
[ 1545.005366][T21009]  ? __pfx_chrdev_open+0x10/0x10
[ 1545.005377][T21009]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1545.005394][T21009]  do_dentry_open+0x6ab/0x14d0
[ 1545.005405][T21009]  ? __pfx_chrdev_open+0x10/0x10
[ 1545.005417][T21009]  vfs_open+0x82/0x3f0
[ 1545.005432][T21009]  path_openat+0x2873/0x4280
[ 1545.005446][T21009]  ? __pfx_path_openat+0x10/0x10
[ 1545.005460][T21009]  do_file_open+0x20e/0x430
[ 1545.005472][T21009]  ? __pfx_do_file_open+0x10/0x10
[ 1545.005489][T21009]  ? alloc_fd+0x471/0x7a0
[ 1545.005501][T21009]  ? do_getname+0x191/0x390
[ 1545.005517][T21009]  do_sys_openat2+0x10f/0x1e0
[ 1545.005530][T21009]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1545.005545][T21009]  ? __pfx_get_timespec64+0x10/0x10
[ 1545.005558][T21009]  ? raw_ioctl+0x26f/0x2b80
[ 1545.005577][T21009]  __x64_sys_openat+0x12d/0x210
[ 1545.005592][T21009]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1545.005608][T21009]  do_syscall_64+0x115/0x870
[ 1545.005621][T21009]  ? clear_bhb_loop+0x70/0xc0
[ 1545.005633][T21009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1545.005645][T21009] RIP: 0033:0x7f4c1f15e90e
[ 1545.005657][T21009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1545.005668][T21009] RSP: 002b:00007f4c20048b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1545.005679][T21009] RAX: ffffffffffffffda RBX: 00007f4c200496c0 RCX: 00007f4c1f15e90e
[ 1545.005687][T21009] RDX: 0000000000000002 RSI: 00007f4c20048c00 RDI: ffffffffffffff9c
[ 1545.005694][T21009] RBP: 00007f4c1f235024 R08: 0000000000000000 R09: 0000000000000000
[ 1545.005700][T21009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1545.005707][T21009] R13: 00007f4c1f426038 R14: 00007f4c1f425fa0 R15: 00007fffd8918558
[ 1545.005718][T21009]  </TASK>
[ 1545.341034][T21012] input: syz0 as /devices/virtual/input/input111
[ 1545.365560][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1545.373730][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1545.385923][T13412] usb 1-1: USB disconnect, device number 54
[ 1545.394401][T21013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.402859][T21013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.413181][T21013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.421647][T21013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.447146][T21009] usb 1-1: request USB irq fails (submit_retval=-19).
[ 1545.454388][T13412] mdc800 1-1:1.0: Mustek MDC800 disconnected from USB.
[ 1546.284401][T13412] net_ratelimit: 1 callbacks suppressed
[ 1546.284415][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1546.445132][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1546.795048][T13412] usb 2-1: USB disconnect, device number 67
[ 1546.879211][T11941] usb 5-1: USB disconnect, device number 56
[ 1546.895100][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1547.484903][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1548.013957][T20949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1548.445001][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1548.525173][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1549.113986][T20949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1549.565011][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1550.213971][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.313878][T20949] net_ratelimit: 1 callbacks suppressed
[ 1551.313892][T20949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.484117][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.644930][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1552.423884][T16093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1552.685339][T11941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1553.523910][T20952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1553.724934][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1554.524133][T13412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog